Mar 17 18:51:11.043385 kernel: Linux version 5.15.179-flatcar (build@pony-truck.infra.kinvolk.io) (x86_64-cros-linux-gnu-gcc (Gentoo Hardened 11.3.1_p20221209 p3) 11.3.1 20221209, GNU ld (Gentoo 2.39 p5) 2.39.0) #1 SMP Mon Mar 17 17:12:34 -00 2025 Mar 17 18:51:11.043407 kernel: Command line: BOOT_IMAGE=/flatcar/vmlinuz-a mount.usr=/dev/mapper/usr verity.usr=PARTUUID=7130c94a-213a-4e5a-8e26-6cce9662f132 rootflags=rw mount.usrflags=ro consoleblank=0 root=LABEL=ROOT console=tty1 console=ttyS0,115200n8 earlyprintk=ttyS0,115200 flatcar.first_boot=detected flatcar.oem.id=azure flatcar.autologin verity.usrhash=249ccd113f901380672c0d31e18f792e8e0344094c0e39eedc449f039418b31a Mar 17 18:51:11.043416 kernel: BIOS-provided physical RAM map: Mar 17 18:51:11.043422 kernel: BIOS-e820: [mem 0x0000000000000000-0x000000000009ffff] usable Mar 17 18:51:11.043430 kernel: BIOS-e820: [mem 0x00000000000c0000-0x00000000000fffff] reserved Mar 17 18:51:11.043436 kernel: BIOS-e820: [mem 0x0000000000100000-0x000000003ff40fff] usable Mar 17 18:51:11.043444 kernel: BIOS-e820: [mem 0x000000003ff41000-0x000000003ffc8fff] reserved Mar 17 18:51:11.043452 kernel: BIOS-e820: [mem 0x000000003ffc9000-0x000000003fffafff] ACPI data Mar 17 18:51:11.043459 kernel: BIOS-e820: [mem 0x000000003fffb000-0x000000003fffefff] ACPI NVS Mar 17 18:51:11.043466 kernel: BIOS-e820: [mem 0x000000003ffff000-0x000000003fffffff] usable Mar 17 18:51:11.043474 kernel: BIOS-e820: [mem 0x0000000100000000-0x00000002bfffffff] usable Mar 17 18:51:11.043480 kernel: printk: bootconsole [earlyser0] enabled Mar 17 18:51:11.043485 kernel: NX (Execute Disable) protection: active Mar 17 18:51:11.043493 kernel: efi: EFI v2.70 by Microsoft Mar 17 18:51:11.043504 kernel: efi: ACPI=0x3fffa000 ACPI 2.0=0x3fffa014 SMBIOS=0x3ff85000 SMBIOS 3.0=0x3ff83000 MEMATTR=0x3f5c7a98 RNG=0x3ffd1018 Mar 17 18:51:11.043514 kernel: random: crng init done Mar 17 18:51:11.043520 kernel: SMBIOS 3.1.0 present. Mar 17 18:51:11.043526 kernel: DMI: Microsoft Corporation Virtual Machine/Virtual Machine, BIOS Hyper-V UEFI Release v4.1 03/08/2024 Mar 17 18:51:11.043534 kernel: Hypervisor detected: Microsoft Hyper-V Mar 17 18:51:11.043542 kernel: Hyper-V: privilege flags low 0x2e7f, high 0x3b8030, hints 0x64e24, misc 0xbed7b2 Mar 17 18:51:11.043549 kernel: Hyper-V Host Build:20348-10.0-1-0.1799 Mar 17 18:51:11.043557 kernel: Hyper-V: Nested features: 0x1e0101 Mar 17 18:51:11.043565 kernel: Hyper-V: LAPIC Timer Frequency: 0x30d40 Mar 17 18:51:11.043571 kernel: Hyper-V: Using hypercall for remote TLB flush Mar 17 18:51:11.043580 kernel: clocksource: hyperv_clocksource_tsc_page: mask: 0xffffffffffffffff max_cycles: 0x24e6a1710, max_idle_ns: 440795202120 ns Mar 17 18:51:11.043587 kernel: tsc: Marking TSC unstable due to running on Hyper-V Mar 17 18:51:11.043596 kernel: tsc: Detected 2593.905 MHz processor Mar 17 18:51:11.043603 kernel: e820: update [mem 0x00000000-0x00000fff] usable ==> reserved Mar 17 18:51:11.043610 kernel: e820: remove [mem 0x000a0000-0x000fffff] usable Mar 17 18:51:11.043619 kernel: last_pfn = 0x2c0000 max_arch_pfn = 0x400000000 Mar 17 18:51:11.043625 kernel: x86/PAT: Configuration [0-7]: WB WC UC- UC WB WP UC- WT Mar 17 18:51:11.043634 kernel: e820: update [mem 0x40000000-0xffffffff] usable ==> reserved Mar 17 18:51:11.043643 kernel: last_pfn = 0x40000 max_arch_pfn = 0x400000000 Mar 17 18:51:11.043649 kernel: Using GB pages for direct mapping Mar 17 18:51:11.043658 kernel: Secure boot disabled Mar 17 18:51:11.043665 kernel: ACPI: Early table checksum verification disabled Mar 17 18:51:11.043673 kernel: ACPI: RSDP 0x000000003FFFA014 000024 (v02 VRTUAL) Mar 17 18:51:11.043681 kernel: ACPI: XSDT 0x000000003FFF90E8 000064 (v01 VRTUAL MICROSFT 00000001 MSFT 00000001) Mar 17 18:51:11.043687 kernel: ACPI: FACP 0x000000003FFF8000 000114 (v06 VRTUAL MICROSFT 00000001 MSFT 00000001) Mar 17 18:51:11.043694 kernel: ACPI: DSDT 0x000000003FFD6000 01E184 (v02 MSFTVM DSDT01 00000001 MSFT 05000000) Mar 17 18:51:11.043708 kernel: ACPI: FACS 0x000000003FFFE000 000040 Mar 17 18:51:11.043717 kernel: ACPI: OEM0 0x000000003FFF7000 000064 (v01 VRTUAL MICROSFT 00000001 MSFT 00000001) Mar 17 18:51:11.043725 kernel: ACPI: SPCR 0x000000003FFF6000 000050 (v02 VRTUAL MICROSFT 00000001 MSFT 00000001) Mar 17 18:51:11.043731 kernel: ACPI: WAET 0x000000003FFF5000 000028 (v01 VRTUAL MICROSFT 00000001 MSFT 00000001) Mar 17 18:51:11.043741 kernel: ACPI: APIC 0x000000003FFD5000 000058 (v04 VRTUAL MICROSFT 00000001 MSFT 00000001) Mar 17 18:51:11.043748 kernel: ACPI: SRAT 0x000000003FFD4000 0002D0 (v02 VRTUAL MICROSFT 00000001 MSFT 00000001) Mar 17 18:51:11.043760 kernel: ACPI: BGRT 0x000000003FFD3000 000038 (v01 VRTUAL MICROSFT 00000001 MSFT 00000001) Mar 17 18:51:11.043767 kernel: ACPI: FPDT 0x000000003FFD2000 000034 (v01 VRTUAL MICROSFT 00000001 MSFT 00000001) Mar 17 18:51:11.043774 kernel: ACPI: Reserving FACP table memory at [mem 0x3fff8000-0x3fff8113] Mar 17 18:51:11.043784 kernel: ACPI: Reserving DSDT table memory at [mem 0x3ffd6000-0x3fff4183] Mar 17 18:51:11.043790 kernel: ACPI: Reserving FACS table memory at [mem 0x3fffe000-0x3fffe03f] Mar 17 18:51:11.043800 kernel: ACPI: Reserving OEM0 table memory at [mem 0x3fff7000-0x3fff7063] Mar 17 18:51:11.043807 kernel: ACPI: Reserving SPCR table memory at [mem 0x3fff6000-0x3fff604f] Mar 17 18:51:11.043814 kernel: ACPI: Reserving WAET table memory at [mem 0x3fff5000-0x3fff5027] Mar 17 18:51:11.043825 kernel: ACPI: Reserving APIC table memory at [mem 0x3ffd5000-0x3ffd5057] Mar 17 18:51:11.043832 kernel: ACPI: Reserving SRAT table memory at [mem 0x3ffd4000-0x3ffd42cf] Mar 17 18:51:11.043842 kernel: ACPI: Reserving BGRT table memory at [mem 0x3ffd3000-0x3ffd3037] Mar 17 18:51:11.043849 kernel: ACPI: Reserving FPDT table memory at [mem 0x3ffd2000-0x3ffd2033] Mar 17 18:51:11.043856 kernel: SRAT: PXM 0 -> APIC 0x00 -> Node 0 Mar 17 18:51:11.043865 kernel: SRAT: PXM 0 -> APIC 0x01 -> Node 0 Mar 17 18:51:11.043872 kernel: ACPI: SRAT: Node 0 PXM 0 [mem 0x00000000-0x3fffffff] hotplug Mar 17 18:51:11.043882 kernel: ACPI: SRAT: Node 0 PXM 0 [mem 0x100000000-0x2bfffffff] hotplug Mar 17 18:51:11.043889 kernel: ACPI: SRAT: Node 0 PXM 0 [mem 0x2c0000000-0xfdfffffff] hotplug Mar 17 18:51:11.043898 kernel: ACPI: SRAT: Node 0 PXM 0 [mem 0x1000000000-0xffffffffff] hotplug Mar 17 18:51:11.043908 kernel: ACPI: SRAT: Node 0 PXM 0 [mem 0x10000000000-0x1ffffffffff] hotplug Mar 17 18:51:11.043915 kernel: ACPI: SRAT: Node 0 PXM 0 [mem 0x20000000000-0x3ffffffffff] hotplug Mar 17 18:51:11.043924 kernel: ACPI: SRAT: Node 0 PXM 0 [mem 0x40000000000-0x7ffffffffff] hotplug Mar 17 18:51:11.043931 kernel: ACPI: SRAT: Node 0 PXM 0 [mem 0x80000000000-0xfffffffffff] hotplug Mar 17 18:51:11.043938 kernel: ACPI: SRAT: Node 0 PXM 0 [mem 0x100000000000-0x1fffffffffff] hotplug Mar 17 18:51:11.043948 kernel: ACPI: SRAT: Node 0 PXM 0 [mem 0x200000000000-0x3fffffffffff] hotplug Mar 17 18:51:11.043955 kernel: ACPI: SRAT: Node 0 PXM 0 [mem 0x400000000000-0x7fffffffffff] hotplug Mar 17 18:51:11.043964 kernel: ACPI: SRAT: Node 0 PXM 0 [mem 0x800000000000-0xffffffffffff] hotplug Mar 17 18:51:11.043973 kernel: ACPI: SRAT: Node 0 PXM 0 [mem 0x1000000000000-0x1ffffffffffff] hotplug Mar 17 18:51:11.043981 kernel: ACPI: SRAT: Node 0 PXM 0 [mem 0x2000000000000-0x3ffffffffffff] hotplug Mar 17 18:51:11.043990 kernel: ACPI: SRAT: Node 0 PXM 0 [mem 0x4000000000000-0x7ffffffffffff] hotplug Mar 17 18:51:11.043998 kernel: ACPI: SRAT: Node 0 PXM 0 [mem 0x8000000000000-0xfffffffffffff] hotplug Mar 17 18:51:11.044007 kernel: NUMA: Node 0 [mem 0x00000000-0x3fffffff] + [mem 0x100000000-0x2bfffffff] -> [mem 0x00000000-0x2bfffffff] Mar 17 18:51:11.044013 kernel: NODE_DATA(0) allocated [mem 0x2bfffa000-0x2bfffffff] Mar 17 18:51:11.044021 kernel: Zone ranges: Mar 17 18:51:11.044030 kernel: DMA [mem 0x0000000000001000-0x0000000000ffffff] Mar 17 18:51:11.044038 kernel: DMA32 [mem 0x0000000001000000-0x00000000ffffffff] Mar 17 18:51:11.044049 kernel: Normal [mem 0x0000000100000000-0x00000002bfffffff] Mar 17 18:51:11.044055 kernel: Movable zone start for each node Mar 17 18:51:11.044063 kernel: Early memory node ranges Mar 17 18:51:11.044072 kernel: node 0: [mem 0x0000000000001000-0x000000000009ffff] Mar 17 18:51:11.044080 kernel: node 0: [mem 0x0000000000100000-0x000000003ff40fff] Mar 17 18:51:11.044089 kernel: node 0: [mem 0x000000003ffff000-0x000000003fffffff] Mar 17 18:51:11.044096 kernel: node 0: [mem 0x0000000100000000-0x00000002bfffffff] Mar 17 18:51:11.044103 kernel: Initmem setup node 0 [mem 0x0000000000001000-0x00000002bfffffff] Mar 17 18:51:11.044112 kernel: On node 0, zone DMA: 1 pages in unavailable ranges Mar 17 18:51:11.044123 kernel: On node 0, zone DMA: 96 pages in unavailable ranges Mar 17 18:51:11.044131 kernel: On node 0, zone DMA32: 190 pages in unavailable ranges Mar 17 18:51:11.044138 kernel: ACPI: PM-Timer IO Port: 0x408 Mar 17 18:51:11.044156 kernel: ACPI: LAPIC_NMI (acpi_id[0x01] dfl dfl lint[0x1]) Mar 17 18:51:11.044165 kernel: IOAPIC[0]: apic_id 2, version 17, address 0xfec00000, GSI 0-23 Mar 17 18:51:11.044173 kernel: ACPI: INT_SRC_OVR (bus 0 bus_irq 9 global_irq 9 high level) Mar 17 18:51:11.044180 kernel: ACPI: Using ACPI (MADT) for SMP configuration information Mar 17 18:51:11.044188 kernel: ACPI: SPCR: console: uart,io,0x3f8,115200 Mar 17 18:51:11.044197 kernel: smpboot: Allowing 2 CPUs, 0 hotplug CPUs Mar 17 18:51:11.044208 kernel: [mem 0x40000000-0xffffffff] available for PCI devices Mar 17 18:51:11.044216 kernel: Booting paravirtualized kernel on Hyper-V Mar 17 18:51:11.044223 kernel: clocksource: refined-jiffies: mask: 0xffffffff max_cycles: 0xffffffff, max_idle_ns: 1910969940391419 ns Mar 17 18:51:11.044233 kernel: setup_percpu: NR_CPUS:512 nr_cpumask_bits:512 nr_cpu_ids:2 nr_node_ids:1 Mar 17 18:51:11.044240 kernel: percpu: Embedded 56 pages/cpu s188696 r8192 d32488 u1048576 Mar 17 18:51:11.044250 kernel: pcpu-alloc: s188696 r8192 d32488 u1048576 alloc=1*2097152 Mar 17 18:51:11.044257 kernel: pcpu-alloc: [0] 0 1 Mar 17 18:51:11.044263 kernel: Hyper-V: PV spinlocks enabled Mar 17 18:51:11.044272 kernel: PV qspinlock hash table entries: 256 (order: 0, 4096 bytes, linear) Mar 17 18:51:11.044282 kernel: Built 1 zonelists, mobility grouping on. Total pages: 2062618 Mar 17 18:51:11.044292 kernel: Policy zone: Normal Mar 17 18:51:11.044300 kernel: Kernel command line: rootflags=rw mount.usrflags=ro BOOT_IMAGE=/flatcar/vmlinuz-a mount.usr=/dev/mapper/usr verity.usr=PARTUUID=7130c94a-213a-4e5a-8e26-6cce9662f132 rootflags=rw mount.usrflags=ro consoleblank=0 root=LABEL=ROOT console=tty1 console=ttyS0,115200n8 earlyprintk=ttyS0,115200 flatcar.first_boot=detected flatcar.oem.id=azure flatcar.autologin verity.usrhash=249ccd113f901380672c0d31e18f792e8e0344094c0e39eedc449f039418b31a Mar 17 18:51:11.044307 kernel: Unknown kernel command line parameters "BOOT_IMAGE=/flatcar/vmlinuz-a", will be passed to user space. Mar 17 18:51:11.044317 kernel: Dentry cache hash table entries: 1048576 (order: 11, 8388608 bytes, linear) Mar 17 18:51:11.044324 kernel: Inode-cache hash table entries: 524288 (order: 10, 4194304 bytes, linear) Mar 17 18:51:11.044334 kernel: mem auto-init: stack:off, heap alloc:off, heap free:off Mar 17 18:51:11.044341 kernel: Memory: 8071680K/8387460K available (12294K kernel code, 2278K rwdata, 13724K rodata, 47472K init, 4108K bss, 315520K reserved, 0K cma-reserved) Mar 17 18:51:11.044351 kernel: SLUB: HWalign=64, Order=0-3, MinObjects=0, CPUs=2, Nodes=1 Mar 17 18:51:11.044360 kernel: ftrace: allocating 34580 entries in 136 pages Mar 17 18:51:11.044376 kernel: ftrace: allocated 136 pages with 2 groups Mar 17 18:51:11.044385 kernel: rcu: Hierarchical RCU implementation. Mar 17 18:51:11.044395 kernel: rcu: RCU event tracing is enabled. Mar 17 18:51:11.044404 kernel: rcu: RCU restricting CPUs from NR_CPUS=512 to nr_cpu_ids=2. Mar 17 18:51:11.044413 kernel: Rude variant of Tasks RCU enabled. Mar 17 18:51:11.044421 kernel: Tracing variant of Tasks RCU enabled. Mar 17 18:51:11.044428 kernel: rcu: RCU calculated value of scheduler-enlistment delay is 100 jiffies. Mar 17 18:51:11.044438 kernel: rcu: Adjusting geometry for rcu_fanout_leaf=16, nr_cpu_ids=2 Mar 17 18:51:11.044446 kernel: Using NULL legacy PIC Mar 17 18:51:11.044458 kernel: NR_IRQS: 33024, nr_irqs: 440, preallocated irqs: 0 Mar 17 18:51:11.044465 kernel: Console: colour dummy device 80x25 Mar 17 18:51:11.044473 kernel: printk: console [tty1] enabled Mar 17 18:51:11.044482 kernel: printk: console [ttyS0] enabled Mar 17 18:51:11.044490 kernel: printk: bootconsole [earlyser0] disabled Mar 17 18:51:11.044502 kernel: ACPI: Core revision 20210730 Mar 17 18:51:11.044510 kernel: Failed to register legacy timer interrupt Mar 17 18:51:11.044517 kernel: APIC: Switch to symmetric I/O mode setup Mar 17 18:51:11.044527 kernel: Hyper-V: Using IPI hypercalls Mar 17 18:51:11.044535 kernel: Calibrating delay loop (skipped), value calculated using timer frequency.. 5187.81 BogoMIPS (lpj=2593905) Mar 17 18:51:11.044545 kernel: Last level iTLB entries: 4KB 64, 2MB 8, 4MB 8 Mar 17 18:51:11.044552 kernel: Last level dTLB entries: 4KB 64, 2MB 32, 4MB 32, 1GB 4 Mar 17 18:51:11.044561 kernel: Spectre V1 : Mitigation: usercopy/swapgs barriers and __user pointer sanitization Mar 17 18:51:11.044570 kernel: Spectre V2 : Mitigation: Retpolines Mar 17 18:51:11.044578 kernel: Spectre V2 : Spectre v2 / SpectreRSB mitigation: Filling RSB on context switch Mar 17 18:51:11.044589 kernel: Spectre V2 : Spectre v2 / SpectreRSB : Filling RSB on VMEXIT Mar 17 18:51:11.044596 kernel: RETBleed: WARNING: Spectre v2 mitigation leaves CPU vulnerable to RETBleed attacks, data leaks possible! Mar 17 18:51:11.044606 kernel: RETBleed: Vulnerable Mar 17 18:51:11.044614 kernel: Speculative Store Bypass: Vulnerable Mar 17 18:51:11.044624 kernel: TAA: Vulnerable: Clear CPU buffers attempted, no microcode Mar 17 18:51:11.044631 kernel: MMIO Stale Data: Vulnerable: Clear CPU buffers attempted, no microcode Mar 17 18:51:11.044638 kernel: x86/fpu: Supporting XSAVE feature 0x001: 'x87 floating point registers' Mar 17 18:51:11.044648 kernel: x86/fpu: Supporting XSAVE feature 0x002: 'SSE registers' Mar 17 18:51:11.044655 kernel: x86/fpu: Supporting XSAVE feature 0x004: 'AVX registers' Mar 17 18:51:11.044666 kernel: x86/fpu: Supporting XSAVE feature 0x020: 'AVX-512 opmask' Mar 17 18:51:11.044675 kernel: x86/fpu: Supporting XSAVE feature 0x040: 'AVX-512 Hi256' Mar 17 18:51:11.044682 kernel: x86/fpu: Supporting XSAVE feature 0x080: 'AVX-512 ZMM_Hi256' Mar 17 18:51:11.044692 kernel: x86/fpu: xstate_offset[2]: 576, xstate_sizes[2]: 256 Mar 17 18:51:11.044700 kernel: x86/fpu: xstate_offset[5]: 832, xstate_sizes[5]: 64 Mar 17 18:51:11.044709 kernel: x86/fpu: xstate_offset[6]: 896, xstate_sizes[6]: 512 Mar 17 18:51:11.044716 kernel: x86/fpu: xstate_offset[7]: 1408, xstate_sizes[7]: 1024 Mar 17 18:51:11.044725 kernel: x86/fpu: Enabled xstate features 0xe7, context size is 2432 bytes, using 'compacted' format. Mar 17 18:51:11.044734 kernel: Freeing SMP alternatives memory: 32K Mar 17 18:51:11.044742 kernel: pid_max: default: 32768 minimum: 301 Mar 17 18:51:11.044751 kernel: LSM: Security Framework initializing Mar 17 18:51:11.044758 kernel: SELinux: Initializing. Mar 17 18:51:11.044767 kernel: Mount-cache hash table entries: 16384 (order: 5, 131072 bytes, linear) Mar 17 18:51:11.044778 kernel: Mountpoint-cache hash table entries: 16384 (order: 5, 131072 bytes, linear) Mar 17 18:51:11.044788 kernel: smpboot: CPU0: Intel(R) Xeon(R) Platinum 8272CL CPU @ 2.60GHz (family: 0x6, model: 0x55, stepping: 0x7) Mar 17 18:51:11.044796 kernel: Performance Events: unsupported p6 CPU model 85 no PMU driver, software events only. Mar 17 18:51:11.044803 kernel: signal: max sigframe size: 3632 Mar 17 18:51:11.044813 kernel: rcu: Hierarchical SRCU implementation. Mar 17 18:51:11.044821 kernel: NMI watchdog: Perf NMI watchdog permanently disabled Mar 17 18:51:11.044831 kernel: smp: Bringing up secondary CPUs ... Mar 17 18:51:11.044838 kernel: x86: Booting SMP configuration: Mar 17 18:51:11.044846 kernel: .... node #0, CPUs: #1 Mar 17 18:51:11.044856 kernel: TAA CPU bug present and SMT on, data leak possible. See https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/tsx_async_abort.html for more details. Mar 17 18:51:11.044868 kernel: MMIO Stale Data CPU bug present and SMT on, data leak possible. See https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/processor_mmio_stale_data.html for more details. Mar 17 18:51:11.044876 kernel: smp: Brought up 1 node, 2 CPUs Mar 17 18:51:11.044883 kernel: smpboot: Max logical packages: 1 Mar 17 18:51:11.044893 kernel: smpboot: Total of 2 processors activated (10375.62 BogoMIPS) Mar 17 18:51:11.044901 kernel: devtmpfs: initialized Mar 17 18:51:11.044911 kernel: x86/mm: Memory block size: 128MB Mar 17 18:51:11.044919 kernel: ACPI: PM: Registering ACPI NVS region [mem 0x3fffb000-0x3fffefff] (16384 bytes) Mar 17 18:51:11.044926 kernel: clocksource: jiffies: mask: 0xffffffff max_cycles: 0xffffffff, max_idle_ns: 1911260446275000 ns Mar 17 18:51:11.044938 kernel: futex hash table entries: 512 (order: 3, 32768 bytes, linear) Mar 17 18:51:11.044947 kernel: pinctrl core: initialized pinctrl subsystem Mar 17 18:51:11.044956 kernel: NET: Registered PF_NETLINK/PF_ROUTE protocol family Mar 17 18:51:11.044963 kernel: audit: initializing netlink subsys (disabled) Mar 17 18:51:11.044972 kernel: audit: type=2000 audit(1742237469.024:1): state=initialized audit_enabled=0 res=1 Mar 17 18:51:11.044981 kernel: thermal_sys: Registered thermal governor 'step_wise' Mar 17 18:51:11.044989 kernel: thermal_sys: Registered thermal governor 'user_space' Mar 17 18:51:11.044998 kernel: cpuidle: using governor menu Mar 17 18:51:11.045005 kernel: ACPI: bus type PCI registered Mar 17 18:51:11.045017 kernel: acpiphp: ACPI Hot Plug PCI Controller Driver version: 0.5 Mar 17 18:51:11.045025 kernel: dca service started, version 1.12.1 Mar 17 18:51:11.045036 kernel: kprobes: kprobe jump-optimization is enabled. All kprobes are optimized if possible. Mar 17 18:51:11.045043 kernel: HugeTLB registered 1.00 GiB page size, pre-allocated 0 pages Mar 17 18:51:11.045051 kernel: HugeTLB registered 2.00 MiB page size, pre-allocated 0 pages Mar 17 18:51:11.045061 kernel: ACPI: Added _OSI(Module Device) Mar 17 18:51:11.045069 kernel: ACPI: Added _OSI(Processor Device) Mar 17 18:51:11.045078 kernel: ACPI: Added _OSI(3.0 _SCP Extensions) Mar 17 18:51:11.045086 kernel: ACPI: Added _OSI(Processor Aggregator Device) Mar 17 18:51:11.045097 kernel: ACPI: Added _OSI(Linux-Dell-Video) Mar 17 18:51:11.045105 kernel: ACPI: Added _OSI(Linux-Lenovo-NV-HDMI-Audio) Mar 17 18:51:11.045115 kernel: ACPI: Added _OSI(Linux-HPI-Hybrid-Graphics) Mar 17 18:51:11.045123 kernel: ACPI: 1 ACPI AML tables successfully acquired and loaded Mar 17 18:51:11.045130 kernel: ACPI: Interpreter enabled Mar 17 18:51:11.045140 kernel: ACPI: PM: (supports S0 S5) Mar 17 18:51:11.045154 kernel: ACPI: Using IOAPIC for interrupt routing Mar 17 18:51:11.045163 kernel: PCI: Using host bridge windows from ACPI; if necessary, use "pci=nocrs" and report a bug Mar 17 18:51:11.045170 kernel: ACPI: Enabled 1 GPEs in block 00 to 0F Mar 17 18:51:11.045183 kernel: iommu: Default domain type: Translated Mar 17 18:51:11.045190 kernel: iommu: DMA domain TLB invalidation policy: lazy mode Mar 17 18:51:11.045201 kernel: vgaarb: loaded Mar 17 18:51:11.045208 kernel: pps_core: LinuxPPS API ver. 1 registered Mar 17 18:51:11.045215 kernel: pps_core: Software ver. 5.3.6 - Copyright 2005-2007 Rodolfo Giometti Mar 17 18:51:11.045225 kernel: PTP clock support registered Mar 17 18:51:11.045233 kernel: Registered efivars operations Mar 17 18:51:11.045243 kernel: PCI: Using ACPI for IRQ routing Mar 17 18:51:11.045250 kernel: PCI: System does not support PCI Mar 17 18:51:11.045261 kernel: clocksource: Switched to clocksource hyperv_clocksource_tsc_page Mar 17 18:51:11.045270 kernel: VFS: Disk quotas dquot_6.6.0 Mar 17 18:51:11.045279 kernel: VFS: Dquot-cache hash table entries: 512 (order 0, 4096 bytes) Mar 17 18:51:11.045287 kernel: pnp: PnP ACPI init Mar 17 18:51:11.045294 kernel: pnp: PnP ACPI: found 3 devices Mar 17 18:51:11.045303 kernel: clocksource: acpi_pm: mask: 0xffffff max_cycles: 0xffffff, max_idle_ns: 2085701024 ns Mar 17 18:51:11.045312 kernel: NET: Registered PF_INET protocol family Mar 17 18:51:11.045319 kernel: IP idents hash table entries: 131072 (order: 8, 1048576 bytes, linear) Mar 17 18:51:11.045326 kernel: tcp_listen_portaddr_hash hash table entries: 4096 (order: 4, 65536 bytes, linear) Mar 17 18:51:11.045335 kernel: Table-perturb hash table entries: 65536 (order: 6, 262144 bytes, linear) Mar 17 18:51:11.045343 kernel: TCP established hash table entries: 65536 (order: 7, 524288 bytes, linear) Mar 17 18:51:11.045350 kernel: TCP bind hash table entries: 65536 (order: 8, 1048576 bytes, linear) Mar 17 18:51:11.045357 kernel: TCP: Hash tables configured (established 65536 bind 65536) Mar 17 18:51:11.045364 kernel: UDP hash table entries: 4096 (order: 5, 131072 bytes, linear) Mar 17 18:51:11.045371 kernel: UDP-Lite hash table entries: 4096 (order: 5, 131072 bytes, linear) Mar 17 18:51:11.045378 kernel: NET: Registered PF_UNIX/PF_LOCAL protocol family Mar 17 18:51:11.045385 kernel: NET: Registered PF_XDP protocol family Mar 17 18:51:11.045392 kernel: PCI: CLS 0 bytes, default 64 Mar 17 18:51:11.045402 kernel: PCI-DMA: Using software bounce buffering for IO (SWIOTLB) Mar 17 18:51:11.045409 kernel: software IO TLB: mapped [mem 0x000000003a8ad000-0x000000003e8ad000] (64MB) Mar 17 18:51:11.045420 kernel: RAPL PMU: API unit is 2^-32 Joules, 0 fixed counters, 10737418240 ms ovfl timer Mar 17 18:51:11.045427 kernel: Initialise system trusted keyrings Mar 17 18:51:11.045434 kernel: workingset: timestamp_bits=39 max_order=21 bucket_order=0 Mar 17 18:51:11.045441 kernel: Key type asymmetric registered Mar 17 18:51:11.045451 kernel: Asymmetric key parser 'x509' registered Mar 17 18:51:11.045458 kernel: Block layer SCSI generic (bsg) driver version 0.4 loaded (major 249) Mar 17 18:51:11.045465 kernel: io scheduler mq-deadline registered Mar 17 18:51:11.045474 kernel: io scheduler kyber registered Mar 17 18:51:11.045484 kernel: io scheduler bfq registered Mar 17 18:51:11.045492 kernel: ioatdma: Intel(R) QuickData Technology Driver 5.00 Mar 17 18:51:11.045502 kernel: Serial: 8250/16550 driver, 4 ports, IRQ sharing enabled Mar 17 18:51:11.045509 kernel: 00:00: ttyS0 at I/O 0x3f8 (irq = 4, base_baud = 115200) is a 16550A Mar 17 18:51:11.045517 kernel: 00:01: ttyS1 at I/O 0x2f8 (irq = 3, base_baud = 115200) is a 16550A Mar 17 18:51:11.045527 kernel: i8042: PNP: No PS/2 controller found. Mar 17 18:51:11.045656 kernel: rtc_cmos 00:02: registered as rtc0 Mar 17 18:51:11.045744 kernel: rtc_cmos 00:02: setting system clock to 2025-03-17T18:51:10 UTC (1742237470) Mar 17 18:51:11.045824 kernel: rtc_cmos 00:02: alarms up to one month, 114 bytes nvram Mar 17 18:51:11.045836 kernel: intel_pstate: CPU model not supported Mar 17 18:51:11.045844 kernel: efifb: probing for efifb Mar 17 18:51:11.045852 kernel: efifb: framebuffer at 0x40000000, using 3072k, total 3072k Mar 17 18:51:11.045862 kernel: efifb: mode is 1024x768x32, linelength=4096, pages=1 Mar 17 18:51:11.045870 kernel: efifb: scrolling: redraw Mar 17 18:51:11.045880 kernel: efifb: Truecolor: size=8:8:8:8, shift=24:16:8:0 Mar 17 18:51:11.045888 kernel: Console: switching to colour frame buffer device 128x48 Mar 17 18:51:11.045899 kernel: fb0: EFI VGA frame buffer device Mar 17 18:51:11.045908 kernel: pstore: Registered efi as persistent store backend Mar 17 18:51:11.045917 kernel: NET: Registered PF_INET6 protocol family Mar 17 18:51:11.045925 kernel: Segment Routing with IPv6 Mar 17 18:51:11.045932 kernel: In-situ OAM (IOAM) with IPv6 Mar 17 18:51:11.045942 kernel: NET: Registered PF_PACKET protocol family Mar 17 18:51:11.045950 kernel: Key type dns_resolver registered Mar 17 18:51:11.045960 kernel: IPI shorthand broadcast: enabled Mar 17 18:51:11.045968 kernel: sched_clock: Marking stable (838675800, 26437800)->(1077321200, -212207600) Mar 17 18:51:11.045977 kernel: registered taskstats version 1 Mar 17 18:51:11.045987 kernel: Loading compiled-in X.509 certificates Mar 17 18:51:11.045995 kernel: Loaded X.509 cert 'Kinvolk GmbH: Module signing key for 5.15.179-flatcar: d5b956bbabb2d386c0246a969032c0de9eaa8220' Mar 17 18:51:11.046004 kernel: Key type .fscrypt registered Mar 17 18:51:11.046011 kernel: Key type fscrypt-provisioning registered Mar 17 18:51:11.046020 kernel: pstore: Using crash dump compression: deflate Mar 17 18:51:11.046029 kernel: ima: No TPM chip found, activating TPM-bypass! Mar 17 18:51:11.046038 kernel: ima: Allocated hash algorithm: sha1 Mar 17 18:51:11.046049 kernel: ima: No architecture policies found Mar 17 18:51:11.046056 kernel: clk: Disabling unused clocks Mar 17 18:51:11.046067 kernel: Freeing unused kernel image (initmem) memory: 47472K Mar 17 18:51:11.046075 kernel: Write protecting the kernel read-only data: 28672k Mar 17 18:51:11.046085 kernel: Freeing unused kernel image (text/rodata gap) memory: 2040K Mar 17 18:51:11.046092 kernel: Freeing unused kernel image (rodata/data gap) memory: 612K Mar 17 18:51:11.046100 kernel: Run /init as init process Mar 17 18:51:11.046110 kernel: with arguments: Mar 17 18:51:11.046117 kernel: /init Mar 17 18:51:11.046129 kernel: with environment: Mar 17 18:51:11.046138 kernel: HOME=/ Mar 17 18:51:11.046159 kernel: TERM=linux Mar 17 18:51:11.046169 kernel: BOOT_IMAGE=/flatcar/vmlinuz-a Mar 17 18:51:11.046179 systemd[1]: systemd 252 running in system mode (+PAM +AUDIT +SELINUX -APPARMOR +IMA +SMACK +SECCOMP +GCRYPT -GNUTLS +OPENSSL -ACL +BLKID +CURL -ELFUTILS -FIDO2 +IDN2 -IDN +IPTC +KMOD +LIBCRYPTSETUP +LIBFDISK +PCRE2 -PWQUALITY -P11KIT -QRENCODE -TPM2 +BZIP2 +LZ4 +XZ +ZLIB +ZSTD -BPF_FRAMEWORK -XKBCOMMON +UTMP +SYSVINIT default-hierarchy=unified) Mar 17 18:51:11.046189 systemd[1]: Detected virtualization microsoft. Mar 17 18:51:11.046204 systemd[1]: Detected architecture x86-64. Mar 17 18:51:11.046218 systemd[1]: Running in initrd. Mar 17 18:51:11.046235 systemd[1]: No hostname configured, using default hostname. Mar 17 18:51:11.046251 systemd[1]: Hostname set to . Mar 17 18:51:11.046267 systemd[1]: Initializing machine ID from random generator. Mar 17 18:51:11.046280 systemd[1]: Queued start job for default target initrd.target. Mar 17 18:51:11.046289 systemd[1]: Started systemd-ask-password-console.path. Mar 17 18:51:11.046296 systemd[1]: Reached target cryptsetup.target. Mar 17 18:51:11.046312 systemd[1]: Reached target paths.target. Mar 17 18:51:11.046326 systemd[1]: Reached target slices.target. Mar 17 18:51:11.046340 systemd[1]: Reached target swap.target. Mar 17 18:51:11.046348 systemd[1]: Reached target timers.target. Mar 17 18:51:11.046360 systemd[1]: Listening on iscsid.socket. Mar 17 18:51:11.046377 systemd[1]: Listening on iscsiuio.socket. Mar 17 18:51:11.046393 systemd[1]: Listening on systemd-journald-audit.socket. Mar 17 18:51:11.046403 systemd[1]: Listening on systemd-journald-dev-log.socket. Mar 17 18:51:11.046411 systemd[1]: Listening on systemd-journald.socket. Mar 17 18:51:11.046422 systemd[1]: Listening on systemd-networkd.socket. Mar 17 18:51:11.046441 systemd[1]: Listening on systemd-udevd-control.socket. Mar 17 18:51:11.046454 systemd[1]: Listening on systemd-udevd-kernel.socket. Mar 17 18:51:11.046462 systemd[1]: Reached target sockets.target. Mar 17 18:51:11.046470 systemd[1]: Starting kmod-static-nodes.service... Mar 17 18:51:11.046490 systemd[1]: Finished network-cleanup.service. Mar 17 18:51:11.046506 systemd[1]: Starting systemd-fsck-usr.service... Mar 17 18:51:11.046520 systemd[1]: Starting systemd-journald.service... Mar 17 18:51:11.046527 systemd[1]: Starting systemd-modules-load.service... Mar 17 18:51:11.046536 systemd[1]: Starting systemd-resolved.service... Mar 17 18:51:11.046555 systemd[1]: Starting systemd-vconsole-setup.service... Mar 17 18:51:11.046572 systemd[1]: Finished kmod-static-nodes.service. Mar 17 18:51:11.046589 systemd-journald[183]: Journal started Mar 17 18:51:11.046644 systemd-journald[183]: Runtime Journal (/run/log/journal/b3bb623740d0402fbedd3fa42486dd34) is 8.0M, max 159.0M, 151.0M free. Mar 17 18:51:11.031504 systemd-modules-load[184]: Inserted module 'overlay' Mar 17 18:51:11.057000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=kmod-static-nodes comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:51:11.074711 kernel: audit: type=1130 audit(1742237471.057:2): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=kmod-static-nodes comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:51:11.074750 systemd[1]: Started systemd-journald.service. Mar 17 18:51:11.087157 kernel: bridge: filtering via arp/ip/ip6tables is no longer available by default. Update your scripts to load br_netfilter if you need this. Mar 17 18:51:11.089061 systemd[1]: Finished systemd-fsck-usr.service. Mar 17 18:51:11.093400 systemd[1]: Finished systemd-vconsole-setup.service. Mar 17 18:51:11.112490 kernel: audit: type=1130 audit(1742237471.088:3): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-journald comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:51:11.112514 kernel: Bridge firewalling registered Mar 17 18:51:11.088000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-journald comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:51:11.112632 systemd-modules-load[184]: Inserted module 'br_netfilter' Mar 17 18:51:11.115759 systemd[1]: Starting dracut-cmdline-ask.service... Mar 17 18:51:11.120739 systemd[1]: Starting systemd-tmpfiles-setup-dev.service... Mar 17 18:51:11.093000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-fsck-usr comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:51:11.147009 systemd[1]: Finished systemd-tmpfiles-setup-dev.service. Mar 17 18:51:11.148649 kernel: audit: type=1130 audit(1742237471.093:4): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-fsck-usr comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:51:11.159913 systemd-resolved[185]: Positive Trust Anchors: Mar 17 18:51:11.162650 kernel: SCSI subsystem initialized Mar 17 18:51:11.160065 systemd-resolved[185]: . IN DS 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d Mar 17 18:51:11.160098 systemd-resolved[185]: Negative trust anchors: home.arpa 10.in-addr.arpa 16.172.in-addr.arpa 17.172.in-addr.arpa 18.172.in-addr.arpa 19.172.in-addr.arpa 20.172.in-addr.arpa 21.172.in-addr.arpa 22.172.in-addr.arpa 23.172.in-addr.arpa 24.172.in-addr.arpa 25.172.in-addr.arpa 26.172.in-addr.arpa 27.172.in-addr.arpa 28.172.in-addr.arpa 29.172.in-addr.arpa 30.172.in-addr.arpa 31.172.in-addr.arpa 168.192.in-addr.arpa d.f.ip6.arpa corp home internal intranet lan local private test Mar 17 18:51:11.167080 systemd[1]: Finished dracut-cmdline-ask.service. Mar 17 18:51:11.170184 systemd[1]: Starting dracut-cmdline.service... Mar 17 18:51:11.112000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-vconsole-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:51:11.188161 kernel: audit: type=1130 audit(1742237471.112:5): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-vconsole-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:51:11.189552 systemd-resolved[185]: Defaulting to hostname 'linux'. Mar 17 18:51:11.211356 kernel: audit: type=1130 audit(1742237471.147:6): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-tmpfiles-setup-dev comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:51:11.147000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-tmpfiles-setup-dev comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:51:11.169000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-cmdline-ask comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:51:11.204386 systemd[1]: Started systemd-resolved.service. Mar 17 18:51:11.225537 kernel: audit: type=1130 audit(1742237471.169:7): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-cmdline-ask comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:51:11.206983 systemd[1]: Reached target nss-lookup.target. Mar 17 18:51:11.206000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-resolved comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:51:11.235983 dracut-cmdline[200]: dracut-dracut-053 Mar 17 18:51:11.260016 kernel: device-mapper: core: CONFIG_IMA_DISABLE_HTABLE is disabled. Duplicate IMA measurements will not be recorded in the IMA log. Mar 17 18:51:11.260041 kernel: audit: type=1130 audit(1742237471.206:8): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-resolved comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:51:11.260059 kernel: device-mapper: uevent: version 1.0.3 Mar 17 18:51:11.260075 kernel: device-mapper: ioctl: 4.45.0-ioctl (2021-03-22) initialised: dm-devel@redhat.com Mar 17 18:51:11.260090 dracut-cmdline[200]: Using kernel command line parameters: rd.driver.pre=btrfs rootflags=rw mount.usrflags=ro BOOT_IMAGE=/flatcar/vmlinuz-a mount.usr=/dev/mapper/usr verity.usr=PARTUUID=7130c94a-213a-4e5a-8e26-6cce9662f132 rootflags=rw mount.usrflags=ro consoleblank=0 root=LABEL=ROOT console=tty1 console=ttyS0,115200n8 earlyprintk=ttyS0,115200 flatcar.first_boot=detected flatcar.oem.id=azure flatcar.autologin verity.usrhash=249ccd113f901380672c0d31e18f792e8e0344094c0e39eedc449f039418b31a Mar 17 18:51:11.279275 systemd-modules-load[184]: Inserted module 'dm_multipath' Mar 17 18:51:11.282450 systemd[1]: Finished systemd-modules-load.service. Mar 17 18:51:11.301460 kernel: audit: type=1130 audit(1742237471.287:9): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-modules-load comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:51:11.287000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-modules-load comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:51:11.300782 systemd[1]: Starting systemd-sysctl.service... Mar 17 18:51:11.313945 systemd[1]: Finished systemd-sysctl.service. Mar 17 18:51:11.318000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-sysctl comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:51:11.332161 kernel: audit: type=1130 audit(1742237471.318:10): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-sysctl comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:51:11.366163 kernel: Loading iSCSI transport class v2.0-870. Mar 17 18:51:11.386161 kernel: iscsi: registered transport (tcp) Mar 17 18:51:11.413571 kernel: iscsi: registered transport (qla4xxx) Mar 17 18:51:11.413620 kernel: QLogic iSCSI HBA Driver Mar 17 18:51:11.442240 systemd[1]: Finished dracut-cmdline.service. Mar 17 18:51:11.447000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-cmdline comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:51:11.448352 systemd[1]: Starting dracut-pre-udev.service... Mar 17 18:51:11.499164 kernel: raid6: avx512x4 gen() 18074 MB/s Mar 17 18:51:11.519161 kernel: raid6: avx512x4 xor() 7760 MB/s Mar 17 18:51:11.539156 kernel: raid6: avx512x2 gen() 18036 MB/s Mar 17 18:51:11.560162 kernel: raid6: avx512x2 xor() 29917 MB/s Mar 17 18:51:11.580156 kernel: raid6: avx512x1 gen() 18312 MB/s Mar 17 18:51:11.600159 kernel: raid6: avx512x1 xor() 26947 MB/s Mar 17 18:51:11.621160 kernel: raid6: avx2x4 gen() 18237 MB/s Mar 17 18:51:11.641159 kernel: raid6: avx2x4 xor() 7787 MB/s Mar 17 18:51:11.661157 kernel: raid6: avx2x2 gen() 18401 MB/s Mar 17 18:51:11.682161 kernel: raid6: avx2x2 xor() 22242 MB/s Mar 17 18:51:11.702155 kernel: raid6: avx2x1 gen() 13790 MB/s Mar 17 18:51:11.722168 kernel: raid6: avx2x1 xor() 19434 MB/s Mar 17 18:51:11.742158 kernel: raid6: sse2x4 gen() 11696 MB/s Mar 17 18:51:11.763170 kernel: raid6: sse2x4 xor() 7239 MB/s Mar 17 18:51:11.783164 kernel: raid6: sse2x2 gen() 12587 MB/s Mar 17 18:51:11.804161 kernel: raid6: sse2x2 xor() 7722 MB/s Mar 17 18:51:11.824174 kernel: raid6: sse2x1 gen() 11644 MB/s Mar 17 18:51:11.847924 kernel: raid6: sse2x1 xor() 5715 MB/s Mar 17 18:51:11.847976 kernel: raid6: using algorithm avx2x2 gen() 18401 MB/s Mar 17 18:51:11.847988 kernel: raid6: .... xor() 22242 MB/s, rmw enabled Mar 17 18:51:11.851529 kernel: raid6: using avx512x2 recovery algorithm Mar 17 18:51:11.871169 kernel: xor: automatically using best checksumming function avx Mar 17 18:51:11.968169 kernel: Btrfs loaded, crc32c=crc32c-intel, zoned=no, fsverity=no Mar 17 18:51:11.975814 systemd[1]: Finished dracut-pre-udev.service. Mar 17 18:51:11.978000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-udev comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:51:11.979000 audit: BPF prog-id=7 op=LOAD Mar 17 18:51:11.980000 audit: BPF prog-id=8 op=LOAD Mar 17 18:51:11.980713 systemd[1]: Starting systemd-udevd.service... Mar 17 18:51:11.994843 systemd-udevd[384]: Using default interface naming scheme 'v252'. Mar 17 18:51:12.001000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-udevd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:51:11.999512 systemd[1]: Started systemd-udevd.service. Mar 17 18:51:12.002674 systemd[1]: Starting dracut-pre-trigger.service... Mar 17 18:51:12.020059 dracut-pre-trigger[397]: rd.md=0: removing MD RAID activation Mar 17 18:51:12.049962 systemd[1]: Finished dracut-pre-trigger.service. Mar 17 18:51:12.052000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-trigger comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:51:12.053140 systemd[1]: Starting systemd-udev-trigger.service... Mar 17 18:51:12.089955 systemd[1]: Finished systemd-udev-trigger.service. Mar 17 18:51:12.092000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-udev-trigger comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:51:12.135175 kernel: cryptd: max_cpu_qlen set to 1000 Mar 17 18:51:12.149201 kernel: hv_vmbus: Vmbus version:5.2 Mar 17 18:51:12.175176 kernel: hv_vmbus: registering driver hyperv_keyboard Mar 17 18:51:12.183602 kernel: AVX2 version of gcm_enc/dec engaged. Mar 17 18:51:12.183637 kernel: AES CTR mode by8 optimization enabled Mar 17 18:51:12.183649 kernel: input: AT Translated Set 2 keyboard as /devices/LNXSYSTM:00/LNXSYBUS:00/ACPI0004:00/VMBUS:00/d34b2567-b9b6-42b9-8778-0a4ec0b955bf/serio0/input/input0 Mar 17 18:51:12.203159 kernel: hid: raw HID events driver (C) Jiri Kosina Mar 17 18:51:12.214365 kernel: hv_vmbus: registering driver hid_hyperv Mar 17 18:51:12.214402 kernel: hv_vmbus: registering driver hv_storvsc Mar 17 18:51:12.220252 kernel: input: Microsoft Vmbus HID-compliant Mouse as /devices/0006:045E:0621.0001/input/input1 Mar 17 18:51:12.226577 kernel: hid 0006:045E:0621.0001: input: VIRTUAL HID v0.01 Mouse [Microsoft Vmbus HID-compliant Mouse] on Mar 17 18:51:12.235164 kernel: hv_vmbus: registering driver hv_netvsc Mar 17 18:51:12.240197 kernel: scsi host0: storvsc_host_t Mar 17 18:51:12.240371 kernel: scsi host1: storvsc_host_t Mar 17 18:51:12.247830 kernel: scsi 0:0:0:0: Direct-Access Msft Virtual Disk 1.0 PQ: 0 ANSI: 5 Mar 17 18:51:12.254173 kernel: scsi 0:0:0:2: CD-ROM Msft Virtual DVD-ROM 1.0 PQ: 0 ANSI: 0 Mar 17 18:51:12.291435 kernel: sd 0:0:0:0: [sda] 63737856 512-byte logical blocks: (32.6 GB/30.4 GiB) Mar 17 18:51:12.311439 kernel: sd 0:0:0:0: [sda] 4096-byte physical blocks Mar 17 18:51:12.311645 kernel: sd 0:0:0:0: [sda] Write Protect is off Mar 17 18:51:12.311805 kernel: sd 0:0:0:0: [sda] Mode Sense: 0f 00 10 00 Mar 17 18:51:12.311964 kernel: sd 0:0:0:0: [sda] Write cache: disabled, read cache: enabled, supports DPO and FUA Mar 17 18:51:12.312142 kernel: sda: sda1 sda2 sda3 sda4 sda6 sda7 sda9 Mar 17 18:51:12.312178 kernel: sd 0:0:0:0: [sda] Attached SCSI disk Mar 17 18:51:12.319267 kernel: sr 0:0:0:2: [sr0] scsi-1 drive Mar 17 18:51:12.320644 kernel: cdrom: Uniform CD-ROM driver Revision: 3.20 Mar 17 18:51:12.320673 kernel: sr 0:0:0:2: Attached scsi CD-ROM sr0 Mar 17 18:51:12.396409 kernel: hv_netvsc 7c1e5235-ff78-7c1e-5235-ff787c1e5235 eth0: VF slot 1 added Mar 17 18:51:12.406164 kernel: hv_vmbus: registering driver hv_pci Mar 17 18:51:12.417771 kernel: hv_pci 9ac80530-99d0-495a-b10c-37b847be25c3: PCI VMBus probing: Using version 0x10004 Mar 17 18:51:12.488876 kernel: hv_pci 9ac80530-99d0-495a-b10c-37b847be25c3: PCI host bridge to bus 99d0:00 Mar 17 18:51:12.488991 kernel: pci_bus 99d0:00: root bus resource [mem 0xfe0000000-0xfe00fffff window] Mar 17 18:51:12.489103 kernel: pci_bus 99d0:00: No busn resource found for root bus, will use [bus 00-ff] Mar 17 18:51:12.489241 kernel: pci 99d0:00:02.0: [15b3:1016] type 00 class 0x020000 Mar 17 18:51:12.489416 kernel: pci 99d0:00:02.0: reg 0x10: [mem 0xfe0000000-0xfe00fffff 64bit pref] Mar 17 18:51:12.489581 kernel: pci 99d0:00:02.0: enabling Extended Tags Mar 17 18:51:12.489735 kernel: pci 99d0:00:02.0: 0.000 Gb/s available PCIe bandwidth, limited by Unknown x0 link at 99d0:00:02.0 (capable of 63.008 Gb/s with 8.0 GT/s PCIe x8 link) Mar 17 18:51:12.489895 kernel: pci_bus 99d0:00: busn_res: [bus 00-ff] end is updated to 00 Mar 17 18:51:12.490010 kernel: pci 99d0:00:02.0: BAR 0: assigned [mem 0xfe0000000-0xfe00fffff 64bit pref] Mar 17 18:51:12.582167 kernel: mlx5_core 99d0:00:02.0: firmware version: 14.30.5000 Mar 17 18:51:12.845195 kernel: mlx5_core 99d0:00:02.0: MLX5E: StrdRq(0) RqSz(1024) StrdSz(256) RxCqeCmprss(0) Mar 17 18:51:12.845382 kernel: BTRFS: device label OEM devid 1 transid 12 /dev/sda6 scanned by (udev-worker) (438) Mar 17 18:51:12.845400 kernel: mlx5_core 99d0:00:02.0: Supported tc offload range - chains: 1, prios: 1 Mar 17 18:51:12.845559 kernel: mlx5_core 99d0:00:02.0: mlx5e_tc_post_act_init:40:(pid 16): firmware level support is missing Mar 17 18:51:12.845715 kernel: hv_netvsc 7c1e5235-ff78-7c1e-5235-ff787c1e5235 eth0: VF registering: eth1 Mar 17 18:51:12.845862 kernel: mlx5_core 99d0:00:02.0 eth1: joined to eth0 Mar 17 18:51:12.702805 systemd[1]: Found device dev-disk-by\x2dlabel-EFI\x2dSYSTEM.device. Mar 17 18:51:12.757397 systemd[1]: Found device dev-disk-by\x2dlabel-OEM.device. Mar 17 18:51:12.854943 kernel: mlx5_core 99d0:00:02.0 enP39376s1: renamed from eth1 Mar 17 18:51:12.905291 systemd[1]: Found device dev-disk-by\x2dlabel-ROOT.device. Mar 17 18:51:12.974496 systemd[1]: Found device dev-disk-by\x2dpartuuid-7130c94a\x2d213a\x2d4e5a\x2d8e26\x2d6cce9662f132.device. Mar 17 18:51:12.982292 systemd[1]: Found device dev-disk-by\x2dpartlabel-USR\x2dA.device. Mar 17 18:51:12.988785 systemd[1]: Starting disk-uuid.service... Mar 17 18:51:13.006216 kernel: sda: sda1 sda2 sda3 sda4 sda6 sda7 sda9 Mar 17 18:51:13.016168 kernel: sda: sda1 sda2 sda3 sda4 sda6 sda7 sda9 Mar 17 18:51:14.024627 disk-uuid[563]: The operation has completed successfully. Mar 17 18:51:14.027523 kernel: sda: sda1 sda2 sda3 sda4 sda6 sda7 sda9 Mar 17 18:51:14.102802 systemd[1]: disk-uuid.service: Deactivated successfully. Mar 17 18:51:14.105000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=disk-uuid comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:51:14.105000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=disk-uuid comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:51:14.102906 systemd[1]: Finished disk-uuid.service. Mar 17 18:51:14.106247 systemd[1]: Starting verity-setup.service... Mar 17 18:51:14.140164 kernel: device-mapper: verity: sha256 using implementation "sha256-avx2" Mar 17 18:51:14.486161 systemd[1]: Found device dev-mapper-usr.device. Mar 17 18:51:14.493548 systemd[1]: Mounting sysusr-usr.mount... Mar 17 18:51:14.500000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=verity-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:51:14.498242 systemd[1]: Finished verity-setup.service. Mar 17 18:51:14.575167 kernel: EXT4-fs (dm-0): mounted filesystem without journal. Opts: norecovery. Quota mode: none. Mar 17 18:51:14.575233 systemd[1]: Mounted sysusr-usr.mount. Mar 17 18:51:14.579162 systemd[1]: afterburn-network-kargs.service was skipped because no trigger condition checks were met. Mar 17 18:51:14.583507 systemd[1]: Starting ignition-setup.service... Mar 17 18:51:14.588462 systemd[1]: Starting parse-ip-for-networkd.service... Mar 17 18:51:14.610916 kernel: BTRFS info (device sda6): using crc32c (crc32c-intel) checksum algorithm Mar 17 18:51:14.610958 kernel: BTRFS info (device sda6): using free space tree Mar 17 18:51:14.610969 kernel: BTRFS info (device sda6): has skinny extents Mar 17 18:51:14.655837 systemd[1]: Finished parse-ip-for-networkd.service. Mar 17 18:51:14.658000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=parse-ip-for-networkd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:51:14.660000 audit: BPF prog-id=9 op=LOAD Mar 17 18:51:14.661284 systemd[1]: Starting systemd-networkd.service... Mar 17 18:51:14.687031 systemd-networkd[801]: lo: Link UP Mar 17 18:51:14.687042 systemd-networkd[801]: lo: Gained carrier Mar 17 18:51:14.691000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-networkd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:51:14.687579 systemd-networkd[801]: Enumeration completed Mar 17 18:51:14.687925 systemd[1]: Started systemd-networkd.service. Mar 17 18:51:14.691191 systemd-networkd[801]: eth0: Configuring with /usr/lib/systemd/network/zz-default.network. Mar 17 18:51:14.691578 systemd[1]: Reached target network.target. Mar 17 18:51:14.703248 systemd[1]: Starting iscsiuio.service... Mar 17 18:51:14.715166 systemd[1]: Started iscsiuio.service. Mar 17 18:51:14.717000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=iscsiuio comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:51:14.718315 systemd[1]: Starting iscsid.service... Mar 17 18:51:14.723815 systemd[1]: mnt-oem.mount: Deactivated successfully. Mar 17 18:51:14.727966 iscsid[813]: iscsid: can't open InitiatorName configuration file /etc/iscsi/initiatorname.iscsi Mar 17 18:51:14.727966 iscsid[813]: iscsid: Warning: InitiatorName file /etc/iscsi/initiatorname.iscsi does not exist or does not contain a properly formatted InitiatorName. If using software iscsi (iscsi_tcp or ib_iser) or partial offload (bnx2i or cxgbi iscsi), you may not be able to log into or discover targets. Please create a file /etc/iscsi/initiatorname.iscsi that contains a sting with the format: InitiatorName=iqn.yyyy-mm.[:identifier]. Mar 17 18:51:14.727966 iscsid[813]: Example: InitiatorName=iqn.2001-04.com.redhat:fc6. Mar 17 18:51:14.727966 iscsid[813]: If using hardware iscsi like qla4xxx this message can be ignored. Mar 17 18:51:14.751050 iscsid[813]: iscsid: can't open InitiatorAlias configuration file /etc/iscsi/initiatorname.iscsi Mar 17 18:51:14.751050 iscsid[813]: iscsid: can't open iscsid.safe_logout configuration file /etc/iscsi/iscsid.conf Mar 17 18:51:14.758598 systemd[1]: Started iscsid.service. Mar 17 18:51:14.760000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=iscsid comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:51:14.761233 systemd[1]: Starting dracut-initqueue.service... Mar 17 18:51:14.771162 kernel: mlx5_core 99d0:00:02.0 enP39376s1: Link up Mar 17 18:51:14.774310 systemd[1]: Finished dracut-initqueue.service. Mar 17 18:51:14.778000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-initqueue comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:51:14.778589 systemd[1]: Reached target remote-fs-pre.target. Mar 17 18:51:14.783048 systemd[1]: Reached target remote-cryptsetup.target. Mar 17 18:51:14.787981 systemd[1]: Reached target remote-fs.target. Mar 17 18:51:14.792842 systemd[1]: Starting dracut-pre-mount.service... Mar 17 18:51:14.801312 systemd[1]: Finished dracut-pre-mount.service. Mar 17 18:51:14.807817 kernel: hv_netvsc 7c1e5235-ff78-7c1e-5235-ff787c1e5235 eth0: Data path switched to VF: enP39376s1 Mar 17 18:51:14.808387 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): eth0: link becomes ready Mar 17 18:51:14.807000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-mount comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:51:14.813188 systemd-networkd[801]: enP39376s1: Link UP Mar 17 18:51:14.813326 systemd-networkd[801]: eth0: Link UP Mar 17 18:51:14.813520 systemd-networkd[801]: eth0: Gained carrier Mar 17 18:51:14.820323 systemd-networkd[801]: enP39376s1: Gained carrier Mar 17 18:51:14.824000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:51:14.822843 systemd[1]: Finished ignition-setup.service. Mar 17 18:51:14.825869 systemd[1]: Starting ignition-fetch-offline.service... Mar 17 18:51:14.862221 systemd-networkd[801]: eth0: DHCPv4 address 10.200.8.35/24, gateway 10.200.8.1 acquired from 168.63.129.16 Mar 17 18:51:16.161601 systemd-networkd[801]: eth0: Gained IPv6LL Mar 17 18:51:17.921351 ignition[828]: Ignition 2.14.0 Mar 17 18:51:17.921367 ignition[828]: Stage: fetch-offline Mar 17 18:51:17.921447 ignition[828]: reading system config file "/usr/lib/ignition/base.d/base.ign" Mar 17 18:51:17.921506 ignition[828]: parsing config with SHA512: 4824fd4a4e57848da530dc2b56e2d3e9f5f19634d1c84ef29f8fc49255520728d0377a861a375d7c8cb5301ed861ff4ede4b440b074b1d6a86e23be9cefc2f63 Mar 17 18:51:17.996477 ignition[828]: no config dir at "/usr/lib/ignition/base.platform.d/azure" Mar 17 18:51:17.999960 ignition[828]: parsed url from cmdline: "" Mar 17 18:51:17.999970 ignition[828]: no config URL provided Mar 17 18:51:17.999984 ignition[828]: reading system config file "/usr/lib/ignition/user.ign" Mar 17 18:51:17.999999 ignition[828]: no config at "/usr/lib/ignition/user.ign" Mar 17 18:51:18.000008 ignition[828]: failed to fetch config: resource requires networking Mar 17 18:51:18.002288 ignition[828]: Ignition finished successfully Mar 17 18:51:18.013078 systemd[1]: Finished ignition-fetch-offline.service. Mar 17 18:51:18.012000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-fetch-offline comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:51:18.016521 systemd[1]: Starting ignition-fetch.service... Mar 17 18:51:18.037868 kernel: kauditd_printk_skb: 18 callbacks suppressed Mar 17 18:51:18.037902 kernel: audit: type=1130 audit(1742237478.012:29): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-fetch-offline comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:51:18.041581 ignition[834]: Ignition 2.14.0 Mar 17 18:51:18.041591 ignition[834]: Stage: fetch Mar 17 18:51:18.041711 ignition[834]: reading system config file "/usr/lib/ignition/base.d/base.ign" Mar 17 18:51:18.041736 ignition[834]: parsing config with SHA512: 4824fd4a4e57848da530dc2b56e2d3e9f5f19634d1c84ef29f8fc49255520728d0377a861a375d7c8cb5301ed861ff4ede4b440b074b1d6a86e23be9cefc2f63 Mar 17 18:51:18.049846 ignition[834]: no config dir at "/usr/lib/ignition/base.platform.d/azure" Mar 17 18:51:18.050079 ignition[834]: parsed url from cmdline: "" Mar 17 18:51:18.050084 ignition[834]: no config URL provided Mar 17 18:51:18.050095 ignition[834]: reading system config file "/usr/lib/ignition/user.ign" Mar 17 18:51:18.050105 ignition[834]: no config at "/usr/lib/ignition/user.ign" Mar 17 18:51:18.050160 ignition[834]: GET http://169.254.169.254/metadata/instance/compute/userData?api-version=2021-01-01&format=text: attempt #1 Mar 17 18:51:18.159355 ignition[834]: GET result: OK Mar 17 18:51:18.159464 ignition[834]: config has been read from IMDS userdata Mar 17 18:51:18.159506 ignition[834]: parsing config with SHA512: 02b2d4902284ba751f004e2a22cfed2df643eb4f437c54409365bfbbb1c6bdb7a24bd875714296af5f152cb1410e185a0c7f0d03968983a02daf47e2673e08f7 Mar 17 18:51:18.164161 unknown[834]: fetched base config from "system" Mar 17 18:51:18.164809 ignition[834]: fetch: fetch complete Mar 17 18:51:18.164171 unknown[834]: fetched base config from "system" Mar 17 18:51:18.172000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-fetch comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:51:18.164818 ignition[834]: fetch: fetch passed Mar 17 18:51:18.188115 kernel: audit: type=1130 audit(1742237478.172:30): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-fetch comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:51:18.164177 unknown[834]: fetched user config from "azure" Mar 17 18:51:18.164871 ignition[834]: Ignition finished successfully Mar 17 18:51:18.166534 systemd[1]: Finished ignition-fetch.service. Mar 17 18:51:18.185661 systemd[1]: Starting ignition-kargs.service... Mar 17 18:51:18.203735 ignition[840]: Ignition 2.14.0 Mar 17 18:51:18.203745 ignition[840]: Stage: kargs Mar 17 18:51:18.203879 ignition[840]: reading system config file "/usr/lib/ignition/base.d/base.ign" Mar 17 18:51:18.203915 ignition[840]: parsing config with SHA512: 4824fd4a4e57848da530dc2b56e2d3e9f5f19634d1c84ef29f8fc49255520728d0377a861a375d7c8cb5301ed861ff4ede4b440b074b1d6a86e23be9cefc2f63 Mar 17 18:51:18.210469 systemd[1]: Finished ignition-kargs.service. Mar 17 18:51:18.212000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-kargs comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:51:18.207107 ignition[840]: no config dir at "/usr/lib/ignition/base.platform.d/azure" Mar 17 18:51:18.231522 kernel: audit: type=1130 audit(1742237478.212:31): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-kargs comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:51:18.213459 systemd[1]: Starting ignition-disks.service... Mar 17 18:51:18.209340 ignition[840]: kargs: kargs passed Mar 17 18:51:18.209395 ignition[840]: Ignition finished successfully Mar 17 18:51:18.232715 ignition[846]: Ignition 2.14.0 Mar 17 18:51:18.232721 ignition[846]: Stage: disks Mar 17 18:51:18.232820 ignition[846]: reading system config file "/usr/lib/ignition/base.d/base.ign" Mar 17 18:51:18.232843 ignition[846]: parsing config with SHA512: 4824fd4a4e57848da530dc2b56e2d3e9f5f19634d1c84ef29f8fc49255520728d0377a861a375d7c8cb5301ed861ff4ede4b440b074b1d6a86e23be9cefc2f63 Mar 17 18:51:18.238722 ignition[846]: no config dir at "/usr/lib/ignition/base.platform.d/azure" Mar 17 18:51:18.240625 ignition[846]: disks: disks passed Mar 17 18:51:18.243600 systemd[1]: Finished ignition-disks.service. Mar 17 18:51:18.240664 ignition[846]: Ignition finished successfully Mar 17 18:51:18.252000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-disks comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:51:18.252904 systemd[1]: Reached target initrd-root-device.target. Mar 17 18:51:18.276821 kernel: audit: type=1130 audit(1742237478.252:32): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-disks comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:51:18.264913 systemd[1]: Reached target local-fs-pre.target. Mar 17 18:51:18.265286 systemd[1]: Reached target local-fs.target. Mar 17 18:51:18.265667 systemd[1]: Reached target sysinit.target. Mar 17 18:51:18.266056 systemd[1]: Reached target basic.target. Mar 17 18:51:18.267331 systemd[1]: Starting systemd-fsck-root.service... Mar 17 18:51:18.332227 systemd-fsck[854]: ROOT: clean, 623/7326000 files, 481078/7359488 blocks Mar 17 18:51:18.335622 systemd[1]: Finished systemd-fsck-root.service. Mar 17 18:51:18.340000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-fsck-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:51:18.342194 systemd[1]: Mounting sysroot.mount... Mar 17 18:51:18.358073 kernel: audit: type=1130 audit(1742237478.340:33): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-fsck-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:51:18.370489 kernel: EXT4-fs (sda9): mounted filesystem with ordered data mode. Opts: (null). Quota mode: none. Mar 17 18:51:18.369230 systemd[1]: Mounted sysroot.mount. Mar 17 18:51:18.375395 systemd[1]: Reached target initrd-root-fs.target. Mar 17 18:51:18.410030 systemd[1]: Mounting sysroot-usr.mount... Mar 17 18:51:18.414391 systemd[1]: Starting flatcar-metadata-hostname.service... Mar 17 18:51:18.417263 systemd[1]: ignition-remount-sysroot.service was skipped because of an unmet condition check (ConditionPathIsReadWrite=!/sysroot). Mar 17 18:51:18.417304 systemd[1]: Reached target ignition-diskful.target. Mar 17 18:51:18.429878 systemd[1]: Mounted sysroot-usr.mount. Mar 17 18:51:18.483136 systemd[1]: Mounting sysroot-usr-share-oem.mount... Mar 17 18:51:18.489324 systemd[1]: Starting initrd-setup-root.service... Mar 17 18:51:18.500168 kernel: BTRFS: device label OEM devid 1 transid 14 /dev/sda6 scanned by mount (865) Mar 17 18:51:18.509684 kernel: BTRFS info (device sda6): using crc32c (crc32c-intel) checksum algorithm Mar 17 18:51:18.509714 kernel: BTRFS info (device sda6): using free space tree Mar 17 18:51:18.509728 kernel: BTRFS info (device sda6): has skinny extents Mar 17 18:51:18.513591 initrd-setup-root[870]: cut: /sysroot/etc/passwd: No such file or directory Mar 17 18:51:18.518857 systemd[1]: Mounted sysroot-usr-share-oem.mount. Mar 17 18:51:18.543382 initrd-setup-root[896]: cut: /sysroot/etc/group: No such file or directory Mar 17 18:51:18.566217 initrd-setup-root[904]: cut: /sysroot/etc/shadow: No such file or directory Mar 17 18:51:18.571882 initrd-setup-root[912]: cut: /sysroot/etc/gshadow: No such file or directory Mar 17 18:51:19.025414 systemd[1]: Finished initrd-setup-root.service. Mar 17 18:51:19.044492 kernel: audit: type=1130 audit(1742237479.028:34): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-setup-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:51:19.028000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-setup-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:51:19.041047 systemd[1]: Starting ignition-mount.service... Mar 17 18:51:19.049455 systemd[1]: Starting sysroot-boot.service... Mar 17 18:51:19.056073 systemd[1]: sysusr-usr-share-oem.mount: Deactivated successfully. Mar 17 18:51:19.056322 systemd[1]: sysroot-usr-share-oem.mount: Deactivated successfully. Mar 17 18:51:19.075269 ignition[931]: INFO : Ignition 2.14.0 Mar 17 18:51:19.077627 ignition[931]: INFO : Stage: mount Mar 17 18:51:19.079584 ignition[931]: INFO : reading system config file "/usr/lib/ignition/base.d/base.ign" Mar 17 18:51:19.079584 ignition[931]: DEBUG : parsing config with SHA512: 4824fd4a4e57848da530dc2b56e2d3e9f5f19634d1c84ef29f8fc49255520728d0377a861a375d7c8cb5301ed861ff4ede4b440b074b1d6a86e23be9cefc2f63 Mar 17 18:51:19.092217 ignition[931]: INFO : no config dir at "/usr/lib/ignition/base.platform.d/azure" Mar 17 18:51:19.096588 systemd[1]: Finished sysroot-boot.service. Mar 17 18:51:19.100000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=sysroot-boot comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:51:19.102249 ignition[931]: INFO : mount: mount passed Mar 17 18:51:19.102249 ignition[931]: INFO : Ignition finished successfully Mar 17 18:51:19.117357 kernel: audit: type=1130 audit(1742237479.100:35): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=sysroot-boot comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:51:19.110939 systemd[1]: Finished ignition-mount.service. Mar 17 18:51:19.121000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-mount comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:51:19.134201 kernel: audit: type=1130 audit(1742237479.121:36): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-mount comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:51:19.995619 coreos-metadata[864]: Mar 17 18:51:19.995 INFO Fetching http://168.63.129.16/?comp=versions: Attempt #1 Mar 17 18:51:20.015527 coreos-metadata[864]: Mar 17 18:51:20.015 INFO Fetch successful Mar 17 18:51:20.049156 coreos-metadata[864]: Mar 17 18:51:20.049 INFO Fetching http://169.254.169.254/metadata/instance/compute/name?api-version=2017-08-01&format=text: Attempt #1 Mar 17 18:51:20.066173 coreos-metadata[864]: Mar 17 18:51:20.066 INFO Fetch successful Mar 17 18:51:20.085427 coreos-metadata[864]: Mar 17 18:51:20.085 INFO wrote hostname ci-3510.3.7-a-9ed44aff31 to /sysroot/etc/hostname Mar 17 18:51:20.087564 systemd[1]: Finished flatcar-metadata-hostname.service. Mar 17 18:51:20.094000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=flatcar-metadata-hostname comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:51:20.096000 systemd[1]: Starting ignition-files.service... Mar 17 18:51:20.108689 kernel: audit: type=1130 audit(1742237480.094:37): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=flatcar-metadata-hostname comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:51:20.114136 systemd[1]: Mounting sysroot-usr-share-oem.mount... Mar 17 18:51:20.133164 kernel: BTRFS: device label OEM devid 1 transid 15 /dev/sda6 scanned by mount (943) Mar 17 18:51:20.133211 kernel: BTRFS info (device sda6): using crc32c (crc32c-intel) checksum algorithm Mar 17 18:51:20.141347 kernel: BTRFS info (device sda6): using free space tree Mar 17 18:51:20.141371 kernel: BTRFS info (device sda6): has skinny extents Mar 17 18:51:20.150949 systemd[1]: Mounted sysroot-usr-share-oem.mount. Mar 17 18:51:20.163520 ignition[962]: INFO : Ignition 2.14.0 Mar 17 18:51:20.163520 ignition[962]: INFO : Stage: files Mar 17 18:51:20.168129 ignition[962]: INFO : reading system config file "/usr/lib/ignition/base.d/base.ign" Mar 17 18:51:20.168129 ignition[962]: DEBUG : parsing config with SHA512: 4824fd4a4e57848da530dc2b56e2d3e9f5f19634d1c84ef29f8fc49255520728d0377a861a375d7c8cb5301ed861ff4ede4b440b074b1d6a86e23be9cefc2f63 Mar 17 18:51:20.177992 ignition[962]: INFO : no config dir at "/usr/lib/ignition/base.platform.d/azure" Mar 17 18:51:20.185782 ignition[962]: DEBUG : files: compiled without relabeling support, skipping Mar 17 18:51:20.189012 ignition[962]: INFO : files: ensureUsers: op(1): [started] creating or modifying user "core" Mar 17 18:51:20.189012 ignition[962]: DEBUG : files: ensureUsers: op(1): executing: "usermod" "--root" "/sysroot" "core" Mar 17 18:51:20.233550 ignition[962]: INFO : files: ensureUsers: op(1): [finished] creating or modifying user "core" Mar 17 18:51:20.238246 ignition[962]: INFO : files: ensureUsers: op(2): [started] adding ssh keys to user "core" Mar 17 18:51:20.238246 ignition[962]: INFO : files: ensureUsers: op(2): [finished] adding ssh keys to user "core" Mar 17 18:51:20.238246 ignition[962]: INFO : files: createFilesystemsFiles: createFiles: op(3): [started] writing file "/sysroot/opt/helm-v3.17.0-linux-amd64.tar.gz" Mar 17 18:51:20.238246 ignition[962]: INFO : files: createFilesystemsFiles: createFiles: op(3): GET https://get.helm.sh/helm-v3.17.0-linux-amd64.tar.gz: attempt #1 Mar 17 18:51:20.234234 unknown[962]: wrote ssh authorized keys file for user: core Mar 17 18:51:20.318189 ignition[962]: INFO : files: createFilesystemsFiles: createFiles: op(3): GET result: OK Mar 17 18:51:20.446314 ignition[962]: INFO : files: createFilesystemsFiles: createFiles: op(3): [finished] writing file "/sysroot/opt/helm-v3.17.0-linux-amd64.tar.gz" Mar 17 18:51:20.451556 ignition[962]: INFO : files: createFilesystemsFiles: createFiles: op(4): [started] writing file "/sysroot/home/core/install.sh" Mar 17 18:51:20.451556 ignition[962]: INFO : files: createFilesystemsFiles: createFiles: op(4): [finished] writing file "/sysroot/home/core/install.sh" Mar 17 18:51:20.460603 ignition[962]: INFO : files: createFilesystemsFiles: createFiles: op(5): [started] writing file "/sysroot/home/core/nginx.yaml" Mar 17 18:51:20.460603 ignition[962]: INFO : files: createFilesystemsFiles: createFiles: op(5): [finished] writing file "/sysroot/home/core/nginx.yaml" Mar 17 18:51:20.460603 ignition[962]: INFO : files: createFilesystemsFiles: createFiles: op(6): [started] writing file "/sysroot/home/core/nfs-pod.yaml" Mar 17 18:51:20.474161 ignition[962]: INFO : files: createFilesystemsFiles: createFiles: op(6): [finished] writing file "/sysroot/home/core/nfs-pod.yaml" Mar 17 18:51:20.474161 ignition[962]: INFO : files: createFilesystemsFiles: createFiles: op(7): [started] writing file "/sysroot/home/core/nfs-pvc.yaml" Mar 17 18:51:20.483194 ignition[962]: INFO : files: createFilesystemsFiles: createFiles: op(7): [finished] writing file "/sysroot/home/core/nfs-pvc.yaml" Mar 17 18:51:20.488474 ignition[962]: INFO : files: createFilesystemsFiles: createFiles: op(8): [started] writing file "/sysroot/etc/flatcar/update.conf" Mar 17 18:51:20.493438 ignition[962]: INFO : files: createFilesystemsFiles: createFiles: op(8): [finished] writing file "/sysroot/etc/flatcar/update.conf" Mar 17 18:51:20.498255 ignition[962]: INFO : files: createFilesystemsFiles: createFiles: op(9): [started] writing link "/sysroot/etc/extensions/kubernetes.raw" -> "/opt/extensions/kubernetes/kubernetes-v1.32.0-x86-64.raw" Mar 17 18:51:20.498255 ignition[962]: INFO : files: createFilesystemsFiles: createFiles: op(9): [finished] writing link "/sysroot/etc/extensions/kubernetes.raw" -> "/opt/extensions/kubernetes/kubernetes-v1.32.0-x86-64.raw" Mar 17 18:51:20.511946 ignition[962]: INFO : files: createFilesystemsFiles: createFiles: op(a): [started] writing file "/sysroot/etc/systemd/system/waagent.service" Mar 17 18:51:20.511946 ignition[962]: INFO : files: createFilesystemsFiles: createFiles: op(a): oem config not found in "/usr/share/oem", looking on oem partition Mar 17 18:51:20.522438 ignition[962]: INFO : files: createFilesystemsFiles: createFiles: op(a): op(b): [started] mounting "/dev/disk/by-label/OEM" at "/mnt/oem3079137828" Mar 17 18:51:20.522438 ignition[962]: CRITICAL : files: createFilesystemsFiles: createFiles: op(a): op(b): [failed] mounting "/dev/disk/by-label/OEM" at "/mnt/oem3079137828": device or resource busy Mar 17 18:51:20.522438 ignition[962]: ERROR : files: createFilesystemsFiles: createFiles: op(a): failed to mount ext4 device "/dev/disk/by-label/OEM" at "/mnt/oem3079137828", trying btrfs: device or resource busy Mar 17 18:51:20.522438 ignition[962]: INFO : files: createFilesystemsFiles: createFiles: op(a): op(c): [started] mounting "/dev/disk/by-label/OEM" at "/mnt/oem3079137828" Mar 17 18:51:20.522438 ignition[962]: INFO : files: createFilesystemsFiles: createFiles: op(a): op(c): [finished] mounting "/dev/disk/by-label/OEM" at "/mnt/oem3079137828" Mar 17 18:51:20.551154 ignition[962]: INFO : files: createFilesystemsFiles: createFiles: op(a): op(d): [started] unmounting "/mnt/oem3079137828" Mar 17 18:51:20.551154 ignition[962]: INFO : files: createFilesystemsFiles: createFiles: op(a): op(d): [finished] unmounting "/mnt/oem3079137828" Mar 17 18:51:20.551154 ignition[962]: INFO : files: createFilesystemsFiles: createFiles: op(a): [finished] writing file "/sysroot/etc/systemd/system/waagent.service" Mar 17 18:51:20.551154 ignition[962]: INFO : files: createFilesystemsFiles: createFiles: op(e): [started] writing file "/sysroot/etc/systemd/system/nvidia.service" Mar 17 18:51:20.551154 ignition[962]: INFO : files: createFilesystemsFiles: createFiles: op(e): oem config not found in "/usr/share/oem", looking on oem partition Mar 17 18:51:20.551154 ignition[962]: INFO : files: createFilesystemsFiles: createFiles: op(e): op(f): [started] mounting "/dev/disk/by-label/OEM" at "/mnt/oem2641844085" Mar 17 18:51:20.551154 ignition[962]: CRITICAL : files: createFilesystemsFiles: createFiles: op(e): op(f): [failed] mounting "/dev/disk/by-label/OEM" at "/mnt/oem2641844085": device or resource busy Mar 17 18:51:20.551154 ignition[962]: ERROR : files: createFilesystemsFiles: createFiles: op(e): failed to mount ext4 device "/dev/disk/by-label/OEM" at "/mnt/oem2641844085", trying btrfs: device or resource busy Mar 17 18:51:20.551154 ignition[962]: INFO : files: createFilesystemsFiles: createFiles: op(e): op(10): [started] mounting "/dev/disk/by-label/OEM" at "/mnt/oem2641844085" Mar 17 18:51:20.540484 systemd[1]: mnt-oem3079137828.mount: Deactivated successfully. Mar 17 18:51:20.602054 ignition[962]: INFO : files: createFilesystemsFiles: createFiles: op(e): op(10): [finished] mounting "/dev/disk/by-label/OEM" at "/mnt/oem2641844085" Mar 17 18:51:20.602054 ignition[962]: INFO : files: createFilesystemsFiles: createFiles: op(e): op(11): [started] unmounting "/mnt/oem2641844085" Mar 17 18:51:20.602054 ignition[962]: INFO : files: createFilesystemsFiles: createFiles: op(e): op(11): [finished] unmounting "/mnt/oem2641844085" Mar 17 18:51:20.602054 ignition[962]: INFO : files: createFilesystemsFiles: createFiles: op(e): [finished] writing file "/sysroot/etc/systemd/system/nvidia.service" Mar 17 18:51:20.602054 ignition[962]: INFO : files: createFilesystemsFiles: createFiles: op(12): [started] writing file "/sysroot/opt/extensions/kubernetes/kubernetes-v1.32.0-x86-64.raw" Mar 17 18:51:20.602054 ignition[962]: INFO : files: createFilesystemsFiles: createFiles: op(12): GET https://github.com/flatcar/sysext-bakery/releases/download/latest/kubernetes-v1.32.0-x86-64.raw: attempt #1 Mar 17 18:51:20.555137 systemd[1]: mnt-oem2641844085.mount: Deactivated successfully. Mar 17 18:51:21.073291 ignition[962]: INFO : files: createFilesystemsFiles: createFiles: op(12): GET result: OK Mar 17 18:51:21.547347 ignition[962]: INFO : files: createFilesystemsFiles: createFiles: op(12): [finished] writing file "/sysroot/opt/extensions/kubernetes/kubernetes-v1.32.0-x86-64.raw" Mar 17 18:51:21.547347 ignition[962]: INFO : files: op(13): [started] processing unit "waagent.service" Mar 17 18:51:21.547347 ignition[962]: INFO : files: op(13): [finished] processing unit "waagent.service" Mar 17 18:51:21.547347 ignition[962]: INFO : files: op(14): [started] processing unit "nvidia.service" Mar 17 18:51:21.547347 ignition[962]: INFO : files: op(14): [finished] processing unit "nvidia.service" Mar 17 18:51:21.547347 ignition[962]: INFO : files: op(15): [started] processing unit "prepare-helm.service" Mar 17 18:51:21.586067 kernel: audit: type=1130 audit(1742237481.556:38): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-files comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:51:21.556000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-files comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:51:21.553289 systemd[1]: Finished ignition-files.service. Mar 17 18:51:21.588250 ignition[962]: INFO : files: op(15): op(16): [started] writing unit "prepare-helm.service" at "/sysroot/etc/systemd/system/prepare-helm.service" Mar 17 18:51:21.588250 ignition[962]: INFO : files: op(15): op(16): [finished] writing unit "prepare-helm.service" at "/sysroot/etc/systemd/system/prepare-helm.service" Mar 17 18:51:21.588250 ignition[962]: INFO : files: op(15): [finished] processing unit "prepare-helm.service" Mar 17 18:51:21.588250 ignition[962]: INFO : files: op(17): [started] setting preset to enabled for "waagent.service" Mar 17 18:51:21.588250 ignition[962]: INFO : files: op(17): [finished] setting preset to enabled for "waagent.service" Mar 17 18:51:21.588250 ignition[962]: INFO : files: op(18): [started] setting preset to enabled for "nvidia.service" Mar 17 18:51:21.588250 ignition[962]: INFO : files: op(18): [finished] setting preset to enabled for "nvidia.service" Mar 17 18:51:21.588250 ignition[962]: INFO : files: op(19): [started] setting preset to enabled for "prepare-helm.service" Mar 17 18:51:21.588250 ignition[962]: INFO : files: op(19): [finished] setting preset to enabled for "prepare-helm.service" Mar 17 18:51:21.588250 ignition[962]: INFO : files: createResultFile: createFiles: op(1a): [started] writing file "/sysroot/etc/.ignition-result.json" Mar 17 18:51:21.588250 ignition[962]: INFO : files: createResultFile: createFiles: op(1a): [finished] writing file "/sysroot/etc/.ignition-result.json" Mar 17 18:51:21.588250 ignition[962]: INFO : files: files passed Mar 17 18:51:21.588250 ignition[962]: INFO : Ignition finished successfully Mar 17 18:51:21.621000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-setup-root-after-ignition comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:51:21.627000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-quench comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:51:21.627000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-quench comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:51:21.570746 systemd[1]: Starting initrd-setup-root-after-ignition.service... Mar 17 18:51:21.657000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-parse-etc comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:51:21.657000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-parse-etc comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:51:21.579742 systemd[1]: torcx-profile-populate.service was skipped because of an unmet condition check (ConditionPathExists=/sysroot/etc/torcx/next-profile). Mar 17 18:51:21.667175 initrd-setup-root-after-ignition[988]: grep: /sysroot/etc/flatcar/enabled-sysext.conf: No such file or directory Mar 17 18:51:21.601723 systemd[1]: Starting ignition-quench.service... Mar 17 18:51:21.615757 systemd[1]: Finished initrd-setup-root-after-ignition.service. Mar 17 18:51:21.621948 systemd[1]: ignition-quench.service: Deactivated successfully. Mar 17 18:51:21.622031 systemd[1]: Finished ignition-quench.service. Mar 17 18:51:21.627889 systemd[1]: Reached target ignition-complete.target. Mar 17 18:51:21.634336 systemd[1]: Starting initrd-parse-etc.service... Mar 17 18:51:21.653944 systemd[1]: initrd-parse-etc.service: Deactivated successfully. Mar 17 18:51:21.654031 systemd[1]: Finished initrd-parse-etc.service. Mar 17 18:51:21.657949 systemd[1]: Reached target initrd-fs.target. Mar 17 18:51:21.660203 systemd[1]: Reached target initrd.target. Mar 17 18:51:21.662210 systemd[1]: dracut-mount.service was skipped because no trigger condition checks were met. Mar 17 18:51:21.662884 systemd[1]: Starting dracut-pre-pivot.service... Mar 17 18:51:21.703515 systemd[1]: Finished dracut-pre-pivot.service. Mar 17 18:51:21.705000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-pivot comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:51:21.706695 systemd[1]: Starting initrd-cleanup.service... Mar 17 18:51:21.718486 systemd[1]: Stopped target nss-lookup.target. Mar 17 18:51:21.722904 systemd[1]: Stopped target remote-cryptsetup.target. Mar 17 18:51:21.727558 systemd[1]: Stopped target timers.target. Mar 17 18:51:21.731419 systemd[1]: dracut-pre-pivot.service: Deactivated successfully. Mar 17 18:51:21.733900 systemd[1]: Stopped dracut-pre-pivot.service. Mar 17 18:51:21.738000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-pivot comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:51:21.738325 systemd[1]: Stopped target initrd.target. Mar 17 18:51:21.742196 systemd[1]: Stopped target basic.target. Mar 17 18:51:21.746001 systemd[1]: Stopped target ignition-complete.target. Mar 17 18:51:21.750616 systemd[1]: Stopped target ignition-diskful.target. Mar 17 18:51:21.755527 systemd[1]: Stopped target initrd-root-device.target. Mar 17 18:51:21.760211 systemd[1]: Stopped target remote-fs.target. Mar 17 18:51:21.765000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-mount comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:51:21.766000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-initqueue comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:51:21.766000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-setup-root-after-ignition comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:51:21.767000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-files comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:51:21.767000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=flatcar-metadata-hostname comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:51:21.762403 systemd[1]: Stopped target remote-fs-pre.target. Mar 17 18:51:21.802000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-udev-trigger comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:51:21.805000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-trigger comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:51:21.809000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=iscsid comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:51:21.815320 iscsid[813]: iscsid shutting down. Mar 17 18:51:21.815000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-cleanup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:51:21.815000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-cleanup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:51:21.763434 systemd[1]: Stopped target sysinit.target. Mar 17 18:51:21.763864 systemd[1]: Stopped target local-fs.target. Mar 17 18:51:21.825000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=iscsiuio comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:51:21.825839 ignition[1001]: INFO : Ignition 2.14.0 Mar 17 18:51:21.825839 ignition[1001]: INFO : Stage: umount Mar 17 18:51:21.825839 ignition[1001]: INFO : reading system config file "/usr/lib/ignition/base.d/base.ign" Mar 17 18:51:21.825839 ignition[1001]: DEBUG : parsing config with SHA512: 4824fd4a4e57848da530dc2b56e2d3e9f5f19634d1c84ef29f8fc49255520728d0377a861a375d7c8cb5301ed861ff4ede4b440b074b1d6a86e23be9cefc2f63 Mar 17 18:51:21.825839 ignition[1001]: INFO : no config dir at "/usr/lib/ignition/base.platform.d/azure" Mar 17 18:51:21.825839 ignition[1001]: INFO : umount: umount passed Mar 17 18:51:21.825839 ignition[1001]: INFO : Ignition finished successfully Mar 17 18:51:21.829000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-mount comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:51:21.833000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-disks comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:51:21.840000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-kargs comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:51:21.842000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-fetch comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:51:21.764310 systemd[1]: Stopped target local-fs-pre.target. Mar 17 18:51:21.764755 systemd[1]: Stopped target swap.target. Mar 17 18:51:21.765315 systemd[1]: dracut-pre-mount.service: Deactivated successfully. Mar 17 18:51:21.765440 systemd[1]: Stopped dracut-pre-mount.service. Mar 17 18:51:21.765799 systemd[1]: Stopped target cryptsetup.target. Mar 17 18:51:21.766112 systemd[1]: dracut-initqueue.service: Deactivated successfully. Mar 17 18:51:21.766238 systemd[1]: Stopped dracut-initqueue.service. Mar 17 18:51:21.766673 systemd[1]: initrd-setup-root-after-ignition.service: Deactivated successfully. Mar 17 18:51:21.766788 systemd[1]: Stopped initrd-setup-root-after-ignition.service. Mar 17 18:51:21.767080 systemd[1]: ignition-files.service: Deactivated successfully. Mar 17 18:51:21.767198 systemd[1]: Stopped ignition-files.service. Mar 17 18:51:21.767553 systemd[1]: flatcar-metadata-hostname.service: Deactivated successfully. Mar 17 18:51:21.767665 systemd[1]: Stopped flatcar-metadata-hostname.service. Mar 17 18:51:21.768893 systemd[1]: Stopping ignition-mount.service... Mar 17 18:51:21.771386 systemd[1]: Stopping iscsid.service... Mar 17 18:51:21.794923 systemd[1]: Stopping sysroot-boot.service... Mar 17 18:51:21.798261 systemd[1]: systemd-udev-trigger.service: Deactivated successfully. Mar 17 18:51:21.798478 systemd[1]: Stopped systemd-udev-trigger.service. Mar 17 18:51:21.802569 systemd[1]: dracut-pre-trigger.service: Deactivated successfully. Mar 17 18:51:21.802723 systemd[1]: Stopped dracut-pre-trigger.service. Mar 17 18:51:21.807584 systemd[1]: iscsid.service: Deactivated successfully. Mar 17 18:51:21.807702 systemd[1]: Stopped iscsid.service. Mar 17 18:51:21.810895 systemd[1]: initrd-cleanup.service: Deactivated successfully. Mar 17 18:51:21.810973 systemd[1]: Finished initrd-cleanup.service. Mar 17 18:51:21.818488 systemd[1]: Stopping iscsiuio.service... Mar 17 18:51:21.821851 systemd[1]: iscsiuio.service: Deactivated successfully. Mar 17 18:51:21.821960 systemd[1]: Stopped iscsiuio.service. Mar 17 18:51:21.826023 systemd[1]: ignition-mount.service: Deactivated successfully. Mar 17 18:51:21.826124 systemd[1]: Stopped ignition-mount.service. Mar 17 18:51:21.830188 systemd[1]: ignition-disks.service: Deactivated successfully. Mar 17 18:51:21.830239 systemd[1]: Stopped ignition-disks.service. Mar 17 18:51:21.834226 systemd[1]: ignition-kargs.service: Deactivated successfully. Mar 17 18:51:21.834266 systemd[1]: Stopped ignition-kargs.service. Mar 17 18:51:21.840268 systemd[1]: ignition-fetch.service: Deactivated successfully. Mar 17 18:51:21.840313 systemd[1]: Stopped ignition-fetch.service. Mar 17 18:51:21.842566 systemd[1]: Stopped target network.target. Mar 17 18:51:21.851927 systemd[1]: ignition-fetch-offline.service: Deactivated successfully. Mar 17 18:51:21.851975 systemd[1]: Stopped ignition-fetch-offline.service. Mar 17 18:51:21.937000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-fetch-offline comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:51:21.937817 systemd[1]: Stopped target paths.target. Mar 17 18:51:21.940028 systemd[1]: systemd-ask-password-console.path: Deactivated successfully. Mar 17 18:51:21.942209 systemd[1]: Stopped systemd-ask-password-console.path. Mar 17 18:51:21.944604 systemd[1]: Stopped target slices.target. Mar 17 18:51:21.946572 systemd[1]: Stopped target sockets.target. Mar 17 18:51:21.962000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:51:21.951485 systemd[1]: iscsid.socket: Deactivated successfully. Mar 17 18:51:21.951534 systemd[1]: Closed iscsid.socket. Mar 17 18:51:21.955445 systemd[1]: iscsiuio.socket: Deactivated successfully. Mar 17 18:51:21.955491 systemd[1]: Closed iscsiuio.socket. Mar 17 18:51:21.978000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-resolved comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:51:21.959105 systemd[1]: ignition-setup.service: Deactivated successfully. Mar 17 18:51:21.959165 systemd[1]: Stopped ignition-setup.service. Mar 17 18:51:21.963306 systemd[1]: Stopping systemd-networkd.service... Mar 17 18:51:21.967133 systemd[1]: Stopping systemd-resolved.service... Mar 17 18:51:21.971865 systemd[1]: sysroot-boot.mount: Deactivated successfully. Mar 17 18:51:21.993000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-networkd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:51:21.972198 systemd-networkd[801]: eth0: DHCPv6 lease lost Mar 17 18:51:21.995000 audit: BPF prog-id=6 op=UNLOAD Mar 17 18:51:21.995000 audit: BPF prog-id=9 op=UNLOAD Mar 17 18:51:21.972343 systemd[1]: systemd-resolved.service: Deactivated successfully. Mar 17 18:51:21.972446 systemd[1]: Stopped systemd-resolved.service. Mar 17 18:51:22.006000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=parse-ip-for-networkd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:51:21.979456 systemd[1]: systemd-networkd.service: Deactivated successfully. Mar 17 18:51:21.979563 systemd[1]: Stopped systemd-networkd.service. Mar 17 18:51:22.013000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-sysctl comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:51:21.995327 systemd[1]: systemd-networkd.socket: Deactivated successfully. Mar 17 18:51:21.995363 systemd[1]: Closed systemd-networkd.socket. Mar 17 18:51:22.019000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-modules-load comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:51:21.998346 systemd[1]: Stopping network-cleanup.service... Mar 17 18:51:22.002091 systemd[1]: parse-ip-for-networkd.service: Deactivated successfully. Mar 17 18:51:22.002163 systemd[1]: Stopped parse-ip-for-networkd.service. Mar 17 18:51:22.006398 systemd[1]: systemd-sysctl.service: Deactivated successfully. Mar 17 18:51:22.006452 systemd[1]: Stopped systemd-sysctl.service. Mar 17 18:51:22.013338 systemd[1]: systemd-modules-load.service: Deactivated successfully. Mar 17 18:51:22.015707 systemd[1]: Stopped systemd-modules-load.service. Mar 17 18:51:22.023187 systemd[1]: Stopping systemd-udevd.service... Mar 17 18:51:22.027856 systemd[1]: run-credentials-systemd\x2dsysctl.service.mount: Deactivated successfully. Mar 17 18:51:22.044284 systemd[1]: systemd-udevd.service: Deactivated successfully. Mar 17 18:51:22.048000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-udevd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:51:22.044434 systemd[1]: Stopped systemd-udevd.service. Mar 17 18:51:22.048989 systemd[1]: systemd-udevd-control.socket: Deactivated successfully. Mar 17 18:51:22.049027 systemd[1]: Closed systemd-udevd-control.socket. Mar 17 18:51:22.059000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-udev comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:51:22.063000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-cmdline comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:51:22.052988 systemd[1]: systemd-udevd-kernel.socket: Deactivated successfully. Mar 17 18:51:22.066000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-cmdline-ask comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:51:22.053027 systemd[1]: Closed systemd-udevd-kernel.socket. Mar 17 18:51:22.078709 kernel: hv_netvsc 7c1e5235-ff78-7c1e-5235-ff787c1e5235 eth0: Data path switched from VF: enP39376s1 Mar 17 18:51:22.057835 systemd[1]: dracut-pre-udev.service: Deactivated successfully. Mar 17 18:51:22.057880 systemd[1]: Stopped dracut-pre-udev.service. Mar 17 18:51:22.059993 systemd[1]: dracut-cmdline.service: Deactivated successfully. Mar 17 18:51:22.060034 systemd[1]: Stopped dracut-cmdline.service. Mar 17 18:51:22.064041 systemd[1]: dracut-cmdline-ask.service: Deactivated successfully. Mar 17 18:51:22.064089 systemd[1]: Stopped dracut-cmdline-ask.service. Mar 17 18:51:22.090000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-tmpfiles-setup-dev comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:51:22.067063 systemd[1]: Starting initrd-udevadm-cleanup-db.service... Mar 17 18:51:22.078343 systemd[1]: systemd-tmpfiles-setup-dev.service: Deactivated successfully. Mar 17 18:51:22.078457 systemd[1]: Stopped systemd-tmpfiles-setup-dev.service. Mar 17 18:51:22.098000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=kmod-static-nodes comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:51:22.099000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-vconsole-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:51:22.096112 systemd[1]: kmod-static-nodes.service: Deactivated successfully. Mar 17 18:51:22.108000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=network-cleanup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:51:22.096180 systemd[1]: Stopped kmod-static-nodes.service. Mar 17 18:51:22.099158 systemd[1]: systemd-vconsole-setup.service: Deactivated successfully. Mar 17 18:51:22.099198 systemd[1]: Stopped systemd-vconsole-setup.service. Mar 17 18:51:22.100828 systemd[1]: run-credentials-systemd\x2dtmpfiles\x2dsetup\x2ddev.service.mount: Deactivated successfully. Mar 17 18:51:22.108712 systemd[1]: network-cleanup.service: Deactivated successfully. Mar 17 18:51:22.108798 systemd[1]: Stopped network-cleanup.service. Mar 17 18:51:22.129639 systemd[1]: initrd-udevadm-cleanup-db.service: Deactivated successfully. Mar 17 18:51:22.134000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-udevadm-cleanup-db comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:51:22.134000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-udevadm-cleanup-db comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:51:22.129727 systemd[1]: Finished initrd-udevadm-cleanup-db.service. Mar 17 18:51:22.483224 systemd[1]: sysroot-boot.service: Deactivated successfully. Mar 17 18:51:22.483338 systemd[1]: Stopped sysroot-boot.service. Mar 17 18:51:22.488000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=sysroot-boot comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:51:22.489265 systemd[1]: Reached target initrd-switch-root.target. Mar 17 18:51:22.495000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-setup-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:51:22.493383 systemd[1]: initrd-setup-root.service: Deactivated successfully. Mar 17 18:51:22.493446 systemd[1]: Stopped initrd-setup-root.service. Mar 17 18:51:22.496394 systemd[1]: Starting initrd-switch-root.service... Mar 17 18:51:22.510595 systemd[1]: Switching root. Mar 17 18:51:22.535867 systemd-journald[183]: Journal stopped Mar 17 18:51:36.427029 systemd-journald[183]: Received SIGTERM from PID 1 (systemd). Mar 17 18:51:36.427062 kernel: SELinux: Class mctp_socket not defined in policy. Mar 17 18:51:36.427078 kernel: SELinux: Class anon_inode not defined in policy. Mar 17 18:51:36.427090 kernel: SELinux: the above unknown classes and permissions will be allowed Mar 17 18:51:36.427102 kernel: SELinux: policy capability network_peer_controls=1 Mar 17 18:51:36.427115 kernel: SELinux: policy capability open_perms=1 Mar 17 18:51:36.427129 kernel: SELinux: policy capability extended_socket_class=1 Mar 17 18:51:36.427159 kernel: SELinux: policy capability always_check_network=0 Mar 17 18:51:36.427169 kernel: SELinux: policy capability cgroup_seclabel=1 Mar 17 18:51:36.427179 kernel: SELinux: policy capability nnp_nosuid_transition=1 Mar 17 18:51:36.427189 kernel: SELinux: policy capability genfs_seclabel_symlinks=0 Mar 17 18:51:36.427200 kernel: SELinux: policy capability ioctl_skip_cloexec=0 Mar 17 18:51:36.427209 kernel: kauditd_printk_skb: 43 callbacks suppressed Mar 17 18:51:36.427221 kernel: audit: type=1403 audit(1742237485.142:82): auid=4294967295 ses=4294967295 lsm=selinux res=1 Mar 17 18:51:36.427236 systemd[1]: Successfully loaded SELinux policy in 288.038ms. Mar 17 18:51:36.427246 systemd[1]: Relabelled /dev, /dev/shm, /run, /sys/fs/cgroup in 23.950ms. Mar 17 18:51:36.427258 systemd[1]: systemd 252 running in system mode (+PAM +AUDIT +SELINUX -APPARMOR +IMA +SMACK +SECCOMP +GCRYPT -GNUTLS +OPENSSL -ACL +BLKID +CURL -ELFUTILS -FIDO2 +IDN2 -IDN +IPTC +KMOD +LIBCRYPTSETUP +LIBFDISK +PCRE2 -PWQUALITY -P11KIT -QRENCODE -TPM2 +BZIP2 +LZ4 +XZ +ZLIB +ZSTD -BPF_FRAMEWORK -XKBCOMMON +UTMP +SYSVINIT default-hierarchy=unified) Mar 17 18:51:36.427267 systemd[1]: Detected virtualization microsoft. Mar 17 18:51:36.427279 systemd[1]: Detected architecture x86-64. Mar 17 18:51:36.427289 systemd[1]: Detected first boot. Mar 17 18:51:36.427299 systemd[1]: Hostname set to . Mar 17 18:51:36.427308 systemd[1]: Initializing machine ID from random generator. Mar 17 18:51:36.427317 kernel: audit: type=1400 audit(1742237485.782:83): avc: denied { integrity } for pid=1 comm="systemd" lockdown_reason="/dev/mem,kmem,port" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=lockdown permissive=1 Mar 17 18:51:36.427326 kernel: audit: type=1400 audit(1742237485.799:84): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=1 Mar 17 18:51:36.427335 kernel: audit: type=1400 audit(1742237485.799:85): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=1 Mar 17 18:51:36.427345 kernel: audit: type=1334 audit(1742237485.825:86): prog-id=10 op=LOAD Mar 17 18:51:36.427353 kernel: audit: type=1334 audit(1742237485.825:87): prog-id=10 op=UNLOAD Mar 17 18:51:36.427362 kernel: audit: type=1334 audit(1742237485.835:88): prog-id=11 op=LOAD Mar 17 18:51:36.427372 kernel: audit: type=1334 audit(1742237485.835:89): prog-id=11 op=UNLOAD Mar 17 18:51:36.427382 kernel: SELinux: Context system_u:object_r:container_file_t:s0:c1022,c1023 is not valid (left unmapped). Mar 17 18:51:36.427391 kernel: audit: type=1400 audit(1742237487.128:90): avc: denied { associate } for pid=1035 comm="torcx-generator" name="docker" dev="tmpfs" ino=2 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:tmpfs_t:s0 tclass=filesystem permissive=1 srawcon="system_u:object_r:container_file_t:s0:c1022,c1023" Mar 17 18:51:36.427404 kernel: audit: type=1300 audit(1742237487.128:90): arch=c000003e syscall=188 success=yes exit=0 a0=c0000247fc a1=c00002aae0 a2=c000028d00 a3=32 items=0 ppid=1018 pid=1035 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="torcx-generator" exe="/usr/lib/systemd/system-generators/torcx-generator" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:51:36.427415 systemd[1]: Populated /etc with preset unit settings. Mar 17 18:51:36.427428 systemd[1]: /usr/lib/systemd/system/locksmithd.service:8: Unit uses CPUShares=; please use CPUWeight= instead. Support for CPUShares= will be removed soon. Mar 17 18:51:36.427437 systemd[1]: /usr/lib/systemd/system/locksmithd.service:9: Unit uses MemoryLimit=; please use MemoryMax= instead. Support for MemoryLimit= will be removed soon. Mar 17 18:51:36.427450 systemd[1]: /run/systemd/system/docker.socket:8: ListenStream= references a path below legacy directory /var/run/, updating /var/run/docker.sock → /run/docker.sock; please update the unit file accordingly. Mar 17 18:51:36.427459 kernel: kauditd_printk_skb: 7 callbacks suppressed Mar 17 18:51:36.427468 kernel: audit: type=1334 audit(1742237495.860:92): prog-id=12 op=LOAD Mar 17 18:51:36.427479 kernel: audit: type=1334 audit(1742237495.860:93): prog-id=3 op=UNLOAD Mar 17 18:51:36.427490 kernel: audit: type=1334 audit(1742237495.865:94): prog-id=13 op=LOAD Mar 17 18:51:36.427506 kernel: audit: type=1334 audit(1742237495.870:95): prog-id=14 op=LOAD Mar 17 18:51:36.427515 systemd[1]: initrd-switch-root.service: Deactivated successfully. Mar 17 18:51:36.427528 kernel: audit: type=1334 audit(1742237495.870:96): prog-id=4 op=UNLOAD Mar 17 18:51:36.427537 kernel: audit: type=1334 audit(1742237495.870:97): prog-id=5 op=UNLOAD Mar 17 18:51:36.427548 kernel: audit: type=1131 audit(1742237495.870:98): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-journald comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:51:36.427558 systemd[1]: Stopped initrd-switch-root.service. Mar 17 18:51:36.427569 kernel: audit: type=1334 audit(1742237495.918:99): prog-id=12 op=UNLOAD Mar 17 18:51:36.427582 kernel: audit: type=1130 audit(1742237495.925:100): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=initrd-switch-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:51:36.427592 systemd[1]: systemd-journald.service: Scheduled restart job, restart counter is at 1. Mar 17 18:51:36.427604 kernel: audit: type=1131 audit(1742237495.925:101): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=initrd-switch-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:51:36.427614 systemd[1]: Created slice system-addon\x2dconfig.slice. Mar 17 18:51:36.427627 systemd[1]: Created slice system-addon\x2drun.slice. Mar 17 18:51:36.427636 systemd[1]: Created slice system-getty.slice. Mar 17 18:51:36.427648 systemd[1]: Created slice system-modprobe.slice. Mar 17 18:51:36.427663 systemd[1]: Created slice system-serial\x2dgetty.slice. Mar 17 18:51:36.427676 systemd[1]: Created slice system-system\x2dcloudinit.slice. Mar 17 18:51:36.427687 systemd[1]: Created slice system-systemd\x2dfsck.slice. Mar 17 18:51:36.427698 systemd[1]: Created slice user.slice. Mar 17 18:51:36.427710 systemd[1]: Started systemd-ask-password-console.path. Mar 17 18:51:36.427722 systemd[1]: Started systemd-ask-password-wall.path. Mar 17 18:51:36.427733 systemd[1]: Set up automount boot.automount. Mar 17 18:51:36.427744 systemd[1]: Set up automount proc-sys-fs-binfmt_misc.automount. Mar 17 18:51:36.427754 systemd[1]: Stopped target initrd-switch-root.target. Mar 17 18:51:36.427765 systemd[1]: Stopped target initrd-fs.target. Mar 17 18:51:36.427774 systemd[1]: Stopped target initrd-root-fs.target. Mar 17 18:51:36.427784 systemd[1]: Reached target integritysetup.target. Mar 17 18:51:36.427794 systemd[1]: Reached target remote-cryptsetup.target. Mar 17 18:51:36.427803 systemd[1]: Reached target remote-fs.target. Mar 17 18:51:36.427812 systemd[1]: Reached target slices.target. Mar 17 18:51:36.427821 systemd[1]: Reached target swap.target. Mar 17 18:51:36.427831 systemd[1]: Reached target torcx.target. Mar 17 18:51:36.427842 systemd[1]: Reached target veritysetup.target. Mar 17 18:51:36.427851 systemd[1]: Listening on systemd-coredump.socket. Mar 17 18:51:36.427861 systemd[1]: Listening on systemd-initctl.socket. Mar 17 18:51:36.427870 systemd[1]: Listening on systemd-networkd.socket. Mar 17 18:51:36.427880 systemd[1]: Listening on systemd-udevd-control.socket. Mar 17 18:51:36.427891 systemd[1]: Listening on systemd-udevd-kernel.socket. Mar 17 18:51:36.427902 systemd[1]: Listening on systemd-userdbd.socket. Mar 17 18:51:36.427914 systemd[1]: Mounting dev-hugepages.mount... Mar 17 18:51:36.427930 systemd[1]: Mounting dev-mqueue.mount... Mar 17 18:51:36.427940 systemd[1]: Mounting media.mount... Mar 17 18:51:36.427950 systemd[1]: proc-xen.mount was skipped because of an unmet condition check (ConditionVirtualization=xen). Mar 17 18:51:36.427964 systemd[1]: Mounting sys-kernel-debug.mount... Mar 17 18:51:36.427977 systemd[1]: Mounting sys-kernel-tracing.mount... Mar 17 18:51:36.427988 systemd[1]: Mounting tmp.mount... Mar 17 18:51:36.428003 systemd[1]: Starting flatcar-tmpfiles.service... Mar 17 18:51:36.428013 systemd[1]: ignition-delete-config.service was skipped because no trigger condition checks were met. Mar 17 18:51:36.428025 systemd[1]: Starting kmod-static-nodes.service... Mar 17 18:51:36.428035 systemd[1]: Starting modprobe@configfs.service... Mar 17 18:51:36.428044 systemd[1]: Starting modprobe@dm_mod.service... Mar 17 18:51:36.428057 systemd[1]: Starting modprobe@drm.service... Mar 17 18:51:36.428067 systemd[1]: Starting modprobe@efi_pstore.service... Mar 17 18:51:36.428079 systemd[1]: Starting modprobe@fuse.service... Mar 17 18:51:36.428089 systemd[1]: Starting modprobe@loop.service... Mar 17 18:51:36.428101 systemd[1]: setup-nsswitch.service was skipped because of an unmet condition check (ConditionPathExists=!/etc/nsswitch.conf). Mar 17 18:51:36.428114 systemd[1]: systemd-fsck-root.service: Deactivated successfully. Mar 17 18:51:36.428124 systemd[1]: Stopped systemd-fsck-root.service. Mar 17 18:51:36.428133 systemd[1]: systemd-fsck-usr.service: Deactivated successfully. Mar 17 18:51:36.428854 systemd[1]: Stopped systemd-fsck-usr.service. Mar 17 18:51:36.428879 systemd[1]: Stopped systemd-journald.service. Mar 17 18:51:36.428890 systemd[1]: Starting systemd-journald.service... Mar 17 18:51:36.428900 kernel: loop: module loaded Mar 17 18:51:36.428913 systemd[1]: Starting systemd-modules-load.service... Mar 17 18:51:36.428927 systemd[1]: Starting systemd-network-generator.service... Mar 17 18:51:36.428938 systemd[1]: Starting systemd-remount-fs.service... Mar 17 18:51:36.428950 systemd[1]: Starting systemd-udev-trigger.service... Mar 17 18:51:36.428961 kernel: fuse: init (API version 7.34) Mar 17 18:51:36.428973 systemd[1]: verity-setup.service: Deactivated successfully. Mar 17 18:51:36.428987 systemd[1]: Stopped verity-setup.service. Mar 17 18:51:36.428999 systemd[1]: xenserver-pv-version.service was skipped because of an unmet condition check (ConditionVirtualization=xen). Mar 17 18:51:36.429014 systemd[1]: Mounted dev-hugepages.mount. Mar 17 18:51:36.429028 systemd[1]: Mounted dev-mqueue.mount. Mar 17 18:51:36.429042 systemd[1]: Mounted media.mount. Mar 17 18:51:36.429054 systemd[1]: Mounted sys-kernel-debug.mount. Mar 17 18:51:36.429065 systemd[1]: Mounted sys-kernel-tracing.mount. Mar 17 18:51:36.429075 systemd[1]: Mounted tmp.mount. Mar 17 18:51:36.429090 systemd-journald[1116]: Journal started Mar 17 18:51:36.429173 systemd-journald[1116]: Runtime Journal (/run/log/journal/a638420a48ab41c8a009ee299714c861) is 8.0M, max 159.0M, 151.0M free. Mar 17 18:51:25.142000 audit: MAC_POLICY_LOAD auid=4294967295 ses=4294967295 lsm=selinux res=1 Mar 17 18:51:25.782000 audit[1]: AVC avc: denied { integrity } for pid=1 comm="systemd" lockdown_reason="/dev/mem,kmem,port" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=lockdown permissive=1 Mar 17 18:51:25.799000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=1 Mar 17 18:51:25.799000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=1 Mar 17 18:51:25.825000 audit: BPF prog-id=10 op=LOAD Mar 17 18:51:25.825000 audit: BPF prog-id=10 op=UNLOAD Mar 17 18:51:25.835000 audit: BPF prog-id=11 op=LOAD Mar 17 18:51:25.835000 audit: BPF prog-id=11 op=UNLOAD Mar 17 18:51:27.128000 audit[1035]: AVC avc: denied { associate } for pid=1035 comm="torcx-generator" name="docker" dev="tmpfs" ino=2 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:tmpfs_t:s0 tclass=filesystem permissive=1 srawcon="system_u:object_r:container_file_t:s0:c1022,c1023" Mar 17 18:51:27.128000 audit[1035]: SYSCALL arch=c000003e syscall=188 success=yes exit=0 a0=c0000247fc a1=c00002aae0 a2=c000028d00 a3=32 items=0 ppid=1018 pid=1035 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="torcx-generator" exe="/usr/lib/systemd/system-generators/torcx-generator" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:51:27.128000 audit: PROCTITLE proctitle=2F7573722F6C69622F73797374656D642F73797374656D2D67656E657261746F72732F746F7263782D67656E657261746F72002F72756E2F73797374656D642F67656E657261746F72002F72756E2F73797374656D642F67656E657261746F722E6561726C79002F72756E2F73797374656D642F67656E657261746F722E6C61 Mar 17 18:51:27.137000 audit[1035]: AVC avc: denied { associate } for pid=1035 comm="torcx-generator" name="lib" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:tmpfs_t:s0 tclass=filesystem permissive=1 Mar 17 18:51:27.137000 audit[1035]: SYSCALL arch=c000003e syscall=258 success=yes exit=0 a0=ffffffffffffff9c a1=c0000248d5 a2=1ed a3=0 items=2 ppid=1018 pid=1035 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="torcx-generator" exe="/usr/lib/systemd/system-generators/torcx-generator" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:51:27.137000 audit: CWD cwd="/" Mar 17 18:51:27.137000 audit: PATH item=0 name=(null) inode=2 dev=00:1c mode=040755 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:unlabeled_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Mar 17 18:51:27.137000 audit: PATH item=1 name=(null) inode=3 dev=00:1c mode=040755 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:unlabeled_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Mar 17 18:51:27.137000 audit: PROCTITLE proctitle=2F7573722F6C69622F73797374656D642F73797374656D2D67656E657261746F72732F746F7263782D67656E657261746F72002F72756E2F73797374656D642F67656E657261746F72002F72756E2F73797374656D642F67656E657261746F722E6561726C79002F72756E2F73797374656D642F67656E657261746F722E6C61 Mar 17 18:51:35.860000 audit: BPF prog-id=12 op=LOAD Mar 17 18:51:35.860000 audit: BPF prog-id=3 op=UNLOAD Mar 17 18:51:35.865000 audit: BPF prog-id=13 op=LOAD Mar 17 18:51:35.870000 audit: BPF prog-id=14 op=LOAD Mar 17 18:51:35.870000 audit: BPF prog-id=4 op=UNLOAD Mar 17 18:51:35.870000 audit: BPF prog-id=5 op=UNLOAD Mar 17 18:51:35.870000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-journald comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:51:35.918000 audit: BPF prog-id=12 op=UNLOAD Mar 17 18:51:35.925000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=initrd-switch-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:51:35.925000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=initrd-switch-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:51:36.277000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-fsck-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:51:36.287000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-fsck-usr comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:51:36.293000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-journald comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:51:36.293000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-journald comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:51:36.294000 audit: BPF prog-id=15 op=LOAD Mar 17 18:51:36.294000 audit: BPF prog-id=16 op=LOAD Mar 17 18:51:36.294000 audit: BPF prog-id=17 op=LOAD Mar 17 18:51:36.294000 audit: BPF prog-id=13 op=UNLOAD Mar 17 18:51:36.294000 audit: BPF prog-id=14 op=UNLOAD Mar 17 18:51:36.379000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=verity-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:51:36.424000 audit: CONFIG_CHANGE op=set audit_enabled=1 old=1 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 res=1 Mar 17 18:51:36.424000 audit[1116]: SYSCALL arch=c000003e syscall=46 success=yes exit=60 a0=6 a1=7ffda90efd90 a2=4000 a3=7ffda90efe2c items=0 ppid=1 pid=1116 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="systemd-journal" exe="/usr/lib/systemd/systemd-journald" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:51:36.424000 audit: PROCTITLE proctitle="/usr/lib/systemd/systemd-journald" Mar 17 18:51:27.049658 /usr/lib/systemd/system-generators/torcx-generator[1035]: time="2025-03-17T18:51:27Z" level=debug msg="common configuration parsed" base_dir=/var/lib/torcx/ conf_dir=/etc/torcx/ run_dir=/run/torcx/ store_paths="[/usr/share/torcx/store /usr/share/oem/torcx/store/3510.3.7 /usr/share/oem/torcx/store /var/lib/torcx/store/3510.3.7 /var/lib/torcx/store]" Mar 17 18:51:35.858521 systemd[1]: Queued start job for default target multi-user.target. Mar 17 18:51:27.096921 /usr/lib/systemd/system-generators/torcx-generator[1035]: time="2025-03-17T18:51:27Z" level=debug msg="profile found" name=docker-1.12-no path=/usr/share/torcx/profiles/docker-1.12-no.json Mar 17 18:51:35.858533 systemd[1]: Unnecessary job was removed for dev-sda6.device. Mar 17 18:51:27.096958 /usr/lib/systemd/system-generators/torcx-generator[1035]: time="2025-03-17T18:51:27Z" level=debug msg="profile found" name=vendor path=/usr/share/torcx/profiles/vendor.json Mar 17 18:51:35.870713 systemd[1]: systemd-journald.service: Deactivated successfully. Mar 17 18:51:27.096999 /usr/lib/systemd/system-generators/torcx-generator[1035]: time="2025-03-17T18:51:27Z" level=info msg="no vendor profile selected by /etc/flatcar/docker-1.12" Mar 17 18:51:27.097012 /usr/lib/systemd/system-generators/torcx-generator[1035]: time="2025-03-17T18:51:27Z" level=debug msg="skipped missing lower profile" missing profile=oem Mar 17 18:51:27.097065 /usr/lib/systemd/system-generators/torcx-generator[1035]: time="2025-03-17T18:51:27Z" level=warning msg="no next profile: unable to read profile file: open /etc/torcx/next-profile: no such file or directory" Mar 17 18:51:27.097080 /usr/lib/systemd/system-generators/torcx-generator[1035]: time="2025-03-17T18:51:27Z" level=debug msg="apply configuration parsed" lower profiles (vendor/oem)="[vendor]" upper profile (user)= Mar 17 18:51:27.097359 /usr/lib/systemd/system-generators/torcx-generator[1035]: time="2025-03-17T18:51:27Z" level=debug msg="mounted tmpfs" target=/run/torcx/unpack Mar 17 18:51:27.097405 /usr/lib/systemd/system-generators/torcx-generator[1035]: time="2025-03-17T18:51:27Z" level=debug msg="profile found" name=docker-1.12-no path=/usr/share/torcx/profiles/docker-1.12-no.json Mar 17 18:51:27.097420 /usr/lib/systemd/system-generators/torcx-generator[1035]: time="2025-03-17T18:51:27Z" level=debug msg="profile found" name=vendor path=/usr/share/torcx/profiles/vendor.json Mar 17 18:51:27.113464 /usr/lib/systemd/system-generators/torcx-generator[1035]: time="2025-03-17T18:51:27Z" level=debug msg="new archive/reference added to cache" format=tgz name=docker path="/usr/share/torcx/store/docker:20.10.torcx.tgz" reference=20.10 Mar 17 18:51:27.113527 /usr/lib/systemd/system-generators/torcx-generator[1035]: time="2025-03-17T18:51:27Z" level=debug msg="new archive/reference added to cache" format=tgz name=docker path="/usr/share/torcx/store/docker:com.coreos.cl.torcx.tgz" reference=com.coreos.cl Mar 17 18:51:27.113575 /usr/lib/systemd/system-generators/torcx-generator[1035]: time="2025-03-17T18:51:27Z" level=info msg="store skipped" err="open /usr/share/oem/torcx/store/3510.3.7: no such file or directory" path=/usr/share/oem/torcx/store/3510.3.7 Mar 17 18:51:27.113598 /usr/lib/systemd/system-generators/torcx-generator[1035]: time="2025-03-17T18:51:27Z" level=info msg="store skipped" err="open /usr/share/oem/torcx/store: no such file or directory" path=/usr/share/oem/torcx/store Mar 17 18:51:27.113618 /usr/lib/systemd/system-generators/torcx-generator[1035]: time="2025-03-17T18:51:27Z" level=info msg="store skipped" err="open /var/lib/torcx/store/3510.3.7: no such file or directory" path=/var/lib/torcx/store/3510.3.7 Mar 17 18:51:27.113634 /usr/lib/systemd/system-generators/torcx-generator[1035]: time="2025-03-17T18:51:27Z" level=info msg="store skipped" err="open /var/lib/torcx/store: no such file or directory" path=/var/lib/torcx/store Mar 17 18:51:34.588091 /usr/lib/systemd/system-generators/torcx-generator[1035]: time="2025-03-17T18:51:34Z" level=debug msg="image unpacked" image=docker path=/run/torcx/unpack/docker reference=com.coreos.cl Mar 17 18:51:34.588343 /usr/lib/systemd/system-generators/torcx-generator[1035]: time="2025-03-17T18:51:34Z" level=debug msg="binaries propagated" assets="[/bin/containerd /bin/containerd-shim /bin/ctr /bin/docker /bin/docker-containerd /bin/docker-containerd-shim /bin/docker-init /bin/docker-proxy /bin/docker-runc /bin/dockerd /bin/runc /bin/tini]" image=docker path=/run/torcx/unpack/docker reference=com.coreos.cl Mar 17 18:51:34.588472 /usr/lib/systemd/system-generators/torcx-generator[1035]: time="2025-03-17T18:51:34Z" level=debug msg="networkd units propagated" assets="[/lib/systemd/network/50-docker.network /lib/systemd/network/90-docker-veth.network]" image=docker path=/run/torcx/unpack/docker reference=com.coreos.cl Mar 17 18:51:34.588647 /usr/lib/systemd/system-generators/torcx-generator[1035]: time="2025-03-17T18:51:34Z" level=debug msg="systemd units propagated" assets="[/lib/systemd/system/containerd.service /lib/systemd/system/docker.service /lib/systemd/system/docker.socket /lib/systemd/system/sockets.target.wants /lib/systemd/system/multi-user.target.wants]" image=docker path=/run/torcx/unpack/docker reference=com.coreos.cl Mar 17 18:51:34.588700 /usr/lib/systemd/system-generators/torcx-generator[1035]: time="2025-03-17T18:51:34Z" level=debug msg="profile applied" sealed profile=/run/torcx/profile.json upper profile= Mar 17 18:51:34.588754 /usr/lib/systemd/system-generators/torcx-generator[1035]: time="2025-03-17T18:51:34Z" level=debug msg="system state sealed" content="[TORCX_LOWER_PROFILES=\"vendor\" TORCX_UPPER_PROFILE=\"\" TORCX_PROFILE_PATH=\"/run/torcx/profile.json\" TORCX_BINDIR=\"/run/torcx/bin\" TORCX_UNPACKDIR=\"/run/torcx/unpack\"]" path=/run/metadata/torcx Mar 17 18:51:36.435189 systemd[1]: Started systemd-journald.service. Mar 17 18:51:36.439000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-journald comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:51:36.440040 systemd[1]: Finished flatcar-tmpfiles.service. Mar 17 18:51:36.442000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=flatcar-tmpfiles comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:51:36.442590 systemd[1]: Finished kmod-static-nodes.service. Mar 17 18:51:36.445000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kmod-static-nodes comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:51:36.445705 systemd[1]: modprobe@configfs.service: Deactivated successfully. Mar 17 18:51:36.445846 systemd[1]: Finished modprobe@configfs.service. Mar 17 18:51:36.448000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@configfs comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:51:36.448000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@configfs comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:51:36.448775 systemd[1]: modprobe@dm_mod.service: Deactivated successfully. Mar 17 18:51:36.448915 systemd[1]: Finished modprobe@dm_mod.service. Mar 17 18:51:36.450000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@dm_mod comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:51:36.450000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@dm_mod comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:51:36.451379 systemd[1]: modprobe@drm.service: Deactivated successfully. Mar 17 18:51:36.451534 systemd[1]: Finished modprobe@drm.service. Mar 17 18:51:36.453000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@drm comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:51:36.453000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@drm comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:51:36.453879 systemd[1]: modprobe@efi_pstore.service: Deactivated successfully. Mar 17 18:51:36.454015 systemd[1]: Finished modprobe@efi_pstore.service. Mar 17 18:51:36.456000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@efi_pstore comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:51:36.456000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@efi_pstore comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:51:36.456445 systemd[1]: modprobe@fuse.service: Deactivated successfully. Mar 17 18:51:36.456584 systemd[1]: Finished modprobe@fuse.service. Mar 17 18:51:36.458000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@fuse comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:51:36.458000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@fuse comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:51:36.458755 systemd[1]: modprobe@loop.service: Deactivated successfully. Mar 17 18:51:36.458896 systemd[1]: Finished modprobe@loop.service. Mar 17 18:51:36.461000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@loop comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:51:36.461000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@loop comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:51:36.461506 systemd[1]: Finished systemd-network-generator.service. Mar 17 18:51:36.463000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-network-generator comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:51:36.464052 systemd[1]: Finished systemd-remount-fs.service. Mar 17 18:51:36.466000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-remount-fs comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:51:36.466784 systemd[1]: Reached target network-pre.target. Mar 17 18:51:36.469917 systemd[1]: Mounting sys-fs-fuse-connections.mount... Mar 17 18:51:36.474265 systemd[1]: Mounting sys-kernel-config.mount... Mar 17 18:51:36.476485 systemd[1]: remount-root.service was skipped because of an unmet condition check (ConditionPathIsReadWrite=!/). Mar 17 18:51:36.492469 systemd[1]: Starting systemd-hwdb-update.service... Mar 17 18:51:36.496259 systemd[1]: Starting systemd-journal-flush.service... Mar 17 18:51:36.498884 systemd[1]: systemd-pstore.service was skipped because of an unmet condition check (ConditionDirectoryNotEmpty=/sys/fs/pstore). Mar 17 18:51:36.500577 systemd[1]: Starting systemd-random-seed.service... Mar 17 18:51:36.502613 systemd[1]: systemd-repart.service was skipped because no trigger condition checks were met. Mar 17 18:51:36.504131 systemd[1]: Starting systemd-sysusers.service... Mar 17 18:51:36.511308 systemd[1]: Finished systemd-modules-load.service. Mar 17 18:51:36.513000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-modules-load comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:51:36.513809 systemd[1]: Mounted sys-fs-fuse-connections.mount. Mar 17 18:51:36.516242 systemd[1]: Mounted sys-kernel-config.mount. Mar 17 18:51:36.519620 systemd[1]: Starting systemd-sysctl.service... Mar 17 18:51:36.542609 systemd[1]: Finished systemd-udev-trigger.service. Mar 17 18:51:36.545000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-udev-trigger comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:51:36.546453 systemd[1]: Starting systemd-udev-settle.service... Mar 17 18:51:36.553601 systemd[1]: Finished systemd-random-seed.service. Mar 17 18:51:36.556000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-random-seed comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:51:36.556277 systemd[1]: Reached target first-boot-complete.target. Mar 17 18:51:36.563825 systemd-journald[1116]: Time spent on flushing to /var/log/journal/a638420a48ab41c8a009ee299714c861 is 27.777ms for 1156 entries. Mar 17 18:51:36.563825 systemd-journald[1116]: System Journal (/var/log/journal/a638420a48ab41c8a009ee299714c861) is 8.0M, max 2.6G, 2.6G free. Mar 17 18:51:36.633647 systemd-journald[1116]: Received client request to flush runtime journal. Mar 17 18:51:36.626000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-sysctl comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:51:36.624606 systemd[1]: Finished systemd-sysctl.service. Mar 17 18:51:36.635808 udevadm[1158]: systemd-udev-settle.service is deprecated. Please fix lvm2-activation-early.service, lvm2-activation.service not to pull it in. Mar 17 18:51:36.634641 systemd[1]: Finished systemd-journal-flush.service. Mar 17 18:51:36.637000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-journal-flush comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:51:37.112000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-sysusers comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:51:37.109822 systemd[1]: Finished systemd-sysusers.service. Mar 17 18:51:37.114524 systemd[1]: Starting systemd-tmpfiles-setup-dev.service... Mar 17 18:51:37.417058 systemd[1]: Finished systemd-tmpfiles-setup-dev.service. Mar 17 18:51:37.420000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-tmpfiles-setup-dev comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:51:37.650240 systemd[1]: Finished systemd-hwdb-update.service. Mar 17 18:51:37.652000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-hwdb-update comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:51:37.653000 audit: BPF prog-id=18 op=LOAD Mar 17 18:51:37.653000 audit: BPF prog-id=19 op=LOAD Mar 17 18:51:37.653000 audit: BPF prog-id=7 op=UNLOAD Mar 17 18:51:37.653000 audit: BPF prog-id=8 op=UNLOAD Mar 17 18:51:37.654480 systemd[1]: Starting systemd-udevd.service... Mar 17 18:51:37.673006 systemd-udevd[1163]: Using default interface naming scheme 'v252'. Mar 17 18:51:37.842943 systemd[1]: Started systemd-udevd.service. Mar 17 18:51:37.845000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-udevd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:51:37.846000 audit: BPF prog-id=20 op=LOAD Mar 17 18:51:37.847945 systemd[1]: Starting systemd-networkd.service... Mar 17 18:51:37.883689 systemd[1]: Condition check resulted in dev-ttyS0.device being skipped. Mar 17 18:51:37.937166 kernel: mousedev: PS/2 mouse device common for all mice Mar 17 18:51:37.956098 kernel: hv_utils: Registering HyperV Utility Driver Mar 17 18:51:37.956188 kernel: hv_vmbus: registering driver hv_utils Mar 17 18:51:37.957000 audit: BPF prog-id=21 op=LOAD Mar 17 18:51:37.957000 audit: BPF prog-id=22 op=LOAD Mar 17 18:51:37.957000 audit: BPF prog-id=23 op=LOAD Mar 17 18:51:37.958508 systemd[1]: Starting systemd-userdbd.service... Mar 17 18:51:37.943000 audit[1164]: AVC avc: denied { confidentiality } for pid=1164 comm="(udev-worker)" lockdown_reason="use of tracefs" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=lockdown permissive=1 Mar 17 18:51:37.979475 kernel: hv_vmbus: registering driver hv_balloon Mar 17 18:51:37.979532 kernel: hv_vmbus: registering driver hyperv_fb Mar 17 18:51:37.992623 kernel: hv_balloon: Using Dynamic Memory protocol version 2.0 Mar 17 18:51:37.998414 kernel: hyperv_fb: Synthvid Version major 3, minor 5 Mar 17 18:51:37.998444 kernel: hyperv_fb: Screen resolution: 1024x768, Color depth: 32, Frame buffer size: 8388608 Mar 17 18:51:38.005345 kernel: Console: switching to colour dummy device 80x25 Mar 17 18:51:38.013567 kernel: Console: switching to colour frame buffer device 128x48 Mar 17 18:51:37.943000 audit[1164]: SYSCALL arch=c000003e syscall=175 success=yes exit=0 a0=56445e4bdcf0 a1=f884 a2=7f28bbd9bbc5 a3=5 items=12 ppid=1163 pid=1164 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="(udev-worker)" exe="/usr/bin/udevadm" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:51:37.943000 audit: CWD cwd="/" Mar 17 18:51:37.943000 audit: PATH item=0 name=(null) inode=235 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Mar 17 18:51:37.943000 audit: PATH item=1 name=(null) inode=13076 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Mar 17 18:51:37.943000 audit: PATH item=2 name=(null) inode=13076 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Mar 17 18:51:37.943000 audit: PATH item=3 name=(null) inode=13077 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Mar 17 18:51:37.943000 audit: PATH item=4 name=(null) inode=13076 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Mar 17 18:51:37.943000 audit: PATH item=5 name=(null) inode=13078 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Mar 17 18:51:37.943000 audit: PATH item=6 name=(null) inode=13076 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Mar 17 18:51:37.943000 audit: PATH item=7 name=(null) inode=13079 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Mar 17 18:51:37.943000 audit: PATH item=8 name=(null) inode=13076 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Mar 17 18:51:37.943000 audit: PATH item=9 name=(null) inode=13080 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Mar 17 18:51:37.943000 audit: PATH item=10 name=(null) inode=13076 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Mar 17 18:51:37.943000 audit: PATH item=11 name=(null) inode=13081 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Mar 17 18:51:37.943000 audit: PROCTITLE proctitle="(udev-worker)" Mar 17 18:51:38.025079 systemd[1]: Started systemd-userdbd.service. Mar 17 18:51:38.027000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-userdbd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:51:38.070198 kernel: hv_utils: Heartbeat IC version 3.0 Mar 17 18:51:38.070308 kernel: hv_utils: Shutdown IC version 3.2 Mar 17 18:51:38.070335 kernel: hv_utils: TimeSync IC version 4.0 Mar 17 18:51:38.631836 systemd[1]: Found device dev-disk-by\x2dlabel-OEM.device. Mar 17 18:51:38.643285 kernel: KVM: vmx: using Hyper-V Enlightened VMCS Mar 17 18:51:38.705620 systemd[1]: Finished systemd-udev-settle.service. Mar 17 18:51:38.708000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-udev-settle comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:51:38.710503 systemd[1]: Starting lvm2-activation-early.service... Mar 17 18:51:38.950060 systemd-networkd[1175]: lo: Link UP Mar 17 18:51:38.950072 systemd-networkd[1175]: lo: Gained carrier Mar 17 18:51:38.950746 systemd-networkd[1175]: Enumeration completed Mar 17 18:51:38.950890 systemd[1]: Started systemd-networkd.service. Mar 17 18:51:38.953000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-networkd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:51:38.955067 systemd[1]: Starting systemd-networkd-wait-online.service... Mar 17 18:51:38.983909 systemd-networkd[1175]: eth0: Configuring with /usr/lib/systemd/network/zz-default.network. Mar 17 18:51:39.038285 kernel: mlx5_core 99d0:00:02.0 enP39376s1: Link up Mar 17 18:51:39.061286 kernel: hv_netvsc 7c1e5235-ff78-7c1e-5235-ff787c1e5235 eth0: Data path switched to VF: enP39376s1 Mar 17 18:51:39.062058 systemd-networkd[1175]: enP39376s1: Link UP Mar 17 18:51:39.062295 systemd-networkd[1175]: eth0: Link UP Mar 17 18:51:39.062308 systemd-networkd[1175]: eth0: Gained carrier Mar 17 18:51:39.067600 systemd-networkd[1175]: enP39376s1: Gained carrier Mar 17 18:51:39.072860 lvm[1239]: WARNING: Failed to connect to lvmetad. Falling back to device scanning. Mar 17 18:51:39.093346 systemd[1]: Finished lvm2-activation-early.service. Mar 17 18:51:39.095000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=lvm2-activation-early comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:51:39.095174 systemd-networkd[1175]: eth0: DHCPv4 address 10.200.8.35/24, gateway 10.200.8.1 acquired from 168.63.129.16 Mar 17 18:51:39.096083 systemd[1]: Reached target cryptsetup.target. Mar 17 18:51:39.099512 systemd[1]: Starting lvm2-activation.service... Mar 17 18:51:39.105545 lvm[1241]: WARNING: Failed to connect to lvmetad. Falling back to device scanning. Mar 17 18:51:39.125182 systemd[1]: Finished lvm2-activation.service. Mar 17 18:51:39.127000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=lvm2-activation comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:51:39.127591 systemd[1]: Reached target local-fs-pre.target. Mar 17 18:51:39.129826 systemd[1]: var-lib-machines.mount was skipped because of an unmet condition check (ConditionPathExists=/var/lib/machines.raw). Mar 17 18:51:39.129857 systemd[1]: Reached target local-fs.target. Mar 17 18:51:39.131914 systemd[1]: Reached target machines.target. Mar 17 18:51:39.135087 systemd[1]: Starting ldconfig.service... Mar 17 18:51:39.137316 systemd[1]: systemd-binfmt.service was skipped because no trigger condition checks were met. Mar 17 18:51:39.137425 systemd[1]: systemd-boot-system-token.service was skipped because of an unmet condition check (ConditionPathExists=/sys/firmware/efi/efivars/LoaderFeatures-4a67b082-0a4c-41cf-b6c7-440b29bb8c4f). Mar 17 18:51:39.138540 systemd[1]: Starting systemd-boot-update.service... Mar 17 18:51:39.141669 systemd[1]: Starting systemd-fsck@dev-disk-by\x2dlabel-OEM.service... Mar 17 18:51:39.145411 systemd[1]: Starting systemd-machine-id-commit.service... Mar 17 18:51:39.148851 systemd[1]: Starting systemd-sysext.service... Mar 17 18:51:39.170807 systemd[1]: boot.automount: Got automount request for /boot, triggered by 1243 (bootctl) Mar 17 18:51:39.172120 systemd[1]: Starting systemd-fsck@dev-disk-by\x2dlabel-EFI\x2dSYSTEM.service... Mar 17 18:51:39.179397 systemd[1]: Finished systemd-fsck@dev-disk-by\x2dlabel-OEM.service. Mar 17 18:51:39.182000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-fsck@dev-disk-by\x2dlabel-OEM comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:51:39.218771 systemd[1]: etc-machine\x2did.mount: Deactivated successfully. Mar 17 18:51:39.219399 systemd[1]: Finished systemd-machine-id-commit.service. Mar 17 18:51:39.220000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-machine-id-commit comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:51:39.222749 systemd[1]: Unmounting usr-share-oem.mount... Mar 17 18:51:39.241743 systemd[1]: usr-share-oem.mount: Deactivated successfully. Mar 17 18:51:39.241934 systemd[1]: Unmounted usr-share-oem.mount. Mar 17 18:51:39.270296 kernel: loop0: detected capacity change from 0 to 218376 Mar 17 18:51:39.305286 kernel: squashfs: version 4.0 (2009/01/31) Phillip Lougher Mar 17 18:51:39.321280 kernel: loop1: detected capacity change from 0 to 218376 Mar 17 18:51:39.347348 (sd-sysext)[1255]: Using extensions 'kubernetes'. Mar 17 18:51:39.347871 (sd-sysext)[1255]: Merged extensions into '/usr'. Mar 17 18:51:39.365162 systemd[1]: proc-xen.mount was skipped because of an unmet condition check (ConditionVirtualization=xen). Mar 17 18:51:39.366626 systemd[1]: Mounting usr-share-oem.mount... Mar 17 18:51:39.368054 systemd[1]: ignition-delete-config.service was skipped because no trigger condition checks were met. Mar 17 18:51:39.371740 systemd[1]: Starting modprobe@dm_mod.service... Mar 17 18:51:39.374350 systemd[1]: Starting modprobe@efi_pstore.service... Mar 17 18:51:39.378313 systemd[1]: Starting modprobe@loop.service... Mar 17 18:51:39.379601 systemd[1]: systemd-binfmt.service was skipped because no trigger condition checks were met. Mar 17 18:51:39.379715 systemd[1]: systemd-boot-system-token.service was skipped because of an unmet condition check (ConditionPathExists=/sys/firmware/efi/efivars/LoaderFeatures-4a67b082-0a4c-41cf-b6c7-440b29bb8c4f). Mar 17 18:51:39.379825 systemd[1]: xenserver-pv-version.service was skipped because of an unmet condition check (ConditionVirtualization=xen). Mar 17 18:51:39.381150 systemd[1]: modprobe@dm_mod.service: Deactivated successfully. Mar 17 18:51:39.381576 systemd[1]: Finished modprobe@dm_mod.service. Mar 17 18:51:39.382000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@dm_mod comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:51:39.382000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@dm_mod comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:51:39.383000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@efi_pstore comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:51:39.383000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@efi_pstore comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:51:39.384000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@loop comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:51:39.384000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@loop comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:51:39.383125 systemd[1]: modprobe@efi_pstore.service: Deactivated successfully. Mar 17 18:51:39.383231 systemd[1]: Finished modprobe@efi_pstore.service. Mar 17 18:51:39.383975 systemd[1]: modprobe@loop.service: Deactivated successfully. Mar 17 18:51:39.384075 systemd[1]: Finished modprobe@loop.service. Mar 17 18:51:39.385015 systemd[1]: systemd-pstore.service was skipped because of an unmet condition check (ConditionDirectoryNotEmpty=/sys/fs/pstore). Mar 17 18:51:39.385163 systemd[1]: systemd-repart.service was skipped because no trigger condition checks were met. Mar 17 18:51:39.390477 systemd[1]: Mounted usr-share-oem.mount. Mar 17 18:51:39.393711 systemd[1]: Finished systemd-sysext.service. Mar 17 18:51:39.395000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-sysext comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:51:39.397137 systemd[1]: Starting ensure-sysext.service... Mar 17 18:51:39.400228 systemd[1]: Starting systemd-tmpfiles-setup.service... Mar 17 18:51:39.407258 systemd[1]: Reloading. Mar 17 18:51:39.432878 systemd-tmpfiles[1262]: /usr/lib/tmpfiles.d/legacy.conf:13: Duplicate line for path "/run/lock", ignoring. Mar 17 18:51:39.455059 systemd-tmpfiles[1262]: /usr/lib/tmpfiles.d/provision.conf:20: Duplicate line for path "/root", ignoring. Mar 17 18:51:39.470591 /usr/lib/systemd/system-generators/torcx-generator[1281]: time="2025-03-17T18:51:39Z" level=debug msg="common configuration parsed" base_dir=/var/lib/torcx/ conf_dir=/etc/torcx/ run_dir=/run/torcx/ store_paths="[/usr/share/torcx/store /usr/share/oem/torcx/store/3510.3.7 /usr/share/oem/torcx/store /var/lib/torcx/store/3510.3.7 /var/lib/torcx/store]" Mar 17 18:51:39.470630 /usr/lib/systemd/system-generators/torcx-generator[1281]: time="2025-03-17T18:51:39Z" level=info msg="torcx already run" Mar 17 18:51:39.472414 systemd-tmpfiles[1262]: /usr/lib/tmpfiles.d/systemd.conf:29: Duplicate line for path "/var/lib/systemd", ignoring. Mar 17 18:51:39.567299 systemd[1]: /usr/lib/systemd/system/locksmithd.service:8: Unit uses CPUShares=; please use CPUWeight= instead. Support for CPUShares= will be removed soon. Mar 17 18:51:39.567320 systemd[1]: /usr/lib/systemd/system/locksmithd.service:9: Unit uses MemoryLimit=; please use MemoryMax= instead. Support for MemoryLimit= will be removed soon. Mar 17 18:51:39.583671 systemd[1]: /run/systemd/system/docker.socket:8: ListenStream= references a path below legacy directory /var/run/, updating /var/run/docker.sock → /run/docker.sock; please update the unit file accordingly. Mar 17 18:51:39.650000 audit: BPF prog-id=24 op=LOAD Mar 17 18:51:39.650000 audit: BPF prog-id=21 op=UNLOAD Mar 17 18:51:39.650000 audit: BPF prog-id=25 op=LOAD Mar 17 18:51:39.650000 audit: BPF prog-id=26 op=LOAD Mar 17 18:51:39.650000 audit: BPF prog-id=22 op=UNLOAD Mar 17 18:51:39.650000 audit: BPF prog-id=23 op=UNLOAD Mar 17 18:51:39.651000 audit: BPF prog-id=27 op=LOAD Mar 17 18:51:39.651000 audit: BPF prog-id=15 op=UNLOAD Mar 17 18:51:39.651000 audit: BPF prog-id=28 op=LOAD Mar 17 18:51:39.651000 audit: BPF prog-id=29 op=LOAD Mar 17 18:51:39.651000 audit: BPF prog-id=16 op=UNLOAD Mar 17 18:51:39.651000 audit: BPF prog-id=17 op=UNLOAD Mar 17 18:51:39.653000 audit: BPF prog-id=30 op=LOAD Mar 17 18:51:39.653000 audit: BPF prog-id=31 op=LOAD Mar 17 18:51:39.653000 audit: BPF prog-id=18 op=UNLOAD Mar 17 18:51:39.653000 audit: BPF prog-id=19 op=UNLOAD Mar 17 18:51:39.654000 audit: BPF prog-id=32 op=LOAD Mar 17 18:51:39.654000 audit: BPF prog-id=20 op=UNLOAD Mar 17 18:51:39.668434 systemd[1]: proc-xen.mount was skipped because of an unmet condition check (ConditionVirtualization=xen). Mar 17 18:51:39.668694 systemd[1]: ignition-delete-config.service was skipped because no trigger condition checks were met. Mar 17 18:51:39.679000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@dm_mod comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:51:39.679000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@dm_mod comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:51:39.683000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@loop comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:51:39.683000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@loop comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:51:39.669949 systemd[1]: Starting modprobe@dm_mod.service... Mar 17 18:51:39.672671 systemd[1]: Starting modprobe@efi_pstore.service... Mar 17 18:51:39.675564 systemd[1]: Starting modprobe@loop.service... Mar 17 18:51:39.676815 systemd[1]: systemd-binfmt.service was skipped because no trigger condition checks were met. Mar 17 18:51:39.677015 systemd[1]: systemd-boot-system-token.service was skipped because of an unmet condition check (ConditionPathExists=/sys/firmware/efi/efivars/LoaderFeatures-4a67b082-0a4c-41cf-b6c7-440b29bb8c4f). Mar 17 18:51:39.677193 systemd[1]: xenserver-pv-version.service was skipped because of an unmet condition check (ConditionVirtualization=xen). Mar 17 18:51:39.678538 systemd[1]: modprobe@dm_mod.service: Deactivated successfully. Mar 17 18:51:39.678696 systemd[1]: Finished modprobe@dm_mod.service. Mar 17 18:51:39.682490 systemd[1]: modprobe@loop.service: Deactivated successfully. Mar 17 18:51:39.682642 systemd[1]: Finished modprobe@loop.service. Mar 17 18:51:39.687918 systemd[1]: modprobe@efi_pstore.service: Deactivated successfully. Mar 17 18:51:39.688060 systemd[1]: Finished modprobe@efi_pstore.service. Mar 17 18:51:39.688000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@efi_pstore comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:51:39.688000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@efi_pstore comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:51:39.689476 systemd[1]: proc-xen.mount was skipped because of an unmet condition check (ConditionVirtualization=xen). Mar 17 18:51:39.689754 systemd[1]: ignition-delete-config.service was skipped because no trigger condition checks were met. Mar 17 18:51:39.691034 systemd[1]: Starting modprobe@dm_mod.service... Mar 17 18:51:39.693962 systemd[1]: Starting modprobe@drm.service... Mar 17 18:51:39.696189 systemd[1]: Starting modprobe@loop.service... Mar 17 18:51:39.697337 systemd[1]: systemd-binfmt.service was skipped because no trigger condition checks were met. Mar 17 18:51:39.697479 systemd[1]: systemd-boot-system-token.service was skipped because of an unmet condition check (ConditionPathExists=/sys/firmware/efi/efivars/LoaderFeatures-4a67b082-0a4c-41cf-b6c7-440b29bb8c4f). Mar 17 18:51:39.697617 systemd[1]: systemd-pstore.service was skipped because of an unmet condition check (ConditionDirectoryNotEmpty=/sys/fs/pstore). Mar 17 18:51:39.697766 systemd[1]: xenserver-pv-version.service was skipped because of an unmet condition check (ConditionVirtualization=xen). Mar 17 18:51:39.700226 systemd[1]: Finished ensure-sysext.service. Mar 17 18:51:39.701000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=ensure-sysext comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:51:39.702000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@dm_mod comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:51:39.702000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@dm_mod comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:51:39.702000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@drm comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:51:39.702000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@drm comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:51:39.701834 systemd[1]: modprobe@dm_mod.service: Deactivated successfully. Mar 17 18:51:39.701951 systemd[1]: Finished modprobe@dm_mod.service. Mar 17 18:51:39.702651 systemd[1]: modprobe@drm.service: Deactivated successfully. Mar 17 18:51:39.702751 systemd[1]: Finished modprobe@drm.service. Mar 17 18:51:39.708787 systemd[1]: modprobe@loop.service: Deactivated successfully. Mar 17 18:51:39.708950 systemd[1]: Finished modprobe@loop.service. Mar 17 18:51:39.709000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@loop comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:51:39.709000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@loop comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:51:39.710194 systemd[1]: systemd-repart.service was skipped because no trigger condition checks were met. Mar 17 18:51:39.800285 systemd-fsck[1250]: fsck.fat 4.2 (2021-01-31) Mar 17 18:51:39.800285 systemd-fsck[1250]: /dev/sda1: 789 files, 119299/258078 clusters Mar 17 18:51:39.802250 systemd[1]: Finished systemd-fsck@dev-disk-by\x2dlabel-EFI\x2dSYSTEM.service. Mar 17 18:51:39.805000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-fsck@dev-disk-by\x2dlabel-EFI\x2dSYSTEM comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:51:39.807665 systemd[1]: Mounting boot.mount... Mar 17 18:51:39.823516 systemd[1]: Mounted boot.mount. Mar 17 18:51:39.863117 systemd[1]: Finished systemd-boot-update.service. Mar 17 18:51:39.865000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-boot-update comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:51:40.032208 systemd[1]: Finished systemd-tmpfiles-setup.service. Mar 17 18:51:40.035000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-tmpfiles-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:51:40.037504 systemd[1]: Starting audit-rules.service... Mar 17 18:51:40.041152 systemd[1]: Starting clean-ca-certificates.service... Mar 17 18:51:40.045221 systemd[1]: Starting systemd-journal-catalog-update.service... Mar 17 18:51:40.049000 audit: BPF prog-id=33 op=LOAD Mar 17 18:51:40.050498 systemd[1]: Starting systemd-resolved.service... Mar 17 18:51:40.053000 audit: BPF prog-id=34 op=LOAD Mar 17 18:51:40.054914 systemd[1]: Starting systemd-timesyncd.service... Mar 17 18:51:40.058223 systemd[1]: Starting systemd-update-utmp.service... Mar 17 18:51:40.089000 audit[1360]: SYSTEM_BOOT pid=1360 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg=' comm="systemd-update-utmp" exe="/usr/lib/systemd/systemd-update-utmp" hostname=? addr=? terminal=? res=success' Mar 17 18:51:40.096000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-update-utmp comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:51:40.093662 systemd[1]: Finished systemd-update-utmp.service. Mar 17 18:51:40.135000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=clean-ca-certificates comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:51:40.132888 systemd[1]: Finished clean-ca-certificates.service. Mar 17 18:51:40.135994 systemd[1]: update-ca-certificates.service was skipped because of an unmet condition check (ConditionPathIsSymbolicLink=!/etc/ssl/certs/ca-certificates.crt). Mar 17 18:51:40.165401 systemd[1]: Started systemd-timesyncd.service. Mar 17 18:51:40.168608 systemd[1]: Reached target time-set.target. Mar 17 18:51:40.168000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-timesyncd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:51:40.258638 systemd-resolved[1358]: Positive Trust Anchors: Mar 17 18:51:40.258654 systemd-resolved[1358]: . IN DS 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d Mar 17 18:51:40.258692 systemd-resolved[1358]: Negative trust anchors: home.arpa 10.in-addr.arpa 16.172.in-addr.arpa 17.172.in-addr.arpa 18.172.in-addr.arpa 19.172.in-addr.arpa 20.172.in-addr.arpa 21.172.in-addr.arpa 22.172.in-addr.arpa 23.172.in-addr.arpa 24.172.in-addr.arpa 25.172.in-addr.arpa 26.172.in-addr.arpa 27.172.in-addr.arpa 28.172.in-addr.arpa 29.172.in-addr.arpa 30.172.in-addr.arpa 31.172.in-addr.arpa 168.192.in-addr.arpa d.f.ip6.arpa corp home internal intranet lan local private test Mar 17 18:51:40.298786 systemd-timesyncd[1359]: Contacted time server 89.234.64.77:123 (0.flatcar.pool.ntp.org). Mar 17 18:51:40.298916 systemd-timesyncd[1359]: Initial clock synchronization to Mon 2025-03-17 18:51:40.298851 UTC. Mar 17 18:51:40.305996 systemd-resolved[1358]: Using system hostname 'ci-3510.3.7-a-9ed44aff31'. Mar 17 18:51:40.307482 systemd[1]: Started systemd-resolved.service. Mar 17 18:51:40.309000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-resolved comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:51:40.310203 systemd[1]: Reached target network.target. Mar 17 18:51:40.312593 systemd[1]: Reached target nss-lookup.target. Mar 17 18:51:40.371352 systemd[1]: Finished systemd-journal-catalog-update.service. Mar 17 18:51:40.371000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-journal-catalog-update comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:51:40.385000 audit: CONFIG_CHANGE auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op=add_rule key=(null) list=5 res=1 Mar 17 18:51:40.385000 audit[1376]: SYSCALL arch=c000003e syscall=44 success=yes exit=1056 a0=3 a1=7ffc8e3df2d0 a2=420 a3=0 items=0 ppid=1355 pid=1376 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auditctl" exe="/usr/sbin/auditctl" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:51:40.385000 audit: PROCTITLE proctitle=2F7362696E2F617564697463746C002D52002F6574632F61756469742F61756469742E72756C6573 Mar 17 18:51:40.385645 augenrules[1376]: No rules Mar 17 18:51:40.386075 systemd[1]: Finished audit-rules.service. Mar 17 18:51:40.653406 systemd-networkd[1175]: eth0: Gained IPv6LL Mar 17 18:51:40.655774 systemd[1]: Finished systemd-networkd-wait-online.service. Mar 17 18:51:40.658919 systemd[1]: Reached target network-online.target. Mar 17 18:51:46.552713 ldconfig[1242]: /sbin/ldconfig: /lib/ld.so.conf is not an ELF file - it has the wrong magic bytes at the start. Mar 17 18:51:46.561646 systemd[1]: Finished ldconfig.service. Mar 17 18:51:46.566642 systemd[1]: Starting systemd-update-done.service... Mar 17 18:51:46.574234 systemd[1]: Finished systemd-update-done.service. Mar 17 18:51:46.576942 systemd[1]: Reached target sysinit.target. Mar 17 18:51:46.579246 systemd[1]: Started motdgen.path. Mar 17 18:51:46.581615 systemd[1]: Started user-cloudinit@var-lib-flatcar\x2dinstall-user_data.path. Mar 17 18:51:46.585055 systemd[1]: Started logrotate.timer. Mar 17 18:51:46.587349 systemd[1]: Started mdadm.timer. Mar 17 18:51:46.589412 systemd[1]: Started systemd-tmpfiles-clean.timer. Mar 17 18:51:46.591906 systemd[1]: update-engine-stub.timer was skipped because of an unmet condition check (ConditionPathExists=/usr/.noupdate). Mar 17 18:51:46.591951 systemd[1]: Reached target paths.target. Mar 17 18:51:46.594164 systemd[1]: Reached target timers.target. Mar 17 18:51:46.596500 systemd[1]: Listening on dbus.socket. Mar 17 18:51:46.599602 systemd[1]: Starting docker.socket... Mar 17 18:51:46.616838 systemd[1]: Listening on sshd.socket. Mar 17 18:51:46.619205 systemd[1]: systemd-pcrphase-sysinit.service was skipped because of an unmet condition check (ConditionPathExists=/sys/firmware/efi/efivars/StubPcrKernelImage-4a67b082-0a4c-41cf-b6c7-440b29bb8c4f). Mar 17 18:51:46.619702 systemd[1]: Listening on docker.socket. Mar 17 18:51:46.621752 systemd[1]: Reached target sockets.target. Mar 17 18:51:46.623860 systemd[1]: Reached target basic.target. Mar 17 18:51:46.625820 systemd[1]: addon-config@usr-share-oem.service was skipped because no trigger condition checks were met. Mar 17 18:51:46.625848 systemd[1]: addon-run@usr-share-oem.service was skipped because no trigger condition checks were met. Mar 17 18:51:46.626850 systemd[1]: Starting containerd.service... Mar 17 18:51:46.630112 systemd[1]: Starting dbus.service... Mar 17 18:51:46.632786 systemd[1]: Starting enable-oem-cloudinit.service... Mar 17 18:51:46.636377 systemd[1]: Starting extend-filesystems.service... Mar 17 18:51:46.639114 systemd[1]: flatcar-setup-environment.service was skipped because of an unmet condition check (ConditionPathExists=/usr/share/oem/bin/flatcar-setup-environment). Mar 17 18:51:46.640725 systemd[1]: Starting kubelet.service... Mar 17 18:51:46.644674 systemd[1]: Starting motdgen.service... Mar 17 18:51:46.651865 systemd[1]: Started nvidia.service. Mar 17 18:51:46.655889 systemd[1]: Starting prepare-helm.service... Mar 17 18:51:46.660070 systemd[1]: Starting ssh-key-proc-cmdline.service... Mar 17 18:51:46.667508 systemd[1]: Starting sshd-keygen.service... Mar 17 18:51:46.673396 systemd[1]: Starting systemd-logind.service... Mar 17 18:51:46.675986 systemd[1]: systemd-pcrphase.service was skipped because of an unmet condition check (ConditionPathExists=/sys/firmware/efi/efivars/StubPcrKernelImage-4a67b082-0a4c-41cf-b6c7-440b29bb8c4f). Mar 17 18:51:46.676111 systemd[1]: tcsd.service was skipped because of an unmet condition check (ConditionPathExists=/dev/tpm0). Mar 17 18:51:46.676884 systemd[1]: cgroup compatibility translation between legacy and unified hierarchy settings activated. See cgroup-compat debug messages for details. Mar 17 18:51:46.678144 systemd[1]: Starting update-engine.service... Mar 17 18:51:46.681672 systemd[1]: Starting update-ssh-keys-after-ignition.service... Mar 17 18:51:46.708351 jq[1386]: false Mar 17 18:51:46.692027 systemd[1]: ssh-key-proc-cmdline.service: Deactivated successfully. Mar 17 18:51:46.708614 jq[1401]: true Mar 17 18:51:46.692295 systemd[1]: Finished ssh-key-proc-cmdline.service. Mar 17 18:51:46.705643 systemd[1]: enable-oem-cloudinit.service: Skipped due to 'exec-condition'. Mar 17 18:51:46.705826 systemd[1]: Condition check resulted in enable-oem-cloudinit.service being skipped. Mar 17 18:51:46.728522 jq[1408]: true Mar 17 18:51:46.749606 systemd[1]: motdgen.service: Deactivated successfully. Mar 17 18:51:46.749797 systemd[1]: Finished motdgen.service. Mar 17 18:51:46.759221 extend-filesystems[1387]: Found loop1 Mar 17 18:51:46.759221 extend-filesystems[1387]: Found sda Mar 17 18:51:46.759221 extend-filesystems[1387]: Found sda1 Mar 17 18:51:46.759221 extend-filesystems[1387]: Found sda2 Mar 17 18:51:46.759221 extend-filesystems[1387]: Found sda3 Mar 17 18:51:46.759221 extend-filesystems[1387]: Found usr Mar 17 18:51:46.759221 extend-filesystems[1387]: Found sda4 Mar 17 18:51:46.759221 extend-filesystems[1387]: Found sda6 Mar 17 18:51:46.759221 extend-filesystems[1387]: Found sda7 Mar 17 18:51:46.759221 extend-filesystems[1387]: Found sda9 Mar 17 18:51:46.759221 extend-filesystems[1387]: Checking size of /dev/sda9 Mar 17 18:51:46.803508 tar[1405]: linux-amd64/LICENSE Mar 17 18:51:46.803508 tar[1405]: linux-amd64/helm Mar 17 18:51:46.855340 env[1409]: time="2025-03-17T18:51:46.855291246Z" level=info msg="starting containerd" revision=92b3a9d6f1b3bcc6dc74875cfdea653fe39f09c2 version=1.6.16 Mar 17 18:51:46.874818 systemd-logind[1398]: Watching system buttons on /dev/input/event0 (AT Translated Set 2 keyboard) Mar 17 18:51:46.881810 systemd-logind[1398]: New seat seat0. Mar 17 18:51:46.901768 extend-filesystems[1387]: Old size kept for /dev/sda9 Mar 17 18:51:46.901768 extend-filesystems[1387]: Found sr0 Mar 17 18:51:46.898505 systemd[1]: extend-filesystems.service: Deactivated successfully. Mar 17 18:51:46.898694 systemd[1]: Finished extend-filesystems.service. Mar 17 18:51:46.951315 bash[1432]: Updated "/home/core/.ssh/authorized_keys" Mar 17 18:51:46.952035 systemd[1]: Finished update-ssh-keys-after-ignition.service. Mar 17 18:51:46.969422 env[1409]: time="2025-03-17T18:51:46.969374483Z" level=info msg="loading plugin \"io.containerd.content.v1.content\"..." type=io.containerd.content.v1 Mar 17 18:51:46.972452 env[1409]: time="2025-03-17T18:51:46.972424203Z" level=info msg="loading plugin \"io.containerd.snapshotter.v1.aufs\"..." type=io.containerd.snapshotter.v1 Mar 17 18:51:46.974068 env[1409]: time="2025-03-17T18:51:46.974034313Z" level=info msg="skip loading plugin \"io.containerd.snapshotter.v1.aufs\"..." error="aufs is not supported (modprobe aufs failed: exit status 1 \"modprobe: FATAL: Module aufs not found in directory /lib/modules/5.15.179-flatcar\\n\"): skip plugin" type=io.containerd.snapshotter.v1 Mar 17 18:51:46.979325 env[1409]: time="2025-03-17T18:51:46.979298747Z" level=info msg="loading plugin \"io.containerd.snapshotter.v1.btrfs\"..." type=io.containerd.snapshotter.v1 Mar 17 18:51:46.979693 env[1409]: time="2025-03-17T18:51:46.979668650Z" level=info msg="skip loading plugin \"io.containerd.snapshotter.v1.btrfs\"..." error="path /var/lib/containerd/io.containerd.snapshotter.v1.btrfs (ext4) must be a btrfs filesystem to be used with the btrfs snapshotter: skip plugin" type=io.containerd.snapshotter.v1 Mar 17 18:51:46.979792 env[1409]: time="2025-03-17T18:51:46.979772950Z" level=info msg="loading plugin \"io.containerd.snapshotter.v1.devmapper\"..." type=io.containerd.snapshotter.v1 Mar 17 18:51:46.979877 env[1409]: time="2025-03-17T18:51:46.979858951Z" level=warning msg="failed to load plugin io.containerd.snapshotter.v1.devmapper" error="devmapper not configured" Mar 17 18:51:46.979955 env[1409]: time="2025-03-17T18:51:46.979941751Z" level=info msg="loading plugin \"io.containerd.snapshotter.v1.native\"..." type=io.containerd.snapshotter.v1 Mar 17 18:51:46.980121 env[1409]: time="2025-03-17T18:51:46.980102052Z" level=info msg="loading plugin \"io.containerd.snapshotter.v1.overlayfs\"..." type=io.containerd.snapshotter.v1 Mar 17 18:51:46.980505 env[1409]: time="2025-03-17T18:51:46.980481355Z" level=info msg="loading plugin \"io.containerd.snapshotter.v1.zfs\"..." type=io.containerd.snapshotter.v1 Mar 17 18:51:46.980799 env[1409]: time="2025-03-17T18:51:46.980771357Z" level=info msg="skip loading plugin \"io.containerd.snapshotter.v1.zfs\"..." error="path /var/lib/containerd/io.containerd.snapshotter.v1.zfs must be a zfs filesystem to be used with the zfs snapshotter: skip plugin" type=io.containerd.snapshotter.v1 Mar 17 18:51:46.981218 env[1409]: time="2025-03-17T18:51:46.981193059Z" level=info msg="loading plugin \"io.containerd.metadata.v1.bolt\"..." type=io.containerd.metadata.v1 Mar 17 18:51:46.981404 env[1409]: time="2025-03-17T18:51:46.981382261Z" level=warning msg="could not use snapshotter devmapper in metadata plugin" error="devmapper not configured" Mar 17 18:51:46.981855 env[1409]: time="2025-03-17T18:51:46.981832163Z" level=info msg="metadata content store policy set" policy=shared Mar 17 18:51:46.986951 dbus-daemon[1385]: [system] SELinux support is enabled Mar 17 18:51:46.987116 systemd[1]: Started dbus.service. Mar 17 18:51:46.992511 systemd[1]: system-cloudinit@usr-share-oem-cloud\x2dconfig.yml.service was skipped because of an unmet condition check (ConditionFileNotEmpty=/usr/share/oem/cloud-config.yml). Mar 17 18:51:46.992539 systemd[1]: Reached target system-config.target. Mar 17 18:51:46.995089 systemd[1]: user-cloudinit-proc-cmdline.service was skipped because of an unmet condition check (ConditionKernelCommandLine=cloud-config-url). Mar 17 18:51:46.995110 systemd[1]: Reached target user-config.target. Mar 17 18:51:47.000696 systemd[1]: Started systemd-logind.service. Mar 17 18:51:47.003955 dbus-daemon[1385]: [system] Successfully activated service 'org.freedesktop.systemd1' Mar 17 18:51:47.012058 env[1409]: time="2025-03-17T18:51:47.012027254Z" level=info msg="loading plugin \"io.containerd.differ.v1.walking\"..." type=io.containerd.differ.v1 Mar 17 18:51:47.012141 env[1409]: time="2025-03-17T18:51:47.012067554Z" level=info msg="loading plugin \"io.containerd.event.v1.exchange\"..." type=io.containerd.event.v1 Mar 17 18:51:47.012141 env[1409]: time="2025-03-17T18:51:47.012085254Z" level=info msg="loading plugin \"io.containerd.gc.v1.scheduler\"..." type=io.containerd.gc.v1 Mar 17 18:51:47.012233 env[1409]: time="2025-03-17T18:51:47.012138055Z" level=info msg="loading plugin \"io.containerd.service.v1.introspection-service\"..." type=io.containerd.service.v1 Mar 17 18:51:47.012233 env[1409]: time="2025-03-17T18:51:47.012159655Z" level=info msg="loading plugin \"io.containerd.service.v1.containers-service\"..." type=io.containerd.service.v1 Mar 17 18:51:47.012233 env[1409]: time="2025-03-17T18:51:47.012220255Z" level=info msg="loading plugin \"io.containerd.service.v1.content-service\"..." type=io.containerd.service.v1 Mar 17 18:51:47.012364 env[1409]: time="2025-03-17T18:51:47.012254855Z" level=info msg="loading plugin \"io.containerd.service.v1.diff-service\"..." type=io.containerd.service.v1 Mar 17 18:51:47.012364 env[1409]: time="2025-03-17T18:51:47.012291156Z" level=info msg="loading plugin \"io.containerd.service.v1.images-service\"..." type=io.containerd.service.v1 Mar 17 18:51:47.012364 env[1409]: time="2025-03-17T18:51:47.012311056Z" level=info msg="loading plugin \"io.containerd.service.v1.leases-service\"..." type=io.containerd.service.v1 Mar 17 18:51:47.012364 env[1409]: time="2025-03-17T18:51:47.012330456Z" level=info msg="loading plugin \"io.containerd.service.v1.namespaces-service\"..." type=io.containerd.service.v1 Mar 17 18:51:47.012364 env[1409]: time="2025-03-17T18:51:47.012347956Z" level=info msg="loading plugin \"io.containerd.service.v1.snapshots-service\"..." type=io.containerd.service.v1 Mar 17 18:51:47.012527 env[1409]: time="2025-03-17T18:51:47.012365056Z" level=info msg="loading plugin \"io.containerd.runtime.v1.linux\"..." type=io.containerd.runtime.v1 Mar 17 18:51:47.012527 env[1409]: time="2025-03-17T18:51:47.012481057Z" level=info msg="loading plugin \"io.containerd.runtime.v2.task\"..." type=io.containerd.runtime.v2 Mar 17 18:51:47.012603 env[1409]: time="2025-03-17T18:51:47.012573357Z" level=info msg="loading plugin \"io.containerd.monitor.v1.cgroups\"..." type=io.containerd.monitor.v1 Mar 17 18:51:47.012952 env[1409]: time="2025-03-17T18:51:47.012927759Z" level=info msg="loading plugin \"io.containerd.service.v1.tasks-service\"..." type=io.containerd.service.v1 Mar 17 18:51:47.013015 env[1409]: time="2025-03-17T18:51:47.012968960Z" level=info msg="loading plugin \"io.containerd.grpc.v1.introspection\"..." type=io.containerd.grpc.v1 Mar 17 18:51:47.013015 env[1409]: time="2025-03-17T18:51:47.012988660Z" level=info msg="loading plugin \"io.containerd.internal.v1.restart\"..." type=io.containerd.internal.v1 Mar 17 18:51:47.013091 env[1409]: time="2025-03-17T18:51:47.013048460Z" level=info msg="loading plugin \"io.containerd.grpc.v1.containers\"..." type=io.containerd.grpc.v1 Mar 17 18:51:47.013091 env[1409]: time="2025-03-17T18:51:47.013067560Z" level=info msg="loading plugin \"io.containerd.grpc.v1.content\"..." type=io.containerd.grpc.v1 Mar 17 18:51:47.013091 env[1409]: time="2025-03-17T18:51:47.013086660Z" level=info msg="loading plugin \"io.containerd.grpc.v1.diff\"..." type=io.containerd.grpc.v1 Mar 17 18:51:47.013203 env[1409]: time="2025-03-17T18:51:47.013102560Z" level=info msg="loading plugin \"io.containerd.grpc.v1.events\"..." type=io.containerd.grpc.v1 Mar 17 18:51:47.013203 env[1409]: time="2025-03-17T18:51:47.013121861Z" level=info msg="loading plugin \"io.containerd.grpc.v1.healthcheck\"..." type=io.containerd.grpc.v1 Mar 17 18:51:47.013203 env[1409]: time="2025-03-17T18:51:47.013139661Z" level=info msg="loading plugin \"io.containerd.grpc.v1.images\"..." type=io.containerd.grpc.v1 Mar 17 18:51:47.013203 env[1409]: time="2025-03-17T18:51:47.013156061Z" level=info msg="loading plugin \"io.containerd.grpc.v1.leases\"..." type=io.containerd.grpc.v1 Mar 17 18:51:47.013203 env[1409]: time="2025-03-17T18:51:47.013171661Z" level=info msg="loading plugin \"io.containerd.grpc.v1.namespaces\"..." type=io.containerd.grpc.v1 Mar 17 18:51:47.013203 env[1409]: time="2025-03-17T18:51:47.013190161Z" level=info msg="loading plugin \"io.containerd.internal.v1.opt\"..." type=io.containerd.internal.v1 Mar 17 18:51:47.013445 env[1409]: time="2025-03-17T18:51:47.013362462Z" level=info msg="loading plugin \"io.containerd.grpc.v1.snapshots\"..." type=io.containerd.grpc.v1 Mar 17 18:51:47.013445 env[1409]: time="2025-03-17T18:51:47.013385262Z" level=info msg="loading plugin \"io.containerd.grpc.v1.tasks\"..." type=io.containerd.grpc.v1 Mar 17 18:51:47.013445 env[1409]: time="2025-03-17T18:51:47.013403562Z" level=info msg="loading plugin \"io.containerd.grpc.v1.version\"..." type=io.containerd.grpc.v1 Mar 17 18:51:47.013445 env[1409]: time="2025-03-17T18:51:47.013419962Z" level=info msg="loading plugin \"io.containerd.tracing.processor.v1.otlp\"..." type=io.containerd.tracing.processor.v1 Mar 17 18:51:47.013445 env[1409]: time="2025-03-17T18:51:47.013440862Z" level=info msg="skip loading plugin \"io.containerd.tracing.processor.v1.otlp\"..." error="no OpenTelemetry endpoint: skip plugin" type=io.containerd.tracing.processor.v1 Mar 17 18:51:47.013615 env[1409]: time="2025-03-17T18:51:47.013455263Z" level=info msg="loading plugin \"io.containerd.internal.v1.tracing\"..." type=io.containerd.internal.v1 Mar 17 18:51:47.013615 env[1409]: time="2025-03-17T18:51:47.013485463Z" level=error msg="failed to initialize a tracing processor \"otlp\"" error="no OpenTelemetry endpoint: skip plugin" Mar 17 18:51:47.013615 env[1409]: time="2025-03-17T18:51:47.013525963Z" level=info msg="loading plugin \"io.containerd.grpc.v1.cri\"..." type=io.containerd.grpc.v1 Mar 17 18:51:47.013870 env[1409]: time="2025-03-17T18:51:47.013803965Z" level=info msg="Start cri plugin with config {PluginConfig:{ContainerdConfig:{Snapshotter:overlayfs DefaultRuntimeName:runc DefaultRuntime:{Type: Path: Engine: PodAnnotations:[] ContainerAnnotations:[] Root: Options:map[] PrivilegedWithoutHostDevices:false BaseRuntimeSpec: NetworkPluginConfDir: NetworkPluginMaxConfNum:0} UntrustedWorkloadRuntime:{Type: Path: Engine: PodAnnotations:[] ContainerAnnotations:[] Root: Options:map[] PrivilegedWithoutHostDevices:false BaseRuntimeSpec: NetworkPluginConfDir: NetworkPluginMaxConfNum:0} Runtimes:map[runc:{Type:io.containerd.runc.v2 Path: Engine: PodAnnotations:[] ContainerAnnotations:[] Root: Options:map[SystemdCgroup:true] PrivilegedWithoutHostDevices:false BaseRuntimeSpec: NetworkPluginConfDir: NetworkPluginMaxConfNum:0}] NoPivot:false DisableSnapshotAnnotations:true DiscardUnpackedLayers:false IgnoreRdtNotEnabledErrors:false} CniConfig:{NetworkPluginBinDir:/opt/cni/bin NetworkPluginConfDir:/etc/cni/net.d NetworkPluginMaxConfNum:1 NetworkPluginConfTemplate: IPPreference:} Registry:{ConfigPath: Mirrors:map[] Configs:map[] Auths:map[] Headers:map[]} ImageDecryption:{KeyModel:node} DisableTCPService:true StreamServerAddress:127.0.0.1 StreamServerPort:0 StreamIdleTimeout:4h0m0s EnableSelinux:true SelinuxCategoryRange:1024 SandboxImage:registry.k8s.io/pause:3.6 StatsCollectPeriod:10 SystemdCgroup:false EnableTLSStreaming:false X509KeyPairStreaming:{TLSCertFile: TLSKeyFile:} MaxContainerLogLineSize:16384 DisableCgroup:false DisableApparmor:false RestrictOOMScoreAdj:false MaxConcurrentDownloads:3 DisableProcMount:false UnsetSeccompProfile: TolerateMissingHugetlbController:true DisableHugetlbController:true DeviceOwnershipFromSecurityContext:false IgnoreImageDefinedVolumes:false NetNSMountsUnderStateDir:false EnableUnprivilegedPorts:false EnableUnprivilegedICMP:false} ContainerdRootDir:/var/lib/containerd ContainerdEndpoint:/run/containerd/containerd.sock RootDir:/var/lib/containerd/io.containerd.grpc.v1.cri StateDir:/run/containerd/io.containerd.grpc.v1.cri}" Mar 17 18:51:47.045908 env[1409]: time="2025-03-17T18:51:47.013882165Z" level=info msg="Connect containerd service" Mar 17 18:51:47.045908 env[1409]: time="2025-03-17T18:51:47.013919365Z" level=info msg="Get image filesystem path \"/var/lib/containerd/io.containerd.snapshotter.v1.overlayfs\"" Mar 17 18:51:47.045908 env[1409]: time="2025-03-17T18:51:47.014556269Z" level=error msg="failed to load cni during init, please check CRI plugin status before setting up network for pods" error="cni config load failed: no network config found in /etc/cni/net.d: cni plugin not initialized: failed to load cni config" Mar 17 18:51:47.045908 env[1409]: time="2025-03-17T18:51:47.014819971Z" level=info msg=serving... address=/run/containerd/containerd.sock.ttrpc Mar 17 18:51:47.045908 env[1409]: time="2025-03-17T18:51:47.014864371Z" level=info msg=serving... address=/run/containerd/containerd.sock Mar 17 18:51:47.045908 env[1409]: time="2025-03-17T18:51:47.014915971Z" level=info msg="containerd successfully booted in 0.160854s" Mar 17 18:51:47.045908 env[1409]: time="2025-03-17T18:51:47.016880383Z" level=info msg="Start subscribing containerd event" Mar 17 18:51:47.045908 env[1409]: time="2025-03-17T18:51:47.016942284Z" level=info msg="Start recovering state" Mar 17 18:51:47.045908 env[1409]: time="2025-03-17T18:51:47.017006584Z" level=info msg="Start event monitor" Mar 17 18:51:47.045908 env[1409]: time="2025-03-17T18:51:47.017030684Z" level=info msg="Start snapshots syncer" Mar 17 18:51:47.045908 env[1409]: time="2025-03-17T18:51:47.017043384Z" level=info msg="Start cni network conf syncer for default" Mar 17 18:51:47.045908 env[1409]: time="2025-03-17T18:51:47.017057684Z" level=info msg="Start streaming server" Mar 17 18:51:47.014968 systemd[1]: Started containerd.service. Mar 17 18:51:47.018857 systemd[1]: nvidia.service: Deactivated successfully. Mar 17 18:51:47.594229 update_engine[1400]: I0317 18:51:47.593724 1400 main.cc:92] Flatcar Update Engine starting Mar 17 18:51:47.645973 systemd[1]: Started update-engine.service. Mar 17 18:51:47.649252 update_engine[1400]: I0317 18:51:47.647382 1400 update_check_scheduler.cc:74] Next update check in 7m55s Mar 17 18:51:47.651160 systemd[1]: Started locksmithd.service. Mar 17 18:51:47.730559 tar[1405]: linux-amd64/README.md Mar 17 18:51:47.737891 systemd[1]: Finished prepare-helm.service. Mar 17 18:51:48.196366 systemd[1]: Started kubelet.service. Mar 17 18:51:48.717247 sshd_keygen[1407]: ssh-keygen: generating new host keys: RSA ECDSA ED25519 Mar 17 18:51:48.744664 systemd[1]: Finished sshd-keygen.service. Mar 17 18:51:48.749400 systemd[1]: Starting issuegen.service... Mar 17 18:51:48.753011 systemd[1]: Started waagent.service. Mar 17 18:51:48.761091 systemd[1]: issuegen.service: Deactivated successfully. Mar 17 18:51:48.761302 systemd[1]: Finished issuegen.service. Mar 17 18:51:48.765329 systemd[1]: Starting systemd-user-sessions.service... Mar 17 18:51:48.789855 systemd[1]: Finished systemd-user-sessions.service. Mar 17 18:51:48.794878 systemd[1]: Started getty@tty1.service. Mar 17 18:51:48.799243 systemd[1]: Started serial-getty@ttyS0.service. Mar 17 18:51:48.802540 systemd[1]: Reached target getty.target. Mar 17 18:51:48.805038 systemd[1]: Reached target multi-user.target. Mar 17 18:51:48.809369 systemd[1]: Starting systemd-update-utmp-runlevel.service... Mar 17 18:51:48.823373 systemd[1]: systemd-update-utmp-runlevel.service: Deactivated successfully. Mar 17 18:51:48.823553 systemd[1]: Finished systemd-update-utmp-runlevel.service. Mar 17 18:51:48.826483 systemd[1]: Startup finished in 880ms (firmware) + 29.200s (loader) + 1.006s (kernel) + 13.890s (initrd) + 23.849s (userspace) = 1min 8.827s. Mar 17 18:51:48.897123 kubelet[1493]: E0317 18:51:48.897078 1493 run.go:72] "command failed" err="failed to load kubelet config file, path: /var/lib/kubelet/config.yaml, error: failed to load Kubelet config file /var/lib/kubelet/config.yaml, error failed to read kubelet config file \"/var/lib/kubelet/config.yaml\", error: open /var/lib/kubelet/config.yaml: no such file or directory" Mar 17 18:51:48.898509 systemd[1]: kubelet.service: Main process exited, code=exited, status=1/FAILURE Mar 17 18:51:48.898618 systemd[1]: kubelet.service: Failed with result 'exit-code'. Mar 17 18:51:48.898866 systemd[1]: kubelet.service: Consumed 1.129s CPU time. Mar 17 18:51:49.149314 locksmithd[1486]: locksmithd starting currentOperation="UPDATE_STATUS_IDLE" strategy="reboot" Mar 17 18:51:49.216599 login[1513]: pam_unix(login:session): session opened for user core(uid=500) by LOGIN(uid=0) Mar 17 18:51:49.219748 login[1514]: pam_unix(login:session): session opened for user core(uid=500) by LOGIN(uid=0) Mar 17 18:51:49.257208 systemd[1]: Created slice user-500.slice. Mar 17 18:51:49.259092 systemd[1]: Starting user-runtime-dir@500.service... Mar 17 18:51:49.262836 systemd-logind[1398]: New session 1 of user core. Mar 17 18:51:49.267325 systemd-logind[1398]: New session 2 of user core. Mar 17 18:51:49.271561 systemd[1]: Finished user-runtime-dir@500.service. Mar 17 18:51:49.273317 systemd[1]: Starting user@500.service... Mar 17 18:51:49.276820 (systemd)[1517]: pam_unix(systemd-user:session): session opened for user core(uid=500) by (uid=0) Mar 17 18:51:49.481006 systemd[1517]: Queued start job for default target default.target. Mar 17 18:51:49.481781 systemd[1517]: Reached target paths.target. Mar 17 18:51:49.481821 systemd[1517]: Reached target sockets.target. Mar 17 18:51:49.481843 systemd[1517]: Reached target timers.target. Mar 17 18:51:49.481863 systemd[1517]: Reached target basic.target. Mar 17 18:51:49.482005 systemd[1]: Started user@500.service. Mar 17 18:51:49.483437 systemd[1]: Started session-1.scope. Mar 17 18:51:49.484320 systemd[1517]: Reached target default.target. Mar 17 18:51:49.484374 systemd[1517]: Startup finished in 201ms. Mar 17 18:51:49.484504 systemd[1]: Started session-2.scope. Mar 17 18:51:55.332412 waagent[1508]: 2025-03-17T18:51:55.332299Z INFO Daemon Daemon Azure Linux Agent Version:2.6.0.2 Mar 17 18:51:55.347018 waagent[1508]: 2025-03-17T18:51:55.334887Z INFO Daemon Daemon OS: flatcar 3510.3.7 Mar 17 18:51:55.347018 waagent[1508]: 2025-03-17T18:51:55.336001Z INFO Daemon Daemon Python: 3.9.16 Mar 17 18:51:55.347018 waagent[1508]: 2025-03-17T18:51:55.337501Z INFO Daemon Daemon Run daemon Mar 17 18:51:55.347018 waagent[1508]: 2025-03-17T18:51:55.338531Z INFO Daemon Daemon No RDMA handler exists for distro='Flatcar Container Linux by Kinvolk' version='3510.3.7' Mar 17 18:51:55.351328 waagent[1508]: 2025-03-17T18:51:55.351186Z INFO Daemon Daemon Unable to get cloud-init enabled status from systemctl: Command '['systemctl', 'is-enabled', 'cloud-init-local.service']' returned non-zero exit status 1. Mar 17 18:51:55.358673 waagent[1508]: 2025-03-17T18:51:55.358570Z INFO Daemon Daemon Unable to get cloud-init enabled status from service: [Errno 2] No such file or directory: 'service' Mar 17 18:51:55.405704 waagent[1508]: 2025-03-17T18:51:55.359840Z INFO Daemon Daemon cloud-init is enabled: False Mar 17 18:51:55.405704 waagent[1508]: 2025-03-17T18:51:55.360715Z INFO Daemon Daemon Using waagent for provisioning Mar 17 18:51:55.405704 waagent[1508]: 2025-03-17T18:51:55.362184Z INFO Daemon Daemon Activate resource disk Mar 17 18:51:55.405704 waagent[1508]: 2025-03-17T18:51:55.363208Z INFO Daemon Daemon Searching gen1 prefix 00000000-0001 or gen2 f8b3781a-1e82-4818-a1c3-63d806ec15bb Mar 17 18:51:55.405704 waagent[1508]: 2025-03-17T18:51:55.370876Z INFO Daemon Daemon Found device: None Mar 17 18:51:55.405704 waagent[1508]: 2025-03-17T18:51:55.371964Z ERROR Daemon Daemon Failed to mount resource disk [ResourceDiskError] unable to detect disk topology Mar 17 18:51:55.405704 waagent[1508]: 2025-03-17T18:51:55.372905Z ERROR Daemon Daemon Event: name=WALinuxAgent, op=ActivateResourceDisk, message=[ResourceDiskError] unable to detect disk topology, duration=0 Mar 17 18:51:55.405704 waagent[1508]: 2025-03-17T18:51:55.374772Z INFO Daemon Daemon Clean protocol and wireserver endpoint Mar 17 18:51:55.405704 waagent[1508]: 2025-03-17T18:51:55.375596Z INFO Daemon Daemon Running default provisioning handler Mar 17 18:51:55.405704 waagent[1508]: 2025-03-17T18:51:55.384850Z INFO Daemon Daemon Unable to get cloud-init enabled status from systemctl: Command '['systemctl', 'is-enabled', 'cloud-init-local.service']' returned non-zero exit status 1. Mar 17 18:51:55.405704 waagent[1508]: 2025-03-17T18:51:55.387813Z INFO Daemon Daemon Unable to get cloud-init enabled status from service: [Errno 2] No such file or directory: 'service' Mar 17 18:51:55.405704 waagent[1508]: 2025-03-17T18:51:55.389005Z INFO Daemon Daemon cloud-init is enabled: False Mar 17 18:51:55.405704 waagent[1508]: 2025-03-17T18:51:55.390078Z INFO Daemon Daemon Copying ovf-env.xml Mar 17 18:51:55.454301 waagent[1508]: 2025-03-17T18:51:55.454149Z INFO Daemon Daemon Successfully mounted dvd Mar 17 18:51:55.567118 systemd[1]: mnt-cdrom-secure.mount: Deactivated successfully. Mar 17 18:51:55.590636 waagent[1508]: 2025-03-17T18:51:55.590464Z INFO Daemon Daemon Detect protocol endpoint Mar 17 18:51:55.607740 waagent[1508]: 2025-03-17T18:51:55.592229Z INFO Daemon Daemon Clean protocol and wireserver endpoint Mar 17 18:51:55.607740 waagent[1508]: 2025-03-17T18:51:55.593392Z INFO Daemon Daemon WireServer endpoint is not found. Rerun dhcp handler Mar 17 18:51:55.607740 waagent[1508]: 2025-03-17T18:51:55.594417Z INFO Daemon Daemon Test for route to 168.63.129.16 Mar 17 18:51:55.607740 waagent[1508]: 2025-03-17T18:51:55.595675Z INFO Daemon Daemon Route to 168.63.129.16 exists Mar 17 18:51:55.607740 waagent[1508]: 2025-03-17T18:51:55.596727Z INFO Daemon Daemon Wire server endpoint:168.63.129.16 Mar 17 18:51:55.706731 waagent[1508]: 2025-03-17T18:51:55.706654Z INFO Daemon Daemon Fabric preferred wire protocol version:2015-04-05 Mar 17 18:51:55.715729 waagent[1508]: 2025-03-17T18:51:55.708598Z INFO Daemon Daemon Wire protocol version:2012-11-30 Mar 17 18:51:55.715729 waagent[1508]: 2025-03-17T18:51:55.709681Z INFO Daemon Daemon Server preferred version:2015-04-05 Mar 17 18:51:56.059704 waagent[1508]: 2025-03-17T18:51:56.059557Z INFO Daemon Daemon Initializing goal state during protocol detection Mar 17 18:51:56.070962 waagent[1508]: 2025-03-17T18:51:56.070880Z INFO Daemon Daemon Forcing an update of the goal state.. Mar 17 18:51:56.074186 waagent[1508]: 2025-03-17T18:51:56.074114Z INFO Daemon Daemon Fetching goal state [incarnation 1] Mar 17 18:51:56.158038 waagent[1508]: 2025-03-17T18:51:56.157916Z INFO Daemon Daemon Found private key matching thumbprint 33973ED67367EBECBE26430CF0323625AA7C70E1 Mar 17 18:51:56.169819 waagent[1508]: 2025-03-17T18:51:56.159673Z INFO Daemon Daemon Certificate with thumbprint 4273F8EAE0469C563257ADC2BC89A17F18E8AE59 has no matching private key. Mar 17 18:51:56.169819 waagent[1508]: 2025-03-17T18:51:56.160886Z INFO Daemon Daemon Fetch goal state completed Mar 17 18:51:56.205764 waagent[1508]: 2025-03-17T18:51:56.205683Z INFO Daemon Daemon Fetched new vmSettings [correlation ID: e60b3b0e-9ec1-4ab8-8b9d-eaec05858a3a New eTag: 1831553211460488513] Mar 17 18:51:56.214426 waagent[1508]: 2025-03-17T18:51:56.207673Z INFO Daemon Daemon Status Blob type 'None' is not valid, assuming BlockBlob Mar 17 18:51:56.221052 waagent[1508]: 2025-03-17T18:51:56.220997Z INFO Daemon Daemon Starting provisioning Mar 17 18:51:56.228345 waagent[1508]: 2025-03-17T18:51:56.222204Z INFO Daemon Daemon Handle ovf-env.xml. Mar 17 18:51:56.228345 waagent[1508]: 2025-03-17T18:51:56.223118Z INFO Daemon Daemon Set hostname [ci-3510.3.7-a-9ed44aff31] Mar 17 18:51:56.241941 waagent[1508]: 2025-03-17T18:51:56.241836Z INFO Daemon Daemon Publish hostname [ci-3510.3.7-a-9ed44aff31] Mar 17 18:51:56.250089 waagent[1508]: 2025-03-17T18:51:56.243413Z INFO Daemon Daemon Examine /proc/net/route for primary interface Mar 17 18:51:56.250089 waagent[1508]: 2025-03-17T18:51:56.244399Z INFO Daemon Daemon Primary interface is [eth0] Mar 17 18:51:56.257646 systemd[1]: systemd-networkd-wait-online.service: Deactivated successfully. Mar 17 18:51:56.257900 systemd[1]: Stopped systemd-networkd-wait-online.service. Mar 17 18:51:56.257973 systemd[1]: Stopping systemd-networkd-wait-online.service... Mar 17 18:51:56.258380 systemd[1]: Stopping systemd-networkd.service... Mar 17 18:51:56.262317 systemd-networkd[1175]: eth0: DHCPv6 lease lost Mar 17 18:51:56.263887 systemd[1]: systemd-networkd.service: Deactivated successfully. Mar 17 18:51:56.264081 systemd[1]: Stopped systemd-networkd.service. Mar 17 18:51:56.266585 systemd[1]: Starting systemd-networkd.service... Mar 17 18:51:56.298420 systemd-networkd[1562]: enP39376s1: Link UP Mar 17 18:51:56.298431 systemd-networkd[1562]: enP39376s1: Gained carrier Mar 17 18:51:56.299727 systemd-networkd[1562]: eth0: Link UP Mar 17 18:51:56.299736 systemd-networkd[1562]: eth0: Gained carrier Mar 17 18:51:56.300164 systemd-networkd[1562]: lo: Link UP Mar 17 18:51:56.300177 systemd-networkd[1562]: lo: Gained carrier Mar 17 18:51:56.300500 systemd-networkd[1562]: eth0: Gained IPv6LL Mar 17 18:51:56.301594 systemd-networkd[1562]: Enumeration completed Mar 17 18:51:56.301687 systemd[1]: Started systemd-networkd.service. Mar 17 18:51:56.303682 systemd[1]: Starting systemd-networkd-wait-online.service... Mar 17 18:51:56.308048 waagent[1508]: 2025-03-17T18:51:56.307886Z INFO Daemon Daemon Create user account if not exists Mar 17 18:51:56.316892 waagent[1508]: 2025-03-17T18:51:56.309813Z INFO Daemon Daemon User core already exists, skip useradd Mar 17 18:51:56.316892 waagent[1508]: 2025-03-17T18:51:56.310366Z INFO Daemon Daemon Configure sudoer Mar 17 18:51:56.312235 systemd-networkd[1562]: eth0: Configuring with /usr/lib/systemd/network/zz-default.network. Mar 17 18:51:56.317186 waagent[1508]: 2025-03-17T18:51:56.317114Z INFO Daemon Daemon Configure sshd Mar 17 18:51:56.323949 waagent[1508]: 2025-03-17T18:51:56.318395Z INFO Daemon Daemon Deploy ssh public key. Mar 17 18:51:56.348674 systemd-networkd[1562]: eth0: DHCPv4 address 10.200.8.35/24, gateway 10.200.8.1 acquired from 168.63.129.16 Mar 17 18:51:56.353181 systemd[1]: Finished systemd-networkd-wait-online.service. Mar 17 18:51:57.448365 waagent[1508]: 2025-03-17T18:51:57.448240Z INFO Daemon Daemon Provisioning complete Mar 17 18:51:57.462220 waagent[1508]: 2025-03-17T18:51:57.462145Z INFO Daemon Daemon RDMA capabilities are not enabled, skipping Mar 17 18:51:57.469520 waagent[1508]: 2025-03-17T18:51:57.463644Z INFO Daemon Daemon End of log to /dev/console. The agent will now check for updates and then will process extensions. Mar 17 18:51:57.469520 waagent[1508]: 2025-03-17T18:51:57.465287Z INFO Daemon Daemon Installed Agent WALinuxAgent-2.6.0.2 is the most current agent Mar 17 18:51:57.728588 waagent[1571]: 2025-03-17T18:51:57.728424Z INFO ExtHandler ExtHandler Agent WALinuxAgent-2.6.0.2 is running as the goal state agent Mar 17 18:51:57.729312 waagent[1571]: 2025-03-17T18:51:57.729232Z INFO ExtHandler ExtHandler WireServer endpoint 168.63.129.16 read from file Mar 17 18:51:57.729468 waagent[1571]: 2025-03-17T18:51:57.729415Z INFO ExtHandler ExtHandler Wire server endpoint:168.63.129.16 Mar 17 18:51:57.740197 waagent[1571]: 2025-03-17T18:51:57.740122Z INFO ExtHandler ExtHandler Forcing an update of the goal state.. Mar 17 18:51:57.740364 waagent[1571]: 2025-03-17T18:51:57.740309Z INFO ExtHandler ExtHandler Fetching goal state [incarnation 1] Mar 17 18:51:57.801577 waagent[1571]: 2025-03-17T18:51:57.801451Z INFO ExtHandler ExtHandler Found private key matching thumbprint 33973ED67367EBECBE26430CF0323625AA7C70E1 Mar 17 18:51:57.801794 waagent[1571]: 2025-03-17T18:51:57.801732Z INFO ExtHandler ExtHandler Certificate with thumbprint 4273F8EAE0469C563257ADC2BC89A17F18E8AE59 has no matching private key. Mar 17 18:51:57.802026 waagent[1571]: 2025-03-17T18:51:57.801976Z INFO ExtHandler ExtHandler Fetch goal state completed Mar 17 18:51:57.815967 waagent[1571]: 2025-03-17T18:51:57.815906Z INFO ExtHandler ExtHandler Fetched new vmSettings [correlation ID: d6c55313-ec46-4b1a-a6fd-1b6e1253c513 New eTag: 1831553211460488513] Mar 17 18:51:57.816478 waagent[1571]: 2025-03-17T18:51:57.816420Z INFO ExtHandler ExtHandler Status Blob type 'None' is not valid, assuming BlockBlob Mar 17 18:51:57.856008 waagent[1571]: 2025-03-17T18:51:57.855870Z INFO ExtHandler ExtHandler Distro: flatcar-3510.3.7; OSUtil: CoreOSUtil; AgentService: waagent; Python: 3.9.16; systemd: True; LISDrivers: Absent; logrotate: logrotate 3.20.1; Mar 17 18:51:57.882063 waagent[1571]: 2025-03-17T18:51:57.881976Z INFO ExtHandler ExtHandler WALinuxAgent-2.6.0.2 running as process 1571 Mar 17 18:51:57.885493 waagent[1571]: 2025-03-17T18:51:57.885421Z INFO ExtHandler ExtHandler Cgroup monitoring is not supported on ['flatcar', '3510.3.7', '', 'Flatcar Container Linux by Kinvolk'] Mar 17 18:51:57.886713 waagent[1571]: 2025-03-17T18:51:57.886654Z INFO ExtHandler ExtHandler Starting setup for Persistent firewall rules Mar 17 18:51:58.010502 waagent[1571]: 2025-03-17T18:51:58.010425Z INFO ExtHandler ExtHandler Firewalld service not running/unavailable, trying to set up waagent-network-setup.service Mar 17 18:51:58.010978 waagent[1571]: 2025-03-17T18:51:58.010901Z INFO ExtHandler ExtHandler Successfully updated the Binary file /var/lib/waagent/waagent-network-setup.py for firewall setup Mar 17 18:51:58.019657 waagent[1571]: 2025-03-17T18:51:58.019603Z INFO ExtHandler ExtHandler Service: waagent-network-setup.service not enabled. Adding it now Mar 17 18:51:58.020120 waagent[1571]: 2025-03-17T18:51:58.020061Z ERROR ExtHandler ExtHandler Unable to setup the persistent firewall rules: [Errno 30] Read-only file system: '/lib/systemd/system/waagent-network-setup.service' Mar 17 18:51:58.021185 waagent[1571]: 2025-03-17T18:51:58.021119Z INFO ExtHandler ExtHandler Checking if log collection is allowed at this time [False]. All three conditions must be met: configuration enabled [False], cgroups enabled [False], python supported: [True] Mar 17 18:51:58.022535 waagent[1571]: 2025-03-17T18:51:58.022475Z INFO ExtHandler ExtHandler Starting env monitor service. Mar 17 18:51:58.023524 waagent[1571]: 2025-03-17T18:51:58.023467Z INFO MonitorHandler ExtHandler WireServer endpoint 168.63.129.16 read from file Mar 17 18:51:58.023684 waagent[1571]: 2025-03-17T18:51:58.023637Z INFO MonitorHandler ExtHandler Wire server endpoint:168.63.129.16 Mar 17 18:51:58.024202 waagent[1571]: 2025-03-17T18:51:58.024145Z INFO MonitorHandler ExtHandler Monitor.NetworkConfigurationChanges is disabled. Mar 17 18:51:58.024504 waagent[1571]: 2025-03-17T18:51:58.024446Z INFO MonitorHandler ExtHandler Routing table from /proc/net/route: Mar 17 18:51:58.024504 waagent[1571]: Iface Destination Gateway Flags RefCnt Use Metric Mask MTU Window IRTT Mar 17 18:51:58.024504 waagent[1571]: eth0 00000000 0108C80A 0003 0 0 1024 00000000 0 0 0 Mar 17 18:51:58.024504 waagent[1571]: eth0 0008C80A 00000000 0001 0 0 1024 00FFFFFF 0 0 0 Mar 17 18:51:58.024504 waagent[1571]: eth0 0108C80A 00000000 0005 0 0 1024 FFFFFFFF 0 0 0 Mar 17 18:51:58.024504 waagent[1571]: eth0 10813FA8 0108C80A 0007 0 0 1024 FFFFFFFF 0 0 0 Mar 17 18:51:58.024504 waagent[1571]: eth0 FEA9FEA9 0108C80A 0007 0 0 1024 FFFFFFFF 0 0 0 Mar 17 18:51:58.027470 waagent[1571]: 2025-03-17T18:51:58.027300Z INFO ExtHandler ExtHandler Start SendTelemetryHandler service. Mar 17 18:51:58.027595 waagent[1571]: 2025-03-17T18:51:58.027537Z INFO EnvHandler ExtHandler WireServer endpoint 168.63.129.16 read from file Mar 17 18:51:58.028131 waagent[1571]: 2025-03-17T18:51:58.028068Z INFO EnvHandler ExtHandler Wire server endpoint:168.63.129.16 Mar 17 18:51:58.028900 waagent[1571]: 2025-03-17T18:51:58.028837Z INFO EnvHandler ExtHandler Configure routes Mar 17 18:51:58.029056 waagent[1571]: 2025-03-17T18:51:58.029009Z INFO EnvHandler ExtHandler Gateway:None Mar 17 18:51:58.029330 waagent[1571]: 2025-03-17T18:51:58.029277Z INFO EnvHandler ExtHandler Routes:None Mar 17 18:51:58.030573 waagent[1571]: 2025-03-17T18:51:58.030511Z INFO SendTelemetryHandler ExtHandler Successfully started the SendTelemetryHandler thread Mar 17 18:51:58.031071 waagent[1571]: 2025-03-17T18:51:58.031004Z INFO ExtHandler ExtHandler Start Extension Telemetry service. Mar 17 18:51:58.031677 waagent[1571]: 2025-03-17T18:51:58.031610Z INFO TelemetryEventsCollector ExtHandler Extension Telemetry pipeline enabled: True Mar 17 18:51:58.031800 waagent[1571]: 2025-03-17T18:51:58.031741Z INFO ExtHandler ExtHandler Goal State Period: 6 sec. This indicates how often the agent checks for new goal states and reports status. Mar 17 18:51:58.032573 waagent[1571]: 2025-03-17T18:51:58.032520Z INFO TelemetryEventsCollector ExtHandler Successfully started the TelemetryEventsCollector thread Mar 17 18:51:58.043846 waagent[1571]: 2025-03-17T18:51:58.043690Z INFO ExtHandler ExtHandler Checking for agent updates (family: Prod) Mar 17 18:51:58.045577 waagent[1571]: 2025-03-17T18:51:58.045524Z WARNING ExtHandler ExtHandler Fetch failed: [HttpError] HTTPS is unavailable and required Mar 17 18:51:58.046804 waagent[1571]: 2025-03-17T18:51:58.046745Z INFO ExtHandler ExtHandler [PERIODIC] Request failed using the direct channel. Error: 'NoneType' object has no attribute 'getheaders' Mar 17 18:51:58.069342 waagent[1571]: 2025-03-17T18:51:58.069210Z ERROR EnvHandler ExtHandler Failed to get the PID of the DHCP client: invalid literal for int() with base 10: 'MainPID=1562' Mar 17 18:51:58.089654 waagent[1571]: 2025-03-17T18:51:58.089585Z INFO ExtHandler ExtHandler Default channel changed to HostGA channel. Mar 17 18:51:58.572034 waagent[1571]: 2025-03-17T18:51:58.571896Z INFO MonitorHandler ExtHandler Network interfaces: Mar 17 18:51:58.572034 waagent[1571]: Executing ['ip', '-a', '-o', 'link']: Mar 17 18:51:58.572034 waagent[1571]: 1: lo: mtu 65536 qdisc noqueue state UNKNOWN mode DEFAULT group default qlen 1000\ link/loopback 00:00:00:00:00:00 brd 00:00:00:00:00:00 Mar 17 18:51:58.572034 waagent[1571]: 2: eth0: mtu 1500 qdisc mq state UP mode DEFAULT group default qlen 1000\ link/ether 7c:1e:52:35:ff:78 brd ff:ff:ff:ff:ff:ff Mar 17 18:51:58.572034 waagent[1571]: 3: enP39376s1: mtu 1500 qdisc mq master eth0 state UP mode DEFAULT group default qlen 1000\ link/ether 7c:1e:52:35:ff:78 brd ff:ff:ff:ff:ff:ff\ altname enP39376p0s2 Mar 17 18:51:58.572034 waagent[1571]: Executing ['ip', '-4', '-a', '-o', 'address']: Mar 17 18:51:58.572034 waagent[1571]: 1: lo inet 127.0.0.1/8 scope host lo\ valid_lft forever preferred_lft forever Mar 17 18:51:58.572034 waagent[1571]: 2: eth0 inet 10.200.8.35/24 metric 1024 brd 10.200.8.255 scope global eth0\ valid_lft forever preferred_lft forever Mar 17 18:51:58.572034 waagent[1571]: Executing ['ip', '-6', '-a', '-o', 'address']: Mar 17 18:51:58.572034 waagent[1571]: 1: lo inet6 ::1/128 scope host \ valid_lft forever preferred_lft forever Mar 17 18:51:58.572034 waagent[1571]: 2: eth0 inet6 fe80::7e1e:52ff:fe35:ff78/64 scope link \ valid_lft forever preferred_lft forever Mar 17 18:51:58.630005 waagent[1571]: 2025-03-17T18:51:58.629941Z INFO ExtHandler ExtHandler Agent WALinuxAgent-2.6.0.2 discovered update WALinuxAgent-2.12.0.2 -- exiting Mar 17 18:51:58.989253 systemd[1]: kubelet.service: Scheduled restart job, restart counter is at 1. Mar 17 18:51:58.989595 systemd[1]: Stopped kubelet.service. Mar 17 18:51:58.989658 systemd[1]: kubelet.service: Consumed 1.129s CPU time. Mar 17 18:51:58.991609 systemd[1]: Starting kubelet.service... Mar 17 18:51:59.371989 systemd[1]: Started kubelet.service. Mar 17 18:51:59.470181 waagent[1508]: 2025-03-17T18:51:59.470024Z INFO Daemon Daemon Agent WALinuxAgent-2.6.0.2 launched with command '/usr/share/oem/python/bin/python -u /usr/share/oem/bin/waagent -run-exthandlers' is successfully running Mar 17 18:51:59.474533 waagent[1508]: 2025-03-17T18:51:59.474467Z INFO Daemon Daemon Determined Agent WALinuxAgent-2.12.0.2 to be the latest agent Mar 17 18:51:59.771174 kubelet[1605]: E0317 18:51:59.771123 1605 run.go:72] "command failed" err="failed to load kubelet config file, path: /var/lib/kubelet/config.yaml, error: failed to load Kubelet config file /var/lib/kubelet/config.yaml, error failed to read kubelet config file \"/var/lib/kubelet/config.yaml\", error: open /var/lib/kubelet/config.yaml: no such file or directory" Mar 17 18:51:59.773945 systemd[1]: kubelet.service: Main process exited, code=exited, status=1/FAILURE Mar 17 18:51:59.774128 systemd[1]: kubelet.service: Failed with result 'exit-code'. Mar 17 18:52:00.836256 waagent[1610]: 2025-03-17T18:52:00.836148Z INFO ExtHandler ExtHandler Azure Linux Agent (Goal State Agent version 2.12.0.2) Mar 17 18:52:00.836974 waagent[1610]: 2025-03-17T18:52:00.836912Z INFO ExtHandler ExtHandler OS: flatcar 3510.3.7 Mar 17 18:52:00.837116 waagent[1610]: 2025-03-17T18:52:00.837066Z INFO ExtHandler ExtHandler Python: 3.9.16 Mar 17 18:52:00.837259 waagent[1610]: 2025-03-17T18:52:00.837213Z INFO ExtHandler ExtHandler CPU Arch: x86_64 Mar 17 18:52:00.846679 waagent[1610]: 2025-03-17T18:52:00.846579Z INFO ExtHandler ExtHandler Distro: flatcar-3510.3.7; OSUtil: CoreOSUtil; AgentService: waagent; Python: 3.9.16; Arch: x86_64; systemd: True; LISDrivers: Absent; logrotate: logrotate 3.20.1; Mar 17 18:52:00.847069 waagent[1610]: 2025-03-17T18:52:00.847012Z INFO ExtHandler ExtHandler WireServer endpoint 168.63.129.16 read from file Mar 17 18:52:00.847228 waagent[1610]: 2025-03-17T18:52:00.847181Z INFO ExtHandler ExtHandler Wire server endpoint:168.63.129.16 Mar 17 18:52:00.859297 waagent[1610]: 2025-03-17T18:52:00.859224Z INFO ExtHandler Fetched a new incarnation for the WireServer goal state [incarnation 1] Mar 17 18:52:00.867282 waagent[1610]: 2025-03-17T18:52:00.867212Z INFO ExtHandler ExtHandler HostGAPlugin version: 1.0.8.164 Mar 17 18:52:00.868146 waagent[1610]: 2025-03-17T18:52:00.868087Z INFO ExtHandler Mar 17 18:52:00.868310 waagent[1610]: 2025-03-17T18:52:00.868243Z INFO ExtHandler Fetched new vmSettings [HostGAPlugin correlation ID: 27ee0817-7d37-4fbd-9e18-d17ef4ce626e eTag: 1831553211460488513 source: Fabric] Mar 17 18:52:00.868992 waagent[1610]: 2025-03-17T18:52:00.868935Z INFO ExtHandler The vmSettings originated via Fabric; will ignore them. Mar 17 18:52:00.870065 waagent[1610]: 2025-03-17T18:52:00.870005Z INFO ExtHandler Mar 17 18:52:00.870199 waagent[1610]: 2025-03-17T18:52:00.870148Z INFO ExtHandler Fetching full goal state from the WireServer [incarnation 1] Mar 17 18:52:00.877085 waagent[1610]: 2025-03-17T18:52:00.877034Z INFO ExtHandler ExtHandler Downloading artifacts profile blob Mar 17 18:52:00.877526 waagent[1610]: 2025-03-17T18:52:00.877479Z WARNING ExtHandler ExtHandler Fetch failed: [HttpError] HTTPS is unavailable and required Mar 17 18:52:00.898120 waagent[1610]: 2025-03-17T18:52:00.898055Z INFO ExtHandler ExtHandler Default channel changed to HostGAPlugin channel. Mar 17 18:52:00.962844 waagent[1610]: 2025-03-17T18:52:00.962719Z INFO ExtHandler Downloaded certificate {'thumbprint': '4273F8EAE0469C563257ADC2BC89A17F18E8AE59', 'hasPrivateKey': False} Mar 17 18:52:00.963795 waagent[1610]: 2025-03-17T18:52:00.963725Z INFO ExtHandler Downloaded certificate {'thumbprint': '33973ED67367EBECBE26430CF0323625AA7C70E1', 'hasPrivateKey': True} Mar 17 18:52:00.964755 waagent[1610]: 2025-03-17T18:52:00.964697Z INFO ExtHandler Fetch goal state completed Mar 17 18:52:00.983855 waagent[1610]: 2025-03-17T18:52:00.983750Z INFO ExtHandler ExtHandler OpenSSL version: OpenSSL 3.0.15 3 Sep 2024 (Library: OpenSSL 3.0.15 3 Sep 2024) Mar 17 18:52:00.994777 waagent[1610]: 2025-03-17T18:52:00.994697Z INFO ExtHandler ExtHandler WALinuxAgent-2.12.0.2 running as process 1610 Mar 17 18:52:00.997718 waagent[1610]: 2025-03-17T18:52:00.997658Z INFO ExtHandler ExtHandler [CGI] Cgroup monitoring is not supported on ['flatcar', '3510.3.7', '', 'Flatcar Container Linux by Kinvolk'] Mar 17 18:52:00.998640 waagent[1610]: 2025-03-17T18:52:00.998584Z INFO ExtHandler ExtHandler [CGI] Agent will reset the quotas in case distro: ['flatcar', '3510.3.7', '', 'Flatcar Container Linux by Kinvolk'] went from supported to unsupported Mar 17 18:52:00.998905 waagent[1610]: 2025-03-17T18:52:00.998852Z INFO ExtHandler ExtHandler [CGI] Agent cgroups enabled: False Mar 17 18:52:01.000781 waagent[1610]: 2025-03-17T18:52:01.000727Z INFO ExtHandler ExtHandler Starting setup for Persistent firewall rules Mar 17 18:52:01.005207 waagent[1610]: 2025-03-17T18:52:01.005152Z INFO ExtHandler ExtHandler Firewalld service not running/unavailable, trying to set up waagent-network-setup.service Mar 17 18:52:01.005638 waagent[1610]: 2025-03-17T18:52:01.005580Z INFO ExtHandler ExtHandler Successfully updated the Binary file /var/lib/waagent/waagent-network-setup.py for firewall setup Mar 17 18:52:01.013429 waagent[1610]: 2025-03-17T18:52:01.013376Z INFO ExtHandler ExtHandler Service: waagent-network-setup.service not enabled. Adding it now Mar 17 18:52:01.013862 waagent[1610]: 2025-03-17T18:52:01.013805Z ERROR ExtHandler ExtHandler Unable to setup the persistent firewall rules: [Errno 30] Read-only file system: '/lib/systemd/system/waagent-network-setup.service' Mar 17 18:52:01.019553 waagent[1610]: 2025-03-17T18:52:01.019462Z INFO ExtHandler ExtHandler DROP rule is not available which implies no firewall rules are set yet. Environment thread will set it up. Mar 17 18:52:01.020514 waagent[1610]: 2025-03-17T18:52:01.020450Z INFO ExtHandler ExtHandler Checking if log collection is allowed at this time [False]. All three conditions must be met: 1. configuration enabled [True], 2. cgroups v1 enabled [False] OR cgroups v2 is in use and v2 resource limiting configuration enabled [False], 3. python supported: [True] Mar 17 18:52:01.021916 waagent[1610]: 2025-03-17T18:52:01.021856Z INFO ExtHandler ExtHandler Starting env monitor service. Mar 17 18:52:01.022347 waagent[1610]: 2025-03-17T18:52:01.022257Z INFO MonitorHandler ExtHandler WireServer endpoint 168.63.129.16 read from file Mar 17 18:52:01.022872 waagent[1610]: 2025-03-17T18:52:01.022815Z INFO EnvHandler ExtHandler WireServer endpoint 168.63.129.16 read from file Mar 17 18:52:01.023030 waagent[1610]: 2025-03-17T18:52:01.022980Z INFO ExtHandler ExtHandler Start SendTelemetryHandler service. Mar 17 18:52:01.023373 waagent[1610]: 2025-03-17T18:52:01.023324Z INFO MonitorHandler ExtHandler Wire server endpoint:168.63.129.16 Mar 17 18:52:01.023815 waagent[1610]: 2025-03-17T18:52:01.023760Z INFO SendTelemetryHandler ExtHandler Successfully started the SendTelemetryHandler thread Mar 17 18:52:01.024401 waagent[1610]: 2025-03-17T18:52:01.024345Z INFO MonitorHandler ExtHandler Monitor.NetworkConfigurationChanges is disabled. Mar 17 18:52:01.024505 waagent[1610]: 2025-03-17T18:52:01.024452Z INFO EnvHandler ExtHandler Wire server endpoint:168.63.129.16 Mar 17 18:52:01.024779 waagent[1610]: 2025-03-17T18:52:01.024729Z INFO ExtHandler ExtHandler Start Extension Telemetry service. Mar 17 18:52:01.025373 waagent[1610]: 2025-03-17T18:52:01.025314Z INFO EnvHandler ExtHandler Configure routes Mar 17 18:52:01.025719 waagent[1610]: 2025-03-17T18:52:01.025652Z INFO MonitorHandler ExtHandler Routing table from /proc/net/route: Mar 17 18:52:01.025719 waagent[1610]: Iface Destination Gateway Flags RefCnt Use Metric Mask MTU Window IRTT Mar 17 18:52:01.025719 waagent[1610]: eth0 00000000 0108C80A 0003 0 0 1024 00000000 0 0 0 Mar 17 18:52:01.025719 waagent[1610]: eth0 0008C80A 00000000 0001 0 0 1024 00FFFFFF 0 0 0 Mar 17 18:52:01.025719 waagent[1610]: eth0 0108C80A 00000000 0005 0 0 1024 FFFFFFFF 0 0 0 Mar 17 18:52:01.025719 waagent[1610]: eth0 10813FA8 0108C80A 0007 0 0 1024 FFFFFFFF 0 0 0 Mar 17 18:52:01.025719 waagent[1610]: eth0 FEA9FEA9 0108C80A 0007 0 0 1024 FFFFFFFF 0 0 0 Mar 17 18:52:01.028411 waagent[1610]: 2025-03-17T18:52:01.028148Z INFO EnvHandler ExtHandler Gateway:None Mar 17 18:52:01.028760 waagent[1610]: 2025-03-17T18:52:01.028696Z INFO EnvHandler ExtHandler Routes:None Mar 17 18:52:01.030549 waagent[1610]: 2025-03-17T18:52:01.030492Z INFO TelemetryEventsCollector ExtHandler Extension Telemetry pipeline enabled: True Mar 17 18:52:01.032587 waagent[1610]: 2025-03-17T18:52:01.032245Z INFO ExtHandler ExtHandler Goal State Period: 6 sec. This indicates how often the agent checks for new goal states and reports status. Mar 17 18:52:01.034374 waagent[1610]: 2025-03-17T18:52:01.034306Z INFO TelemetryEventsCollector ExtHandler Successfully started the TelemetryEventsCollector thread Mar 17 18:52:01.058435 waagent[1610]: 2025-03-17T18:52:01.058365Z INFO ExtHandler ExtHandler Downloading agent manifest Mar 17 18:52:01.059771 waagent[1610]: 2025-03-17T18:52:01.059708Z INFO MonitorHandler ExtHandler Network interfaces: Mar 17 18:52:01.059771 waagent[1610]: Executing ['ip', '-a', '-o', 'link']: Mar 17 18:52:01.059771 waagent[1610]: 1: lo: mtu 65536 qdisc noqueue state UNKNOWN mode DEFAULT group default qlen 1000\ link/loopback 00:00:00:00:00:00 brd 00:00:00:00:00:00 Mar 17 18:52:01.059771 waagent[1610]: 2: eth0: mtu 1500 qdisc mq state UP mode DEFAULT group default qlen 1000\ link/ether 7c:1e:52:35:ff:78 brd ff:ff:ff:ff:ff:ff Mar 17 18:52:01.059771 waagent[1610]: 3: enP39376s1: mtu 1500 qdisc mq master eth0 state UP mode DEFAULT group default qlen 1000\ link/ether 7c:1e:52:35:ff:78 brd ff:ff:ff:ff:ff:ff\ altname enP39376p0s2 Mar 17 18:52:01.059771 waagent[1610]: Executing ['ip', '-4', '-a', '-o', 'address']: Mar 17 18:52:01.059771 waagent[1610]: 1: lo inet 127.0.0.1/8 scope host lo\ valid_lft forever preferred_lft forever Mar 17 18:52:01.059771 waagent[1610]: 2: eth0 inet 10.200.8.35/24 metric 1024 brd 10.200.8.255 scope global eth0\ valid_lft forever preferred_lft forever Mar 17 18:52:01.059771 waagent[1610]: Executing ['ip', '-6', '-a', '-o', 'address']: Mar 17 18:52:01.059771 waagent[1610]: 1: lo inet6 ::1/128 scope host \ valid_lft forever preferred_lft forever Mar 17 18:52:01.059771 waagent[1610]: 2: eth0 inet6 fe80::7e1e:52ff:fe35:ff78/64 scope link \ valid_lft forever preferred_lft forever Mar 17 18:52:01.113192 waagent[1610]: 2025-03-17T18:52:01.113076Z INFO ExtHandler ExtHandler Mar 17 18:52:01.117400 waagent[1610]: 2025-03-17T18:52:01.117332Z INFO ExtHandler ExtHandler ProcessExtensionsGoalState started [incarnation_1 channel: WireServer source: Fabric activity: b4bc2db9-7111-458f-9e1b-3eba6942e274 correlation cc6462cf-81e1-40cf-b38b-6848466980c0 created: 2025-03-17T18:50:28.277161Z] Mar 17 18:52:01.118543 waagent[1610]: 2025-03-17T18:52:01.118478Z INFO ExtHandler ExtHandler No extension handlers found, not processing anything. Mar 17 18:52:01.120296 waagent[1610]: 2025-03-17T18:52:01.120228Z INFO ExtHandler ExtHandler ProcessExtensionsGoalState completed [incarnation_1 7 ms] Mar 17 18:52:01.139562 waagent[1610]: 2025-03-17T18:52:01.139497Z INFO ExtHandler ExtHandler Looking for existing remote access users. Mar 17 18:52:01.154610 waagent[1610]: 2025-03-17T18:52:01.154542Z INFO ExtHandler ExtHandler [HEARTBEAT] Agent WALinuxAgent-2.12.0.2 is running as the goal state agent [DEBUG HeartbeatCounter: 0;HeartbeatId: 893B822B-AD6E-4A9A-BC01-A44C772BBE2B;DroppedPackets: 0;UpdateGSErrors: 0;AutoUpdate: 1;UpdateMode: SelfUpdate;] Mar 17 18:52:01.387937 waagent[1610]: 2025-03-17T18:52:01.387767Z INFO EnvHandler ExtHandler Created firewall rules for the Azure Fabric: Mar 17 18:52:01.387937 waagent[1610]: Chain INPUT (policy ACCEPT 0 packets, 0 bytes) Mar 17 18:52:01.387937 waagent[1610]: pkts bytes target prot opt in out source destination Mar 17 18:52:01.387937 waagent[1610]: Chain FORWARD (policy ACCEPT 0 packets, 0 bytes) Mar 17 18:52:01.387937 waagent[1610]: pkts bytes target prot opt in out source destination Mar 17 18:52:01.387937 waagent[1610]: Chain OUTPUT (policy ACCEPT 0 packets, 0 bytes) Mar 17 18:52:01.387937 waagent[1610]: pkts bytes target prot opt in out source destination Mar 17 18:52:01.387937 waagent[1610]: 0 0 ACCEPT tcp -- * * 0.0.0.0/0 168.63.129.16 tcp dpt:53 Mar 17 18:52:01.387937 waagent[1610]: 0 0 ACCEPT tcp -- * * 0.0.0.0/0 168.63.129.16 owner UID match 0 Mar 17 18:52:01.387937 waagent[1610]: 0 0 DROP tcp -- * * 0.0.0.0/0 168.63.129.16 ctstate INVALID,NEW Mar 17 18:52:01.394979 waagent[1610]: 2025-03-17T18:52:01.394880Z INFO EnvHandler ExtHandler Current Firewall rules: Mar 17 18:52:01.394979 waagent[1610]: Chain INPUT (policy ACCEPT 0 packets, 0 bytes) Mar 17 18:52:01.394979 waagent[1610]: pkts bytes target prot opt in out source destination Mar 17 18:52:01.394979 waagent[1610]: Chain FORWARD (policy ACCEPT 0 packets, 0 bytes) Mar 17 18:52:01.394979 waagent[1610]: pkts bytes target prot opt in out source destination Mar 17 18:52:01.394979 waagent[1610]: Chain OUTPUT (policy ACCEPT 0 packets, 0 bytes) Mar 17 18:52:01.394979 waagent[1610]: pkts bytes target prot opt in out source destination Mar 17 18:52:01.394979 waagent[1610]: 0 0 ACCEPT tcp -- * * 0.0.0.0/0 168.63.129.16 tcp dpt:53 Mar 17 18:52:01.394979 waagent[1610]: 0 0 ACCEPT tcp -- * * 0.0.0.0/0 168.63.129.16 owner UID match 0 Mar 17 18:52:01.394979 waagent[1610]: 0 0 DROP tcp -- * * 0.0.0.0/0 168.63.129.16 ctstate INVALID,NEW Mar 17 18:52:01.395551 waagent[1610]: 2025-03-17T18:52:01.395498Z INFO EnvHandler ExtHandler Set block dev timeout: sda with timeout: 300 Mar 17 18:52:09.988933 systemd[1]: kubelet.service: Scheduled restart job, restart counter is at 2. Mar 17 18:52:09.989290 systemd[1]: Stopped kubelet.service. Mar 17 18:52:09.991340 systemd[1]: Starting kubelet.service... Mar 17 18:52:10.082549 systemd[1]: Started kubelet.service. Mar 17 18:52:10.721562 kubelet[1666]: E0317 18:52:10.721510 1666 run.go:72] "command failed" err="failed to load kubelet config file, path: /var/lib/kubelet/config.yaml, error: failed to load Kubelet config file /var/lib/kubelet/config.yaml, error failed to read kubelet config file \"/var/lib/kubelet/config.yaml\", error: open /var/lib/kubelet/config.yaml: no such file or directory" Mar 17 18:52:10.723214 systemd[1]: kubelet.service: Main process exited, code=exited, status=1/FAILURE Mar 17 18:52:10.723389 systemd[1]: kubelet.service: Failed with result 'exit-code'. Mar 17 18:52:20.739057 systemd[1]: kubelet.service: Scheduled restart job, restart counter is at 3. Mar 17 18:52:20.739428 systemd[1]: Stopped kubelet.service. Mar 17 18:52:20.741417 systemd[1]: Starting kubelet.service... Mar 17 18:52:20.829861 systemd[1]: Started kubelet.service. Mar 17 18:52:21.464229 kubelet[1676]: E0317 18:52:21.464158 1676 run.go:72] "command failed" err="failed to load kubelet config file, path: /var/lib/kubelet/config.yaml, error: failed to load Kubelet config file /var/lib/kubelet/config.yaml, error failed to read kubelet config file \"/var/lib/kubelet/config.yaml\", error: open /var/lib/kubelet/config.yaml: no such file or directory" Mar 17 18:52:21.465964 systemd[1]: kubelet.service: Main process exited, code=exited, status=1/FAILURE Mar 17 18:52:21.466125 systemd[1]: kubelet.service: Failed with result 'exit-code'. Mar 17 18:52:26.461946 kernel: hv_balloon: Max. dynamic memory size: 8192 MB Mar 17 18:52:31.489023 systemd[1]: kubelet.service: Scheduled restart job, restart counter is at 4. Mar 17 18:52:31.489364 systemd[1]: Stopped kubelet.service. Mar 17 18:52:31.491388 systemd[1]: Starting kubelet.service... Mar 17 18:52:31.578185 systemd[1]: Started kubelet.service. Mar 17 18:52:31.616004 kubelet[1685]: E0317 18:52:31.615962 1685 run.go:72] "command failed" err="failed to load kubelet config file, path: /var/lib/kubelet/config.yaml, error: failed to load Kubelet config file /var/lib/kubelet/config.yaml, error failed to read kubelet config file \"/var/lib/kubelet/config.yaml\", error: open /var/lib/kubelet/config.yaml: no such file or directory" Mar 17 18:52:31.617459 systemd[1]: kubelet.service: Main process exited, code=exited, status=1/FAILURE Mar 17 18:52:31.617613 systemd[1]: kubelet.service: Failed with result 'exit-code'. Mar 17 18:52:33.117762 update_engine[1400]: I0317 18:52:33.117676 1400 update_attempter.cc:509] Updating boot flags... Mar 17 18:52:36.954498 systemd[1]: Created slice system-sshd.slice. Mar 17 18:52:36.956693 systemd[1]: Started sshd@0-10.200.8.35:22-10.200.16.10:34744.service. Mar 17 18:52:37.789880 sshd[1757]: Accepted publickey for core from 10.200.16.10 port 34744 ssh2: RSA SHA256:Id7fTtJmja0nOLdf0IQA3jnxxJrUKKdGU1UW83zjTQg Mar 17 18:52:37.791576 sshd[1757]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Mar 17 18:52:37.796811 systemd-logind[1398]: New session 3 of user core. Mar 17 18:52:37.797480 systemd[1]: Started session-3.scope. Mar 17 18:52:38.333424 systemd[1]: Started sshd@1-10.200.8.35:22-10.200.16.10:34756.service. Mar 17 18:52:38.962168 sshd[1762]: Accepted publickey for core from 10.200.16.10 port 34756 ssh2: RSA SHA256:Id7fTtJmja0nOLdf0IQA3jnxxJrUKKdGU1UW83zjTQg Mar 17 18:52:38.963617 sshd[1762]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Mar 17 18:52:38.969089 systemd[1]: Started session-4.scope. Mar 17 18:52:38.969836 systemd-logind[1398]: New session 4 of user core. Mar 17 18:52:39.413346 sshd[1762]: pam_unix(sshd:session): session closed for user core Mar 17 18:52:39.416650 systemd[1]: sshd@1-10.200.8.35:22-10.200.16.10:34756.service: Deactivated successfully. Mar 17 18:52:39.417814 systemd[1]: session-4.scope: Deactivated successfully. Mar 17 18:52:39.418655 systemd-logind[1398]: Session 4 logged out. Waiting for processes to exit. Mar 17 18:52:39.419568 systemd-logind[1398]: Removed session 4. Mar 17 18:52:39.517221 systemd[1]: Started sshd@2-10.200.8.35:22-10.200.16.10:58926.service. Mar 17 18:52:40.145159 sshd[1771]: Accepted publickey for core from 10.200.16.10 port 58926 ssh2: RSA SHA256:Id7fTtJmja0nOLdf0IQA3jnxxJrUKKdGU1UW83zjTQg Mar 17 18:52:40.146887 sshd[1771]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Mar 17 18:52:40.151778 systemd[1]: Started session-5.scope. Mar 17 18:52:40.152387 systemd-logind[1398]: New session 5 of user core. Mar 17 18:52:40.585055 sshd[1771]: pam_unix(sshd:session): session closed for user core Mar 17 18:52:40.588316 systemd[1]: sshd@2-10.200.8.35:22-10.200.16.10:58926.service: Deactivated successfully. Mar 17 18:52:40.589326 systemd[1]: session-5.scope: Deactivated successfully. Mar 17 18:52:40.590107 systemd-logind[1398]: Session 5 logged out. Waiting for processes to exit. Mar 17 18:52:40.591059 systemd-logind[1398]: Removed session 5. Mar 17 18:52:40.689523 systemd[1]: Started sshd@3-10.200.8.35:22-10.200.16.10:58942.service. Mar 17 18:52:41.321420 sshd[1777]: Accepted publickey for core from 10.200.16.10 port 58942 ssh2: RSA SHA256:Id7fTtJmja0nOLdf0IQA3jnxxJrUKKdGU1UW83zjTQg Mar 17 18:52:41.323029 sshd[1777]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Mar 17 18:52:41.328781 systemd[1]: Started session-6.scope. Mar 17 18:52:41.329362 systemd-logind[1398]: New session 6 of user core. Mar 17 18:52:41.666848 systemd[1]: kubelet.service: Scheduled restart job, restart counter is at 5. Mar 17 18:52:41.667112 systemd[1]: Stopped kubelet.service. Mar 17 18:52:41.669107 systemd[1]: Starting kubelet.service... Mar 17 18:52:41.877428 systemd[1]: Started sshd@4-10.200.8.35:22-10.200.16.10:58956.service. Mar 17 18:52:42.144747 sshd[1777]: pam_unix(sshd:session): session closed for user core Mar 17 18:52:42.147755 systemd[1]: sshd@3-10.200.8.35:22-10.200.16.10:58942.service: Deactivated successfully. Mar 17 18:52:42.149367 systemd[1]: session-6.scope: Deactivated successfully. Mar 17 18:52:42.151670 systemd-logind[1398]: Session 6 logged out. Waiting for processes to exit. Mar 17 18:52:42.152710 systemd-logind[1398]: Removed session 6. Mar 17 18:52:42.181712 systemd[1]: Started kubelet.service. Mar 17 18:52:42.408798 kubelet[1789]: E0317 18:52:42.407920 1789 run.go:72] "command failed" err="failed to load kubelet config file, path: /var/lib/kubelet/config.yaml, error: failed to load Kubelet config file /var/lib/kubelet/config.yaml, error failed to read kubelet config file \"/var/lib/kubelet/config.yaml\", error: open /var/lib/kubelet/config.yaml: no such file or directory" Mar 17 18:52:42.410408 systemd[1]: kubelet.service: Main process exited, code=exited, status=1/FAILURE Mar 17 18:52:42.410564 systemd[1]: kubelet.service: Failed with result 'exit-code'. Mar 17 18:52:42.506395 sshd[1784]: Accepted publickey for core from 10.200.16.10 port 58956 ssh2: RSA SHA256:Id7fTtJmja0nOLdf0IQA3jnxxJrUKKdGU1UW83zjTQg Mar 17 18:52:42.507906 sshd[1784]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Mar 17 18:52:42.512752 systemd[1]: Started session-7.scope. Mar 17 18:52:42.513200 systemd-logind[1398]: New session 7 of user core. Mar 17 18:52:43.146137 sudo[1795]: core : PWD=/home/core ; USER=root ; COMMAND=/usr/sbin/setenforce 1 Mar 17 18:52:43.146544 sudo[1795]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=500) Mar 17 18:52:43.187499 dbus-daemon[1385]: \xd0͉V\xc0U: received setenforce notice (enforcing=-447995328) Mar 17 18:52:43.189657 sudo[1795]: pam_unix(sudo:session): session closed for user root Mar 17 18:52:43.307824 sshd[1784]: pam_unix(sshd:session): session closed for user core Mar 17 18:52:43.311545 systemd[1]: sshd@4-10.200.8.35:22-10.200.16.10:58956.service: Deactivated successfully. Mar 17 18:52:43.312710 systemd[1]: session-7.scope: Deactivated successfully. Mar 17 18:52:43.314024 systemd-logind[1398]: Session 7 logged out. Waiting for processes to exit. Mar 17 18:52:43.315188 systemd-logind[1398]: Removed session 7. Mar 17 18:52:43.412957 systemd[1]: Started sshd@5-10.200.8.35:22-10.200.16.10:58972.service. Mar 17 18:52:44.043073 sshd[1799]: Accepted publickey for core from 10.200.16.10 port 58972 ssh2: RSA SHA256:Id7fTtJmja0nOLdf0IQA3jnxxJrUKKdGU1UW83zjTQg Mar 17 18:52:44.044833 sshd[1799]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Mar 17 18:52:44.050285 systemd[1]: Started session-8.scope. Mar 17 18:52:44.050712 systemd-logind[1398]: New session 8 of user core. Mar 17 18:52:44.387560 sudo[1803]: core : PWD=/home/core ; USER=root ; COMMAND=/usr/bin/rm -rf /etc/audit/rules.d/80-selinux.rules /etc/audit/rules.d/99-default.rules Mar 17 18:52:44.388137 sudo[1803]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=500) Mar 17 18:52:44.390902 sudo[1803]: pam_unix(sudo:session): session closed for user root Mar 17 18:52:44.395530 sudo[1802]: core : PWD=/home/core ; USER=root ; COMMAND=/usr/bin/systemctl restart audit-rules Mar 17 18:52:44.395808 sudo[1802]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=500) Mar 17 18:52:44.404524 systemd[1]: Stopping audit-rules.service... Mar 17 18:52:44.404000 audit: CONFIG_CHANGE auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op=remove_rule key=(null) list=5 res=1 Mar 17 18:52:44.406205 auditctl[1806]: No rules Mar 17 18:52:44.409592 kernel: kauditd_printk_skb: 122 callbacks suppressed Mar 17 18:52:44.409649 kernel: audit: type=1305 audit(1742237564.404:205): auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op=remove_rule key=(null) list=5 res=1 Mar 17 18:52:44.406617 systemd[1]: audit-rules.service: Deactivated successfully. Mar 17 18:52:44.406769 systemd[1]: Stopped audit-rules.service. Mar 17 18:52:44.409141 systemd[1]: Starting audit-rules.service... Mar 17 18:52:44.404000 audit[1806]: SYSCALL arch=c000003e syscall=44 success=yes exit=1056 a0=3 a1=7ffeca38ca40 a2=420 a3=0 items=0 ppid=1 pid=1806 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auditctl" exe="/usr/sbin/auditctl" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:52:44.430328 augenrules[1823]: No rules Mar 17 18:52:44.431007 systemd[1]: Finished audit-rules.service. Mar 17 18:52:44.431860 sudo[1802]: pam_unix(sudo:session): session closed for user root Mar 17 18:52:44.404000 audit: PROCTITLE proctitle=2F7362696E2F617564697463746C002D44 Mar 17 18:52:44.438945 kernel: audit: type=1300 audit(1742237564.404:205): arch=c000003e syscall=44 success=yes exit=1056 a0=3 a1=7ffeca38ca40 a2=420 a3=0 items=0 ppid=1 pid=1806 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auditctl" exe="/usr/sbin/auditctl" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:52:44.439003 kernel: audit: type=1327 audit(1742237564.404:205): proctitle=2F7362696E2F617564697463746C002D44 Mar 17 18:52:44.439030 kernel: audit: type=1131 audit(1742237564.404:206): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=audit-rules comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:52:44.404000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=audit-rules comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:52:44.428000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=audit-rules comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:52:44.451280 kernel: audit: type=1130 audit(1742237564.428:207): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=audit-rules comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:52:44.428000 audit[1802]: USER_END pid=1802 uid=500 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_limits,pam_env,pam_unix,pam_permit,pam_systemd acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Mar 17 18:52:44.462282 kernel: audit: type=1106 audit(1742237564.428:208): pid=1802 uid=500 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_limits,pam_env,pam_unix,pam_permit,pam_systemd acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Mar 17 18:52:44.428000 audit[1802]: CRED_DISP pid=1802 uid=500 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Mar 17 18:52:44.486953 kernel: audit: type=1104 audit(1742237564.428:209): pid=1802 uid=500 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Mar 17 18:52:44.540983 sshd[1799]: pam_unix(sshd:session): session closed for user core Mar 17 18:52:44.541000 audit[1799]: USER_END pid=1799 uid=0 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Mar 17 18:52:44.547225 systemd[1]: sshd@5-10.200.8.35:22-10.200.16.10:58972.service: Deactivated successfully. Mar 17 18:52:44.548152 systemd[1]: session-8.scope: Deactivated successfully. Mar 17 18:52:44.549086 systemd-logind[1398]: Session 8 logged out. Waiting for processes to exit. Mar 17 18:52:44.549850 systemd-logind[1398]: Removed session 8. Mar 17 18:52:44.541000 audit[1799]: CRED_DISP pid=1799 uid=0 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Mar 17 18:52:44.582012 kernel: audit: type=1106 audit(1742237564.541:210): pid=1799 uid=0 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Mar 17 18:52:44.582076 kernel: audit: type=1104 audit(1742237564.541:211): pid=1799 uid=0 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Mar 17 18:52:44.582096 kernel: audit: type=1131 audit(1742237564.541:212): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@5-10.200.8.35:22-10.200.16.10:58972 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:52:44.541000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@5-10.200.8.35:22-10.200.16.10:58972 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:52:44.648123 systemd[1]: Started sshd@6-10.200.8.35:22-10.200.16.10:58988.service. Mar 17 18:52:44.647000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@6-10.200.8.35:22-10.200.16.10:58988 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:52:45.277000 audit[1829]: USER_ACCT pid=1829 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Mar 17 18:52:45.279013 sshd[1829]: Accepted publickey for core from 10.200.16.10 port 58988 ssh2: RSA SHA256:Id7fTtJmja0nOLdf0IQA3jnxxJrUKKdGU1UW83zjTQg Mar 17 18:52:45.278000 audit[1829]: CRED_ACQ pid=1829 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Mar 17 18:52:45.279000 audit[1829]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffe332edb70 a2=3 a3=0 items=0 ppid=1 pid=1829 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=9 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:52:45.279000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Mar 17 18:52:45.280780 sshd[1829]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Mar 17 18:52:45.285825 systemd[1]: Started session-9.scope. Mar 17 18:52:45.286430 systemd-logind[1398]: New session 9 of user core. Mar 17 18:52:45.289000 audit[1829]: USER_START pid=1829 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Mar 17 18:52:45.290000 audit[1831]: CRED_ACQ pid=1831 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Mar 17 18:52:45.622000 audit[1832]: USER_ACCT pid=1832 uid=500 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Mar 17 18:52:45.622000 audit[1832]: CRED_REFR pid=1832 uid=500 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Mar 17 18:52:45.624057 sudo[1832]: core : PWD=/home/core ; USER=root ; COMMAND=/home/core/install.sh Mar 17 18:52:45.624407 sudo[1832]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=500) Mar 17 18:52:45.625000 audit[1832]: USER_START pid=1832 uid=500 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_limits,pam_env,pam_unix,pam_permit,pam_systemd acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Mar 17 18:52:45.672683 systemd[1]: Starting docker.service... Mar 17 18:52:45.707417 env[1843]: time="2025-03-17T18:52:45.707366796Z" level=info msg="Starting up" Mar 17 18:52:45.708651 env[1843]: time="2025-03-17T18:52:45.708627823Z" level=info msg="parsed scheme: \"unix\"" module=grpc Mar 17 18:52:45.708768 env[1843]: time="2025-03-17T18:52:45.708755625Z" level=info msg="scheme \"unix\" not registered, fallback to default scheme" module=grpc Mar 17 18:52:45.708831 env[1843]: time="2025-03-17T18:52:45.708819927Z" level=info msg="ccResolverWrapper: sending update to cc: {[{unix:///var/run/docker/libcontainerd/docker-containerd.sock 0 }] }" module=grpc Mar 17 18:52:45.708878 env[1843]: time="2025-03-17T18:52:45.708870128Z" level=info msg="ClientConn switching balancer to \"pick_first\"" module=grpc Mar 17 18:52:45.710727 env[1843]: time="2025-03-17T18:52:45.710700867Z" level=info msg="parsed scheme: \"unix\"" module=grpc Mar 17 18:52:45.710727 env[1843]: time="2025-03-17T18:52:45.710716667Z" level=info msg="scheme \"unix\" not registered, fallback to default scheme" module=grpc Mar 17 18:52:45.710864 env[1843]: time="2025-03-17T18:52:45.710731267Z" level=info msg="ccResolverWrapper: sending update to cc: {[{unix:///var/run/docker/libcontainerd/docker-containerd.sock 0 }] }" module=grpc Mar 17 18:52:45.710864 env[1843]: time="2025-03-17T18:52:45.710741767Z" level=info msg="ClientConn switching balancer to \"pick_first\"" module=grpc Mar 17 18:52:45.787823 env[1843]: time="2025-03-17T18:52:45.787786494Z" level=info msg="Loading containers: start." Mar 17 18:52:45.843000 audit[1870]: NETFILTER_CFG table=nat:5 family=2 entries=2 op=nft_register_chain pid=1870 subj=system_u:system_r:kernel_t:s0 comm="iptables" Mar 17 18:52:45.843000 audit[1870]: SYSCALL arch=c000003e syscall=46 success=yes exit=116 a0=3 a1=7fff4694f270 a2=0 a3=7fff4694f25c items=0 ppid=1843 pid=1870 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:52:45.843000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D74006E6174002D4E00444F434B4552 Mar 17 18:52:45.845000 audit[1872]: NETFILTER_CFG table=filter:6 family=2 entries=2 op=nft_register_chain pid=1872 subj=system_u:system_r:kernel_t:s0 comm="iptables" Mar 17 18:52:45.845000 audit[1872]: SYSCALL arch=c000003e syscall=46 success=yes exit=124 a0=3 a1=7ffdded12300 a2=0 a3=7ffdded122ec items=0 ppid=1843 pid=1872 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:52:45.845000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D740066696C746572002D4E00444F434B4552 Mar 17 18:52:45.846000 audit[1874]: NETFILTER_CFG table=filter:7 family=2 entries=1 op=nft_register_chain pid=1874 subj=system_u:system_r:kernel_t:s0 comm="iptables" Mar 17 18:52:45.846000 audit[1874]: SYSCALL arch=c000003e syscall=46 success=yes exit=112 a0=3 a1=7ffcb8412a50 a2=0 a3=7ffcb8412a3c items=0 ppid=1843 pid=1874 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:52:45.846000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D740066696C746572002D4E00444F434B45522D49534F4C4154494F4E2D53544147452D31 Mar 17 18:52:45.848000 audit[1876]: NETFILTER_CFG table=filter:8 family=2 entries=1 op=nft_register_chain pid=1876 subj=system_u:system_r:kernel_t:s0 comm="iptables" Mar 17 18:52:45.848000 audit[1876]: SYSCALL arch=c000003e syscall=46 success=yes exit=112 a0=3 a1=7ffff3c16f60 a2=0 a3=7ffff3c16f4c items=0 ppid=1843 pid=1876 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:52:45.848000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D740066696C746572002D4E00444F434B45522D49534F4C4154494F4E2D53544147452D32 Mar 17 18:52:45.850000 audit[1878]: NETFILTER_CFG table=filter:9 family=2 entries=1 op=nft_register_rule pid=1878 subj=system_u:system_r:kernel_t:s0 comm="iptables" Mar 17 18:52:45.850000 audit[1878]: SYSCALL arch=c000003e syscall=46 success=yes exit=228 a0=3 a1=7ffca1bdc8e0 a2=0 a3=7ffca1bdc8cc items=0 ppid=1843 pid=1878 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:52:45.850000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4100444F434B45522D49534F4C4154494F4E2D53544147452D31002D6A0052455455524E Mar 17 18:52:45.852000 audit[1880]: NETFILTER_CFG table=filter:10 family=2 entries=1 op=nft_register_rule pid=1880 subj=system_u:system_r:kernel_t:s0 comm="iptables" Mar 17 18:52:45.852000 audit[1880]: SYSCALL arch=c000003e syscall=46 success=yes exit=228 a0=3 a1=7ffebce6ce80 a2=0 a3=7ffebce6ce6c items=0 ppid=1843 pid=1880 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:52:45.852000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4100444F434B45522D49534F4C4154494F4E2D53544147452D32002D6A0052455455524E Mar 17 18:52:45.869000 audit[1882]: NETFILTER_CFG table=filter:11 family=2 entries=1 op=nft_register_chain pid=1882 subj=system_u:system_r:kernel_t:s0 comm="iptables" Mar 17 18:52:45.869000 audit[1882]: SYSCALL arch=c000003e syscall=46 success=yes exit=96 a0=3 a1=7ffc75562a10 a2=0 a3=7ffc755629fc items=0 ppid=1843 pid=1882 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:52:45.869000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D740066696C746572002D4E00444F434B45522D55534552 Mar 17 18:52:45.871000 audit[1884]: NETFILTER_CFG table=filter:12 family=2 entries=1 op=nft_register_rule pid=1884 subj=system_u:system_r:kernel_t:s0 comm="iptables" Mar 17 18:52:45.871000 audit[1884]: SYSCALL arch=c000003e syscall=46 success=yes exit=212 a0=3 a1=7ffcc4a2f660 a2=0 a3=7ffcc4a2f64c items=0 ppid=1843 pid=1884 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:52:45.871000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4100444F434B45522D55534552002D6A0052455455524E Mar 17 18:52:45.873000 audit[1886]: NETFILTER_CFG table=filter:13 family=2 entries=2 op=nft_register_chain pid=1886 subj=system_u:system_r:kernel_t:s0 comm="iptables" Mar 17 18:52:45.873000 audit[1886]: SYSCALL arch=c000003e syscall=46 success=yes exit=308 a0=3 a1=7fffdaca2010 a2=0 a3=7fffdaca1ffc items=0 ppid=1843 pid=1886 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:52:45.873000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6A00444F434B45522D55534552 Mar 17 18:52:45.893000 audit[1890]: NETFILTER_CFG table=filter:14 family=2 entries=1 op=nft_unregister_rule pid=1890 subj=system_u:system_r:kernel_t:s0 comm="iptables" Mar 17 18:52:45.893000 audit[1890]: SYSCALL arch=c000003e syscall=46 success=yes exit=216 a0=3 a1=7ffc88179120 a2=0 a3=7ffc8817910c items=0 ppid=1843 pid=1890 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:52:45.893000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4400464F5257415244002D6A00444F434B45522D55534552 Mar 17 18:52:45.897000 audit[1891]: NETFILTER_CFG table=filter:15 family=2 entries=1 op=nft_register_rule pid=1891 subj=system_u:system_r:kernel_t:s0 comm="iptables" Mar 17 18:52:45.897000 audit[1891]: SYSCALL arch=c000003e syscall=46 success=yes exit=224 a0=3 a1=7ffc8ab01720 a2=0 a3=7ffc8ab0170c items=0 ppid=1843 pid=1891 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:52:45.897000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6A00444F434B45522D55534552 Mar 17 18:52:45.941286 kernel: Initializing XFRM netlink socket Mar 17 18:52:45.967085 env[1843]: time="2025-03-17T18:52:45.967047679Z" level=info msg="Default bridge (docker0) is assigned with an IP address 172.17.0.0/16. Daemon option --bip can be used to set a preferred IP address" Mar 17 18:52:46.063000 audit[1899]: NETFILTER_CFG table=nat:16 family=2 entries=2 op=nft_register_chain pid=1899 subj=system_u:system_r:kernel_t:s0 comm="iptables" Mar 17 18:52:46.063000 audit[1899]: SYSCALL arch=c000003e syscall=46 success=yes exit=492 a0=3 a1=7ffd99e1e300 a2=0 a3=7ffd99e1e2ec items=0 ppid=1843 pid=1899 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:52:46.063000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D74006E6174002D4900504F5354524F5554494E47002D73003137322E31372E302E302F31360000002D6F00646F636B657230002D6A004D415351554552414445 Mar 17 18:52:46.086000 audit[1902]: NETFILTER_CFG table=nat:17 family=2 entries=1 op=nft_register_rule pid=1902 subj=system_u:system_r:kernel_t:s0 comm="iptables" Mar 17 18:52:46.086000 audit[1902]: SYSCALL arch=c000003e syscall=46 success=yes exit=288 a0=3 a1=7ffd01110110 a2=0 a3=7ffd011100fc items=0 ppid=1843 pid=1902 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:52:46.086000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D74006E6174002D4900444F434B4552002D6900646F636B657230002D6A0052455455524E Mar 17 18:52:46.089000 audit[1905]: NETFILTER_CFG table=filter:18 family=2 entries=1 op=nft_register_rule pid=1905 subj=system_u:system_r:kernel_t:s0 comm="iptables" Mar 17 18:52:46.089000 audit[1905]: SYSCALL arch=c000003e syscall=46 success=yes exit=376 a0=3 a1=7ffdad0a3630 a2=0 a3=7ffdad0a361c items=0 ppid=1843 pid=1905 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:52:46.089000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6900646F636B657230002D6F00646F636B657230002D6A00414343455054 Mar 17 18:52:46.091000 audit[1907]: NETFILTER_CFG table=filter:19 family=2 entries=1 op=nft_register_rule pid=1907 subj=system_u:system_r:kernel_t:s0 comm="iptables" Mar 17 18:52:46.091000 audit[1907]: SYSCALL arch=c000003e syscall=46 success=yes exit=376 a0=3 a1=7fff7ba4b750 a2=0 a3=7fff7ba4b73c items=0 ppid=1843 pid=1907 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:52:46.091000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6900646F636B6572300000002D6F00646F636B657230002D6A00414343455054 Mar 17 18:52:46.093000 audit[1909]: NETFILTER_CFG table=nat:20 family=2 entries=2 op=nft_register_chain pid=1909 subj=system_u:system_r:kernel_t:s0 comm="iptables" Mar 17 18:52:46.093000 audit[1909]: SYSCALL arch=c000003e syscall=46 success=yes exit=356 a0=3 a1=7ffd8e011ff0 a2=0 a3=7ffd8e011fdc items=0 ppid=1843 pid=1909 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:52:46.093000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D74006E6174002D4100505245524F5554494E47002D6D006164647274797065002D2D6473742D74797065004C4F43414C002D6A00444F434B4552 Mar 17 18:52:46.096000 audit[1911]: NETFILTER_CFG table=nat:21 family=2 entries=2 op=nft_register_chain pid=1911 subj=system_u:system_r:kernel_t:s0 comm="iptables" Mar 17 18:52:46.096000 audit[1911]: SYSCALL arch=c000003e syscall=46 success=yes exit=444 a0=3 a1=7ffe128f2150 a2=0 a3=7ffe128f213c items=0 ppid=1843 pid=1911 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:52:46.096000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D74006E6174002D41004F5554505554002D6D006164647274797065002D2D6473742D74797065004C4F43414C002D6A00444F434B45520000002D2D647374003132372E302E302E302F38 Mar 17 18:52:46.098000 audit[1913]: NETFILTER_CFG table=filter:22 family=2 entries=1 op=nft_register_rule pid=1913 subj=system_u:system_r:kernel_t:s0 comm="iptables" Mar 17 18:52:46.098000 audit[1913]: SYSCALL arch=c000003e syscall=46 success=yes exit=304 a0=3 a1=7ffd12a8d8c0 a2=0 a3=7ffd12a8d8ac items=0 ppid=1843 pid=1913 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:52:46.098000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6F00646F636B657230002D6A00444F434B4552 Mar 17 18:52:46.100000 audit[1915]: NETFILTER_CFG table=filter:23 family=2 entries=1 op=nft_register_rule pid=1915 subj=system_u:system_r:kernel_t:s0 comm="iptables" Mar 17 18:52:46.100000 audit[1915]: SYSCALL arch=c000003e syscall=46 success=yes exit=508 a0=3 a1=7fffb26a4ba0 a2=0 a3=7fffb26a4b8c items=0 ppid=1843 pid=1915 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:52:46.100000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6F00646F636B657230002D6D00636F6E6E747261636B002D2D637473746174650052454C415445442C45535441424C4953484544002D6A00414343455054 Mar 17 18:52:46.102000 audit[1917]: NETFILTER_CFG table=filter:24 family=2 entries=1 op=nft_register_rule pid=1917 subj=system_u:system_r:kernel_t:s0 comm="iptables" Mar 17 18:52:46.102000 audit[1917]: SYSCALL arch=c000003e syscall=46 success=yes exit=240 a0=3 a1=7ffdb49f7be0 a2=0 a3=7ffdb49f7bcc items=0 ppid=1843 pid=1917 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:52:46.102000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6A00444F434B45522D49534F4C4154494F4E2D53544147452D31 Mar 17 18:52:46.104000 audit[1919]: NETFILTER_CFG table=filter:25 family=2 entries=1 op=nft_register_rule pid=1919 subj=system_u:system_r:kernel_t:s0 comm="iptables" Mar 17 18:52:46.104000 audit[1919]: SYSCALL arch=c000003e syscall=46 success=yes exit=428 a0=3 a1=7fffd6e4c070 a2=0 a3=7fffd6e4c05c items=0 ppid=1843 pid=1919 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:52:46.104000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D740066696C746572002D4900444F434B45522D49534F4C4154494F4E2D53544147452D31002D6900646F636B6572300000002D6F00646F636B657230002D6A00444F434B45522D49534F4C4154494F4E2D53544147452D32 Mar 17 18:52:46.106000 audit[1921]: NETFILTER_CFG table=filter:26 family=2 entries=1 op=nft_register_rule pid=1921 subj=system_u:system_r:kernel_t:s0 comm="iptables" Mar 17 18:52:46.106000 audit[1921]: SYSCALL arch=c000003e syscall=46 success=yes exit=312 a0=3 a1=7fffe2978d60 a2=0 a3=7fffe2978d4c items=0 ppid=1843 pid=1921 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:52:46.106000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D740066696C746572002D4900444F434B45522D49534F4C4154494F4E2D53544147452D32002D6F00646F636B657230002D6A0044524F50 Mar 17 18:52:46.108081 systemd-networkd[1562]: docker0: Link UP Mar 17 18:52:46.121000 audit[1926]: NETFILTER_CFG table=filter:27 family=2 entries=1 op=nft_unregister_rule pid=1926 subj=system_u:system_r:kernel_t:s0 comm="iptables" Mar 17 18:52:46.121000 audit[1926]: SYSCALL arch=c000003e syscall=46 success=yes exit=228 a0=3 a1=7ffe38b83650 a2=0 a3=7ffe38b8363c items=0 ppid=1843 pid=1926 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:52:46.121000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4400464F5257415244002D6A00444F434B45522D55534552 Mar 17 18:52:46.126000 audit[1927]: NETFILTER_CFG table=filter:28 family=2 entries=1 op=nft_register_rule pid=1927 subj=system_u:system_r:kernel_t:s0 comm="iptables" Mar 17 18:52:46.126000 audit[1927]: SYSCALL arch=c000003e syscall=46 success=yes exit=224 a0=3 a1=7ffd5b696380 a2=0 a3=7ffd5b69636c items=0 ppid=1843 pid=1927 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:52:46.126000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6A00444F434B45522D55534552 Mar 17 18:52:46.128678 env[1843]: time="2025-03-17T18:52:46.128650716Z" level=info msg="Loading containers: done." Mar 17 18:52:46.199519 env[1843]: time="2025-03-17T18:52:46.199462170Z" level=warning msg="Not using native diff for overlay2, this may cause degraded performance for building images: kernel has CONFIG_OVERLAY_FS_REDIRECT_DIR enabled" storage-driver=overlay2 Mar 17 18:52:46.199777 env[1843]: time="2025-03-17T18:52:46.199739576Z" level=info msg="Docker daemon" commit=112bdf3343 graphdriver(s)=overlay2 version=20.10.23 Mar 17 18:52:46.199909 env[1843]: time="2025-03-17T18:52:46.199878678Z" level=info msg="Daemon has completed initialization" Mar 17 18:52:46.229985 systemd[1]: Started docker.service. Mar 17 18:52:46.228000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=docker comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:52:46.240871 env[1843]: time="2025-03-17T18:52:46.240803018Z" level=info msg="API listen on /run/docker.sock" Mar 17 18:52:47.464695 env[1409]: time="2025-03-17T18:52:47.464642877Z" level=info msg="PullImage \"registry.k8s.io/kube-apiserver:v1.32.3\"" Mar 17 18:52:48.202162 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount647602168.mount: Deactivated successfully. Mar 17 18:52:49.897869 env[1409]: time="2025-03-17T18:52:49.897813518Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-apiserver:v1.32.3,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Mar 17 18:52:49.905472 env[1409]: time="2025-03-17T18:52:49.905425462Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:f8bdc4cfa0651e2d7edb4678d2b90129aef82a19249b37dc8d4705e8bd604295,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Mar 17 18:52:49.911723 env[1409]: time="2025-03-17T18:52:49.911682780Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/kube-apiserver:v1.32.3,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Mar 17 18:52:49.913681 env[1409]: time="2025-03-17T18:52:49.913645617Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-apiserver@sha256:279e45cf07e4f56925c3c5237179eb63616788426a96e94df5fedf728b18926e,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Mar 17 18:52:49.914362 env[1409]: time="2025-03-17T18:52:49.914331130Z" level=info msg="PullImage \"registry.k8s.io/kube-apiserver:v1.32.3\" returns image reference \"sha256:f8bdc4cfa0651e2d7edb4678d2b90129aef82a19249b37dc8d4705e8bd604295\"" Mar 17 18:52:49.914971 env[1409]: time="2025-03-17T18:52:49.914943442Z" level=info msg="PullImage \"registry.k8s.io/kube-controller-manager:v1.32.3\"" Mar 17 18:52:51.651035 env[1409]: time="2025-03-17T18:52:51.650970941Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-controller-manager:v1.32.3,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Mar 17 18:52:51.656952 env[1409]: time="2025-03-17T18:52:51.656892746Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:085818208a5213f37ef6d103caaf8e1e243816a614eb5b87a98bfffe79c687b5,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Mar 17 18:52:51.662761 env[1409]: time="2025-03-17T18:52:51.662717850Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/kube-controller-manager:v1.32.3,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Mar 17 18:52:51.666523 env[1409]: time="2025-03-17T18:52:51.666484218Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-controller-manager@sha256:54456a96a1bbdc35dcc2e70fcc1355bf655af67694e40b650ac12e83521f6411,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Mar 17 18:52:51.667172 env[1409]: time="2025-03-17T18:52:51.667136429Z" level=info msg="PullImage \"registry.k8s.io/kube-controller-manager:v1.32.3\" returns image reference \"sha256:085818208a5213f37ef6d103caaf8e1e243816a614eb5b87a98bfffe79c687b5\"" Mar 17 18:52:51.667796 env[1409]: time="2025-03-17T18:52:51.667768241Z" level=info msg="PullImage \"registry.k8s.io/kube-scheduler:v1.32.3\"" Mar 17 18:52:52.489030 systemd[1]: kubelet.service: Scheduled restart job, restart counter is at 6. Mar 17 18:52:52.489300 systemd[1]: Stopped kubelet.service. Mar 17 18:52:52.491180 systemd[1]: Starting kubelet.service... Mar 17 18:52:52.488000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:52:52.494890 kernel: kauditd_printk_skb: 84 callbacks suppressed Mar 17 18:52:52.495747 kernel: audit: type=1130 audit(1742237572.488:247): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:52:52.488000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:52:52.519282 kernel: audit: type=1131 audit(1742237572.488:248): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:52:52.639000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:52:52.640127 systemd[1]: Started kubelet.service. Mar 17 18:52:52.652286 kernel: audit: type=1130 audit(1742237572.639:249): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:52:52.697572 kubelet[1964]: E0317 18:52:52.697526 1964 run.go:72] "command failed" err="failed to load kubelet config file, path: /var/lib/kubelet/config.yaml, error: failed to load Kubelet config file /var/lib/kubelet/config.yaml, error failed to read kubelet config file \"/var/lib/kubelet/config.yaml\", error: open /var/lib/kubelet/config.yaml: no such file or directory" Mar 17 18:52:52.698000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' Mar 17 18:52:52.699820 systemd[1]: kubelet.service: Main process exited, code=exited, status=1/FAILURE Mar 17 18:52:52.699976 systemd[1]: kubelet.service: Failed with result 'exit-code'. Mar 17 18:52:52.716287 kernel: audit: type=1131 audit(1742237572.698:250): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' Mar 17 18:52:53.277863 env[1409]: time="2025-03-17T18:52:53.277801845Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-scheduler:v1.32.3,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Mar 17 18:52:53.282672 env[1409]: time="2025-03-17T18:52:53.282630426Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:b4260bf5078ab1b01dd05fb05015fc436b7100b7b9b5ea738e247a86008b16b8,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Mar 17 18:52:53.286538 env[1409]: time="2025-03-17T18:52:53.286496092Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/kube-scheduler:v1.32.3,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Mar 17 18:52:53.290417 env[1409]: time="2025-03-17T18:52:53.290382557Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-scheduler@sha256:aafae2e3a8d65bc6dc3a0c6095c24bc72b1ff608e1417f0f5e860ce4a61c27df,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Mar 17 18:52:53.291020 env[1409]: time="2025-03-17T18:52:53.290987167Z" level=info msg="PullImage \"registry.k8s.io/kube-scheduler:v1.32.3\" returns image reference \"sha256:b4260bf5078ab1b01dd05fb05015fc436b7100b7b9b5ea738e247a86008b16b8\"" Mar 17 18:52:53.291728 env[1409]: time="2025-03-17T18:52:53.291699279Z" level=info msg="PullImage \"registry.k8s.io/kube-proxy:v1.32.3\"" Mar 17 18:52:54.714314 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount2067059090.mount: Deactivated successfully. Mar 17 18:52:55.380388 env[1409]: time="2025-03-17T18:52:55.380337591Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-proxy:v1.32.3,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Mar 17 18:52:55.385091 env[1409]: time="2025-03-17T18:52:55.385052267Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:a1ae78fd2f9d8fc345928378dc947c7f1e95f01c1a552781827071867a95d09c,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Mar 17 18:52:55.388504 env[1409]: time="2025-03-17T18:52:55.388471022Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/kube-proxy:v1.32.3,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Mar 17 18:52:55.392354 env[1409]: time="2025-03-17T18:52:55.392323083Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-proxy@sha256:5015269547a0b7dd2c062758e9a64467b58978ff2502cad4c3f5cdf4aa554ad3,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Mar 17 18:52:55.392810 env[1409]: time="2025-03-17T18:52:55.392780291Z" level=info msg="PullImage \"registry.k8s.io/kube-proxy:v1.32.3\" returns image reference \"sha256:a1ae78fd2f9d8fc345928378dc947c7f1e95f01c1a552781827071867a95d09c\"" Mar 17 18:52:55.393363 env[1409]: time="2025-03-17T18:52:55.393336800Z" level=info msg="PullImage \"registry.k8s.io/coredns/coredns:v1.11.3\"" Mar 17 18:52:56.027057 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount3811668165.mount: Deactivated successfully. Mar 17 18:52:57.424500 env[1409]: time="2025-03-17T18:52:57.424433932Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/coredns/coredns:v1.11.3,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Mar 17 18:52:57.430540 env[1409]: time="2025-03-17T18:52:57.430496123Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:c69fa2e9cbf5f42dc48af631e956d3f95724c13f91596bc567591790e5e36db6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Mar 17 18:52:57.434892 env[1409]: time="2025-03-17T18:52:57.434858090Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/coredns/coredns:v1.11.3,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Mar 17 18:52:57.438668 env[1409]: time="2025-03-17T18:52:57.438632147Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/coredns/coredns@sha256:9caabbf6238b189a65d0d6e6ac138de60d6a1c419e5a341fbbb7c78382559c6e,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Mar 17 18:52:57.439406 env[1409]: time="2025-03-17T18:52:57.439373658Z" level=info msg="PullImage \"registry.k8s.io/coredns/coredns:v1.11.3\" returns image reference \"sha256:c69fa2e9cbf5f42dc48af631e956d3f95724c13f91596bc567591790e5e36db6\"" Mar 17 18:52:57.439939 env[1409]: time="2025-03-17T18:52:57.439914066Z" level=info msg="PullImage \"registry.k8s.io/pause:3.10\"" Mar 17 18:52:57.976163 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount4124575930.mount: Deactivated successfully. Mar 17 18:52:58.000336 env[1409]: time="2025-03-17T18:52:58.000288566Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/pause:3.10,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Mar 17 18:52:58.008138 env[1409]: time="2025-03-17T18:52:58.008103682Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:873ed75102791e5b0b8a7fcd41606c92fcec98d56d05ead4ac5131650004c136,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Mar 17 18:52:58.012409 env[1409]: time="2025-03-17T18:52:58.012381345Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause:3.10,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Mar 17 18:52:58.017512 env[1409]: time="2025-03-17T18:52:58.017462220Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/pause@sha256:ee6521f290b2168b6e0935a181d4cff9be1ac3f505666ef0e3c98fae8199917a,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Mar 17 18:52:58.017996 env[1409]: time="2025-03-17T18:52:58.017967227Z" level=info msg="PullImage \"registry.k8s.io/pause:3.10\" returns image reference \"sha256:873ed75102791e5b0b8a7fcd41606c92fcec98d56d05ead4ac5131650004c136\"" Mar 17 18:52:58.018552 env[1409]: time="2025-03-17T18:52:58.018530036Z" level=info msg="PullImage \"registry.k8s.io/etcd:3.5.16-0\"" Mar 17 18:52:59.125215 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount4178758228.mount: Deactivated successfully. Mar 17 18:53:01.662176 env[1409]: time="2025-03-17T18:53:01.662117343Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/etcd:3.5.16-0,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Mar 17 18:53:01.666636 env[1409]: time="2025-03-17T18:53:01.666584704Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:a9e7e6b294baf1695fccb862d956c5d3ad8510e1e4ca1535f35dc09f247abbfc,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Mar 17 18:53:01.670091 env[1409]: time="2025-03-17T18:53:01.670046051Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/etcd:3.5.16-0,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Mar 17 18:53:01.674433 env[1409]: time="2025-03-17T18:53:01.674390011Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/etcd@sha256:c6a9d11cc5c04b114ccdef39a9265eeef818e3d02f5359be035ae784097fdec5,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Mar 17 18:53:01.675312 env[1409]: time="2025-03-17T18:53:01.675271223Z" level=info msg="PullImage \"registry.k8s.io/etcd:3.5.16-0\" returns image reference \"sha256:a9e7e6b294baf1695fccb862d956c5d3ad8510e1e4ca1535f35dc09f247abbfc\"" Mar 17 18:53:02.738000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:53:02.739019 systemd[1]: kubelet.service: Scheduled restart job, restart counter is at 7. Mar 17 18:53:02.739258 systemd[1]: Stopped kubelet.service. Mar 17 18:53:02.741203 systemd[1]: Starting kubelet.service... Mar 17 18:53:02.755292 kernel: audit: type=1130 audit(1742237582.738:251): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:53:02.738000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:53:02.780305 kernel: audit: type=1131 audit(1742237582.738:252): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:53:02.860000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:53:02.861221 systemd[1]: Started kubelet.service. Mar 17 18:53:02.877293 kernel: audit: type=1130 audit(1742237582.860:253): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:53:02.923042 kubelet[1992]: E0317 18:53:02.922907 1992 run.go:72] "command failed" err="failed to load kubelet config file, path: /var/lib/kubelet/config.yaml, error: failed to load Kubelet config file /var/lib/kubelet/config.yaml, error failed to read kubelet config file \"/var/lib/kubelet/config.yaml\", error: open /var/lib/kubelet/config.yaml: no such file or directory" Mar 17 18:53:02.924000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' Mar 17 18:53:02.925188 systemd[1]: kubelet.service: Main process exited, code=exited, status=1/FAILURE Mar 17 18:53:02.925357 systemd[1]: kubelet.service: Failed with result 'exit-code'. Mar 17 18:53:02.941285 kernel: audit: type=1131 audit(1742237582.924:254): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' Mar 17 18:53:04.020253 systemd[1]: Stopped kubelet.service. Mar 17 18:53:04.019000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:53:04.022939 systemd[1]: Starting kubelet.service... Mar 17 18:53:04.019000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:53:04.053330 kernel: audit: type=1130 audit(1742237584.019:255): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:53:04.053418 kernel: audit: type=1131 audit(1742237584.019:256): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:53:04.056330 systemd[1]: Reloading. Mar 17 18:53:04.142745 /usr/lib/systemd/system-generators/torcx-generator[2024]: time="2025-03-17T18:53:04Z" level=debug msg="common configuration parsed" base_dir=/var/lib/torcx/ conf_dir=/etc/torcx/ run_dir=/run/torcx/ store_paths="[/usr/share/torcx/store /usr/share/oem/torcx/store/3510.3.7 /usr/share/oem/torcx/store /var/lib/torcx/store/3510.3.7 /var/lib/torcx/store]" Mar 17 18:53:04.145370 /usr/lib/systemd/system-generators/torcx-generator[2024]: time="2025-03-17T18:53:04Z" level=info msg="torcx already run" Mar 17 18:53:04.233846 systemd[1]: /usr/lib/systemd/system/locksmithd.service:8: Unit uses CPUShares=; please use CPUWeight= instead. Support for CPUShares= will be removed soon. Mar 17 18:53:04.233866 systemd[1]: /usr/lib/systemd/system/locksmithd.service:9: Unit uses MemoryLimit=; please use MemoryMax= instead. Support for MemoryLimit= will be removed soon. Mar 17 18:53:04.250166 systemd[1]: /run/systemd/system/docker.socket:8: ListenStream= references a path below legacy directory /var/run/, updating /var/run/docker.sock → /run/docker.sock; please update the unit file accordingly. Mar 17 18:53:04.316000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:04.331289 kernel: audit: type=1400 audit(1742237584.316:257): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:04.316000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:04.360002 kernel: audit: type=1400 audit(1742237584.316:258): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:04.360119 kernel: audit: type=1400 audit(1742237584.316:259): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:04.316000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:04.374525 kernel: audit: type=1400 audit(1742237584.316:260): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:04.316000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:04.316000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:04.316000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:04.316000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:04.316000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:04.316000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:04.330000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:04.330000 audit: BPF prog-id=41 op=LOAD Mar 17 18:53:04.330000 audit: BPF prog-id=38 op=UNLOAD Mar 17 18:53:04.330000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:04.330000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:04.330000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:04.330000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:04.330000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:04.330000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:04.330000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:04.330000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:04.330000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:04.345000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:04.345000 audit: BPF prog-id=42 op=LOAD Mar 17 18:53:04.345000 audit: BPF prog-id=34 op=UNLOAD Mar 17 18:53:04.345000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:04.345000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:04.345000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:04.345000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:04.345000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:04.345000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:04.345000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:04.345000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:04.345000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:04.359000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:04.359000 audit: BPF prog-id=43 op=LOAD Mar 17 18:53:04.359000 audit: BPF prog-id=24 op=UNLOAD Mar 17 18:53:04.359000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:04.359000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:04.359000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:04.359000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:04.359000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:04.359000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:04.359000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:04.359000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:04.359000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:04.359000 audit: BPF prog-id=44 op=LOAD Mar 17 18:53:04.359000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:04.359000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:04.359000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:04.359000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:04.359000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:04.359000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:04.359000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:04.359000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:04.379000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:04.379000 audit: BPF prog-id=45 op=LOAD Mar 17 18:53:04.379000 audit: BPF prog-id=25 op=UNLOAD Mar 17 18:53:04.379000 audit: BPF prog-id=26 op=UNLOAD Mar 17 18:53:04.381000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:04.381000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:04.381000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:04.381000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:04.381000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:04.381000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:04.381000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:04.381000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:04.381000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:04.381000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:04.381000 audit: BPF prog-id=46 op=LOAD Mar 17 18:53:04.381000 audit: BPF prog-id=35 op=UNLOAD Mar 17 18:53:04.381000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:04.381000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:04.381000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:04.381000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:04.381000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:04.381000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:04.381000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:04.381000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:04.381000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:04.381000 audit: BPF prog-id=47 op=LOAD Mar 17 18:53:04.381000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:04.381000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:04.381000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:04.381000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:04.381000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:04.381000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:04.381000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:04.381000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:04.381000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:04.381000 audit: BPF prog-id=48 op=LOAD Mar 17 18:53:04.381000 audit: BPF prog-id=36 op=UNLOAD Mar 17 18:53:04.381000 audit: BPF prog-id=37 op=UNLOAD Mar 17 18:53:04.382000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:04.382000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:04.382000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:04.382000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:04.382000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:04.382000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:04.382000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:04.382000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:04.382000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:04.382000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:04.382000 audit: BPF prog-id=49 op=LOAD Mar 17 18:53:04.382000 audit: BPF prog-id=27 op=UNLOAD Mar 17 18:53:04.382000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:04.382000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:04.382000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:04.382000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:04.382000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:04.382000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:04.382000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:04.382000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:04.382000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:04.382000 audit: BPF prog-id=50 op=LOAD Mar 17 18:53:04.382000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:04.382000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:04.382000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:04.382000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:04.382000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:04.382000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:04.382000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:04.382000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:04.382000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:04.382000 audit: BPF prog-id=51 op=LOAD Mar 17 18:53:04.382000 audit: BPF prog-id=28 op=UNLOAD Mar 17 18:53:04.382000 audit: BPF prog-id=29 op=UNLOAD Mar 17 18:53:04.384000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:04.384000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:04.384000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:04.384000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:04.384000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:04.384000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:04.384000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:04.384000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:04.384000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:04.384000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:04.384000 audit: BPF prog-id=52 op=LOAD Mar 17 18:53:04.384000 audit: BPF prog-id=33 op=UNLOAD Mar 17 18:53:04.386000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:04.386000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:04.386000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:04.386000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:04.386000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:04.386000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:04.386000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:04.386000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:04.386000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:04.386000 audit: BPF prog-id=53 op=LOAD Mar 17 18:53:04.386000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:04.386000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:04.386000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:04.386000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:04.386000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:04.386000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:04.386000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:04.386000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:04.386000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:04.386000 audit: BPF prog-id=54 op=LOAD Mar 17 18:53:04.386000 audit: BPF prog-id=30 op=UNLOAD Mar 17 18:53:04.386000 audit: BPF prog-id=31 op=UNLOAD Mar 17 18:53:04.387000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:04.387000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:04.387000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:04.387000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:04.387000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:04.387000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:04.387000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:04.387000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:04.387000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:04.387000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:04.387000 audit: BPF prog-id=55 op=LOAD Mar 17 18:53:04.387000 audit: BPF prog-id=40 op=UNLOAD Mar 17 18:53:04.662745 systemd[1]: kubelet.service: Control process exited, code=killed, status=15/TERM Mar 17 18:53:04.663110 systemd[1]: kubelet.service: Failed with result 'signal'. Mar 17 18:53:04.663888 systemd[1]: Stopped kubelet.service. Mar 17 18:53:04.662000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' Mar 17 18:53:04.667376 systemd[1]: Starting kubelet.service... Mar 17 18:53:06.330000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:53:06.329832 systemd[1]: Started kubelet.service. Mar 17 18:53:06.366726 kubelet[2091]: Flag --container-runtime-endpoint has been deprecated, This parameter should be set via the config file specified by the Kubelet's --config flag. See https://kubernetes.io/docs/tasks/administer-cluster/kubelet-config-file/ for more information. Mar 17 18:53:06.366726 kubelet[2091]: Flag --pod-infra-container-image has been deprecated, will be removed in 1.35. Image garbage collector will get sandbox image information from CRI. Mar 17 18:53:06.366726 kubelet[2091]: Flag --volume-plugin-dir has been deprecated, This parameter should be set via the config file specified by the Kubelet's --config flag. See https://kubernetes.io/docs/tasks/administer-cluster/kubelet-config-file/ for more information. Mar 17 18:53:06.367336 kubelet[2091]: I0317 18:53:06.366828 2091 server.go:215] "--pod-infra-container-image will not be pruned by the image garbage collector in kubelet and should also be set in the remote runtime" Mar 17 18:53:07.273050 kubelet[2091]: I0317 18:53:07.272940 2091 server.go:520] "Kubelet version" kubeletVersion="v1.32.0" Mar 17 18:53:07.273050 kubelet[2091]: I0317 18:53:07.272979 2091 server.go:522] "Golang settings" GOGC="" GOMAXPROCS="" GOTRACEBACK="" Mar 17 18:53:07.273479 kubelet[2091]: I0317 18:53:07.273438 2091 server.go:954] "Client rotation is on, will bootstrap in background" Mar 17 18:53:07.396232 kubelet[2091]: E0317 18:53:07.396193 2091 certificate_manager.go:562] "Unhandled Error" err="kubernetes.io/kube-apiserver-client-kubelet: Failed while requesting a signed certificate from the control plane: cannot create certificate signing request: Post \"https://10.200.8.35:6443/apis/certificates.k8s.io/v1/certificatesigningrequests\": dial tcp 10.200.8.35:6443: connect: connection refused" logger="UnhandledError" Mar 17 18:53:07.397528 kubelet[2091]: I0317 18:53:07.397500 2091 dynamic_cafile_content.go:161] "Starting controller" name="client-ca-bundle::/etc/kubernetes/pki/ca.crt" Mar 17 18:53:07.405294 kubelet[2091]: E0317 18:53:07.405238 2091 log.go:32] "RuntimeConfig from runtime service failed" err="rpc error: code = Unimplemented desc = unknown method RuntimeConfig for service runtime.v1.RuntimeService" Mar 17 18:53:07.405294 kubelet[2091]: I0317 18:53:07.405287 2091 server.go:1421] "CRI implementation should be updated to support RuntimeConfig when KubeletCgroupDriverFromCRI feature gate has been enabled. Falling back to using cgroupDriver from kubelet config." Mar 17 18:53:07.409442 kubelet[2091]: I0317 18:53:07.409396 2091 server.go:772] "--cgroups-per-qos enabled, but --cgroup-root was not specified. defaulting to /" Mar 17 18:53:07.409807 kubelet[2091]: I0317 18:53:07.409781 2091 container_manager_linux.go:268] "Container manager verified user specified cgroup-root exists" cgroupRoot=[] Mar 17 18:53:07.410255 kubelet[2091]: I0317 18:53:07.409891 2091 container_manager_linux.go:273] "Creating Container Manager object based on Node Config" nodeConfig={"NodeName":"ci-3510.3.7-a-9ed44aff31","RuntimeCgroupsName":"","SystemCgroupsName":"","KubeletCgroupsName":"","KubeletOOMScoreAdj":-999,"ContainerRuntime":"","CgroupsPerQOS":true,"CgroupRoot":"/","CgroupDriver":"systemd","KubeletRootDir":"/var/lib/kubelet","ProtectKernelDefaults":false,"KubeReservedCgroupName":"","SystemReservedCgroupName":"","ReservedSystemCPUs":{},"EnforceNodeAllocatable":{"pods":{}},"KubeReserved":null,"SystemReserved":null,"HardEvictionThresholds":[{"Signal":"memory.available","Operator":"LessThan","Value":{"Quantity":"100Mi","Percentage":0},"GracePeriod":0,"MinReclaim":null},{"Signal":"nodefs.available","Operator":"LessThan","Value":{"Quantity":null,"Percentage":0.1},"GracePeriod":0,"MinReclaim":null},{"Signal":"nodefs.inodesFree","Operator":"LessThan","Value":{"Quantity":null,"Percentage":0.05},"GracePeriod":0,"MinReclaim":null},{"Signal":"imagefs.available","Operator":"LessThan","Value":{"Quantity":null,"Percentage":0.15},"GracePeriod":0,"MinReclaim":null},{"Signal":"imagefs.inodesFree","Operator":"LessThan","Value":{"Quantity":null,"Percentage":0.05},"GracePeriod":0,"MinReclaim":null}],"QOSReserved":{},"CPUManagerPolicy":"none","CPUManagerPolicyOptions":null,"TopologyManagerScope":"container","CPUManagerReconcilePeriod":10000000000,"ExperimentalMemoryManagerPolicy":"None","ExperimentalMemoryManagerReservedMemory":null,"PodPidsLimit":-1,"EnforceCPULimits":true,"CPUCFSQuotaPeriod":100000000,"TopologyManagerPolicy":"none","TopologyManagerPolicyOptions":null,"CgroupVersion":2} Mar 17 18:53:07.410472 kubelet[2091]: I0317 18:53:07.410459 2091 topology_manager.go:138] "Creating topology manager with none policy" Mar 17 18:53:07.410550 kubelet[2091]: I0317 18:53:07.410542 2091 container_manager_linux.go:304] "Creating device plugin manager" Mar 17 18:53:07.410740 kubelet[2091]: I0317 18:53:07.410728 2091 state_mem.go:36] "Initialized new in-memory state store" Mar 17 18:53:07.415568 kubelet[2091]: I0317 18:53:07.415528 2091 kubelet.go:446] "Attempting to sync node with API server" Mar 17 18:53:07.415568 kubelet[2091]: I0317 18:53:07.415552 2091 kubelet.go:341] "Adding static pod path" path="/etc/kubernetes/manifests" Mar 17 18:53:07.415694 kubelet[2091]: I0317 18:53:07.415576 2091 kubelet.go:352] "Adding apiserver pod source" Mar 17 18:53:07.415694 kubelet[2091]: I0317 18:53:07.415589 2091 apiserver.go:42] "Waiting for node sync before watching apiserver pods" Mar 17 18:53:07.422377 kubelet[2091]: W0317 18:53:07.422309 2091 reflector.go:569] k8s.io/client-go/informers/factory.go:160: failed to list *v1.Service: Get "https://10.200.8.35:6443/api/v1/services?fieldSelector=spec.clusterIP%21%3DNone&limit=500&resourceVersion=0": dial tcp 10.200.8.35:6443: connect: connection refused Mar 17 18:53:07.422464 kubelet[2091]: E0317 18:53:07.422415 2091 reflector.go:166] "Unhandled Error" err="k8s.io/client-go/informers/factory.go:160: Failed to watch *v1.Service: failed to list *v1.Service: Get \"https://10.200.8.35:6443/api/v1/services?fieldSelector=spec.clusterIP%21%3DNone&limit=500&resourceVersion=0\": dial tcp 10.200.8.35:6443: connect: connection refused" logger="UnhandledError" Mar 17 18:53:07.422549 kubelet[2091]: W0317 18:53:07.422512 2091 reflector.go:569] k8s.io/client-go/informers/factory.go:160: failed to list *v1.Node: Get "https://10.200.8.35:6443/api/v1/nodes?fieldSelector=metadata.name%3Dci-3510.3.7-a-9ed44aff31&limit=500&resourceVersion=0": dial tcp 10.200.8.35:6443: connect: connection refused Mar 17 18:53:07.422609 kubelet[2091]: E0317 18:53:07.422564 2091 reflector.go:166] "Unhandled Error" err="k8s.io/client-go/informers/factory.go:160: Failed to watch *v1.Node: failed to list *v1.Node: Get \"https://10.200.8.35:6443/api/v1/nodes?fieldSelector=metadata.name%3Dci-3510.3.7-a-9ed44aff31&limit=500&resourceVersion=0\": dial tcp 10.200.8.35:6443: connect: connection refused" logger="UnhandledError" Mar 17 18:53:07.422670 kubelet[2091]: I0317 18:53:07.422654 2091 kuberuntime_manager.go:269] "Container runtime initialized" containerRuntime="containerd" version="1.6.16" apiVersion="v1" Mar 17 18:53:07.423130 kubelet[2091]: I0317 18:53:07.423106 2091 kubelet.go:890] "Not starting ClusterTrustBundle informer because we are in static kubelet mode" Mar 17 18:53:07.424480 kubelet[2091]: W0317 18:53:07.423918 2091 probe.go:272] Flexvolume plugin directory at /opt/libexec/kubernetes/kubelet-plugins/volume/exec/ does not exist. Recreating. Mar 17 18:53:07.426995 kubelet[2091]: I0317 18:53:07.426972 2091 watchdog_linux.go:99] "Systemd watchdog is not enabled" Mar 17 18:53:07.427069 kubelet[2091]: I0317 18:53:07.427014 2091 server.go:1287] "Started kubelet" Mar 17 18:53:07.430000 audit[2091]: AVC avc: denied { mac_admin } for pid=2091 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:07.430000 audit: SELINUX_ERR op=setxattr invalid_context="system_u:object_r:container_file_t:s0" Mar 17 18:53:07.430000 audit[2091]: SYSCALL arch=c000003e syscall=188 success=no exit=-22 a0=c000b13920 a1=c0009fea38 a2=c000b138f0 a3=25 items=0 ppid=1 pid=2091 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/usr/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:53:07.430000 audit: PROCTITLE proctitle=2F7573722F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 Mar 17 18:53:07.430000 audit[2091]: AVC avc: denied { mac_admin } for pid=2091 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:07.430000 audit: SELINUX_ERR op=setxattr invalid_context="system_u:object_r:container_file_t:s0" Mar 17 18:53:07.430000 audit[2091]: SYSCALL arch=c000003e syscall=188 success=no exit=-22 a0=c00090ed80 a1=c0009fea50 a2=c000b139b0 a3=25 items=0 ppid=1 pid=2091 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/usr/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:53:07.430000 audit: PROCTITLE proctitle=2F7573722F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 Mar 17 18:53:07.432362 kubelet[2091]: I0317 18:53:07.431741 2091 kubelet.go:1513] "Unprivileged containerized plugins might not work, could not set selinux context on plugin registration dir" path="/var/lib/kubelet/plugins_registry" err="setxattr(label=system_u:object_r:container_file_t:s0) /var/lib/kubelet/plugins_registry: invalid argument" Mar 17 18:53:07.432362 kubelet[2091]: I0317 18:53:07.431788 2091 kubelet.go:1517] "Unprivileged containerized plugins might not work, could not set selinux context on plugins dir" path="/var/lib/kubelet/plugins" err="setxattr(label=system_u:object_r:container_file_t:s0) /var/lib/kubelet/plugins: invalid argument" Mar 17 18:53:07.432362 kubelet[2091]: I0317 18:53:07.431869 2091 fs_resource_analyzer.go:67] "Starting FS ResourceAnalyzer" Mar 17 18:53:07.434000 audit[2102]: NETFILTER_CFG table=mangle:29 family=2 entries=2 op=nft_register_chain pid=2102 subj=system_u:system_r:kernel_t:s0 comm="iptables" Mar 17 18:53:07.434000 audit[2102]: SYSCALL arch=c000003e syscall=46 success=yes exit=136 a0=3 a1=7ffe0692be60 a2=0 a3=7ffe0692be4c items=0 ppid=2091 pid=2102 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:53:07.434000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D49505441424C45532D48494E54002D74006D616E676C65 Mar 17 18:53:07.435000 audit[2103]: NETFILTER_CFG table=filter:30 family=2 entries=1 op=nft_register_chain pid=2103 subj=system_u:system_r:kernel_t:s0 comm="iptables" Mar 17 18:53:07.435000 audit[2103]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7ffc9867f120 a2=0 a3=7ffc9867f10c items=0 ppid=2091 pid=2103 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:53:07.435000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D4649524557414C4C002D740066696C746572 Mar 17 18:53:07.438336 kubelet[2091]: I0317 18:53:07.438309 2091 server.go:169] "Starting to listen" address="0.0.0.0" port=10250 Mar 17 18:53:07.439523 kubelet[2091]: I0317 18:53:07.439505 2091 server.go:490] "Adding debug handlers to kubelet server" Mar 17 18:53:07.440890 kubelet[2091]: I0317 18:53:07.440833 2091 ratelimit.go:55] "Setting rate limiting for endpoint" service="podresources" qps=100 burstTokens=10 Mar 17 18:53:07.441188 kubelet[2091]: I0317 18:53:07.441172 2091 server.go:243] "Starting to serve the podresources API" endpoint="unix:/var/lib/kubelet/pod-resources/kubelet.sock" Mar 17 18:53:07.441516 kubelet[2091]: I0317 18:53:07.441489 2091 dynamic_serving_content.go:135] "Starting controller" name="kubelet-server-cert-files::/var/lib/kubelet/pki/kubelet.crt::/var/lib/kubelet/pki/kubelet.key" Mar 17 18:53:07.442716 kubelet[2091]: E0317 18:53:07.441181 2091 event.go:368] "Unable to write event (may retry after sleeping)" err="Post \"https://10.200.8.35:6443/api/v1/namespaces/default/events\": dial tcp 10.200.8.35:6443: connect: connection refused" event="&Event{ObjectMeta:{ci-3510.3.7-a-9ed44aff31.182dabdae0eb5fbf default 0 0001-01-01 00:00:00 +0000 UTC map[] map[] [] [] []},InvolvedObject:ObjectReference{Kind:Node,Namespace:,Name:ci-3510.3.7-a-9ed44aff31,UID:ci-3510.3.7-a-9ed44aff31,APIVersion:,ResourceVersion:,FieldPath:,},Reason:Starting,Message:Starting kubelet.,Source:EventSource{Component:kubelet,Host:ci-3510.3.7-a-9ed44aff31,},FirstTimestamp:2025-03-17 18:53:07.426992063 +0000 UTC m=+1.092680564,LastTimestamp:2025-03-17 18:53:07.426992063 +0000 UTC m=+1.092680564,Count:1,Type:Normal,EventTime:0001-01-01 00:00:00 +0000 UTC,Series:nil,Action:,Related:nil,ReportingController:kubelet,ReportingInstance:ci-3510.3.7-a-9ed44aff31,}" Mar 17 18:53:07.443573 kubelet[2091]: E0317 18:53:07.443529 2091 kubelet_node_status.go:467] "Error getting the current node from lister" err="node \"ci-3510.3.7-a-9ed44aff31\" not found" Mar 17 18:53:07.443712 kubelet[2091]: I0317 18:53:07.443699 2091 volume_manager.go:297] "Starting Kubelet Volume Manager" Mar 17 18:53:07.443989 kubelet[2091]: I0317 18:53:07.443969 2091 desired_state_of_world_populator.go:149] "Desired state populator starts to run" Mar 17 18:53:07.444126 kubelet[2091]: I0317 18:53:07.444114 2091 reconciler.go:26] "Reconciler: start to sync state" Mar 17 18:53:07.444643 kubelet[2091]: W0317 18:53:07.444605 2091 reflector.go:569] k8s.io/client-go/informers/factory.go:160: failed to list *v1.CSIDriver: Get "https://10.200.8.35:6443/apis/storage.k8s.io/v1/csidrivers?limit=500&resourceVersion=0": dial tcp 10.200.8.35:6443: connect: connection refused Mar 17 18:53:07.444771 kubelet[2091]: E0317 18:53:07.444745 2091 reflector.go:166] "Unhandled Error" err="k8s.io/client-go/informers/factory.go:160: Failed to watch *v1.CSIDriver: failed to list *v1.CSIDriver: Get \"https://10.200.8.35:6443/apis/storage.k8s.io/v1/csidrivers?limit=500&resourceVersion=0\": dial tcp 10.200.8.35:6443: connect: connection refused" logger="UnhandledError" Mar 17 18:53:07.445031 kubelet[2091]: I0317 18:53:07.445013 2091 factory.go:221] Registration of the systemd container factory successfully Mar 17 18:53:07.445203 kubelet[2091]: I0317 18:53:07.445179 2091 factory.go:219] Registration of the crio container factory failed: Get "http://%2Fvar%2Frun%2Fcrio%2Fcrio.sock/info": dial unix /var/run/crio/crio.sock: connect: no such file or directory Mar 17 18:53:07.446212 kubelet[2091]: E0317 18:53:07.446164 2091 controller.go:145] "Failed to ensure lease exists, will retry" err="Get \"https://10.200.8.35:6443/apis/coordination.k8s.io/v1/namespaces/kube-node-lease/leases/ci-3510.3.7-a-9ed44aff31?timeout=10s\": dial tcp 10.200.8.35:6443: connect: connection refused" interval="200ms" Mar 17 18:53:07.446713 kubelet[2091]: I0317 18:53:07.446695 2091 factory.go:221] Registration of the containerd container factory successfully Mar 17 18:53:07.446000 audit[2105]: NETFILTER_CFG table=filter:31 family=2 entries=2 op=nft_register_chain pid=2105 subj=system_u:system_r:kernel_t:s0 comm="iptables" Mar 17 18:53:07.446000 audit[2105]: SYSCALL arch=c000003e syscall=46 success=yes exit=312 a0=3 a1=7ffe9c59d060 a2=0 a3=7ffe9c59d04c items=0 ppid=2091 pid=2105 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:53:07.446000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D49004F5554505554002D740066696C746572002D6A004B5542452D4649524557414C4C Mar 17 18:53:07.449000 audit[2107]: NETFILTER_CFG table=filter:32 family=2 entries=2 op=nft_register_chain pid=2107 subj=system_u:system_r:kernel_t:s0 comm="iptables" Mar 17 18:53:07.449000 audit[2107]: SYSCALL arch=c000003e syscall=46 success=yes exit=312 a0=3 a1=7ffdb8d44d60 a2=0 a3=7ffdb8d44d4c items=0 ppid=2091 pid=2107 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:53:07.449000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6A004B5542452D4649524557414C4C Mar 17 18:53:07.469437 kubelet[2091]: E0317 18:53:07.469413 2091 kubelet.go:1561] "Image garbage collection failed once. Stats initialization may not have completed yet" err="invalid capacity 0 on image filesystem" Mar 17 18:53:07.495000 audit[2113]: NETFILTER_CFG table=filter:33 family=2 entries=1 op=nft_register_rule pid=2113 subj=system_u:system_r:kernel_t:s0 comm="iptables" Mar 17 18:53:07.495000 audit[2113]: SYSCALL arch=c000003e syscall=46 success=yes exit=924 a0=3 a1=7ffc34f280c0 a2=0 a3=7ffc34f280ac items=0 ppid=2091 pid=2113 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:53:07.495000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D41004B5542452D4649524557414C4C002D740066696C746572002D6D00636F6D6D656E74002D2D636F6D6D656E7400626C6F636B20696E636F6D696E67206C6F63616C6E657420636F6E6E656374696F6E73002D2D647374003132372E302E302E302F38 Mar 17 18:53:07.497149 kubelet[2091]: I0317 18:53:07.497112 2091 kubelet_network_linux.go:50] "Initialized iptables rules." protocol="IPv4" Mar 17 18:53:07.496000 audit[2115]: NETFILTER_CFG table=mangle:34 family=10 entries=2 op=nft_register_chain pid=2115 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Mar 17 18:53:07.496000 audit[2115]: SYSCALL arch=c000003e syscall=46 success=yes exit=136 a0=3 a1=7ffeb68ebdf0 a2=0 a3=7ffeb68ebddc items=0 ppid=2091 pid=2115 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:53:07.496000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D49505441424C45532D48494E54002D74006D616E676C65 Mar 17 18:53:07.498806 kubelet[2091]: I0317 18:53:07.498789 2091 kubelet_network_linux.go:50] "Initialized iptables rules." protocol="IPv6" Mar 17 18:53:07.498974 kubelet[2091]: I0317 18:53:07.498961 2091 status_manager.go:227] "Starting to sync pod status with apiserver" Mar 17 18:53:07.499082 kubelet[2091]: I0317 18:53:07.499070 2091 watchdog_linux.go:127] "Systemd watchdog is not enabled or the interval is invalid, so health checking will not be started." Mar 17 18:53:07.499158 kubelet[2091]: I0317 18:53:07.499150 2091 kubelet.go:2388] "Starting kubelet main sync loop" Mar 17 18:53:07.499252 kubelet[2091]: E0317 18:53:07.499239 2091 kubelet.go:2412] "Skipping pod synchronization" err="[container runtime status check may not have completed yet, PLEG is not healthy: pleg has yet to be successful]" Mar 17 18:53:07.499919 kubelet[2091]: W0317 18:53:07.499877 2091 reflector.go:569] k8s.io/client-go/informers/factory.go:160: failed to list *v1.RuntimeClass: Get "https://10.200.8.35:6443/apis/node.k8s.io/v1/runtimeclasses?limit=500&resourceVersion=0": dial tcp 10.200.8.35:6443: connect: connection refused Mar 17 18:53:07.500046 kubelet[2091]: E0317 18:53:07.500027 2091 reflector.go:166] "Unhandled Error" err="k8s.io/client-go/informers/factory.go:160: Failed to watch *v1.RuntimeClass: failed to list *v1.RuntimeClass: Get \"https://10.200.8.35:6443/apis/node.k8s.io/v1/runtimeclasses?limit=500&resourceVersion=0\": dial tcp 10.200.8.35:6443: connect: connection refused" logger="UnhandledError" Mar 17 18:53:07.499000 audit[2116]: NETFILTER_CFG table=mangle:35 family=2 entries=1 op=nft_register_chain pid=2116 subj=system_u:system_r:kernel_t:s0 comm="iptables" Mar 17 18:53:07.499000 audit[2116]: SYSCALL arch=c000003e syscall=46 success=yes exit=104 a0=3 a1=7ffd5c5b8c50 a2=0 a3=7ffd5c5b8c3c items=0 ppid=2091 pid=2116 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:53:07.499000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D4B5542454C45542D43414E415259002D74006D616E676C65 Mar 17 18:53:07.501000 audit[2118]: NETFILTER_CFG table=mangle:36 family=10 entries=1 op=nft_register_chain pid=2118 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Mar 17 18:53:07.501000 audit[2118]: SYSCALL arch=c000003e syscall=46 success=yes exit=104 a0=3 a1=7ffdc64c8310 a2=0 a3=7ffdc64c82fc items=0 ppid=2091 pid=2118 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:53:07.501000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D4B5542454C45542D43414E415259002D74006D616E676C65 Mar 17 18:53:07.502000 audit[2120]: NETFILTER_CFG table=nat:37 family=10 entries=2 op=nft_register_chain pid=2120 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Mar 17 18:53:07.502000 audit[2120]: SYSCALL arch=c000003e syscall=46 success=yes exit=128 a0=3 a1=7fff7d93c490 a2=0 a3=7fff7d93c47c items=0 ppid=2091 pid=2120 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:53:07.502000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D4B5542454C45542D43414E415259002D74006E6174 Mar 17 18:53:07.503000 audit[2119]: NETFILTER_CFG table=nat:38 family=2 entries=1 op=nft_register_chain pid=2119 subj=system_u:system_r:kernel_t:s0 comm="iptables" Mar 17 18:53:07.503000 audit[2119]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7ffc2059f460 a2=0 a3=10e3 items=0 ppid=2091 pid=2119 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:53:07.503000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D4B5542454C45542D43414E415259002D74006E6174 Mar 17 18:53:07.503000 audit[2121]: NETFILTER_CFG table=filter:39 family=10 entries=2 op=nft_register_chain pid=2121 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Mar 17 18:53:07.503000 audit[2121]: SYSCALL arch=c000003e syscall=46 success=yes exit=136 a0=3 a1=7ffdda8935f0 a2=0 a3=7ffdda8935dc items=0 ppid=2091 pid=2121 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:53:07.503000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D4B5542454C45542D43414E415259002D740066696C746572 Mar 17 18:53:07.505000 audit[2122]: NETFILTER_CFG table=filter:40 family=2 entries=1 op=nft_register_chain pid=2122 subj=system_u:system_r:kernel_t:s0 comm="iptables" Mar 17 18:53:07.505000 audit[2122]: SYSCALL arch=c000003e syscall=46 success=yes exit=104 a0=3 a1=7fffbdca9500 a2=0 a3=7fffbdca94ec items=0 ppid=2091 pid=2122 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:53:07.505000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D4B5542454C45542D43414E415259002D740066696C746572 Mar 17 18:53:07.521392 kubelet[2091]: I0317 18:53:07.521369 2091 cpu_manager.go:221] "Starting CPU manager" policy="none" Mar 17 18:53:07.521392 kubelet[2091]: I0317 18:53:07.521384 2091 cpu_manager.go:222] "Reconciling" reconcilePeriod="10s" Mar 17 18:53:07.521564 kubelet[2091]: I0317 18:53:07.521403 2091 state_mem.go:36] "Initialized new in-memory state store" Mar 17 18:53:07.526857 kubelet[2091]: I0317 18:53:07.526588 2091 policy_none.go:49] "None policy: Start" Mar 17 18:53:07.526857 kubelet[2091]: I0317 18:53:07.526609 2091 memory_manager.go:186] "Starting memorymanager" policy="None" Mar 17 18:53:07.526857 kubelet[2091]: I0317 18:53:07.526621 2091 state_mem.go:35] "Initializing new in-memory state store" Mar 17 18:53:07.537069 systemd[1]: Created slice kubepods.slice. Mar 17 18:53:07.541494 systemd[1]: Created slice kubepods-burstable.slice. Mar 17 18:53:07.544602 kubelet[2091]: E0317 18:53:07.544047 2091 kubelet_node_status.go:467] "Error getting the current node from lister" err="node \"ci-3510.3.7-a-9ed44aff31\" not found" Mar 17 18:53:07.544390 systemd[1]: Created slice kubepods-besteffort.slice. Mar 17 18:53:07.550872 kubelet[2091]: I0317 18:53:07.550850 2091 manager.go:519] "Failed to read data from checkpoint" checkpoint="kubelet_internal_checkpoint" err="checkpoint is not found" Mar 17 18:53:07.549000 audit[2091]: AVC avc: denied { mac_admin } for pid=2091 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:07.549000 audit: SELINUX_ERR op=setxattr invalid_context="system_u:object_r:container_file_t:s0" Mar 17 18:53:07.549000 audit[2091]: SYSCALL arch=c000003e syscall=188 success=no exit=-22 a0=c000ea6d80 a1=c000ead380 a2=c000ea6d50 a3=25 items=0 ppid=1 pid=2091 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/usr/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:53:07.549000 audit: PROCTITLE proctitle=2F7573722F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 Mar 17 18:53:07.551209 kubelet[2091]: I0317 18:53:07.550934 2091 server.go:94] "Unprivileged containerized plugins might not work. Could not set selinux context on socket dir" path="/var/lib/kubelet/device-plugins/" err="setxattr(label=system_u:object_r:container_file_t:s0) /var/lib/kubelet/device-plugins/: invalid argument" Mar 17 18:53:07.551209 kubelet[2091]: I0317 18:53:07.551044 2091 eviction_manager.go:189] "Eviction manager: starting control loop" Mar 17 18:53:07.551209 kubelet[2091]: I0317 18:53:07.551057 2091 container_log_manager.go:189] "Initializing container log rotate workers" workers=1 monitorPeriod="10s" Mar 17 18:53:07.552593 kubelet[2091]: I0317 18:53:07.551790 2091 plugin_manager.go:118] "Starting Kubelet Plugin Manager" Mar 17 18:53:07.553088 kubelet[2091]: E0317 18:53:07.553063 2091 eviction_manager.go:267] "eviction manager: failed to check if we have separate container filesystem. Ignoring." err="no imagefs label for configured runtime" Mar 17 18:53:07.553172 kubelet[2091]: E0317 18:53:07.553105 2091 eviction_manager.go:292] "Eviction manager: failed to get summary stats" err="failed to get node info: node \"ci-3510.3.7-a-9ed44aff31\" not found" Mar 17 18:53:07.609933 systemd[1]: Created slice kubepods-burstable-pod99e80bd238b850c3ad14712a9f90cbfe.slice. Mar 17 18:53:07.616389 kubelet[2091]: E0317 18:53:07.615879 2091 kubelet.go:3196] "No need to create a mirror pod, since failed to get node info from the cluster" err="node \"ci-3510.3.7-a-9ed44aff31\" not found" node="ci-3510.3.7-a-9ed44aff31" Mar 17 18:53:07.617672 systemd[1]: Created slice kubepods-burstable-podb57f60dd03b1d1fddcbfeefd4d8ca16f.slice. Mar 17 18:53:07.623888 kubelet[2091]: E0317 18:53:07.623867 2091 kubelet.go:3196] "No need to create a mirror pod, since failed to get node info from the cluster" err="node \"ci-3510.3.7-a-9ed44aff31\" not found" node="ci-3510.3.7-a-9ed44aff31" Mar 17 18:53:07.626397 systemd[1]: Created slice kubepods-burstable-podc765432204596d4b55c2ac82cb37b776.slice. Mar 17 18:53:07.628206 kubelet[2091]: E0317 18:53:07.628179 2091 kubelet.go:3196] "No need to create a mirror pod, since failed to get node info from the cluster" err="node \"ci-3510.3.7-a-9ed44aff31\" not found" node="ci-3510.3.7-a-9ed44aff31" Mar 17 18:53:07.645572 kubelet[2091]: I0317 18:53:07.645541 2091 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"ca-certs\" (UniqueName: \"kubernetes.io/host-path/99e80bd238b850c3ad14712a9f90cbfe-ca-certs\") pod \"kube-apiserver-ci-3510.3.7-a-9ed44aff31\" (UID: \"99e80bd238b850c3ad14712a9f90cbfe\") " pod="kube-system/kube-apiserver-ci-3510.3.7-a-9ed44aff31" Mar 17 18:53:07.645697 kubelet[2091]: I0317 18:53:07.645583 2091 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"flexvolume-dir\" (UniqueName: \"kubernetes.io/host-path/b57f60dd03b1d1fddcbfeefd4d8ca16f-flexvolume-dir\") pod \"kube-controller-manager-ci-3510.3.7-a-9ed44aff31\" (UID: \"b57f60dd03b1d1fddcbfeefd4d8ca16f\") " pod="kube-system/kube-controller-manager-ci-3510.3.7-a-9ed44aff31" Mar 17 18:53:07.645697 kubelet[2091]: I0317 18:53:07.645617 2091 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kubeconfig\" (UniqueName: \"kubernetes.io/host-path/b57f60dd03b1d1fddcbfeefd4d8ca16f-kubeconfig\") pod \"kube-controller-manager-ci-3510.3.7-a-9ed44aff31\" (UID: \"b57f60dd03b1d1fddcbfeefd4d8ca16f\") " pod="kube-system/kube-controller-manager-ci-3510.3.7-a-9ed44aff31" Mar 17 18:53:07.645697 kubelet[2091]: I0317 18:53:07.645646 2091 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"usr-share-ca-certificates\" (UniqueName: \"kubernetes.io/host-path/b57f60dd03b1d1fddcbfeefd4d8ca16f-usr-share-ca-certificates\") pod \"kube-controller-manager-ci-3510.3.7-a-9ed44aff31\" (UID: \"b57f60dd03b1d1fddcbfeefd4d8ca16f\") " pod="kube-system/kube-controller-manager-ci-3510.3.7-a-9ed44aff31" Mar 17 18:53:07.645697 kubelet[2091]: I0317 18:53:07.645674 2091 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kubeconfig\" (UniqueName: \"kubernetes.io/host-path/c765432204596d4b55c2ac82cb37b776-kubeconfig\") pod \"kube-scheduler-ci-3510.3.7-a-9ed44aff31\" (UID: \"c765432204596d4b55c2ac82cb37b776\") " pod="kube-system/kube-scheduler-ci-3510.3.7-a-9ed44aff31" Mar 17 18:53:07.645923 kubelet[2091]: I0317 18:53:07.645702 2091 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"k8s-certs\" (UniqueName: \"kubernetes.io/host-path/99e80bd238b850c3ad14712a9f90cbfe-k8s-certs\") pod \"kube-apiserver-ci-3510.3.7-a-9ed44aff31\" (UID: \"99e80bd238b850c3ad14712a9f90cbfe\") " pod="kube-system/kube-apiserver-ci-3510.3.7-a-9ed44aff31" Mar 17 18:53:07.645923 kubelet[2091]: I0317 18:53:07.645729 2091 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"usr-share-ca-certificates\" (UniqueName: \"kubernetes.io/host-path/99e80bd238b850c3ad14712a9f90cbfe-usr-share-ca-certificates\") pod \"kube-apiserver-ci-3510.3.7-a-9ed44aff31\" (UID: \"99e80bd238b850c3ad14712a9f90cbfe\") " pod="kube-system/kube-apiserver-ci-3510.3.7-a-9ed44aff31" Mar 17 18:53:07.645923 kubelet[2091]: I0317 18:53:07.645758 2091 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"ca-certs\" (UniqueName: \"kubernetes.io/host-path/b57f60dd03b1d1fddcbfeefd4d8ca16f-ca-certs\") pod \"kube-controller-manager-ci-3510.3.7-a-9ed44aff31\" (UID: \"b57f60dd03b1d1fddcbfeefd4d8ca16f\") " pod="kube-system/kube-controller-manager-ci-3510.3.7-a-9ed44aff31" Mar 17 18:53:07.645923 kubelet[2091]: I0317 18:53:07.645785 2091 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"k8s-certs\" (UniqueName: \"kubernetes.io/host-path/b57f60dd03b1d1fddcbfeefd4d8ca16f-k8s-certs\") pod \"kube-controller-manager-ci-3510.3.7-a-9ed44aff31\" (UID: \"b57f60dd03b1d1fddcbfeefd4d8ca16f\") " pod="kube-system/kube-controller-manager-ci-3510.3.7-a-9ed44aff31" Mar 17 18:53:07.646938 kubelet[2091]: E0317 18:53:07.646908 2091 controller.go:145] "Failed to ensure lease exists, will retry" err="Get \"https://10.200.8.35:6443/apis/coordination.k8s.io/v1/namespaces/kube-node-lease/leases/ci-3510.3.7-a-9ed44aff31?timeout=10s\": dial tcp 10.200.8.35:6443: connect: connection refused" interval="400ms" Mar 17 18:53:07.653866 kubelet[2091]: I0317 18:53:07.653847 2091 kubelet_node_status.go:76] "Attempting to register node" node="ci-3510.3.7-a-9ed44aff31" Mar 17 18:53:07.654211 kubelet[2091]: E0317 18:53:07.654181 2091 kubelet_node_status.go:108] "Unable to register node with API server" err="Post \"https://10.200.8.35:6443/api/v1/nodes\": dial tcp 10.200.8.35:6443: connect: connection refused" node="ci-3510.3.7-a-9ed44aff31" Mar 17 18:53:07.857618 kubelet[2091]: I0317 18:53:07.856319 2091 kubelet_node_status.go:76] "Attempting to register node" node="ci-3510.3.7-a-9ed44aff31" Mar 17 18:53:07.857884 kubelet[2091]: E0317 18:53:07.857836 2091 kubelet_node_status.go:108] "Unable to register node with API server" err="Post \"https://10.200.8.35:6443/api/v1/nodes\": dial tcp 10.200.8.35:6443: connect: connection refused" node="ci-3510.3.7-a-9ed44aff31" Mar 17 18:53:07.917911 env[1409]: time="2025-03-17T18:53:07.917859696Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-apiserver-ci-3510.3.7-a-9ed44aff31,Uid:99e80bd238b850c3ad14712a9f90cbfe,Namespace:kube-system,Attempt:0,}" Mar 17 18:53:07.925560 env[1409]: time="2025-03-17T18:53:07.925527886Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-controller-manager-ci-3510.3.7-a-9ed44aff31,Uid:b57f60dd03b1d1fddcbfeefd4d8ca16f,Namespace:kube-system,Attempt:0,}" Mar 17 18:53:07.929038 env[1409]: time="2025-03-17T18:53:07.929002227Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-scheduler-ci-3510.3.7-a-9ed44aff31,Uid:c765432204596d4b55c2ac82cb37b776,Namespace:kube-system,Attempt:0,}" Mar 17 18:53:08.047550 kubelet[2091]: E0317 18:53:08.047507 2091 controller.go:145] "Failed to ensure lease exists, will retry" err="Get \"https://10.200.8.35:6443/apis/coordination.k8s.io/v1/namespaces/kube-node-lease/leases/ci-3510.3.7-a-9ed44aff31?timeout=10s\": dial tcp 10.200.8.35:6443: connect: connection refused" interval="800ms" Mar 17 18:53:08.259413 kubelet[2091]: I0317 18:53:08.259385 2091 kubelet_node_status.go:76] "Attempting to register node" node="ci-3510.3.7-a-9ed44aff31" Mar 17 18:53:08.259764 kubelet[2091]: E0317 18:53:08.259735 2091 kubelet_node_status.go:108] "Unable to register node with API server" err="Post \"https://10.200.8.35:6443/api/v1/nodes\": dial tcp 10.200.8.35:6443: connect: connection refused" node="ci-3510.3.7-a-9ed44aff31" Mar 17 18:53:08.516775 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount1419375738.mount: Deactivated successfully. Mar 17 18:53:08.548538 env[1409]: time="2025-03-17T18:53:08.548494104Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/pause:3.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Mar 17 18:53:08.552727 env[1409]: time="2025-03-17T18:53:08.552637751Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause:3.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Mar 17 18:53:08.565483 env[1409]: time="2025-03-17T18:53:08.565443397Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause:3.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Mar 17 18:53:08.570841 env[1409]: time="2025-03-17T18:53:08.570795558Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:6270bb605e12e581514ada5fd5b3216f727db55dc87d5889c790e4c760683fee,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Mar 17 18:53:08.575739 env[1409]: time="2025-03-17T18:53:08.575706814Z" level=info msg="ImageUpdate event &ImageUpdate{Name:sha256:6270bb605e12e581514ada5fd5b3216f727db55dc87d5889c790e4c760683fee,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Mar 17 18:53:08.579441 env[1409]: time="2025-03-17T18:53:08.579410456Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause:3.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Mar 17 18:53:08.583067 env[1409]: time="2025-03-17T18:53:08.583035097Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause:3.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Mar 17 18:53:08.587659 env[1409]: time="2025-03-17T18:53:08.587627949Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/pause@sha256:3d380ca8864549e74af4b29c10f9cb0956236dfb01c40ca076fb6c37253234db,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Mar 17 18:53:08.594785 env[1409]: time="2025-03-17T18:53:08.594751131Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause@sha256:3d380ca8864549e74af4b29c10f9cb0956236dfb01c40ca076fb6c37253234db,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Mar 17 18:53:08.598530 env[1409]: time="2025-03-17T18:53:08.598500073Z" level=info msg="ImageUpdate event &ImageUpdate{Name:sha256:6270bb605e12e581514ada5fd5b3216f727db55dc87d5889c790e4c760683fee,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Mar 17 18:53:08.614156 env[1409]: time="2025-03-17T18:53:08.614124251Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause:3.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Mar 17 18:53:08.630206 env[1409]: time="2025-03-17T18:53:08.630152334Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause@sha256:3d380ca8864549e74af4b29c10f9cb0956236dfb01c40ca076fb6c37253234db,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Mar 17 18:53:08.645800 kubelet[2091]: W0317 18:53:08.645748 2091 reflector.go:569] k8s.io/client-go/informers/factory.go:160: failed to list *v1.CSIDriver: Get "https://10.200.8.35:6443/apis/storage.k8s.io/v1/csidrivers?limit=500&resourceVersion=0": dial tcp 10.200.8.35:6443: connect: connection refused Mar 17 18:53:08.646070 kubelet[2091]: E0317 18:53:08.645830 2091 reflector.go:166] "Unhandled Error" err="k8s.io/client-go/informers/factory.go:160: Failed to watch *v1.CSIDriver: failed to list *v1.CSIDriver: Get \"https://10.200.8.35:6443/apis/storage.k8s.io/v1/csidrivers?limit=500&resourceVersion=0\": dial tcp 10.200.8.35:6443: connect: connection refused" logger="UnhandledError" Mar 17 18:53:08.670184 kubelet[2091]: W0317 18:53:08.670046 2091 reflector.go:569] k8s.io/client-go/informers/factory.go:160: failed to list *v1.Node: Get "https://10.200.8.35:6443/api/v1/nodes?fieldSelector=metadata.name%3Dci-3510.3.7-a-9ed44aff31&limit=500&resourceVersion=0": dial tcp 10.200.8.35:6443: connect: connection refused Mar 17 18:53:08.670184 kubelet[2091]: E0317 18:53:08.670145 2091 reflector.go:166] "Unhandled Error" err="k8s.io/client-go/informers/factory.go:160: Failed to watch *v1.Node: failed to list *v1.Node: Get \"https://10.200.8.35:6443/api/v1/nodes?fieldSelector=metadata.name%3Dci-3510.3.7-a-9ed44aff31&limit=500&resourceVersion=0\": dial tcp 10.200.8.35:6443: connect: connection refused" logger="UnhandledError" Mar 17 18:53:08.674136 env[1409]: time="2025-03-17T18:53:08.674035633Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Mar 17 18:53:08.674136 env[1409]: time="2025-03-17T18:53:08.674073134Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Mar 17 18:53:08.674136 env[1409]: time="2025-03-17T18:53:08.674087634Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Mar 17 18:53:08.674989 env[1409]: time="2025-03-17T18:53:08.674505039Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/c03bf545cf97f48cd1dbd644bcbf232f3f6de9ded01e0ff02bf2db8ab9582434 pid=2131 runtime=io.containerd.runc.v2 Mar 17 18:53:08.696184 env[1409]: time="2025-03-17T18:53:08.696065884Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Mar 17 18:53:08.696184 env[1409]: time="2025-03-17T18:53:08.696105185Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Mar 17 18:53:08.696184 env[1409]: time="2025-03-17T18:53:08.696137885Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Mar 17 18:53:08.696563 env[1409]: time="2025-03-17T18:53:08.696517590Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/5679076110b3724acf5f74d53aaff9bc4b7d1114d08bdfa29ac5a4fab9dc82ce pid=2152 runtime=io.containerd.runc.v2 Mar 17 18:53:08.708151 kubelet[2091]: W0317 18:53:08.708033 2091 reflector.go:569] k8s.io/client-go/informers/factory.go:160: failed to list *v1.RuntimeClass: Get "https://10.200.8.35:6443/apis/node.k8s.io/v1/runtimeclasses?limit=500&resourceVersion=0": dial tcp 10.200.8.35:6443: connect: connection refused Mar 17 18:53:08.708151 kubelet[2091]: E0317 18:53:08.708117 2091 reflector.go:166] "Unhandled Error" err="k8s.io/client-go/informers/factory.go:160: Failed to watch *v1.RuntimeClass: failed to list *v1.RuntimeClass: Get \"https://10.200.8.35:6443/apis/node.k8s.io/v1/runtimeclasses?limit=500&resourceVersion=0\": dial tcp 10.200.8.35:6443: connect: connection refused" logger="UnhandledError" Mar 17 18:53:08.710093 systemd[1]: Started cri-containerd-c03bf545cf97f48cd1dbd644bcbf232f3f6de9ded01e0ff02bf2db8ab9582434.scope. Mar 17 18:53:08.725753 env[1409]: time="2025-03-17T18:53:08.725694922Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Mar 17 18:53:08.725941 env[1409]: time="2025-03-17T18:53:08.725911524Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Mar 17 18:53:08.726071 env[1409]: time="2025-03-17T18:53:08.726044626Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Mar 17 18:53:08.726348 env[1409]: time="2025-03-17T18:53:08.726309729Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/8631b6d859c34eec5512901c81ed80bc69939d20c91940aedce7e738e41351e7 pid=2178 runtime=io.containerd.runc.v2 Mar 17 18:53:08.730000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:08.736893 kernel: kauditd_printk_skb: 218 callbacks suppressed Mar 17 18:53:08.736960 kernel: audit: type=1400 audit(1742237588.730:446): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:08.754557 systemd[1]: Started cri-containerd-8631b6d859c34eec5512901c81ed80bc69939d20c91940aedce7e738e41351e7.scope. Mar 17 18:53:08.730000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:08.774313 kernel: audit: type=1400 audit(1742237588.730:447): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:08.778415 systemd[1]: Started cri-containerd-5679076110b3724acf5f74d53aaff9bc4b7d1114d08bdfa29ac5a4fab9dc82ce.scope. Mar 17 18:53:08.730000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:08.808781 kernel: audit: type=1400 audit(1742237588.730:448): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:08.808888 kernel: audit: type=1400 audit(1742237588.730:449): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:08.730000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:08.730000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:08.825674 kernel: audit: type=1400 audit(1742237588.730:450): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:08.855188 kernel: audit: audit_backlog=65 > audit_backlog_limit=64 Mar 17 18:53:08.855283 kernel: audit: audit_lost=1 audit_rate_limit=0 audit_backlog_limit=64 Mar 17 18:53:08.855310 kernel: audit: backlog limit exceeded Mar 17 18:53:08.855337 kernel: audit: type=1400 audit(1742237588.730:451): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:08.855356 kernel: audit: audit_backlog=65 > audit_backlog_limit=64 Mar 17 18:53:08.730000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:08.730000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:08.730000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:08.730000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:08.730000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:08.730000 audit: BPF prog-id=56 op=LOAD Mar 17 18:53:08.749000 audit[2142]: AVC avc: denied { bpf } for pid=2142 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:08.749000 audit[2142]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c0001bdc48 a2=10 a3=1c items=0 ppid=2131 pid=2142 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:53:08.749000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6330336266353435636639376634386364316462643634346263626632 Mar 17 18:53:08.749000 audit[2142]: AVC avc: denied { perfmon } for pid=2142 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:08.749000 audit[2142]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=0 a1=c0001bd6b0 a2=3c a3=c items=0 ppid=2131 pid=2142 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:53:08.749000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6330336266353435636639376634386364316462643634346263626632 Mar 17 18:53:08.749000 audit[2142]: AVC avc: denied { bpf } for pid=2142 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:08.749000 audit[2142]: AVC avc: denied { bpf } for pid=2142 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:08.749000 audit[2142]: AVC avc: denied { bpf } for pid=2142 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:08.749000 audit[2142]: AVC avc: denied { perfmon } for pid=2142 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:08.749000 audit[2142]: AVC avc: denied { perfmon } for pid=2142 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:08.749000 audit[2142]: AVC avc: denied { perfmon } for pid=2142 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:08.749000 audit[2142]: AVC avc: denied { perfmon } for pid=2142 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:08.749000 audit[2142]: AVC avc: denied { perfmon } for pid=2142 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:08.749000 audit[2142]: AVC avc: denied { bpf } for pid=2142 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:08.749000 audit[2142]: AVC avc: denied { bpf } for pid=2142 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:08.749000 audit: BPF prog-id=57 op=LOAD Mar 17 18:53:08.749000 audit[2142]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c0001bd9d8 a2=78 a3=c0003aff70 items=0 ppid=2131 pid=2142 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:53:08.749000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6330336266353435636639376634386364316462643634346263626632 Mar 17 18:53:08.749000 audit[2142]: AVC avc: denied { bpf } for pid=2142 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:08.749000 audit[2142]: AVC avc: denied { bpf } for pid=2142 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:08.749000 audit[2142]: AVC avc: denied { perfmon } for pid=2142 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:08.749000 audit[2142]: AVC avc: denied { perfmon } for pid=2142 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:08.749000 audit[2142]: AVC avc: denied { perfmon } for pid=2142 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:08.749000 audit[2142]: AVC avc: denied { perfmon } for pid=2142 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:08.749000 audit[2142]: AVC avc: denied { perfmon } for pid=2142 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:08.749000 audit[2142]: AVC avc: denied { bpf } for pid=2142 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:08.749000 audit[2142]: AVC avc: denied { bpf } for pid=2142 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:08.749000 audit: BPF prog-id=58 op=LOAD Mar 17 18:53:08.749000 audit[2142]: SYSCALL arch=c000003e syscall=321 success=yes exit=17 a0=5 a1=c0001bd770 a2=78 a3=c0003affb8 items=0 ppid=2131 pid=2142 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:53:08.749000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6330336266353435636639376634386364316462643634346263626632 Mar 17 18:53:08.749000 audit: BPF prog-id=58 op=UNLOAD Mar 17 18:53:08.749000 audit: BPF prog-id=57 op=UNLOAD Mar 17 18:53:08.749000 audit[2142]: AVC avc: denied { bpf } for pid=2142 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:08.749000 audit[2142]: AVC avc: denied { bpf } for pid=2142 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:08.749000 audit[2142]: AVC avc: denied { bpf } for pid=2142 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:08.749000 audit[2142]: AVC avc: denied { perfmon } for pid=2142 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:08.749000 audit[2142]: AVC avc: denied { perfmon } for pid=2142 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:08.749000 audit[2142]: AVC avc: denied { perfmon } for pid=2142 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:08.749000 audit[2142]: AVC avc: denied { perfmon } for pid=2142 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:08.749000 audit[2142]: AVC avc: denied { perfmon } for pid=2142 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:08.749000 audit[2142]: AVC avc: denied { bpf } for pid=2142 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:08.749000 audit[2142]: AVC avc: denied { bpf } for pid=2142 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:08.749000 audit: BPF prog-id=59 op=LOAD Mar 17 18:53:08.749000 audit[2142]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c0001bdc30 a2=78 a3=c0004223c8 items=0 ppid=2131 pid=2142 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:53:08.749000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6330336266353435636639376634386364316462643634346263626632 Mar 17 18:53:08.826000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:08.826000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:08.826000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:08.826000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:08.826000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:08.826000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:08.826000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:08.826000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:08.826000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:08.857824 kubelet[2091]: E0317 18:53:08.857690 2091 controller.go:145] "Failed to ensure lease exists, will retry" err="Get \"https://10.200.8.35:6443/apis/coordination.k8s.io/v1/namespaces/kube-node-lease/leases/ci-3510.3.7-a-9ed44aff31?timeout=10s\": dial tcp 10.200.8.35:6443: connect: connection refused" interval="1.6s" Mar 17 18:53:08.859000 audit[2198]: AVC avc: denied { bpf } for pid=2198 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:08.859000 audit[2198]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000145c48 a2=10 a3=1c items=0 ppid=2178 pid=2198 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:53:08.859000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3836333162366438353963333465656335353132393031633831656438 Mar 17 18:53:08.859000 audit[2198]: AVC avc: denied { perfmon } for pid=2198 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:08.859000 audit[2198]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001456b0 a2=3c a3=c items=0 ppid=2178 pid=2198 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:53:08.859000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3836333162366438353963333465656335353132393031633831656438 Mar 17 18:53:08.859000 audit[2198]: AVC avc: denied { bpf } for pid=2198 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:08.859000 audit[2198]: AVC avc: denied { bpf } for pid=2198 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:08.859000 audit[2198]: AVC avc: denied { bpf } for pid=2198 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:08.859000 audit[2198]: AVC avc: denied { perfmon } for pid=2198 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:08.859000 audit[2198]: AVC avc: denied { perfmon } for pid=2198 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:08.859000 audit[2198]: AVC avc: denied { perfmon } for pid=2198 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:08.859000 audit[2198]: AVC avc: denied { perfmon } for pid=2198 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:08.859000 audit[2198]: AVC avc: denied { perfmon } for pid=2198 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:08.859000 audit[2198]: AVC avc: denied { bpf } for pid=2198 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:08.859000 audit[2198]: AVC avc: denied { bpf } for pid=2198 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:08.859000 audit: BPF prog-id=61 op=LOAD Mar 17 18:53:08.859000 audit[2198]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001459d8 a2=78 a3=c000353ce0 items=0 ppid=2178 pid=2198 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:53:08.859000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3836333162366438353963333465656335353132393031633831656438 Mar 17 18:53:08.859000 audit[2198]: AVC avc: denied { bpf } for pid=2198 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:08.859000 audit[2198]: AVC avc: denied { bpf } for pid=2198 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:08.859000 audit[2198]: AVC avc: denied { perfmon } for pid=2198 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:08.859000 audit[2198]: AVC avc: denied { perfmon } for pid=2198 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:08.859000 audit[2198]: AVC avc: denied { perfmon } for pid=2198 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:08.859000 audit[2198]: AVC avc: denied { perfmon } for pid=2198 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:08.859000 audit[2198]: AVC avc: denied { perfmon } for pid=2198 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:08.859000 audit[2198]: AVC avc: denied { bpf } for pid=2198 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:08.859000 audit[2198]: AVC avc: denied { bpf } for pid=2198 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:08.859000 audit: BPF prog-id=62 op=LOAD Mar 17 18:53:08.859000 audit[2198]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000145770 a2=78 a3=c000353d28 items=0 ppid=2178 pid=2198 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:53:08.859000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3836333162366438353963333465656335353132393031633831656438 Mar 17 18:53:08.860000 audit: BPF prog-id=62 op=UNLOAD Mar 17 18:53:08.860000 audit: BPF prog-id=61 op=UNLOAD Mar 17 18:53:08.860000 audit[2198]: AVC avc: denied { bpf } for pid=2198 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:08.860000 audit[2198]: AVC avc: denied { bpf } for pid=2198 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:08.860000 audit[2198]: AVC avc: denied { bpf } for pid=2198 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:08.860000 audit[2198]: AVC avc: denied { perfmon } for pid=2198 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:08.860000 audit[2198]: AVC avc: denied { perfmon } for pid=2198 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:08.860000 audit[2198]: AVC avc: denied { perfmon } for pid=2198 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:08.860000 audit[2198]: AVC avc: denied { perfmon } for pid=2198 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:08.860000 audit[2198]: AVC avc: denied { perfmon } for pid=2198 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:08.860000 audit[2198]: AVC avc: denied { bpf } for pid=2198 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:08.860000 audit[2198]: AVC avc: denied { bpf } for pid=2198 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:08.860000 audit: BPF prog-id=63 op=LOAD Mar 17 18:53:08.860000 audit[2198]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000145c30 a2=78 a3=c0003d6138 items=0 ppid=2178 pid=2198 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:53:08.860000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3836333162366438353963333465656335353132393031633831656438 Mar 17 18:53:08.869000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:08.869000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:08.869000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:08.869000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:08.869000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:08.869000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:08.869000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:08.869000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:08.869000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:08.869000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:08.869000 audit: BPF prog-id=64 op=LOAD Mar 17 18:53:08.869000 audit[2177]: AVC avc: denied { bpf } for pid=2177 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:08.869000 audit[2177]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000117c48 a2=10 a3=1c items=0 ppid=2152 pid=2177 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:53:08.869000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3536373930373631313062333732346163663566373464353361616666 Mar 17 18:53:08.869000 audit[2177]: AVC avc: denied { perfmon } for pid=2177 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:08.869000 audit[2177]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001176b0 a2=3c a3=c items=0 ppid=2152 pid=2177 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:53:08.869000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3536373930373631313062333732346163663566373464353361616666 Mar 17 18:53:08.870000 audit[2177]: AVC avc: denied { bpf } for pid=2177 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:08.870000 audit[2177]: AVC avc: denied { bpf } for pid=2177 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:08.870000 audit[2177]: AVC avc: denied { bpf } for pid=2177 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:08.870000 audit[2177]: AVC avc: denied { perfmon } for pid=2177 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:08.870000 audit[2177]: AVC avc: denied { perfmon } for pid=2177 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:08.870000 audit[2177]: AVC avc: denied { perfmon } for pid=2177 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:08.870000 audit[2177]: AVC avc: denied { perfmon } for pid=2177 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:08.870000 audit[2177]: AVC avc: denied { perfmon } for pid=2177 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:08.870000 audit[2177]: AVC avc: denied { bpf } for pid=2177 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:08.870000 audit[2177]: AVC avc: denied { bpf } for pid=2177 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:08.870000 audit: BPF prog-id=65 op=LOAD Mar 17 18:53:08.870000 audit[2177]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001179d8 a2=78 a3=c0002a9f40 items=0 ppid=2152 pid=2177 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:53:08.870000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3536373930373631313062333732346163663566373464353361616666 Mar 17 18:53:08.870000 audit[2177]: AVC avc: denied { bpf } for pid=2177 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:08.870000 audit[2177]: AVC avc: denied { bpf } for pid=2177 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:08.870000 audit[2177]: AVC avc: denied { perfmon } for pid=2177 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:08.870000 audit[2177]: AVC avc: denied { perfmon } for pid=2177 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:08.870000 audit[2177]: AVC avc: denied { perfmon } for pid=2177 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:08.870000 audit[2177]: AVC avc: denied { perfmon } for pid=2177 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:08.870000 audit[2177]: AVC avc: denied { perfmon } for pid=2177 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:08.870000 audit[2177]: AVC avc: denied { bpf } for pid=2177 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:08.870000 audit[2177]: AVC avc: denied { bpf } for pid=2177 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:08.870000 audit: BPF prog-id=66 op=LOAD Mar 17 18:53:08.870000 audit[2177]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000117770 a2=78 a3=c0002a9f88 items=0 ppid=2152 pid=2177 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:53:08.870000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3536373930373631313062333732346163663566373464353361616666 Mar 17 18:53:08.870000 audit: BPF prog-id=66 op=UNLOAD Mar 17 18:53:08.870000 audit: BPF prog-id=65 op=UNLOAD Mar 17 18:53:08.870000 audit[2177]: AVC avc: denied { bpf } for pid=2177 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:08.870000 audit[2177]: AVC avc: denied { bpf } for pid=2177 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:08.870000 audit[2177]: AVC avc: denied { bpf } for pid=2177 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:08.870000 audit[2177]: AVC avc: denied { perfmon } for pid=2177 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:08.870000 audit[2177]: AVC avc: denied { perfmon } for pid=2177 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:08.870000 audit[2177]: AVC avc: denied { perfmon } for pid=2177 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:08.870000 audit[2177]: AVC avc: denied { perfmon } for pid=2177 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:08.870000 audit[2177]: AVC avc: denied { perfmon } for pid=2177 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:08.870000 audit[2177]: AVC avc: denied { bpf } for pid=2177 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:08.870000 audit[2177]: AVC avc: denied { bpf } for pid=2177 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:08.870000 audit: BPF prog-id=67 op=LOAD Mar 17 18:53:08.870000 audit[2177]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000117c30 a2=78 a3=c000392398 items=0 ppid=2152 pid=2177 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:53:08.870000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3536373930373631313062333732346163663566373464353361616666 Mar 17 18:53:08.875875 env[1409]: time="2025-03-17T18:53:08.875837932Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-apiserver-ci-3510.3.7-a-9ed44aff31,Uid:99e80bd238b850c3ad14712a9f90cbfe,Namespace:kube-system,Attempt:0,} returns sandbox id \"c03bf545cf97f48cd1dbd644bcbf232f3f6de9ded01e0ff02bf2db8ab9582434\"" Mar 17 18:53:08.881291 env[1409]: time="2025-03-17T18:53:08.880485485Z" level=info msg="CreateContainer within sandbox \"c03bf545cf97f48cd1dbd644bcbf232f3f6de9ded01e0ff02bf2db8ab9582434\" for container &ContainerMetadata{Name:kube-apiserver,Attempt:0,}" Mar 17 18:53:08.920611 env[1409]: time="2025-03-17T18:53:08.920567541Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-scheduler-ci-3510.3.7-a-9ed44aff31,Uid:c765432204596d4b55c2ac82cb37b776,Namespace:kube-system,Attempt:0,} returns sandbox id \"8631b6d859c34eec5512901c81ed80bc69939d20c91940aedce7e738e41351e7\"" Mar 17 18:53:08.922109 env[1409]: time="2025-03-17T18:53:08.922068558Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-controller-manager-ci-3510.3.7-a-9ed44aff31,Uid:b57f60dd03b1d1fddcbfeefd4d8ca16f,Namespace:kube-system,Attempt:0,} returns sandbox id \"5679076110b3724acf5f74d53aaff9bc4b7d1114d08bdfa29ac5a4fab9dc82ce\"" Mar 17 18:53:08.924723 env[1409]: time="2025-03-17T18:53:08.924694688Z" level=info msg="CreateContainer within sandbox \"8631b6d859c34eec5512901c81ed80bc69939d20c91940aedce7e738e41351e7\" for container &ContainerMetadata{Name:kube-scheduler,Attempt:0,}" Mar 17 18:53:08.924960 env[1409]: time="2025-03-17T18:53:08.924808189Z" level=info msg="CreateContainer within sandbox \"5679076110b3724acf5f74d53aaff9bc4b7d1114d08bdfa29ac5a4fab9dc82ce\" for container &ContainerMetadata{Name:kube-controller-manager,Attempt:0,}" Mar 17 18:53:08.929203 env[1409]: time="2025-03-17T18:53:08.929177939Z" level=info msg="CreateContainer within sandbox \"c03bf545cf97f48cd1dbd644bcbf232f3f6de9ded01e0ff02bf2db8ab9582434\" for &ContainerMetadata{Name:kube-apiserver,Attempt:0,} returns container id \"98619ff46d746705b997ceddfc5e69bd226858800643641e9340bce5d61ef767\"" Mar 17 18:53:08.929791 env[1409]: time="2025-03-17T18:53:08.929766346Z" level=info msg="StartContainer for \"98619ff46d746705b997ceddfc5e69bd226858800643641e9340bce5d61ef767\"" Mar 17 18:53:08.945587 systemd[1]: Started cri-containerd-98619ff46d746705b997ceddfc5e69bd226858800643641e9340bce5d61ef767.scope. Mar 17 18:53:08.961000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:08.961000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:08.961000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:08.961000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:08.961000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:08.961000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:08.961000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:08.961000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:08.961000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:08.961000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:08.961000 audit: BPF prog-id=68 op=LOAD Mar 17 18:53:08.962000 audit[2258]: AVC avc: denied { bpf } for pid=2258 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:08.962000 audit[2258]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000145c48 a2=10 a3=1c items=0 ppid=2131 pid=2258 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:53:08.962000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3938363139666634366437343637303562393937636564646663356536 Mar 17 18:53:08.962000 audit[2258]: AVC avc: denied { perfmon } for pid=2258 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:08.962000 audit[2258]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001456b0 a2=3c a3=8 items=0 ppid=2131 pid=2258 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:53:08.962000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3938363139666634366437343637303562393937636564646663356536 Mar 17 18:53:08.962000 audit[2258]: AVC avc: denied { bpf } for pid=2258 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:08.962000 audit[2258]: AVC avc: denied { bpf } for pid=2258 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:08.962000 audit[2258]: AVC avc: denied { bpf } for pid=2258 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:08.962000 audit[2258]: AVC avc: denied { perfmon } for pid=2258 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:08.962000 audit[2258]: AVC avc: denied { perfmon } for pid=2258 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:08.962000 audit[2258]: AVC avc: denied { perfmon } for pid=2258 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:08.962000 audit[2258]: AVC avc: denied { perfmon } for pid=2258 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:08.962000 audit[2258]: AVC avc: denied { perfmon } for pid=2258 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:08.962000 audit[2258]: AVC avc: denied { bpf } for pid=2258 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:08.962000 audit[2258]: AVC avc: denied { bpf } for pid=2258 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:08.962000 audit: BPF prog-id=69 op=LOAD Mar 17 18:53:08.962000 audit[2258]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001459d8 a2=78 a3=c000341e40 items=0 ppid=2131 pid=2258 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:53:08.962000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3938363139666634366437343637303562393937636564646663356536 Mar 17 18:53:08.962000 audit[2258]: AVC avc: denied { bpf } for pid=2258 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:08.962000 audit[2258]: AVC avc: denied { bpf } for pid=2258 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:08.962000 audit[2258]: AVC avc: denied { perfmon } for pid=2258 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:08.962000 audit[2258]: AVC avc: denied { perfmon } for pid=2258 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:08.962000 audit[2258]: AVC avc: denied { perfmon } for pid=2258 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:08.962000 audit[2258]: AVC avc: denied { perfmon } for pid=2258 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:08.962000 audit[2258]: AVC avc: denied { perfmon } for pid=2258 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:08.962000 audit[2258]: AVC avc: denied { bpf } for pid=2258 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:08.962000 audit[2258]: AVC avc: denied { bpf } for pid=2258 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:08.962000 audit: BPF prog-id=70 op=LOAD Mar 17 18:53:08.962000 audit[2258]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000145770 a2=78 a3=c000341e88 items=0 ppid=2131 pid=2258 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:53:08.962000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3938363139666634366437343637303562393937636564646663356536 Mar 17 18:53:08.962000 audit: BPF prog-id=70 op=UNLOAD Mar 17 18:53:08.963000 audit: BPF prog-id=69 op=UNLOAD Mar 17 18:53:08.963000 audit[2258]: AVC avc: denied { bpf } for pid=2258 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:08.963000 audit[2258]: AVC avc: denied { bpf } for pid=2258 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:08.963000 audit[2258]: AVC avc: denied { bpf } for pid=2258 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:08.963000 audit[2258]: AVC avc: denied { perfmon } for pid=2258 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:08.963000 audit[2258]: AVC avc: denied { perfmon } for pid=2258 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:08.963000 audit[2258]: AVC avc: denied { perfmon } for pid=2258 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:08.963000 audit[2258]: AVC avc: denied { perfmon } for pid=2258 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:08.963000 audit[2258]: AVC avc: denied { perfmon } for pid=2258 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:08.963000 audit[2258]: AVC avc: denied { bpf } for pid=2258 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:08.963000 audit[2258]: AVC avc: denied { bpf } for pid=2258 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:08.963000 audit: BPF prog-id=71 op=LOAD Mar 17 18:53:08.963000 audit[2258]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000145c30 a2=78 a3=c0003bc298 items=0 ppid=2131 pid=2258 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:53:08.963000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3938363139666634366437343637303562393937636564646663356536 Mar 17 18:53:08.984680 env[1409]: time="2025-03-17T18:53:08.984639671Z" level=info msg="CreateContainer within sandbox \"8631b6d859c34eec5512901c81ed80bc69939d20c91940aedce7e738e41351e7\" for &ContainerMetadata{Name:kube-scheduler,Attempt:0,} returns container id \"e24cfa1bf5a78a3ce2da3dc31438c8ec4f687bf30461edeb80a40687b7204d00\"" Mar 17 18:53:08.985256 env[1409]: time="2025-03-17T18:53:08.985221477Z" level=info msg="StartContainer for \"e24cfa1bf5a78a3ce2da3dc31438c8ec4f687bf30461edeb80a40687b7204d00\"" Mar 17 18:53:08.989317 env[1409]: time="2025-03-17T18:53:08.989281324Z" level=info msg="CreateContainer within sandbox \"5679076110b3724acf5f74d53aaff9bc4b7d1114d08bdfa29ac5a4fab9dc82ce\" for &ContainerMetadata{Name:kube-controller-manager,Attempt:0,} returns container id \"4480684da8af9d4dd2ee32c3204eaf5df35f15840e1ba5f2bd749734c5f0a1d6\"" Mar 17 18:53:08.989877 env[1409]: time="2025-03-17T18:53:08.989856030Z" level=info msg="StartContainer for \"4480684da8af9d4dd2ee32c3204eaf5df35f15840e1ba5f2bd749734c5f0a1d6\"" Mar 17 18:53:09.002518 env[1409]: time="2025-03-17T18:53:09.002478574Z" level=info msg="StartContainer for \"98619ff46d746705b997ceddfc5e69bd226858800643641e9340bce5d61ef767\" returns successfully" Mar 17 18:53:09.017289 kubelet[2091]: W0317 18:53:09.017109 2091 reflector.go:569] k8s.io/client-go/informers/factory.go:160: failed to list *v1.Service: Get "https://10.200.8.35:6443/api/v1/services?fieldSelector=spec.clusterIP%21%3DNone&limit=500&resourceVersion=0": dial tcp 10.200.8.35:6443: connect: connection refused Mar 17 18:53:09.017289 kubelet[2091]: E0317 18:53:09.017230 2091 reflector.go:166] "Unhandled Error" err="k8s.io/client-go/informers/factory.go:160: Failed to watch *v1.Service: failed to list *v1.Service: Get \"https://10.200.8.35:6443/api/v1/services?fieldSelector=spec.clusterIP%21%3DNone&limit=500&resourceVersion=0\": dial tcp 10.200.8.35:6443: connect: connection refused" logger="UnhandledError" Mar 17 18:53:09.022171 systemd[1]: Started cri-containerd-e24cfa1bf5a78a3ce2da3dc31438c8ec4f687bf30461edeb80a40687b7204d00.scope. Mar 17 18:53:09.027169 systemd[1]: Started cri-containerd-4480684da8af9d4dd2ee32c3204eaf5df35f15840e1ba5f2bd749734c5f0a1d6.scope. Mar 17 18:53:09.067405 kubelet[2091]: I0317 18:53:09.062361 2091 kubelet_node_status.go:76] "Attempting to register node" node="ci-3510.3.7-a-9ed44aff31" Mar 17 18:53:09.067405 kubelet[2091]: E0317 18:53:09.062819 2091 kubelet_node_status.go:108] "Unable to register node with API server" err="Post \"https://10.200.8.35:6443/api/v1/nodes\": dial tcp 10.200.8.35:6443: connect: connection refused" node="ci-3510.3.7-a-9ed44aff31" Mar 17 18:53:09.071000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:09.071000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:09.071000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:09.071000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:09.071000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:09.071000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:09.071000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:09.071000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:09.071000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:09.071000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:09.071000 audit: BPF prog-id=72 op=LOAD Mar 17 18:53:09.072000 audit[2300]: AVC avc: denied { bpf } for pid=2300 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:09.072000 audit[2300]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000197c48 a2=10 a3=1c items=0 ppid=2178 pid=2300 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:53:09.072000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6532346366613162663561373861336365326461336463333134333863 Mar 17 18:53:09.073000 audit[2300]: AVC avc: denied { perfmon } for pid=2300 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:09.073000 audit[2300]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001976b0 a2=3c a3=8 items=0 ppid=2178 pid=2300 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:53:09.073000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6532346366613162663561373861336365326461336463333134333863 Mar 17 18:53:09.073000 audit[2300]: AVC avc: denied { bpf } for pid=2300 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:09.073000 audit[2300]: AVC avc: denied { bpf } for pid=2300 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:09.073000 audit[2300]: AVC avc: denied { bpf } for pid=2300 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:09.073000 audit[2300]: AVC avc: denied { perfmon } for pid=2300 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:09.073000 audit[2300]: AVC avc: denied { perfmon } for pid=2300 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:09.073000 audit[2300]: AVC avc: denied { perfmon } for pid=2300 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:09.073000 audit[2300]: AVC avc: denied { perfmon } for pid=2300 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:09.073000 audit[2300]: AVC avc: denied { perfmon } for pid=2300 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:09.073000 audit[2300]: AVC avc: denied { bpf } for pid=2300 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:09.073000 audit[2300]: AVC avc: denied { bpf } for pid=2300 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:09.073000 audit: BPF prog-id=73 op=LOAD Mar 17 18:53:09.073000 audit[2300]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001979d8 a2=78 a3=c00040a780 items=0 ppid=2178 pid=2300 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:53:09.073000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6532346366613162663561373861336365326461336463333134333863 Mar 17 18:53:09.076000 audit[2300]: AVC avc: denied { bpf } for pid=2300 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:09.076000 audit[2300]: AVC avc: denied { bpf } for pid=2300 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:09.076000 audit[2300]: AVC avc: denied { perfmon } for pid=2300 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:09.076000 audit[2300]: AVC avc: denied { perfmon } for pid=2300 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:09.076000 audit[2300]: AVC avc: denied { perfmon } for pid=2300 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:09.076000 audit[2300]: AVC avc: denied { perfmon } for pid=2300 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:09.076000 audit[2300]: AVC avc: denied { perfmon } for pid=2300 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:09.076000 audit[2300]: AVC avc: denied { bpf } for pid=2300 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:09.076000 audit[2300]: AVC avc: denied { bpf } for pid=2300 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:09.076000 audit: BPF prog-id=74 op=LOAD Mar 17 18:53:09.076000 audit[2300]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000197770 a2=78 a3=c00040a7c8 items=0 ppid=2178 pid=2300 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:53:09.076000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6532346366613162663561373861336365326461336463333134333863 Mar 17 18:53:09.076000 audit: BPF prog-id=74 op=UNLOAD Mar 17 18:53:09.076000 audit: BPF prog-id=73 op=UNLOAD Mar 17 18:53:09.076000 audit[2300]: AVC avc: denied { bpf } for pid=2300 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:09.076000 audit[2300]: AVC avc: denied { bpf } for pid=2300 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:09.076000 audit[2300]: AVC avc: denied { bpf } for pid=2300 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:09.076000 audit[2300]: AVC avc: denied { perfmon } for pid=2300 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:09.076000 audit[2300]: AVC avc: denied { perfmon } for pid=2300 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:09.076000 audit[2300]: AVC avc: denied { perfmon } for pid=2300 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:09.076000 audit[2300]: AVC avc: denied { perfmon } for pid=2300 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:09.076000 audit[2300]: AVC avc: denied { perfmon } for pid=2300 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:09.076000 audit[2300]: AVC avc: denied { bpf } for pid=2300 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:09.076000 audit[2300]: AVC avc: denied { bpf } for pid=2300 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:09.076000 audit: BPF prog-id=75 op=LOAD Mar 17 18:53:09.076000 audit[2300]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000197c30 a2=78 a3=c00040abd8 items=0 ppid=2178 pid=2300 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:53:09.076000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6532346366613162663561373861336365326461336463333134333863 Mar 17 18:53:09.080000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:09.080000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:09.080000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:09.080000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:09.080000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:09.080000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:09.080000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:09.080000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:09.080000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:09.080000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:09.080000 audit: BPF prog-id=76 op=LOAD Mar 17 18:53:09.083000 audit[2310]: AVC avc: denied { bpf } for pid=2310 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:09.083000 audit[2310]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000147c48 a2=10 a3=1c items=0 ppid=2152 pid=2310 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:53:09.083000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3434383036383464613861663964346464326565333263333230346561 Mar 17 18:53:09.083000 audit[2310]: AVC avc: denied { perfmon } for pid=2310 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:09.083000 audit[2310]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001476b0 a2=3c a3=8 items=0 ppid=2152 pid=2310 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:53:09.083000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3434383036383464613861663964346464326565333263333230346561 Mar 17 18:53:09.083000 audit[2310]: AVC avc: denied { bpf } for pid=2310 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:09.083000 audit[2310]: AVC avc: denied { bpf } for pid=2310 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:09.083000 audit[2310]: AVC avc: denied { bpf } for pid=2310 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:09.083000 audit[2310]: AVC avc: denied { perfmon } for pid=2310 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:09.083000 audit[2310]: AVC avc: denied { perfmon } for pid=2310 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:09.083000 audit[2310]: AVC avc: denied { perfmon } for pid=2310 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:09.083000 audit[2310]: AVC avc: denied { perfmon } for pid=2310 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:09.083000 audit[2310]: AVC avc: denied { perfmon } for pid=2310 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:09.083000 audit[2310]: AVC avc: denied { bpf } for pid=2310 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:09.083000 audit[2310]: AVC avc: denied { bpf } for pid=2310 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:09.083000 audit: BPF prog-id=77 op=LOAD Mar 17 18:53:09.083000 audit[2310]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001479d8 a2=78 a3=c000370b00 items=0 ppid=2152 pid=2310 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:53:09.083000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3434383036383464613861663964346464326565333263333230346561 Mar 17 18:53:09.083000 audit[2310]: AVC avc: denied { bpf } for pid=2310 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:09.083000 audit[2310]: AVC avc: denied { bpf } for pid=2310 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:09.083000 audit[2310]: AVC avc: denied { perfmon } for pid=2310 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:09.083000 audit[2310]: AVC avc: denied { perfmon } for pid=2310 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:09.083000 audit[2310]: AVC avc: denied { perfmon } for pid=2310 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:09.083000 audit[2310]: AVC avc: denied { perfmon } for pid=2310 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:09.083000 audit[2310]: AVC avc: denied { perfmon } for pid=2310 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:09.083000 audit[2310]: AVC avc: denied { bpf } for pid=2310 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:09.083000 audit[2310]: AVC avc: denied { bpf } for pid=2310 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:09.083000 audit: BPF prog-id=78 op=LOAD Mar 17 18:53:09.083000 audit[2310]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000147770 a2=78 a3=c000370b48 items=0 ppid=2152 pid=2310 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:53:09.083000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3434383036383464613861663964346464326565333263333230346561 Mar 17 18:53:09.083000 audit: BPF prog-id=78 op=UNLOAD Mar 17 18:53:09.083000 audit: BPF prog-id=77 op=UNLOAD Mar 17 18:53:09.083000 audit[2310]: AVC avc: denied { bpf } for pid=2310 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:09.083000 audit[2310]: AVC avc: denied { bpf } for pid=2310 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:09.083000 audit[2310]: AVC avc: denied { bpf } for pid=2310 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:09.083000 audit[2310]: AVC avc: denied { perfmon } for pid=2310 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:09.083000 audit[2310]: AVC avc: denied { perfmon } for pid=2310 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:09.083000 audit[2310]: AVC avc: denied { perfmon } for pid=2310 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:09.083000 audit[2310]: AVC avc: denied { perfmon } for pid=2310 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:09.083000 audit[2310]: AVC avc: denied { perfmon } for pid=2310 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:09.083000 audit[2310]: AVC avc: denied { bpf } for pid=2310 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:09.083000 audit[2310]: AVC avc: denied { bpf } for pid=2310 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:09.083000 audit: BPF prog-id=79 op=LOAD Mar 17 18:53:09.083000 audit[2310]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000147c30 a2=78 a3=c000370f58 items=0 ppid=2152 pid=2310 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:53:09.083000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3434383036383464613861663964346464326565333263333230346561 Mar 17 18:53:09.129772 env[1409]: time="2025-03-17T18:53:09.129722487Z" level=info msg="StartContainer for \"e24cfa1bf5a78a3ce2da3dc31438c8ec4f687bf30461edeb80a40687b7204d00\" returns successfully" Mar 17 18:53:09.149742 env[1409]: time="2025-03-17T18:53:09.149698909Z" level=info msg="StartContainer for \"4480684da8af9d4dd2ee32c3204eaf5df35f15840e1ba5f2bd749734c5f0a1d6\" returns successfully" Mar 17 18:53:09.513664 kubelet[2091]: E0317 18:53:09.513635 2091 kubelet.go:3196] "No need to create a mirror pod, since failed to get node info from the cluster" err="node \"ci-3510.3.7-a-9ed44aff31\" not found" node="ci-3510.3.7-a-9ed44aff31" Mar 17 18:53:09.516122 kubelet[2091]: E0317 18:53:09.516099 2091 kubelet.go:3196] "No need to create a mirror pod, since failed to get node info from the cluster" err="node \"ci-3510.3.7-a-9ed44aff31\" not found" node="ci-3510.3.7-a-9ed44aff31" Mar 17 18:53:09.520070 kubelet[2091]: E0317 18:53:09.520054 2091 kubelet.go:3196] "No need to create a mirror pod, since failed to get node info from the cluster" err="node \"ci-3510.3.7-a-9ed44aff31\" not found" node="ci-3510.3.7-a-9ed44aff31" Mar 17 18:53:10.521459 kubelet[2091]: E0317 18:53:10.521427 2091 kubelet.go:3196] "No need to create a mirror pod, since failed to get node info from the cluster" err="node \"ci-3510.3.7-a-9ed44aff31\" not found" node="ci-3510.3.7-a-9ed44aff31" Mar 17 18:53:10.521917 kubelet[2091]: E0317 18:53:10.521835 2091 kubelet.go:3196] "No need to create a mirror pod, since failed to get node info from the cluster" err="node \"ci-3510.3.7-a-9ed44aff31\" not found" node="ci-3510.3.7-a-9ed44aff31" Mar 17 18:53:10.632000 audit[2323]: AVC avc: denied { watch } for pid=2323 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=7361 scontext=system_u:system_r:svirt_lxc_net_t:s0:c454,c669 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Mar 17 18:53:10.632000 audit[2323]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=7 a1=c000467350 a2=fc6 a3=0 items=0 ppid=2152 pid=2323 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c454,c669 key=(null) Mar 17 18:53:10.632000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Mar 17 18:53:10.632000 audit[2323]: AVC avc: denied { watch } for pid=2323 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=7355 scontext=system_u:system_r:svirt_lxc_net_t:s0:c454,c669 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Mar 17 18:53:10.632000 audit[2323]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=7 a1=c000469360 a2=fc6 a3=0 items=0 ppid=2152 pid=2323 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c454,c669 key=(null) Mar 17 18:53:10.632000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Mar 17 18:53:10.665047 kubelet[2091]: I0317 18:53:10.665015 2091 kubelet_node_status.go:76] "Attempting to register node" node="ci-3510.3.7-a-9ed44aff31" Mar 17 18:53:11.014000 audit[2272]: AVC avc: denied { watch } for pid=2272 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=7361 scontext=system_u:system_r:svirt_lxc_net_t:s0:c306,c585 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Mar 17 18:53:11.014000 audit[2272]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=3f a1=c007402270 a2=fc6 a3=0 items=0 ppid=2131 pid=2272 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c306,c585 key=(null) Mar 17 18:53:11.014000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E382E3335002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265 Mar 17 18:53:11.014000 audit[2272]: AVC avc: denied { watch } for pid=2272 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=7355 scontext=system_u:system_r:svirt_lxc_net_t:s0:c306,c585 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Mar 17 18:53:11.014000 audit[2272]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=3f a1=c006eb4b80 a2=fc6 a3=0 items=0 ppid=2131 pid=2272 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c306,c585 key=(null) Mar 17 18:53:11.014000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E382E3335002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265 Mar 17 18:53:11.014000 audit[2272]: AVC avc: denied { watch } for pid=2272 comm="kube-apiserver" path="/etc/kubernetes/pki/apiserver.crt" dev="sda9" ino=7357 scontext=system_u:system_r:svirt_lxc_net_t:s0:c306,c585 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Mar 17 18:53:11.014000 audit[2272]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=3f a1=c007402390 a2=fc6 a3=0 items=0 ppid=2131 pid=2272 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c306,c585 key=(null) Mar 17 18:53:11.014000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E382E3335002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265 Mar 17 18:53:11.019000 audit[2272]: AVC avc: denied { watch } for pid=2272 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-client.crt" dev="sda9" ino=7363 scontext=system_u:system_r:svirt_lxc_net_t:s0:c306,c585 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Mar 17 18:53:11.019000 audit[2272]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=49 a1=c0074024e0 a2=fc6 a3=0 items=0 ppid=2131 pid=2272 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c306,c585 key=(null) Mar 17 18:53:11.019000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E382E3335002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265 Mar 17 18:53:11.025000 audit[2272]: AVC avc: denied { watch } for pid=2272 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=7355 scontext=system_u:system_r:svirt_lxc_net_t:s0:c306,c585 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Mar 17 18:53:11.025000 audit[2272]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=64 a1=c006c43960 a2=fc6 a3=0 items=0 ppid=2131 pid=2272 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c306,c585 key=(null) Mar 17 18:53:11.025000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E382E3335002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265 Mar 17 18:53:11.025000 audit[2272]: AVC avc: denied { watch } for pid=2272 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=7361 scontext=system_u:system_r:svirt_lxc_net_t:s0:c306,c585 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Mar 17 18:53:11.025000 audit[2272]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=64 a1=c0040bb2f0 a2=fc6 a3=0 items=0 ppid=2131 pid=2272 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c306,c585 key=(null) Mar 17 18:53:11.025000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E382E3335002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265 Mar 17 18:53:11.140358 kubelet[2091]: E0317 18:53:11.140318 2091 nodelease.go:49] "Failed to get node when trying to set owner ref to the node lease" err="nodes \"ci-3510.3.7-a-9ed44aff31\" not found" node="ci-3510.3.7-a-9ed44aff31" Mar 17 18:53:11.233280 kubelet[2091]: E0317 18:53:11.233143 2091 event.go:359] "Server rejected event (will not retry!)" err="namespaces \"default\" not found" event="&Event{ObjectMeta:{ci-3510.3.7-a-9ed44aff31.182dabdae0eb5fbf default 0 0001-01-01 00:00:00 +0000 UTC map[] map[] [] [] []},InvolvedObject:ObjectReference{Kind:Node,Namespace:,Name:ci-3510.3.7-a-9ed44aff31,UID:ci-3510.3.7-a-9ed44aff31,APIVersion:,ResourceVersion:,FieldPath:,},Reason:Starting,Message:Starting kubelet.,Source:EventSource{Component:kubelet,Host:ci-3510.3.7-a-9ed44aff31,},FirstTimestamp:2025-03-17 18:53:07.426992063 +0000 UTC m=+1.092680564,LastTimestamp:2025-03-17 18:53:07.426992063 +0000 UTC m=+1.092680564,Count:1,Type:Normal,EventTime:0001-01-01 00:00:00 +0000 UTC,Series:nil,Action:,Related:nil,ReportingController:kubelet,ReportingInstance:ci-3510.3.7-a-9ed44aff31,}" Mar 17 18:53:11.377022 kubelet[2091]: I0317 18:53:11.376901 2091 kubelet_node_status.go:79] "Successfully registered node" node="ci-3510.3.7-a-9ed44aff31" Mar 17 18:53:11.377231 kubelet[2091]: E0317 18:53:11.377213 2091 kubelet_node_status.go:549] "Error updating node status, will retry" err="error getting node \"ci-3510.3.7-a-9ed44aff31\": node \"ci-3510.3.7-a-9ed44aff31\" not found" Mar 17 18:53:11.384316 kubelet[2091]: E0317 18:53:11.384279 2091 kubelet_node_status.go:467] "Error getting the current node from lister" err="node \"ci-3510.3.7-a-9ed44aff31\" not found" Mar 17 18:53:11.545104 kubelet[2091]: I0317 18:53:11.545076 2091 kubelet.go:3200] "Creating a mirror pod for static pod" pod="kube-system/kube-apiserver-ci-3510.3.7-a-9ed44aff31" Mar 17 18:53:11.554392 kubelet[2091]: E0317 18:53:11.554359 2091 kubelet.go:3202] "Failed creating a mirror pod" err="pods \"kube-apiserver-ci-3510.3.7-a-9ed44aff31\" is forbidden: no PriorityClass with name system-node-critical was found" pod="kube-system/kube-apiserver-ci-3510.3.7-a-9ed44aff31" Mar 17 18:53:11.554552 kubelet[2091]: I0317 18:53:11.554529 2091 kubelet.go:3200] "Creating a mirror pod for static pod" pod="kube-system/kube-controller-manager-ci-3510.3.7-a-9ed44aff31" Mar 17 18:53:11.556105 kubelet[2091]: E0317 18:53:11.556069 2091 kubelet.go:3202] "Failed creating a mirror pod" err="pods \"kube-controller-manager-ci-3510.3.7-a-9ed44aff31\" is forbidden: no PriorityClass with name system-node-critical was found" pod="kube-system/kube-controller-manager-ci-3510.3.7-a-9ed44aff31" Mar 17 18:53:11.556105 kubelet[2091]: I0317 18:53:11.556091 2091 kubelet.go:3200] "Creating a mirror pod for static pod" pod="kube-system/kube-scheduler-ci-3510.3.7-a-9ed44aff31" Mar 17 18:53:11.557648 kubelet[2091]: E0317 18:53:11.557616 2091 kubelet.go:3202] "Failed creating a mirror pod" err="pods \"kube-scheduler-ci-3510.3.7-a-9ed44aff31\" is forbidden: no PriorityClass with name system-node-critical was found" pod="kube-system/kube-scheduler-ci-3510.3.7-a-9ed44aff31" Mar 17 18:53:11.920893 kubelet[2091]: I0317 18:53:11.920854 2091 kubelet.go:3200] "Creating a mirror pod for static pod" pod="kube-system/kube-scheduler-ci-3510.3.7-a-9ed44aff31" Mar 17 18:53:11.922965 kubelet[2091]: E0317 18:53:11.922929 2091 kubelet.go:3202] "Failed creating a mirror pod" err="pods \"kube-scheduler-ci-3510.3.7-a-9ed44aff31\" is forbidden: no PriorityClass with name system-node-critical was found" pod="kube-system/kube-scheduler-ci-3510.3.7-a-9ed44aff31" Mar 17 18:53:12.422281 kubelet[2091]: I0317 18:53:12.422236 2091 apiserver.go:52] "Watching apiserver" Mar 17 18:53:12.445136 kubelet[2091]: I0317 18:53:12.445103 2091 desired_state_of_world_populator.go:157] "Finished populating initial desired state of world" Mar 17 18:53:13.297220 systemd[1]: Reloading. Mar 17 18:53:13.383791 /usr/lib/systemd/system-generators/torcx-generator[2384]: time="2025-03-17T18:53:13Z" level=debug msg="common configuration parsed" base_dir=/var/lib/torcx/ conf_dir=/etc/torcx/ run_dir=/run/torcx/ store_paths="[/usr/share/torcx/store /usr/share/oem/torcx/store/3510.3.7 /usr/share/oem/torcx/store /var/lib/torcx/store/3510.3.7 /var/lib/torcx/store]" Mar 17 18:53:13.395000 /usr/lib/systemd/system-generators/torcx-generator[2384]: time="2025-03-17T18:53:13Z" level=info msg="torcx already run" Mar 17 18:53:13.482373 systemd[1]: /usr/lib/systemd/system/locksmithd.service:8: Unit uses CPUShares=; please use CPUWeight= instead. Support for CPUShares= will be removed soon. Mar 17 18:53:13.482393 systemd[1]: /usr/lib/systemd/system/locksmithd.service:9: Unit uses MemoryLimit=; please use MemoryMax= instead. Support for MemoryLimit= will be removed soon. Mar 17 18:53:13.499023 systemd[1]: /run/systemd/system/docker.socket:8: ListenStream= references a path below legacy directory /var/run/, updating /var/run/docker.sock → /run/docker.sock; please update the unit file accordingly. Mar 17 18:53:13.579000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:13.579000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:13.579000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:13.579000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:13.579000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:13.579000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:13.579000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:13.579000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:13.579000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:13.579000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:13.579000 audit: BPF prog-id=80 op=LOAD Mar 17 18:53:13.579000 audit: BPF prog-id=60 op=UNLOAD Mar 17 18:53:13.580000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:13.580000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:13.580000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:13.580000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:13.580000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:13.580000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:13.580000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:13.580000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:13.580000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:13.580000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:13.580000 audit: BPF prog-id=81 op=LOAD Mar 17 18:53:13.580000 audit: BPF prog-id=41 op=UNLOAD Mar 17 18:53:13.581000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:13.581000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:13.581000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:13.581000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:13.581000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:13.581000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:13.581000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:13.581000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:13.581000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:13.581000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:13.581000 audit: BPF prog-id=82 op=LOAD Mar 17 18:53:13.581000 audit: BPF prog-id=42 op=UNLOAD Mar 17 18:53:13.581000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:13.581000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:13.582000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:13.582000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:13.582000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:13.582000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:13.582000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:13.582000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:13.582000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:13.582000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:13.582000 audit: BPF prog-id=83 op=LOAD Mar 17 18:53:13.582000 audit: BPF prog-id=43 op=UNLOAD Mar 17 18:53:13.582000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:13.582000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:13.582000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:13.582000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:13.582000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:13.582000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:13.582000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:13.582000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:13.582000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:13.582000 audit: BPF prog-id=84 op=LOAD Mar 17 18:53:13.582000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:13.582000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:13.582000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:13.582000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:13.582000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:13.582000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:13.582000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:13.582000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:13.582000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:13.582000 audit: BPF prog-id=85 op=LOAD Mar 17 18:53:13.582000 audit: BPF prog-id=44 op=UNLOAD Mar 17 18:53:13.582000 audit: BPF prog-id=45 op=UNLOAD Mar 17 18:53:13.583000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:13.584000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:13.584000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:13.584000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:13.584000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:13.584000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:13.584000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:13.584000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:13.584000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:13.584000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:13.584000 audit: BPF prog-id=86 op=LOAD Mar 17 18:53:13.584000 audit: BPF prog-id=46 op=UNLOAD Mar 17 18:53:13.584000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:13.584000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:13.584000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:13.584000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:13.584000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:13.584000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:13.584000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:13.584000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:13.584000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:13.584000 audit: BPF prog-id=87 op=LOAD Mar 17 18:53:13.584000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:13.584000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:13.584000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:13.584000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:13.584000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:13.584000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:13.584000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:13.584000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:13.584000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:13.584000 audit: BPF prog-id=88 op=LOAD Mar 17 18:53:13.584000 audit: BPF prog-id=47 op=UNLOAD Mar 17 18:53:13.584000 audit: BPF prog-id=48 op=UNLOAD Mar 17 18:53:13.585000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:13.585000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:13.585000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:13.585000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:13.585000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:13.585000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:13.585000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:13.585000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:13.585000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:13.585000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:13.585000 audit: BPF prog-id=89 op=LOAD Mar 17 18:53:13.585000 audit: BPF prog-id=49 op=UNLOAD Mar 17 18:53:13.585000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:13.585000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:13.585000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:13.585000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:13.585000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:13.585000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:13.585000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:13.585000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:13.585000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:13.585000 audit: BPF prog-id=90 op=LOAD Mar 17 18:53:13.585000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:13.585000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:13.585000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:13.585000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:13.585000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:13.585000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:13.585000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:13.585000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:13.585000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:13.585000 audit: BPF prog-id=91 op=LOAD Mar 17 18:53:13.585000 audit: BPF prog-id=50 op=UNLOAD Mar 17 18:53:13.586000 audit: BPF prog-id=51 op=UNLOAD Mar 17 18:53:13.588000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:13.588000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:13.588000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:13.588000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:13.588000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:13.588000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:13.588000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:13.588000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:13.588000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:13.588000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:13.588000 audit: BPF prog-id=92 op=LOAD Mar 17 18:53:13.588000 audit: BPF prog-id=52 op=UNLOAD Mar 17 18:53:13.589000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:13.589000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:13.589000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:13.589000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:13.589000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:13.589000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:13.589000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:13.589000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:13.589000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:13.589000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:13.589000 audit: BPF prog-id=93 op=LOAD Mar 17 18:53:13.589000 audit: BPF prog-id=76 op=UNLOAD Mar 17 18:53:13.590000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:13.590000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:13.590000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:13.590000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:13.590000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:13.590000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:13.590000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:13.590000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:13.590000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:13.590000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:13.590000 audit: BPF prog-id=94 op=LOAD Mar 17 18:53:13.590000 audit: BPF prog-id=72 op=UNLOAD Mar 17 18:53:13.592000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:13.592000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:13.592000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:13.592000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:13.592000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:13.592000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:13.592000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:13.592000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:13.592000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:13.592000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:13.592000 audit: BPF prog-id=95 op=LOAD Mar 17 18:53:13.592000 audit: BPF prog-id=64 op=UNLOAD Mar 17 18:53:13.593000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:13.593000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:13.593000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:13.593000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:13.593000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:13.593000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:13.593000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:13.593000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:13.593000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:13.593000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:13.593000 audit: BPF prog-id=96 op=LOAD Mar 17 18:53:13.593000 audit: BPF prog-id=68 op=UNLOAD Mar 17 18:53:13.593000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:13.593000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:13.593000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:13.593000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:13.593000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:13.593000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:13.593000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:13.593000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:13.593000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:13.594000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:13.594000 audit: BPF prog-id=97 op=LOAD Mar 17 18:53:13.594000 audit: BPF prog-id=56 op=UNLOAD Mar 17 18:53:13.595000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:13.595000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:13.595000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:13.595000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:13.595000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:13.595000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:13.595000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:13.595000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:13.595000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:13.595000 audit: BPF prog-id=98 op=LOAD Mar 17 18:53:13.595000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:13.595000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:13.595000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:13.595000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:13.595000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:13.595000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:13.595000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:13.595000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:13.595000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:13.595000 audit: BPF prog-id=99 op=LOAD Mar 17 18:53:13.595000 audit: BPF prog-id=53 op=UNLOAD Mar 17 18:53:13.595000 audit: BPF prog-id=54 op=UNLOAD Mar 17 18:53:13.596000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:13.596000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:13.596000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:13.596000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:13.596000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:13.596000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:13.596000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:13.596000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:13.596000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:13.596000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:13.596000 audit: BPF prog-id=100 op=LOAD Mar 17 18:53:13.596000 audit: BPF prog-id=55 op=UNLOAD Mar 17 18:53:13.618341 systemd[1]: Stopping kubelet.service... Mar 17 18:53:13.635000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:53:13.636516 systemd[1]: kubelet.service: Deactivated successfully. Mar 17 18:53:13.636669 systemd[1]: Stopped kubelet.service. Mar 17 18:53:13.636721 systemd[1]: kubelet.service: Consumed 1.369s CPU time. Mar 17 18:53:13.639071 systemd[1]: Starting kubelet.service... Mar 17 18:53:13.825000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:53:13.824863 systemd[1]: Started kubelet.service. Mar 17 18:53:13.832941 kernel: kauditd_printk_skb: 605 callbacks suppressed Mar 17 18:53:13.833024 kernel: audit: type=1130 audit(1742237593.825:805): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:53:13.885840 kubelet[2450]: Flag --container-runtime-endpoint has been deprecated, This parameter should be set via the config file specified by the Kubelet's --config flag. See https://kubernetes.io/docs/tasks/administer-cluster/kubelet-config-file/ for more information. Mar 17 18:53:13.886167 kubelet[2450]: Flag --pod-infra-container-image has been deprecated, will be removed in 1.35. Image garbage collector will get sandbox image information from CRI. Mar 17 18:53:13.886208 kubelet[2450]: Flag --volume-plugin-dir has been deprecated, This parameter should be set via the config file specified by the Kubelet's --config flag. See https://kubernetes.io/docs/tasks/administer-cluster/kubelet-config-file/ for more information. Mar 17 18:53:13.886389 kubelet[2450]: I0317 18:53:13.886352 2450 server.go:215] "--pod-infra-container-image will not be pruned by the image garbage collector in kubelet and should also be set in the remote runtime" Mar 17 18:53:13.895392 kubelet[2450]: I0317 18:53:13.895360 2450 server.go:520] "Kubelet version" kubeletVersion="v1.32.0" Mar 17 18:53:13.895392 kubelet[2450]: I0317 18:53:13.895384 2450 server.go:522] "Golang settings" GOGC="" GOMAXPROCS="" GOTRACEBACK="" Mar 17 18:53:13.895693 kubelet[2450]: I0317 18:53:13.895672 2450 server.go:954] "Client rotation is on, will bootstrap in background" Mar 17 18:53:13.896893 kubelet[2450]: I0317 18:53:13.896860 2450 certificate_store.go:130] Loading cert/key pair from "/var/lib/kubelet/pki/kubelet-client-current.pem". Mar 17 18:53:13.898845 kubelet[2450]: I0317 18:53:13.898826 2450 dynamic_cafile_content.go:161] "Starting controller" name="client-ca-bundle::/etc/kubernetes/pki/ca.crt" Mar 17 18:53:13.902238 kubelet[2450]: E0317 18:53:13.902197 2450 log.go:32] "RuntimeConfig from runtime service failed" err="rpc error: code = Unimplemented desc = unknown method RuntimeConfig for service runtime.v1.RuntimeService" Mar 17 18:53:13.902238 kubelet[2450]: I0317 18:53:13.902232 2450 server.go:1421] "CRI implementation should be updated to support RuntimeConfig when KubeletCgroupDriverFromCRI feature gate has been enabled. Falling back to using cgroupDriver from kubelet config." Mar 17 18:53:13.905575 kubelet[2450]: I0317 18:53:13.905509 2450 server.go:772] "--cgroups-per-qos enabled, but --cgroup-root was not specified. defaulting to /" Mar 17 18:53:13.905764 kubelet[2450]: I0317 18:53:13.905729 2450 container_manager_linux.go:268] "Container manager verified user specified cgroup-root exists" cgroupRoot=[] Mar 17 18:53:13.905927 kubelet[2450]: I0317 18:53:13.905763 2450 container_manager_linux.go:273] "Creating Container Manager object based on Node Config" nodeConfig={"NodeName":"ci-3510.3.7-a-9ed44aff31","RuntimeCgroupsName":"","SystemCgroupsName":"","KubeletCgroupsName":"","KubeletOOMScoreAdj":-999,"ContainerRuntime":"","CgroupsPerQOS":true,"CgroupRoot":"/","CgroupDriver":"systemd","KubeletRootDir":"/var/lib/kubelet","ProtectKernelDefaults":false,"KubeReservedCgroupName":"","SystemReservedCgroupName":"","ReservedSystemCPUs":{},"EnforceNodeAllocatable":{"pods":{}},"KubeReserved":null,"SystemReserved":null,"HardEvictionThresholds":[{"Signal":"nodefs.available","Operator":"LessThan","Value":{"Quantity":null,"Percentage":0.1},"GracePeriod":0,"MinReclaim":null},{"Signal":"nodefs.inodesFree","Operator":"LessThan","Value":{"Quantity":null,"Percentage":0.05},"GracePeriod":0,"MinReclaim":null},{"Signal":"imagefs.available","Operator":"LessThan","Value":{"Quantity":null,"Percentage":0.15},"GracePeriod":0,"MinReclaim":null},{"Signal":"imagefs.inodesFree","Operator":"LessThan","Value":{"Quantity":null,"Percentage":0.05},"GracePeriod":0,"MinReclaim":null},{"Signal":"memory.available","Operator":"LessThan","Value":{"Quantity":"100Mi","Percentage":0},"GracePeriod":0,"MinReclaim":null}],"QOSReserved":{},"CPUManagerPolicy":"none","CPUManagerPolicyOptions":null,"TopologyManagerScope":"container","CPUManagerReconcilePeriod":10000000000,"ExperimentalMemoryManagerPolicy":"None","ExperimentalMemoryManagerReservedMemory":null,"PodPidsLimit":-1,"EnforceCPULimits":true,"CPUCFSQuotaPeriod":100000000,"TopologyManagerPolicy":"none","TopologyManagerPolicyOptions":null,"CgroupVersion":2} Mar 17 18:53:13.906067 kubelet[2450]: I0317 18:53:13.905939 2450 topology_manager.go:138] "Creating topology manager with none policy" Mar 17 18:53:13.906067 kubelet[2450]: I0317 18:53:13.905959 2450 container_manager_linux.go:304] "Creating device plugin manager" Mar 17 18:53:13.906067 kubelet[2450]: I0317 18:53:13.906007 2450 state_mem.go:36] "Initialized new in-memory state store" Mar 17 18:53:13.906192 kubelet[2450]: I0317 18:53:13.906168 2450 kubelet.go:446] "Attempting to sync node with API server" Mar 17 18:53:13.906192 kubelet[2450]: I0317 18:53:13.906188 2450 kubelet.go:341] "Adding static pod path" path="/etc/kubernetes/manifests" Mar 17 18:53:13.906741 kubelet[2450]: I0317 18:53:13.906584 2450 kubelet.go:352] "Adding apiserver pod source" Mar 17 18:53:13.906741 kubelet[2450]: I0317 18:53:13.906604 2450 apiserver.go:42] "Waiting for node sync before watching apiserver pods" Mar 17 18:53:13.919489 kubelet[2450]: I0317 18:53:13.919472 2450 kuberuntime_manager.go:269] "Container runtime initialized" containerRuntime="containerd" version="1.6.16" apiVersion="v1" Mar 17 18:53:13.920149 kubelet[2450]: I0317 18:53:13.920132 2450 kubelet.go:890] "Not starting ClusterTrustBundle informer because we are in static kubelet mode" Mar 17 18:53:13.920846 kubelet[2450]: I0317 18:53:13.920831 2450 watchdog_linux.go:99] "Systemd watchdog is not enabled" Mar 17 18:53:13.920999 kubelet[2450]: I0317 18:53:13.920987 2450 server.go:1287] "Started kubelet" Mar 17 18:53:13.922799 kubelet[2450]: I0317 18:53:13.922768 2450 kubelet.go:1513] "Unprivileged containerized plugins might not work, could not set selinux context on plugin registration dir" path="/var/lib/kubelet/plugins_registry" err="setxattr(label=system_u:object_r:container_file_t:s0) /var/lib/kubelet/plugins_registry: invalid argument" Mar 17 18:53:13.922959 kubelet[2450]: I0317 18:53:13.922943 2450 kubelet.go:1517] "Unprivileged containerized plugins might not work, could not set selinux context on plugins dir" path="/var/lib/kubelet/plugins" err="setxattr(label=system_u:object_r:container_file_t:s0) /var/lib/kubelet/plugins: invalid argument" Mar 17 18:53:13.923098 kubelet[2450]: I0317 18:53:13.923074 2450 fs_resource_analyzer.go:67] "Starting FS ResourceAnalyzer" Mar 17 18:53:13.921000 audit[2450]: AVC avc: denied { mac_admin } for pid=2450 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:13.932605 kubelet[2450]: E0317 18:53:13.932590 2450 kubelet.go:1561] "Image garbage collection failed once. Stats initialization may not have completed yet" err="invalid capacity 0 on image filesystem" Mar 17 18:53:13.933845 kubelet[2450]: I0317 18:53:13.933825 2450 server.go:169] "Starting to listen" address="0.0.0.0" port=10250 Mar 17 18:53:13.934926 kubelet[2450]: I0317 18:53:13.934908 2450 server.go:490] "Adding debug handlers to kubelet server" Mar 17 18:53:13.936480 kubelet[2450]: I0317 18:53:13.936434 2450 ratelimit.go:55] "Setting rate limiting for endpoint" service="podresources" qps=100 burstTokens=10 Mar 17 18:53:13.936734 kubelet[2450]: I0317 18:53:13.936720 2450 server.go:243] "Starting to serve the podresources API" endpoint="unix:/var/lib/kubelet/pod-resources/kubelet.sock" Mar 17 18:53:13.937000 kubelet[2450]: I0317 18:53:13.936984 2450 dynamic_serving_content.go:135] "Starting controller" name="kubelet-server-cert-files::/var/lib/kubelet/pki/kubelet.crt::/var/lib/kubelet/pki/kubelet.key" Mar 17 18:53:13.938277 kernel: audit: type=1400 audit(1742237593.921:806): avc: denied { mac_admin } for pid=2450 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:13.938448 kubelet[2450]: I0317 18:53:13.938434 2450 volume_manager.go:297] "Starting Kubelet Volume Manager" Mar 17 18:53:13.938899 kubelet[2450]: I0317 18:53:13.938880 2450 desired_state_of_world_populator.go:149] "Desired state populator starts to run" Mar 17 18:53:13.939116 kubelet[2450]: I0317 18:53:13.939102 2450 reconciler.go:26] "Reconciler: start to sync state" Mar 17 18:53:13.921000 audit: SELINUX_ERR op=setxattr invalid_context="system_u:object_r:container_file_t:s0" Mar 17 18:53:13.945348 kubelet[2450]: I0317 18:53:13.945334 2450 factory.go:221] Registration of the containerd container factory successfully Mar 17 18:53:13.945430 kubelet[2450]: I0317 18:53:13.945423 2450 factory.go:221] Registration of the systemd container factory successfully Mar 17 18:53:13.945568 kubelet[2450]: I0317 18:53:13.945554 2450 factory.go:219] Registration of the crio container factory failed: Get "http://%2Fvar%2Frun%2Fcrio%2Fcrio.sock/info": dial unix /var/run/crio/crio.sock: connect: no such file or directory Mar 17 18:53:13.948304 kernel: audit: type=1401 audit(1742237593.921:806): op=setxattr invalid_context="system_u:object_r:container_file_t:s0" Mar 17 18:53:13.921000 audit[2450]: SYSCALL arch=c000003e syscall=188 success=no exit=-22 a0=c000aedd40 a1=c000abaf90 a2=c000aedd10 a3=25 items=0 ppid=1 pid=2450 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/usr/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:53:13.958563 kubelet[2450]: I0317 18:53:13.958540 2450 kubelet_network_linux.go:50] "Initialized iptables rules." protocol="IPv4" Mar 17 18:53:13.959601 kubelet[2450]: I0317 18:53:13.959584 2450 kubelet_network_linux.go:50] "Initialized iptables rules." protocol="IPv6" Mar 17 18:53:13.959688 kubelet[2450]: I0317 18:53:13.959680 2450 status_manager.go:227] "Starting to sync pod status with apiserver" Mar 17 18:53:13.959749 kubelet[2450]: I0317 18:53:13.959742 2450 watchdog_linux.go:127] "Systemd watchdog is not enabled or the interval is invalid, so health checking will not be started." Mar 17 18:53:13.959794 kubelet[2450]: I0317 18:53:13.959788 2450 kubelet.go:2388] "Starting kubelet main sync loop" Mar 17 18:53:13.959890 kubelet[2450]: E0317 18:53:13.959876 2450 kubelet.go:2412] "Skipping pod synchronization" err="[container runtime status check may not have completed yet, PLEG is not healthy: pleg has yet to be successful]" Mar 17 18:53:13.972292 kernel: audit: type=1300 audit(1742237593.921:806): arch=c000003e syscall=188 success=no exit=-22 a0=c000aedd40 a1=c000abaf90 a2=c000aedd10 a3=25 items=0 ppid=1 pid=2450 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/usr/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:53:13.921000 audit: PROCTITLE proctitle=2F7573722F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 Mar 17 18:53:13.995280 kernel: audit: type=1327 audit(1742237593.921:806): proctitle=2F7573722F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 Mar 17 18:53:13.921000 audit[2450]: AVC avc: denied { mac_admin } for pid=2450 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:14.011280 kernel: audit: type=1400 audit(1742237593.921:807): avc: denied { mac_admin } for pid=2450 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:13.921000 audit: SELINUX_ERR op=setxattr invalid_context="system_u:object_r:container_file_t:s0" Mar 17 18:53:13.921000 audit[2450]: SYSCALL arch=c000003e syscall=188 success=no exit=-22 a0=c000b4f340 a1=c000abafa8 a2=c000aeddd0 a3=25 items=0 ppid=1 pid=2450 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/usr/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:53:14.021214 kubelet[2450]: I0317 18:53:14.020061 2450 cpu_manager.go:221] "Starting CPU manager" policy="none" Mar 17 18:53:14.021214 kubelet[2450]: I0317 18:53:14.020072 2450 cpu_manager.go:222] "Reconciling" reconcilePeriod="10s" Mar 17 18:53:14.021214 kubelet[2450]: I0317 18:53:14.020088 2450 state_mem.go:36] "Initialized new in-memory state store" Mar 17 18:53:14.021214 kubelet[2450]: I0317 18:53:14.020220 2450 state_mem.go:88] "Updated default CPUSet" cpuSet="" Mar 17 18:53:14.021214 kubelet[2450]: I0317 18:53:14.020229 2450 state_mem.go:96] "Updated CPUSet assignments" assignments={} Mar 17 18:53:14.021214 kubelet[2450]: I0317 18:53:14.020246 2450 policy_none.go:49] "None policy: Start" Mar 17 18:53:14.021214 kubelet[2450]: I0317 18:53:14.020257 2450 memory_manager.go:186] "Starting memorymanager" policy="None" Mar 17 18:53:14.021214 kubelet[2450]: I0317 18:53:14.020399 2450 state_mem.go:35] "Initializing new in-memory state store" Mar 17 18:53:14.021214 kubelet[2450]: I0317 18:53:14.020495 2450 state_mem.go:75] "Updated machine memory state" Mar 17 18:53:14.024068 kubelet[2450]: I0317 18:53:14.024053 2450 manager.go:519] "Failed to read data from checkpoint" checkpoint="kubelet_internal_checkpoint" err="checkpoint is not found" Mar 17 18:53:14.024204 kubelet[2450]: I0317 18:53:14.024188 2450 server.go:94] "Unprivileged containerized plugins might not work. Could not set selinux context on socket dir" path="/var/lib/kubelet/device-plugins/" err="setxattr(label=system_u:object_r:container_file_t:s0) /var/lib/kubelet/device-plugins/: invalid argument" Mar 17 18:53:14.024383 kubelet[2450]: I0317 18:53:14.024372 2450 eviction_manager.go:189] "Eviction manager: starting control loop" Mar 17 18:53:14.024456 kubelet[2450]: I0317 18:53:14.024435 2450 container_log_manager.go:189] "Initializing container log rotate workers" workers=1 monitorPeriod="10s" Mar 17 18:53:14.025419 kubelet[2450]: I0317 18:53:14.025406 2450 plugin_manager.go:118] "Starting Kubelet Plugin Manager" Mar 17 18:53:14.027962 kubelet[2450]: E0317 18:53:14.027948 2450 eviction_manager.go:267] "eviction manager: failed to check if we have separate container filesystem. Ignoring." err="no imagefs label for configured runtime" Mar 17 18:53:14.040980 kernel: audit: type=1401 audit(1742237593.921:807): op=setxattr invalid_context="system_u:object_r:container_file_t:s0" Mar 17 18:53:14.041482 kernel: audit: type=1300 audit(1742237593.921:807): arch=c000003e syscall=188 success=no exit=-22 a0=c000b4f340 a1=c000abafa8 a2=c000aeddd0 a3=25 items=0 ppid=1 pid=2450 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/usr/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:53:14.041580 kernel: audit: type=1327 audit(1742237593.921:807): proctitle=2F7573722F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 Mar 17 18:53:13.921000 audit: PROCTITLE proctitle=2F7573722F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 Mar 17 18:53:14.059626 kernel: audit: type=1400 audit(1742237594.018:808): avc: denied { mac_admin } for pid=2450 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:14.018000 audit[2450]: AVC avc: denied { mac_admin } for pid=2450 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:14.061303 kubelet[2450]: I0317 18:53:14.061287 2450 kubelet.go:3200] "Creating a mirror pod for static pod" pod="kube-system/kube-scheduler-ci-3510.3.7-a-9ed44aff31" Mar 17 18:53:14.061817 kubelet[2450]: I0317 18:53:14.061805 2450 kubelet.go:3200] "Creating a mirror pod for static pod" pod="kube-system/kube-apiserver-ci-3510.3.7-a-9ed44aff31" Mar 17 18:53:14.062236 kubelet[2450]: I0317 18:53:14.062226 2450 kubelet.go:3200] "Creating a mirror pod for static pod" pod="kube-system/kube-controller-manager-ci-3510.3.7-a-9ed44aff31" Mar 17 18:53:14.018000 audit: SELINUX_ERR op=setxattr invalid_context="system_u:object_r:container_file_t:s0" Mar 17 18:53:14.018000 audit[2450]: SYSCALL arch=c000003e syscall=188 success=no exit=-22 a0=c000be5fb0 a1=c000e0e8b8 a2=c000be5f80 a3=25 items=0 ppid=1 pid=2450 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/usr/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:53:14.018000 audit: PROCTITLE proctitle=2F7573722F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 Mar 17 18:53:14.073193 kubelet[2450]: W0317 18:53:14.073177 2450 warnings.go:70] metadata.name: this is used in the Pod's hostname, which can result in surprising behavior; a DNS label is recommended: [must not contain dots] Mar 17 18:53:14.083298 kubelet[2450]: W0317 18:53:14.083281 2450 warnings.go:70] metadata.name: this is used in the Pod's hostname, which can result in surprising behavior; a DNS label is recommended: [must not contain dots] Mar 17 18:53:14.083638 kubelet[2450]: W0317 18:53:14.083615 2450 warnings.go:70] metadata.name: this is used in the Pod's hostname, which can result in surprising behavior; a DNS label is recommended: [must not contain dots] Mar 17 18:53:14.140250 kubelet[2450]: I0317 18:53:14.140124 2450 kubelet_node_status.go:76] "Attempting to register node" node="ci-3510.3.7-a-9ed44aff31" Mar 17 18:53:14.144286 kubelet[2450]: I0317 18:53:14.141996 2450 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"ca-certs\" (UniqueName: \"kubernetes.io/host-path/b57f60dd03b1d1fddcbfeefd4d8ca16f-ca-certs\") pod \"kube-controller-manager-ci-3510.3.7-a-9ed44aff31\" (UID: \"b57f60dd03b1d1fddcbfeefd4d8ca16f\") " pod="kube-system/kube-controller-manager-ci-3510.3.7-a-9ed44aff31" Mar 17 18:53:14.144286 kubelet[2450]: I0317 18:53:14.142047 2450 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"k8s-certs\" (UniqueName: \"kubernetes.io/host-path/b57f60dd03b1d1fddcbfeefd4d8ca16f-k8s-certs\") pod \"kube-controller-manager-ci-3510.3.7-a-9ed44aff31\" (UID: \"b57f60dd03b1d1fddcbfeefd4d8ca16f\") " pod="kube-system/kube-controller-manager-ci-3510.3.7-a-9ed44aff31" Mar 17 18:53:14.144286 kubelet[2450]: I0317 18:53:14.142083 2450 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kubeconfig\" (UniqueName: \"kubernetes.io/host-path/b57f60dd03b1d1fddcbfeefd4d8ca16f-kubeconfig\") pod \"kube-controller-manager-ci-3510.3.7-a-9ed44aff31\" (UID: \"b57f60dd03b1d1fddcbfeefd4d8ca16f\") " pod="kube-system/kube-controller-manager-ci-3510.3.7-a-9ed44aff31" Mar 17 18:53:14.144286 kubelet[2450]: I0317 18:53:14.142111 2450 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"ca-certs\" (UniqueName: \"kubernetes.io/host-path/99e80bd238b850c3ad14712a9f90cbfe-ca-certs\") pod \"kube-apiserver-ci-3510.3.7-a-9ed44aff31\" (UID: \"99e80bd238b850c3ad14712a9f90cbfe\") " pod="kube-system/kube-apiserver-ci-3510.3.7-a-9ed44aff31" Mar 17 18:53:14.144286 kubelet[2450]: I0317 18:53:14.142141 2450 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"k8s-certs\" (UniqueName: \"kubernetes.io/host-path/99e80bd238b850c3ad14712a9f90cbfe-k8s-certs\") pod \"kube-apiserver-ci-3510.3.7-a-9ed44aff31\" (UID: \"99e80bd238b850c3ad14712a9f90cbfe\") " pod="kube-system/kube-apiserver-ci-3510.3.7-a-9ed44aff31" Mar 17 18:53:14.144495 kubelet[2450]: I0317 18:53:14.142181 2450 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"usr-share-ca-certificates\" (UniqueName: \"kubernetes.io/host-path/99e80bd238b850c3ad14712a9f90cbfe-usr-share-ca-certificates\") pod \"kube-apiserver-ci-3510.3.7-a-9ed44aff31\" (UID: \"99e80bd238b850c3ad14712a9f90cbfe\") " pod="kube-system/kube-apiserver-ci-3510.3.7-a-9ed44aff31" Mar 17 18:53:14.144495 kubelet[2450]: I0317 18:53:14.142206 2450 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"flexvolume-dir\" (UniqueName: \"kubernetes.io/host-path/b57f60dd03b1d1fddcbfeefd4d8ca16f-flexvolume-dir\") pod \"kube-controller-manager-ci-3510.3.7-a-9ed44aff31\" (UID: \"b57f60dd03b1d1fddcbfeefd4d8ca16f\") " pod="kube-system/kube-controller-manager-ci-3510.3.7-a-9ed44aff31" Mar 17 18:53:14.144495 kubelet[2450]: I0317 18:53:14.142229 2450 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"usr-share-ca-certificates\" (UniqueName: \"kubernetes.io/host-path/b57f60dd03b1d1fddcbfeefd4d8ca16f-usr-share-ca-certificates\") pod \"kube-controller-manager-ci-3510.3.7-a-9ed44aff31\" (UID: \"b57f60dd03b1d1fddcbfeefd4d8ca16f\") " pod="kube-system/kube-controller-manager-ci-3510.3.7-a-9ed44aff31" Mar 17 18:53:14.144495 kubelet[2450]: I0317 18:53:14.142254 2450 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kubeconfig\" (UniqueName: \"kubernetes.io/host-path/c765432204596d4b55c2ac82cb37b776-kubeconfig\") pod \"kube-scheduler-ci-3510.3.7-a-9ed44aff31\" (UID: \"c765432204596d4b55c2ac82cb37b776\") " pod="kube-system/kube-scheduler-ci-3510.3.7-a-9ed44aff31" Mar 17 18:53:14.151905 kubelet[2450]: I0317 18:53:14.151882 2450 kubelet_node_status.go:125] "Node was previously registered" node="ci-3510.3.7-a-9ed44aff31" Mar 17 18:53:14.152017 kubelet[2450]: I0317 18:53:14.151954 2450 kubelet_node_status.go:79] "Successfully registered node" node="ci-3510.3.7-a-9ed44aff31" Mar 17 18:53:14.907499 kubelet[2450]: I0317 18:53:14.907469 2450 apiserver.go:52] "Watching apiserver" Mar 17 18:53:14.939855 kubelet[2450]: I0317 18:53:14.939410 2450 desired_state_of_world_populator.go:157] "Finished populating initial desired state of world" Mar 17 18:53:14.980554 kubelet[2450]: I0317 18:53:14.980528 2450 kubelet.go:3200] "Creating a mirror pod for static pod" pod="kube-system/kube-scheduler-ci-3510.3.7-a-9ed44aff31" Mar 17 18:53:15.004344 kubelet[2450]: W0317 18:53:15.003976 2450 warnings.go:70] metadata.name: this is used in the Pod's hostname, which can result in surprising behavior; a DNS label is recommended: [must not contain dots] Mar 17 18:53:15.004344 kubelet[2450]: E0317 18:53:15.004040 2450 kubelet.go:3202] "Failed creating a mirror pod" err="pods \"kube-scheduler-ci-3510.3.7-a-9ed44aff31\" already exists" pod="kube-system/kube-scheduler-ci-3510.3.7-a-9ed44aff31" Mar 17 18:53:15.043130 kubelet[2450]: I0317 18:53:15.043049 2450 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="kube-system/kube-scheduler-ci-3510.3.7-a-9ed44aff31" podStartSLOduration=1.043031156 podStartE2EDuration="1.043031156s" podCreationTimestamp="2025-03-17 18:53:14 +0000 UTC" firstStartedPulling="0001-01-01 00:00:00 +0000 UTC" lastFinishedPulling="0001-01-01 00:00:00 +0000 UTC" observedRunningTime="2025-03-17 18:53:15.031052441 +0000 UTC m=+1.188869407" watchObservedRunningTime="2025-03-17 18:53:15.043031156 +0000 UTC m=+1.200848222" Mar 17 18:53:15.056075 kubelet[2450]: I0317 18:53:15.056016 2450 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="kube-system/kube-apiserver-ci-3510.3.7-a-9ed44aff31" podStartSLOduration=1.05598008 podStartE2EDuration="1.05598008s" podCreationTimestamp="2025-03-17 18:53:14 +0000 UTC" firstStartedPulling="0001-01-01 00:00:00 +0000 UTC" lastFinishedPulling="0001-01-01 00:00:00 +0000 UTC" observedRunningTime="2025-03-17 18:53:15.043743563 +0000 UTC m=+1.201560529" watchObservedRunningTime="2025-03-17 18:53:15.05598008 +0000 UTC m=+1.213797046" Mar 17 18:53:15.064000 audit[2323]: AVC avc: denied { watch } for pid=2323 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=7355 scontext=system_u:system_r:svirt_lxc_net_t:s0:c454,c669 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Mar 17 18:53:15.064000 audit[2323]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=8 a1=c000720180 a2=fc6 a3=0 items=0 ppid=2152 pid=2323 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c454,c669 key=(null) Mar 17 18:53:15.064000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Mar 17 18:53:15.065000 audit[2323]: AVC avc: denied { watch } for pid=2323 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=7355 scontext=system_u:system_r:svirt_lxc_net_t:s0:c454,c669 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Mar 17 18:53:15.065000 audit[2323]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=7 a1=c000c59140 a2=fc6 a3=0 items=0 ppid=2152 pid=2323 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c454,c669 key=(null) Mar 17 18:53:15.065000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Mar 17 18:53:15.066000 audit[2323]: AVC avc: denied { watch } for pid=2323 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=7355 scontext=system_u:system_r:svirt_lxc_net_t:s0:c454,c669 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Mar 17 18:53:15.066000 audit[2323]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=7 a1=c000c59300 a2=fc6 a3=0 items=0 ppid=2152 pid=2323 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c454,c669 key=(null) Mar 17 18:53:15.066000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Mar 17 18:53:15.067000 audit[2323]: AVC avc: denied { watch } for pid=2323 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=7355 scontext=system_u:system_r:svirt_lxc_net_t:s0:c454,c669 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Mar 17 18:53:15.067000 audit[2323]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=7 a1=c000c594a0 a2=fc6 a3=0 items=0 ppid=2152 pid=2323 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c454,c669 key=(null) Mar 17 18:53:15.067000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Mar 17 18:53:15.340000 audit[2323]: AVC avc: denied { watch } for pid=2323 comm="kube-controller" path="/opt/libexec/kubernetes/kubelet-plugins/volume/exec" dev="sda9" ino=520978 scontext=system_u:system_r:svirt_lxc_net_t:s0:c454,c669 tcontext=system_u:object_r:usr_t:s0 tclass=dir permissive=0 Mar 17 18:53:15.340000 audit[2323]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=8 a1=c00042ff80 a2=fc6 a3=0 items=0 ppid=2152 pid=2323 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c454,c669 key=(null) Mar 17 18:53:15.340000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Mar 17 18:53:19.246005 sudo[1832]: pam_unix(sudo:session): session closed for user root Mar 17 18:53:19.244000 audit[1832]: USER_END pid=1832 uid=500 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_limits,pam_env,pam_unix,pam_permit,pam_systemd acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Mar 17 18:53:19.250628 kernel: kauditd_printk_skb: 18 callbacks suppressed Mar 17 18:53:19.250737 kernel: audit: type=1106 audit(1742237599.244:814): pid=1832 uid=500 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_limits,pam_env,pam_unix,pam_permit,pam_systemd acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Mar 17 18:53:19.246000 audit[1832]: CRED_DISP pid=1832 uid=500 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Mar 17 18:53:19.283141 kernel: audit: type=1104 audit(1742237599.246:815): pid=1832 uid=500 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Mar 17 18:53:19.349438 sshd[1829]: pam_unix(sshd:session): session closed for user core Mar 17 18:53:19.349000 audit[1829]: USER_END pid=1829 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Mar 17 18:53:19.352503 systemd[1]: sshd@6-10.200.8.35:22-10.200.16.10:58988.service: Deactivated successfully. Mar 17 18:53:19.353230 systemd[1]: session-9.scope: Deactivated successfully. Mar 17 18:53:19.353381 systemd[1]: session-9.scope: Consumed 3.978s CPU time. Mar 17 18:53:19.354785 systemd-logind[1398]: Session 9 logged out. Waiting for processes to exit. Mar 17 18:53:19.355781 systemd-logind[1398]: Removed session 9. Mar 17 18:53:19.349000 audit[1829]: CRED_DISP pid=1829 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Mar 17 18:53:19.387247 kernel: audit: type=1106 audit(1742237599.349:816): pid=1829 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Mar 17 18:53:19.387334 kernel: audit: type=1104 audit(1742237599.349:817): pid=1829 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Mar 17 18:53:19.387362 kernel: audit: type=1131 audit(1742237599.349:818): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@6-10.200.8.35:22-10.200.16.10:58988 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:53:19.349000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@6-10.200.8.35:22-10.200.16.10:58988 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:53:19.636935 kubelet[2450]: I0317 18:53:19.636829 2450 kuberuntime_manager.go:1702] "Updating runtime config through cri with podcidr" CIDR="192.168.0.0/24" Mar 17 18:53:19.637844 env[1409]: time="2025-03-17T18:53:19.637805625Z" level=info msg="No cni config template is specified, wait for other system components to drop the config." Mar 17 18:53:19.638490 kubelet[2450]: I0317 18:53:19.638466 2450 kubelet_network.go:61] "Updating Pod CIDR" originalPodCIDR="" newPodCIDR="192.168.0.0/24" Mar 17 18:53:20.311634 kubelet[2450]: I0317 18:53:20.311562 2450 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="kube-system/kube-controller-manager-ci-3510.3.7-a-9ed44aff31" podStartSLOduration=6.311543642 podStartE2EDuration="6.311543642s" podCreationTimestamp="2025-03-17 18:53:14 +0000 UTC" firstStartedPulling="0001-01-01 00:00:00 +0000 UTC" lastFinishedPulling="0001-01-01 00:00:00 +0000 UTC" observedRunningTime="2025-03-17 18:53:15.056750988 +0000 UTC m=+1.214567954" watchObservedRunningTime="2025-03-17 18:53:20.311543642 +0000 UTC m=+6.469360608" Mar 17 18:53:20.611667 systemd[1]: Created slice kubepods-besteffort-pod45400e0d_1f47_4bbd_9f22_5e339bcf4afb.slice. Mar 17 18:53:20.687528 kubelet[2450]: I0317 18:53:20.687468 2450 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-proxy\" (UniqueName: \"kubernetes.io/configmap/45400e0d-1f47-4bbd-9f22-5e339bcf4afb-kube-proxy\") pod \"kube-proxy-7kgfw\" (UID: \"45400e0d-1f47-4bbd-9f22-5e339bcf4afb\") " pod="kube-system/kube-proxy-7kgfw" Mar 17 18:53:20.687925 kubelet[2450]: I0317 18:53:20.687537 2450 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-lwckq\" (UniqueName: \"kubernetes.io/projected/45400e0d-1f47-4bbd-9f22-5e339bcf4afb-kube-api-access-lwckq\") pod \"kube-proxy-7kgfw\" (UID: \"45400e0d-1f47-4bbd-9f22-5e339bcf4afb\") " pod="kube-system/kube-proxy-7kgfw" Mar 17 18:53:20.687925 kubelet[2450]: I0317 18:53:20.687611 2450 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"xtables-lock\" (UniqueName: \"kubernetes.io/host-path/45400e0d-1f47-4bbd-9f22-5e339bcf4afb-xtables-lock\") pod \"kube-proxy-7kgfw\" (UID: \"45400e0d-1f47-4bbd-9f22-5e339bcf4afb\") " pod="kube-system/kube-proxy-7kgfw" Mar 17 18:53:20.687925 kubelet[2450]: I0317 18:53:20.687674 2450 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"lib-modules\" (UniqueName: \"kubernetes.io/host-path/45400e0d-1f47-4bbd-9f22-5e339bcf4afb-lib-modules\") pod \"kube-proxy-7kgfw\" (UID: \"45400e0d-1f47-4bbd-9f22-5e339bcf4afb\") " pod="kube-system/kube-proxy-7kgfw" Mar 17 18:53:20.735818 systemd[1]: Created slice kubepods-besteffort-podddcfa56b_2250_4346_b840_5bdeba587c8a.slice. Mar 17 18:53:20.788826 kubelet[2450]: I0317 18:53:20.788792 2450 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"var-lib-calico\" (UniqueName: \"kubernetes.io/host-path/ddcfa56b-2250-4346-b840-5bdeba587c8a-var-lib-calico\") pod \"tigera-operator-7d68577dc5-9tvmp\" (UID: \"ddcfa56b-2250-4346-b840-5bdeba587c8a\") " pod="tigera-operator/tigera-operator-7d68577dc5-9tvmp" Mar 17 18:53:20.789082 kubelet[2450]: I0317 18:53:20.789061 2450 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-665hn\" (UniqueName: \"kubernetes.io/projected/ddcfa56b-2250-4346-b840-5bdeba587c8a-kube-api-access-665hn\") pod \"tigera-operator-7d68577dc5-9tvmp\" (UID: \"ddcfa56b-2250-4346-b840-5bdeba587c8a\") " pod="tigera-operator/tigera-operator-7d68577dc5-9tvmp" Mar 17 18:53:20.794022 kubelet[2450]: I0317 18:53:20.793993 2450 swap_util.go:74] "error creating dir to test if tmpfs noswap is enabled. Assuming not supported" mount path="" error="stat /var/lib/kubelet/plugins/kubernetes.io/empty-dir: no such file or directory" Mar 17 18:53:20.923026 env[1409]: time="2025-03-17T18:53:20.922356148Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-proxy-7kgfw,Uid:45400e0d-1f47-4bbd-9f22-5e339bcf4afb,Namespace:kube-system,Attempt:0,}" Mar 17 18:53:20.958097 env[1409]: time="2025-03-17T18:53:20.958028852Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Mar 17 18:53:20.958097 env[1409]: time="2025-03-17T18:53:20.958065153Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Mar 17 18:53:20.958344 env[1409]: time="2025-03-17T18:53:20.958301355Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Mar 17 18:53:20.958567 env[1409]: time="2025-03-17T18:53:20.958527656Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/d2dcacb05a0a6942891585389eb76590203c9356a5f51138d4f86184ac691369 pid=2533 runtime=io.containerd.runc.v2 Mar 17 18:53:20.981472 systemd[1]: Started cri-containerd-d2dcacb05a0a6942891585389eb76590203c9356a5f51138d4f86184ac691369.scope. Mar 17 18:53:21.011277 kernel: audit: type=1400 audit(1742237600.995:819): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:20.995000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:20.995000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:21.025311 kernel: audit: type=1400 audit(1742237600.995:820): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:20.995000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:21.047169 env[1409]: time="2025-03-17T18:53:21.039868242Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-proxy-7kgfw,Uid:45400e0d-1f47-4bbd-9f22-5e339bcf4afb,Namespace:kube-system,Attempt:0,} returns sandbox id \"d2dcacb05a0a6942891585389eb76590203c9356a5f51138d4f86184ac691369\"" Mar 17 18:53:21.047169 env[1409]: time="2025-03-17T18:53:21.040706749Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:tigera-operator-7d68577dc5-9tvmp,Uid:ddcfa56b-2250-4346-b840-5bdeba587c8a,Namespace:tigera-operator,Attempt:0,}" Mar 17 18:53:21.047169 env[1409]: time="2025-03-17T18:53:21.043277571Z" level=info msg="CreateContainer within sandbox \"d2dcacb05a0a6942891585389eb76590203c9356a5f51138d4f86184ac691369\" for container &ContainerMetadata{Name:kube-proxy,Attempt:0,}" Mar 17 18:53:21.047449 kernel: audit: type=1400 audit(1742237600.995:821): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:20.995000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:21.062324 kernel: audit: type=1400 audit(1742237600.995:822): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:20.995000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:21.075315 kernel: audit: type=1400 audit(1742237600.995:823): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:20.995000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:20.995000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:20.995000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:20.995000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:21.024000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:21.024000 audit: BPF prog-id=101 op=LOAD Mar 17 18:53:21.024000 audit[2544]: AVC avc: denied { bpf } for pid=2544 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:21.024000 audit[2544]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c0001bdc48 a2=10 a3=1c items=0 ppid=2533 pid=2544 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:53:21.024000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6432646361636230356130613639343238393135383533383965623736 Mar 17 18:53:21.024000 audit[2544]: AVC avc: denied { perfmon } for pid=2544 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:21.024000 audit[2544]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001bd6b0 a2=3c a3=c items=0 ppid=2533 pid=2544 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:53:21.024000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6432646361636230356130613639343238393135383533383965623736 Mar 17 18:53:21.024000 audit[2544]: AVC avc: denied { bpf } for pid=2544 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:21.024000 audit[2544]: AVC avc: denied { bpf } for pid=2544 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:21.024000 audit[2544]: AVC avc: denied { bpf } for pid=2544 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:21.024000 audit[2544]: AVC avc: denied { perfmon } for pid=2544 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:21.024000 audit[2544]: AVC avc: denied { perfmon } for pid=2544 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:21.024000 audit[2544]: AVC avc: denied { perfmon } for pid=2544 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:21.024000 audit[2544]: AVC avc: denied { perfmon } for pid=2544 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:21.024000 audit[2544]: AVC avc: denied { perfmon } for pid=2544 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:21.024000 audit[2544]: AVC avc: denied { bpf } for pid=2544 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:21.024000 audit[2544]: AVC avc: denied { bpf } for pid=2544 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:21.024000 audit: BPF prog-id=102 op=LOAD Mar 17 18:53:21.024000 audit[2544]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001bd9d8 a2=78 a3=c000254c50 items=0 ppid=2533 pid=2544 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:53:21.024000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6432646361636230356130613639343238393135383533383965623736 Mar 17 18:53:21.024000 audit[2544]: AVC avc: denied { bpf } for pid=2544 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:21.024000 audit[2544]: AVC avc: denied { bpf } for pid=2544 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:21.024000 audit[2544]: AVC avc: denied { perfmon } for pid=2544 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:21.024000 audit[2544]: AVC avc: denied { perfmon } for pid=2544 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:21.024000 audit[2544]: AVC avc: denied { perfmon } for pid=2544 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:21.024000 audit[2544]: AVC avc: denied { perfmon } for pid=2544 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:21.024000 audit[2544]: AVC avc: denied { perfmon } for pid=2544 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:21.024000 audit[2544]: AVC avc: denied { bpf } for pid=2544 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:21.024000 audit[2544]: AVC avc: denied { bpf } for pid=2544 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:21.024000 audit: BPF prog-id=103 op=LOAD Mar 17 18:53:21.024000 audit[2544]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c0001bd770 a2=78 a3=c000254c98 items=0 ppid=2533 pid=2544 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:53:21.024000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6432646361636230356130613639343238393135383533383965623736 Mar 17 18:53:21.024000 audit: BPF prog-id=103 op=UNLOAD Mar 17 18:53:21.024000 audit: BPF prog-id=102 op=UNLOAD Mar 17 18:53:21.024000 audit[2544]: AVC avc: denied { bpf } for pid=2544 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:21.024000 audit[2544]: AVC avc: denied { bpf } for pid=2544 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:21.024000 audit[2544]: AVC avc: denied { bpf } for pid=2544 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:21.024000 audit[2544]: AVC avc: denied { perfmon } for pid=2544 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:21.024000 audit[2544]: AVC avc: denied { perfmon } for pid=2544 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:21.024000 audit[2544]: AVC avc: denied { perfmon } for pid=2544 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:21.024000 audit[2544]: AVC avc: denied { perfmon } for pid=2544 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:21.024000 audit[2544]: AVC avc: denied { perfmon } for pid=2544 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:21.024000 audit[2544]: AVC avc: denied { bpf } for pid=2544 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:21.024000 audit[2544]: AVC avc: denied { bpf } for pid=2544 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:21.024000 audit: BPF prog-id=104 op=LOAD Mar 17 18:53:21.024000 audit[2544]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001bdc30 a2=78 a3=c0002550a8 items=0 ppid=2533 pid=2544 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:53:21.024000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6432646361636230356130613639343238393135383533383965623736 Mar 17 18:53:21.092979 env[1409]: time="2025-03-17T18:53:21.092925084Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Mar 17 18:53:21.093211 env[1409]: time="2025-03-17T18:53:21.092959985Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Mar 17 18:53:21.093211 env[1409]: time="2025-03-17T18:53:21.092998785Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Mar 17 18:53:21.093211 env[1409]: time="2025-03-17T18:53:21.093159886Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/2763bfc7a08ff94377534dfc70a692383816a74c5824e986b52c3cf0810e2d34 pid=2573 runtime=io.containerd.runc.v2 Mar 17 18:53:21.102060 env[1409]: time="2025-03-17T18:53:21.102018860Z" level=info msg="CreateContainer within sandbox \"d2dcacb05a0a6942891585389eb76590203c9356a5f51138d4f86184ac691369\" for &ContainerMetadata{Name:kube-proxy,Attempt:0,} returns container id \"788b4a558d30c0b7318fa25939f4cc8ba9458ae0ab09bd5768d6c556a6b0ddb6\"" Mar 17 18:53:21.102972 env[1409]: time="2025-03-17T18:53:21.102928068Z" level=info msg="StartContainer for \"788b4a558d30c0b7318fa25939f4cc8ba9458ae0ab09bd5768d6c556a6b0ddb6\"" Mar 17 18:53:21.110053 systemd[1]: Started cri-containerd-2763bfc7a08ff94377534dfc70a692383816a74c5824e986b52c3cf0810e2d34.scope. Mar 17 18:53:21.136059 systemd[1]: Started cri-containerd-788b4a558d30c0b7318fa25939f4cc8ba9458ae0ab09bd5768d6c556a6b0ddb6.scope. Mar 17 18:53:21.139000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:21.139000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:21.139000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:21.139000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:21.139000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:21.139000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:21.139000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:21.139000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:21.139000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:21.139000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:21.139000 audit: BPF prog-id=105 op=LOAD Mar 17 18:53:21.140000 audit[2583]: AVC avc: denied { bpf } for pid=2583 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:21.140000 audit[2583]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000145c48 a2=10 a3=1c items=0 ppid=2573 pid=2583 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:53:21.140000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3237363362666337613038666639343337373533346466633730613639 Mar 17 18:53:21.140000 audit[2583]: AVC avc: denied { perfmon } for pid=2583 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:21.140000 audit[2583]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001456b0 a2=3c a3=c items=0 ppid=2573 pid=2583 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:53:21.140000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3237363362666337613038666639343337373533346466633730613639 Mar 17 18:53:21.140000 audit[2583]: AVC avc: denied { bpf } for pid=2583 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:21.140000 audit[2583]: AVC avc: denied { bpf } for pid=2583 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:21.140000 audit[2583]: AVC avc: denied { bpf } for pid=2583 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:21.140000 audit[2583]: AVC avc: denied { perfmon } for pid=2583 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:21.140000 audit[2583]: AVC avc: denied { perfmon } for pid=2583 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:21.140000 audit[2583]: AVC avc: denied { perfmon } for pid=2583 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:21.140000 audit[2583]: AVC avc: denied { perfmon } for pid=2583 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:21.140000 audit[2583]: AVC avc: denied { perfmon } for pid=2583 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:21.140000 audit[2583]: AVC avc: denied { bpf } for pid=2583 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:21.140000 audit[2583]: AVC avc: denied { bpf } for pid=2583 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:21.140000 audit: BPF prog-id=106 op=LOAD Mar 17 18:53:21.140000 audit[2583]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001459d8 a2=78 a3=c0003c05e0 items=0 ppid=2573 pid=2583 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:53:21.140000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3237363362666337613038666639343337373533346466633730613639 Mar 17 18:53:21.140000 audit[2583]: AVC avc: denied { bpf } for pid=2583 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:21.140000 audit[2583]: AVC avc: denied { bpf } for pid=2583 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:21.140000 audit[2583]: AVC avc: denied { perfmon } for pid=2583 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:21.140000 audit[2583]: AVC avc: denied { perfmon } for pid=2583 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:21.140000 audit[2583]: AVC avc: denied { perfmon } for pid=2583 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:21.140000 audit[2583]: AVC avc: denied { perfmon } for pid=2583 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:21.140000 audit[2583]: AVC avc: denied { perfmon } for pid=2583 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:21.140000 audit[2583]: AVC avc: denied { bpf } for pid=2583 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:21.140000 audit[2583]: AVC avc: denied { bpf } for pid=2583 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:21.140000 audit: BPF prog-id=107 op=LOAD Mar 17 18:53:21.140000 audit[2583]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000145770 a2=78 a3=c0003c0628 items=0 ppid=2573 pid=2583 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:53:21.140000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3237363362666337613038666639343337373533346466633730613639 Mar 17 18:53:21.140000 audit: BPF prog-id=107 op=UNLOAD Mar 17 18:53:21.140000 audit: BPF prog-id=106 op=UNLOAD Mar 17 18:53:21.140000 audit[2583]: AVC avc: denied { bpf } for pid=2583 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:21.140000 audit[2583]: AVC avc: denied { bpf } for pid=2583 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:21.140000 audit[2583]: AVC avc: denied { bpf } for pid=2583 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:21.140000 audit[2583]: AVC avc: denied { perfmon } for pid=2583 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:21.140000 audit[2583]: AVC avc: denied { perfmon } for pid=2583 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:21.140000 audit[2583]: AVC avc: denied { perfmon } for pid=2583 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:21.140000 audit[2583]: AVC avc: denied { perfmon } for pid=2583 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:21.140000 audit[2583]: AVC avc: denied { perfmon } for pid=2583 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:21.140000 audit[2583]: AVC avc: denied { bpf } for pid=2583 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:21.140000 audit[2583]: AVC avc: denied { bpf } for pid=2583 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:21.140000 audit: BPF prog-id=108 op=LOAD Mar 17 18:53:21.140000 audit[2583]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000145c30 a2=78 a3=c0003c0a38 items=0 ppid=2573 pid=2583 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:53:21.140000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3237363362666337613038666639343337373533346466633730613639 Mar 17 18:53:21.166000 audit[2601]: AVC avc: denied { perfmon } for pid=2601 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:21.166000 audit[2601]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=0 a1=c0001bd6b0 a2=3c a3=7f78013db6b8 items=0 ppid=2533 pid=2601 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:53:21.166000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3738386234613535386433306330623733313866613235393339663463 Mar 17 18:53:21.166000 audit[2601]: AVC avc: denied { bpf } for pid=2601 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:21.166000 audit[2601]: AVC avc: denied { bpf } for pid=2601 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:21.166000 audit[2601]: AVC avc: denied { bpf } for pid=2601 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:21.166000 audit[2601]: AVC avc: denied { perfmon } for pid=2601 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:21.166000 audit[2601]: AVC avc: denied { perfmon } for pid=2601 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:21.166000 audit[2601]: AVC avc: denied { perfmon } for pid=2601 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:21.166000 audit[2601]: AVC avc: denied { perfmon } for pid=2601 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:21.166000 audit[2601]: AVC avc: denied { perfmon } for pid=2601 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:21.166000 audit[2601]: AVC avc: denied { bpf } for pid=2601 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:21.166000 audit[2601]: AVC avc: denied { bpf } for pid=2601 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:21.166000 audit: BPF prog-id=109 op=LOAD Mar 17 18:53:21.166000 audit[2601]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c0001bd9d8 a2=78 a3=c000300c88 items=0 ppid=2533 pid=2601 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:53:21.166000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3738386234613535386433306330623733313866613235393339663463 Mar 17 18:53:21.167000 audit[2601]: AVC avc: denied { bpf } for pid=2601 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:21.167000 audit[2601]: AVC avc: denied { bpf } for pid=2601 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:21.167000 audit[2601]: AVC avc: denied { perfmon } for pid=2601 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:21.167000 audit[2601]: AVC avc: denied { perfmon } for pid=2601 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:21.167000 audit[2601]: AVC avc: denied { perfmon } for pid=2601 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:21.167000 audit[2601]: AVC avc: denied { perfmon } for pid=2601 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:21.167000 audit[2601]: AVC avc: denied { perfmon } for pid=2601 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:21.167000 audit[2601]: AVC avc: denied { bpf } for pid=2601 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:21.167000 audit[2601]: AVC avc: denied { bpf } for pid=2601 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:21.167000 audit: BPF prog-id=110 op=LOAD Mar 17 18:53:21.167000 audit[2601]: SYSCALL arch=c000003e syscall=321 success=yes exit=17 a0=5 a1=c0001bd770 a2=78 a3=c000300cd8 items=0 ppid=2533 pid=2601 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:53:21.167000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3738386234613535386433306330623733313866613235393339663463 Mar 17 18:53:21.167000 audit: BPF prog-id=110 op=UNLOAD Mar 17 18:53:21.167000 audit: BPF prog-id=109 op=UNLOAD Mar 17 18:53:21.167000 audit[2601]: AVC avc: denied { bpf } for pid=2601 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:21.167000 audit[2601]: AVC avc: denied { bpf } for pid=2601 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:21.167000 audit[2601]: AVC avc: denied { bpf } for pid=2601 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:21.167000 audit[2601]: AVC avc: denied { perfmon } for pid=2601 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:21.167000 audit[2601]: AVC avc: denied { perfmon } for pid=2601 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:21.167000 audit[2601]: AVC avc: denied { perfmon } for pid=2601 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:21.167000 audit[2601]: AVC avc: denied { perfmon } for pid=2601 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:21.167000 audit[2601]: AVC avc: denied { perfmon } for pid=2601 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:21.167000 audit[2601]: AVC avc: denied { bpf } for pid=2601 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:21.167000 audit[2601]: AVC avc: denied { bpf } for pid=2601 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:21.167000 audit: BPF prog-id=111 op=LOAD Mar 17 18:53:21.167000 audit[2601]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c0001bdc30 a2=78 a3=c000300d68 items=0 ppid=2533 pid=2601 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:53:21.167000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3738386234613535386433306330623733313866613235393339663463 Mar 17 18:53:21.193421 env[1409]: time="2025-03-17T18:53:21.186886867Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:tigera-operator-7d68577dc5-9tvmp,Uid:ddcfa56b-2250-4346-b840-5bdeba587c8a,Namespace:tigera-operator,Attempt:0,} returns sandbox id \"2763bfc7a08ff94377534dfc70a692383816a74c5824e986b52c3cf0810e2d34\"" Mar 17 18:53:21.200544 env[1409]: time="2025-03-17T18:53:21.199415071Z" level=info msg="PullImage \"quay.io/tigera/operator:v1.36.2\"" Mar 17 18:53:21.205514 env[1409]: time="2025-03-17T18:53:21.205474122Z" level=info msg="StartContainer for \"788b4a558d30c0b7318fa25939f4cc8ba9458ae0ab09bd5768d6c556a6b0ddb6\" returns successfully" Mar 17 18:53:21.338000 audit[2673]: NETFILTER_CFG table=mangle:41 family=2 entries=1 op=nft_register_chain pid=2673 subj=system_u:system_r:kernel_t:s0 comm="iptables" Mar 17 18:53:21.338000 audit[2673]: SYSCALL arch=c000003e syscall=46 success=yes exit=104 a0=3 a1=7ffda5170cb0 a2=0 a3=7ffda5170c9c items=0 ppid=2619 pid=2673 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:53:21.338000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D43414E415259002D74006D616E676C65 Mar 17 18:53:21.340000 audit[2674]: NETFILTER_CFG table=mangle:42 family=10 entries=1 op=nft_register_chain pid=2674 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Mar 17 18:53:21.340000 audit[2674]: SYSCALL arch=c000003e syscall=46 success=yes exit=104 a0=3 a1=7ffd805c0c80 a2=0 a3=7ffd805c0c6c items=0 ppid=2619 pid=2674 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:53:21.340000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D43414E415259002D74006D616E676C65 Mar 17 18:53:21.344000 audit[2676]: NETFILTER_CFG table=nat:43 family=10 entries=1 op=nft_register_chain pid=2676 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Mar 17 18:53:21.344000 audit[2675]: NETFILTER_CFG table=nat:44 family=2 entries=1 op=nft_register_chain pid=2675 subj=system_u:system_r:kernel_t:s0 comm="iptables" Mar 17 18:53:21.344000 audit[2675]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7ffc18f826e0 a2=0 a3=7ffc18f826cc items=0 ppid=2619 pid=2675 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:53:21.344000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D43414E415259002D74006E6174 Mar 17 18:53:21.344000 audit[2676]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7fffd93d7210 a2=0 a3=7fffd93d71fc items=0 ppid=2619 pid=2676 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:53:21.344000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D43414E415259002D74006E6174 Mar 17 18:53:21.347000 audit[2677]: NETFILTER_CFG table=filter:45 family=2 entries=1 op=nft_register_chain pid=2677 subj=system_u:system_r:kernel_t:s0 comm="iptables" Mar 17 18:53:21.347000 audit[2677]: SYSCALL arch=c000003e syscall=46 success=yes exit=104 a0=3 a1=7ffca3192900 a2=0 a3=7ffca31928ec items=0 ppid=2619 pid=2677 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:53:21.347000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D43414E415259002D740066696C746572 Mar 17 18:53:21.350000 audit[2678]: NETFILTER_CFG table=filter:46 family=10 entries=1 op=nft_register_chain pid=2678 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Mar 17 18:53:21.350000 audit[2678]: SYSCALL arch=c000003e syscall=46 success=yes exit=104 a0=3 a1=7ffdf7b739e0 a2=0 a3=7ffdf7b739cc items=0 ppid=2619 pid=2678 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:53:21.350000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D43414E415259002D740066696C746572 Mar 17 18:53:21.443000 audit[2679]: NETFILTER_CFG table=filter:47 family=2 entries=1 op=nft_register_chain pid=2679 subj=system_u:system_r:kernel_t:s0 comm="iptables" Mar 17 18:53:21.443000 audit[2679]: SYSCALL arch=c000003e syscall=46 success=yes exit=108 a0=3 a1=7ffd356641c0 a2=0 a3=7ffd356641ac items=0 ppid=2619 pid=2679 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:53:21.443000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D45585445524E414C2D5345525649434553002D740066696C746572 Mar 17 18:53:21.447000 audit[2681]: NETFILTER_CFG table=filter:48 family=2 entries=1 op=nft_register_rule pid=2681 subj=system_u:system_r:kernel_t:s0 comm="iptables" Mar 17 18:53:21.447000 audit[2681]: SYSCALL arch=c000003e syscall=46 success=yes exit=752 a0=3 a1=7fff6ec76810 a2=0 a3=7fff6ec767fc items=0 ppid=2619 pid=2681 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:53:21.447000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E657465732065787465726E616C6C792D76697369626C652073657276696365 Mar 17 18:53:21.451000 audit[2684]: NETFILTER_CFG table=filter:49 family=2 entries=1 op=nft_register_rule pid=2684 subj=system_u:system_r:kernel_t:s0 comm="iptables" Mar 17 18:53:21.451000 audit[2684]: SYSCALL arch=c000003e syscall=46 success=yes exit=752 a0=3 a1=7ffc5b166270 a2=0 a3=7ffc5b16625c items=0 ppid=2619 pid=2684 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:53:21.451000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E657465732065787465726E616C6C792D76697369626C65207365727669 Mar 17 18:53:21.453000 audit[2685]: NETFILTER_CFG table=filter:50 family=2 entries=1 op=nft_register_chain pid=2685 subj=system_u:system_r:kernel_t:s0 comm="iptables" Mar 17 18:53:21.453000 audit[2685]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7ffcd04bb4e0 a2=0 a3=7ffcd04bb4cc items=0 ppid=2619 pid=2685 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:53:21.453000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D4E4F4445504F525453002D740066696C746572 Mar 17 18:53:21.455000 audit[2687]: NETFILTER_CFG table=filter:51 family=2 entries=1 op=nft_register_rule pid=2687 subj=system_u:system_r:kernel_t:s0 comm="iptables" Mar 17 18:53:21.455000 audit[2687]: SYSCALL arch=c000003e syscall=46 success=yes exit=528 a0=3 a1=7ffdf0ba6240 a2=0 a3=7ffdf0ba622c items=0 ppid=2619 pid=2687 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:53:21.455000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206865616C746820636865636B207365727669636520706F727473002D6A004B5542452D4E4F4445504F525453 Mar 17 18:53:21.456000 audit[2688]: NETFILTER_CFG table=filter:52 family=2 entries=1 op=nft_register_chain pid=2688 subj=system_u:system_r:kernel_t:s0 comm="iptables" Mar 17 18:53:21.456000 audit[2688]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7ffd02714360 a2=0 a3=7ffd0271434c items=0 ppid=2619 pid=2688 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:53:21.456000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D5345525649434553002D740066696C746572 Mar 17 18:53:21.459000 audit[2690]: NETFILTER_CFG table=filter:53 family=2 entries=1 op=nft_register_rule pid=2690 subj=system_u:system_r:kernel_t:s0 comm="iptables" Mar 17 18:53:21.459000 audit[2690]: SYSCALL arch=c000003e syscall=46 success=yes exit=744 a0=3 a1=7ffe39b1a0b0 a2=0 a3=7ffe39b1a09c items=0 ppid=2619 pid=2690 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:53:21.459000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D Mar 17 18:53:21.462000 audit[2693]: NETFILTER_CFG table=filter:54 family=2 entries=1 op=nft_register_rule pid=2693 subj=system_u:system_r:kernel_t:s0 comm="iptables" Mar 17 18:53:21.462000 audit[2693]: SYSCALL arch=c000003e syscall=46 success=yes exit=744 a0=3 a1=7ffe29627e00 a2=0 a3=7ffe29627dec items=0 ppid=2619 pid=2693 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:53:21.462000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D49004F5554505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D53 Mar 17 18:53:21.464000 audit[2694]: NETFILTER_CFG table=filter:55 family=2 entries=1 op=nft_register_chain pid=2694 subj=system_u:system_r:kernel_t:s0 comm="iptables" Mar 17 18:53:21.464000 audit[2694]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7fff09e20000 a2=0 a3=7fff09e1ffec items=0 ppid=2619 pid=2694 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:53:21.464000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D464F5257415244002D740066696C746572 Mar 17 18:53:21.466000 audit[2696]: NETFILTER_CFG table=filter:56 family=2 entries=1 op=nft_register_rule pid=2696 subj=system_u:system_r:kernel_t:s0 comm="iptables" Mar 17 18:53:21.466000 audit[2696]: SYSCALL arch=c000003e syscall=46 success=yes exit=528 a0=3 a1=7ffd8293b520 a2=0 a3=7ffd8293b50c items=0 ppid=2619 pid=2696 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:53:21.466000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E6574657320666F7277617264696E672072756C6573002D6A004B5542452D464F5257415244 Mar 17 18:53:21.467000 audit[2697]: NETFILTER_CFG table=filter:57 family=2 entries=1 op=nft_register_chain pid=2697 subj=system_u:system_r:kernel_t:s0 comm="iptables" Mar 17 18:53:21.467000 audit[2697]: SYSCALL arch=c000003e syscall=46 success=yes exit=104 a0=3 a1=7fff7a76ec60 a2=0 a3=7fff7a76ec4c items=0 ppid=2619 pid=2697 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:53:21.467000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D4649524557414C4C002D740066696C746572 Mar 17 18:53:21.470000 audit[2699]: NETFILTER_CFG table=filter:58 family=2 entries=1 op=nft_register_rule pid=2699 subj=system_u:system_r:kernel_t:s0 comm="iptables" Mar 17 18:53:21.470000 audit[2699]: SYSCALL arch=c000003e syscall=46 success=yes exit=748 a0=3 a1=7ffe4d9d9600 a2=0 a3=7ffe4d9d95ec items=0 ppid=2619 pid=2699 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:53:21.470000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206C6F61642062616C616E636572206669726577616C6C002D6A Mar 17 18:53:21.473000 audit[2702]: NETFILTER_CFG table=filter:59 family=2 entries=1 op=nft_register_rule pid=2702 subj=system_u:system_r:kernel_t:s0 comm="iptables" Mar 17 18:53:21.473000 audit[2702]: SYSCALL arch=c000003e syscall=46 success=yes exit=748 a0=3 a1=7ffe143fdb70 a2=0 a3=7ffe143fdb5c items=0 ppid=2619 pid=2702 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:53:21.473000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D49004F5554505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206C6F61642062616C616E636572206669726577616C6C002D6A Mar 17 18:53:21.478000 audit[2705]: NETFILTER_CFG table=filter:60 family=2 entries=1 op=nft_register_rule pid=2705 subj=system_u:system_r:kernel_t:s0 comm="iptables" Mar 17 18:53:21.478000 audit[2705]: SYSCALL arch=c000003e syscall=46 success=yes exit=748 a0=3 a1=7ffc95968710 a2=0 a3=7ffc959686fc items=0 ppid=2619 pid=2705 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:53:21.478000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206C6F61642062616C616E636572206669726577616C6C002D Mar 17 18:53:21.479000 audit[2706]: NETFILTER_CFG table=nat:61 family=2 entries=1 op=nft_register_chain pid=2706 subj=system_u:system_r:kernel_t:s0 comm="iptables" Mar 17 18:53:21.479000 audit[2706]: SYSCALL arch=c000003e syscall=46 success=yes exit=96 a0=3 a1=7ffca50b6ae0 a2=0 a3=7ffca50b6acc items=0 ppid=2619 pid=2706 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:53:21.479000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D5345525649434553002D74006E6174 Mar 17 18:53:21.481000 audit[2708]: NETFILTER_CFG table=nat:62 family=2 entries=1 op=nft_register_rule pid=2708 subj=system_u:system_r:kernel_t:s0 comm="iptables" Mar 17 18:53:21.481000 audit[2708]: SYSCALL arch=c000003e syscall=46 success=yes exit=524 a0=3 a1=7fff647e1f80 a2=0 a3=7fff647e1f6c items=0 ppid=2619 pid=2708 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:53:21.481000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D49004F5554505554002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D5345525649434553 Mar 17 18:53:21.485000 audit[2711]: NETFILTER_CFG table=nat:63 family=2 entries=1 op=nft_register_rule pid=2711 subj=system_u:system_r:kernel_t:s0 comm="iptables" Mar 17 18:53:21.485000 audit[2711]: SYSCALL arch=c000003e syscall=46 success=yes exit=528 a0=3 a1=7fff7ea64fa0 a2=0 a3=7fff7ea64f8c items=0 ppid=2619 pid=2711 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:53:21.485000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900505245524F5554494E47002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D5345525649434553 Mar 17 18:53:21.486000 audit[2712]: NETFILTER_CFG table=nat:64 family=2 entries=1 op=nft_register_chain pid=2712 subj=system_u:system_r:kernel_t:s0 comm="iptables" Mar 17 18:53:21.486000 audit[2712]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7ffc0782dcd0 a2=0 a3=7ffc0782dcbc items=0 ppid=2619 pid=2712 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:53:21.486000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D504F5354524F5554494E47002D74006E6174 Mar 17 18:53:21.489000 audit[2714]: NETFILTER_CFG table=nat:65 family=2 entries=1 op=nft_register_rule pid=2714 subj=system_u:system_r:kernel_t:s0 comm="iptables" Mar 17 18:53:21.489000 audit[2714]: SYSCALL arch=c000003e syscall=46 success=yes exit=532 a0=3 a1=7fff2c5560e0 a2=0 a3=7fff2c5560cc items=0 ppid=2619 pid=2714 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:53:21.489000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900504F5354524F5554494E47002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E6574657320706F7374726F7574696E672072756C6573002D6A004B5542452D504F5354524F5554494E47 Mar 17 18:53:21.607000 audit[2720]: NETFILTER_CFG table=filter:66 family=2 entries=8 op=nft_register_rule pid=2720 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Mar 17 18:53:21.607000 audit[2720]: SYSCALL arch=c000003e syscall=46 success=yes exit=5248 a0=3 a1=7fffa6b05640 a2=0 a3=7fffa6b0562c items=0 ppid=2619 pid=2720 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:53:21.607000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Mar 17 18:53:21.644000 audit[2720]: NETFILTER_CFG table=nat:67 family=2 entries=14 op=nft_register_chain pid=2720 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Mar 17 18:53:21.644000 audit[2720]: SYSCALL arch=c000003e syscall=46 success=yes exit=5508 a0=3 a1=7fffa6b05640 a2=0 a3=7fffa6b0562c items=0 ppid=2619 pid=2720 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:53:21.644000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Mar 17 18:53:21.645000 audit[2725]: NETFILTER_CFG table=filter:68 family=10 entries=1 op=nft_register_chain pid=2725 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Mar 17 18:53:21.645000 audit[2725]: SYSCALL arch=c000003e syscall=46 success=yes exit=108 a0=3 a1=7ffd8424e6e0 a2=0 a3=7ffd8424e6cc items=0 ppid=2619 pid=2725 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:53:21.645000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D45585445524E414C2D5345525649434553002D740066696C746572 Mar 17 18:53:21.648000 audit[2727]: NETFILTER_CFG table=filter:69 family=10 entries=2 op=nft_register_chain pid=2727 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Mar 17 18:53:21.648000 audit[2727]: SYSCALL arch=c000003e syscall=46 success=yes exit=836 a0=3 a1=7fff496841f0 a2=0 a3=7fff496841dc items=0 ppid=2619 pid=2727 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:53:21.648000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E657465732065787465726E616C6C792D76697369626C6520736572766963 Mar 17 18:53:21.652000 audit[2730]: NETFILTER_CFG table=filter:70 family=10 entries=2 op=nft_register_chain pid=2730 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Mar 17 18:53:21.652000 audit[2730]: SYSCALL arch=c000003e syscall=46 success=yes exit=836 a0=3 a1=7fff65febdf0 a2=0 a3=7fff65febddc items=0 ppid=2619 pid=2730 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:53:21.652000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E657465732065787465726E616C6C792D76697369626C652073657276 Mar 17 18:53:21.653000 audit[2731]: NETFILTER_CFG table=filter:71 family=10 entries=1 op=nft_register_chain pid=2731 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Mar 17 18:53:21.653000 audit[2731]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7fff2481cb10 a2=0 a3=7fff2481cafc items=0 ppid=2619 pid=2731 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:53:21.653000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D4E4F4445504F525453002D740066696C746572 Mar 17 18:53:21.656000 audit[2733]: NETFILTER_CFG table=filter:72 family=10 entries=1 op=nft_register_rule pid=2733 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Mar 17 18:53:21.656000 audit[2733]: SYSCALL arch=c000003e syscall=46 success=yes exit=528 a0=3 a1=7ffd591ff160 a2=0 a3=7ffd591ff14c items=0 ppid=2619 pid=2733 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:53:21.656000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206865616C746820636865636B207365727669636520706F727473002D6A004B5542452D4E4F4445504F525453 Mar 17 18:53:21.657000 audit[2734]: NETFILTER_CFG table=filter:73 family=10 entries=1 op=nft_register_chain pid=2734 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Mar 17 18:53:21.657000 audit[2734]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7fff0790eed0 a2=0 a3=7fff0790eebc items=0 ppid=2619 pid=2734 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:53:21.657000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D5345525649434553002D740066696C746572 Mar 17 18:53:21.660000 audit[2736]: NETFILTER_CFG table=filter:74 family=10 entries=1 op=nft_register_rule pid=2736 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Mar 17 18:53:21.660000 audit[2736]: SYSCALL arch=c000003e syscall=46 success=yes exit=744 a0=3 a1=7ffd93dcfae0 a2=0 a3=7ffd93dcfacc items=0 ppid=2619 pid=2736 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:53:21.660000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B554245 Mar 17 18:53:21.663000 audit[2739]: NETFILTER_CFG table=filter:75 family=10 entries=2 op=nft_register_chain pid=2739 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Mar 17 18:53:21.663000 audit[2739]: SYSCALL arch=c000003e syscall=46 success=yes exit=828 a0=3 a1=7ffeb66f5150 a2=0 a3=7ffeb66f513c items=0 ppid=2619 pid=2739 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:53:21.663000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D49004F5554505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D Mar 17 18:53:21.665000 audit[2740]: NETFILTER_CFG table=filter:76 family=10 entries=1 op=nft_register_chain pid=2740 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Mar 17 18:53:21.665000 audit[2740]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7ffc5d57e1a0 a2=0 a3=7ffc5d57e18c items=0 ppid=2619 pid=2740 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:53:21.665000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D464F5257415244002D740066696C746572 Mar 17 18:53:21.667000 audit[2742]: NETFILTER_CFG table=filter:77 family=10 entries=1 op=nft_register_rule pid=2742 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Mar 17 18:53:21.667000 audit[2742]: SYSCALL arch=c000003e syscall=46 success=yes exit=528 a0=3 a1=7ffe649480d0 a2=0 a3=7ffe649480bc items=0 ppid=2619 pid=2742 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:53:21.667000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E6574657320666F7277617264696E672072756C6573002D6A004B5542452D464F5257415244 Mar 17 18:53:21.668000 audit[2743]: NETFILTER_CFG table=filter:78 family=10 entries=1 op=nft_register_chain pid=2743 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Mar 17 18:53:21.668000 audit[2743]: SYSCALL arch=c000003e syscall=46 success=yes exit=104 a0=3 a1=7ffe5c14c560 a2=0 a3=7ffe5c14c54c items=0 ppid=2619 pid=2743 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:53:21.668000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D4649524557414C4C002D740066696C746572 Mar 17 18:53:21.671000 audit[2745]: NETFILTER_CFG table=filter:79 family=10 entries=1 op=nft_register_rule pid=2745 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Mar 17 18:53:21.671000 audit[2745]: SYSCALL arch=c000003e syscall=46 success=yes exit=748 a0=3 a1=7ffd14845c40 a2=0 a3=7ffd14845c2c items=0 ppid=2619 pid=2745 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:53:21.671000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206C6F61642062616C616E636572206669726577616C6C002D6A Mar 17 18:53:21.675000 audit[2748]: NETFILTER_CFG table=filter:80 family=10 entries=1 op=nft_register_rule pid=2748 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Mar 17 18:53:21.675000 audit[2748]: SYSCALL arch=c000003e syscall=46 success=yes exit=748 a0=3 a1=7fff298fa0f0 a2=0 a3=7fff298fa0dc items=0 ppid=2619 pid=2748 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:53:21.675000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D49004F5554505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206C6F61642062616C616E636572206669726577616C6C002D Mar 17 18:53:21.678000 audit[2751]: NETFILTER_CFG table=filter:81 family=10 entries=1 op=nft_register_rule pid=2751 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Mar 17 18:53:21.678000 audit[2751]: SYSCALL arch=c000003e syscall=46 success=yes exit=748 a0=3 a1=7ffc2328f280 a2=0 a3=7ffc2328f26c items=0 ppid=2619 pid=2751 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:53:21.678000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206C6F61642062616C616E636572206669726577616C6C Mar 17 18:53:21.679000 audit[2752]: NETFILTER_CFG table=nat:82 family=10 entries=1 op=nft_register_chain pid=2752 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Mar 17 18:53:21.679000 audit[2752]: SYSCALL arch=c000003e syscall=46 success=yes exit=96 a0=3 a1=7ffe094d2a50 a2=0 a3=7ffe094d2a3c items=0 ppid=2619 pid=2752 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:53:21.679000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D5345525649434553002D74006E6174 Mar 17 18:53:21.682000 audit[2754]: NETFILTER_CFG table=nat:83 family=10 entries=2 op=nft_register_chain pid=2754 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Mar 17 18:53:21.682000 audit[2754]: SYSCALL arch=c000003e syscall=46 success=yes exit=600 a0=3 a1=7ffd928679b0 a2=0 a3=7ffd9286799c items=0 ppid=2619 pid=2754 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:53:21.682000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D49004F5554505554002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D5345525649434553 Mar 17 18:53:21.685000 audit[2757]: NETFILTER_CFG table=nat:84 family=10 entries=2 op=nft_register_chain pid=2757 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Mar 17 18:53:21.685000 audit[2757]: SYSCALL arch=c000003e syscall=46 success=yes exit=608 a0=3 a1=7ffcdf077f60 a2=0 a3=7ffcdf077f4c items=0 ppid=2619 pid=2757 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:53:21.685000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900505245524F5554494E47002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D5345525649434553 Mar 17 18:53:21.686000 audit[2758]: NETFILTER_CFG table=nat:85 family=10 entries=1 op=nft_register_chain pid=2758 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Mar 17 18:53:21.686000 audit[2758]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7ffefca77770 a2=0 a3=7ffefca7775c items=0 ppid=2619 pid=2758 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:53:21.686000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D504F5354524F5554494E47002D74006E6174 Mar 17 18:53:21.689000 audit[2760]: NETFILTER_CFG table=nat:86 family=10 entries=2 op=nft_register_chain pid=2760 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Mar 17 18:53:21.689000 audit[2760]: SYSCALL arch=c000003e syscall=46 success=yes exit=612 a0=3 a1=7ffcdc4c5220 a2=0 a3=7ffcdc4c520c items=0 ppid=2619 pid=2760 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:53:21.689000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900504F5354524F5554494E47002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E6574657320706F7374726F7574696E672072756C6573002D6A004B5542452D504F5354524F5554494E47 Mar 17 18:53:21.690000 audit[2761]: NETFILTER_CFG table=filter:87 family=10 entries=1 op=nft_register_chain pid=2761 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Mar 17 18:53:21.690000 audit[2761]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7ffe862e9ed0 a2=0 a3=7ffe862e9ebc items=0 ppid=2619 pid=2761 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:53:21.690000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D4649524557414C4C002D740066696C746572 Mar 17 18:53:21.692000 audit[2763]: NETFILTER_CFG table=filter:88 family=10 entries=1 op=nft_register_rule pid=2763 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Mar 17 18:53:21.692000 audit[2763]: SYSCALL arch=c000003e syscall=46 success=yes exit=228 a0=3 a1=7ffe16b8f670 a2=0 a3=7ffe16b8f65c items=0 ppid=2619 pid=2763 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:53:21.692000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6A004B5542452D4649524557414C4C Mar 17 18:53:21.696000 audit[2766]: NETFILTER_CFG table=filter:89 family=10 entries=1 op=nft_register_rule pid=2766 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Mar 17 18:53:21.696000 audit[2766]: SYSCALL arch=c000003e syscall=46 success=yes exit=228 a0=3 a1=7fffd2982480 a2=0 a3=7fffd298246c items=0 ppid=2619 pid=2766 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:53:21.696000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D49004F5554505554002D740066696C746572002D6A004B5542452D4649524557414C4C Mar 17 18:53:21.702000 audit[2768]: NETFILTER_CFG table=filter:90 family=10 entries=3 op=nft_register_rule pid=2768 subj=system_u:system_r:kernel_t:s0 comm="ip6tables-resto" Mar 17 18:53:21.702000 audit[2768]: SYSCALL arch=c000003e syscall=46 success=yes exit=2088 a0=3 a1=7ffd07c2bac0 a2=0 a3=7ffd07c2baac items=0 ppid=2619 pid=2768 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:53:21.702000 audit: PROCTITLE proctitle=6970367461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Mar 17 18:53:21.702000 audit[2768]: NETFILTER_CFG table=nat:91 family=10 entries=7 op=nft_register_chain pid=2768 subj=system_u:system_r:kernel_t:s0 comm="ip6tables-resto" Mar 17 18:53:21.702000 audit[2768]: SYSCALL arch=c000003e syscall=46 success=yes exit=2056 a0=3 a1=7ffd07c2bac0 a2=0 a3=7ffd07c2baac items=0 ppid=2619 pid=2768 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:53:21.702000 audit: PROCTITLE proctitle=6970367461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Mar 17 18:53:21.802182 systemd[1]: run-containerd-runc-k8s.io-d2dcacb05a0a6942891585389eb76590203c9356a5f51138d4f86184ac691369-runc.Y5CnPB.mount: Deactivated successfully. Mar 17 18:53:23.179892 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount991810137.mount: Deactivated successfully. Mar 17 18:53:23.858391 env[1409]: time="2025-03-17T18:53:23.858331519Z" level=info msg="ImageCreate event &ImageCreate{Name:quay.io/tigera/operator:v1.36.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Mar 17 18:53:23.863591 env[1409]: time="2025-03-17T18:53:23.863535961Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:3045aa4a360d468ed15090f280e94c54bf4678269a6e863a9ebcf5b31534a346,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Mar 17 18:53:23.867307 env[1409]: time="2025-03-17T18:53:23.867259090Z" level=info msg="ImageUpdate event &ImageUpdate{Name:quay.io/tigera/operator:v1.36.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Mar 17 18:53:23.870803 env[1409]: time="2025-03-17T18:53:23.870768918Z" level=info msg="ImageCreate event &ImageCreate{Name:quay.io/tigera/operator@sha256:fc9ea45f2475fd99db1b36d2ff180a50017b1a5ea0e82a171c6b439b3a620764,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Mar 17 18:53:23.871397 env[1409]: time="2025-03-17T18:53:23.871367323Z" level=info msg="PullImage \"quay.io/tigera/operator:v1.36.2\" returns image reference \"sha256:3045aa4a360d468ed15090f280e94c54bf4678269a6e863a9ebcf5b31534a346\"" Mar 17 18:53:23.873871 env[1409]: time="2025-03-17T18:53:23.873838443Z" level=info msg="CreateContainer within sandbox \"2763bfc7a08ff94377534dfc70a692383816a74c5824e986b52c3cf0810e2d34\" for container &ContainerMetadata{Name:tigera-operator,Attempt:0,}" Mar 17 18:53:23.904760 env[1409]: time="2025-03-17T18:53:23.904664188Z" level=info msg="CreateContainer within sandbox \"2763bfc7a08ff94377534dfc70a692383816a74c5824e986b52c3cf0810e2d34\" for &ContainerMetadata{Name:tigera-operator,Attempt:0,} returns container id \"a3b9e957aee39e77100b9039b664e6b2ae57846ebfe7d039f0d020138b76867d\"" Mar 17 18:53:23.906290 env[1409]: time="2025-03-17T18:53:23.905523395Z" level=info msg="StartContainer for \"a3b9e957aee39e77100b9039b664e6b2ae57846ebfe7d039f0d020138b76867d\"" Mar 17 18:53:23.925231 systemd[1]: Started cri-containerd-a3b9e957aee39e77100b9039b664e6b2ae57846ebfe7d039f0d020138b76867d.scope. Mar 17 18:53:23.936000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:23.936000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:23.936000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:23.936000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:23.936000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:23.936000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:23.936000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:23.936000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:23.936000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:23.936000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:23.936000 audit: BPF prog-id=112 op=LOAD Mar 17 18:53:23.937000 audit[2775]: AVC avc: denied { bpf } for pid=2775 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:23.937000 audit[2775]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c0001bdc48 a2=10 a3=1c items=0 ppid=2573 pid=2775 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:53:23.937000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6133623965393537616565333965373731303062393033396236363465 Mar 17 18:53:23.937000 audit[2775]: AVC avc: denied { perfmon } for pid=2775 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:23.937000 audit[2775]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001bd6b0 a2=3c a3=8 items=0 ppid=2573 pid=2775 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:53:23.937000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6133623965393537616565333965373731303062393033396236363465 Mar 17 18:53:23.937000 audit[2775]: AVC avc: denied { bpf } for pid=2775 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:23.937000 audit[2775]: AVC avc: denied { bpf } for pid=2775 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:23.937000 audit[2775]: AVC avc: denied { bpf } for pid=2775 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:23.937000 audit[2775]: AVC avc: denied { perfmon } for pid=2775 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:23.937000 audit[2775]: AVC avc: denied { perfmon } for pid=2775 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:23.937000 audit[2775]: AVC avc: denied { perfmon } for pid=2775 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:23.937000 audit[2775]: AVC avc: denied { perfmon } for pid=2775 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:23.937000 audit[2775]: AVC avc: denied { perfmon } for pid=2775 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:23.937000 audit[2775]: AVC avc: denied { bpf } for pid=2775 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:23.937000 audit[2775]: AVC avc: denied { bpf } for pid=2775 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:23.937000 audit: BPF prog-id=113 op=LOAD Mar 17 18:53:23.937000 audit[2775]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001bd9d8 a2=78 a3=c0000a05f0 items=0 ppid=2573 pid=2775 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:53:23.937000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6133623965393537616565333965373731303062393033396236363465 Mar 17 18:53:23.937000 audit[2775]: AVC avc: denied { bpf } for pid=2775 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:23.937000 audit[2775]: AVC avc: denied { bpf } for pid=2775 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:23.937000 audit[2775]: AVC avc: denied { perfmon } for pid=2775 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:23.937000 audit[2775]: AVC avc: denied { perfmon } for pid=2775 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:23.937000 audit[2775]: AVC avc: denied { perfmon } for pid=2775 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:23.937000 audit[2775]: AVC avc: denied { perfmon } for pid=2775 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:23.937000 audit[2775]: AVC avc: denied { perfmon } for pid=2775 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:23.937000 audit[2775]: AVC avc: denied { bpf } for pid=2775 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:23.937000 audit[2775]: AVC avc: denied { bpf } for pid=2775 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:23.937000 audit: BPF prog-id=114 op=LOAD Mar 17 18:53:23.937000 audit[2775]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c0001bd770 a2=78 a3=c0000a0638 items=0 ppid=2573 pid=2775 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:53:23.937000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6133623965393537616565333965373731303062393033396236363465 Mar 17 18:53:23.937000 audit: BPF prog-id=114 op=UNLOAD Mar 17 18:53:23.937000 audit: BPF prog-id=113 op=UNLOAD Mar 17 18:53:23.937000 audit[2775]: AVC avc: denied { bpf } for pid=2775 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:23.937000 audit[2775]: AVC avc: denied { bpf } for pid=2775 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:23.937000 audit[2775]: AVC avc: denied { bpf } for pid=2775 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:23.937000 audit[2775]: AVC avc: denied { perfmon } for pid=2775 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:23.937000 audit[2775]: AVC avc: denied { perfmon } for pid=2775 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:23.937000 audit[2775]: AVC avc: denied { perfmon } for pid=2775 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:23.937000 audit[2775]: AVC avc: denied { perfmon } for pid=2775 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:23.937000 audit[2775]: AVC avc: denied { perfmon } for pid=2775 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:23.937000 audit[2775]: AVC avc: denied { bpf } for pid=2775 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:23.937000 audit[2775]: AVC avc: denied { bpf } for pid=2775 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:23.937000 audit: BPF prog-id=115 op=LOAD Mar 17 18:53:23.937000 audit[2775]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001bdc30 a2=78 a3=c0000a0a48 items=0 ppid=2573 pid=2775 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:53:23.937000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6133623965393537616565333965373731303062393033396236363465 Mar 17 18:53:23.955406 env[1409]: time="2025-03-17T18:53:23.955360292Z" level=info msg="StartContainer for \"a3b9e957aee39e77100b9039b664e6b2ae57846ebfe7d039f0d020138b76867d\" returns successfully" Mar 17 18:53:24.014529 kubelet[2450]: I0317 18:53:24.014478 2450 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="kube-system/kube-proxy-7kgfw" podStartSLOduration=4.01445936 podStartE2EDuration="4.01445936s" podCreationTimestamp="2025-03-17 18:53:20 +0000 UTC" firstStartedPulling="0001-01-01 00:00:00 +0000 UTC" lastFinishedPulling="0001-01-01 00:00:00 +0000 UTC" observedRunningTime="2025-03-17 18:53:22.006806696 +0000 UTC m=+8.164623762" watchObservedRunningTime="2025-03-17 18:53:24.01445936 +0000 UTC m=+10.172276326" Mar 17 18:53:24.015007 kubelet[2450]: I0317 18:53:24.014607 2450 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="tigera-operator/tigera-operator-7d68577dc5-9tvmp" podStartSLOduration=1.340811894 podStartE2EDuration="4.014598361s" podCreationTimestamp="2025-03-17 18:53:20 +0000 UTC" firstStartedPulling="2025-03-17 18:53:21.198693165 +0000 UTC m=+7.356510131" lastFinishedPulling="2025-03-17 18:53:23.872479632 +0000 UTC m=+10.030296598" observedRunningTime="2025-03-17 18:53:24.014243358 +0000 UTC m=+10.172060324" watchObservedRunningTime="2025-03-17 18:53:24.014598361 +0000 UTC m=+10.172415327" Mar 17 18:53:27.056000 audit[2810]: NETFILTER_CFG table=filter:92 family=2 entries=15 op=nft_register_rule pid=2810 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Mar 17 18:53:27.062562 kernel: kauditd_printk_skb: 362 callbacks suppressed Mar 17 18:53:27.062654 kernel: audit: type=1325 audit(1742237607.056:930): table=filter:92 family=2 entries=15 op=nft_register_rule pid=2810 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Mar 17 18:53:27.056000 audit[2810]: SYSCALL arch=c000003e syscall=46 success=yes exit=5992 a0=3 a1=7ffce50e9100 a2=0 a3=7ffce50e90ec items=0 ppid=2619 pid=2810 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:53:27.056000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Mar 17 18:53:27.109190 kernel: audit: type=1300 audit(1742237607.056:930): arch=c000003e syscall=46 success=yes exit=5992 a0=3 a1=7ffce50e9100 a2=0 a3=7ffce50e90ec items=0 ppid=2619 pid=2810 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:53:27.109333 kernel: audit: type=1327 audit(1742237607.056:930): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Mar 17 18:53:27.109363 kernel: audit: type=1325 audit(1742237607.079:931): table=nat:93 family=2 entries=12 op=nft_register_rule pid=2810 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Mar 17 18:53:27.079000 audit[2810]: NETFILTER_CFG table=nat:93 family=2 entries=12 op=nft_register_rule pid=2810 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Mar 17 18:53:27.137701 kernel: audit: type=1300 audit(1742237607.079:931): arch=c000003e syscall=46 success=yes exit=2700 a0=3 a1=7ffce50e9100 a2=0 a3=0 items=0 ppid=2619 pid=2810 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:53:27.079000 audit[2810]: SYSCALL arch=c000003e syscall=46 success=yes exit=2700 a0=3 a1=7ffce50e9100 a2=0 a3=0 items=0 ppid=2619 pid=2810 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:53:27.079000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Mar 17 18:53:27.151724 kernel: audit: type=1327 audit(1742237607.079:931): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Mar 17 18:53:27.151839 kernel: audit: type=1325 audit(1742237607.136:932): table=filter:94 family=2 entries=16 op=nft_register_rule pid=2812 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Mar 17 18:53:27.136000 audit[2812]: NETFILTER_CFG table=filter:94 family=2 entries=16 op=nft_register_rule pid=2812 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Mar 17 18:53:27.136000 audit[2812]: SYSCALL arch=c000003e syscall=46 success=yes exit=5992 a0=3 a1=7ffdbaecbb60 a2=0 a3=7ffdbaecbb4c items=0 ppid=2619 pid=2812 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:53:27.196562 kernel: audit: type=1300 audit(1742237607.136:932): arch=c000003e syscall=46 success=yes exit=5992 a0=3 a1=7ffdbaecbb60 a2=0 a3=7ffdbaecbb4c items=0 ppid=2619 pid=2812 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:53:27.196690 kernel: audit: type=1327 audit(1742237607.136:932): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Mar 17 18:53:27.136000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Mar 17 18:53:27.169000 audit[2812]: NETFILTER_CFG table=nat:95 family=2 entries=12 op=nft_register_rule pid=2812 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Mar 17 18:53:27.169000 audit[2812]: SYSCALL arch=c000003e syscall=46 success=yes exit=2700 a0=3 a1=7ffdbaecbb60 a2=0 a3=0 items=0 ppid=2619 pid=2812 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:53:27.169000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Mar 17 18:53:27.211282 kernel: audit: type=1325 audit(1742237607.169:933): table=nat:95 family=2 entries=12 op=nft_register_rule pid=2812 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Mar 17 18:53:27.324230 systemd[1]: Created slice kubepods-besteffort-pod7a1cdb29_39db_43ca_8573_f9585e51850b.slice. Mar 17 18:53:27.331128 kubelet[2450]: I0317 18:53:27.331098 2450 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-8sg8v\" (UniqueName: \"kubernetes.io/projected/7a1cdb29-39db-43ca-8573-f9585e51850b-kube-api-access-8sg8v\") pod \"calico-typha-54c4479c7d-tqqgq\" (UID: \"7a1cdb29-39db-43ca-8573-f9585e51850b\") " pod="calico-system/calico-typha-54c4479c7d-tqqgq" Mar 17 18:53:27.333430 kubelet[2450]: I0317 18:53:27.333407 2450 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"typha-certs\" (UniqueName: \"kubernetes.io/secret/7a1cdb29-39db-43ca-8573-f9585e51850b-typha-certs\") pod \"calico-typha-54c4479c7d-tqqgq\" (UID: \"7a1cdb29-39db-43ca-8573-f9585e51850b\") " pod="calico-system/calico-typha-54c4479c7d-tqqgq" Mar 17 18:53:27.333599 kubelet[2450]: I0317 18:53:27.333581 2450 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"tigera-ca-bundle\" (UniqueName: \"kubernetes.io/configmap/7a1cdb29-39db-43ca-8573-f9585e51850b-tigera-ca-bundle\") pod \"calico-typha-54c4479c7d-tqqgq\" (UID: \"7a1cdb29-39db-43ca-8573-f9585e51850b\") " pod="calico-system/calico-typha-54c4479c7d-tqqgq" Mar 17 18:53:27.347983 systemd[1]: Created slice kubepods-besteffort-pod562318b3_d04a_48e8_b366_2d5ee5dec59b.slice. Mar 17 18:53:27.434374 kubelet[2450]: I0317 18:53:27.434336 2450 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"policysync\" (UniqueName: \"kubernetes.io/host-path/562318b3-d04a-48e8-b366-2d5ee5dec59b-policysync\") pod \"calico-node-tkh7m\" (UID: \"562318b3-d04a-48e8-b366-2d5ee5dec59b\") " pod="calico-system/calico-node-tkh7m" Mar 17 18:53:27.434658 kubelet[2450]: I0317 18:53:27.434635 2450 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"cni-log-dir\" (UniqueName: \"kubernetes.io/host-path/562318b3-d04a-48e8-b366-2d5ee5dec59b-cni-log-dir\") pod \"calico-node-tkh7m\" (UID: \"562318b3-d04a-48e8-b366-2d5ee5dec59b\") " pod="calico-system/calico-node-tkh7m" Mar 17 18:53:27.434823 kubelet[2450]: I0317 18:53:27.434805 2450 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"flexvol-driver-host\" (UniqueName: \"kubernetes.io/host-path/562318b3-d04a-48e8-b366-2d5ee5dec59b-flexvol-driver-host\") pod \"calico-node-tkh7m\" (UID: \"562318b3-d04a-48e8-b366-2d5ee5dec59b\") " pod="calico-system/calico-node-tkh7m" Mar 17 18:53:27.434961 kubelet[2450]: I0317 18:53:27.434943 2450 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"tigera-ca-bundle\" (UniqueName: \"kubernetes.io/configmap/562318b3-d04a-48e8-b366-2d5ee5dec59b-tigera-ca-bundle\") pod \"calico-node-tkh7m\" (UID: \"562318b3-d04a-48e8-b366-2d5ee5dec59b\") " pod="calico-system/calico-node-tkh7m" Mar 17 18:53:27.435072 kubelet[2450]: I0317 18:53:27.435055 2450 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-2jkn5\" (UniqueName: \"kubernetes.io/projected/562318b3-d04a-48e8-b366-2d5ee5dec59b-kube-api-access-2jkn5\") pod \"calico-node-tkh7m\" (UID: \"562318b3-d04a-48e8-b366-2d5ee5dec59b\") " pod="calico-system/calico-node-tkh7m" Mar 17 18:53:27.435177 kubelet[2450]: I0317 18:53:27.435163 2450 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"node-certs\" (UniqueName: \"kubernetes.io/secret/562318b3-d04a-48e8-b366-2d5ee5dec59b-node-certs\") pod \"calico-node-tkh7m\" (UID: \"562318b3-d04a-48e8-b366-2d5ee5dec59b\") " pod="calico-system/calico-node-tkh7m" Mar 17 18:53:27.435277 kubelet[2450]: I0317 18:53:27.435255 2450 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"cni-net-dir\" (UniqueName: \"kubernetes.io/host-path/562318b3-d04a-48e8-b366-2d5ee5dec59b-cni-net-dir\") pod \"calico-node-tkh7m\" (UID: \"562318b3-d04a-48e8-b366-2d5ee5dec59b\") " pod="calico-system/calico-node-tkh7m" Mar 17 18:53:27.435396 kubelet[2450]: I0317 18:53:27.435376 2450 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"lib-modules\" (UniqueName: \"kubernetes.io/host-path/562318b3-d04a-48e8-b366-2d5ee5dec59b-lib-modules\") pod \"calico-node-tkh7m\" (UID: \"562318b3-d04a-48e8-b366-2d5ee5dec59b\") " pod="calico-system/calico-node-tkh7m" Mar 17 18:53:27.435493 kubelet[2450]: I0317 18:53:27.435482 2450 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"var-run-calico\" (UniqueName: \"kubernetes.io/host-path/562318b3-d04a-48e8-b366-2d5ee5dec59b-var-run-calico\") pod \"calico-node-tkh7m\" (UID: \"562318b3-d04a-48e8-b366-2d5ee5dec59b\") " pod="calico-system/calico-node-tkh7m" Mar 17 18:53:27.435564 kubelet[2450]: I0317 18:53:27.435554 2450 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"xtables-lock\" (UniqueName: \"kubernetes.io/host-path/562318b3-d04a-48e8-b366-2d5ee5dec59b-xtables-lock\") pod \"calico-node-tkh7m\" (UID: \"562318b3-d04a-48e8-b366-2d5ee5dec59b\") " pod="calico-system/calico-node-tkh7m" Mar 17 18:53:27.435621 kubelet[2450]: I0317 18:53:27.435609 2450 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"var-lib-calico\" (UniqueName: \"kubernetes.io/host-path/562318b3-d04a-48e8-b366-2d5ee5dec59b-var-lib-calico\") pod \"calico-node-tkh7m\" (UID: \"562318b3-d04a-48e8-b366-2d5ee5dec59b\") " pod="calico-system/calico-node-tkh7m" Mar 17 18:53:27.435677 kubelet[2450]: I0317 18:53:27.435670 2450 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"cni-bin-dir\" (UniqueName: \"kubernetes.io/host-path/562318b3-d04a-48e8-b366-2d5ee5dec59b-cni-bin-dir\") pod \"calico-node-tkh7m\" (UID: \"562318b3-d04a-48e8-b366-2d5ee5dec59b\") " pod="calico-system/calico-node-tkh7m" Mar 17 18:53:27.502284 kubelet[2450]: E0317 18:53:27.502206 2450 pod_workers.go:1301] "Error syncing pod, skipping" err="network is not ready: container runtime network not ready: NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" pod="calico-system/csi-node-driver-qb29d" podUID="fa4b58f5-7cb3-428f-9da4-44a5cc6627b4" Mar 17 18:53:27.536488 kubelet[2450]: I0317 18:53:27.536450 2450 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kubelet-dir\" (UniqueName: \"kubernetes.io/host-path/fa4b58f5-7cb3-428f-9da4-44a5cc6627b4-kubelet-dir\") pod \"csi-node-driver-qb29d\" (UID: \"fa4b58f5-7cb3-428f-9da4-44a5cc6627b4\") " pod="calico-system/csi-node-driver-qb29d" Mar 17 18:53:27.536779 kubelet[2450]: I0317 18:53:27.536751 2450 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"varrun\" (UniqueName: \"kubernetes.io/host-path/fa4b58f5-7cb3-428f-9da4-44a5cc6627b4-varrun\") pod \"csi-node-driver-qb29d\" (UID: \"fa4b58f5-7cb3-428f-9da4-44a5cc6627b4\") " pod="calico-system/csi-node-driver-qb29d" Mar 17 18:53:27.536924 kubelet[2450]: I0317 18:53:27.536909 2450 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"socket-dir\" (UniqueName: \"kubernetes.io/host-path/fa4b58f5-7cb3-428f-9da4-44a5cc6627b4-socket-dir\") pod \"csi-node-driver-qb29d\" (UID: \"fa4b58f5-7cb3-428f-9da4-44a5cc6627b4\") " pod="calico-system/csi-node-driver-qb29d" Mar 17 18:53:27.537109 kubelet[2450]: I0317 18:53:27.537092 2450 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"registration-dir\" (UniqueName: \"kubernetes.io/host-path/fa4b58f5-7cb3-428f-9da4-44a5cc6627b4-registration-dir\") pod \"csi-node-driver-qb29d\" (UID: \"fa4b58f5-7cb3-428f-9da4-44a5cc6627b4\") " pod="calico-system/csi-node-driver-qb29d" Mar 17 18:53:27.537183 kubelet[2450]: I0317 18:53:27.537174 2450 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-bzz49\" (UniqueName: \"kubernetes.io/projected/fa4b58f5-7cb3-428f-9da4-44a5cc6627b4-kube-api-access-bzz49\") pod \"csi-node-driver-qb29d\" (UID: \"fa4b58f5-7cb3-428f-9da4-44a5cc6627b4\") " pod="calico-system/csi-node-driver-qb29d" Mar 17 18:53:27.538393 kubelet[2450]: E0317 18:53:27.538369 2450 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Mar 17 18:53:27.538393 kubelet[2450]: W0317 18:53:27.538391 2450 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Mar 17 18:53:27.538523 kubelet[2450]: E0317 18:53:27.538411 2450 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Mar 17 18:53:27.538796 kubelet[2450]: E0317 18:53:27.538770 2450 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Mar 17 18:53:27.538796 kubelet[2450]: W0317 18:53:27.538791 2450 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Mar 17 18:53:27.538940 kubelet[2450]: E0317 18:53:27.538812 2450 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Mar 17 18:53:27.539022 kubelet[2450]: E0317 18:53:27.539004 2450 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Mar 17 18:53:27.539022 kubelet[2450]: W0317 18:53:27.539019 2450 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Mar 17 18:53:27.539119 kubelet[2450]: E0317 18:53:27.539033 2450 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Mar 17 18:53:27.541385 kubelet[2450]: E0317 18:53:27.541366 2450 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Mar 17 18:53:27.541385 kubelet[2450]: W0317 18:53:27.541384 2450 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Mar 17 18:53:27.541519 kubelet[2450]: E0317 18:53:27.541404 2450 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Mar 17 18:53:27.541773 kubelet[2450]: E0317 18:53:27.541753 2450 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Mar 17 18:53:27.541773 kubelet[2450]: W0317 18:53:27.541772 2450 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Mar 17 18:53:27.541884 kubelet[2450]: E0317 18:53:27.541790 2450 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Mar 17 18:53:27.542030 kubelet[2450]: E0317 18:53:27.542010 2450 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Mar 17 18:53:27.542030 kubelet[2450]: W0317 18:53:27.542025 2450 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Mar 17 18:53:27.542131 kubelet[2450]: E0317 18:53:27.542044 2450 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Mar 17 18:53:27.542343 kubelet[2450]: E0317 18:53:27.542325 2450 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Mar 17 18:53:27.542343 kubelet[2450]: W0317 18:53:27.542341 2450 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Mar 17 18:53:27.542471 kubelet[2450]: E0317 18:53:27.542451 2450 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Mar 17 18:53:27.542697 kubelet[2450]: E0317 18:53:27.542676 2450 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Mar 17 18:53:27.542697 kubelet[2450]: W0317 18:53:27.542690 2450 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Mar 17 18:53:27.542815 kubelet[2450]: E0317 18:53:27.542793 2450 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Mar 17 18:53:27.542988 kubelet[2450]: E0317 18:53:27.542970 2450 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Mar 17 18:53:27.542988 kubelet[2450]: W0317 18:53:27.542987 2450 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Mar 17 18:53:27.543091 kubelet[2450]: E0317 18:53:27.543078 2450 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Mar 17 18:53:27.543294 kubelet[2450]: E0317 18:53:27.543277 2450 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Mar 17 18:53:27.543294 kubelet[2450]: W0317 18:53:27.543294 2450 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Mar 17 18:53:27.543424 kubelet[2450]: E0317 18:53:27.543384 2450 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Mar 17 18:53:27.543779 kubelet[2450]: E0317 18:53:27.543759 2450 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Mar 17 18:53:27.543779 kubelet[2450]: W0317 18:53:27.543778 2450 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Mar 17 18:53:27.543899 kubelet[2450]: E0317 18:53:27.543877 2450 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Mar 17 18:53:27.544094 kubelet[2450]: E0317 18:53:27.544077 2450 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Mar 17 18:53:27.544094 kubelet[2450]: W0317 18:53:27.544094 2450 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Mar 17 18:53:27.544213 kubelet[2450]: E0317 18:53:27.544197 2450 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Mar 17 18:53:27.545405 kubelet[2450]: E0317 18:53:27.545384 2450 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Mar 17 18:53:27.545405 kubelet[2450]: W0317 18:53:27.545403 2450 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Mar 17 18:53:27.545551 kubelet[2450]: E0317 18:53:27.545514 2450 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Mar 17 18:53:27.545681 kubelet[2450]: E0317 18:53:27.545646 2450 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Mar 17 18:53:27.545681 kubelet[2450]: W0317 18:53:27.545665 2450 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Mar 17 18:53:27.545793 kubelet[2450]: E0317 18:53:27.545757 2450 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Mar 17 18:53:27.545894 kubelet[2450]: E0317 18:53:27.545877 2450 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Mar 17 18:53:27.545952 kubelet[2450]: W0317 18:53:27.545894 2450 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Mar 17 18:53:27.545996 kubelet[2450]: E0317 18:53:27.545979 2450 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Mar 17 18:53:27.546120 kubelet[2450]: E0317 18:53:27.546102 2450 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Mar 17 18:53:27.546181 kubelet[2450]: W0317 18:53:27.546119 2450 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Mar 17 18:53:27.546242 kubelet[2450]: E0317 18:53:27.546203 2450 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Mar 17 18:53:27.546353 kubelet[2450]: E0317 18:53:27.546338 2450 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Mar 17 18:53:27.546417 kubelet[2450]: W0317 18:53:27.546354 2450 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Mar 17 18:53:27.546464 kubelet[2450]: E0317 18:53:27.546443 2450 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Mar 17 18:53:27.546638 kubelet[2450]: E0317 18:53:27.546617 2450 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Mar 17 18:53:27.546638 kubelet[2450]: W0317 18:53:27.546636 2450 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Mar 17 18:53:27.546740 kubelet[2450]: E0317 18:53:27.546654 2450 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Mar 17 18:53:27.546944 kubelet[2450]: E0317 18:53:27.546922 2450 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Mar 17 18:53:27.546944 kubelet[2450]: W0317 18:53:27.546942 2450 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Mar 17 18:53:27.547064 kubelet[2450]: E0317 18:53:27.546962 2450 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Mar 17 18:53:27.547167 kubelet[2450]: E0317 18:53:27.547150 2450 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Mar 17 18:53:27.547243 kubelet[2450]: W0317 18:53:27.547168 2450 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Mar 17 18:53:27.547243 kubelet[2450]: E0317 18:53:27.547184 2450 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Mar 17 18:53:27.547458 kubelet[2450]: E0317 18:53:27.547436 2450 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Mar 17 18:53:27.547458 kubelet[2450]: W0317 18:53:27.547453 2450 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Mar 17 18:53:27.547572 kubelet[2450]: E0317 18:53:27.547470 2450 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Mar 17 18:53:27.547735 kubelet[2450]: E0317 18:53:27.547716 2450 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Mar 17 18:53:27.547735 kubelet[2450]: W0317 18:53:27.547734 2450 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Mar 17 18:53:27.547850 kubelet[2450]: E0317 18:53:27.547751 2450 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Mar 17 18:53:27.548342 kubelet[2450]: E0317 18:53:27.548326 2450 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Mar 17 18:53:27.548438 kubelet[2450]: W0317 18:53:27.548426 2450 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Mar 17 18:53:27.548531 kubelet[2450]: E0317 18:53:27.548519 2450 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Mar 17 18:53:27.548834 kubelet[2450]: E0317 18:53:27.548819 2450 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Mar 17 18:53:27.548938 kubelet[2450]: W0317 18:53:27.548924 2450 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Mar 17 18:53:27.549015 kubelet[2450]: E0317 18:53:27.549002 2450 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Mar 17 18:53:27.549354 kubelet[2450]: E0317 18:53:27.549340 2450 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Mar 17 18:53:27.549440 kubelet[2450]: W0317 18:53:27.549429 2450 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Mar 17 18:53:27.549525 kubelet[2450]: E0317 18:53:27.549513 2450 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Mar 17 18:53:27.549807 kubelet[2450]: E0317 18:53:27.549793 2450 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Mar 17 18:53:27.549901 kubelet[2450]: W0317 18:53:27.549890 2450 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Mar 17 18:53:27.549970 kubelet[2450]: E0317 18:53:27.549958 2450 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Mar 17 18:53:27.550190 kubelet[2450]: E0317 18:53:27.550180 2450 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Mar 17 18:53:27.550279 kubelet[2450]: W0317 18:53:27.550252 2450 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Mar 17 18:53:27.550350 kubelet[2450]: E0317 18:53:27.550339 2450 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Mar 17 18:53:27.550682 kubelet[2450]: E0317 18:53:27.550670 2450 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Mar 17 18:53:27.550766 kubelet[2450]: W0317 18:53:27.550755 2450 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Mar 17 18:53:27.550841 kubelet[2450]: E0317 18:53:27.550829 2450 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Mar 17 18:53:27.551081 kubelet[2450]: E0317 18:53:27.551068 2450 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Mar 17 18:53:27.551160 kubelet[2450]: W0317 18:53:27.551149 2450 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Mar 17 18:53:27.551234 kubelet[2450]: E0317 18:53:27.551223 2450 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Mar 17 18:53:27.559383 kubelet[2450]: E0317 18:53:27.559367 2450 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Mar 17 18:53:27.559510 kubelet[2450]: W0317 18:53:27.559491 2450 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Mar 17 18:53:27.559601 kubelet[2450]: E0317 18:53:27.559588 2450 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Mar 17 18:53:27.562347 kubelet[2450]: E0317 18:53:27.562331 2450 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Mar 17 18:53:27.562468 kubelet[2450]: W0317 18:53:27.562454 2450 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Mar 17 18:53:27.562645 kubelet[2450]: E0317 18:53:27.562631 2450 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Mar 17 18:53:27.563070 kubelet[2450]: E0317 18:53:27.563056 2450 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Mar 17 18:53:27.563207 kubelet[2450]: W0317 18:53:27.563178 2450 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Mar 17 18:53:27.563398 kubelet[2450]: E0317 18:53:27.563383 2450 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Mar 17 18:53:27.563622 kubelet[2450]: E0317 18:53:27.563610 2450 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Mar 17 18:53:27.563719 kubelet[2450]: W0317 18:53:27.563705 2450 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Mar 17 18:53:27.563882 kubelet[2450]: E0317 18:53:27.563868 2450 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Mar 17 18:53:27.564097 kubelet[2450]: E0317 18:53:27.564084 2450 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Mar 17 18:53:27.564192 kubelet[2450]: W0317 18:53:27.564178 2450 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Mar 17 18:53:27.564329 kubelet[2450]: E0317 18:53:27.564315 2450 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Mar 17 18:53:27.564624 kubelet[2450]: E0317 18:53:27.564610 2450 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Mar 17 18:53:27.564721 kubelet[2450]: W0317 18:53:27.564707 2450 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Mar 17 18:53:27.564802 kubelet[2450]: E0317 18:53:27.564790 2450 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Mar 17 18:53:27.565067 kubelet[2450]: E0317 18:53:27.565054 2450 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Mar 17 18:53:27.565170 kubelet[2450]: W0317 18:53:27.565157 2450 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Mar 17 18:53:27.565257 kubelet[2450]: E0317 18:53:27.565244 2450 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Mar 17 18:53:27.565559 kubelet[2450]: E0317 18:53:27.565545 2450 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Mar 17 18:53:27.565652 kubelet[2450]: W0317 18:53:27.565640 2450 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Mar 17 18:53:27.565747 kubelet[2450]: E0317 18:53:27.565735 2450 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Mar 17 18:53:27.566865 kubelet[2450]: E0317 18:53:27.566850 2450 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Mar 17 18:53:27.566979 kubelet[2450]: W0317 18:53:27.566964 2450 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Mar 17 18:53:27.567077 kubelet[2450]: E0317 18:53:27.567064 2450 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Mar 17 18:53:27.585420 kubelet[2450]: E0317 18:53:27.585346 2450 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Mar 17 18:53:27.585563 kubelet[2450]: W0317 18:53:27.585543 2450 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Mar 17 18:53:27.588422 kubelet[2450]: E0317 18:53:27.588398 2450 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Mar 17 18:53:27.638684 kubelet[2450]: E0317 18:53:27.638663 2450 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Mar 17 18:53:27.638838 kubelet[2450]: W0317 18:53:27.638826 2450 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Mar 17 18:53:27.638903 kubelet[2450]: E0317 18:53:27.638894 2450 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Mar 17 18:53:27.639226 kubelet[2450]: E0317 18:53:27.639205 2450 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Mar 17 18:53:27.639321 kubelet[2450]: W0317 18:53:27.639301 2450 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Mar 17 18:53:27.639399 kubelet[2450]: E0317 18:53:27.639326 2450 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Mar 17 18:53:27.639593 kubelet[2450]: E0317 18:53:27.639575 2450 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Mar 17 18:53:27.639593 kubelet[2450]: W0317 18:53:27.639589 2450 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Mar 17 18:53:27.639715 kubelet[2450]: E0317 18:53:27.639607 2450 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Mar 17 18:53:27.639854 kubelet[2450]: E0317 18:53:27.639830 2450 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Mar 17 18:53:27.639854 kubelet[2450]: W0317 18:53:27.639843 2450 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Mar 17 18:53:27.639986 kubelet[2450]: E0317 18:53:27.639859 2450 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Mar 17 18:53:27.640094 kubelet[2450]: E0317 18:53:27.640076 2450 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Mar 17 18:53:27.640094 kubelet[2450]: W0317 18:53:27.640090 2450 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Mar 17 18:53:27.640206 kubelet[2450]: E0317 18:53:27.640108 2450 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Mar 17 18:53:27.640355 kubelet[2450]: E0317 18:53:27.640337 2450 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Mar 17 18:53:27.640355 kubelet[2450]: W0317 18:53:27.640350 2450 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Mar 17 18:53:27.640500 kubelet[2450]: E0317 18:53:27.640438 2450 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Mar 17 18:53:27.640578 kubelet[2450]: E0317 18:53:27.640560 2450 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Mar 17 18:53:27.640578 kubelet[2450]: W0317 18:53:27.640574 2450 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Mar 17 18:53:27.640690 kubelet[2450]: E0317 18:53:27.640668 2450 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Mar 17 18:53:27.640833 kubelet[2450]: E0317 18:53:27.640817 2450 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Mar 17 18:53:27.640833 kubelet[2450]: W0317 18:53:27.640829 2450 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Mar 17 18:53:27.640954 kubelet[2450]: E0317 18:53:27.640906 2450 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Mar 17 18:53:27.641036 kubelet[2450]: E0317 18:53:27.641020 2450 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Mar 17 18:53:27.641036 kubelet[2450]: W0317 18:53:27.641032 2450 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Mar 17 18:53:27.641137 kubelet[2450]: E0317 18:53:27.641109 2450 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Mar 17 18:53:27.641230 kubelet[2450]: E0317 18:53:27.641214 2450 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Mar 17 18:53:27.641230 kubelet[2450]: W0317 18:53:27.641225 2450 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Mar 17 18:53:27.641356 kubelet[2450]: E0317 18:53:27.641308 2450 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Mar 17 18:53:27.641469 kubelet[2450]: E0317 18:53:27.641452 2450 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Mar 17 18:53:27.641469 kubelet[2450]: W0317 18:53:27.641465 2450 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Mar 17 18:53:27.641592 kubelet[2450]: E0317 18:53:27.641480 2450 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Mar 17 18:53:27.641679 kubelet[2450]: E0317 18:53:27.641663 2450 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Mar 17 18:53:27.641679 kubelet[2450]: W0317 18:53:27.641677 2450 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Mar 17 18:53:27.641774 kubelet[2450]: E0317 18:53:27.641693 2450 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Mar 17 18:53:27.642895 env[1409]: time="2025-03-17T18:53:27.642793292Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-typha-54c4479c7d-tqqgq,Uid:7a1cdb29-39db-43ca-8573-f9585e51850b,Namespace:calico-system,Attempt:0,}" Mar 17 18:53:27.643534 kubelet[2450]: E0317 18:53:27.643472 2450 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Mar 17 18:53:27.643534 kubelet[2450]: W0317 18:53:27.643530 2450 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Mar 17 18:53:27.643675 kubelet[2450]: E0317 18:53:27.643577 2450 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Mar 17 18:53:27.643834 kubelet[2450]: E0317 18:53:27.643797 2450 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Mar 17 18:53:27.643834 kubelet[2450]: W0317 18:53:27.643823 2450 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Mar 17 18:53:27.643947 kubelet[2450]: E0317 18:53:27.643897 2450 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Mar 17 18:53:27.644083 kubelet[2450]: E0317 18:53:27.644058 2450 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Mar 17 18:53:27.644083 kubelet[2450]: W0317 18:53:27.644071 2450 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Mar 17 18:53:27.644193 kubelet[2450]: E0317 18:53:27.644139 2450 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Mar 17 18:53:27.644571 kubelet[2450]: E0317 18:53:27.644356 2450 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Mar 17 18:53:27.644571 kubelet[2450]: W0317 18:53:27.644371 2450 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Mar 17 18:53:27.644571 kubelet[2450]: E0317 18:53:27.644415 2450 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Mar 17 18:53:27.644736 kubelet[2450]: E0317 18:53:27.644668 2450 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Mar 17 18:53:27.644736 kubelet[2450]: W0317 18:53:27.644680 2450 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Mar 17 18:53:27.644837 kubelet[2450]: E0317 18:53:27.644738 2450 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Mar 17 18:53:27.644988 kubelet[2450]: E0317 18:53:27.644947 2450 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Mar 17 18:53:27.644988 kubelet[2450]: W0317 18:53:27.644978 2450 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Mar 17 18:53:27.645091 kubelet[2450]: E0317 18:53:27.644996 2450 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Mar 17 18:53:27.645394 kubelet[2450]: E0317 18:53:27.645320 2450 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Mar 17 18:53:27.645394 kubelet[2450]: W0317 18:53:27.645334 2450 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Mar 17 18:53:27.645394 kubelet[2450]: E0317 18:53:27.645368 2450 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Mar 17 18:53:27.645918 kubelet[2450]: E0317 18:53:27.645612 2450 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Mar 17 18:53:27.645918 kubelet[2450]: W0317 18:53:27.645626 2450 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Mar 17 18:53:27.645918 kubelet[2450]: E0317 18:53:27.645642 2450 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Mar 17 18:53:27.646104 kubelet[2450]: E0317 18:53:27.645938 2450 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Mar 17 18:53:27.646104 kubelet[2450]: W0317 18:53:27.645950 2450 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Mar 17 18:53:27.646104 kubelet[2450]: E0317 18:53:27.645997 2450 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Mar 17 18:53:27.646563 kubelet[2450]: E0317 18:53:27.646527 2450 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Mar 17 18:53:27.646648 kubelet[2450]: W0317 18:53:27.646563 2450 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Mar 17 18:53:27.646648 kubelet[2450]: E0317 18:53:27.646642 2450 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Mar 17 18:53:27.646877 kubelet[2450]: E0317 18:53:27.646855 2450 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Mar 17 18:53:27.646877 kubelet[2450]: W0317 18:53:27.646871 2450 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Mar 17 18:53:27.647005 kubelet[2450]: E0317 18:53:27.646907 2450 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Mar 17 18:53:27.647173 kubelet[2450]: E0317 18:53:27.647155 2450 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Mar 17 18:53:27.647173 kubelet[2450]: W0317 18:53:27.647172 2450 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Mar 17 18:53:27.647318 kubelet[2450]: E0317 18:53:27.647190 2450 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Mar 17 18:53:27.647441 kubelet[2450]: E0317 18:53:27.647424 2450 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Mar 17 18:53:27.647518 kubelet[2450]: W0317 18:53:27.647441 2450 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Mar 17 18:53:27.647518 kubelet[2450]: E0317 18:53:27.647478 2450 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Mar 17 18:53:27.652118 env[1409]: time="2025-03-17T18:53:27.652083559Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-node-tkh7m,Uid:562318b3-d04a-48e8-b366-2d5ee5dec59b,Namespace:calico-system,Attempt:0,}" Mar 17 18:53:27.663367 kubelet[2450]: E0317 18:53:27.663091 2450 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Mar 17 18:53:27.663367 kubelet[2450]: W0317 18:53:27.663107 2450 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Mar 17 18:53:27.663367 kubelet[2450]: E0317 18:53:27.663122 2450 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Mar 17 18:53:27.702178 env[1409]: time="2025-03-17T18:53:27.702100924Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Mar 17 18:53:27.702178 env[1409]: time="2025-03-17T18:53:27.702155825Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Mar 17 18:53:27.705435 env[1409]: time="2025-03-17T18:53:27.702458927Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Mar 17 18:53:27.705435 env[1409]: time="2025-03-17T18:53:27.702949630Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/cce8624a9df06ade34185948d1229bb199eb02677651a91354342e1a8394ffa9 pid=2896 runtime=io.containerd.runc.v2 Mar 17 18:53:27.707013 env[1409]: time="2025-03-17T18:53:27.706940459Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Mar 17 18:53:27.707205 env[1409]: time="2025-03-17T18:53:27.707162461Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Mar 17 18:53:27.707378 env[1409]: time="2025-03-17T18:53:27.707332762Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Mar 17 18:53:27.709817 env[1409]: time="2025-03-17T18:53:27.707626664Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/3ee88731a74cb4c0c92c7f42f7605894dea6e2110df991043b4acb32a45b36bb pid=2903 runtime=io.containerd.runc.v2 Mar 17 18:53:27.730533 systemd[1]: Started cri-containerd-cce8624a9df06ade34185948d1229bb199eb02677651a91354342e1a8394ffa9.scope. Mar 17 18:53:27.745661 systemd[1]: Started cri-containerd-3ee88731a74cb4c0c92c7f42f7605894dea6e2110df991043b4acb32a45b36bb.scope. Mar 17 18:53:27.762000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:27.762000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:27.762000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:27.762000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:27.762000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:27.762000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:27.762000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:27.762000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:27.762000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:27.762000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:27.762000 audit: BPF prog-id=116 op=LOAD Mar 17 18:53:27.763000 audit[2910]: AVC avc: denied { bpf } for pid=2910 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:27.763000 audit[2910]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c00014dc48 a2=10 a3=1c items=0 ppid=2896 pid=2910 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:53:27.763000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6363653836323461396466303661646533343138353934386431323239 Mar 17 18:53:27.763000 audit[2910]: AVC avc: denied { perfmon } for pid=2910 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:27.763000 audit[2910]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c00014d6b0 a2=3c a3=c items=0 ppid=2896 pid=2910 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:53:27.763000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6363653836323461396466303661646533343138353934386431323239 Mar 17 18:53:27.763000 audit[2910]: AVC avc: denied { bpf } for pid=2910 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:27.763000 audit[2910]: AVC avc: denied { bpf } for pid=2910 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:27.763000 audit[2910]: AVC avc: denied { bpf } for pid=2910 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:27.763000 audit[2910]: AVC avc: denied { perfmon } for pid=2910 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:27.763000 audit[2910]: AVC avc: denied { perfmon } for pid=2910 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:27.763000 audit[2910]: AVC avc: denied { perfmon } for pid=2910 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:27.763000 audit[2910]: AVC avc: denied { perfmon } for pid=2910 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:27.763000 audit[2910]: AVC avc: denied { perfmon } for pid=2910 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:27.763000 audit[2910]: AVC avc: denied { bpf } for pid=2910 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:27.763000 audit[2910]: AVC avc: denied { bpf } for pid=2910 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:27.763000 audit: BPF prog-id=117 op=LOAD Mar 17 18:53:27.763000 audit[2910]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c00014d9d8 a2=78 a3=c000333fa0 items=0 ppid=2896 pid=2910 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:53:27.763000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6363653836323461396466303661646533343138353934386431323239 Mar 17 18:53:27.763000 audit[2910]: AVC avc: denied { bpf } for pid=2910 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:27.763000 audit[2910]: AVC avc: denied { bpf } for pid=2910 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:27.763000 audit[2910]: AVC avc: denied { perfmon } for pid=2910 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:27.763000 audit[2910]: AVC avc: denied { perfmon } for pid=2910 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:27.763000 audit[2910]: AVC avc: denied { perfmon } for pid=2910 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:27.763000 audit[2910]: AVC avc: denied { perfmon } for pid=2910 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:27.763000 audit[2910]: AVC avc: denied { perfmon } for pid=2910 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:27.763000 audit[2910]: AVC avc: denied { bpf } for pid=2910 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:27.763000 audit[2910]: AVC avc: denied { bpf } for pid=2910 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:27.763000 audit: BPF prog-id=118 op=LOAD Mar 17 18:53:27.763000 audit[2910]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c00014d770 a2=78 a3=c000333fe8 items=0 ppid=2896 pid=2910 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:53:27.763000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6363653836323461396466303661646533343138353934386431323239 Mar 17 18:53:27.763000 audit: BPF prog-id=118 op=UNLOAD Mar 17 18:53:27.763000 audit: BPF prog-id=117 op=UNLOAD Mar 17 18:53:27.763000 audit[2910]: AVC avc: denied { bpf } for pid=2910 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:27.763000 audit[2910]: AVC avc: denied { bpf } for pid=2910 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:27.763000 audit[2910]: AVC avc: denied { bpf } for pid=2910 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:27.763000 audit[2910]: AVC avc: denied { perfmon } for pid=2910 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:27.763000 audit[2910]: AVC avc: denied { perfmon } for pid=2910 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:27.763000 audit[2910]: AVC avc: denied { perfmon } for pid=2910 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:27.763000 audit[2910]: AVC avc: denied { perfmon } for pid=2910 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:27.763000 audit[2910]: AVC avc: denied { perfmon } for pid=2910 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:27.763000 audit[2910]: AVC avc: denied { bpf } for pid=2910 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:27.763000 audit[2910]: AVC avc: denied { bpf } for pid=2910 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:27.763000 audit: BPF prog-id=119 op=LOAD Mar 17 18:53:27.763000 audit[2910]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c00014dc30 a2=78 a3=c0003b43f8 items=0 ppid=2896 pid=2910 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:53:27.763000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6363653836323461396466303661646533343138353934386431323239 Mar 17 18:53:27.767000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:27.767000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:27.767000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:27.767000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:27.767000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:27.767000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:27.767000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:27.767000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:27.767000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:27.767000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:27.767000 audit: BPF prog-id=120 op=LOAD Mar 17 18:53:27.767000 audit[2918]: AVC avc: denied { bpf } for pid=2918 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:27.767000 audit[2918]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000117c48 a2=10 a3=1c items=0 ppid=2903 pid=2918 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:53:27.767000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3365653838373331613734636234633063393263376634326637363035 Mar 17 18:53:27.768000 audit[2918]: AVC avc: denied { perfmon } for pid=2918 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:27.768000 audit[2918]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001176b0 a2=3c a3=c items=0 ppid=2903 pid=2918 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:53:27.768000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3365653838373331613734636234633063393263376634326637363035 Mar 17 18:53:27.768000 audit[2918]: AVC avc: denied { bpf } for pid=2918 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:27.768000 audit[2918]: AVC avc: denied { bpf } for pid=2918 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:27.768000 audit[2918]: AVC avc: denied { bpf } for pid=2918 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:27.768000 audit[2918]: AVC avc: denied { perfmon } for pid=2918 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:27.768000 audit[2918]: AVC avc: denied { perfmon } for pid=2918 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:27.768000 audit[2918]: AVC avc: denied { perfmon } for pid=2918 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:27.768000 audit[2918]: AVC avc: denied { perfmon } for pid=2918 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:27.768000 audit[2918]: AVC avc: denied { perfmon } for pid=2918 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:27.768000 audit[2918]: AVC avc: denied { bpf } for pid=2918 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:27.768000 audit[2918]: AVC avc: denied { bpf } for pid=2918 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:27.768000 audit: BPF prog-id=121 op=LOAD Mar 17 18:53:27.768000 audit[2918]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001179d8 a2=78 a3=c000298b40 items=0 ppid=2903 pid=2918 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:53:27.768000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3365653838373331613734636234633063393263376634326637363035 Mar 17 18:53:27.768000 audit[2918]: AVC avc: denied { bpf } for pid=2918 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:27.768000 audit[2918]: AVC avc: denied { bpf } for pid=2918 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:27.768000 audit[2918]: AVC avc: denied { perfmon } for pid=2918 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:27.768000 audit[2918]: AVC avc: denied { perfmon } for pid=2918 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:27.768000 audit[2918]: AVC avc: denied { perfmon } for pid=2918 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:27.768000 audit[2918]: AVC avc: denied { perfmon } for pid=2918 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:27.768000 audit[2918]: AVC avc: denied { perfmon } for pid=2918 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:27.768000 audit[2918]: AVC avc: denied { bpf } for pid=2918 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:27.768000 audit[2918]: AVC avc: denied { bpf } for pid=2918 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:27.768000 audit: BPF prog-id=122 op=LOAD Mar 17 18:53:27.768000 audit[2918]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000117770 a2=78 a3=c000298b88 items=0 ppid=2903 pid=2918 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:53:27.768000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3365653838373331613734636234633063393263376634326637363035 Mar 17 18:53:27.768000 audit: BPF prog-id=122 op=UNLOAD Mar 17 18:53:27.768000 audit: BPF prog-id=121 op=UNLOAD Mar 17 18:53:27.768000 audit[2918]: AVC avc: denied { bpf } for pid=2918 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:27.768000 audit[2918]: AVC avc: denied { bpf } for pid=2918 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:27.768000 audit[2918]: AVC avc: denied { bpf } for pid=2918 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:27.768000 audit[2918]: AVC avc: denied { perfmon } for pid=2918 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:27.768000 audit[2918]: AVC avc: denied { perfmon } for pid=2918 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:27.768000 audit[2918]: AVC avc: denied { perfmon } for pid=2918 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:27.768000 audit[2918]: AVC avc: denied { perfmon } for pid=2918 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:27.768000 audit[2918]: AVC avc: denied { perfmon } for pid=2918 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:27.768000 audit[2918]: AVC avc: denied { bpf } for pid=2918 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:27.768000 audit[2918]: AVC avc: denied { bpf } for pid=2918 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:27.768000 audit: BPF prog-id=123 op=LOAD Mar 17 18:53:27.768000 audit[2918]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000117c30 a2=78 a3=c000298f98 items=0 ppid=2903 pid=2918 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:53:27.768000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3365653838373331613734636234633063393263376634326637363035 Mar 17 18:53:27.786027 env[1409]: time="2025-03-17T18:53:27.785989836Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-node-tkh7m,Uid:562318b3-d04a-48e8-b366-2d5ee5dec59b,Namespace:calico-system,Attempt:0,} returns sandbox id \"3ee88731a74cb4c0c92c7f42f7605894dea6e2110df991043b4acb32a45b36bb\"" Mar 17 18:53:27.788810 env[1409]: time="2025-03-17T18:53:27.788779356Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/pod2daemon-flexvol:v3.29.1\"" Mar 17 18:53:27.813287 env[1409]: time="2025-03-17T18:53:27.813241935Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-typha-54c4479c7d-tqqgq,Uid:7a1cdb29-39db-43ca-8573-f9585e51850b,Namespace:calico-system,Attempt:0,} returns sandbox id \"cce8624a9df06ade34185948d1229bb199eb02677651a91354342e1a8394ffa9\"" Mar 17 18:53:28.226000 audit[2968]: NETFILTER_CFG table=filter:96 family=2 entries=17 op=nft_register_rule pid=2968 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Mar 17 18:53:28.226000 audit[2968]: SYSCALL arch=c000003e syscall=46 success=yes exit=6736 a0=3 a1=7ffc25414840 a2=0 a3=7ffc2541482c items=0 ppid=2619 pid=2968 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:53:28.226000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Mar 17 18:53:28.228000 audit[2968]: NETFILTER_CFG table=nat:97 family=2 entries=12 op=nft_register_rule pid=2968 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Mar 17 18:53:28.228000 audit[2968]: SYSCALL arch=c000003e syscall=46 success=yes exit=2700 a0=3 a1=7ffc25414840 a2=0 a3=0 items=0 ppid=2619 pid=2968 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:53:28.228000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Mar 17 18:53:28.960615 kubelet[2450]: E0317 18:53:28.960571 2450 pod_workers.go:1301] "Error syncing pod, skipping" err="network is not ready: container runtime network not ready: NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" pod="calico-system/csi-node-driver-qb29d" podUID="fa4b58f5-7cb3-428f-9da4-44a5cc6627b4" Mar 17 18:53:29.167598 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount2603544406.mount: Deactivated successfully. Mar 17 18:53:29.349110 env[1409]: time="2025-03-17T18:53:29.349064574Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/pod2daemon-flexvol:v3.29.1,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Mar 17 18:53:29.354360 env[1409]: time="2025-03-17T18:53:29.354320811Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:2b7452b763ec8833ca0386ada5fd066e552a9b3b02b8538a5e34cc3d6d3840a6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Mar 17 18:53:29.357808 env[1409]: time="2025-03-17T18:53:29.357779035Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/pod2daemon-flexvol:v3.29.1,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Mar 17 18:53:29.361191 env[1409]: time="2025-03-17T18:53:29.361159159Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/pod2daemon-flexvol@sha256:a63f8b4ff531912d12d143664eb263fdbc6cd7b3ff4aa777dfb6e318a090462c,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Mar 17 18:53:29.361677 env[1409]: time="2025-03-17T18:53:29.361645962Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/pod2daemon-flexvol:v3.29.1\" returns image reference \"sha256:2b7452b763ec8833ca0386ada5fd066e552a9b3b02b8538a5e34cc3d6d3840a6\"" Mar 17 18:53:29.364468 env[1409]: time="2025-03-17T18:53:29.363701277Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/typha:v3.29.1\"" Mar 17 18:53:29.364890 env[1409]: time="2025-03-17T18:53:29.364849585Z" level=info msg="CreateContainer within sandbox \"3ee88731a74cb4c0c92c7f42f7605894dea6e2110df991043b4acb32a45b36bb\" for container &ContainerMetadata{Name:flexvol-driver,Attempt:0,}" Mar 17 18:53:29.404304 env[1409]: time="2025-03-17T18:53:29.402234946Z" level=info msg="CreateContainer within sandbox \"3ee88731a74cb4c0c92c7f42f7605894dea6e2110df991043b4acb32a45b36bb\" for &ContainerMetadata{Name:flexvol-driver,Attempt:0,} returns container id \"ed655f156a3b18590b509c7c1adb3c184855f93b48c2fe875d8520e8290f2d8e\"" Mar 17 18:53:29.404304 env[1409]: time="2025-03-17T18:53:29.402870550Z" level=info msg="StartContainer for \"ed655f156a3b18590b509c7c1adb3c184855f93b48c2fe875d8520e8290f2d8e\"" Mar 17 18:53:29.423606 systemd[1]: Started cri-containerd-ed655f156a3b18590b509c7c1adb3c184855f93b48c2fe875d8520e8290f2d8e.scope. Mar 17 18:53:29.444000 audit[2976]: AVC avc: denied { perfmon } for pid=2976 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:29.444000 audit[2976]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=0 a1=c0001476b0 a2=3c a3=7faea62bd198 items=0 ppid=2903 pid=2976 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:53:29.444000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6564363535663135366133623138353930623530396337633161646233 Mar 17 18:53:29.444000 audit[2976]: AVC avc: denied { bpf } for pid=2976 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:29.444000 audit[2976]: AVC avc: denied { bpf } for pid=2976 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:29.444000 audit[2976]: AVC avc: denied { bpf } for pid=2976 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:29.444000 audit[2976]: AVC avc: denied { perfmon } for pid=2976 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:29.444000 audit[2976]: AVC avc: denied { perfmon } for pid=2976 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:29.444000 audit[2976]: AVC avc: denied { perfmon } for pid=2976 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:29.444000 audit[2976]: AVC avc: denied { perfmon } for pid=2976 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:29.444000 audit[2976]: AVC avc: denied { perfmon } for pid=2976 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:29.444000 audit[2976]: AVC avc: denied { bpf } for pid=2976 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:29.444000 audit[2976]: AVC avc: denied { bpf } for pid=2976 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:29.444000 audit: BPF prog-id=124 op=LOAD Mar 17 18:53:29.444000 audit[2976]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c0001479d8 a2=78 a3=c0002cdc88 items=0 ppid=2903 pid=2976 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:53:29.444000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6564363535663135366133623138353930623530396337633161646233 Mar 17 18:53:29.444000 audit[2976]: AVC avc: denied { bpf } for pid=2976 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:29.444000 audit[2976]: AVC avc: denied { bpf } for pid=2976 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:29.444000 audit[2976]: AVC avc: denied { perfmon } for pid=2976 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:29.444000 audit[2976]: AVC avc: denied { perfmon } for pid=2976 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:29.444000 audit[2976]: AVC avc: denied { perfmon } for pid=2976 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:29.444000 audit[2976]: AVC avc: denied { perfmon } for pid=2976 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:29.444000 audit[2976]: AVC avc: denied { perfmon } for pid=2976 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:29.444000 audit[2976]: AVC avc: denied { bpf } for pid=2976 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:29.444000 audit[2976]: AVC avc: denied { bpf } for pid=2976 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:29.444000 audit: BPF prog-id=125 op=LOAD Mar 17 18:53:29.444000 audit[2976]: SYSCALL arch=c000003e syscall=321 success=yes exit=17 a0=5 a1=c000147770 a2=78 a3=c0002cdcd8 items=0 ppid=2903 pid=2976 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:53:29.444000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6564363535663135366133623138353930623530396337633161646233 Mar 17 18:53:29.444000 audit: BPF prog-id=125 op=UNLOAD Mar 17 18:53:29.444000 audit: BPF prog-id=124 op=UNLOAD Mar 17 18:53:29.444000 audit[2976]: AVC avc: denied { bpf } for pid=2976 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:29.444000 audit[2976]: AVC avc: denied { bpf } for pid=2976 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:29.444000 audit[2976]: AVC avc: denied { bpf } for pid=2976 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:29.444000 audit[2976]: AVC avc: denied { perfmon } for pid=2976 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:29.444000 audit[2976]: AVC avc: denied { perfmon } for pid=2976 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:29.444000 audit[2976]: AVC avc: denied { perfmon } for pid=2976 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:29.444000 audit[2976]: AVC avc: denied { perfmon } for pid=2976 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:29.444000 audit[2976]: AVC avc: denied { perfmon } for pid=2976 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:29.444000 audit[2976]: AVC avc: denied { bpf } for pid=2976 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:29.444000 audit[2976]: AVC avc: denied { bpf } for pid=2976 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:29.444000 audit: BPF prog-id=126 op=LOAD Mar 17 18:53:29.444000 audit[2976]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c000147c30 a2=78 a3=c0002cdd68 items=0 ppid=2903 pid=2976 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:53:29.444000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6564363535663135366133623138353930623530396337633161646233 Mar 17 18:53:29.465749 env[1409]: time="2025-03-17T18:53:29.465698489Z" level=info msg="StartContainer for \"ed655f156a3b18590b509c7c1adb3c184855f93b48c2fe875d8520e8290f2d8e\" returns successfully" Mar 17 18:53:29.477668 systemd[1]: cri-containerd-ed655f156a3b18590b509c7c1adb3c184855f93b48c2fe875d8520e8290f2d8e.scope: Deactivated successfully. Mar 17 18:53:29.480000 audit: BPF prog-id=126 op=UNLOAD Mar 17 18:53:29.501765 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-ed655f156a3b18590b509c7c1adb3c184855f93b48c2fe875d8520e8290f2d8e-rootfs.mount: Deactivated successfully. Mar 17 18:53:30.960788 kubelet[2450]: E0317 18:53:30.960729 2450 pod_workers.go:1301] "Error syncing pod, skipping" err="network is not ready: container runtime network not ready: NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" pod="calico-system/csi-node-driver-qb29d" podUID="fa4b58f5-7cb3-428f-9da4-44a5cc6627b4" Mar 17 18:53:31.518203 env[1409]: time="2025-03-17T18:53:31.518156440Z" level=info msg="shim disconnected" id=ed655f156a3b18590b509c7c1adb3c184855f93b48c2fe875d8520e8290f2d8e Mar 17 18:53:31.518738 env[1409]: time="2025-03-17T18:53:31.518218540Z" level=warning msg="cleaning up after shim disconnected" id=ed655f156a3b18590b509c7c1adb3c184855f93b48c2fe875d8520e8290f2d8e namespace=k8s.io Mar 17 18:53:31.518738 env[1409]: time="2025-03-17T18:53:31.518231240Z" level=info msg="cleaning up dead shim" Mar 17 18:53:31.528370 env[1409]: time="2025-03-17T18:53:31.528335108Z" level=warning msg="cleanup warnings time=\"2025-03-17T18:53:31Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=3019 runtime=io.containerd.runc.v2\n" Mar 17 18:53:32.961935 kubelet[2450]: E0317 18:53:32.960812 2450 pod_workers.go:1301] "Error syncing pod, skipping" err="network is not ready: container runtime network not ready: NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" pod="calico-system/csi-node-driver-qb29d" podUID="fa4b58f5-7cb3-428f-9da4-44a5cc6627b4" Mar 17 18:53:33.343497 env[1409]: time="2025-03-17T18:53:33.343444346Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/typha:v3.29.1,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Mar 17 18:53:33.348974 env[1409]: time="2025-03-17T18:53:33.348929581Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:4cb3738506f5a9c530033d1e24fd6b9ec618518a2ec8b012ded33572be06ab44,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Mar 17 18:53:33.352891 env[1409]: time="2025-03-17T18:53:33.352786706Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/typha:v3.29.1,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Mar 17 18:53:33.356361 env[1409]: time="2025-03-17T18:53:33.356324929Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/typha@sha256:768a194e1115c73bcbf35edb7afd18a63e16e08d940c79993565b6a3cca2da7c,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Mar 17 18:53:33.356803 env[1409]: time="2025-03-17T18:53:33.356769432Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/typha:v3.29.1\" returns image reference \"sha256:4cb3738506f5a9c530033d1e24fd6b9ec618518a2ec8b012ded33572be06ab44\"" Mar 17 18:53:33.358240 env[1409]: time="2025-03-17T18:53:33.358212941Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/cni:v3.29.1\"" Mar 17 18:53:33.375997 env[1409]: time="2025-03-17T18:53:33.375956355Z" level=info msg="CreateContainer within sandbox \"cce8624a9df06ade34185948d1229bb199eb02677651a91354342e1a8394ffa9\" for container &ContainerMetadata{Name:calico-typha,Attempt:0,}" Mar 17 18:53:33.411237 env[1409]: time="2025-03-17T18:53:33.411195082Z" level=info msg="CreateContainer within sandbox \"cce8624a9df06ade34185948d1229bb199eb02677651a91354342e1a8394ffa9\" for &ContainerMetadata{Name:calico-typha,Attempt:0,} returns container id \"59f437dcee96ec9b66729bc5490b004f55839ae89256789c73a1cd3088237909\"" Mar 17 18:53:33.411781 env[1409]: time="2025-03-17T18:53:33.411736586Z" level=info msg="StartContainer for \"59f437dcee96ec9b66729bc5490b004f55839ae89256789c73a1cd3088237909\"" Mar 17 18:53:33.437621 systemd[1]: Started cri-containerd-59f437dcee96ec9b66729bc5490b004f55839ae89256789c73a1cd3088237909.scope. Mar 17 18:53:33.470181 kernel: kauditd_printk_skb: 166 callbacks suppressed Mar 17 18:53:33.470347 kernel: audit: type=1400 audit(1742237613.449:979): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:33.449000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:33.484355 kernel: audit: type=1400 audit(1742237613.449:980): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:33.449000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:33.449000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:33.511592 kernel: audit: type=1400 audit(1742237613.449:981): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:33.511703 kernel: audit: type=1400 audit(1742237613.449:982): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:33.449000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:33.449000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:33.527469 kernel: audit: type=1400 audit(1742237613.449:983): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:33.542682 kernel: audit: type=1400 audit(1742237613.449:984): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:33.449000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:33.449000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:33.576491 kernel: audit: type=1400 audit(1742237613.449:985): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:33.576603 kernel: audit: type=1400 audit(1742237613.449:986): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:33.449000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:33.449000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:33.591358 kernel: audit: type=1400 audit(1742237613.449:987): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:33.591446 kernel: audit: type=1400 audit(1742237613.449:988): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:33.449000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:33.591766 env[1409]: time="2025-03-17T18:53:33.591729044Z" level=info msg="StartContainer for \"59f437dcee96ec9b66729bc5490b004f55839ae89256789c73a1cd3088237909\" returns successfully" Mar 17 18:53:33.449000 audit: BPF prog-id=127 op=LOAD Mar 17 18:53:33.454000 audit[3043]: AVC avc: denied { bpf } for pid=3043 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:33.454000 audit[3043]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c00011fc48 a2=10 a3=1c items=0 ppid=2896 pid=3043 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:53:33.454000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3539663433376463656539366563396236363732396263353439306230 Mar 17 18:53:33.454000 audit[3043]: AVC avc: denied { perfmon } for pid=3043 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:33.454000 audit[3043]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c00011f6b0 a2=3c a3=8 items=0 ppid=2896 pid=3043 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:53:33.454000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3539663433376463656539366563396236363732396263353439306230 Mar 17 18:53:33.454000 audit[3043]: AVC avc: denied { bpf } for pid=3043 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:33.454000 audit[3043]: AVC avc: denied { bpf } for pid=3043 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:33.454000 audit[3043]: AVC avc: denied { bpf } for pid=3043 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:33.454000 audit[3043]: AVC avc: denied { perfmon } for pid=3043 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:33.454000 audit[3043]: AVC avc: denied { perfmon } for pid=3043 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:33.454000 audit[3043]: AVC avc: denied { perfmon } for pid=3043 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:33.454000 audit[3043]: AVC avc: denied { perfmon } for pid=3043 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:33.454000 audit[3043]: AVC avc: denied { perfmon } for pid=3043 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:33.454000 audit[3043]: AVC avc: denied { bpf } for pid=3043 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:33.454000 audit[3043]: AVC avc: denied { bpf } for pid=3043 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:33.454000 audit: BPF prog-id=128 op=LOAD Mar 17 18:53:33.454000 audit[3043]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c00011f9d8 a2=78 a3=c000400340 items=0 ppid=2896 pid=3043 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:53:33.454000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3539663433376463656539366563396236363732396263353439306230 Mar 17 18:53:33.469000 audit[3043]: AVC avc: denied { bpf } for pid=3043 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:33.469000 audit[3043]: AVC avc: denied { bpf } for pid=3043 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:33.469000 audit[3043]: AVC avc: denied { perfmon } for pid=3043 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:33.469000 audit[3043]: AVC avc: denied { perfmon } for pid=3043 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:33.469000 audit[3043]: AVC avc: denied { perfmon } for pid=3043 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:33.469000 audit[3043]: AVC avc: denied { perfmon } for pid=3043 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:33.469000 audit[3043]: AVC avc: denied { perfmon } for pid=3043 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:33.469000 audit[3043]: AVC avc: denied { bpf } for pid=3043 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:33.469000 audit[3043]: AVC avc: denied { bpf } for pid=3043 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:33.469000 audit: BPF prog-id=129 op=LOAD Mar 17 18:53:33.469000 audit[3043]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c00011f770 a2=78 a3=c000400388 items=0 ppid=2896 pid=3043 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:53:33.469000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3539663433376463656539366563396236363732396263353439306230 Mar 17 18:53:33.469000 audit: BPF prog-id=129 op=UNLOAD Mar 17 18:53:33.469000 audit: BPF prog-id=128 op=UNLOAD Mar 17 18:53:33.469000 audit[3043]: AVC avc: denied { bpf } for pid=3043 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:33.469000 audit[3043]: AVC avc: denied { bpf } for pid=3043 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:33.469000 audit[3043]: AVC avc: denied { bpf } for pid=3043 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:33.469000 audit[3043]: AVC avc: denied { perfmon } for pid=3043 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:33.469000 audit[3043]: AVC avc: denied { perfmon } for pid=3043 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:33.469000 audit[3043]: AVC avc: denied { perfmon } for pid=3043 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:33.469000 audit[3043]: AVC avc: denied { perfmon } for pid=3043 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:33.469000 audit[3043]: AVC avc: denied { perfmon } for pid=3043 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:33.469000 audit[3043]: AVC avc: denied { bpf } for pid=3043 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:33.469000 audit[3043]: AVC avc: denied { bpf } for pid=3043 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:33.469000 audit: BPF prog-id=130 op=LOAD Mar 17 18:53:33.469000 audit[3043]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c00011fc30 a2=78 a3=c000400798 items=0 ppid=2896 pid=3043 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:53:33.469000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3539663433376463656539366563396236363732396263353439306230 Mar 17 18:53:34.043426 kubelet[2450]: I0317 18:53:34.043359 2450 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="calico-system/calico-typha-54c4479c7d-tqqgq" podStartSLOduration=1.499402746 podStartE2EDuration="7.043339345s" podCreationTimestamp="2025-03-17 18:53:27 +0000 UTC" firstStartedPulling="2025-03-17 18:53:27.814108841 +0000 UTC m=+13.971925807" lastFinishedPulling="2025-03-17 18:53:33.35804544 +0000 UTC m=+19.515862406" observedRunningTime="2025-03-17 18:53:34.042842342 +0000 UTC m=+20.200659308" watchObservedRunningTime="2025-03-17 18:53:34.043339345 +0000 UTC m=+20.201156411" Mar 17 18:53:34.083000 audit[3075]: NETFILTER_CFG table=filter:98 family=2 entries=17 op=nft_register_rule pid=3075 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Mar 17 18:53:34.083000 audit[3075]: SYSCALL arch=c000003e syscall=46 success=yes exit=5992 a0=3 a1=7ffd3a1fbee0 a2=0 a3=7ffd3a1fbecc items=0 ppid=2619 pid=3075 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:53:34.083000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Mar 17 18:53:34.088000 audit[3075]: NETFILTER_CFG table=nat:99 family=2 entries=19 op=nft_register_chain pid=3075 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Mar 17 18:53:34.088000 audit[3075]: SYSCALL arch=c000003e syscall=46 success=yes exit=6276 a0=3 a1=7ffd3a1fbee0 a2=0 a3=7ffd3a1fbecc items=0 ppid=2619 pid=3075 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:53:34.088000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Mar 17 18:53:34.961194 kubelet[2450]: E0317 18:53:34.961135 2450 pod_workers.go:1301] "Error syncing pod, skipping" err="network is not ready: container runtime network not ready: NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" pod="calico-system/csi-node-driver-qb29d" podUID="fa4b58f5-7cb3-428f-9da4-44a5cc6627b4" Mar 17 18:53:36.960533 kubelet[2450]: E0317 18:53:36.960483 2450 pod_workers.go:1301] "Error syncing pod, skipping" err="network is not ready: container runtime network not ready: NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" pod="calico-system/csi-node-driver-qb29d" podUID="fa4b58f5-7cb3-428f-9da4-44a5cc6627b4" Mar 17 18:53:37.940584 env[1409]: time="2025-03-17T18:53:37.940522019Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/cni:v3.29.1,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Mar 17 18:53:37.949368 env[1409]: time="2025-03-17T18:53:37.949329771Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:7dd6ea186aba0d7a1791a79d426fe854527ca95192b26bbd19e8baf8373f7d0e,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Mar 17 18:53:37.954166 env[1409]: time="2025-03-17T18:53:37.954135500Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/cni:v3.29.1,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Mar 17 18:53:37.958538 env[1409]: time="2025-03-17T18:53:37.958510926Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/cni@sha256:21e759d51c90dfb34fc1397dc180dd3a3fb564c2b0580d2f61ffe108f2a3c94b,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Mar 17 18:53:37.958964 env[1409]: time="2025-03-17T18:53:37.958936128Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/cni:v3.29.1\" returns image reference \"sha256:7dd6ea186aba0d7a1791a79d426fe854527ca95192b26bbd19e8baf8373f7d0e\"" Mar 17 18:53:37.963406 env[1409]: time="2025-03-17T18:53:37.961775745Z" level=info msg="CreateContainer within sandbox \"3ee88731a74cb4c0c92c7f42f7605894dea6e2110df991043b4acb32a45b36bb\" for container &ContainerMetadata{Name:install-cni,Attempt:0,}" Mar 17 18:53:37.998897 env[1409]: time="2025-03-17T18:53:37.998853366Z" level=info msg="CreateContainer within sandbox \"3ee88731a74cb4c0c92c7f42f7605894dea6e2110df991043b4acb32a45b36bb\" for &ContainerMetadata{Name:install-cni,Attempt:0,} returns container id \"e149cb77fe204b9cafc5cb1605791b5a69f3ae519085dc87b22e759f290374c3\"" Mar 17 18:53:38.000601 env[1409]: time="2025-03-17T18:53:37.999389069Z" level=info msg="StartContainer for \"e149cb77fe204b9cafc5cb1605791b5a69f3ae519085dc87b22e759f290374c3\"" Mar 17 18:53:38.033620 systemd[1]: run-containerd-runc-k8s.io-e149cb77fe204b9cafc5cb1605791b5a69f3ae519085dc87b22e759f290374c3-runc.I9ez1t.mount: Deactivated successfully. Mar 17 18:53:38.039813 systemd[1]: Started cri-containerd-e149cb77fe204b9cafc5cb1605791b5a69f3ae519085dc87b22e759f290374c3.scope. Mar 17 18:53:38.052000 audit[3084]: AVC avc: denied { perfmon } for pid=3084 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:38.052000 audit[3084]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=0 a1=c0001bd6b0 a2=3c a3=7f8f840de158 items=0 ppid=2903 pid=3084 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:53:38.052000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6531343963623737666532303462396361666335636231363035373931 Mar 17 18:53:38.052000 audit[3084]: AVC avc: denied { bpf } for pid=3084 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:38.052000 audit[3084]: AVC avc: denied { bpf } for pid=3084 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:38.052000 audit[3084]: AVC avc: denied { bpf } for pid=3084 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:38.052000 audit[3084]: AVC avc: denied { perfmon } for pid=3084 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:38.052000 audit[3084]: AVC avc: denied { perfmon } for pid=3084 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:38.052000 audit[3084]: AVC avc: denied { perfmon } for pid=3084 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:38.052000 audit[3084]: AVC avc: denied { perfmon } for pid=3084 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:38.052000 audit[3084]: AVC avc: denied { perfmon } for pid=3084 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:38.052000 audit[3084]: AVC avc: denied { bpf } for pid=3084 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:38.052000 audit[3084]: AVC avc: denied { bpf } for pid=3084 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:38.052000 audit: BPF prog-id=131 op=LOAD Mar 17 18:53:38.052000 audit[3084]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c0001bd9d8 a2=78 a3=c000355dc8 items=0 ppid=2903 pid=3084 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:53:38.052000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6531343963623737666532303462396361666335636231363035373931 Mar 17 18:53:38.053000 audit[3084]: AVC avc: denied { bpf } for pid=3084 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:38.053000 audit[3084]: AVC avc: denied { bpf } for pid=3084 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:38.053000 audit[3084]: AVC avc: denied { perfmon } for pid=3084 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:38.053000 audit[3084]: AVC avc: denied { perfmon } for pid=3084 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:38.053000 audit[3084]: AVC avc: denied { perfmon } for pid=3084 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:38.053000 audit[3084]: AVC avc: denied { perfmon } for pid=3084 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:38.053000 audit[3084]: AVC avc: denied { perfmon } for pid=3084 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:38.053000 audit[3084]: AVC avc: denied { bpf } for pid=3084 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:38.053000 audit[3084]: AVC avc: denied { bpf } for pid=3084 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:38.053000 audit: BPF prog-id=132 op=LOAD Mar 17 18:53:38.053000 audit[3084]: SYSCALL arch=c000003e syscall=321 success=yes exit=17 a0=5 a1=c0001bd770 a2=78 a3=c000355e18 items=0 ppid=2903 pid=3084 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:53:38.053000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6531343963623737666532303462396361666335636231363035373931 Mar 17 18:53:38.053000 audit: BPF prog-id=132 op=UNLOAD Mar 17 18:53:38.054000 audit: BPF prog-id=131 op=UNLOAD Mar 17 18:53:38.054000 audit[3084]: AVC avc: denied { bpf } for pid=3084 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:38.054000 audit[3084]: AVC avc: denied { bpf } for pid=3084 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:38.054000 audit[3084]: AVC avc: denied { bpf } for pid=3084 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:38.054000 audit[3084]: AVC avc: denied { perfmon } for pid=3084 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:38.054000 audit[3084]: AVC avc: denied { perfmon } for pid=3084 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:38.054000 audit[3084]: AVC avc: denied { perfmon } for pid=3084 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:38.054000 audit[3084]: AVC avc: denied { perfmon } for pid=3084 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:38.054000 audit[3084]: AVC avc: denied { perfmon } for pid=3084 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:38.054000 audit[3084]: AVC avc: denied { bpf } for pid=3084 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:38.054000 audit[3084]: AVC avc: denied { bpf } for pid=3084 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:38.054000 audit: BPF prog-id=133 op=LOAD Mar 17 18:53:38.054000 audit[3084]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c0001bdc30 a2=78 a3=c000355ea8 items=0 ppid=2903 pid=3084 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:53:38.054000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6531343963623737666532303462396361666335636231363035373931 Mar 17 18:53:38.072561 env[1409]: time="2025-03-17T18:53:38.072516796Z" level=info msg="StartContainer for \"e149cb77fe204b9cafc5cb1605791b5a69f3ae519085dc87b22e759f290374c3\" returns successfully" Mar 17 18:53:38.960344 kubelet[2450]: E0317 18:53:38.960256 2450 pod_workers.go:1301] "Error syncing pod, skipping" err="network is not ready: container runtime network not ready: NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" pod="calico-system/csi-node-driver-qb29d" podUID="fa4b58f5-7cb3-428f-9da4-44a5cc6627b4" Mar 17 18:53:39.475979 env[1409]: time="2025-03-17T18:53:39.475909032Z" level=error msg="failed to reload cni configuration after receiving fs change event(\"/etc/cni/net.d/calico-kubeconfig\": WRITE)" error="cni config load failed: no network config found in /etc/cni/net.d: cni plugin not initialized: failed to load cni config" Mar 17 18:53:39.478083 systemd[1]: cri-containerd-e149cb77fe204b9cafc5cb1605791b5a69f3ae519085dc87b22e759f290374c3.scope: Deactivated successfully. Mar 17 18:53:39.488287 kernel: kauditd_printk_skb: 96 callbacks suppressed Mar 17 18:53:39.488371 kernel: audit: type=1334 audit(1742237619.481:1005): prog-id=133 op=UNLOAD Mar 17 18:53:39.481000 audit: BPF prog-id=133 op=UNLOAD Mar 17 18:53:39.504088 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-e149cb77fe204b9cafc5cb1605791b5a69f3ae519085dc87b22e759f290374c3-rootfs.mount: Deactivated successfully. Mar 17 18:53:39.532112 kubelet[2450]: I0317 18:53:39.532084 2450 kubelet_node_status.go:502] "Fast updating node status as it just became ready" Mar 17 18:53:39.575528 systemd[1]: Created slice kubepods-burstable-pod047ac9e7_ffcc_423c_9a51_54609fb136cc.slice. Mar 17 18:53:39.585562 systemd[1]: Created slice kubepods-besteffort-pod7312b29a_7b59_4311_b619_758dbd249078.slice. Mar 17 18:53:39.600718 systemd[1]: Created slice kubepods-besteffort-pod640a4f62_1afa_4bd0_b183_7d5406f3f026.slice. Mar 17 18:53:39.608524 systemd[1]: Created slice kubepods-besteffort-pod5962bc12_5113_4699_8f4b_318bf87ebc57.slice. Mar 17 18:53:39.615139 systemd[1]: Created slice kubepods-burstable-podf6e876a2_e0ad_437c_8982_fb194bf7b8dd.slice. Mar 17 18:53:39.628431 kubelet[2450]: I0317 18:53:39.628406 2450 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"tigera-ca-bundle\" (UniqueName: \"kubernetes.io/configmap/5962bc12-5113-4699-8f4b-318bf87ebc57-tigera-ca-bundle\") pod \"calico-kube-controllers-79dcd7cc77-7gsvv\" (UID: \"5962bc12-5113-4699-8f4b-318bf87ebc57\") " pod="calico-system/calico-kube-controllers-79dcd7cc77-7gsvv" Mar 17 18:53:39.628613 kubelet[2450]: I0317 18:53:39.628596 2450 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-77zjc\" (UniqueName: \"kubernetes.io/projected/5962bc12-5113-4699-8f4b-318bf87ebc57-kube-api-access-77zjc\") pod \"calico-kube-controllers-79dcd7cc77-7gsvv\" (UID: \"5962bc12-5113-4699-8f4b-318bf87ebc57\") " pod="calico-system/calico-kube-controllers-79dcd7cc77-7gsvv" Mar 17 18:53:39.628698 kubelet[2450]: I0317 18:53:39.628684 2450 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"config-volume\" (UniqueName: \"kubernetes.io/configmap/f6e876a2-e0ad-437c-8982-fb194bf7b8dd-config-volume\") pod \"coredns-668d6bf9bc-xjnb2\" (UID: \"f6e876a2-e0ad-437c-8982-fb194bf7b8dd\") " pod="kube-system/coredns-668d6bf9bc-xjnb2" Mar 17 18:53:39.628812 kubelet[2450]: I0317 18:53:39.628796 2450 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-7b979\" (UniqueName: \"kubernetes.io/projected/640a4f62-1afa-4bd0-b183-7d5406f3f026-kube-api-access-7b979\") pod \"calico-apiserver-5858799f47-ln8wx\" (UID: \"640a4f62-1afa-4bd0-b183-7d5406f3f026\") " pod="calico-apiserver/calico-apiserver-5858799f47-ln8wx" Mar 17 18:53:39.628891 kubelet[2450]: I0317 18:53:39.628881 2450 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"config-volume\" (UniqueName: \"kubernetes.io/configmap/047ac9e7-ffcc-423c-9a51-54609fb136cc-config-volume\") pod \"coredns-668d6bf9bc-6dxdl\" (UID: \"047ac9e7-ffcc-423c-9a51-54609fb136cc\") " pod="kube-system/coredns-668d6bf9bc-6dxdl" Mar 17 18:53:39.628967 kubelet[2450]: I0317 18:53:39.628955 2450 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-zrdnr\" (UniqueName: \"kubernetes.io/projected/f6e876a2-e0ad-437c-8982-fb194bf7b8dd-kube-api-access-zrdnr\") pod \"coredns-668d6bf9bc-xjnb2\" (UID: \"f6e876a2-e0ad-437c-8982-fb194bf7b8dd\") " pod="kube-system/coredns-668d6bf9bc-xjnb2" Mar 17 18:53:39.629030 kubelet[2450]: I0317 18:53:39.629017 2450 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"calico-apiserver-certs\" (UniqueName: \"kubernetes.io/secret/640a4f62-1afa-4bd0-b183-7d5406f3f026-calico-apiserver-certs\") pod \"calico-apiserver-5858799f47-ln8wx\" (UID: \"640a4f62-1afa-4bd0-b183-7d5406f3f026\") " pod="calico-apiserver/calico-apiserver-5858799f47-ln8wx" Mar 17 18:53:39.629102 kubelet[2450]: I0317 18:53:39.629089 2450 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-7xc7j\" (UniqueName: \"kubernetes.io/projected/047ac9e7-ffcc-423c-9a51-54609fb136cc-kube-api-access-7xc7j\") pod \"coredns-668d6bf9bc-6dxdl\" (UID: \"047ac9e7-ffcc-423c-9a51-54609fb136cc\") " pod="kube-system/coredns-668d6bf9bc-6dxdl" Mar 17 18:53:39.629177 kubelet[2450]: I0317 18:53:39.629164 2450 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-8qt4q\" (UniqueName: \"kubernetes.io/projected/7312b29a-7b59-4311-b619-758dbd249078-kube-api-access-8qt4q\") pod \"calico-apiserver-5858799f47-k8zn6\" (UID: \"7312b29a-7b59-4311-b619-758dbd249078\") " pod="calico-apiserver/calico-apiserver-5858799f47-k8zn6" Mar 17 18:53:39.629253 kubelet[2450]: I0317 18:53:39.629239 2450 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"calico-apiserver-certs\" (UniqueName: \"kubernetes.io/secret/7312b29a-7b59-4311-b619-758dbd249078-calico-apiserver-certs\") pod \"calico-apiserver-5858799f47-k8zn6\" (UID: \"7312b29a-7b59-4311-b619-758dbd249078\") " pod="calico-apiserver/calico-apiserver-5858799f47-k8zn6" Mar 17 18:53:40.183465 env[1409]: time="2025-03-17T18:53:40.183417864Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:coredns-668d6bf9bc-6dxdl,Uid:047ac9e7-ffcc-423c-9a51-54609fb136cc,Namespace:kube-system,Attempt:0,}" Mar 17 18:53:40.188546 env[1409]: time="2025-03-17T18:53:40.188513592Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-apiserver-5858799f47-k8zn6,Uid:7312b29a-7b59-4311-b619-758dbd249078,Namespace:calico-apiserver,Attempt:0,}" Mar 17 18:53:40.208098 env[1409]: time="2025-03-17T18:53:40.208059802Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-apiserver-5858799f47-ln8wx,Uid:640a4f62-1afa-4bd0-b183-7d5406f3f026,Namespace:calico-apiserver,Attempt:0,}" Mar 17 18:53:40.212076 env[1409]: time="2025-03-17T18:53:40.212040325Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-kube-controllers-79dcd7cc77-7gsvv,Uid:5962bc12-5113-4699-8f4b-318bf87ebc57,Namespace:calico-system,Attempt:0,}" Mar 17 18:53:40.219021 env[1409]: time="2025-03-17T18:53:40.218987764Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:coredns-668d6bf9bc-xjnb2,Uid:f6e876a2-e0ad-437c-8982-fb194bf7b8dd,Namespace:kube-system,Attempt:0,}" Mar 17 18:53:40.966101 systemd[1]: Created slice kubepods-besteffort-podfa4b58f5_7cb3_428f_9da4_44a5cc6627b4.slice. Mar 17 18:53:40.968824 env[1409]: time="2025-03-17T18:53:40.968787277Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:csi-node-driver-qb29d,Uid:fa4b58f5-7cb3-428f-9da4-44a5cc6627b4,Namespace:calico-system,Attempt:0,}" Mar 17 18:53:41.702769 env[1409]: time="2025-03-17T18:53:41.702712430Z" level=info msg="shim disconnected" id=e149cb77fe204b9cafc5cb1605791b5a69f3ae519085dc87b22e759f290374c3 Mar 17 18:53:41.702769 env[1409]: time="2025-03-17T18:53:41.702757330Z" level=warning msg="cleaning up after shim disconnected" id=e149cb77fe204b9cafc5cb1605791b5a69f3ae519085dc87b22e759f290374c3 namespace=k8s.io Mar 17 18:53:41.702769 env[1409]: time="2025-03-17T18:53:41.702770630Z" level=info msg="cleaning up dead shim" Mar 17 18:53:41.711969 env[1409]: time="2025-03-17T18:53:41.711910081Z" level=warning msg="cleanup warnings time=\"2025-03-17T18:53:41Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=3139 runtime=io.containerd.runc.v2\n" Mar 17 18:53:42.063308 env[1409]: time="2025-03-17T18:53:42.057125580Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/node:v3.29.1\"" Mar 17 18:53:42.066198 env[1409]: time="2025-03-17T18:53:42.066133929Z" level=error msg="Failed to destroy network for sandbox \"008354fedab1e1c2571c3d344c4e1377e32b6de745504a5e5bc3e8fe0e3d9edc\"" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Mar 17 18:53:42.066738 env[1409]: time="2025-03-17T18:53:42.066694932Z" level=error msg="encountered an error cleaning up failed sandbox \"008354fedab1e1c2571c3d344c4e1377e32b6de745504a5e5bc3e8fe0e3d9edc\", marking sandbox state as SANDBOX_UNKNOWN" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Mar 17 18:53:42.066918 env[1409]: time="2025-03-17T18:53:42.066883033Z" level=error msg="RunPodSandbox for &PodSandboxMetadata{Name:csi-node-driver-qb29d,Uid:fa4b58f5-7cb3-428f-9da4-44a5cc6627b4,Namespace:calico-system,Attempt:0,} failed, error" error="failed to setup network for sandbox \"008354fedab1e1c2571c3d344c4e1377e32b6de745504a5e5bc3e8fe0e3d9edc\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Mar 17 18:53:42.067285 kubelet[2450]: E0317 18:53:42.067166 2450 log.go:32] "RunPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"008354fedab1e1c2571c3d344c4e1377e32b6de745504a5e5bc3e8fe0e3d9edc\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Mar 17 18:53:42.067285 kubelet[2450]: E0317 18:53:42.067228 2450 kuberuntime_sandbox.go:72] "Failed to create sandbox for pod" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"008354fedab1e1c2571c3d344c4e1377e32b6de745504a5e5bc3e8fe0e3d9edc\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="calico-system/csi-node-driver-qb29d" Mar 17 18:53:42.068366 kubelet[2450]: E0317 18:53:42.067256 2450 kuberuntime_manager.go:1237] "CreatePodSandbox for pod failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"008354fedab1e1c2571c3d344c4e1377e32b6de745504a5e5bc3e8fe0e3d9edc\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="calico-system/csi-node-driver-qb29d" Mar 17 18:53:42.068366 kubelet[2450]: E0317 18:53:42.067747 2450 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"CreatePodSandbox\" for \"csi-node-driver-qb29d_calico-system(fa4b58f5-7cb3-428f-9da4-44a5cc6627b4)\" with CreatePodSandboxError: \"Failed to create sandbox for pod \\\"csi-node-driver-qb29d_calico-system(fa4b58f5-7cb3-428f-9da4-44a5cc6627b4)\\\": rpc error: code = Unknown desc = failed to setup network for sandbox \\\"008354fedab1e1c2571c3d344c4e1377e32b6de745504a5e5bc3e8fe0e3d9edc\\\": plugin type=\\\"calico\\\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-system/csi-node-driver-qb29d" podUID="fa4b58f5-7cb3-428f-9da4-44a5cc6627b4" Mar 17 18:53:42.096968 env[1409]: time="2025-03-17T18:53:42.096905896Z" level=error msg="Failed to destroy network for sandbox \"304940bfa11edace9460b45a66850dc2d1525742296a41972caed85159dc4e39\"" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Mar 17 18:53:42.097360 env[1409]: time="2025-03-17T18:53:42.097317598Z" level=error msg="encountered an error cleaning up failed sandbox \"304940bfa11edace9460b45a66850dc2d1525742296a41972caed85159dc4e39\", marking sandbox state as SANDBOX_UNKNOWN" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Mar 17 18:53:42.097460 env[1409]: time="2025-03-17T18:53:42.097390498Z" level=error msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-apiserver-5858799f47-ln8wx,Uid:640a4f62-1afa-4bd0-b183-7d5406f3f026,Namespace:calico-apiserver,Attempt:0,} failed, error" error="failed to setup network for sandbox \"304940bfa11edace9460b45a66850dc2d1525742296a41972caed85159dc4e39\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Mar 17 18:53:42.097993 kubelet[2450]: E0317 18:53:42.097613 2450 log.go:32] "RunPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"304940bfa11edace9460b45a66850dc2d1525742296a41972caed85159dc4e39\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Mar 17 18:53:42.097993 kubelet[2450]: E0317 18:53:42.097672 2450 kuberuntime_sandbox.go:72] "Failed to create sandbox for pod" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"304940bfa11edace9460b45a66850dc2d1525742296a41972caed85159dc4e39\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="calico-apiserver/calico-apiserver-5858799f47-ln8wx" Mar 17 18:53:42.097993 kubelet[2450]: E0317 18:53:42.097700 2450 kuberuntime_manager.go:1237] "CreatePodSandbox for pod failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"304940bfa11edace9460b45a66850dc2d1525742296a41972caed85159dc4e39\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="calico-apiserver/calico-apiserver-5858799f47-ln8wx" Mar 17 18:53:42.098199 kubelet[2450]: E0317 18:53:42.097753 2450 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"CreatePodSandbox\" for \"calico-apiserver-5858799f47-ln8wx_calico-apiserver(640a4f62-1afa-4bd0-b183-7d5406f3f026)\" with CreatePodSandboxError: \"Failed to create sandbox for pod \\\"calico-apiserver-5858799f47-ln8wx_calico-apiserver(640a4f62-1afa-4bd0-b183-7d5406f3f026)\\\": rpc error: code = Unknown desc = failed to setup network for sandbox \\\"304940bfa11edace9460b45a66850dc2d1525742296a41972caed85159dc4e39\\\": plugin type=\\\"calico\\\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-apiserver/calico-apiserver-5858799f47-ln8wx" podUID="640a4f62-1afa-4bd0-b183-7d5406f3f026" Mar 17 18:53:42.127572 env[1409]: time="2025-03-17T18:53:42.127528062Z" level=error msg="Failed to destroy network for sandbox \"ca1f5fe91026fd47441d347a38e8a9d7a74a6cd4b145b95491a11731c6c629d7\"" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Mar 17 18:53:42.127906 env[1409]: time="2025-03-17T18:53:42.127865563Z" level=error msg="encountered an error cleaning up failed sandbox \"ca1f5fe91026fd47441d347a38e8a9d7a74a6cd4b145b95491a11731c6c629d7\", marking sandbox state as SANDBOX_UNKNOWN" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Mar 17 18:53:42.128012 env[1409]: time="2025-03-17T18:53:42.127930064Z" level=error msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-kube-controllers-79dcd7cc77-7gsvv,Uid:5962bc12-5113-4699-8f4b-318bf87ebc57,Namespace:calico-system,Attempt:0,} failed, error" error="failed to setup network for sandbox \"ca1f5fe91026fd47441d347a38e8a9d7a74a6cd4b145b95491a11731c6c629d7\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Mar 17 18:53:42.128200 kubelet[2450]: E0317 18:53:42.128143 2450 log.go:32] "RunPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"ca1f5fe91026fd47441d347a38e8a9d7a74a6cd4b145b95491a11731c6c629d7\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Mar 17 18:53:42.128308 kubelet[2450]: E0317 18:53:42.128199 2450 kuberuntime_sandbox.go:72] "Failed to create sandbox for pod" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"ca1f5fe91026fd47441d347a38e8a9d7a74a6cd4b145b95491a11731c6c629d7\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="calico-system/calico-kube-controllers-79dcd7cc77-7gsvv" Mar 17 18:53:42.128308 kubelet[2450]: E0317 18:53:42.128225 2450 kuberuntime_manager.go:1237] "CreatePodSandbox for pod failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"ca1f5fe91026fd47441d347a38e8a9d7a74a6cd4b145b95491a11731c6c629d7\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="calico-system/calico-kube-controllers-79dcd7cc77-7gsvv" Mar 17 18:53:42.128426 kubelet[2450]: E0317 18:53:42.128308 2450 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"CreatePodSandbox\" for \"calico-kube-controllers-79dcd7cc77-7gsvv_calico-system(5962bc12-5113-4699-8f4b-318bf87ebc57)\" with CreatePodSandboxError: \"Failed to create sandbox for pod \\\"calico-kube-controllers-79dcd7cc77-7gsvv_calico-system(5962bc12-5113-4699-8f4b-318bf87ebc57)\\\": rpc error: code = Unknown desc = failed to setup network for sandbox \\\"ca1f5fe91026fd47441d347a38e8a9d7a74a6cd4b145b95491a11731c6c629d7\\\": plugin type=\\\"calico\\\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-system/calico-kube-controllers-79dcd7cc77-7gsvv" podUID="5962bc12-5113-4699-8f4b-318bf87ebc57" Mar 17 18:53:42.142661 env[1409]: time="2025-03-17T18:53:42.142606943Z" level=error msg="Failed to destroy network for sandbox \"648d5fd3a31c687d83fb27810080702536d28c9ff711a4c61f869dcfb2e3ad23\"" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Mar 17 18:53:42.143021 env[1409]: time="2025-03-17T18:53:42.142982545Z" level=error msg="encountered an error cleaning up failed sandbox \"648d5fd3a31c687d83fb27810080702536d28c9ff711a4c61f869dcfb2e3ad23\", marking sandbox state as SANDBOX_UNKNOWN" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Mar 17 18:53:42.143096 env[1409]: time="2025-03-17T18:53:42.143046346Z" level=error msg="RunPodSandbox for &PodSandboxMetadata{Name:coredns-668d6bf9bc-xjnb2,Uid:f6e876a2-e0ad-437c-8982-fb194bf7b8dd,Namespace:kube-system,Attempt:0,} failed, error" error="failed to setup network for sandbox \"648d5fd3a31c687d83fb27810080702536d28c9ff711a4c61f869dcfb2e3ad23\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Mar 17 18:53:42.143282 kubelet[2450]: E0317 18:53:42.143231 2450 log.go:32] "RunPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"648d5fd3a31c687d83fb27810080702536d28c9ff711a4c61f869dcfb2e3ad23\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Mar 17 18:53:42.143374 kubelet[2450]: E0317 18:53:42.143300 2450 kuberuntime_sandbox.go:72] "Failed to create sandbox for pod" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"648d5fd3a31c687d83fb27810080702536d28c9ff711a4c61f869dcfb2e3ad23\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="kube-system/coredns-668d6bf9bc-xjnb2" Mar 17 18:53:42.143374 kubelet[2450]: E0317 18:53:42.143337 2450 kuberuntime_manager.go:1237] "CreatePodSandbox for pod failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"648d5fd3a31c687d83fb27810080702536d28c9ff711a4c61f869dcfb2e3ad23\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="kube-system/coredns-668d6bf9bc-xjnb2" Mar 17 18:53:42.143528 kubelet[2450]: E0317 18:53:42.143396 2450 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"CreatePodSandbox\" for \"coredns-668d6bf9bc-xjnb2_kube-system(f6e876a2-e0ad-437c-8982-fb194bf7b8dd)\" with CreatePodSandboxError: \"Failed to create sandbox for pod \\\"coredns-668d6bf9bc-xjnb2_kube-system(f6e876a2-e0ad-437c-8982-fb194bf7b8dd)\\\": rpc error: code = Unknown desc = failed to setup network for sandbox \\\"648d5fd3a31c687d83fb27810080702536d28c9ff711a4c61f869dcfb2e3ad23\\\": plugin type=\\\"calico\\\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="kube-system/coredns-668d6bf9bc-xjnb2" podUID="f6e876a2-e0ad-437c-8982-fb194bf7b8dd" Mar 17 18:53:42.152868 env[1409]: time="2025-03-17T18:53:42.152815599Z" level=error msg="Failed to destroy network for sandbox \"de5145d6114dbc64accc334b6c1a79dd7d3ea3b0416dd9163394f163c56670c0\"" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Mar 17 18:53:42.153240 env[1409]: time="2025-03-17T18:53:42.153166900Z" level=error msg="encountered an error cleaning up failed sandbox \"de5145d6114dbc64accc334b6c1a79dd7d3ea3b0416dd9163394f163c56670c0\", marking sandbox state as SANDBOX_UNKNOWN" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Mar 17 18:53:42.153339 env[1409]: time="2025-03-17T18:53:42.153282101Z" level=error msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-apiserver-5858799f47-k8zn6,Uid:7312b29a-7b59-4311-b619-758dbd249078,Namespace:calico-apiserver,Attempt:0,} failed, error" error="failed to setup network for sandbox \"de5145d6114dbc64accc334b6c1a79dd7d3ea3b0416dd9163394f163c56670c0\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Mar 17 18:53:42.153536 kubelet[2450]: E0317 18:53:42.153507 2450 log.go:32] "RunPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"de5145d6114dbc64accc334b6c1a79dd7d3ea3b0416dd9163394f163c56670c0\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Mar 17 18:53:42.153620 kubelet[2450]: E0317 18:53:42.153573 2450 kuberuntime_sandbox.go:72] "Failed to create sandbox for pod" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"de5145d6114dbc64accc334b6c1a79dd7d3ea3b0416dd9163394f163c56670c0\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="calico-apiserver/calico-apiserver-5858799f47-k8zn6" Mar 17 18:53:42.153620 kubelet[2450]: E0317 18:53:42.153600 2450 kuberuntime_manager.go:1237] "CreatePodSandbox for pod failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"de5145d6114dbc64accc334b6c1a79dd7d3ea3b0416dd9163394f163c56670c0\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="calico-apiserver/calico-apiserver-5858799f47-k8zn6" Mar 17 18:53:42.153713 kubelet[2450]: E0317 18:53:42.153669 2450 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"CreatePodSandbox\" for \"calico-apiserver-5858799f47-k8zn6_calico-apiserver(7312b29a-7b59-4311-b619-758dbd249078)\" with CreatePodSandboxError: \"Failed to create sandbox for pod \\\"calico-apiserver-5858799f47-k8zn6_calico-apiserver(7312b29a-7b59-4311-b619-758dbd249078)\\\": rpc error: code = Unknown desc = failed to setup network for sandbox \\\"de5145d6114dbc64accc334b6c1a79dd7d3ea3b0416dd9163394f163c56670c0\\\": plugin type=\\\"calico\\\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-apiserver/calico-apiserver-5858799f47-k8zn6" podUID="7312b29a-7b59-4311-b619-758dbd249078" Mar 17 18:53:42.158196 env[1409]: time="2025-03-17T18:53:42.158143327Z" level=error msg="Failed to destroy network for sandbox \"1123a5210483c4fd0b9bd699ed48ce3f3b24a27ae167b552026f5f0cd76e5fb3\"" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Mar 17 18:53:42.158505 env[1409]: time="2025-03-17T18:53:42.158461729Z" level=error msg="encountered an error cleaning up failed sandbox \"1123a5210483c4fd0b9bd699ed48ce3f3b24a27ae167b552026f5f0cd76e5fb3\", marking sandbox state as SANDBOX_UNKNOWN" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Mar 17 18:53:42.158594 env[1409]: time="2025-03-17T18:53:42.158523629Z" level=error msg="RunPodSandbox for &PodSandboxMetadata{Name:coredns-668d6bf9bc-6dxdl,Uid:047ac9e7-ffcc-423c-9a51-54609fb136cc,Namespace:kube-system,Attempt:0,} failed, error" error="failed to setup network for sandbox \"1123a5210483c4fd0b9bd699ed48ce3f3b24a27ae167b552026f5f0cd76e5fb3\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Mar 17 18:53:42.158701 kubelet[2450]: E0317 18:53:42.158671 2450 log.go:32] "RunPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"1123a5210483c4fd0b9bd699ed48ce3f3b24a27ae167b552026f5f0cd76e5fb3\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Mar 17 18:53:42.158780 kubelet[2450]: E0317 18:53:42.158713 2450 kuberuntime_sandbox.go:72] "Failed to create sandbox for pod" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"1123a5210483c4fd0b9bd699ed48ce3f3b24a27ae167b552026f5f0cd76e5fb3\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="kube-system/coredns-668d6bf9bc-6dxdl" Mar 17 18:53:42.158780 kubelet[2450]: E0317 18:53:42.158750 2450 kuberuntime_manager.go:1237] "CreatePodSandbox for pod failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"1123a5210483c4fd0b9bd699ed48ce3f3b24a27ae167b552026f5f0cd76e5fb3\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="kube-system/coredns-668d6bf9bc-6dxdl" Mar 17 18:53:42.158871 kubelet[2450]: E0317 18:53:42.158790 2450 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"CreatePodSandbox\" for \"coredns-668d6bf9bc-6dxdl_kube-system(047ac9e7-ffcc-423c-9a51-54609fb136cc)\" with CreatePodSandboxError: \"Failed to create sandbox for pod \\\"coredns-668d6bf9bc-6dxdl_kube-system(047ac9e7-ffcc-423c-9a51-54609fb136cc)\\\": rpc error: code = Unknown desc = failed to setup network for sandbox \\\"1123a5210483c4fd0b9bd699ed48ce3f3b24a27ae167b552026f5f0cd76e5fb3\\\": plugin type=\\\"calico\\\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="kube-system/coredns-668d6bf9bc-6dxdl" podUID="047ac9e7-ffcc-423c-9a51-54609fb136cc" Mar 17 18:53:42.809322 systemd[1]: run-containerd-io.containerd.grpc.v1.cri-sandboxes-ca1f5fe91026fd47441d347a38e8a9d7a74a6cd4b145b95491a11731c6c629d7-shm.mount: Deactivated successfully. Mar 17 18:53:42.809888 systemd[1]: run-containerd-io.containerd.grpc.v1.cri-sandboxes-304940bfa11edace9460b45a66850dc2d1525742296a41972caed85159dc4e39-shm.mount: Deactivated successfully. Mar 17 18:53:42.810096 systemd[1]: run-containerd-io.containerd.grpc.v1.cri-sandboxes-008354fedab1e1c2571c3d344c4e1377e32b6de745504a5e5bc3e8fe0e3d9edc-shm.mount: Deactivated successfully. Mar 17 18:53:43.055648 kubelet[2450]: I0317 18:53:43.055614 2450 pod_container_deletor.go:80] "Container not found in pod's containers" containerID="008354fedab1e1c2571c3d344c4e1377e32b6de745504a5e5bc3e8fe0e3d9edc" Mar 17 18:53:43.057382 kubelet[2450]: I0317 18:53:43.057352 2450 pod_container_deletor.go:80] "Container not found in pod's containers" containerID="de5145d6114dbc64accc334b6c1a79dd7d3ea3b0416dd9163394f163c56670c0" Mar 17 18:53:43.058408 env[1409]: time="2025-03-17T18:53:43.057864197Z" level=info msg="StopPodSandbox for \"de5145d6114dbc64accc334b6c1a79dd7d3ea3b0416dd9163394f163c56670c0\"" Mar 17 18:53:43.058408 env[1409]: time="2025-03-17T18:53:43.058382600Z" level=info msg="StopPodSandbox for \"008354fedab1e1c2571c3d344c4e1377e32b6de745504a5e5bc3e8fe0e3d9edc\"" Mar 17 18:53:43.060341 kubelet[2450]: I0317 18:53:43.060015 2450 pod_container_deletor.go:80] "Container not found in pod's containers" containerID="1123a5210483c4fd0b9bd699ed48ce3f3b24a27ae167b552026f5f0cd76e5fb3" Mar 17 18:53:43.060736 env[1409]: time="2025-03-17T18:53:43.060706913Z" level=info msg="StopPodSandbox for \"1123a5210483c4fd0b9bd699ed48ce3f3b24a27ae167b552026f5f0cd76e5fb3\"" Mar 17 18:53:43.062312 kubelet[2450]: I0317 18:53:43.062284 2450 pod_container_deletor.go:80] "Container not found in pod's containers" containerID="ca1f5fe91026fd47441d347a38e8a9d7a74a6cd4b145b95491a11731c6c629d7" Mar 17 18:53:43.062827 env[1409]: time="2025-03-17T18:53:43.062799024Z" level=info msg="StopPodSandbox for \"ca1f5fe91026fd47441d347a38e8a9d7a74a6cd4b145b95491a11731c6c629d7\"" Mar 17 18:53:43.065988 kubelet[2450]: I0317 18:53:43.065684 2450 pod_container_deletor.go:80] "Container not found in pod's containers" containerID="304940bfa11edace9460b45a66850dc2d1525742296a41972caed85159dc4e39" Mar 17 18:53:43.066851 env[1409]: time="2025-03-17T18:53:43.066822645Z" level=info msg="StopPodSandbox for \"304940bfa11edace9460b45a66850dc2d1525742296a41972caed85159dc4e39\"" Mar 17 18:53:43.067594 kubelet[2450]: I0317 18:53:43.067572 2450 pod_container_deletor.go:80] "Container not found in pod's containers" containerID="648d5fd3a31c687d83fb27810080702536d28c9ff711a4c61f869dcfb2e3ad23" Mar 17 18:53:43.068066 env[1409]: time="2025-03-17T18:53:43.068029752Z" level=info msg="StopPodSandbox for \"648d5fd3a31c687d83fb27810080702536d28c9ff711a4c61f869dcfb2e3ad23\"" Mar 17 18:53:43.167810 env[1409]: time="2025-03-17T18:53:43.167738382Z" level=error msg="StopPodSandbox for \"de5145d6114dbc64accc334b6c1a79dd7d3ea3b0416dd9163394f163c56670c0\" failed" error="failed to destroy network for sandbox \"de5145d6114dbc64accc334b6c1a79dd7d3ea3b0416dd9163394f163c56670c0\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Mar 17 18:53:43.168057 kubelet[2450]: E0317 18:53:43.168020 2450 log.go:32] "StopPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to destroy network for sandbox \"de5145d6114dbc64accc334b6c1a79dd7d3ea3b0416dd9163394f163c56670c0\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" podSandboxID="de5145d6114dbc64accc334b6c1a79dd7d3ea3b0416dd9163394f163c56670c0" Mar 17 18:53:43.168167 kubelet[2450]: E0317 18:53:43.168097 2450 kuberuntime_manager.go:1546] "Failed to stop sandbox" podSandboxID={"Type":"containerd","ID":"de5145d6114dbc64accc334b6c1a79dd7d3ea3b0416dd9163394f163c56670c0"} Mar 17 18:53:43.168224 kubelet[2450]: E0317 18:53:43.168193 2450 kuberuntime_manager.go:1146] "killPodWithSyncResult failed" err="failed to \"KillPodSandbox\" for \"7312b29a-7b59-4311-b619-758dbd249078\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"de5145d6114dbc64accc334b6c1a79dd7d3ea3b0416dd9163394f163c56670c0\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" Mar 17 18:53:43.168345 kubelet[2450]: E0317 18:53:43.168237 2450 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"KillPodSandbox\" for \"7312b29a-7b59-4311-b619-758dbd249078\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"de5145d6114dbc64accc334b6c1a79dd7d3ea3b0416dd9163394f163c56670c0\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-apiserver/calico-apiserver-5858799f47-k8zn6" podUID="7312b29a-7b59-4311-b619-758dbd249078" Mar 17 18:53:43.211877 env[1409]: time="2025-03-17T18:53:43.211804817Z" level=error msg="StopPodSandbox for \"304940bfa11edace9460b45a66850dc2d1525742296a41972caed85159dc4e39\" failed" error="failed to destroy network for sandbox \"304940bfa11edace9460b45a66850dc2d1525742296a41972caed85159dc4e39\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Mar 17 18:53:43.212345 kubelet[2450]: E0317 18:53:43.212303 2450 log.go:32] "StopPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to destroy network for sandbox \"304940bfa11edace9460b45a66850dc2d1525742296a41972caed85159dc4e39\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" podSandboxID="304940bfa11edace9460b45a66850dc2d1525742296a41972caed85159dc4e39" Mar 17 18:53:43.212477 kubelet[2450]: E0317 18:53:43.212369 2450 kuberuntime_manager.go:1546] "Failed to stop sandbox" podSandboxID={"Type":"containerd","ID":"304940bfa11edace9460b45a66850dc2d1525742296a41972caed85159dc4e39"} Mar 17 18:53:43.212477 kubelet[2450]: E0317 18:53:43.212412 2450 kuberuntime_manager.go:1146] "killPodWithSyncResult failed" err="failed to \"KillPodSandbox\" for \"640a4f62-1afa-4bd0-b183-7d5406f3f026\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"304940bfa11edace9460b45a66850dc2d1525742296a41972caed85159dc4e39\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" Mar 17 18:53:43.212477 kubelet[2450]: E0317 18:53:43.212466 2450 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"KillPodSandbox\" for \"640a4f62-1afa-4bd0-b183-7d5406f3f026\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"304940bfa11edace9460b45a66850dc2d1525742296a41972caed85159dc4e39\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-apiserver/calico-apiserver-5858799f47-ln8wx" podUID="640a4f62-1afa-4bd0-b183-7d5406f3f026" Mar 17 18:53:43.212985 env[1409]: time="2025-03-17T18:53:43.212923723Z" level=error msg="StopPodSandbox for \"648d5fd3a31c687d83fb27810080702536d28c9ff711a4c61f869dcfb2e3ad23\" failed" error="failed to destroy network for sandbox \"648d5fd3a31c687d83fb27810080702536d28c9ff711a4c61f869dcfb2e3ad23\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Mar 17 18:53:43.213167 kubelet[2450]: E0317 18:53:43.213139 2450 log.go:32] "StopPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to destroy network for sandbox \"648d5fd3a31c687d83fb27810080702536d28c9ff711a4c61f869dcfb2e3ad23\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" podSandboxID="648d5fd3a31c687d83fb27810080702536d28c9ff711a4c61f869dcfb2e3ad23" Mar 17 18:53:43.213279 kubelet[2450]: E0317 18:53:43.213179 2450 kuberuntime_manager.go:1546] "Failed to stop sandbox" podSandboxID={"Type":"containerd","ID":"648d5fd3a31c687d83fb27810080702536d28c9ff711a4c61f869dcfb2e3ad23"} Mar 17 18:53:43.213279 kubelet[2450]: E0317 18:53:43.213241 2450 kuberuntime_manager.go:1146] "killPodWithSyncResult failed" err="failed to \"KillPodSandbox\" for \"f6e876a2-e0ad-437c-8982-fb194bf7b8dd\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"648d5fd3a31c687d83fb27810080702536d28c9ff711a4c61f869dcfb2e3ad23\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" Mar 17 18:53:43.213413 kubelet[2450]: E0317 18:53:43.213287 2450 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"KillPodSandbox\" for \"f6e876a2-e0ad-437c-8982-fb194bf7b8dd\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"648d5fd3a31c687d83fb27810080702536d28c9ff711a4c61f869dcfb2e3ad23\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="kube-system/coredns-668d6bf9bc-xjnb2" podUID="f6e876a2-e0ad-437c-8982-fb194bf7b8dd" Mar 17 18:53:43.216464 env[1409]: time="2025-03-17T18:53:43.216425841Z" level=error msg="StopPodSandbox for \"ca1f5fe91026fd47441d347a38e8a9d7a74a6cd4b145b95491a11731c6c629d7\" failed" error="failed to destroy network for sandbox \"ca1f5fe91026fd47441d347a38e8a9d7a74a6cd4b145b95491a11731c6c629d7\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Mar 17 18:53:43.216756 kubelet[2450]: E0317 18:53:43.216703 2450 log.go:32] "StopPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to destroy network for sandbox \"ca1f5fe91026fd47441d347a38e8a9d7a74a6cd4b145b95491a11731c6c629d7\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" podSandboxID="ca1f5fe91026fd47441d347a38e8a9d7a74a6cd4b145b95491a11731c6c629d7" Mar 17 18:53:43.216889 kubelet[2450]: E0317 18:53:43.216766 2450 kuberuntime_manager.go:1546] "Failed to stop sandbox" podSandboxID={"Type":"containerd","ID":"ca1f5fe91026fd47441d347a38e8a9d7a74a6cd4b145b95491a11731c6c629d7"} Mar 17 18:53:43.217201 kubelet[2450]: E0317 18:53:43.216857 2450 kuberuntime_manager.go:1146] "killPodWithSyncResult failed" err="failed to \"KillPodSandbox\" for \"5962bc12-5113-4699-8f4b-318bf87ebc57\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"ca1f5fe91026fd47441d347a38e8a9d7a74a6cd4b145b95491a11731c6c629d7\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" Mar 17 18:53:43.217390 kubelet[2450]: E0317 18:53:43.217238 2450 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"KillPodSandbox\" for \"5962bc12-5113-4699-8f4b-318bf87ebc57\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"ca1f5fe91026fd47441d347a38e8a9d7a74a6cd4b145b95491a11731c6c629d7\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-system/calico-kube-controllers-79dcd7cc77-7gsvv" podUID="5962bc12-5113-4699-8f4b-318bf87ebc57" Mar 17 18:53:43.228017 env[1409]: time="2025-03-17T18:53:43.227929003Z" level=error msg="StopPodSandbox for \"1123a5210483c4fd0b9bd699ed48ce3f3b24a27ae167b552026f5f0cd76e5fb3\" failed" error="failed to destroy network for sandbox \"1123a5210483c4fd0b9bd699ed48ce3f3b24a27ae167b552026f5f0cd76e5fb3\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Mar 17 18:53:43.228312 kubelet[2450]: E0317 18:53:43.228254 2450 log.go:32] "StopPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to destroy network for sandbox \"1123a5210483c4fd0b9bd699ed48ce3f3b24a27ae167b552026f5f0cd76e5fb3\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" podSandboxID="1123a5210483c4fd0b9bd699ed48ce3f3b24a27ae167b552026f5f0cd76e5fb3" Mar 17 18:53:43.228407 kubelet[2450]: E0317 18:53:43.228321 2450 kuberuntime_manager.go:1546] "Failed to stop sandbox" podSandboxID={"Type":"containerd","ID":"1123a5210483c4fd0b9bd699ed48ce3f3b24a27ae167b552026f5f0cd76e5fb3"} Mar 17 18:53:43.228407 kubelet[2450]: E0317 18:53:43.228355 2450 kuberuntime_manager.go:1146] "killPodWithSyncResult failed" err="failed to \"KillPodSandbox\" for \"047ac9e7-ffcc-423c-9a51-54609fb136cc\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"1123a5210483c4fd0b9bd699ed48ce3f3b24a27ae167b552026f5f0cd76e5fb3\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" Mar 17 18:53:43.228617 kubelet[2450]: E0317 18:53:43.228410 2450 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"KillPodSandbox\" for \"047ac9e7-ffcc-423c-9a51-54609fb136cc\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"1123a5210483c4fd0b9bd699ed48ce3f3b24a27ae167b552026f5f0cd76e5fb3\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="kube-system/coredns-668d6bf9bc-6dxdl" podUID="047ac9e7-ffcc-423c-9a51-54609fb136cc" Mar 17 18:53:43.229520 env[1409]: time="2025-03-17T18:53:43.229481211Z" level=error msg="StopPodSandbox for \"008354fedab1e1c2571c3d344c4e1377e32b6de745504a5e5bc3e8fe0e3d9edc\" failed" error="failed to destroy network for sandbox \"008354fedab1e1c2571c3d344c4e1377e32b6de745504a5e5bc3e8fe0e3d9edc\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Mar 17 18:53:43.229658 kubelet[2450]: E0317 18:53:43.229625 2450 log.go:32] "StopPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to destroy network for sandbox \"008354fedab1e1c2571c3d344c4e1377e32b6de745504a5e5bc3e8fe0e3d9edc\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" podSandboxID="008354fedab1e1c2571c3d344c4e1377e32b6de745504a5e5bc3e8fe0e3d9edc" Mar 17 18:53:43.229731 kubelet[2450]: E0317 18:53:43.229664 2450 kuberuntime_manager.go:1546] "Failed to stop sandbox" podSandboxID={"Type":"containerd","ID":"008354fedab1e1c2571c3d344c4e1377e32b6de745504a5e5bc3e8fe0e3d9edc"} Mar 17 18:53:43.229731 kubelet[2450]: E0317 18:53:43.229697 2450 kuberuntime_manager.go:1146] "killPodWithSyncResult failed" err="failed to \"KillPodSandbox\" for \"fa4b58f5-7cb3-428f-9da4-44a5cc6627b4\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"008354fedab1e1c2571c3d344c4e1377e32b6de745504a5e5bc3e8fe0e3d9edc\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" Mar 17 18:53:43.229854 kubelet[2450]: E0317 18:53:43.229723 2450 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"KillPodSandbox\" for \"fa4b58f5-7cb3-428f-9da4-44a5cc6627b4\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"008354fedab1e1c2571c3d344c4e1377e32b6de745504a5e5bc3e8fe0e3d9edc\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-system/csi-node-driver-qb29d" podUID="fa4b58f5-7cb3-428f-9da4-44a5cc6627b4" Mar 17 18:53:48.615700 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount2752307481.mount: Deactivated successfully. Mar 17 18:53:48.665168 env[1409]: time="2025-03-17T18:53:48.665108850Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/node:v3.29.1,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Mar 17 18:53:48.671708 env[1409]: time="2025-03-17T18:53:48.671669782Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:feb26d4585d68e875d9bd9bd6c27ea9f2d5c9ed9ef70f8b8cb0ebb0559a1d664,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Mar 17 18:53:48.674311 env[1409]: time="2025-03-17T18:53:48.674278694Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/node:v3.29.1,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Mar 17 18:53:48.678686 env[1409]: time="2025-03-17T18:53:48.678651516Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/node@sha256:99c3917516efe1f807a0cfdf2d14b628b7c5cc6bd8a9ee5a253154f31756bea1,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Mar 17 18:53:48.679109 env[1409]: time="2025-03-17T18:53:48.679076718Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/node:v3.29.1\" returns image reference \"sha256:feb26d4585d68e875d9bd9bd6c27ea9f2d5c9ed9ef70f8b8cb0ebb0559a1d664\"" Mar 17 18:53:48.696802 env[1409]: time="2025-03-17T18:53:48.696761604Z" level=info msg="CreateContainer within sandbox \"3ee88731a74cb4c0c92c7f42f7605894dea6e2110df991043b4acb32a45b36bb\" for container &ContainerMetadata{Name:calico-node,Attempt:0,}" Mar 17 18:53:48.738694 env[1409]: time="2025-03-17T18:53:48.738596609Z" level=info msg="CreateContainer within sandbox \"3ee88731a74cb4c0c92c7f42f7605894dea6e2110df991043b4acb32a45b36bb\" for &ContainerMetadata{Name:calico-node,Attempt:0,} returns container id \"8210af86bf3c1d7b8307d59b92cdaa67dec84cfe373fd9efa32d6fbc32f1d9f2\"" Mar 17 18:53:48.739559 env[1409]: time="2025-03-17T18:53:48.739515513Z" level=info msg="StartContainer for \"8210af86bf3c1d7b8307d59b92cdaa67dec84cfe373fd9efa32d6fbc32f1d9f2\"" Mar 17 18:53:48.759801 systemd[1]: Started cri-containerd-8210af86bf3c1d7b8307d59b92cdaa67dec84cfe373fd9efa32d6fbc32f1d9f2.scope. Mar 17 18:53:48.777000 audit[3469]: AVC avc: denied { perfmon } for pid=3469 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:48.777000 audit[3469]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=0 a1=c00014d6b0 a2=3c a3=7fdf643552e8 items=0 ppid=2903 pid=3469 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:53:48.814132 kernel: audit: type=1400 audit(1742237628.777:1006): avc: denied { perfmon } for pid=3469 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:48.814226 kernel: audit: type=1300 audit(1742237628.777:1006): arch=c000003e syscall=321 success=yes exit=15 a0=0 a1=c00014d6b0 a2=3c a3=7fdf643552e8 items=0 ppid=2903 pid=3469 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:53:48.777000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3832313061663836626633633164376238333037643539623932636461 Mar 17 18:53:48.777000 audit[3469]: AVC avc: denied { bpf } for pid=3469 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:48.846791 kernel: audit: type=1327 audit(1742237628.777:1006): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3832313061663836626633633164376238333037643539623932636461 Mar 17 18:53:48.848574 kernel: audit: type=1400 audit(1742237628.777:1007): avc: denied { bpf } for pid=3469 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:48.848626 kernel: audit: type=1400 audit(1742237628.777:1007): avc: denied { bpf } for pid=3469 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:48.777000 audit[3469]: AVC avc: denied { bpf } for pid=3469 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:48.849693 env[1409]: time="2025-03-17T18:53:48.849662951Z" level=info msg="StartContainer for \"8210af86bf3c1d7b8307d59b92cdaa67dec84cfe373fd9efa32d6fbc32f1d9f2\" returns successfully" Mar 17 18:53:48.777000 audit[3469]: AVC avc: denied { bpf } for pid=3469 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:48.874292 kernel: audit: type=1400 audit(1742237628.777:1007): avc: denied { bpf } for pid=3469 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:48.777000 audit[3469]: AVC avc: denied { perfmon } for pid=3469 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:48.888828 kernel: audit: type=1400 audit(1742237628.777:1007): avc: denied { perfmon } for pid=3469 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:48.890305 kernel: audit: type=1400 audit(1742237628.777:1007): avc: denied { perfmon } for pid=3469 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:48.777000 audit[3469]: AVC avc: denied { perfmon } for pid=3469 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:48.777000 audit[3469]: AVC avc: denied { perfmon } for pid=3469 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:48.916516 kernel: audit: type=1400 audit(1742237628.777:1007): avc: denied { perfmon } for pid=3469 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:48.777000 audit[3469]: AVC avc: denied { perfmon } for pid=3469 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:48.929322 kernel: audit: type=1400 audit(1742237628.777:1007): avc: denied { perfmon } for pid=3469 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:48.777000 audit[3469]: AVC avc: denied { perfmon } for pid=3469 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:48.777000 audit[3469]: AVC avc: denied { bpf } for pid=3469 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:48.777000 audit[3469]: AVC avc: denied { bpf } for pid=3469 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:48.777000 audit: BPF prog-id=134 op=LOAD Mar 17 18:53:48.777000 audit[3469]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c00014d9d8 a2=78 a3=c0002efc58 items=0 ppid=2903 pid=3469 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:53:48.777000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3832313061663836626633633164376238333037643539623932636461 Mar 17 18:53:48.793000 audit[3469]: AVC avc: denied { bpf } for pid=3469 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:48.793000 audit[3469]: AVC avc: denied { bpf } for pid=3469 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:48.793000 audit[3469]: AVC avc: denied { perfmon } for pid=3469 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:48.793000 audit[3469]: AVC avc: denied { perfmon } for pid=3469 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:48.793000 audit[3469]: AVC avc: denied { perfmon } for pid=3469 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:48.793000 audit[3469]: AVC avc: denied { perfmon } for pid=3469 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:48.793000 audit[3469]: AVC avc: denied { perfmon } for pid=3469 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:48.793000 audit[3469]: AVC avc: denied { bpf } for pid=3469 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:48.793000 audit[3469]: AVC avc: denied { bpf } for pid=3469 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:48.793000 audit: BPF prog-id=135 op=LOAD Mar 17 18:53:48.793000 audit[3469]: SYSCALL arch=c000003e syscall=321 success=yes exit=17 a0=5 a1=c00014d770 a2=78 a3=c0002efca8 items=0 ppid=2903 pid=3469 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:53:48.793000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3832313061663836626633633164376238333037643539623932636461 Mar 17 18:53:48.793000 audit: BPF prog-id=135 op=UNLOAD Mar 17 18:53:48.793000 audit: BPF prog-id=134 op=UNLOAD Mar 17 18:53:48.793000 audit[3469]: AVC avc: denied { bpf } for pid=3469 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:48.793000 audit[3469]: AVC avc: denied { bpf } for pid=3469 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:48.793000 audit[3469]: AVC avc: denied { bpf } for pid=3469 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:48.793000 audit[3469]: AVC avc: denied { perfmon } for pid=3469 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:48.793000 audit[3469]: AVC avc: denied { perfmon } for pid=3469 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:48.793000 audit[3469]: AVC avc: denied { perfmon } for pid=3469 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:48.793000 audit[3469]: AVC avc: denied { perfmon } for pid=3469 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:48.793000 audit[3469]: AVC avc: denied { perfmon } for pid=3469 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:48.793000 audit[3469]: AVC avc: denied { bpf } for pid=3469 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:48.793000 audit[3469]: AVC avc: denied { bpf } for pid=3469 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:48.793000 audit: BPF prog-id=136 op=LOAD Mar 17 18:53:48.793000 audit[3469]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c00014dc30 a2=78 a3=c0002efd38 items=0 ppid=2903 pid=3469 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:53:48.793000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3832313061663836626633633164376238333037643539623932636461 Mar 17 18:53:49.104072 kubelet[2450]: I0317 18:53:49.104004 2450 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="calico-system/calico-node-tkh7m" podStartSLOduration=1.211254609 podStartE2EDuration="22.103982086s" podCreationTimestamp="2025-03-17 18:53:27 +0000 UTC" firstStartedPulling="2025-03-17 18:53:27.787178245 +0000 UTC m=+13.944995211" lastFinishedPulling="2025-03-17 18:53:48.679905622 +0000 UTC m=+34.837722688" observedRunningTime="2025-03-17 18:53:49.10283368 +0000 UTC m=+35.260650746" watchObservedRunningTime="2025-03-17 18:53:49.103982086 +0000 UTC m=+35.261799252" Mar 17 18:53:49.266393 kernel: wireguard: WireGuard 1.0.0 loaded. See www.wireguard.com for information. Mar 17 18:53:49.266536 kernel: wireguard: Copyright (C) 2015-2019 Jason A. Donenfeld . All Rights Reserved. Mar 17 18:53:49.599601 waagent[1610]: 2025-03-17T18:53:49.599439Z INFO ExtHandler Fetched a new incarnation for the WireServer goal state [incarnation 2] Mar 17 18:53:49.609896 waagent[1610]: 2025-03-17T18:53:49.609834Z INFO ExtHandler Mar 17 18:53:49.610071 waagent[1610]: 2025-03-17T18:53:49.610012Z INFO ExtHandler Fetched new vmSettings [HostGAPlugin correlation ID: 56630882-5a54-4b62-8699-c6b7f0b43dcc eTag: 12639221228411071026 source: Fabric] Mar 17 18:53:49.610800 waagent[1610]: 2025-03-17T18:53:49.610729Z INFO ExtHandler The vmSettings originated via Fabric; will ignore them. Mar 17 18:53:49.611923 waagent[1610]: 2025-03-17T18:53:49.611861Z INFO ExtHandler Mar 17 18:53:49.612060 waagent[1610]: 2025-03-17T18:53:49.612009Z INFO ExtHandler Fetching full goal state from the WireServer [incarnation 2] Mar 17 18:53:49.695567 waagent[1610]: 2025-03-17T18:53:49.695504Z INFO ExtHandler ExtHandler Downloading artifacts profile blob Mar 17 18:53:49.822058 waagent[1610]: 2025-03-17T18:53:49.821930Z INFO ExtHandler Downloaded certificate {'thumbprint': '4273F8EAE0469C563257ADC2BC89A17F18E8AE59', 'hasPrivateKey': False} Mar 17 18:53:49.823070 waagent[1610]: 2025-03-17T18:53:49.823001Z INFO ExtHandler Downloaded certificate {'thumbprint': '33973ED67367EBECBE26430CF0323625AA7C70E1', 'hasPrivateKey': True} Mar 17 18:53:49.824118 waagent[1610]: 2025-03-17T18:53:49.824046Z INFO ExtHandler Fetch goal state completed Mar 17 18:53:49.825108 waagent[1610]: 2025-03-17T18:53:49.825045Z INFO ExtHandler ExtHandler VM enabled for RSM updates, switching to RSM update mode Mar 17 18:53:49.826367 waagent[1610]: 2025-03-17T18:53:49.826309Z INFO ExtHandler ExtHandler Mar 17 18:53:49.826512 waagent[1610]: 2025-03-17T18:53:49.826460Z INFO ExtHandler ExtHandler ProcessExtensionsGoalState started [incarnation_2 channel: WireServer source: Fabric activity: 4c6c0391-ddeb-4812-82ce-366fdf5d1a0a correlation cc6462cf-81e1-40cf-b38b-6848466980c0 created: 2025-03-17T18:53:41.072784Z] Mar 17 18:53:49.827245 waagent[1610]: 2025-03-17T18:53:49.827184Z INFO ExtHandler ExtHandler No extension handlers found, not processing anything. Mar 17 18:53:49.829004 waagent[1610]: 2025-03-17T18:53:49.828946Z INFO ExtHandler ExtHandler ProcessExtensionsGoalState completed [incarnation_2 2 ms] Mar 17 18:53:50.101922 systemd[1]: run-containerd-runc-k8s.io-8210af86bf3c1d7b8307d59b92cdaa67dec84cfe373fd9efa32d6fbc32f1d9f2-runc.ZA1pNO.mount: Deactivated successfully. Mar 17 18:53:50.563000 audit[3617]: AVC avc: denied { write } for pid=3617 comm="tee" name="fd" dev="proc" ino=29225 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0 Mar 17 18:53:50.563000 audit[3617]: SYSCALL arch=c000003e syscall=257 success=yes exit=3 a0=ffffff9c a1=7ffc84a1fa16 a2=241 a3=1b6 items=1 ppid=3594 pid=3617 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tee" exe="/usr/bin/coreutils" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:53:50.563000 audit: CWD cwd="/etc/service/enabled/cni/log" Mar 17 18:53:50.563000 audit: PATH item=0 name="/dev/fd/63" inode=29214 dev=00:0c mode=010600 ouid=0 ogid=0 rdev=00:00 obj=system_u:system_r:kernel_t:s0 nametype=NORMAL cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Mar 17 18:53:50.563000 audit: PROCTITLE proctitle=2F7573722F62696E2F636F72657574696C73002D2D636F72657574696C732D70726F672D73686562616E673D746565002F7573722F62696E2F746565002F6465762F66642F3633 Mar 17 18:53:50.589000 audit[3626]: AVC avc: denied { write } for pid=3626 comm="tee" name="fd" dev="proc" ino=30090 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0 Mar 17 18:53:50.598000 audit[3630]: AVC avc: denied { write } for pid=3630 comm="tee" name="fd" dev="proc" ino=30099 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0 Mar 17 18:53:50.589000 audit[3626]: SYSCALL arch=c000003e syscall=257 success=yes exit=3 a0=ffffff9c a1=7ffeb6daba14 a2=241 a3=1b6 items=1 ppid=3597 pid=3626 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tee" exe="/usr/bin/coreutils" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:53:50.589000 audit: CWD cwd="/etc/service/enabled/felix/log" Mar 17 18:53:50.589000 audit: PATH item=0 name="/dev/fd/63" inode=29221 dev=00:0c mode=010600 ouid=0 ogid=0 rdev=00:00 obj=system_u:system_r:kernel_t:s0 nametype=NORMAL cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Mar 17 18:53:50.589000 audit: PROCTITLE proctitle=2F7573722F62696E2F636F72657574696C73002D2D636F72657574696C732D70726F672D73686562616E673D746565002F7573722F62696E2F746565002F6465762F66642F3633 Mar 17 18:53:50.598000 audit[3630]: SYSCALL arch=c000003e syscall=257 success=yes exit=3 a0=ffffff9c a1=7fff6741aa05 a2=241 a3=1b6 items=1 ppid=3592 pid=3630 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tee" exe="/usr/bin/coreutils" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:53:50.598000 audit: CWD cwd="/etc/service/enabled/node-status-reporter/log" Mar 17 18:53:50.598000 audit: PATH item=0 name="/dev/fd/63" inode=29229 dev=00:0c mode=010600 ouid=0 ogid=0 rdev=00:00 obj=system_u:system_r:kernel_t:s0 nametype=NORMAL cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Mar 17 18:53:50.598000 audit: PROCTITLE proctitle=2F7573722F62696E2F636F72657574696C73002D2D636F72657574696C732D70726F672D73686562616E673D746565002F7573722F62696E2F746565002F6465762F66642F3633 Mar 17 18:53:50.608000 audit[3647]: AVC avc: denied { write } for pid=3647 comm="tee" name="fd" dev="proc" ino=30105 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0 Mar 17 18:53:50.612000 audit[3652]: AVC avc: denied { write } for pid=3652 comm="tee" name="fd" dev="proc" ino=30108 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0 Mar 17 18:53:50.613000 audit[3645]: AVC avc: denied { write } for pid=3645 comm="tee" name="fd" dev="proc" ino=30111 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0 Mar 17 18:53:50.613000 audit[3645]: SYSCALL arch=c000003e syscall=257 success=yes exit=3 a0=ffffff9c a1=7fff096f2a04 a2=241 a3=1b6 items=1 ppid=3596 pid=3645 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tee" exe="/usr/bin/coreutils" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:53:50.613000 audit: CWD cwd="/etc/service/enabled/allocate-tunnel-addrs/log" Mar 17 18:53:50.613000 audit: PATH item=0 name="/dev/fd/63" inode=30087 dev=00:0c mode=010600 ouid=0 ogid=0 rdev=00:00 obj=system_u:system_r:kernel_t:s0 nametype=NORMAL cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Mar 17 18:53:50.613000 audit: PROCTITLE proctitle=2F7573722F62696E2F636F72657574696C73002D2D636F72657574696C732D70726F672D73686562616E673D746565002F7573722F62696E2F746565002F6465762F66642F3633 Mar 17 18:53:50.608000 audit[3647]: SYSCALL arch=c000003e syscall=257 success=yes exit=3 a0=ffffff9c a1=7ffc96e23a14 a2=241 a3=1b6 items=1 ppid=3588 pid=3647 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tee" exe="/usr/bin/coreutils" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:53:50.608000 audit: CWD cwd="/etc/service/enabled/bird6/log" Mar 17 18:53:50.608000 audit: PATH item=0 name="/dev/fd/63" inode=30093 dev=00:0c mode=010600 ouid=0 ogid=0 rdev=00:00 obj=system_u:system_r:kernel_t:s0 nametype=NORMAL cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Mar 17 18:53:50.608000 audit: PROCTITLE proctitle=2F7573722F62696E2F636F72657574696C73002D2D636F72657574696C732D70726F672D73686562616E673D746565002F7573722F62696E2F746565002F6465762F66642F3633 Mar 17 18:53:50.612000 audit[3652]: SYSCALL arch=c000003e syscall=257 success=yes exit=3 a0=ffffff9c a1=7ffd3402ca14 a2=241 a3=1b6 items=1 ppid=3590 pid=3652 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tee" exe="/usr/bin/coreutils" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:53:50.612000 audit: CWD cwd="/etc/service/enabled/confd/log" Mar 17 18:53:50.612000 audit: PATH item=0 name="/dev/fd/63" inode=30096 dev=00:0c mode=010600 ouid=0 ogid=0 rdev=00:00 obj=system_u:system_r:kernel_t:s0 nametype=NORMAL cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Mar 17 18:53:50.612000 audit: PROCTITLE proctitle=2F7573722F62696E2F636F72657574696C73002D2D636F72657574696C732D70726F672D73686562616E673D746565002F7573722F62696E2F746565002F6465762F66642F3633 Mar 17 18:53:50.644000 audit[3663]: AVC avc: denied { write } for pid=3663 comm="tee" name="fd" dev="proc" ino=29239 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0 Mar 17 18:53:50.644000 audit[3663]: SYSCALL arch=c000003e syscall=257 success=yes exit=3 a0=ffffff9c a1=7fff63bfba15 a2=241 a3=1b6 items=1 ppid=3609 pid=3663 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tee" exe="/usr/bin/coreutils" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:53:50.644000 audit: CWD cwd="/etc/service/enabled/bird/log" Mar 17 18:53:50.644000 audit: PATH item=0 name="/dev/fd/63" inode=30116 dev=00:0c mode=010600 ouid=0 ogid=0 rdev=00:00 obj=system_u:system_r:kernel_t:s0 nametype=NORMAL cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Mar 17 18:53:50.644000 audit: PROCTITLE proctitle=2F7573722F62696E2F636F72657574696C73002D2D636F72657574696C732D70726F672D73686562616E673D746565002F7573722F62696E2F746565002F6465762F66642F3633 Mar 17 18:53:50.849000 audit[3696]: AVC avc: denied { bpf } for pid=3696 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:50.849000 audit[3696]: AVC avc: denied { bpf } for pid=3696 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:50.849000 audit[3696]: AVC avc: denied { perfmon } for pid=3696 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:50.849000 audit[3696]: AVC avc: denied { perfmon } for pid=3696 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:50.849000 audit[3696]: AVC avc: denied { perfmon } for pid=3696 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:50.849000 audit[3696]: AVC avc: denied { perfmon } for pid=3696 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:50.849000 audit[3696]: AVC avc: denied { perfmon } for pid=3696 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:50.849000 audit[3696]: AVC avc: denied { bpf } for pid=3696 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:50.849000 audit[3696]: AVC avc: denied { bpf } for pid=3696 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:50.849000 audit: BPF prog-id=137 op=LOAD Mar 17 18:53:50.849000 audit[3696]: SYSCALL arch=c000003e syscall=321 success=yes exit=3 a0=5 a1=7ffc50ea44b0 a2=98 a3=3 items=0 ppid=3599 pid=3696 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:53:50.849000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Mar 17 18:53:50.849000 audit: BPF prog-id=137 op=UNLOAD Mar 17 18:53:50.850000 audit[3696]: AVC avc: denied { bpf } for pid=3696 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:50.850000 audit[3696]: AVC avc: denied { bpf } for pid=3696 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:50.850000 audit[3696]: AVC avc: denied { perfmon } for pid=3696 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:50.850000 audit[3696]: AVC avc: denied { perfmon } for pid=3696 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:50.850000 audit[3696]: AVC avc: denied { perfmon } for pid=3696 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:50.850000 audit[3696]: AVC avc: denied { perfmon } for pid=3696 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:50.850000 audit[3696]: AVC avc: denied { perfmon } for pid=3696 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:50.850000 audit[3696]: AVC avc: denied { bpf } for pid=3696 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:50.850000 audit[3696]: AVC avc: denied { bpf } for pid=3696 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:50.850000 audit: BPF prog-id=138 op=LOAD Mar 17 18:53:50.850000 audit[3696]: SYSCALL arch=c000003e syscall=321 success=yes exit=4 a0=5 a1=7ffc50ea4290 a2=74 a3=540051 items=0 ppid=3599 pid=3696 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:53:50.850000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Mar 17 18:53:50.851000 audit: BPF prog-id=138 op=UNLOAD Mar 17 18:53:50.851000 audit[3696]: AVC avc: denied { bpf } for pid=3696 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:50.851000 audit[3696]: AVC avc: denied { bpf } for pid=3696 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:50.851000 audit[3696]: AVC avc: denied { perfmon } for pid=3696 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:50.851000 audit[3696]: AVC avc: denied { perfmon } for pid=3696 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:50.851000 audit[3696]: AVC avc: denied { perfmon } for pid=3696 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:50.851000 audit[3696]: AVC avc: denied { perfmon } for pid=3696 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:50.851000 audit[3696]: AVC avc: denied { perfmon } for pid=3696 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:50.851000 audit[3696]: AVC avc: denied { bpf } for pid=3696 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:50.851000 audit[3696]: AVC avc: denied { bpf } for pid=3696 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:50.851000 audit: BPF prog-id=139 op=LOAD Mar 17 18:53:50.851000 audit[3696]: SYSCALL arch=c000003e syscall=321 success=yes exit=4 a0=5 a1=7ffc50ea42c0 a2=94 a3=2 items=0 ppid=3599 pid=3696 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:53:50.851000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Mar 17 18:53:50.851000 audit: BPF prog-id=139 op=UNLOAD Mar 17 18:53:50.968000 audit[3696]: AVC avc: denied { bpf } for pid=3696 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:50.968000 audit[3696]: AVC avc: denied { bpf } for pid=3696 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:50.968000 audit[3696]: AVC avc: denied { perfmon } for pid=3696 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:50.968000 audit[3696]: AVC avc: denied { perfmon } for pid=3696 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:50.968000 audit[3696]: AVC avc: denied { perfmon } for pid=3696 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:50.968000 audit[3696]: AVC avc: denied { perfmon } for pid=3696 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:50.968000 audit[3696]: AVC avc: denied { perfmon } for pid=3696 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:50.968000 audit[3696]: AVC avc: denied { bpf } for pid=3696 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:50.968000 audit[3696]: AVC avc: denied { bpf } for pid=3696 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:50.968000 audit: BPF prog-id=140 op=LOAD Mar 17 18:53:50.968000 audit[3696]: SYSCALL arch=c000003e syscall=321 success=yes exit=4 a0=5 a1=7ffc50ea4180 a2=40 a3=1 items=0 ppid=3599 pid=3696 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:53:50.968000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Mar 17 18:53:50.969000 audit: BPF prog-id=140 op=UNLOAD Mar 17 18:53:50.969000 audit[3696]: AVC avc: denied { perfmon } for pid=3696 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:50.969000 audit[3696]: SYSCALL arch=c000003e syscall=321 success=yes exit=4 a0=0 a1=7ffc50ea4250 a2=50 a3=7ffc50ea4330 items=0 ppid=3599 pid=3696 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:53:50.969000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Mar 17 18:53:50.978000 audit[3696]: AVC avc: denied { bpf } for pid=3696 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:50.978000 audit[3696]: SYSCALL arch=c000003e syscall=321 success=yes exit=4 a0=12 a1=7ffc50ea4190 a2=28 a3=0 items=0 ppid=3599 pid=3696 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:53:50.978000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Mar 17 18:53:50.978000 audit[3696]: AVC avc: denied { bpf } for pid=3696 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:50.978000 audit[3696]: SYSCALL arch=c000003e syscall=321 success=no exit=-22 a0=12 a1=7ffc50ea41c0 a2=28 a3=0 items=0 ppid=3599 pid=3696 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:53:50.978000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Mar 17 18:53:50.978000 audit[3696]: AVC avc: denied { bpf } for pid=3696 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:50.978000 audit[3696]: SYSCALL arch=c000003e syscall=321 success=no exit=-22 a0=12 a1=7ffc50ea40d0 a2=28 a3=0 items=0 ppid=3599 pid=3696 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:53:50.978000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Mar 17 18:53:50.978000 audit[3696]: AVC avc: denied { bpf } for pid=3696 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:50.978000 audit[3696]: SYSCALL arch=c000003e syscall=321 success=yes exit=4 a0=12 a1=7ffc50ea41e0 a2=28 a3=0 items=0 ppid=3599 pid=3696 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:53:50.978000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Mar 17 18:53:50.978000 audit[3696]: AVC avc: denied { bpf } for pid=3696 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:50.978000 audit[3696]: SYSCALL arch=c000003e syscall=321 success=yes exit=4 a0=12 a1=7ffc50ea41c0 a2=28 a3=0 items=0 ppid=3599 pid=3696 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:53:50.978000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Mar 17 18:53:50.978000 audit[3696]: AVC avc: denied { bpf } for pid=3696 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:50.978000 audit[3696]: SYSCALL arch=c000003e syscall=321 success=yes exit=4 a0=12 a1=7ffc50ea41b0 a2=28 a3=0 items=0 ppid=3599 pid=3696 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:53:50.978000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Mar 17 18:53:50.978000 audit[3696]: AVC avc: denied { bpf } for pid=3696 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:50.978000 audit[3696]: SYSCALL arch=c000003e syscall=321 success=yes exit=4 a0=12 a1=7ffc50ea41e0 a2=28 a3=0 items=0 ppid=3599 pid=3696 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:53:50.978000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Mar 17 18:53:50.978000 audit[3696]: AVC avc: denied { bpf } for pid=3696 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:50.978000 audit[3696]: SYSCALL arch=c000003e syscall=321 success=no exit=-22 a0=12 a1=7ffc50ea41c0 a2=28 a3=0 items=0 ppid=3599 pid=3696 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:53:50.978000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Mar 17 18:53:50.978000 audit[3696]: AVC avc: denied { bpf } for pid=3696 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:50.978000 audit[3696]: SYSCALL arch=c000003e syscall=321 success=no exit=-22 a0=12 a1=7ffc50ea41e0 a2=28 a3=0 items=0 ppid=3599 pid=3696 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:53:50.978000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Mar 17 18:53:50.978000 audit[3696]: AVC avc: denied { bpf } for pid=3696 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:50.978000 audit[3696]: SYSCALL arch=c000003e syscall=321 success=no exit=-22 a0=12 a1=7ffc50ea41b0 a2=28 a3=0 items=0 ppid=3599 pid=3696 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:53:50.978000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Mar 17 18:53:50.978000 audit[3696]: AVC avc: denied { bpf } for pid=3696 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:50.978000 audit[3696]: SYSCALL arch=c000003e syscall=321 success=yes exit=4 a0=12 a1=7ffc50ea4220 a2=28 a3=0 items=0 ppid=3599 pid=3696 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:53:50.978000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Mar 17 18:53:50.978000 audit[3696]: AVC avc: denied { perfmon } for pid=3696 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:50.978000 audit[3696]: SYSCALL arch=c000003e syscall=321 success=yes exit=5 a0=0 a1=7ffc50ea3fd0 a2=50 a3=1 items=0 ppid=3599 pid=3696 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:53:50.978000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Mar 17 18:53:50.978000 audit[3696]: AVC avc: denied { bpf } for pid=3696 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:50.978000 audit[3696]: AVC avc: denied { bpf } for pid=3696 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:50.978000 audit[3696]: AVC avc: denied { perfmon } for pid=3696 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:50.978000 audit[3696]: AVC avc: denied { perfmon } for pid=3696 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:50.978000 audit[3696]: AVC avc: denied { perfmon } for pid=3696 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:50.978000 audit[3696]: AVC avc: denied { perfmon } for pid=3696 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:50.978000 audit[3696]: AVC avc: denied { perfmon } for pid=3696 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:50.978000 audit[3696]: AVC avc: denied { bpf } for pid=3696 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:50.978000 audit[3696]: AVC avc: denied { bpf } for pid=3696 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:50.978000 audit: BPF prog-id=141 op=LOAD Mar 17 18:53:50.978000 audit[3696]: SYSCALL arch=c000003e syscall=321 success=yes exit=6 a0=5 a1=7ffc50ea3fd0 a2=94 a3=5 items=0 ppid=3599 pid=3696 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:53:50.978000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Mar 17 18:53:50.978000 audit: BPF prog-id=141 op=UNLOAD Mar 17 18:53:50.978000 audit[3696]: AVC avc: denied { perfmon } for pid=3696 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:50.978000 audit[3696]: SYSCALL arch=c000003e syscall=321 success=yes exit=5 a0=0 a1=7ffc50ea4080 a2=50 a3=1 items=0 ppid=3599 pid=3696 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:53:50.978000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Mar 17 18:53:50.979000 audit[3696]: AVC avc: denied { bpf } for pid=3696 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:50.979000 audit[3696]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=16 a1=7ffc50ea41a0 a2=4 a3=38 items=0 ppid=3599 pid=3696 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:53:50.979000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Mar 17 18:53:50.979000 audit[3696]: AVC avc: denied { bpf } for pid=3696 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:50.979000 audit[3696]: AVC avc: denied { bpf } for pid=3696 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:50.979000 audit[3696]: AVC avc: denied { perfmon } for pid=3696 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:50.979000 audit[3696]: AVC avc: denied { bpf } for pid=3696 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:50.979000 audit[3696]: AVC avc: denied { perfmon } for pid=3696 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:50.979000 audit[3696]: AVC avc: denied { perfmon } for pid=3696 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:50.979000 audit[3696]: AVC avc: denied { perfmon } for pid=3696 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:50.979000 audit[3696]: AVC avc: denied { perfmon } for pid=3696 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:50.979000 audit[3696]: AVC avc: denied { perfmon } for pid=3696 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:50.979000 audit[3696]: AVC avc: denied { bpf } for pid=3696 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:50.979000 audit[3696]: AVC avc: denied { confidentiality } for pid=3696 comm="bpftool" lockdown_reason="use of bpf to read kernel RAM" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=lockdown permissive=0 Mar 17 18:53:50.979000 audit[3696]: SYSCALL arch=c000003e syscall=321 success=no exit=-22 a0=5 a1=7ffc50ea41f0 a2=94 a3=6 items=0 ppid=3599 pid=3696 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:53:50.979000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Mar 17 18:53:50.979000 audit[3696]: AVC avc: denied { bpf } for pid=3696 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:50.979000 audit[3696]: AVC avc: denied { bpf } for pid=3696 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:50.979000 audit[3696]: AVC avc: denied { perfmon } for pid=3696 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:50.979000 audit[3696]: AVC avc: denied { bpf } for pid=3696 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:50.979000 audit[3696]: AVC avc: denied { perfmon } for pid=3696 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:50.979000 audit[3696]: AVC avc: denied { perfmon } for pid=3696 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:50.979000 audit[3696]: AVC avc: denied { perfmon } for pid=3696 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:50.979000 audit[3696]: AVC avc: denied { perfmon } for pid=3696 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:50.979000 audit[3696]: AVC avc: denied { perfmon } for pid=3696 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:50.979000 audit[3696]: AVC avc: denied { bpf } for pid=3696 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:50.979000 audit[3696]: AVC avc: denied { confidentiality } for pid=3696 comm="bpftool" lockdown_reason="use of bpf to read kernel RAM" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=lockdown permissive=0 Mar 17 18:53:50.979000 audit[3696]: SYSCALL arch=c000003e syscall=321 success=no exit=-22 a0=5 a1=7ffc50ea39a0 a2=94 a3=83 items=0 ppid=3599 pid=3696 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:53:50.979000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Mar 17 18:53:50.979000 audit[3696]: AVC avc: denied { bpf } for pid=3696 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:50.979000 audit[3696]: AVC avc: denied { bpf } for pid=3696 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:50.979000 audit[3696]: AVC avc: denied { perfmon } for pid=3696 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:50.979000 audit[3696]: AVC avc: denied { bpf } for pid=3696 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:50.979000 audit[3696]: AVC avc: denied { perfmon } for pid=3696 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:50.979000 audit[3696]: AVC avc: denied { perfmon } for pid=3696 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:50.979000 audit[3696]: AVC avc: denied { perfmon } for pid=3696 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:50.979000 audit[3696]: AVC avc: denied { perfmon } for pid=3696 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:50.979000 audit[3696]: AVC avc: denied { perfmon } for pid=3696 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:50.979000 audit[3696]: AVC avc: denied { bpf } for pid=3696 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:50.979000 audit[3696]: AVC avc: denied { confidentiality } for pid=3696 comm="bpftool" lockdown_reason="use of bpf to read kernel RAM" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=lockdown permissive=0 Mar 17 18:53:50.979000 audit[3696]: SYSCALL arch=c000003e syscall=321 success=no exit=-22 a0=5 a1=7ffc50ea39a0 a2=94 a3=83 items=0 ppid=3599 pid=3696 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:53:50.979000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Mar 17 18:53:50.990000 audit[3699]: AVC avc: denied { bpf } for pid=3699 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:50.990000 audit[3699]: AVC avc: denied { bpf } for pid=3699 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:50.990000 audit[3699]: AVC avc: denied { perfmon } for pid=3699 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:50.990000 audit[3699]: AVC avc: denied { perfmon } for pid=3699 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:50.990000 audit[3699]: AVC avc: denied { perfmon } for pid=3699 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:50.990000 audit[3699]: AVC avc: denied { perfmon } for pid=3699 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:50.990000 audit[3699]: AVC avc: denied { perfmon } for pid=3699 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:50.990000 audit[3699]: AVC avc: denied { bpf } for pid=3699 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:50.990000 audit[3699]: AVC avc: denied { bpf } for pid=3699 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:50.990000 audit: BPF prog-id=142 op=LOAD Mar 17 18:53:50.990000 audit[3699]: SYSCALL arch=c000003e syscall=321 success=yes exit=3 a0=5 a1=7fffe4a4fbc0 a2=98 a3=1999999999999999 items=0 ppid=3599 pid=3699 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:53:50.990000 audit: PROCTITLE proctitle=627066746F6F6C006D617000637265617465002F7379732F66732F6270662F63616C69636F2F63616C69636F5F6661696C736166655F706F7274735F763100747970650068617368006B657900340076616C7565003100656E7472696573003635353335006E616D650063616C69636F5F6661696C736166655F706F7274735F Mar 17 18:53:50.990000 audit: BPF prog-id=142 op=UNLOAD Mar 17 18:53:50.990000 audit[3699]: AVC avc: denied { bpf } for pid=3699 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:50.990000 audit[3699]: AVC avc: denied { bpf } for pid=3699 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:50.990000 audit[3699]: AVC avc: denied { perfmon } for pid=3699 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:50.990000 audit[3699]: AVC avc: denied { perfmon } for pid=3699 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:50.990000 audit[3699]: AVC avc: denied { perfmon } for pid=3699 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:50.990000 audit[3699]: AVC avc: denied { perfmon } for pid=3699 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:50.990000 audit[3699]: AVC avc: denied { perfmon } for pid=3699 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:50.990000 audit[3699]: AVC avc: denied { bpf } for pid=3699 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:50.990000 audit[3699]: AVC avc: denied { bpf } for pid=3699 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:50.990000 audit: BPF prog-id=143 op=LOAD Mar 17 18:53:50.990000 audit[3699]: SYSCALL arch=c000003e syscall=321 success=yes exit=3 a0=5 a1=7fffe4a4faa0 a2=74 a3=ffff items=0 ppid=3599 pid=3699 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:53:50.990000 audit: PROCTITLE proctitle=627066746F6F6C006D617000637265617465002F7379732F66732F6270662F63616C69636F2F63616C69636F5F6661696C736166655F706F7274735F763100747970650068617368006B657900340076616C7565003100656E7472696573003635353335006E616D650063616C69636F5F6661696C736166655F706F7274735F Mar 17 18:53:50.990000 audit: BPF prog-id=143 op=UNLOAD Mar 17 18:53:50.990000 audit[3699]: AVC avc: denied { bpf } for pid=3699 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:50.990000 audit[3699]: AVC avc: denied { bpf } for pid=3699 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:50.990000 audit[3699]: AVC avc: denied { perfmon } for pid=3699 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:50.990000 audit[3699]: AVC avc: denied { perfmon } for pid=3699 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:50.990000 audit[3699]: AVC avc: denied { perfmon } for pid=3699 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:50.990000 audit[3699]: AVC avc: denied { perfmon } for pid=3699 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:50.990000 audit[3699]: AVC avc: denied { perfmon } for pid=3699 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:50.990000 audit[3699]: AVC avc: denied { bpf } for pid=3699 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:50.990000 audit[3699]: AVC avc: denied { bpf } for pid=3699 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:50.990000 audit: BPF prog-id=144 op=LOAD Mar 17 18:53:50.990000 audit[3699]: SYSCALL arch=c000003e syscall=321 success=yes exit=3 a0=5 a1=7fffe4a4fae0 a2=40 a3=7fffe4a4fcc0 items=0 ppid=3599 pid=3699 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:53:50.990000 audit: PROCTITLE proctitle=627066746F6F6C006D617000637265617465002F7379732F66732F6270662F63616C69636F2F63616C69636F5F6661696C736166655F706F7274735F763100747970650068617368006B657900340076616C7565003100656E7472696573003635353335006E616D650063616C69636F5F6661696C736166655F706F7274735F Mar 17 18:53:50.990000 audit: BPF prog-id=144 op=UNLOAD Mar 17 18:53:51.086000 audit[3725]: AVC avc: denied { bpf } for pid=3725 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:51.086000 audit[3725]: AVC avc: denied { bpf } for pid=3725 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:51.086000 audit[3725]: AVC avc: denied { perfmon } for pid=3725 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:51.086000 audit[3725]: AVC avc: denied { perfmon } for pid=3725 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:51.086000 audit[3725]: AVC avc: denied { perfmon } for pid=3725 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:51.086000 audit[3725]: AVC avc: denied { perfmon } for pid=3725 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:51.086000 audit[3725]: AVC avc: denied { perfmon } for pid=3725 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:51.086000 audit[3725]: AVC avc: denied { bpf } for pid=3725 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:51.086000 audit[3725]: AVC avc: denied { bpf } for pid=3725 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:51.086000 audit: BPF prog-id=145 op=LOAD Mar 17 18:53:51.086000 audit[3725]: SYSCALL arch=c000003e syscall=321 success=yes exit=3 a0=5 a1=7ffdcf543960 a2=98 a3=ffffffff items=0 ppid=3599 pid=3725 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:53:51.086000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Mar 17 18:53:51.086000 audit: BPF prog-id=145 op=UNLOAD Mar 17 18:53:51.086000 audit[3725]: AVC avc: denied { bpf } for pid=3725 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:51.086000 audit[3725]: AVC avc: denied { bpf } for pid=3725 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:51.086000 audit[3725]: AVC avc: denied { perfmon } for pid=3725 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:51.086000 audit[3725]: AVC avc: denied { perfmon } for pid=3725 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:51.086000 audit[3725]: AVC avc: denied { perfmon } for pid=3725 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:51.086000 audit[3725]: AVC avc: denied { perfmon } for pid=3725 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:51.086000 audit[3725]: AVC avc: denied { perfmon } for pid=3725 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:51.086000 audit[3725]: AVC avc: denied { bpf } for pid=3725 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:51.086000 audit[3725]: AVC avc: denied { bpf } for pid=3725 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:51.086000 audit: BPF prog-id=146 op=LOAD Mar 17 18:53:51.086000 audit[3725]: SYSCALL arch=c000003e syscall=321 success=yes exit=3 a0=5 a1=7ffdcf543770 a2=74 a3=540051 items=0 ppid=3599 pid=3725 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:53:51.086000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Mar 17 18:53:51.086000 audit: BPF prog-id=146 op=UNLOAD Mar 17 18:53:51.086000 audit[3725]: AVC avc: denied { bpf } for pid=3725 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:51.086000 audit[3725]: AVC avc: denied { bpf } for pid=3725 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:51.086000 audit[3725]: AVC avc: denied { perfmon } for pid=3725 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:51.086000 audit[3725]: AVC avc: denied { perfmon } for pid=3725 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:51.086000 audit[3725]: AVC avc: denied { perfmon } for pid=3725 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:51.086000 audit[3725]: AVC avc: denied { perfmon } for pid=3725 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:51.086000 audit[3725]: AVC avc: denied { perfmon } for pid=3725 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:51.086000 audit[3725]: AVC avc: denied { bpf } for pid=3725 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:51.086000 audit[3725]: AVC avc: denied { bpf } for pid=3725 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:51.086000 audit: BPF prog-id=147 op=LOAD Mar 17 18:53:51.086000 audit[3725]: SYSCALL arch=c000003e syscall=321 success=yes exit=3 a0=5 a1=7ffdcf5437a0 a2=94 a3=2 items=0 ppid=3599 pid=3725 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:53:51.086000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Mar 17 18:53:51.086000 audit: BPF prog-id=147 op=UNLOAD Mar 17 18:53:51.086000 audit[3725]: AVC avc: denied { bpf } for pid=3725 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:51.086000 audit[3725]: SYSCALL arch=c000003e syscall=321 success=yes exit=3 a0=12 a1=7ffdcf543670 a2=28 a3=0 items=0 ppid=3599 pid=3725 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:53:51.086000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Mar 17 18:53:51.086000 audit[3725]: AVC avc: denied { bpf } for pid=3725 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:51.086000 audit[3725]: SYSCALL arch=c000003e syscall=321 success=no exit=-22 a0=12 a1=7ffdcf5436a0 a2=28 a3=0 items=0 ppid=3599 pid=3725 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:53:51.086000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Mar 17 18:53:51.087000 audit[3725]: AVC avc: denied { bpf } for pid=3725 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:51.087000 audit[3725]: SYSCALL arch=c000003e syscall=321 success=no exit=-22 a0=12 a1=7ffdcf5435b0 a2=28 a3=0 items=0 ppid=3599 pid=3725 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:53:51.087000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Mar 17 18:53:51.087000 audit[3725]: AVC avc: denied { bpf } for pid=3725 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:51.087000 audit[3725]: SYSCALL arch=c000003e syscall=321 success=yes exit=3 a0=12 a1=7ffdcf5436c0 a2=28 a3=0 items=0 ppid=3599 pid=3725 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:53:51.087000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Mar 17 18:53:51.087000 audit[3725]: AVC avc: denied { bpf } for pid=3725 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:51.087000 audit[3725]: SYSCALL arch=c000003e syscall=321 success=yes exit=3 a0=12 a1=7ffdcf5436a0 a2=28 a3=0 items=0 ppid=3599 pid=3725 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:53:51.087000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Mar 17 18:53:51.087000 audit[3725]: AVC avc: denied { bpf } for pid=3725 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:51.087000 audit[3725]: SYSCALL arch=c000003e syscall=321 success=yes exit=3 a0=12 a1=7ffdcf543690 a2=28 a3=0 items=0 ppid=3599 pid=3725 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:53:51.087000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Mar 17 18:53:51.087000 audit[3725]: AVC avc: denied { bpf } for pid=3725 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:51.087000 audit[3725]: SYSCALL arch=c000003e syscall=321 success=yes exit=3 a0=12 a1=7ffdcf5436c0 a2=28 a3=0 items=0 ppid=3599 pid=3725 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:53:51.087000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Mar 17 18:53:51.087000 audit[3725]: AVC avc: denied { bpf } for pid=3725 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:51.087000 audit[3725]: SYSCALL arch=c000003e syscall=321 success=no exit=-22 a0=12 a1=7ffdcf5436a0 a2=28 a3=0 items=0 ppid=3599 pid=3725 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:53:51.087000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Mar 17 18:53:51.087000 audit[3725]: AVC avc: denied { bpf } for pid=3725 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:51.087000 audit[3725]: SYSCALL arch=c000003e syscall=321 success=no exit=-22 a0=12 a1=7ffdcf5436c0 a2=28 a3=0 items=0 ppid=3599 pid=3725 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:53:51.087000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Mar 17 18:53:51.087000 audit[3725]: AVC avc: denied { bpf } for pid=3725 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:51.087000 audit[3725]: SYSCALL arch=c000003e syscall=321 success=no exit=-22 a0=12 a1=7ffdcf543690 a2=28 a3=0 items=0 ppid=3599 pid=3725 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:53:51.087000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Mar 17 18:53:51.087000 audit[3725]: AVC avc: denied { bpf } for pid=3725 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:51.087000 audit[3725]: SYSCALL arch=c000003e syscall=321 success=yes exit=3 a0=12 a1=7ffdcf543700 a2=28 a3=0 items=0 ppid=3599 pid=3725 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:53:51.087000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Mar 17 18:53:51.087000 audit[3725]: AVC avc: denied { bpf } for pid=3725 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:51.087000 audit[3725]: AVC avc: denied { bpf } for pid=3725 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:51.087000 audit[3725]: AVC avc: denied { perfmon } for pid=3725 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:51.087000 audit[3725]: AVC avc: denied { perfmon } for pid=3725 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:51.087000 audit[3725]: AVC avc: denied { perfmon } for pid=3725 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:51.087000 audit[3725]: AVC avc: denied { perfmon } for pid=3725 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:51.087000 audit[3725]: AVC avc: denied { perfmon } for pid=3725 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:51.087000 audit[3725]: AVC avc: denied { bpf } for pid=3725 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:51.087000 audit[3725]: AVC avc: denied { bpf } for pid=3725 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:51.087000 audit: BPF prog-id=148 op=LOAD Mar 17 18:53:51.087000 audit[3725]: SYSCALL arch=c000003e syscall=321 success=yes exit=6 a0=5 a1=7ffdcf543570 a2=40 a3=0 items=0 ppid=3599 pid=3725 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:53:51.087000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Mar 17 18:53:51.087000 audit: BPF prog-id=148 op=UNLOAD Mar 17 18:53:51.088000 audit[3725]: AVC avc: denied { bpf } for pid=3725 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:51.088000 audit[3725]: SYSCALL arch=c000003e syscall=321 success=no exit=-22 a0=0 a1=7ffdcf543560 a2=50 a3=2800 items=0 ppid=3599 pid=3725 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:53:51.088000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Mar 17 18:53:51.091000 audit[3725]: AVC avc: denied { bpf } for pid=3725 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:51.091000 audit[3725]: SYSCALL arch=c000003e syscall=321 success=yes exit=6 a0=0 a1=7ffdcf543560 a2=50 a3=2800 items=0 ppid=3599 pid=3725 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:53:51.091000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Mar 17 18:53:51.091000 audit[3725]: AVC avc: denied { bpf } for pid=3725 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:51.091000 audit[3725]: AVC avc: denied { bpf } for pid=3725 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:51.091000 audit[3725]: AVC avc: denied { bpf } for pid=3725 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:51.091000 audit[3725]: AVC avc: denied { perfmon } for pid=3725 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:51.091000 audit[3725]: AVC avc: denied { perfmon } for pid=3725 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:51.091000 audit[3725]: AVC avc: denied { perfmon } for pid=3725 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:51.091000 audit[3725]: AVC avc: denied { perfmon } for pid=3725 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:51.091000 audit[3725]: AVC avc: denied { perfmon } for pid=3725 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:51.091000 audit[3725]: AVC avc: denied { bpf } for pid=3725 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:51.091000 audit[3725]: AVC avc: denied { bpf } for pid=3725 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:51.091000 audit: BPF prog-id=149 op=LOAD Mar 17 18:53:51.091000 audit[3725]: SYSCALL arch=c000003e syscall=321 success=yes exit=6 a0=5 a1=7ffdcf542d80 a2=94 a3=2 items=0 ppid=3599 pid=3725 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:53:51.091000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Mar 17 18:53:51.091000 audit: BPF prog-id=149 op=UNLOAD Mar 17 18:53:51.091000 audit[3725]: AVC avc: denied { bpf } for pid=3725 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:51.091000 audit[3725]: AVC avc: denied { bpf } for pid=3725 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:51.091000 audit[3725]: AVC avc: denied { bpf } for pid=3725 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:51.091000 audit[3725]: AVC avc: denied { perfmon } for pid=3725 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:51.091000 audit[3725]: AVC avc: denied { perfmon } for pid=3725 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:51.091000 audit[3725]: AVC avc: denied { perfmon } for pid=3725 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:51.091000 audit[3725]: AVC avc: denied { perfmon } for pid=3725 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:51.091000 audit[3725]: AVC avc: denied { perfmon } for pid=3725 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:51.091000 audit[3725]: AVC avc: denied { bpf } for pid=3725 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:51.091000 audit[3725]: AVC avc: denied { bpf } for pid=3725 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:51.091000 audit: BPF prog-id=150 op=LOAD Mar 17 18:53:51.091000 audit[3725]: SYSCALL arch=c000003e syscall=321 success=yes exit=6 a0=5 a1=7ffdcf542e80 a2=94 a3=2d items=0 ppid=3599 pid=3725 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:53:51.091000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Mar 17 18:53:51.095000 audit[3729]: AVC avc: denied { bpf } for pid=3729 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:51.095000 audit[3729]: AVC avc: denied { bpf } for pid=3729 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:51.095000 audit[3729]: AVC avc: denied { perfmon } for pid=3729 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:51.095000 audit[3729]: AVC avc: denied { perfmon } for pid=3729 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:51.095000 audit[3729]: AVC avc: denied { perfmon } for pid=3729 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:51.095000 audit[3729]: AVC avc: denied { perfmon } for pid=3729 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:51.095000 audit[3729]: AVC avc: denied { perfmon } for pid=3729 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:51.095000 audit[3729]: AVC avc: denied { bpf } for pid=3729 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:51.095000 audit[3729]: AVC avc: denied { bpf } for pid=3729 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:51.095000 audit: BPF prog-id=151 op=LOAD Mar 17 18:53:51.095000 audit[3729]: SYSCALL arch=c000003e syscall=321 success=yes exit=3 a0=5 a1=7ffccc49a530 a2=98 a3=0 items=0 ppid=3599 pid=3729 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:53:51.095000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Mar 17 18:53:51.095000 audit: BPF prog-id=151 op=UNLOAD Mar 17 18:53:51.095000 audit[3729]: AVC avc: denied { bpf } for pid=3729 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:51.095000 audit[3729]: AVC avc: denied { bpf } for pid=3729 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:51.095000 audit[3729]: AVC avc: denied { perfmon } for pid=3729 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:51.095000 audit[3729]: AVC avc: denied { perfmon } for pid=3729 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:51.095000 audit[3729]: AVC avc: denied { perfmon } for pid=3729 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:51.095000 audit[3729]: AVC avc: denied { perfmon } for pid=3729 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:51.095000 audit[3729]: AVC avc: denied { perfmon } for pid=3729 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:51.095000 audit[3729]: AVC avc: denied { bpf } for pid=3729 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:51.095000 audit[3729]: AVC avc: denied { bpf } for pid=3729 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:51.095000 audit: BPF prog-id=152 op=LOAD Mar 17 18:53:51.095000 audit[3729]: SYSCALL arch=c000003e syscall=321 success=yes exit=4 a0=5 a1=7ffccc49a310 a2=74 a3=540051 items=0 ppid=3599 pid=3729 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:53:51.095000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Mar 17 18:53:51.095000 audit: BPF prog-id=152 op=UNLOAD Mar 17 18:53:51.095000 audit[3729]: AVC avc: denied { bpf } for pid=3729 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:51.095000 audit[3729]: AVC avc: denied { bpf } for pid=3729 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:51.095000 audit[3729]: AVC avc: denied { perfmon } for pid=3729 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:51.095000 audit[3729]: AVC avc: denied { perfmon } for pid=3729 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:51.095000 audit[3729]: AVC avc: denied { perfmon } for pid=3729 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:51.095000 audit[3729]: AVC avc: denied { perfmon } for pid=3729 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:51.095000 audit[3729]: AVC avc: denied { perfmon } for pid=3729 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:51.095000 audit[3729]: AVC avc: denied { bpf } for pid=3729 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:51.095000 audit[3729]: AVC avc: denied { bpf } for pid=3729 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:51.095000 audit: BPF prog-id=153 op=LOAD Mar 17 18:53:51.095000 audit[3729]: SYSCALL arch=c000003e syscall=321 success=yes exit=4 a0=5 a1=7ffccc49a340 a2=94 a3=2 items=0 ppid=3599 pid=3729 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:53:51.095000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Mar 17 18:53:51.096000 audit: BPF prog-id=153 op=UNLOAD Mar 17 18:53:51.146498 systemd-networkd[1562]: vxlan.calico: Link UP Mar 17 18:53:51.146506 systemd-networkd[1562]: vxlan.calico: Gained carrier Mar 17 18:53:51.243000 audit[3729]: AVC avc: denied { bpf } for pid=3729 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:51.243000 audit[3729]: AVC avc: denied { bpf } for pid=3729 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:51.243000 audit[3729]: AVC avc: denied { perfmon } for pid=3729 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:51.243000 audit[3729]: AVC avc: denied { perfmon } for pid=3729 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:51.243000 audit[3729]: AVC avc: denied { perfmon } for pid=3729 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:51.243000 audit[3729]: AVC avc: denied { perfmon } for pid=3729 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:51.243000 audit[3729]: AVC avc: denied { perfmon } for pid=3729 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:51.243000 audit[3729]: AVC avc: denied { bpf } for pid=3729 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:51.243000 audit[3729]: AVC avc: denied { bpf } for pid=3729 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:51.243000 audit: BPF prog-id=154 op=LOAD Mar 17 18:53:51.243000 audit[3729]: SYSCALL arch=c000003e syscall=321 success=yes exit=4 a0=5 a1=7ffccc49a200 a2=40 a3=1 items=0 ppid=3599 pid=3729 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:53:51.243000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Mar 17 18:53:51.244000 audit: BPF prog-id=154 op=UNLOAD Mar 17 18:53:51.244000 audit[3729]: AVC avc: denied { perfmon } for pid=3729 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:51.244000 audit[3729]: SYSCALL arch=c000003e syscall=321 success=yes exit=4 a0=0 a1=7ffccc49a2d0 a2=50 a3=7ffccc49a3b0 items=0 ppid=3599 pid=3729 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:53:51.244000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Mar 17 18:53:51.253000 audit[3729]: AVC avc: denied { bpf } for pid=3729 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:51.253000 audit[3729]: SYSCALL arch=c000003e syscall=321 success=yes exit=4 a0=12 a1=7ffccc49a210 a2=28 a3=0 items=0 ppid=3599 pid=3729 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:53:51.253000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Mar 17 18:53:51.253000 audit[3729]: AVC avc: denied { bpf } for pid=3729 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:51.253000 audit[3729]: SYSCALL arch=c000003e syscall=321 success=no exit=-22 a0=12 a1=7ffccc49a240 a2=28 a3=0 items=0 ppid=3599 pid=3729 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:53:51.253000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Mar 17 18:53:51.253000 audit[3729]: AVC avc: denied { bpf } for pid=3729 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:51.253000 audit[3729]: SYSCALL arch=c000003e syscall=321 success=no exit=-22 a0=12 a1=7ffccc49a150 a2=28 a3=0 items=0 ppid=3599 pid=3729 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:53:51.253000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Mar 17 18:53:51.253000 audit[3729]: AVC avc: denied { bpf } for pid=3729 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:51.253000 audit[3729]: SYSCALL arch=c000003e syscall=321 success=yes exit=4 a0=12 a1=7ffccc49a260 a2=28 a3=0 items=0 ppid=3599 pid=3729 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:53:51.253000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Mar 17 18:53:51.253000 audit[3729]: AVC avc: denied { bpf } for pid=3729 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:51.253000 audit[3729]: SYSCALL arch=c000003e syscall=321 success=yes exit=4 a0=12 a1=7ffccc49a240 a2=28 a3=0 items=0 ppid=3599 pid=3729 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:53:51.253000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Mar 17 18:53:51.253000 audit[3729]: AVC avc: denied { bpf } for pid=3729 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:51.253000 audit[3729]: SYSCALL arch=c000003e syscall=321 success=yes exit=4 a0=12 a1=7ffccc49a230 a2=28 a3=0 items=0 ppid=3599 pid=3729 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:53:51.253000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Mar 17 18:53:51.253000 audit[3729]: AVC avc: denied { bpf } for pid=3729 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:51.253000 audit[3729]: SYSCALL arch=c000003e syscall=321 success=yes exit=4 a0=12 a1=7ffccc49a260 a2=28 a3=0 items=0 ppid=3599 pid=3729 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:53:51.253000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Mar 17 18:53:51.253000 audit[3729]: AVC avc: denied { bpf } for pid=3729 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:51.253000 audit[3729]: SYSCALL arch=c000003e syscall=321 success=no exit=-22 a0=12 a1=7ffccc49a240 a2=28 a3=0 items=0 ppid=3599 pid=3729 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:53:51.253000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Mar 17 18:53:51.253000 audit[3729]: AVC avc: denied { bpf } for pid=3729 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:51.253000 audit[3729]: SYSCALL arch=c000003e syscall=321 success=no exit=-22 a0=12 a1=7ffccc49a260 a2=28 a3=0 items=0 ppid=3599 pid=3729 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:53:51.253000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Mar 17 18:53:51.253000 audit[3729]: AVC avc: denied { bpf } for pid=3729 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:51.253000 audit[3729]: SYSCALL arch=c000003e syscall=321 success=no exit=-22 a0=12 a1=7ffccc49a230 a2=28 a3=0 items=0 ppid=3599 pid=3729 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:53:51.253000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Mar 17 18:53:51.253000 audit[3729]: AVC avc: denied { bpf } for pid=3729 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:51.253000 audit[3729]: SYSCALL arch=c000003e syscall=321 success=yes exit=4 a0=12 a1=7ffccc49a2a0 a2=28 a3=0 items=0 ppid=3599 pid=3729 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:53:51.253000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Mar 17 18:53:51.254000 audit[3729]: AVC avc: denied { perfmon } for pid=3729 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:51.254000 audit[3729]: SYSCALL arch=c000003e syscall=321 success=yes exit=5 a0=0 a1=7ffccc49a050 a2=50 a3=1 items=0 ppid=3599 pid=3729 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:53:51.254000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Mar 17 18:53:51.254000 audit[3729]: AVC avc: denied { bpf } for pid=3729 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:51.254000 audit[3729]: AVC avc: denied { bpf } for pid=3729 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:51.254000 audit[3729]: AVC avc: denied { perfmon } for pid=3729 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:51.254000 audit[3729]: AVC avc: denied { perfmon } for pid=3729 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:51.254000 audit[3729]: AVC avc: denied { perfmon } for pid=3729 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:51.254000 audit[3729]: AVC avc: denied { perfmon } for pid=3729 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:51.254000 audit[3729]: AVC avc: denied { perfmon } for pid=3729 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:51.254000 audit[3729]: AVC avc: denied { bpf } for pid=3729 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:51.254000 audit[3729]: AVC avc: denied { bpf } for pid=3729 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:51.254000 audit: BPF prog-id=155 op=LOAD Mar 17 18:53:51.254000 audit[3729]: SYSCALL arch=c000003e syscall=321 success=yes exit=6 a0=5 a1=7ffccc49a050 a2=94 a3=5 items=0 ppid=3599 pid=3729 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:53:51.254000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Mar 17 18:53:51.254000 audit: BPF prog-id=155 op=UNLOAD Mar 17 18:53:51.254000 audit[3729]: AVC avc: denied { perfmon } for pid=3729 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:51.254000 audit[3729]: SYSCALL arch=c000003e syscall=321 success=yes exit=5 a0=0 a1=7ffccc49a100 a2=50 a3=1 items=0 ppid=3599 pid=3729 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:53:51.254000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Mar 17 18:53:51.254000 audit[3729]: AVC avc: denied { bpf } for pid=3729 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:51.254000 audit[3729]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=16 a1=7ffccc49a220 a2=4 a3=38 items=0 ppid=3599 pid=3729 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:53:51.254000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Mar 17 18:53:51.254000 audit[3729]: AVC avc: denied { bpf } for pid=3729 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:51.254000 audit[3729]: AVC avc: denied { bpf } for pid=3729 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:51.254000 audit[3729]: AVC avc: denied { perfmon } for pid=3729 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:51.254000 audit[3729]: AVC avc: denied { bpf } for pid=3729 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:51.254000 audit[3729]: AVC avc: denied { perfmon } for pid=3729 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:51.254000 audit[3729]: AVC avc: denied { perfmon } for pid=3729 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:51.254000 audit[3729]: AVC avc: denied { perfmon } for pid=3729 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:51.254000 audit[3729]: AVC avc: denied { perfmon } for pid=3729 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:51.254000 audit[3729]: AVC avc: denied { perfmon } for pid=3729 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:51.254000 audit[3729]: AVC avc: denied { bpf } for pid=3729 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:51.254000 audit[3729]: AVC avc: denied { confidentiality } for pid=3729 comm="bpftool" lockdown_reason="use of bpf to read kernel RAM" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=lockdown permissive=0 Mar 17 18:53:51.254000 audit[3729]: SYSCALL arch=c000003e syscall=321 success=no exit=-22 a0=5 a1=7ffccc49a270 a2=94 a3=6 items=0 ppid=3599 pid=3729 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:53:51.254000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Mar 17 18:53:51.254000 audit[3729]: AVC avc: denied { bpf } for pid=3729 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:51.254000 audit[3729]: AVC avc: denied { bpf } for pid=3729 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:51.254000 audit[3729]: AVC avc: denied { perfmon } for pid=3729 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:51.254000 audit[3729]: AVC avc: denied { bpf } for pid=3729 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:51.254000 audit[3729]: AVC avc: denied { perfmon } for pid=3729 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:51.254000 audit[3729]: AVC avc: denied { perfmon } for pid=3729 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:51.254000 audit[3729]: AVC avc: denied { perfmon } for pid=3729 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:51.254000 audit[3729]: AVC avc: denied { perfmon } for pid=3729 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:51.254000 audit[3729]: AVC avc: denied { perfmon } for pid=3729 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:51.254000 audit[3729]: AVC avc: denied { bpf } for pid=3729 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:51.254000 audit[3729]: AVC avc: denied { confidentiality } for pid=3729 comm="bpftool" lockdown_reason="use of bpf to read kernel RAM" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=lockdown permissive=0 Mar 17 18:53:51.254000 audit[3729]: SYSCALL arch=c000003e syscall=321 success=no exit=-22 a0=5 a1=7ffccc499a20 a2=94 a3=83 items=0 ppid=3599 pid=3729 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:53:51.254000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Mar 17 18:53:51.254000 audit[3729]: AVC avc: denied { bpf } for pid=3729 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:51.254000 audit[3729]: AVC avc: denied { bpf } for pid=3729 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:51.254000 audit[3729]: AVC avc: denied { perfmon } for pid=3729 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:51.254000 audit[3729]: AVC avc: denied { bpf } for pid=3729 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:51.254000 audit[3729]: AVC avc: denied { perfmon } for pid=3729 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:51.254000 audit[3729]: AVC avc: denied { perfmon } for pid=3729 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:51.254000 audit[3729]: AVC avc: denied { perfmon } for pid=3729 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:51.254000 audit[3729]: AVC avc: denied { perfmon } for pid=3729 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:51.254000 audit[3729]: SYSCALL arch=c000003e syscall=321 success=no exit=-22 a0=5 a1=7ffccc499a20 a2=94 a3=83 items=0 ppid=3599 pid=3729 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:53:51.254000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Mar 17 18:53:51.255000 audit[3729]: AVC avc: denied { bpf } for pid=3729 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:51.255000 audit[3729]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=7ffccc49b460 a2=10 a3=f1f00800 items=0 ppid=3599 pid=3729 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:53:51.255000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Mar 17 18:53:51.255000 audit[3729]: AVC avc: denied { bpf } for pid=3729 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:51.255000 audit[3729]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=7ffccc49b300 a2=10 a3=3 items=0 ppid=3599 pid=3729 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:53:51.255000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Mar 17 18:53:51.255000 audit[3729]: AVC avc: denied { bpf } for pid=3729 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:51.255000 audit[3729]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=7ffccc49b2a0 a2=10 a3=3 items=0 ppid=3599 pid=3729 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:53:51.255000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Mar 17 18:53:51.255000 audit[3729]: AVC avc: denied { bpf } for pid=3729 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:51.255000 audit[3729]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=7ffccc49b2a0 a2=10 a3=7 items=0 ppid=3599 pid=3729 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:53:51.255000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Mar 17 18:53:51.262000 audit: BPF prog-id=150 op=UNLOAD Mar 17 18:53:51.431000 audit[3759]: NETFILTER_CFG table=nat:100 family=2 entries=15 op=nft_register_chain pid=3759 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Mar 17 18:53:51.431000 audit[3760]: NETFILTER_CFG table=mangle:101 family=2 entries=16 op=nft_register_chain pid=3760 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Mar 17 18:53:51.431000 audit[3760]: SYSCALL arch=c000003e syscall=46 success=yes exit=6868 a0=3 a1=7ffcc0c7c820 a2=0 a3=7ffcc0c7c80c items=0 ppid=3599 pid=3760 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:53:51.431000 audit[3759]: SYSCALL arch=c000003e syscall=46 success=yes exit=5084 a0=3 a1=7fff24a69a90 a2=0 a3=7fff24a69a7c items=0 ppid=3599 pid=3759 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:53:51.431000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Mar 17 18:53:51.431000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Mar 17 18:53:51.449000 audit[3758]: NETFILTER_CFG table=raw:102 family=2 entries=21 op=nft_register_chain pid=3758 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Mar 17 18:53:51.449000 audit[3758]: SYSCALL arch=c000003e syscall=46 success=yes exit=8452 a0=3 a1=7ffee169c410 a2=0 a3=7ffee169c3fc items=0 ppid=3599 pid=3758 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:53:51.449000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Mar 17 18:53:51.457000 audit[3762]: NETFILTER_CFG table=filter:103 family=2 entries=39 op=nft_register_chain pid=3762 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Mar 17 18:53:51.457000 audit[3762]: SYSCALL arch=c000003e syscall=46 success=yes exit=18968 a0=3 a1=7ffc43db1580 a2=0 a3=7ffc43db156c items=0 ppid=3599 pid=3762 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:53:51.457000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Mar 17 18:53:52.877547 systemd-networkd[1562]: vxlan.calico: Gained IPv6LL Mar 17 18:53:53.963753 env[1409]: time="2025-03-17T18:53:53.963676208Z" level=info msg="StopPodSandbox for \"1123a5210483c4fd0b9bd699ed48ce3f3b24a27ae167b552026f5f0cd76e5fb3\"" Mar 17 18:53:54.047618 env[1409]: 2025-03-17 18:53:54.013 [INFO][3786] cni-plugin/k8s.go 608: Cleaning up netns ContainerID="1123a5210483c4fd0b9bd699ed48ce3f3b24a27ae167b552026f5f0cd76e5fb3" Mar 17 18:53:54.047618 env[1409]: 2025-03-17 18:53:54.013 [INFO][3786] cni-plugin/dataplane_linux.go 559: Deleting workload's device in netns. ContainerID="1123a5210483c4fd0b9bd699ed48ce3f3b24a27ae167b552026f5f0cd76e5fb3" iface="eth0" netns="/var/run/netns/cni-dc3ca1c6-e8ab-9b1a-5aa8-c2914875cd8f" Mar 17 18:53:54.047618 env[1409]: 2025-03-17 18:53:54.014 [INFO][3786] cni-plugin/dataplane_linux.go 570: Entered netns, deleting veth. ContainerID="1123a5210483c4fd0b9bd699ed48ce3f3b24a27ae167b552026f5f0cd76e5fb3" iface="eth0" netns="/var/run/netns/cni-dc3ca1c6-e8ab-9b1a-5aa8-c2914875cd8f" Mar 17 18:53:54.047618 env[1409]: 2025-03-17 18:53:54.014 [INFO][3786] cni-plugin/dataplane_linux.go 597: Workload's veth was already gone. Nothing to do. ContainerID="1123a5210483c4fd0b9bd699ed48ce3f3b24a27ae167b552026f5f0cd76e5fb3" iface="eth0" netns="/var/run/netns/cni-dc3ca1c6-e8ab-9b1a-5aa8-c2914875cd8f" Mar 17 18:53:54.047618 env[1409]: 2025-03-17 18:53:54.014 [INFO][3786] cni-plugin/k8s.go 615: Releasing IP address(es) ContainerID="1123a5210483c4fd0b9bd699ed48ce3f3b24a27ae167b552026f5f0cd76e5fb3" Mar 17 18:53:54.047618 env[1409]: 2025-03-17 18:53:54.014 [INFO][3786] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="1123a5210483c4fd0b9bd699ed48ce3f3b24a27ae167b552026f5f0cd76e5fb3" Mar 17 18:53:54.047618 env[1409]: 2025-03-17 18:53:54.037 [INFO][3792] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="1123a5210483c4fd0b9bd699ed48ce3f3b24a27ae167b552026f5f0cd76e5fb3" HandleID="k8s-pod-network.1123a5210483c4fd0b9bd699ed48ce3f3b24a27ae167b552026f5f0cd76e5fb3" Workload="ci--3510.3.7--a--9ed44aff31-k8s-coredns--668d6bf9bc--6dxdl-eth0" Mar 17 18:53:54.047618 env[1409]: 2025-03-17 18:53:54.037 [INFO][3792] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Mar 17 18:53:54.047618 env[1409]: 2025-03-17 18:53:54.037 [INFO][3792] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Mar 17 18:53:54.047618 env[1409]: 2025-03-17 18:53:54.043 [WARNING][3792] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="1123a5210483c4fd0b9bd699ed48ce3f3b24a27ae167b552026f5f0cd76e5fb3" HandleID="k8s-pod-network.1123a5210483c4fd0b9bd699ed48ce3f3b24a27ae167b552026f5f0cd76e5fb3" Workload="ci--3510.3.7--a--9ed44aff31-k8s-coredns--668d6bf9bc--6dxdl-eth0" Mar 17 18:53:54.047618 env[1409]: 2025-03-17 18:53:54.043 [INFO][3792] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="1123a5210483c4fd0b9bd699ed48ce3f3b24a27ae167b552026f5f0cd76e5fb3" HandleID="k8s-pod-network.1123a5210483c4fd0b9bd699ed48ce3f3b24a27ae167b552026f5f0cd76e5fb3" Workload="ci--3510.3.7--a--9ed44aff31-k8s-coredns--668d6bf9bc--6dxdl-eth0" Mar 17 18:53:54.047618 env[1409]: 2025-03-17 18:53:54.044 [INFO][3792] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Mar 17 18:53:54.047618 env[1409]: 2025-03-17 18:53:54.046 [INFO][3786] cni-plugin/k8s.go 621: Teardown processing complete. ContainerID="1123a5210483c4fd0b9bd699ed48ce3f3b24a27ae167b552026f5f0cd76e5fb3" Mar 17 18:53:54.048472 env[1409]: time="2025-03-17T18:53:54.048424387Z" level=info msg="TearDown network for sandbox \"1123a5210483c4fd0b9bd699ed48ce3f3b24a27ae167b552026f5f0cd76e5fb3\" successfully" Mar 17 18:53:54.048588 env[1409]: time="2025-03-17T18:53:54.048569488Z" level=info msg="StopPodSandbox for \"1123a5210483c4fd0b9bd699ed48ce3f3b24a27ae167b552026f5f0cd76e5fb3\" returns successfully" Mar 17 18:53:54.053322 env[1409]: time="2025-03-17T18:53:54.052087903Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:coredns-668d6bf9bc-6dxdl,Uid:047ac9e7-ffcc-423c-9a51-54609fb136cc,Namespace:kube-system,Attempt:1,}" Mar 17 18:53:54.052455 systemd[1]: run-netns-cni\x2ddc3ca1c6\x2de8ab\x2d9b1a\x2d5aa8\x2dc2914875cd8f.mount: Deactivated successfully. Mar 17 18:53:54.225175 systemd-networkd[1562]: cali68b6c989586: Link UP Mar 17 18:53:54.239303 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): eth0: link becomes ready Mar 17 18:53:54.239461 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): cali68b6c989586: link becomes ready Mar 17 18:53:54.243507 systemd-networkd[1562]: cali68b6c989586: Gained carrier Mar 17 18:53:54.267770 env[1409]: 2025-03-17 18:53:54.137 [INFO][3799] cni-plugin/plugin.go 325: Calico CNI found existing endpoint: &{{WorkloadEndpoint projectcalico.org/v3} {ci--3510.3.7--a--9ed44aff31-k8s-coredns--668d6bf9bc--6dxdl-eth0 coredns-668d6bf9bc- kube-system 047ac9e7-ffcc-423c-9a51-54609fb136cc 770 0 2025-03-17 18:53:20 +0000 UTC map[k8s-app:kube-dns pod-template-hash:668d6bf9bc projectcalico.org/namespace:kube-system projectcalico.org/orchestrator:k8s projectcalico.org/serviceaccount:coredns] map[] [] [] []} {k8s ci-3510.3.7-a-9ed44aff31 coredns-668d6bf9bc-6dxdl eth0 coredns [] [] [kns.kube-system ksa.kube-system.coredns] cali68b6c989586 [{dns UDP 53 0 } {dns-tcp TCP 53 0 } {metrics TCP 9153 0 }] []}} ContainerID="885a6adcd41c1d80a1e7b0d6922ae579899294b50a7ee97bb230d59d2b9a39ad" Namespace="kube-system" Pod="coredns-668d6bf9bc-6dxdl" WorkloadEndpoint="ci--3510.3.7--a--9ed44aff31-k8s-coredns--668d6bf9bc--6dxdl-" Mar 17 18:53:54.267770 env[1409]: 2025-03-17 18:53:54.137 [INFO][3799] cni-plugin/k8s.go 77: Extracted identifiers for CmdAddK8s ContainerID="885a6adcd41c1d80a1e7b0d6922ae579899294b50a7ee97bb230d59d2b9a39ad" Namespace="kube-system" Pod="coredns-668d6bf9bc-6dxdl" WorkloadEndpoint="ci--3510.3.7--a--9ed44aff31-k8s-coredns--668d6bf9bc--6dxdl-eth0" Mar 17 18:53:54.267770 env[1409]: 2025-03-17 18:53:54.161 [INFO][3811] ipam/ipam_plugin.go 225: Calico CNI IPAM request count IPv4=1 IPv6=0 ContainerID="885a6adcd41c1d80a1e7b0d6922ae579899294b50a7ee97bb230d59d2b9a39ad" HandleID="k8s-pod-network.885a6adcd41c1d80a1e7b0d6922ae579899294b50a7ee97bb230d59d2b9a39ad" Workload="ci--3510.3.7--a--9ed44aff31-k8s-coredns--668d6bf9bc--6dxdl-eth0" Mar 17 18:53:54.267770 env[1409]: 2025-03-17 18:53:54.169 [INFO][3811] ipam/ipam_plugin.go 265: Auto assigning IP ContainerID="885a6adcd41c1d80a1e7b0d6922ae579899294b50a7ee97bb230d59d2b9a39ad" HandleID="k8s-pod-network.885a6adcd41c1d80a1e7b0d6922ae579899294b50a7ee97bb230d59d2b9a39ad" Workload="ci--3510.3.7--a--9ed44aff31-k8s-coredns--668d6bf9bc--6dxdl-eth0" assignArgs=ipam.AutoAssignArgs{Num4:1, Num6:0, HandleID:(*string)(0xc0003bcbb0), Attrs:map[string]string{"namespace":"kube-system", "node":"ci-3510.3.7-a-9ed44aff31", "pod":"coredns-668d6bf9bc-6dxdl", "timestamp":"2025-03-17 18:53:54.161816491 +0000 UTC"}, Hostname:"ci-3510.3.7-a-9ed44aff31", IPv4Pools:[]net.IPNet{}, IPv6Pools:[]net.IPNet{}, MaxBlocksPerHost:0, HostReservedAttrIPv4s:(*ipam.HostReservedAttr)(nil), HostReservedAttrIPv6s:(*ipam.HostReservedAttr)(nil), IntendedUse:"Workload"} Mar 17 18:53:54.267770 env[1409]: 2025-03-17 18:53:54.169 [INFO][3811] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Mar 17 18:53:54.267770 env[1409]: 2025-03-17 18:53:54.169 [INFO][3811] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Mar 17 18:53:54.267770 env[1409]: 2025-03-17 18:53:54.169 [INFO][3811] ipam/ipam.go 107: Auto-assign 1 ipv4, 0 ipv6 addrs for host 'ci-3510.3.7-a-9ed44aff31' Mar 17 18:53:54.267770 env[1409]: 2025-03-17 18:53:54.171 [INFO][3811] ipam/ipam.go 660: Looking up existing affinities for host handle="k8s-pod-network.885a6adcd41c1d80a1e7b0d6922ae579899294b50a7ee97bb230d59d2b9a39ad" host="ci-3510.3.7-a-9ed44aff31" Mar 17 18:53:54.267770 env[1409]: 2025-03-17 18:53:54.173 [INFO][3811] ipam/ipam.go 372: Looking up existing affinities for host host="ci-3510.3.7-a-9ed44aff31" Mar 17 18:53:54.267770 env[1409]: 2025-03-17 18:53:54.176 [INFO][3811] ipam/ipam.go 489: Trying affinity for 192.168.88.192/26 host="ci-3510.3.7-a-9ed44aff31" Mar 17 18:53:54.267770 env[1409]: 2025-03-17 18:53:54.179 [INFO][3811] ipam/ipam.go 155: Attempting to load block cidr=192.168.88.192/26 host="ci-3510.3.7-a-9ed44aff31" Mar 17 18:53:54.267770 env[1409]: 2025-03-17 18:53:54.191 [INFO][3811] ipam/ipam.go 232: Affinity is confirmed and block has been loaded cidr=192.168.88.192/26 host="ci-3510.3.7-a-9ed44aff31" Mar 17 18:53:54.267770 env[1409]: 2025-03-17 18:53:54.191 [INFO][3811] ipam/ipam.go 1180: Attempting to assign 1 addresses from block block=192.168.88.192/26 handle="k8s-pod-network.885a6adcd41c1d80a1e7b0d6922ae579899294b50a7ee97bb230d59d2b9a39ad" host="ci-3510.3.7-a-9ed44aff31" Mar 17 18:53:54.267770 env[1409]: 2025-03-17 18:53:54.193 [INFO][3811] ipam/ipam.go 1685: Creating new handle: k8s-pod-network.885a6adcd41c1d80a1e7b0d6922ae579899294b50a7ee97bb230d59d2b9a39ad Mar 17 18:53:54.267770 env[1409]: 2025-03-17 18:53:54.203 [INFO][3811] ipam/ipam.go 1203: Writing block in order to claim IPs block=192.168.88.192/26 handle="k8s-pod-network.885a6adcd41c1d80a1e7b0d6922ae579899294b50a7ee97bb230d59d2b9a39ad" host="ci-3510.3.7-a-9ed44aff31" Mar 17 18:53:54.267770 env[1409]: 2025-03-17 18:53:54.220 [INFO][3811] ipam/ipam.go 1216: Successfully claimed IPs: [192.168.88.193/26] block=192.168.88.192/26 handle="k8s-pod-network.885a6adcd41c1d80a1e7b0d6922ae579899294b50a7ee97bb230d59d2b9a39ad" host="ci-3510.3.7-a-9ed44aff31" Mar 17 18:53:54.267770 env[1409]: 2025-03-17 18:53:54.220 [INFO][3811] ipam/ipam.go 847: Auto-assigned 1 out of 1 IPv4s: [192.168.88.193/26] handle="k8s-pod-network.885a6adcd41c1d80a1e7b0d6922ae579899294b50a7ee97bb230d59d2b9a39ad" host="ci-3510.3.7-a-9ed44aff31" Mar 17 18:53:54.267770 env[1409]: 2025-03-17 18:53:54.220 [INFO][3811] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Mar 17 18:53:54.267770 env[1409]: 2025-03-17 18:53:54.220 [INFO][3811] ipam/ipam_plugin.go 283: Calico CNI IPAM assigned addresses IPv4=[192.168.88.193/26] IPv6=[] ContainerID="885a6adcd41c1d80a1e7b0d6922ae579899294b50a7ee97bb230d59d2b9a39ad" HandleID="k8s-pod-network.885a6adcd41c1d80a1e7b0d6922ae579899294b50a7ee97bb230d59d2b9a39ad" Workload="ci--3510.3.7--a--9ed44aff31-k8s-coredns--668d6bf9bc--6dxdl-eth0" Mar 17 18:53:54.268755 env[1409]: 2025-03-17 18:53:54.222 [INFO][3799] cni-plugin/k8s.go 386: Populated endpoint ContainerID="885a6adcd41c1d80a1e7b0d6922ae579899294b50a7ee97bb230d59d2b9a39ad" Namespace="kube-system" Pod="coredns-668d6bf9bc-6dxdl" WorkloadEndpoint="ci--3510.3.7--a--9ed44aff31-k8s-coredns--668d6bf9bc--6dxdl-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ci--3510.3.7--a--9ed44aff31-k8s-coredns--668d6bf9bc--6dxdl-eth0", GenerateName:"coredns-668d6bf9bc-", Namespace:"kube-system", SelfLink:"", UID:"047ac9e7-ffcc-423c-9a51-54609fb136cc", ResourceVersion:"770", Generation:0, CreationTimestamp:time.Date(2025, time.March, 17, 18, 53, 20, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"k8s-app":"kube-dns", "pod-template-hash":"668d6bf9bc", "projectcalico.org/namespace":"kube-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"coredns"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ci-3510.3.7-a-9ed44aff31", ContainerID:"", Pod:"coredns-668d6bf9bc-6dxdl", Endpoint:"eth0", ServiceAccountName:"coredns", IPNetworks:[]string{"192.168.88.193/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.kube-system", "ksa.kube-system.coredns"}, InterfaceName:"cali68b6c989586", MAC:"", Ports:[]v3.WorkloadEndpointPort{v3.WorkloadEndpointPort{Name:"dns", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"UDP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"dns-tcp", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"metrics", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x23c1, HostPort:0x0, HostIP:""}}, AllowSpoofedSourcePrefixes:[]string(nil)}} Mar 17 18:53:54.268755 env[1409]: 2025-03-17 18:53:54.222 [INFO][3799] cni-plugin/k8s.go 387: Calico CNI using IPs: [192.168.88.193/32] ContainerID="885a6adcd41c1d80a1e7b0d6922ae579899294b50a7ee97bb230d59d2b9a39ad" Namespace="kube-system" Pod="coredns-668d6bf9bc-6dxdl" WorkloadEndpoint="ci--3510.3.7--a--9ed44aff31-k8s-coredns--668d6bf9bc--6dxdl-eth0" Mar 17 18:53:54.268755 env[1409]: 2025-03-17 18:53:54.222 [INFO][3799] cni-plugin/dataplane_linux.go 69: Setting the host side veth name to cali68b6c989586 ContainerID="885a6adcd41c1d80a1e7b0d6922ae579899294b50a7ee97bb230d59d2b9a39ad" Namespace="kube-system" Pod="coredns-668d6bf9bc-6dxdl" WorkloadEndpoint="ci--3510.3.7--a--9ed44aff31-k8s-coredns--668d6bf9bc--6dxdl-eth0" Mar 17 18:53:54.268755 env[1409]: 2025-03-17 18:53:54.225 [INFO][3799] cni-plugin/dataplane_linux.go 508: Disabling IPv4 forwarding ContainerID="885a6adcd41c1d80a1e7b0d6922ae579899294b50a7ee97bb230d59d2b9a39ad" Namespace="kube-system" Pod="coredns-668d6bf9bc-6dxdl" WorkloadEndpoint="ci--3510.3.7--a--9ed44aff31-k8s-coredns--668d6bf9bc--6dxdl-eth0" Mar 17 18:53:54.268755 env[1409]: 2025-03-17 18:53:54.226 [INFO][3799] cni-plugin/k8s.go 414: Added Mac, interface name, and active container ID to endpoint ContainerID="885a6adcd41c1d80a1e7b0d6922ae579899294b50a7ee97bb230d59d2b9a39ad" Namespace="kube-system" Pod="coredns-668d6bf9bc-6dxdl" WorkloadEndpoint="ci--3510.3.7--a--9ed44aff31-k8s-coredns--668d6bf9bc--6dxdl-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ci--3510.3.7--a--9ed44aff31-k8s-coredns--668d6bf9bc--6dxdl-eth0", GenerateName:"coredns-668d6bf9bc-", Namespace:"kube-system", SelfLink:"", UID:"047ac9e7-ffcc-423c-9a51-54609fb136cc", ResourceVersion:"770", Generation:0, CreationTimestamp:time.Date(2025, time.March, 17, 18, 53, 20, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"k8s-app":"kube-dns", "pod-template-hash":"668d6bf9bc", "projectcalico.org/namespace":"kube-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"coredns"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ci-3510.3.7-a-9ed44aff31", ContainerID:"885a6adcd41c1d80a1e7b0d6922ae579899294b50a7ee97bb230d59d2b9a39ad", Pod:"coredns-668d6bf9bc-6dxdl", Endpoint:"eth0", ServiceAccountName:"coredns", IPNetworks:[]string{"192.168.88.193/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.kube-system", "ksa.kube-system.coredns"}, InterfaceName:"cali68b6c989586", MAC:"26:8b:fd:2e:0d:fe", Ports:[]v3.WorkloadEndpointPort{v3.WorkloadEndpointPort{Name:"dns", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"UDP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"dns-tcp", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"metrics", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x23c1, HostPort:0x0, HostIP:""}}, AllowSpoofedSourcePrefixes:[]string(nil)}} Mar 17 18:53:54.268755 env[1409]: 2025-03-17 18:53:54.266 [INFO][3799] cni-plugin/k8s.go 500: Wrote updated endpoint to datastore ContainerID="885a6adcd41c1d80a1e7b0d6922ae579899294b50a7ee97bb230d59d2b9a39ad" Namespace="kube-system" Pod="coredns-668d6bf9bc-6dxdl" WorkloadEndpoint="ci--3510.3.7--a--9ed44aff31-k8s-coredns--668d6bf9bc--6dxdl-eth0" Mar 17 18:53:54.292639 env[1409]: time="2025-03-17T18:53:54.292559272Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Mar 17 18:53:54.292811 env[1409]: time="2025-03-17T18:53:54.292647673Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Mar 17 18:53:54.292811 env[1409]: time="2025-03-17T18:53:54.292684573Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Mar 17 18:53:54.293052 env[1409]: time="2025-03-17T18:53:54.292998974Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/885a6adcd41c1d80a1e7b0d6922ae579899294b50a7ee97bb230d59d2b9a39ad pid=3834 runtime=io.containerd.runc.v2 Mar 17 18:53:54.317920 systemd[1]: Started cri-containerd-885a6adcd41c1d80a1e7b0d6922ae579899294b50a7ee97bb230d59d2b9a39ad.scope. Mar 17 18:53:54.365289 kernel: kauditd_printk_skb: 554 callbacks suppressed Mar 17 18:53:54.365421 kernel: audit: type=1400 audit(1742237634.346:1114): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:54.346000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:54.346000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:54.379660 kernel: audit: type=1400 audit(1742237634.346:1115): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:54.346000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:54.396285 kernel: audit: type=1400 audit(1742237634.346:1116): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:54.396362 kernel: audit: type=1400 audit(1742237634.346:1117): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:54.346000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:54.346000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:54.426436 kernel: audit: type=1400 audit(1742237634.346:1118): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:54.426495 kernel: audit: type=1400 audit(1742237634.346:1119): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:54.346000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:54.346000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:54.443499 env[1409]: time="2025-03-17T18:53:54.443469043Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:coredns-668d6bf9bc-6dxdl,Uid:047ac9e7-ffcc-423c-9a51-54609fb136cc,Namespace:kube-system,Attempt:1,} returns sandbox id \"885a6adcd41c1d80a1e7b0d6922ae579899294b50a7ee97bb230d59d2b9a39ad\"" Mar 17 18:53:54.447149 env[1409]: time="2025-03-17T18:53:54.447123659Z" level=info msg="CreateContainer within sandbox \"885a6adcd41c1d80a1e7b0d6922ae579899294b50a7ee97bb230d59d2b9a39ad\" for container &ContainerMetadata{Name:coredns,Attempt:0,}" Mar 17 18:53:54.454653 kernel: audit: type=1400 audit(1742237634.346:1120): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:54.455460 kernel: audit: type=1400 audit(1742237634.346:1121): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:54.346000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:54.469297 kernel: audit: type=1400 audit(1742237634.346:1122): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:54.346000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:54.379000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:54.379000 audit: BPF prog-id=156 op=LOAD Mar 17 18:53:54.379000 audit[3845]: AVC avc: denied { bpf } for pid=3845 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:54.494312 kernel: audit: type=1400 audit(1742237634.379:1123): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:54.379000 audit[3845]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000117c48 a2=10 a3=1c items=0 ppid=3834 pid=3845 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:53:54.379000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3838356136616463643431633164383061316537623064363932326165 Mar 17 18:53:54.379000 audit[3845]: AVC avc: denied { perfmon } for pid=3845 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:54.379000 audit[3845]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001176b0 a2=3c a3=c items=0 ppid=3834 pid=3845 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:53:54.379000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3838356136616463643431633164383061316537623064363932326165 Mar 17 18:53:54.379000 audit[3845]: AVC avc: denied { bpf } for pid=3845 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:54.379000 audit[3845]: AVC avc: denied { bpf } for pid=3845 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:54.379000 audit[3845]: AVC avc: denied { bpf } for pid=3845 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:54.379000 audit[3845]: AVC avc: denied { perfmon } for pid=3845 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:54.379000 audit[3845]: AVC avc: denied { perfmon } for pid=3845 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:54.379000 audit[3845]: AVC avc: denied { perfmon } for pid=3845 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:54.379000 audit[3845]: AVC avc: denied { perfmon } for pid=3845 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:54.379000 audit[3845]: AVC avc: denied { perfmon } for pid=3845 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:54.379000 audit[3845]: AVC avc: denied { bpf } for pid=3845 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:54.379000 audit[3845]: AVC avc: denied { bpf } for pid=3845 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:54.379000 audit: BPF prog-id=157 op=LOAD Mar 17 18:53:54.379000 audit[3845]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001179d8 a2=78 a3=c00020a610 items=0 ppid=3834 pid=3845 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:53:54.379000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3838356136616463643431633164383061316537623064363932326165 Mar 17 18:53:54.379000 audit[3845]: AVC avc: denied { bpf } for pid=3845 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:54.379000 audit[3845]: AVC avc: denied { bpf } for pid=3845 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:54.379000 audit[3845]: AVC avc: denied { perfmon } for pid=3845 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:54.379000 audit[3845]: AVC avc: denied { perfmon } for pid=3845 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:54.379000 audit[3845]: AVC avc: denied { perfmon } for pid=3845 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:54.379000 audit[3845]: AVC avc: denied { perfmon } for pid=3845 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:54.379000 audit[3845]: AVC avc: denied { perfmon } for pid=3845 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:54.379000 audit[3845]: AVC avc: denied { bpf } for pid=3845 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:54.379000 audit[3845]: AVC avc: denied { bpf } for pid=3845 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:54.379000 audit: BPF prog-id=158 op=LOAD Mar 17 18:53:54.379000 audit[3845]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000117770 a2=78 a3=c00020a658 items=0 ppid=3834 pid=3845 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:53:54.379000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3838356136616463643431633164383061316537623064363932326165 Mar 17 18:53:54.380000 audit: BPF prog-id=158 op=UNLOAD Mar 17 18:53:54.380000 audit: BPF prog-id=157 op=UNLOAD Mar 17 18:53:54.380000 audit[3845]: AVC avc: denied { bpf } for pid=3845 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:54.380000 audit[3845]: AVC avc: denied { bpf } for pid=3845 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:54.380000 audit[3845]: AVC avc: denied { bpf } for pid=3845 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:54.380000 audit[3845]: AVC avc: denied { perfmon } for pid=3845 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:54.380000 audit[3845]: AVC avc: denied { perfmon } for pid=3845 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:54.380000 audit[3845]: AVC avc: denied { perfmon } for pid=3845 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:54.380000 audit[3845]: AVC avc: denied { perfmon } for pid=3845 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:54.380000 audit[3845]: AVC avc: denied { perfmon } for pid=3845 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:54.380000 audit[3845]: AVC avc: denied { bpf } for pid=3845 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:54.380000 audit[3845]: AVC avc: denied { bpf } for pid=3845 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:54.380000 audit: BPF prog-id=159 op=LOAD Mar 17 18:53:54.380000 audit[3845]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000117c30 a2=78 a3=c00020aa68 items=0 ppid=3834 pid=3845 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:53:54.380000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3838356136616463643431633164383061316537623064363932326165 Mar 17 18:53:54.380000 audit[3864]: NETFILTER_CFG table=filter:104 family=2 entries=34 op=nft_register_chain pid=3864 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Mar 17 18:53:54.380000 audit[3864]: SYSCALL arch=c000003e syscall=46 success=yes exit=19148 a0=3 a1=7ffe88b5dc20 a2=0 a3=7ffe88b5dc0c items=0 ppid=3599 pid=3864 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:53:54.380000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Mar 17 18:53:54.509429 env[1409]: time="2025-03-17T18:53:54.509321836Z" level=info msg="CreateContainer within sandbox \"885a6adcd41c1d80a1e7b0d6922ae579899294b50a7ee97bb230d59d2b9a39ad\" for &ContainerMetadata{Name:coredns,Attempt:0,} returns container id \"621ea0814eb371d3ca23c297e94649c0a60ad1ef52d43f35c4b083e3774f8074\"" Mar 17 18:53:54.511124 env[1409]: time="2025-03-17T18:53:54.511091244Z" level=info msg="StartContainer for \"621ea0814eb371d3ca23c297e94649c0a60ad1ef52d43f35c4b083e3774f8074\"" Mar 17 18:53:54.533400 systemd[1]: Started cri-containerd-621ea0814eb371d3ca23c297e94649c0a60ad1ef52d43f35c4b083e3774f8074.scope. Mar 17 18:53:54.550000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:54.550000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:54.550000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:54.550000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:54.550000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:54.550000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:54.550000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:54.550000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:54.550000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:54.550000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:54.550000 audit: BPF prog-id=160 op=LOAD Mar 17 18:53:54.551000 audit[3878]: AVC avc: denied { bpf } for pid=3878 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:54.551000 audit[3878]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000149c48 a2=10 a3=1c items=0 ppid=3834 pid=3878 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:53:54.551000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3632316561303831346562333731643363613233633239376539343634 Mar 17 18:53:54.551000 audit[3878]: AVC avc: denied { perfmon } for pid=3878 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:54.551000 audit[3878]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001496b0 a2=3c a3=8 items=0 ppid=3834 pid=3878 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:53:54.551000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3632316561303831346562333731643363613233633239376539343634 Mar 17 18:53:54.552000 audit[3878]: AVC avc: denied { bpf } for pid=3878 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:54.552000 audit[3878]: AVC avc: denied { bpf } for pid=3878 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:54.552000 audit[3878]: AVC avc: denied { bpf } for pid=3878 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:54.552000 audit[3878]: AVC avc: denied { perfmon } for pid=3878 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:54.552000 audit[3878]: AVC avc: denied { perfmon } for pid=3878 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:54.552000 audit[3878]: AVC avc: denied { perfmon } for pid=3878 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:54.552000 audit[3878]: AVC avc: denied { perfmon } for pid=3878 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:54.552000 audit[3878]: AVC avc: denied { perfmon } for pid=3878 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:54.552000 audit[3878]: AVC avc: denied { bpf } for pid=3878 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:54.552000 audit[3878]: AVC avc: denied { bpf } for pid=3878 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:54.552000 audit: BPF prog-id=161 op=LOAD Mar 17 18:53:54.552000 audit[3878]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001499d8 a2=78 a3=c0003b5d70 items=0 ppid=3834 pid=3878 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:53:54.552000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3632316561303831346562333731643363613233633239376539343634 Mar 17 18:53:54.552000 audit[3878]: AVC avc: denied { bpf } for pid=3878 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:54.552000 audit[3878]: AVC avc: denied { bpf } for pid=3878 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:54.552000 audit[3878]: AVC avc: denied { perfmon } for pid=3878 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:54.552000 audit[3878]: AVC avc: denied { perfmon } for pid=3878 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:54.552000 audit[3878]: AVC avc: denied { perfmon } for pid=3878 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:54.552000 audit[3878]: AVC avc: denied { perfmon } for pid=3878 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:54.552000 audit[3878]: AVC avc: denied { perfmon } for pid=3878 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:54.552000 audit[3878]: AVC avc: denied { bpf } for pid=3878 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:54.552000 audit[3878]: AVC avc: denied { bpf } for pid=3878 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:54.552000 audit: BPF prog-id=162 op=LOAD Mar 17 18:53:54.552000 audit[3878]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000149770 a2=78 a3=c0003b5db8 items=0 ppid=3834 pid=3878 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:53:54.552000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3632316561303831346562333731643363613233633239376539343634 Mar 17 18:53:54.553000 audit: BPF prog-id=162 op=UNLOAD Mar 17 18:53:54.553000 audit: BPF prog-id=161 op=UNLOAD Mar 17 18:53:54.553000 audit[3878]: AVC avc: denied { bpf } for pid=3878 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:54.553000 audit[3878]: AVC avc: denied { bpf } for pid=3878 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:54.553000 audit[3878]: AVC avc: denied { bpf } for pid=3878 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:54.553000 audit[3878]: AVC avc: denied { perfmon } for pid=3878 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:54.553000 audit[3878]: AVC avc: denied { perfmon } for pid=3878 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:54.553000 audit[3878]: AVC avc: denied { perfmon } for pid=3878 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:54.553000 audit[3878]: AVC avc: denied { perfmon } for pid=3878 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:54.553000 audit[3878]: AVC avc: denied { perfmon } for pid=3878 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:54.553000 audit[3878]: AVC avc: denied { bpf } for pid=3878 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:54.553000 audit[3878]: AVC avc: denied { bpf } for pid=3878 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:54.553000 audit: BPF prog-id=163 op=LOAD Mar 17 18:53:54.553000 audit[3878]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000149c30 a2=78 a3=c0004001c8 items=0 ppid=3834 pid=3878 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:53:54.553000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3632316561303831346562333731643363613233633239376539343634 Mar 17 18:53:54.569704 env[1409]: time="2025-03-17T18:53:54.569648604Z" level=info msg="StartContainer for \"621ea0814eb371d3ca23c297e94649c0a60ad1ef52d43f35c4b083e3774f8074\" returns successfully" Mar 17 18:53:54.579000 audit[3889]: AVC avc: denied { getattr } for pid=3889 comm="coredns" path="cgroup:[4026532547]" dev="nsfs" ino=4026532547 scontext=system_u:system_r:svirt_lxc_net_t:s0:c252,c732 tcontext=system_u:object_r:nsfs_t:s0 tclass=file permissive=0 Mar 17 18:53:54.579000 audit[3889]: SYSCALL arch=c000003e syscall=262 success=no exit=-13 a0=ffffffffffffff9c a1=c00005a9a8 a2=c0004beac8 a3=0 items=0 ppid=3834 pid=3889 auid=4294967295 uid=65532 gid=65532 euid=65532 suid=65532 fsuid=65532 egid=65532 sgid=65532 fsgid=65532 tty=(none) ses=4294967295 comm="coredns" exe="/coredns" subj=system_u:system_r:svirt_lxc_net_t:s0:c252,c732 key=(null) Mar 17 18:53:54.579000 audit: PROCTITLE proctitle=2F636F7265646E73002D636F6E66002F6574632F636F7265646E732F436F726566696C65 Mar 17 18:53:54.960914 env[1409]: time="2025-03-17T18:53:54.960781442Z" level=info msg="StopPodSandbox for \"648d5fd3a31c687d83fb27810080702536d28c9ff711a4c61f869dcfb2e3ad23\"" Mar 17 18:53:55.047419 env[1409]: 2025-03-17 18:53:55.011 [INFO][3923] cni-plugin/k8s.go 608: Cleaning up netns ContainerID="648d5fd3a31c687d83fb27810080702536d28c9ff711a4c61f869dcfb2e3ad23" Mar 17 18:53:55.047419 env[1409]: 2025-03-17 18:53:55.011 [INFO][3923] cni-plugin/dataplane_linux.go 559: Deleting workload's device in netns. ContainerID="648d5fd3a31c687d83fb27810080702536d28c9ff711a4c61f869dcfb2e3ad23" iface="eth0" netns="/var/run/netns/cni-925b07f9-3e5d-c1d6-2a11-f4d2b0a2730c" Mar 17 18:53:55.047419 env[1409]: 2025-03-17 18:53:55.012 [INFO][3923] cni-plugin/dataplane_linux.go 570: Entered netns, deleting veth. ContainerID="648d5fd3a31c687d83fb27810080702536d28c9ff711a4c61f869dcfb2e3ad23" iface="eth0" netns="/var/run/netns/cni-925b07f9-3e5d-c1d6-2a11-f4d2b0a2730c" Mar 17 18:53:55.047419 env[1409]: 2025-03-17 18:53:55.012 [INFO][3923] cni-plugin/dataplane_linux.go 597: Workload's veth was already gone. Nothing to do. ContainerID="648d5fd3a31c687d83fb27810080702536d28c9ff711a4c61f869dcfb2e3ad23" iface="eth0" netns="/var/run/netns/cni-925b07f9-3e5d-c1d6-2a11-f4d2b0a2730c" Mar 17 18:53:55.047419 env[1409]: 2025-03-17 18:53:55.012 [INFO][3923] cni-plugin/k8s.go 615: Releasing IP address(es) ContainerID="648d5fd3a31c687d83fb27810080702536d28c9ff711a4c61f869dcfb2e3ad23" Mar 17 18:53:55.047419 env[1409]: 2025-03-17 18:53:55.012 [INFO][3923] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="648d5fd3a31c687d83fb27810080702536d28c9ff711a4c61f869dcfb2e3ad23" Mar 17 18:53:55.047419 env[1409]: 2025-03-17 18:53:55.038 [INFO][3929] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="648d5fd3a31c687d83fb27810080702536d28c9ff711a4c61f869dcfb2e3ad23" HandleID="k8s-pod-network.648d5fd3a31c687d83fb27810080702536d28c9ff711a4c61f869dcfb2e3ad23" Workload="ci--3510.3.7--a--9ed44aff31-k8s-coredns--668d6bf9bc--xjnb2-eth0" Mar 17 18:53:55.047419 env[1409]: 2025-03-17 18:53:55.038 [INFO][3929] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Mar 17 18:53:55.047419 env[1409]: 2025-03-17 18:53:55.038 [INFO][3929] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Mar 17 18:53:55.047419 env[1409]: 2025-03-17 18:53:55.043 [WARNING][3929] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="648d5fd3a31c687d83fb27810080702536d28c9ff711a4c61f869dcfb2e3ad23" HandleID="k8s-pod-network.648d5fd3a31c687d83fb27810080702536d28c9ff711a4c61f869dcfb2e3ad23" Workload="ci--3510.3.7--a--9ed44aff31-k8s-coredns--668d6bf9bc--xjnb2-eth0" Mar 17 18:53:55.047419 env[1409]: 2025-03-17 18:53:55.043 [INFO][3929] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="648d5fd3a31c687d83fb27810080702536d28c9ff711a4c61f869dcfb2e3ad23" HandleID="k8s-pod-network.648d5fd3a31c687d83fb27810080702536d28c9ff711a4c61f869dcfb2e3ad23" Workload="ci--3510.3.7--a--9ed44aff31-k8s-coredns--668d6bf9bc--xjnb2-eth0" Mar 17 18:53:55.047419 env[1409]: 2025-03-17 18:53:55.044 [INFO][3929] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Mar 17 18:53:55.047419 env[1409]: 2025-03-17 18:53:55.046 [INFO][3923] cni-plugin/k8s.go 621: Teardown processing complete. ContainerID="648d5fd3a31c687d83fb27810080702536d28c9ff711a4c61f869dcfb2e3ad23" Mar 17 18:53:55.048185 env[1409]: time="2025-03-17T18:53:55.047555225Z" level=info msg="TearDown network for sandbox \"648d5fd3a31c687d83fb27810080702536d28c9ff711a4c61f869dcfb2e3ad23\" successfully" Mar 17 18:53:55.048185 env[1409]: time="2025-03-17T18:53:55.047604725Z" level=info msg="StopPodSandbox for \"648d5fd3a31c687d83fb27810080702536d28c9ff711a4c61f869dcfb2e3ad23\" returns successfully" Mar 17 18:53:55.057038 env[1409]: time="2025-03-17T18:53:55.048904831Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:coredns-668d6bf9bc-xjnb2,Uid:f6e876a2-e0ad-437c-8982-fb194bf7b8dd,Namespace:kube-system,Attempt:1,}" Mar 17 18:53:55.055397 systemd[1]: run-netns-cni\x2d925b07f9\x2d3e5d\x2dc1d6\x2d2a11\x2df4d2b0a2730c.mount: Deactivated successfully. Mar 17 18:53:55.116361 kubelet[2450]: I0317 18:53:55.115550 2450 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="kube-system/coredns-668d6bf9bc-6dxdl" podStartSLOduration=35.115527623 podStartE2EDuration="35.115527623s" podCreationTimestamp="2025-03-17 18:53:20 +0000 UTC" firstStartedPulling="0001-01-01 00:00:00 +0000 UTC" lastFinishedPulling="0001-01-01 00:00:00 +0000 UTC" observedRunningTime="2025-03-17 18:53:55.114723319 +0000 UTC m=+41.272540285" watchObservedRunningTime="2025-03-17 18:53:55.115527623 +0000 UTC m=+41.273344689" Mar 17 18:53:55.156000 audit[3946]: NETFILTER_CFG table=filter:105 family=2 entries=16 op=nft_register_rule pid=3946 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Mar 17 18:53:55.156000 audit[3946]: SYSCALL arch=c000003e syscall=46 success=yes exit=5992 a0=3 a1=7fff3644d930 a2=0 a3=7fff3644d91c items=0 ppid=2619 pid=3946 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:53:55.156000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Mar 17 18:53:55.161000 audit[3946]: NETFILTER_CFG table=nat:106 family=2 entries=14 op=nft_register_rule pid=3946 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Mar 17 18:53:55.161000 audit[3946]: SYSCALL arch=c000003e syscall=46 success=yes exit=3468 a0=3 a1=7fff3644d930 a2=0 a3=0 items=0 ppid=2619 pid=3946 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:53:55.161000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Mar 17 18:53:55.190000 audit[3955]: NETFILTER_CFG table=filter:107 family=2 entries=13 op=nft_register_rule pid=3955 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Mar 17 18:53:55.190000 audit[3955]: SYSCALL arch=c000003e syscall=46 success=yes exit=3760 a0=3 a1=7ffde7dc8b30 a2=0 a3=7ffde7dc8b1c items=0 ppid=2619 pid=3955 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:53:55.190000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Mar 17 18:53:55.196000 audit[3955]: NETFILTER_CFG table=nat:108 family=2 entries=35 op=nft_register_chain pid=3955 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Mar 17 18:53:55.196000 audit[3955]: SYSCALL arch=c000003e syscall=46 success=yes exit=14196 a0=3 a1=7ffde7dc8b30 a2=0 a3=7ffde7dc8b1c items=0 ppid=2619 pid=3955 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:53:55.196000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Mar 17 18:53:55.253315 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): cali7435b94cef9: link becomes ready Mar 17 18:53:55.256943 systemd-networkd[1562]: cali7435b94cef9: Link UP Mar 17 18:53:55.257852 systemd-networkd[1562]: cali7435b94cef9: Gained carrier Mar 17 18:53:55.278109 env[1409]: 2025-03-17 18:53:55.163 [INFO][3935] cni-plugin/plugin.go 325: Calico CNI found existing endpoint: &{{WorkloadEndpoint projectcalico.org/v3} {ci--3510.3.7--a--9ed44aff31-k8s-coredns--668d6bf9bc--xjnb2-eth0 coredns-668d6bf9bc- kube-system f6e876a2-e0ad-437c-8982-fb194bf7b8dd 780 0 2025-03-17 18:53:20 +0000 UTC map[k8s-app:kube-dns pod-template-hash:668d6bf9bc projectcalico.org/namespace:kube-system projectcalico.org/orchestrator:k8s projectcalico.org/serviceaccount:coredns] map[] [] [] []} {k8s ci-3510.3.7-a-9ed44aff31 coredns-668d6bf9bc-xjnb2 eth0 coredns [] [] [kns.kube-system ksa.kube-system.coredns] cali7435b94cef9 [{dns UDP 53 0 } {dns-tcp TCP 53 0 } {metrics TCP 9153 0 }] []}} ContainerID="5db20a01bfb7bedd3ba9f9c57ce5082f24f82e7a7159d510ad0ba113c757b961" Namespace="kube-system" Pod="coredns-668d6bf9bc-xjnb2" WorkloadEndpoint="ci--3510.3.7--a--9ed44aff31-k8s-coredns--668d6bf9bc--xjnb2-" Mar 17 18:53:55.278109 env[1409]: 2025-03-17 18:53:55.163 [INFO][3935] cni-plugin/k8s.go 77: Extracted identifiers for CmdAddK8s ContainerID="5db20a01bfb7bedd3ba9f9c57ce5082f24f82e7a7159d510ad0ba113c757b961" Namespace="kube-system" Pod="coredns-668d6bf9bc-xjnb2" WorkloadEndpoint="ci--3510.3.7--a--9ed44aff31-k8s-coredns--668d6bf9bc--xjnb2-eth0" Mar 17 18:53:55.278109 env[1409]: 2025-03-17 18:53:55.202 [INFO][3950] ipam/ipam_plugin.go 225: Calico CNI IPAM request count IPv4=1 IPv6=0 ContainerID="5db20a01bfb7bedd3ba9f9c57ce5082f24f82e7a7159d510ad0ba113c757b961" HandleID="k8s-pod-network.5db20a01bfb7bedd3ba9f9c57ce5082f24f82e7a7159d510ad0ba113c757b961" Workload="ci--3510.3.7--a--9ed44aff31-k8s-coredns--668d6bf9bc--xjnb2-eth0" Mar 17 18:53:55.278109 env[1409]: 2025-03-17 18:53:55.217 [INFO][3950] ipam/ipam_plugin.go 265: Auto assigning IP ContainerID="5db20a01bfb7bedd3ba9f9c57ce5082f24f82e7a7159d510ad0ba113c757b961" HandleID="k8s-pod-network.5db20a01bfb7bedd3ba9f9c57ce5082f24f82e7a7159d510ad0ba113c757b961" Workload="ci--3510.3.7--a--9ed44aff31-k8s-coredns--668d6bf9bc--xjnb2-eth0" assignArgs=ipam.AutoAssignArgs{Num4:1, Num6:0, HandleID:(*string)(0xc000290ae0), Attrs:map[string]string{"namespace":"kube-system", "node":"ci-3510.3.7-a-9ed44aff31", "pod":"coredns-668d6bf9bc-xjnb2", "timestamp":"2025-03-17 18:53:55.202010701 +0000 UTC"}, Hostname:"ci-3510.3.7-a-9ed44aff31", IPv4Pools:[]net.IPNet{}, IPv6Pools:[]net.IPNet{}, MaxBlocksPerHost:0, HostReservedAttrIPv4s:(*ipam.HostReservedAttr)(nil), HostReservedAttrIPv6s:(*ipam.HostReservedAttr)(nil), IntendedUse:"Workload"} Mar 17 18:53:55.278109 env[1409]: 2025-03-17 18:53:55.217 [INFO][3950] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Mar 17 18:53:55.278109 env[1409]: 2025-03-17 18:53:55.217 [INFO][3950] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Mar 17 18:53:55.278109 env[1409]: 2025-03-17 18:53:55.217 [INFO][3950] ipam/ipam.go 107: Auto-assign 1 ipv4, 0 ipv6 addrs for host 'ci-3510.3.7-a-9ed44aff31' Mar 17 18:53:55.278109 env[1409]: 2025-03-17 18:53:55.219 [INFO][3950] ipam/ipam.go 660: Looking up existing affinities for host handle="k8s-pod-network.5db20a01bfb7bedd3ba9f9c57ce5082f24f82e7a7159d510ad0ba113c757b961" host="ci-3510.3.7-a-9ed44aff31" Mar 17 18:53:55.278109 env[1409]: 2025-03-17 18:53:55.222 [INFO][3950] ipam/ipam.go 372: Looking up existing affinities for host host="ci-3510.3.7-a-9ed44aff31" Mar 17 18:53:55.278109 env[1409]: 2025-03-17 18:53:55.226 [INFO][3950] ipam/ipam.go 489: Trying affinity for 192.168.88.192/26 host="ci-3510.3.7-a-9ed44aff31" Mar 17 18:53:55.278109 env[1409]: 2025-03-17 18:53:55.228 [INFO][3950] ipam/ipam.go 155: Attempting to load block cidr=192.168.88.192/26 host="ci-3510.3.7-a-9ed44aff31" Mar 17 18:53:55.278109 env[1409]: 2025-03-17 18:53:55.229 [INFO][3950] ipam/ipam.go 232: Affinity is confirmed and block has been loaded cidr=192.168.88.192/26 host="ci-3510.3.7-a-9ed44aff31" Mar 17 18:53:55.278109 env[1409]: 2025-03-17 18:53:55.229 [INFO][3950] ipam/ipam.go 1180: Attempting to assign 1 addresses from block block=192.168.88.192/26 handle="k8s-pod-network.5db20a01bfb7bedd3ba9f9c57ce5082f24f82e7a7159d510ad0ba113c757b961" host="ci-3510.3.7-a-9ed44aff31" Mar 17 18:53:55.278109 env[1409]: 2025-03-17 18:53:55.230 [INFO][3950] ipam/ipam.go 1685: Creating new handle: k8s-pod-network.5db20a01bfb7bedd3ba9f9c57ce5082f24f82e7a7159d510ad0ba113c757b961 Mar 17 18:53:55.278109 env[1409]: 2025-03-17 18:53:55.234 [INFO][3950] ipam/ipam.go 1203: Writing block in order to claim IPs block=192.168.88.192/26 handle="k8s-pod-network.5db20a01bfb7bedd3ba9f9c57ce5082f24f82e7a7159d510ad0ba113c757b961" host="ci-3510.3.7-a-9ed44aff31" Mar 17 18:53:55.278109 env[1409]: 2025-03-17 18:53:55.243 [INFO][3950] ipam/ipam.go 1216: Successfully claimed IPs: [192.168.88.194/26] block=192.168.88.192/26 handle="k8s-pod-network.5db20a01bfb7bedd3ba9f9c57ce5082f24f82e7a7159d510ad0ba113c757b961" host="ci-3510.3.7-a-9ed44aff31" Mar 17 18:53:55.278109 env[1409]: 2025-03-17 18:53:55.243 [INFO][3950] ipam/ipam.go 847: Auto-assigned 1 out of 1 IPv4s: [192.168.88.194/26] handle="k8s-pod-network.5db20a01bfb7bedd3ba9f9c57ce5082f24f82e7a7159d510ad0ba113c757b961" host="ci-3510.3.7-a-9ed44aff31" Mar 17 18:53:55.278109 env[1409]: 2025-03-17 18:53:55.243 [INFO][3950] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Mar 17 18:53:55.278109 env[1409]: 2025-03-17 18:53:55.243 [INFO][3950] ipam/ipam_plugin.go 283: Calico CNI IPAM assigned addresses IPv4=[192.168.88.194/26] IPv6=[] ContainerID="5db20a01bfb7bedd3ba9f9c57ce5082f24f82e7a7159d510ad0ba113c757b961" HandleID="k8s-pod-network.5db20a01bfb7bedd3ba9f9c57ce5082f24f82e7a7159d510ad0ba113c757b961" Workload="ci--3510.3.7--a--9ed44aff31-k8s-coredns--668d6bf9bc--xjnb2-eth0" Mar 17 18:53:55.279068 env[1409]: 2025-03-17 18:53:55.244 [INFO][3935] cni-plugin/k8s.go 386: Populated endpoint ContainerID="5db20a01bfb7bedd3ba9f9c57ce5082f24f82e7a7159d510ad0ba113c757b961" Namespace="kube-system" Pod="coredns-668d6bf9bc-xjnb2" WorkloadEndpoint="ci--3510.3.7--a--9ed44aff31-k8s-coredns--668d6bf9bc--xjnb2-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ci--3510.3.7--a--9ed44aff31-k8s-coredns--668d6bf9bc--xjnb2-eth0", GenerateName:"coredns-668d6bf9bc-", Namespace:"kube-system", SelfLink:"", UID:"f6e876a2-e0ad-437c-8982-fb194bf7b8dd", ResourceVersion:"780", Generation:0, CreationTimestamp:time.Date(2025, time.March, 17, 18, 53, 20, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"k8s-app":"kube-dns", "pod-template-hash":"668d6bf9bc", "projectcalico.org/namespace":"kube-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"coredns"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ci-3510.3.7-a-9ed44aff31", ContainerID:"", Pod:"coredns-668d6bf9bc-xjnb2", Endpoint:"eth0", ServiceAccountName:"coredns", IPNetworks:[]string{"192.168.88.194/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.kube-system", "ksa.kube-system.coredns"}, InterfaceName:"cali7435b94cef9", MAC:"", Ports:[]v3.WorkloadEndpointPort{v3.WorkloadEndpointPort{Name:"dns", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"UDP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"dns-tcp", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"metrics", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x23c1, HostPort:0x0, HostIP:""}}, AllowSpoofedSourcePrefixes:[]string(nil)}} Mar 17 18:53:55.279068 env[1409]: 2025-03-17 18:53:55.244 [INFO][3935] cni-plugin/k8s.go 387: Calico CNI using IPs: [192.168.88.194/32] ContainerID="5db20a01bfb7bedd3ba9f9c57ce5082f24f82e7a7159d510ad0ba113c757b961" Namespace="kube-system" Pod="coredns-668d6bf9bc-xjnb2" WorkloadEndpoint="ci--3510.3.7--a--9ed44aff31-k8s-coredns--668d6bf9bc--xjnb2-eth0" Mar 17 18:53:55.279068 env[1409]: 2025-03-17 18:53:55.244 [INFO][3935] cni-plugin/dataplane_linux.go 69: Setting the host side veth name to cali7435b94cef9 ContainerID="5db20a01bfb7bedd3ba9f9c57ce5082f24f82e7a7159d510ad0ba113c757b961" Namespace="kube-system" Pod="coredns-668d6bf9bc-xjnb2" WorkloadEndpoint="ci--3510.3.7--a--9ed44aff31-k8s-coredns--668d6bf9bc--xjnb2-eth0" Mar 17 18:53:55.279068 env[1409]: 2025-03-17 18:53:55.246 [INFO][3935] cni-plugin/dataplane_linux.go 508: Disabling IPv4 forwarding ContainerID="5db20a01bfb7bedd3ba9f9c57ce5082f24f82e7a7159d510ad0ba113c757b961" Namespace="kube-system" Pod="coredns-668d6bf9bc-xjnb2" WorkloadEndpoint="ci--3510.3.7--a--9ed44aff31-k8s-coredns--668d6bf9bc--xjnb2-eth0" Mar 17 18:53:55.279068 env[1409]: 2025-03-17 18:53:55.257 [INFO][3935] cni-plugin/k8s.go 414: Added Mac, interface name, and active container ID to endpoint ContainerID="5db20a01bfb7bedd3ba9f9c57ce5082f24f82e7a7159d510ad0ba113c757b961" Namespace="kube-system" Pod="coredns-668d6bf9bc-xjnb2" WorkloadEndpoint="ci--3510.3.7--a--9ed44aff31-k8s-coredns--668d6bf9bc--xjnb2-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ci--3510.3.7--a--9ed44aff31-k8s-coredns--668d6bf9bc--xjnb2-eth0", GenerateName:"coredns-668d6bf9bc-", Namespace:"kube-system", SelfLink:"", UID:"f6e876a2-e0ad-437c-8982-fb194bf7b8dd", ResourceVersion:"780", Generation:0, CreationTimestamp:time.Date(2025, time.March, 17, 18, 53, 20, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"k8s-app":"kube-dns", "pod-template-hash":"668d6bf9bc", "projectcalico.org/namespace":"kube-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"coredns"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ci-3510.3.7-a-9ed44aff31", ContainerID:"5db20a01bfb7bedd3ba9f9c57ce5082f24f82e7a7159d510ad0ba113c757b961", Pod:"coredns-668d6bf9bc-xjnb2", Endpoint:"eth0", ServiceAccountName:"coredns", IPNetworks:[]string{"192.168.88.194/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.kube-system", "ksa.kube-system.coredns"}, InterfaceName:"cali7435b94cef9", MAC:"4a:3a:84:da:a1:7b", Ports:[]v3.WorkloadEndpointPort{v3.WorkloadEndpointPort{Name:"dns", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"UDP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"dns-tcp", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"metrics", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x23c1, HostPort:0x0, HostIP:""}}, AllowSpoofedSourcePrefixes:[]string(nil)}} Mar 17 18:53:55.279068 env[1409]: 2025-03-17 18:53:55.273 [INFO][3935] cni-plugin/k8s.go 500: Wrote updated endpoint to datastore ContainerID="5db20a01bfb7bedd3ba9f9c57ce5082f24f82e7a7159d510ad0ba113c757b961" Namespace="kube-system" Pod="coredns-668d6bf9bc-xjnb2" WorkloadEndpoint="ci--3510.3.7--a--9ed44aff31-k8s-coredns--668d6bf9bc--xjnb2-eth0" Mar 17 18:53:55.289000 audit[3967]: NETFILTER_CFG table=filter:109 family=2 entries=30 op=nft_register_chain pid=3967 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Mar 17 18:53:55.289000 audit[3967]: SYSCALL arch=c000003e syscall=46 success=yes exit=17032 a0=3 a1=7fff3b58ac10 a2=0 a3=7fff3b58abfc items=0 ppid=3599 pid=3967 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:53:55.289000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Mar 17 18:53:55.299960 env[1409]: time="2025-03-17T18:53:55.299664729Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Mar 17 18:53:55.299960 env[1409]: time="2025-03-17T18:53:55.299736229Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Mar 17 18:53:55.299960 env[1409]: time="2025-03-17T18:53:55.299747529Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Mar 17 18:53:55.300316 env[1409]: time="2025-03-17T18:53:55.300007331Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/5db20a01bfb7bedd3ba9f9c57ce5082f24f82e7a7159d510ad0ba113c757b961 pid=3979 runtime=io.containerd.runc.v2 Mar 17 18:53:55.324739 systemd[1]: Started cri-containerd-5db20a01bfb7bedd3ba9f9c57ce5082f24f82e7a7159d510ad0ba113c757b961.scope. Mar 17 18:53:55.336000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:55.336000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:55.336000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:55.336000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:55.336000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:55.336000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:55.336000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:55.336000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:55.336000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:55.336000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:55.336000 audit: BPF prog-id=164 op=LOAD Mar 17 18:53:55.337000 audit[3988]: AVC avc: denied { bpf } for pid=3988 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:55.337000 audit[3988]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000147c48 a2=10 a3=1c items=0 ppid=3979 pid=3988 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:53:55.337000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3564623230613031626662376265646433626139663963353763653530 Mar 17 18:53:55.337000 audit[3988]: AVC avc: denied { perfmon } for pid=3988 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:55.337000 audit[3988]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001476b0 a2=3c a3=c items=0 ppid=3979 pid=3988 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:53:55.337000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3564623230613031626662376265646433626139663963353763653530 Mar 17 18:53:55.337000 audit[3988]: AVC avc: denied { bpf } for pid=3988 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:55.337000 audit[3988]: AVC avc: denied { bpf } for pid=3988 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:55.337000 audit[3988]: AVC avc: denied { bpf } for pid=3988 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:55.337000 audit[3988]: AVC avc: denied { perfmon } for pid=3988 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:55.337000 audit[3988]: AVC avc: denied { perfmon } for pid=3988 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:55.337000 audit[3988]: AVC avc: denied { perfmon } for pid=3988 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:55.337000 audit[3988]: AVC avc: denied { perfmon } for pid=3988 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:55.337000 audit[3988]: AVC avc: denied { perfmon } for pid=3988 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:55.337000 audit[3988]: AVC avc: denied { bpf } for pid=3988 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:55.337000 audit[3988]: AVC avc: denied { bpf } for pid=3988 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:55.337000 audit: BPF prog-id=165 op=LOAD Mar 17 18:53:55.337000 audit[3988]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001479d8 a2=78 a3=c0001f6740 items=0 ppid=3979 pid=3988 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:53:55.337000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3564623230613031626662376265646433626139663963353763653530 Mar 17 18:53:55.337000 audit[3988]: AVC avc: denied { bpf } for pid=3988 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:55.337000 audit[3988]: AVC avc: denied { bpf } for pid=3988 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:55.337000 audit[3988]: AVC avc: denied { perfmon } for pid=3988 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:55.337000 audit[3988]: AVC avc: denied { perfmon } for pid=3988 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:55.337000 audit[3988]: AVC avc: denied { perfmon } for pid=3988 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:55.337000 audit[3988]: AVC avc: denied { perfmon } for pid=3988 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:55.337000 audit[3988]: AVC avc: denied { perfmon } for pid=3988 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:55.337000 audit[3988]: AVC avc: denied { bpf } for pid=3988 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:55.337000 audit[3988]: AVC avc: denied { bpf } for pid=3988 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:55.337000 audit: BPF prog-id=166 op=LOAD Mar 17 18:53:55.337000 audit[3988]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000147770 a2=78 a3=c0001f6788 items=0 ppid=3979 pid=3988 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:53:55.337000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3564623230613031626662376265646433626139663963353763653530 Mar 17 18:53:55.337000 audit: BPF prog-id=166 op=UNLOAD Mar 17 18:53:55.337000 audit: BPF prog-id=165 op=UNLOAD Mar 17 18:53:55.337000 audit[3988]: AVC avc: denied { bpf } for pid=3988 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:55.337000 audit[3988]: AVC avc: denied { bpf } for pid=3988 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:55.337000 audit[3988]: AVC avc: denied { bpf } for pid=3988 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:55.337000 audit[3988]: AVC avc: denied { perfmon } for pid=3988 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:55.337000 audit[3988]: AVC avc: denied { perfmon } for pid=3988 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:55.337000 audit[3988]: AVC avc: denied { perfmon } for pid=3988 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:55.337000 audit[3988]: AVC avc: denied { perfmon } for pid=3988 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:55.337000 audit[3988]: AVC avc: denied { perfmon } for pid=3988 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:55.337000 audit[3988]: AVC avc: denied { bpf } for pid=3988 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:55.337000 audit[3988]: AVC avc: denied { bpf } for pid=3988 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:55.337000 audit: BPF prog-id=167 op=LOAD Mar 17 18:53:55.337000 audit[3988]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000147c30 a2=78 a3=c0001f6b98 items=0 ppid=3979 pid=3988 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:53:55.337000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3564623230613031626662376265646433626139663963353763653530 Mar 17 18:53:55.365858 env[1409]: time="2025-03-17T18:53:55.365809819Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:coredns-668d6bf9bc-xjnb2,Uid:f6e876a2-e0ad-437c-8982-fb194bf7b8dd,Namespace:kube-system,Attempt:1,} returns sandbox id \"5db20a01bfb7bedd3ba9f9c57ce5082f24f82e7a7159d510ad0ba113c757b961\"" Mar 17 18:53:55.369988 env[1409]: time="2025-03-17T18:53:55.369961437Z" level=info msg="CreateContainer within sandbox \"5db20a01bfb7bedd3ba9f9c57ce5082f24f82e7a7159d510ad0ba113c757b961\" for container &ContainerMetadata{Name:coredns,Attempt:0,}" Mar 17 18:53:55.407659 env[1409]: time="2025-03-17T18:53:55.407621202Z" level=info msg="CreateContainer within sandbox \"5db20a01bfb7bedd3ba9f9c57ce5082f24f82e7a7159d510ad0ba113c757b961\" for &ContainerMetadata{Name:coredns,Attempt:0,} returns container id \"260af611e28614e9e7522e0fc0d533b5e24b62bbd276e95b0ee072de7436fb6f\"" Mar 17 18:53:55.409240 env[1409]: time="2025-03-17T18:53:55.408199704Z" level=info msg="StartContainer for \"260af611e28614e9e7522e0fc0d533b5e24b62bbd276e95b0ee072de7436fb6f\"" Mar 17 18:53:55.424509 systemd[1]: Started cri-containerd-260af611e28614e9e7522e0fc0d533b5e24b62bbd276e95b0ee072de7436fb6f.scope. Mar 17 18:53:55.438000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:55.438000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:55.439000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:55.439000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:55.439000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:55.439000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:55.439000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:55.439000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:55.439000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:55.439000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:55.439000 audit: BPF prog-id=168 op=LOAD Mar 17 18:53:55.439000 audit[4020]: AVC avc: denied { bpf } for pid=4020 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:55.439000 audit[4020]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c0001bdc48 a2=10 a3=1c items=0 ppid=3979 pid=4020 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:53:55.439000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3236306166363131653238363134653965373532326530666330643533 Mar 17 18:53:55.439000 audit[4020]: AVC avc: denied { perfmon } for pid=4020 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:55.439000 audit[4020]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001bd6b0 a2=3c a3=8 items=0 ppid=3979 pid=4020 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:53:55.439000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3236306166363131653238363134653965373532326530666330643533 Mar 17 18:53:55.440000 audit[4020]: AVC avc: denied { bpf } for pid=4020 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:55.440000 audit[4020]: AVC avc: denied { bpf } for pid=4020 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:55.440000 audit[4020]: AVC avc: denied { bpf } for pid=4020 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:55.440000 audit[4020]: AVC avc: denied { perfmon } for pid=4020 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:55.440000 audit[4020]: AVC avc: denied { perfmon } for pid=4020 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:55.440000 audit[4020]: AVC avc: denied { perfmon } for pid=4020 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:55.440000 audit[4020]: AVC avc: denied { perfmon } for pid=4020 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:55.440000 audit[4020]: AVC avc: denied { perfmon } for pid=4020 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:55.440000 audit[4020]: AVC avc: denied { bpf } for pid=4020 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:55.440000 audit[4020]: AVC avc: denied { bpf } for pid=4020 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:55.440000 audit: BPF prog-id=169 op=LOAD Mar 17 18:53:55.440000 audit[4020]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001bd9d8 a2=78 a3=c0001af0b0 items=0 ppid=3979 pid=4020 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:53:55.440000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3236306166363131653238363134653965373532326530666330643533 Mar 17 18:53:55.440000 audit[4020]: AVC avc: denied { bpf } for pid=4020 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:55.440000 audit[4020]: AVC avc: denied { bpf } for pid=4020 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:55.440000 audit[4020]: AVC avc: denied { perfmon } for pid=4020 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:55.440000 audit[4020]: AVC avc: denied { perfmon } for pid=4020 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:55.440000 audit[4020]: AVC avc: denied { perfmon } for pid=4020 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:55.440000 audit[4020]: AVC avc: denied { perfmon } for pid=4020 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:55.440000 audit[4020]: AVC avc: denied { perfmon } for pid=4020 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:55.440000 audit[4020]: AVC avc: denied { bpf } for pid=4020 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:55.440000 audit[4020]: AVC avc: denied { bpf } for pid=4020 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:55.440000 audit: BPF prog-id=170 op=LOAD Mar 17 18:53:55.440000 audit[4020]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c0001bd770 a2=78 a3=c0001af0f8 items=0 ppid=3979 pid=4020 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:53:55.440000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3236306166363131653238363134653965373532326530666330643533 Mar 17 18:53:55.440000 audit: BPF prog-id=170 op=UNLOAD Mar 17 18:53:55.440000 audit: BPF prog-id=169 op=UNLOAD Mar 17 18:53:55.440000 audit[4020]: AVC avc: denied { bpf } for pid=4020 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:55.440000 audit[4020]: AVC avc: denied { bpf } for pid=4020 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:55.440000 audit[4020]: AVC avc: denied { bpf } for pid=4020 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:55.440000 audit[4020]: AVC avc: denied { perfmon } for pid=4020 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:55.440000 audit[4020]: AVC avc: denied { perfmon } for pid=4020 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:55.440000 audit[4020]: AVC avc: denied { perfmon } for pid=4020 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:55.440000 audit[4020]: AVC avc: denied { perfmon } for pid=4020 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:55.440000 audit[4020]: AVC avc: denied { perfmon } for pid=4020 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:55.440000 audit[4020]: AVC avc: denied { bpf } for pid=4020 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:55.440000 audit[4020]: AVC avc: denied { bpf } for pid=4020 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:55.440000 audit: BPF prog-id=171 op=LOAD Mar 17 18:53:55.440000 audit[4020]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001bdc30 a2=78 a3=c0001af508 items=0 ppid=3979 pid=4020 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:53:55.440000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3236306166363131653238363134653965373532326530666330643533 Mar 17 18:53:55.457038 env[1409]: time="2025-03-17T18:53:55.456968118Z" level=info msg="StartContainer for \"260af611e28614e9e7522e0fc0d533b5e24b62bbd276e95b0ee072de7436fb6f\" returns successfully" Mar 17 18:53:55.466000 audit[4031]: AVC avc: denied { getattr } for pid=4031 comm="coredns" path="cgroup:[4026532556]" dev="nsfs" ino=4026532556 scontext=system_u:system_r:svirt_lxc_net_t:s0:c519,c765 tcontext=system_u:object_r:nsfs_t:s0 tclass=file permissive=0 Mar 17 18:53:55.466000 audit[4031]: SYSCALL arch=c000003e syscall=262 success=no exit=-13 a0=ffffffffffffff9c a1=c0004f47f8 a2=c0004f8b98 a3=0 items=0 ppid=3979 pid=4031 auid=4294967295 uid=65532 gid=65532 euid=65532 suid=65532 fsuid=65532 egid=65532 sgid=65532 fsgid=65532 tty=(none) ses=4294967295 comm="coredns" exe="/coredns" subj=system_u:system_r:svirt_lxc_net_t:s0:c519,c765 key=(null) Mar 17 18:53:55.466000 audit: PROCTITLE proctitle=2F636F7265646E73002D636F6E66002F6574632F636F7265646E732F436F726566696C65 Mar 17 18:53:55.693485 systemd-networkd[1562]: cali68b6c989586: Gained IPv6LL Mar 17 18:53:55.962013 env[1409]: time="2025-03-17T18:53:55.961883029Z" level=info msg="StopPodSandbox for \"304940bfa11edace9460b45a66850dc2d1525742296a41972caed85159dc4e39\"" Mar 17 18:53:55.963796 env[1409]: time="2025-03-17T18:53:55.963522836Z" level=info msg="StopPodSandbox for \"de5145d6114dbc64accc334b6c1a79dd7d3ea3b0416dd9163394f163c56670c0\"" Mar 17 18:53:56.089046 env[1409]: 2025-03-17 18:53:56.036 [INFO][4075] cni-plugin/k8s.go 608: Cleaning up netns ContainerID="de5145d6114dbc64accc334b6c1a79dd7d3ea3b0416dd9163394f163c56670c0" Mar 17 18:53:56.089046 env[1409]: 2025-03-17 18:53:56.036 [INFO][4075] cni-plugin/dataplane_linux.go 559: Deleting workload's device in netns. ContainerID="de5145d6114dbc64accc334b6c1a79dd7d3ea3b0416dd9163394f163c56670c0" iface="eth0" netns="/var/run/netns/cni-ba3f13a2-b725-e576-4564-abbe397ec43a" Mar 17 18:53:56.089046 env[1409]: 2025-03-17 18:53:56.036 [INFO][4075] cni-plugin/dataplane_linux.go 570: Entered netns, deleting veth. ContainerID="de5145d6114dbc64accc334b6c1a79dd7d3ea3b0416dd9163394f163c56670c0" iface="eth0" netns="/var/run/netns/cni-ba3f13a2-b725-e576-4564-abbe397ec43a" Mar 17 18:53:56.089046 env[1409]: 2025-03-17 18:53:56.037 [INFO][4075] cni-plugin/dataplane_linux.go 597: Workload's veth was already gone. Nothing to do. ContainerID="de5145d6114dbc64accc334b6c1a79dd7d3ea3b0416dd9163394f163c56670c0" iface="eth0" netns="/var/run/netns/cni-ba3f13a2-b725-e576-4564-abbe397ec43a" Mar 17 18:53:56.089046 env[1409]: 2025-03-17 18:53:56.037 [INFO][4075] cni-plugin/k8s.go 615: Releasing IP address(es) ContainerID="de5145d6114dbc64accc334b6c1a79dd7d3ea3b0416dd9163394f163c56670c0" Mar 17 18:53:56.089046 env[1409]: 2025-03-17 18:53:56.037 [INFO][4075] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="de5145d6114dbc64accc334b6c1a79dd7d3ea3b0416dd9163394f163c56670c0" Mar 17 18:53:56.089046 env[1409]: 2025-03-17 18:53:56.073 [INFO][4091] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="de5145d6114dbc64accc334b6c1a79dd7d3ea3b0416dd9163394f163c56670c0" HandleID="k8s-pod-network.de5145d6114dbc64accc334b6c1a79dd7d3ea3b0416dd9163394f163c56670c0" Workload="ci--3510.3.7--a--9ed44aff31-k8s-calico--apiserver--5858799f47--k8zn6-eth0" Mar 17 18:53:56.089046 env[1409]: 2025-03-17 18:53:56.073 [INFO][4091] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Mar 17 18:53:56.089046 env[1409]: 2025-03-17 18:53:56.073 [INFO][4091] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Mar 17 18:53:56.089046 env[1409]: 2025-03-17 18:53:56.082 [WARNING][4091] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="de5145d6114dbc64accc334b6c1a79dd7d3ea3b0416dd9163394f163c56670c0" HandleID="k8s-pod-network.de5145d6114dbc64accc334b6c1a79dd7d3ea3b0416dd9163394f163c56670c0" Workload="ci--3510.3.7--a--9ed44aff31-k8s-calico--apiserver--5858799f47--k8zn6-eth0" Mar 17 18:53:56.089046 env[1409]: 2025-03-17 18:53:56.082 [INFO][4091] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="de5145d6114dbc64accc334b6c1a79dd7d3ea3b0416dd9163394f163c56670c0" HandleID="k8s-pod-network.de5145d6114dbc64accc334b6c1a79dd7d3ea3b0416dd9163394f163c56670c0" Workload="ci--3510.3.7--a--9ed44aff31-k8s-calico--apiserver--5858799f47--k8zn6-eth0" Mar 17 18:53:56.089046 env[1409]: 2025-03-17 18:53:56.086 [INFO][4091] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Mar 17 18:53:56.089046 env[1409]: 2025-03-17 18:53:56.088 [INFO][4075] cni-plugin/k8s.go 621: Teardown processing complete. ContainerID="de5145d6114dbc64accc334b6c1a79dd7d3ea3b0416dd9163394f163c56670c0" Mar 17 18:53:56.093464 systemd[1]: run-netns-cni\x2dba3f13a2\x2db725\x2de576\x2d4564\x2dabbe397ec43a.mount: Deactivated successfully. Mar 17 18:53:56.095513 env[1409]: time="2025-03-17T18:53:56.095468108Z" level=info msg="TearDown network for sandbox \"de5145d6114dbc64accc334b6c1a79dd7d3ea3b0416dd9163394f163c56670c0\" successfully" Mar 17 18:53:56.095655 env[1409]: time="2025-03-17T18:53:56.095632909Z" level=info msg="StopPodSandbox for \"de5145d6114dbc64accc334b6c1a79dd7d3ea3b0416dd9163394f163c56670c0\" returns successfully" Mar 17 18:53:56.096711 env[1409]: time="2025-03-17T18:53:56.096678013Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-apiserver-5858799f47-k8zn6,Uid:7312b29a-7b59-4311-b619-758dbd249078,Namespace:calico-apiserver,Attempt:1,}" Mar 17 18:53:56.118638 env[1409]: 2025-03-17 18:53:56.043 [INFO][4084] cni-plugin/k8s.go 608: Cleaning up netns ContainerID="304940bfa11edace9460b45a66850dc2d1525742296a41972caed85159dc4e39" Mar 17 18:53:56.118638 env[1409]: 2025-03-17 18:53:56.043 [INFO][4084] cni-plugin/dataplane_linux.go 559: Deleting workload's device in netns. ContainerID="304940bfa11edace9460b45a66850dc2d1525742296a41972caed85159dc4e39" iface="eth0" netns="/var/run/netns/cni-b81edb91-b34f-76d4-58d1-ca6d3f152b7e" Mar 17 18:53:56.118638 env[1409]: 2025-03-17 18:53:56.043 [INFO][4084] cni-plugin/dataplane_linux.go 570: Entered netns, deleting veth. ContainerID="304940bfa11edace9460b45a66850dc2d1525742296a41972caed85159dc4e39" iface="eth0" netns="/var/run/netns/cni-b81edb91-b34f-76d4-58d1-ca6d3f152b7e" Mar 17 18:53:56.118638 env[1409]: 2025-03-17 18:53:56.046 [INFO][4084] cni-plugin/dataplane_linux.go 597: Workload's veth was already gone. Nothing to do. ContainerID="304940bfa11edace9460b45a66850dc2d1525742296a41972caed85159dc4e39" iface="eth0" netns="/var/run/netns/cni-b81edb91-b34f-76d4-58d1-ca6d3f152b7e" Mar 17 18:53:56.118638 env[1409]: 2025-03-17 18:53:56.046 [INFO][4084] cni-plugin/k8s.go 615: Releasing IP address(es) ContainerID="304940bfa11edace9460b45a66850dc2d1525742296a41972caed85159dc4e39" Mar 17 18:53:56.118638 env[1409]: 2025-03-17 18:53:56.046 [INFO][4084] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="304940bfa11edace9460b45a66850dc2d1525742296a41972caed85159dc4e39" Mar 17 18:53:56.118638 env[1409]: 2025-03-17 18:53:56.102 [INFO][4096] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="304940bfa11edace9460b45a66850dc2d1525742296a41972caed85159dc4e39" HandleID="k8s-pod-network.304940bfa11edace9460b45a66850dc2d1525742296a41972caed85159dc4e39" Workload="ci--3510.3.7--a--9ed44aff31-k8s-calico--apiserver--5858799f47--ln8wx-eth0" Mar 17 18:53:56.118638 env[1409]: 2025-03-17 18:53:56.102 [INFO][4096] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Mar 17 18:53:56.118638 env[1409]: 2025-03-17 18:53:56.102 [INFO][4096] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Mar 17 18:53:56.118638 env[1409]: 2025-03-17 18:53:56.110 [WARNING][4096] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="304940bfa11edace9460b45a66850dc2d1525742296a41972caed85159dc4e39" HandleID="k8s-pod-network.304940bfa11edace9460b45a66850dc2d1525742296a41972caed85159dc4e39" Workload="ci--3510.3.7--a--9ed44aff31-k8s-calico--apiserver--5858799f47--ln8wx-eth0" Mar 17 18:53:56.118638 env[1409]: 2025-03-17 18:53:56.110 [INFO][4096] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="304940bfa11edace9460b45a66850dc2d1525742296a41972caed85159dc4e39" HandleID="k8s-pod-network.304940bfa11edace9460b45a66850dc2d1525742296a41972caed85159dc4e39" Workload="ci--3510.3.7--a--9ed44aff31-k8s-calico--apiserver--5858799f47--ln8wx-eth0" Mar 17 18:53:56.118638 env[1409]: 2025-03-17 18:53:56.113 [INFO][4096] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Mar 17 18:53:56.118638 env[1409]: 2025-03-17 18:53:56.115 [INFO][4084] cni-plugin/k8s.go 621: Teardown processing complete. ContainerID="304940bfa11edace9460b45a66850dc2d1525742296a41972caed85159dc4e39" Mar 17 18:53:56.123516 env[1409]: time="2025-03-17T18:53:56.122302024Z" level=info msg="TearDown network for sandbox \"304940bfa11edace9460b45a66850dc2d1525742296a41972caed85159dc4e39\" successfully" Mar 17 18:53:56.123516 env[1409]: time="2025-03-17T18:53:56.122339724Z" level=info msg="StopPodSandbox for \"304940bfa11edace9460b45a66850dc2d1525742296a41972caed85159dc4e39\" returns successfully" Mar 17 18:53:56.122646 systemd[1]: run-netns-cni\x2db81edb91\x2db34f\x2d76d4\x2d58d1\x2dca6d3f152b7e.mount: Deactivated successfully. Mar 17 18:53:56.124010 env[1409]: time="2025-03-17T18:53:56.123977631Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-apiserver-5858799f47-ln8wx,Uid:640a4f62-1afa-4bd0-b183-7d5406f3f026,Namespace:calico-apiserver,Attempt:1,}" Mar 17 18:53:56.145000 audit[4104]: NETFILTER_CFG table=filter:110 family=2 entries=10 op=nft_register_rule pid=4104 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Mar 17 18:53:56.145000 audit[4104]: SYSCALL arch=c000003e syscall=46 success=yes exit=3760 a0=3 a1=7fff6f4e43a0 a2=0 a3=7fff6f4e438c items=0 ppid=2619 pid=4104 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:53:56.145000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Mar 17 18:53:56.159000 audit[4104]: NETFILTER_CFG table=nat:111 family=2 entries=44 op=nft_register_rule pid=4104 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Mar 17 18:53:56.159000 audit[4104]: SYSCALL arch=c000003e syscall=46 success=yes exit=14196 a0=3 a1=7fff6f4e43a0 a2=0 a3=7fff6f4e438c items=0 ppid=2619 pid=4104 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:53:56.159000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Mar 17 18:53:56.172612 kubelet[2450]: I0317 18:53:56.172556 2450 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="kube-system/coredns-668d6bf9bc-xjnb2" podStartSLOduration=36.172534441 podStartE2EDuration="36.172534441s" podCreationTimestamp="2025-03-17 18:53:20 +0000 UTC" firstStartedPulling="0001-01-01 00:00:00 +0000 UTC" lastFinishedPulling="0001-01-01 00:00:00 +0000 UTC" observedRunningTime="2025-03-17 18:53:56.126679143 +0000 UTC m=+42.284496209" watchObservedRunningTime="2025-03-17 18:53:56.172534441 +0000 UTC m=+42.330351407" Mar 17 18:53:56.333845 systemd-networkd[1562]: calibb2707be1e8: Link UP Mar 17 18:53:56.347555 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): eth0: link becomes ready Mar 17 18:53:56.347625 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): calibb2707be1e8: link becomes ready Mar 17 18:53:56.348134 systemd-networkd[1562]: calibb2707be1e8: Gained carrier Mar 17 18:53:56.361138 env[1409]: 2025-03-17 18:53:56.245 [INFO][4105] cni-plugin/plugin.go 325: Calico CNI found existing endpoint: &{{WorkloadEndpoint projectcalico.org/v3} {ci--3510.3.7--a--9ed44aff31-k8s-calico--apiserver--5858799f47--k8zn6-eth0 calico-apiserver-5858799f47- calico-apiserver 7312b29a-7b59-4311-b619-758dbd249078 799 0 2025-03-17 18:53:27 +0000 UTC map[apiserver:true app.kubernetes.io/name:calico-apiserver k8s-app:calico-apiserver pod-template-hash:5858799f47 projectcalico.org/namespace:calico-apiserver projectcalico.org/orchestrator:k8s projectcalico.org/serviceaccount:calico-apiserver] map[] [] [] []} {k8s ci-3510.3.7-a-9ed44aff31 calico-apiserver-5858799f47-k8zn6 eth0 calico-apiserver [] [] [kns.calico-apiserver ksa.calico-apiserver.calico-apiserver] calibb2707be1e8 [] []}} ContainerID="9c6f55438ce577054d49a02fc19619c7f7c44c024da34178533d3aac4328c094" Namespace="calico-apiserver" Pod="calico-apiserver-5858799f47-k8zn6" WorkloadEndpoint="ci--3510.3.7--a--9ed44aff31-k8s-calico--apiserver--5858799f47--k8zn6-" Mar 17 18:53:56.361138 env[1409]: 2025-03-17 18:53:56.245 [INFO][4105] cni-plugin/k8s.go 77: Extracted identifiers for CmdAddK8s ContainerID="9c6f55438ce577054d49a02fc19619c7f7c44c024da34178533d3aac4328c094" Namespace="calico-apiserver" Pod="calico-apiserver-5858799f47-k8zn6" WorkloadEndpoint="ci--3510.3.7--a--9ed44aff31-k8s-calico--apiserver--5858799f47--k8zn6-eth0" Mar 17 18:53:56.361138 env[1409]: 2025-03-17 18:53:56.285 [INFO][4131] ipam/ipam_plugin.go 225: Calico CNI IPAM request count IPv4=1 IPv6=0 ContainerID="9c6f55438ce577054d49a02fc19619c7f7c44c024da34178533d3aac4328c094" HandleID="k8s-pod-network.9c6f55438ce577054d49a02fc19619c7f7c44c024da34178533d3aac4328c094" Workload="ci--3510.3.7--a--9ed44aff31-k8s-calico--apiserver--5858799f47--k8zn6-eth0" Mar 17 18:53:56.361138 env[1409]: 2025-03-17 18:53:56.301 [INFO][4131] ipam/ipam_plugin.go 265: Auto assigning IP ContainerID="9c6f55438ce577054d49a02fc19619c7f7c44c024da34178533d3aac4328c094" HandleID="k8s-pod-network.9c6f55438ce577054d49a02fc19619c7f7c44c024da34178533d3aac4328c094" Workload="ci--3510.3.7--a--9ed44aff31-k8s-calico--apiserver--5858799f47--k8zn6-eth0" assignArgs=ipam.AutoAssignArgs{Num4:1, Num6:0, HandleID:(*string)(0xc000310a50), Attrs:map[string]string{"namespace":"calico-apiserver", "node":"ci-3510.3.7-a-9ed44aff31", "pod":"calico-apiserver-5858799f47-k8zn6", "timestamp":"2025-03-17 18:53:56.285016526 +0000 UTC"}, Hostname:"ci-3510.3.7-a-9ed44aff31", IPv4Pools:[]net.IPNet{}, IPv6Pools:[]net.IPNet{}, MaxBlocksPerHost:0, HostReservedAttrIPv4s:(*ipam.HostReservedAttr)(nil), HostReservedAttrIPv6s:(*ipam.HostReservedAttr)(nil), IntendedUse:"Workload"} Mar 17 18:53:56.361138 env[1409]: 2025-03-17 18:53:56.301 [INFO][4131] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Mar 17 18:53:56.361138 env[1409]: 2025-03-17 18:53:56.301 [INFO][4131] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Mar 17 18:53:56.361138 env[1409]: 2025-03-17 18:53:56.301 [INFO][4131] ipam/ipam.go 107: Auto-assign 1 ipv4, 0 ipv6 addrs for host 'ci-3510.3.7-a-9ed44aff31' Mar 17 18:53:56.361138 env[1409]: 2025-03-17 18:53:56.303 [INFO][4131] ipam/ipam.go 660: Looking up existing affinities for host handle="k8s-pod-network.9c6f55438ce577054d49a02fc19619c7f7c44c024da34178533d3aac4328c094" host="ci-3510.3.7-a-9ed44aff31" Mar 17 18:53:56.361138 env[1409]: 2025-03-17 18:53:56.307 [INFO][4131] ipam/ipam.go 372: Looking up existing affinities for host host="ci-3510.3.7-a-9ed44aff31" Mar 17 18:53:56.361138 env[1409]: 2025-03-17 18:53:56.310 [INFO][4131] ipam/ipam.go 489: Trying affinity for 192.168.88.192/26 host="ci-3510.3.7-a-9ed44aff31" Mar 17 18:53:56.361138 env[1409]: 2025-03-17 18:53:56.311 [INFO][4131] ipam/ipam.go 155: Attempting to load block cidr=192.168.88.192/26 host="ci-3510.3.7-a-9ed44aff31" Mar 17 18:53:56.361138 env[1409]: 2025-03-17 18:53:56.313 [INFO][4131] ipam/ipam.go 232: Affinity is confirmed and block has been loaded cidr=192.168.88.192/26 host="ci-3510.3.7-a-9ed44aff31" Mar 17 18:53:56.361138 env[1409]: 2025-03-17 18:53:56.313 [INFO][4131] ipam/ipam.go 1180: Attempting to assign 1 addresses from block block=192.168.88.192/26 handle="k8s-pod-network.9c6f55438ce577054d49a02fc19619c7f7c44c024da34178533d3aac4328c094" host="ci-3510.3.7-a-9ed44aff31" Mar 17 18:53:56.361138 env[1409]: 2025-03-17 18:53:56.314 [INFO][4131] ipam/ipam.go 1685: Creating new handle: k8s-pod-network.9c6f55438ce577054d49a02fc19619c7f7c44c024da34178533d3aac4328c094 Mar 17 18:53:56.361138 env[1409]: 2025-03-17 18:53:56.318 [INFO][4131] ipam/ipam.go 1203: Writing block in order to claim IPs block=192.168.88.192/26 handle="k8s-pod-network.9c6f55438ce577054d49a02fc19619c7f7c44c024da34178533d3aac4328c094" host="ci-3510.3.7-a-9ed44aff31" Mar 17 18:53:56.361138 env[1409]: 2025-03-17 18:53:56.328 [INFO][4131] ipam/ipam.go 1216: Successfully claimed IPs: [192.168.88.195/26] block=192.168.88.192/26 handle="k8s-pod-network.9c6f55438ce577054d49a02fc19619c7f7c44c024da34178533d3aac4328c094" host="ci-3510.3.7-a-9ed44aff31" Mar 17 18:53:56.361138 env[1409]: 2025-03-17 18:53:56.328 [INFO][4131] ipam/ipam.go 847: Auto-assigned 1 out of 1 IPv4s: [192.168.88.195/26] handle="k8s-pod-network.9c6f55438ce577054d49a02fc19619c7f7c44c024da34178533d3aac4328c094" host="ci-3510.3.7-a-9ed44aff31" Mar 17 18:53:56.361138 env[1409]: 2025-03-17 18:53:56.328 [INFO][4131] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Mar 17 18:53:56.361138 env[1409]: 2025-03-17 18:53:56.328 [INFO][4131] ipam/ipam_plugin.go 283: Calico CNI IPAM assigned addresses IPv4=[192.168.88.195/26] IPv6=[] ContainerID="9c6f55438ce577054d49a02fc19619c7f7c44c024da34178533d3aac4328c094" HandleID="k8s-pod-network.9c6f55438ce577054d49a02fc19619c7f7c44c024da34178533d3aac4328c094" Workload="ci--3510.3.7--a--9ed44aff31-k8s-calico--apiserver--5858799f47--k8zn6-eth0" Mar 17 18:53:56.362012 env[1409]: 2025-03-17 18:53:56.331 [INFO][4105] cni-plugin/k8s.go 386: Populated endpoint ContainerID="9c6f55438ce577054d49a02fc19619c7f7c44c024da34178533d3aac4328c094" Namespace="calico-apiserver" Pod="calico-apiserver-5858799f47-k8zn6" WorkloadEndpoint="ci--3510.3.7--a--9ed44aff31-k8s-calico--apiserver--5858799f47--k8zn6-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ci--3510.3.7--a--9ed44aff31-k8s-calico--apiserver--5858799f47--k8zn6-eth0", GenerateName:"calico-apiserver-5858799f47-", Namespace:"calico-apiserver", SelfLink:"", UID:"7312b29a-7b59-4311-b619-758dbd249078", ResourceVersion:"799", Generation:0, CreationTimestamp:time.Date(2025, time.March, 17, 18, 53, 27, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"apiserver":"true", "app.kubernetes.io/name":"calico-apiserver", "k8s-app":"calico-apiserver", "pod-template-hash":"5858799f47", "projectcalico.org/namespace":"calico-apiserver", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-apiserver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ci-3510.3.7-a-9ed44aff31", ContainerID:"", Pod:"calico-apiserver-5858799f47-k8zn6", Endpoint:"eth0", ServiceAccountName:"calico-apiserver", IPNetworks:[]string{"192.168.88.195/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-apiserver", "ksa.calico-apiserver.calico-apiserver"}, InterfaceName:"calibb2707be1e8", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil)}} Mar 17 18:53:56.362012 env[1409]: 2025-03-17 18:53:56.331 [INFO][4105] cni-plugin/k8s.go 387: Calico CNI using IPs: [192.168.88.195/32] ContainerID="9c6f55438ce577054d49a02fc19619c7f7c44c024da34178533d3aac4328c094" Namespace="calico-apiserver" Pod="calico-apiserver-5858799f47-k8zn6" WorkloadEndpoint="ci--3510.3.7--a--9ed44aff31-k8s-calico--apiserver--5858799f47--k8zn6-eth0" Mar 17 18:53:56.362012 env[1409]: 2025-03-17 18:53:56.331 [INFO][4105] cni-plugin/dataplane_linux.go 69: Setting the host side veth name to calibb2707be1e8 ContainerID="9c6f55438ce577054d49a02fc19619c7f7c44c024da34178533d3aac4328c094" Namespace="calico-apiserver" Pod="calico-apiserver-5858799f47-k8zn6" WorkloadEndpoint="ci--3510.3.7--a--9ed44aff31-k8s-calico--apiserver--5858799f47--k8zn6-eth0" Mar 17 18:53:56.362012 env[1409]: 2025-03-17 18:53:56.348 [INFO][4105] cni-plugin/dataplane_linux.go 508: Disabling IPv4 forwarding ContainerID="9c6f55438ce577054d49a02fc19619c7f7c44c024da34178533d3aac4328c094" Namespace="calico-apiserver" Pod="calico-apiserver-5858799f47-k8zn6" WorkloadEndpoint="ci--3510.3.7--a--9ed44aff31-k8s-calico--apiserver--5858799f47--k8zn6-eth0" Mar 17 18:53:56.362012 env[1409]: 2025-03-17 18:53:56.349 [INFO][4105] cni-plugin/k8s.go 414: Added Mac, interface name, and active container ID to endpoint ContainerID="9c6f55438ce577054d49a02fc19619c7f7c44c024da34178533d3aac4328c094" Namespace="calico-apiserver" Pod="calico-apiserver-5858799f47-k8zn6" WorkloadEndpoint="ci--3510.3.7--a--9ed44aff31-k8s-calico--apiserver--5858799f47--k8zn6-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ci--3510.3.7--a--9ed44aff31-k8s-calico--apiserver--5858799f47--k8zn6-eth0", GenerateName:"calico-apiserver-5858799f47-", Namespace:"calico-apiserver", SelfLink:"", UID:"7312b29a-7b59-4311-b619-758dbd249078", ResourceVersion:"799", Generation:0, CreationTimestamp:time.Date(2025, time.March, 17, 18, 53, 27, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"apiserver":"true", "app.kubernetes.io/name":"calico-apiserver", "k8s-app":"calico-apiserver", "pod-template-hash":"5858799f47", "projectcalico.org/namespace":"calico-apiserver", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-apiserver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ci-3510.3.7-a-9ed44aff31", ContainerID:"9c6f55438ce577054d49a02fc19619c7f7c44c024da34178533d3aac4328c094", Pod:"calico-apiserver-5858799f47-k8zn6", Endpoint:"eth0", ServiceAccountName:"calico-apiserver", IPNetworks:[]string{"192.168.88.195/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-apiserver", "ksa.calico-apiserver.calico-apiserver"}, InterfaceName:"calibb2707be1e8", MAC:"0a:db:9f:25:66:d9", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil)}} Mar 17 18:53:56.362012 env[1409]: 2025-03-17 18:53:56.359 [INFO][4105] cni-plugin/k8s.go 500: Wrote updated endpoint to datastore ContainerID="9c6f55438ce577054d49a02fc19619c7f7c44c024da34178533d3aac4328c094" Namespace="calico-apiserver" Pod="calico-apiserver-5858799f47-k8zn6" WorkloadEndpoint="ci--3510.3.7--a--9ed44aff31-k8s-calico--apiserver--5858799f47--k8zn6-eth0" Mar 17 18:53:56.382000 audit[4160]: NETFILTER_CFG table=filter:112 family=2 entries=48 op=nft_register_chain pid=4160 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Mar 17 18:53:56.382000 audit[4160]: SYSCALL arch=c000003e syscall=46 success=yes exit=25868 a0=3 a1=7ffc448a75c0 a2=0 a3=7ffc448a75ac items=0 ppid=3599 pid=4160 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:53:56.382000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Mar 17 18:53:56.383211 env[1409]: time="2025-03-17T18:53:56.382408347Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Mar 17 18:53:56.383211 env[1409]: time="2025-03-17T18:53:56.382454447Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Mar 17 18:53:56.383211 env[1409]: time="2025-03-17T18:53:56.382468847Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Mar 17 18:53:56.383211 env[1409]: time="2025-03-17T18:53:56.382615048Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/9c6f55438ce577054d49a02fc19619c7f7c44c024da34178533d3aac4328c094 pid=4165 runtime=io.containerd.runc.v2 Mar 17 18:53:56.399619 systemd[1]: Started cri-containerd-9c6f55438ce577054d49a02fc19619c7f7c44c024da34178533d3aac4328c094.scope. Mar 17 18:53:56.426000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:56.426000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:56.426000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:56.426000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:56.426000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:56.426000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:56.426000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:56.426000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:56.426000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:56.426000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:56.426000 audit: BPF prog-id=172 op=LOAD Mar 17 18:53:56.428000 audit[4175]: AVC avc: denied { bpf } for pid=4175 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:56.428000 audit[4175]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c0001c5c48 a2=10 a3=1c items=0 ppid=4165 pid=4175 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:53:56.428000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3963366635353433386365353737303534643439613032666331393631 Mar 17 18:53:56.428000 audit[4175]: AVC avc: denied { perfmon } for pid=4175 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:56.428000 audit[4175]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001c56b0 a2=3c a3=c items=0 ppid=4165 pid=4175 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:53:56.428000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3963366635353433386365353737303534643439613032666331393631 Mar 17 18:53:56.428000 audit[4175]: AVC avc: denied { bpf } for pid=4175 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:56.428000 audit[4175]: AVC avc: denied { bpf } for pid=4175 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:56.428000 audit[4175]: AVC avc: denied { bpf } for pid=4175 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:56.428000 audit[4175]: AVC avc: denied { perfmon } for pid=4175 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:56.428000 audit[4175]: AVC avc: denied { perfmon } for pid=4175 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:56.428000 audit[4175]: AVC avc: denied { perfmon } for pid=4175 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:56.428000 audit[4175]: AVC avc: denied { perfmon } for pid=4175 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:56.428000 audit[4175]: AVC avc: denied { perfmon } for pid=4175 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:56.428000 audit[4175]: AVC avc: denied { bpf } for pid=4175 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:56.428000 audit[4175]: AVC avc: denied { bpf } for pid=4175 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:56.428000 audit: BPF prog-id=173 op=LOAD Mar 17 18:53:56.428000 audit[4175]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001c59d8 a2=78 a3=c0000a0350 items=0 ppid=4165 pid=4175 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:53:56.428000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3963366635353433386365353737303534643439613032666331393631 Mar 17 18:53:56.428000 audit[4175]: AVC avc: denied { bpf } for pid=4175 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:56.428000 audit[4175]: AVC avc: denied { bpf } for pid=4175 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:56.428000 audit[4175]: AVC avc: denied { perfmon } for pid=4175 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:56.428000 audit[4175]: AVC avc: denied { perfmon } for pid=4175 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:56.428000 audit[4175]: AVC avc: denied { perfmon } for pid=4175 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:56.428000 audit[4175]: AVC avc: denied { perfmon } for pid=4175 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:56.428000 audit[4175]: AVC avc: denied { perfmon } for pid=4175 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:56.428000 audit[4175]: AVC avc: denied { bpf } for pid=4175 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:56.428000 audit[4175]: AVC avc: denied { bpf } for pid=4175 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:56.428000 audit: BPF prog-id=174 op=LOAD Mar 17 18:53:56.428000 audit[4175]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c0001c5770 a2=78 a3=c0000a0398 items=0 ppid=4165 pid=4175 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:53:56.428000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3963366635353433386365353737303534643439613032666331393631 Mar 17 18:53:56.428000 audit: BPF prog-id=174 op=UNLOAD Mar 17 18:53:56.428000 audit: BPF prog-id=173 op=UNLOAD Mar 17 18:53:56.428000 audit[4175]: AVC avc: denied { bpf } for pid=4175 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:56.428000 audit[4175]: AVC avc: denied { bpf } for pid=4175 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:56.428000 audit[4175]: AVC avc: denied { bpf } for pid=4175 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:56.428000 audit[4175]: AVC avc: denied { perfmon } for pid=4175 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:56.428000 audit[4175]: AVC avc: denied { perfmon } for pid=4175 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:56.428000 audit[4175]: AVC avc: denied { perfmon } for pid=4175 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:56.428000 audit[4175]: AVC avc: denied { perfmon } for pid=4175 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:56.428000 audit[4175]: AVC avc: denied { perfmon } for pid=4175 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:56.428000 audit[4175]: AVC avc: denied { bpf } for pid=4175 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:56.428000 audit[4175]: AVC avc: denied { bpf } for pid=4175 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:56.428000 audit: BPF prog-id=175 op=LOAD Mar 17 18:53:56.428000 audit[4175]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001c5c30 a2=78 a3=c0000a07a8 items=0 ppid=4165 pid=4175 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:53:56.428000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3963366635353433386365353737303534643439613032666331393631 Mar 17 18:53:56.472008 systemd-networkd[1562]: cali51208d89f9a: Link UP Mar 17 18:53:56.483393 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): cali51208d89f9a: link becomes ready Mar 17 18:53:56.483571 systemd-networkd[1562]: cali51208d89f9a: Gained carrier Mar 17 18:53:56.496549 env[1409]: time="2025-03-17T18:53:56.496499239Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-apiserver-5858799f47-k8zn6,Uid:7312b29a-7b59-4311-b619-758dbd249078,Namespace:calico-apiserver,Attempt:1,} returns sandbox id \"9c6f55438ce577054d49a02fc19619c7f7c44c024da34178533d3aac4328c094\"" Mar 17 18:53:56.498711 env[1409]: time="2025-03-17T18:53:56.498682549Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/apiserver:v3.29.1\"" Mar 17 18:53:56.504958 env[1409]: 2025-03-17 18:53:56.256 [INFO][4116] cni-plugin/plugin.go 325: Calico CNI found existing endpoint: &{{WorkloadEndpoint projectcalico.org/v3} {ci--3510.3.7--a--9ed44aff31-k8s-calico--apiserver--5858799f47--ln8wx-eth0 calico-apiserver-5858799f47- calico-apiserver 640a4f62-1afa-4bd0-b183-7d5406f3f026 800 0 2025-03-17 18:53:27 +0000 UTC map[apiserver:true app.kubernetes.io/name:calico-apiserver k8s-app:calico-apiserver pod-template-hash:5858799f47 projectcalico.org/namespace:calico-apiserver projectcalico.org/orchestrator:k8s projectcalico.org/serviceaccount:calico-apiserver] map[] [] [] []} {k8s ci-3510.3.7-a-9ed44aff31 calico-apiserver-5858799f47-ln8wx eth0 calico-apiserver [] [] [kns.calico-apiserver ksa.calico-apiserver.calico-apiserver] cali51208d89f9a [] []}} ContainerID="89eb8d75da9350ccd1f1763d6a2e73cc9101dc9c17ffc917af21a3162c014c9e" Namespace="calico-apiserver" Pod="calico-apiserver-5858799f47-ln8wx" WorkloadEndpoint="ci--3510.3.7--a--9ed44aff31-k8s-calico--apiserver--5858799f47--ln8wx-" Mar 17 18:53:56.504958 env[1409]: 2025-03-17 18:53:56.256 [INFO][4116] cni-plugin/k8s.go 77: Extracted identifiers for CmdAddK8s ContainerID="89eb8d75da9350ccd1f1763d6a2e73cc9101dc9c17ffc917af21a3162c014c9e" Namespace="calico-apiserver" Pod="calico-apiserver-5858799f47-ln8wx" WorkloadEndpoint="ci--3510.3.7--a--9ed44aff31-k8s-calico--apiserver--5858799f47--ln8wx-eth0" Mar 17 18:53:56.504958 env[1409]: 2025-03-17 18:53:56.296 [INFO][4136] ipam/ipam_plugin.go 225: Calico CNI IPAM request count IPv4=1 IPv6=0 ContainerID="89eb8d75da9350ccd1f1763d6a2e73cc9101dc9c17ffc917af21a3162c014c9e" HandleID="k8s-pod-network.89eb8d75da9350ccd1f1763d6a2e73cc9101dc9c17ffc917af21a3162c014c9e" Workload="ci--3510.3.7--a--9ed44aff31-k8s-calico--apiserver--5858799f47--ln8wx-eth0" Mar 17 18:53:56.504958 env[1409]: 2025-03-17 18:53:56.305 [INFO][4136] ipam/ipam_plugin.go 265: Auto assigning IP ContainerID="89eb8d75da9350ccd1f1763d6a2e73cc9101dc9c17ffc917af21a3162c014c9e" HandleID="k8s-pod-network.89eb8d75da9350ccd1f1763d6a2e73cc9101dc9c17ffc917af21a3162c014c9e" Workload="ci--3510.3.7--a--9ed44aff31-k8s-calico--apiserver--5858799f47--ln8wx-eth0" assignArgs=ipam.AutoAssignArgs{Num4:1, Num6:0, HandleID:(*string)(0xc0002e75d0), Attrs:map[string]string{"namespace":"calico-apiserver", "node":"ci-3510.3.7-a-9ed44aff31", "pod":"calico-apiserver-5858799f47-ln8wx", "timestamp":"2025-03-17 18:53:56.296805577 +0000 UTC"}, Hostname:"ci-3510.3.7-a-9ed44aff31", IPv4Pools:[]net.IPNet{}, IPv6Pools:[]net.IPNet{}, MaxBlocksPerHost:0, HostReservedAttrIPv4s:(*ipam.HostReservedAttr)(nil), HostReservedAttrIPv6s:(*ipam.HostReservedAttr)(nil), IntendedUse:"Workload"} Mar 17 18:53:56.504958 env[1409]: 2025-03-17 18:53:56.305 [INFO][4136] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Mar 17 18:53:56.504958 env[1409]: 2025-03-17 18:53:56.328 [INFO][4136] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Mar 17 18:53:56.504958 env[1409]: 2025-03-17 18:53:56.328 [INFO][4136] ipam/ipam.go 107: Auto-assign 1 ipv4, 0 ipv6 addrs for host 'ci-3510.3.7-a-9ed44aff31' Mar 17 18:53:56.504958 env[1409]: 2025-03-17 18:53:56.413 [INFO][4136] ipam/ipam.go 660: Looking up existing affinities for host handle="k8s-pod-network.89eb8d75da9350ccd1f1763d6a2e73cc9101dc9c17ffc917af21a3162c014c9e" host="ci-3510.3.7-a-9ed44aff31" Mar 17 18:53:56.504958 env[1409]: 2025-03-17 18:53:56.420 [INFO][4136] ipam/ipam.go 372: Looking up existing affinities for host host="ci-3510.3.7-a-9ed44aff31" Mar 17 18:53:56.504958 env[1409]: 2025-03-17 18:53:56.425 [INFO][4136] ipam/ipam.go 489: Trying affinity for 192.168.88.192/26 host="ci-3510.3.7-a-9ed44aff31" Mar 17 18:53:56.504958 env[1409]: 2025-03-17 18:53:56.428 [INFO][4136] ipam/ipam.go 155: Attempting to load block cidr=192.168.88.192/26 host="ci-3510.3.7-a-9ed44aff31" Mar 17 18:53:56.504958 env[1409]: 2025-03-17 18:53:56.433 [INFO][4136] ipam/ipam.go 232: Affinity is confirmed and block has been loaded cidr=192.168.88.192/26 host="ci-3510.3.7-a-9ed44aff31" Mar 17 18:53:56.504958 env[1409]: 2025-03-17 18:53:56.435 [INFO][4136] ipam/ipam.go 1180: Attempting to assign 1 addresses from block block=192.168.88.192/26 handle="k8s-pod-network.89eb8d75da9350ccd1f1763d6a2e73cc9101dc9c17ffc917af21a3162c014c9e" host="ci-3510.3.7-a-9ed44aff31" Mar 17 18:53:56.504958 env[1409]: 2025-03-17 18:53:56.437 [INFO][4136] ipam/ipam.go 1685: Creating new handle: k8s-pod-network.89eb8d75da9350ccd1f1763d6a2e73cc9101dc9c17ffc917af21a3162c014c9e Mar 17 18:53:56.504958 env[1409]: 2025-03-17 18:53:56.451 [INFO][4136] ipam/ipam.go 1203: Writing block in order to claim IPs block=192.168.88.192/26 handle="k8s-pod-network.89eb8d75da9350ccd1f1763d6a2e73cc9101dc9c17ffc917af21a3162c014c9e" host="ci-3510.3.7-a-9ed44aff31" Mar 17 18:53:56.504958 env[1409]: 2025-03-17 18:53:56.457 [INFO][4136] ipam/ipam.go 1216: Successfully claimed IPs: [192.168.88.196/26] block=192.168.88.192/26 handle="k8s-pod-network.89eb8d75da9350ccd1f1763d6a2e73cc9101dc9c17ffc917af21a3162c014c9e" host="ci-3510.3.7-a-9ed44aff31" Mar 17 18:53:56.504958 env[1409]: 2025-03-17 18:53:56.457 [INFO][4136] ipam/ipam.go 847: Auto-assigned 1 out of 1 IPv4s: [192.168.88.196/26] handle="k8s-pod-network.89eb8d75da9350ccd1f1763d6a2e73cc9101dc9c17ffc917af21a3162c014c9e" host="ci-3510.3.7-a-9ed44aff31" Mar 17 18:53:56.504958 env[1409]: 2025-03-17 18:53:56.458 [INFO][4136] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Mar 17 18:53:56.504958 env[1409]: 2025-03-17 18:53:56.458 [INFO][4136] ipam/ipam_plugin.go 283: Calico CNI IPAM assigned addresses IPv4=[192.168.88.196/26] IPv6=[] ContainerID="89eb8d75da9350ccd1f1763d6a2e73cc9101dc9c17ffc917af21a3162c014c9e" HandleID="k8s-pod-network.89eb8d75da9350ccd1f1763d6a2e73cc9101dc9c17ffc917af21a3162c014c9e" Workload="ci--3510.3.7--a--9ed44aff31-k8s-calico--apiserver--5858799f47--ln8wx-eth0" Mar 17 18:53:56.505962 env[1409]: 2025-03-17 18:53:56.459 [INFO][4116] cni-plugin/k8s.go 386: Populated endpoint ContainerID="89eb8d75da9350ccd1f1763d6a2e73cc9101dc9c17ffc917af21a3162c014c9e" Namespace="calico-apiserver" Pod="calico-apiserver-5858799f47-ln8wx" WorkloadEndpoint="ci--3510.3.7--a--9ed44aff31-k8s-calico--apiserver--5858799f47--ln8wx-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ci--3510.3.7--a--9ed44aff31-k8s-calico--apiserver--5858799f47--ln8wx-eth0", GenerateName:"calico-apiserver-5858799f47-", Namespace:"calico-apiserver", SelfLink:"", UID:"640a4f62-1afa-4bd0-b183-7d5406f3f026", ResourceVersion:"800", Generation:0, CreationTimestamp:time.Date(2025, time.March, 17, 18, 53, 27, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"apiserver":"true", "app.kubernetes.io/name":"calico-apiserver", "k8s-app":"calico-apiserver", "pod-template-hash":"5858799f47", "projectcalico.org/namespace":"calico-apiserver", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-apiserver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ci-3510.3.7-a-9ed44aff31", ContainerID:"", Pod:"calico-apiserver-5858799f47-ln8wx", Endpoint:"eth0", ServiceAccountName:"calico-apiserver", IPNetworks:[]string{"192.168.88.196/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-apiserver", "ksa.calico-apiserver.calico-apiserver"}, InterfaceName:"cali51208d89f9a", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil)}} Mar 17 18:53:56.505962 env[1409]: 2025-03-17 18:53:56.460 [INFO][4116] cni-plugin/k8s.go 387: Calico CNI using IPs: [192.168.88.196/32] ContainerID="89eb8d75da9350ccd1f1763d6a2e73cc9101dc9c17ffc917af21a3162c014c9e" Namespace="calico-apiserver" Pod="calico-apiserver-5858799f47-ln8wx" WorkloadEndpoint="ci--3510.3.7--a--9ed44aff31-k8s-calico--apiserver--5858799f47--ln8wx-eth0" Mar 17 18:53:56.505962 env[1409]: 2025-03-17 18:53:56.460 [INFO][4116] cni-plugin/dataplane_linux.go 69: Setting the host side veth name to cali51208d89f9a ContainerID="89eb8d75da9350ccd1f1763d6a2e73cc9101dc9c17ffc917af21a3162c014c9e" Namespace="calico-apiserver" Pod="calico-apiserver-5858799f47-ln8wx" WorkloadEndpoint="ci--3510.3.7--a--9ed44aff31-k8s-calico--apiserver--5858799f47--ln8wx-eth0" Mar 17 18:53:56.505962 env[1409]: 2025-03-17 18:53:56.484 [INFO][4116] cni-plugin/dataplane_linux.go 508: Disabling IPv4 forwarding ContainerID="89eb8d75da9350ccd1f1763d6a2e73cc9101dc9c17ffc917af21a3162c014c9e" Namespace="calico-apiserver" Pod="calico-apiserver-5858799f47-ln8wx" WorkloadEndpoint="ci--3510.3.7--a--9ed44aff31-k8s-calico--apiserver--5858799f47--ln8wx-eth0" Mar 17 18:53:56.505962 env[1409]: 2025-03-17 18:53:56.485 [INFO][4116] cni-plugin/k8s.go 414: Added Mac, interface name, and active container ID to endpoint ContainerID="89eb8d75da9350ccd1f1763d6a2e73cc9101dc9c17ffc917af21a3162c014c9e" Namespace="calico-apiserver" Pod="calico-apiserver-5858799f47-ln8wx" WorkloadEndpoint="ci--3510.3.7--a--9ed44aff31-k8s-calico--apiserver--5858799f47--ln8wx-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ci--3510.3.7--a--9ed44aff31-k8s-calico--apiserver--5858799f47--ln8wx-eth0", GenerateName:"calico-apiserver-5858799f47-", Namespace:"calico-apiserver", SelfLink:"", UID:"640a4f62-1afa-4bd0-b183-7d5406f3f026", ResourceVersion:"800", Generation:0, CreationTimestamp:time.Date(2025, time.March, 17, 18, 53, 27, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"apiserver":"true", "app.kubernetes.io/name":"calico-apiserver", "k8s-app":"calico-apiserver", "pod-template-hash":"5858799f47", "projectcalico.org/namespace":"calico-apiserver", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-apiserver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ci-3510.3.7-a-9ed44aff31", ContainerID:"89eb8d75da9350ccd1f1763d6a2e73cc9101dc9c17ffc917af21a3162c014c9e", Pod:"calico-apiserver-5858799f47-ln8wx", Endpoint:"eth0", ServiceAccountName:"calico-apiserver", IPNetworks:[]string{"192.168.88.196/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-apiserver", "ksa.calico-apiserver.calico-apiserver"}, InterfaceName:"cali51208d89f9a", MAC:"16:10:5b:30:1b:01", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil)}} Mar 17 18:53:56.505962 env[1409]: 2025-03-17 18:53:56.503 [INFO][4116] cni-plugin/k8s.go 500: Wrote updated endpoint to datastore ContainerID="89eb8d75da9350ccd1f1763d6a2e73cc9101dc9c17ffc917af21a3162c014c9e" Namespace="calico-apiserver" Pod="calico-apiserver-5858799f47-ln8wx" WorkloadEndpoint="ci--3510.3.7--a--9ed44aff31-k8s-calico--apiserver--5858799f47--ln8wx-eth0" Mar 17 18:53:56.527652 env[1409]: time="2025-03-17T18:53:56.527586873Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Mar 17 18:53:56.527841 env[1409]: time="2025-03-17T18:53:56.527814674Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Mar 17 18:53:56.527964 env[1409]: time="2025-03-17T18:53:56.527941575Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Mar 17 18:53:56.528259 env[1409]: time="2025-03-17T18:53:56.528228176Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/89eb8d75da9350ccd1f1763d6a2e73cc9101dc9c17ffc917af21a3162c014c9e pid=4222 runtime=io.containerd.runc.v2 Mar 17 18:53:56.527000 audit[4220]: NETFILTER_CFG table=filter:113 family=2 entries=42 op=nft_register_chain pid=4220 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Mar 17 18:53:56.527000 audit[4220]: SYSCALL arch=c000003e syscall=46 success=yes exit=22704 a0=3 a1=7ffd58d77290 a2=0 a3=7ffd58d7727c items=0 ppid=3599 pid=4220 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:53:56.527000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Mar 17 18:53:56.544584 systemd[1]: Started cri-containerd-89eb8d75da9350ccd1f1763d6a2e73cc9101dc9c17ffc917af21a3162c014c9e.scope. Mar 17 18:53:56.558000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:56.558000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:56.558000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:56.558000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:56.558000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:56.558000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:56.558000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:56.558000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:56.558000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:56.559000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:56.559000 audit: BPF prog-id=176 op=LOAD Mar 17 18:53:56.559000 audit[4233]: AVC avc: denied { bpf } for pid=4233 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:56.559000 audit[4233]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c00011fc48 a2=10 a3=1c items=0 ppid=4222 pid=4233 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:53:56.559000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3839656238643735646139333530636364316631373633643661326537 Mar 17 18:53:56.559000 audit[4233]: AVC avc: denied { perfmon } for pid=4233 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:56.559000 audit[4233]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c00011f6b0 a2=3c a3=c items=0 ppid=4222 pid=4233 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:53:56.559000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3839656238643735646139333530636364316631373633643661326537 Mar 17 18:53:56.559000 audit[4233]: AVC avc: denied { bpf } for pid=4233 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:56.559000 audit[4233]: AVC avc: denied { bpf } for pid=4233 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:56.559000 audit[4233]: AVC avc: denied { bpf } for pid=4233 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:56.559000 audit[4233]: AVC avc: denied { perfmon } for pid=4233 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:56.559000 audit[4233]: AVC avc: denied { perfmon } for pid=4233 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:56.559000 audit[4233]: AVC avc: denied { perfmon } for pid=4233 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:56.559000 audit[4233]: AVC avc: denied { perfmon } for pid=4233 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:56.559000 audit[4233]: AVC avc: denied { perfmon } for pid=4233 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:56.559000 audit[4233]: AVC avc: denied { bpf } for pid=4233 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:56.559000 audit[4233]: AVC avc: denied { bpf } for pid=4233 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:56.559000 audit: BPF prog-id=177 op=LOAD Mar 17 18:53:56.559000 audit[4233]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c00011f9d8 a2=78 a3=c00024bce0 items=0 ppid=4222 pid=4233 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:53:56.559000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3839656238643735646139333530636364316631373633643661326537 Mar 17 18:53:56.559000 audit[4233]: AVC avc: denied { bpf } for pid=4233 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:56.559000 audit[4233]: AVC avc: denied { bpf } for pid=4233 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:56.559000 audit[4233]: AVC avc: denied { perfmon } for pid=4233 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:56.559000 audit[4233]: AVC avc: denied { perfmon } for pid=4233 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:56.559000 audit[4233]: AVC avc: denied { perfmon } for pid=4233 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:56.559000 audit[4233]: AVC avc: denied { perfmon } for pid=4233 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:56.559000 audit[4233]: AVC avc: denied { perfmon } for pid=4233 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:56.559000 audit[4233]: AVC avc: denied { bpf } for pid=4233 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:56.559000 audit[4233]: AVC avc: denied { bpf } for pid=4233 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:56.559000 audit: BPF prog-id=178 op=LOAD Mar 17 18:53:56.559000 audit[4233]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c00011f770 a2=78 a3=c00024bd28 items=0 ppid=4222 pid=4233 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:53:56.559000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3839656238643735646139333530636364316631373633643661326537 Mar 17 18:53:56.559000 audit: BPF prog-id=178 op=UNLOAD Mar 17 18:53:56.560000 audit: BPF prog-id=177 op=UNLOAD Mar 17 18:53:56.560000 audit[4233]: AVC avc: denied { bpf } for pid=4233 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:56.560000 audit[4233]: AVC avc: denied { bpf } for pid=4233 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:56.560000 audit[4233]: AVC avc: denied { bpf } for pid=4233 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:56.560000 audit[4233]: AVC avc: denied { perfmon } for pid=4233 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:56.560000 audit[4233]: AVC avc: denied { perfmon } for pid=4233 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:56.560000 audit[4233]: AVC avc: denied { perfmon } for pid=4233 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:56.560000 audit[4233]: AVC avc: denied { perfmon } for pid=4233 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:56.560000 audit[4233]: AVC avc: denied { perfmon } for pid=4233 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:56.560000 audit[4233]: AVC avc: denied { bpf } for pid=4233 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:56.560000 audit[4233]: AVC avc: denied { bpf } for pid=4233 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:56.560000 audit: BPF prog-id=179 op=LOAD Mar 17 18:53:56.560000 audit[4233]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c00011fc30 a2=78 a3=c0003d0138 items=0 ppid=4222 pid=4233 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:53:56.560000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3839656238643735646139333530636364316631373633643661326537 Mar 17 18:53:56.587524 env[1409]: time="2025-03-17T18:53:56.587430132Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-apiserver-5858799f47-ln8wx,Uid:640a4f62-1afa-4bd0-b183-7d5406f3f026,Namespace:calico-apiserver,Attempt:1,} returns sandbox id \"89eb8d75da9350ccd1f1763d6a2e73cc9101dc9c17ffc917af21a3162c014c9e\"" Mar 17 18:53:56.961882 env[1409]: time="2025-03-17T18:53:56.961670147Z" level=info msg="StopPodSandbox for \"ca1f5fe91026fd47441d347a38e8a9d7a74a6cd4b145b95491a11731c6c629d7\"" Mar 17 18:53:56.962128 env[1409]: time="2025-03-17T18:53:56.961652947Z" level=info msg="StopPodSandbox for \"008354fedab1e1c2571c3d344c4e1377e32b6de745504a5e5bc3e8fe0e3d9edc\"" Mar 17 18:53:57.116046 env[1409]: 2025-03-17 18:53:57.051 [INFO][4286] cni-plugin/k8s.go 608: Cleaning up netns ContainerID="008354fedab1e1c2571c3d344c4e1377e32b6de745504a5e5bc3e8fe0e3d9edc" Mar 17 18:53:57.116046 env[1409]: 2025-03-17 18:53:57.051 [INFO][4286] cni-plugin/dataplane_linux.go 559: Deleting workload's device in netns. ContainerID="008354fedab1e1c2571c3d344c4e1377e32b6de745504a5e5bc3e8fe0e3d9edc" iface="eth0" netns="/var/run/netns/cni-1ee6cce2-f53a-5d3f-68b3-997781a9651a" Mar 17 18:53:57.116046 env[1409]: 2025-03-17 18:53:57.052 [INFO][4286] cni-plugin/dataplane_linux.go 570: Entered netns, deleting veth. ContainerID="008354fedab1e1c2571c3d344c4e1377e32b6de745504a5e5bc3e8fe0e3d9edc" iface="eth0" netns="/var/run/netns/cni-1ee6cce2-f53a-5d3f-68b3-997781a9651a" Mar 17 18:53:57.116046 env[1409]: 2025-03-17 18:53:57.052 [INFO][4286] cni-plugin/dataplane_linux.go 597: Workload's veth was already gone. Nothing to do. ContainerID="008354fedab1e1c2571c3d344c4e1377e32b6de745504a5e5bc3e8fe0e3d9edc" iface="eth0" netns="/var/run/netns/cni-1ee6cce2-f53a-5d3f-68b3-997781a9651a" Mar 17 18:53:57.116046 env[1409]: 2025-03-17 18:53:57.052 [INFO][4286] cni-plugin/k8s.go 615: Releasing IP address(es) ContainerID="008354fedab1e1c2571c3d344c4e1377e32b6de745504a5e5bc3e8fe0e3d9edc" Mar 17 18:53:57.116046 env[1409]: 2025-03-17 18:53:57.052 [INFO][4286] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="008354fedab1e1c2571c3d344c4e1377e32b6de745504a5e5bc3e8fe0e3d9edc" Mar 17 18:53:57.116046 env[1409]: 2025-03-17 18:53:57.096 [INFO][4298] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="008354fedab1e1c2571c3d344c4e1377e32b6de745504a5e5bc3e8fe0e3d9edc" HandleID="k8s-pod-network.008354fedab1e1c2571c3d344c4e1377e32b6de745504a5e5bc3e8fe0e3d9edc" Workload="ci--3510.3.7--a--9ed44aff31-k8s-csi--node--driver--qb29d-eth0" Mar 17 18:53:57.116046 env[1409]: 2025-03-17 18:53:57.098 [INFO][4298] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Mar 17 18:53:57.116046 env[1409]: 2025-03-17 18:53:57.098 [INFO][4298] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Mar 17 18:53:57.116046 env[1409]: 2025-03-17 18:53:57.111 [WARNING][4298] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="008354fedab1e1c2571c3d344c4e1377e32b6de745504a5e5bc3e8fe0e3d9edc" HandleID="k8s-pod-network.008354fedab1e1c2571c3d344c4e1377e32b6de745504a5e5bc3e8fe0e3d9edc" Workload="ci--3510.3.7--a--9ed44aff31-k8s-csi--node--driver--qb29d-eth0" Mar 17 18:53:57.116046 env[1409]: 2025-03-17 18:53:57.111 [INFO][4298] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="008354fedab1e1c2571c3d344c4e1377e32b6de745504a5e5bc3e8fe0e3d9edc" HandleID="k8s-pod-network.008354fedab1e1c2571c3d344c4e1377e32b6de745504a5e5bc3e8fe0e3d9edc" Workload="ci--3510.3.7--a--9ed44aff31-k8s-csi--node--driver--qb29d-eth0" Mar 17 18:53:57.116046 env[1409]: 2025-03-17 18:53:57.112 [INFO][4298] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Mar 17 18:53:57.116046 env[1409]: 2025-03-17 18:53:57.113 [INFO][4286] cni-plugin/k8s.go 621: Teardown processing complete. ContainerID="008354fedab1e1c2571c3d344c4e1377e32b6de745504a5e5bc3e8fe0e3d9edc" Mar 17 18:53:57.121953 env[1409]: time="2025-03-17T18:53:57.120251324Z" level=info msg="TearDown network for sandbox \"008354fedab1e1c2571c3d344c4e1377e32b6de745504a5e5bc3e8fe0e3d9edc\" successfully" Mar 17 18:53:57.121953 env[1409]: time="2025-03-17T18:53:57.120353624Z" level=info msg="StopPodSandbox for \"008354fedab1e1c2571c3d344c4e1377e32b6de745504a5e5bc3e8fe0e3d9edc\" returns successfully" Mar 17 18:53:57.121953 env[1409]: time="2025-03-17T18:53:57.121884131Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:csi-node-driver-qb29d,Uid:fa4b58f5-7cb3-428f-9da4-44a5cc6627b4,Namespace:calico-system,Attempt:1,}" Mar 17 18:53:57.119629 systemd[1]: run-netns-cni\x2d1ee6cce2\x2df53a\x2d5d3f\x2d68b3\x2d997781a9651a.mount: Deactivated successfully. Mar 17 18:53:57.130380 env[1409]: 2025-03-17 18:53:57.065 [INFO][4285] cni-plugin/k8s.go 608: Cleaning up netns ContainerID="ca1f5fe91026fd47441d347a38e8a9d7a74a6cd4b145b95491a11731c6c629d7" Mar 17 18:53:57.130380 env[1409]: 2025-03-17 18:53:57.065 [INFO][4285] cni-plugin/dataplane_linux.go 559: Deleting workload's device in netns. ContainerID="ca1f5fe91026fd47441d347a38e8a9d7a74a6cd4b145b95491a11731c6c629d7" iface="eth0" netns="/var/run/netns/cni-19afa690-4b32-0650-b120-7c97280dc323" Mar 17 18:53:57.130380 env[1409]: 2025-03-17 18:53:57.065 [INFO][4285] cni-plugin/dataplane_linux.go 570: Entered netns, deleting veth. ContainerID="ca1f5fe91026fd47441d347a38e8a9d7a74a6cd4b145b95491a11731c6c629d7" iface="eth0" netns="/var/run/netns/cni-19afa690-4b32-0650-b120-7c97280dc323" Mar 17 18:53:57.130380 env[1409]: 2025-03-17 18:53:57.065 [INFO][4285] cni-plugin/dataplane_linux.go 597: Workload's veth was already gone. Nothing to do. ContainerID="ca1f5fe91026fd47441d347a38e8a9d7a74a6cd4b145b95491a11731c6c629d7" iface="eth0" netns="/var/run/netns/cni-19afa690-4b32-0650-b120-7c97280dc323" Mar 17 18:53:57.130380 env[1409]: 2025-03-17 18:53:57.065 [INFO][4285] cni-plugin/k8s.go 615: Releasing IP address(es) ContainerID="ca1f5fe91026fd47441d347a38e8a9d7a74a6cd4b145b95491a11731c6c629d7" Mar 17 18:53:57.130380 env[1409]: 2025-03-17 18:53:57.066 [INFO][4285] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="ca1f5fe91026fd47441d347a38e8a9d7a74a6cd4b145b95491a11731c6c629d7" Mar 17 18:53:57.130380 env[1409]: 2025-03-17 18:53:57.108 [INFO][4299] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="ca1f5fe91026fd47441d347a38e8a9d7a74a6cd4b145b95491a11731c6c629d7" HandleID="k8s-pod-network.ca1f5fe91026fd47441d347a38e8a9d7a74a6cd4b145b95491a11731c6c629d7" Workload="ci--3510.3.7--a--9ed44aff31-k8s-calico--kube--controllers--79dcd7cc77--7gsvv-eth0" Mar 17 18:53:57.130380 env[1409]: 2025-03-17 18:53:57.108 [INFO][4299] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Mar 17 18:53:57.130380 env[1409]: 2025-03-17 18:53:57.112 [INFO][4299] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Mar 17 18:53:57.130380 env[1409]: 2025-03-17 18:53:57.126 [WARNING][4299] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="ca1f5fe91026fd47441d347a38e8a9d7a74a6cd4b145b95491a11731c6c629d7" HandleID="k8s-pod-network.ca1f5fe91026fd47441d347a38e8a9d7a74a6cd4b145b95491a11731c6c629d7" Workload="ci--3510.3.7--a--9ed44aff31-k8s-calico--kube--controllers--79dcd7cc77--7gsvv-eth0" Mar 17 18:53:57.130380 env[1409]: 2025-03-17 18:53:57.126 [INFO][4299] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="ca1f5fe91026fd47441d347a38e8a9d7a74a6cd4b145b95491a11731c6c629d7" HandleID="k8s-pod-network.ca1f5fe91026fd47441d347a38e8a9d7a74a6cd4b145b95491a11731c6c629d7" Workload="ci--3510.3.7--a--9ed44aff31-k8s-calico--kube--controllers--79dcd7cc77--7gsvv-eth0" Mar 17 18:53:57.130380 env[1409]: 2025-03-17 18:53:57.128 [INFO][4299] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Mar 17 18:53:57.130380 env[1409]: 2025-03-17 18:53:57.129 [INFO][4285] cni-plugin/k8s.go 621: Teardown processing complete. ContainerID="ca1f5fe91026fd47441d347a38e8a9d7a74a6cd4b145b95491a11731c6c629d7" Mar 17 18:53:57.135685 env[1409]: time="2025-03-17T18:53:57.134551185Z" level=info msg="TearDown network for sandbox \"ca1f5fe91026fd47441d347a38e8a9d7a74a6cd4b145b95491a11731c6c629d7\" successfully" Mar 17 18:53:57.135685 env[1409]: time="2025-03-17T18:53:57.134580985Z" level=info msg="StopPodSandbox for \"ca1f5fe91026fd47441d347a38e8a9d7a74a6cd4b145b95491a11731c6c629d7\" returns successfully" Mar 17 18:53:57.135685 env[1409]: time="2025-03-17T18:53:57.135055187Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-kube-controllers-79dcd7cc77-7gsvv,Uid:5962bc12-5113-4699-8f4b-318bf87ebc57,Namespace:calico-system,Attempt:1,}" Mar 17 18:53:57.133788 systemd[1]: run-netns-cni\x2d19afa690\x2d4b32\x2d0650\x2db120\x2d7c97280dc323.mount: Deactivated successfully. Mar 17 18:53:57.259000 audit[4344]: NETFILTER_CFG table=filter:114 family=2 entries=10 op=nft_register_rule pid=4344 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Mar 17 18:53:57.259000 audit[4344]: SYSCALL arch=c000003e syscall=46 success=yes exit=3760 a0=3 a1=7ffd6b5f1240 a2=0 a3=7ffd6b5f122c items=0 ppid=2619 pid=4344 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:53:57.259000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Mar 17 18:53:57.295639 systemd-networkd[1562]: cali7435b94cef9: Gained IPv6LL Mar 17 18:53:57.322000 audit[4344]: NETFILTER_CFG table=nat:115 family=2 entries=56 op=nft_register_chain pid=4344 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Mar 17 18:53:57.322000 audit[4344]: SYSCALL arch=c000003e syscall=46 success=yes exit=19860 a0=3 a1=7ffd6b5f1240 a2=0 a3=7ffd6b5f122c items=0 ppid=2619 pid=4344 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:53:57.322000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Mar 17 18:53:57.335109 systemd-networkd[1562]: calibadabe137f4: Link UP Mar 17 18:53:57.351604 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): eth0: link becomes ready Mar 17 18:53:57.351692 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): calibadabe137f4: link becomes ready Mar 17 18:53:57.352164 systemd-networkd[1562]: calibadabe137f4: Gained carrier Mar 17 18:53:57.373446 env[1409]: 2025-03-17 18:53:57.221 [INFO][4312] cni-plugin/plugin.go 325: Calico CNI found existing endpoint: &{{WorkloadEndpoint projectcalico.org/v3} {ci--3510.3.7--a--9ed44aff31-k8s-csi--node--driver--qb29d-eth0 csi-node-driver- calico-system fa4b58f5-7cb3-428f-9da4-44a5cc6627b4 820 0 2025-03-17 18:53:27 +0000 UTC map[app.kubernetes.io/name:csi-node-driver controller-revision-hash:84cddb44f k8s-app:csi-node-driver name:csi-node-driver pod-template-generation:1 projectcalico.org/namespace:calico-system projectcalico.org/orchestrator:k8s projectcalico.org/serviceaccount:csi-node-driver] map[] [] [] []} {k8s ci-3510.3.7-a-9ed44aff31 csi-node-driver-qb29d eth0 csi-node-driver [] [] [kns.calico-system ksa.calico-system.csi-node-driver] calibadabe137f4 [] []}} ContainerID="c19e4478f288b1a2e8039ca4507b7570c5a30429f116d812b443686c71562694" Namespace="calico-system" Pod="csi-node-driver-qb29d" WorkloadEndpoint="ci--3510.3.7--a--9ed44aff31-k8s-csi--node--driver--qb29d-" Mar 17 18:53:57.373446 env[1409]: 2025-03-17 18:53:57.221 [INFO][4312] cni-plugin/k8s.go 77: Extracted identifiers for CmdAddK8s ContainerID="c19e4478f288b1a2e8039ca4507b7570c5a30429f116d812b443686c71562694" Namespace="calico-system" Pod="csi-node-driver-qb29d" WorkloadEndpoint="ci--3510.3.7--a--9ed44aff31-k8s-csi--node--driver--qb29d-eth0" Mar 17 18:53:57.373446 env[1409]: 2025-03-17 18:53:57.273 [INFO][4330] ipam/ipam_plugin.go 225: Calico CNI IPAM request count IPv4=1 IPv6=0 ContainerID="c19e4478f288b1a2e8039ca4507b7570c5a30429f116d812b443686c71562694" HandleID="k8s-pod-network.c19e4478f288b1a2e8039ca4507b7570c5a30429f116d812b443686c71562694" Workload="ci--3510.3.7--a--9ed44aff31-k8s-csi--node--driver--qb29d-eth0" Mar 17 18:53:57.373446 env[1409]: 2025-03-17 18:53:57.291 [INFO][4330] ipam/ipam_plugin.go 265: Auto assigning IP ContainerID="c19e4478f288b1a2e8039ca4507b7570c5a30429f116d812b443686c71562694" HandleID="k8s-pod-network.c19e4478f288b1a2e8039ca4507b7570c5a30429f116d812b443686c71562694" Workload="ci--3510.3.7--a--9ed44aff31-k8s-csi--node--driver--qb29d-eth0" assignArgs=ipam.AutoAssignArgs{Num4:1, Num6:0, HandleID:(*string)(0xc00030ab90), Attrs:map[string]string{"namespace":"calico-system", "node":"ci-3510.3.7-a-9ed44aff31", "pod":"csi-node-driver-qb29d", "timestamp":"2025-03-17 18:53:57.273240375 +0000 UTC"}, Hostname:"ci-3510.3.7-a-9ed44aff31", IPv4Pools:[]net.IPNet{}, IPv6Pools:[]net.IPNet{}, MaxBlocksPerHost:0, HostReservedAttrIPv4s:(*ipam.HostReservedAttr)(nil), HostReservedAttrIPv6s:(*ipam.HostReservedAttr)(nil), IntendedUse:"Workload"} Mar 17 18:53:57.373446 env[1409]: 2025-03-17 18:53:57.291 [INFO][4330] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Mar 17 18:53:57.373446 env[1409]: 2025-03-17 18:53:57.291 [INFO][4330] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Mar 17 18:53:57.373446 env[1409]: 2025-03-17 18:53:57.291 [INFO][4330] ipam/ipam.go 107: Auto-assign 1 ipv4, 0 ipv6 addrs for host 'ci-3510.3.7-a-9ed44aff31' Mar 17 18:53:57.373446 env[1409]: 2025-03-17 18:53:57.293 [INFO][4330] ipam/ipam.go 660: Looking up existing affinities for host handle="k8s-pod-network.c19e4478f288b1a2e8039ca4507b7570c5a30429f116d812b443686c71562694" host="ci-3510.3.7-a-9ed44aff31" Mar 17 18:53:57.373446 env[1409]: 2025-03-17 18:53:57.298 [INFO][4330] ipam/ipam.go 372: Looking up existing affinities for host host="ci-3510.3.7-a-9ed44aff31" Mar 17 18:53:57.373446 env[1409]: 2025-03-17 18:53:57.302 [INFO][4330] ipam/ipam.go 489: Trying affinity for 192.168.88.192/26 host="ci-3510.3.7-a-9ed44aff31" Mar 17 18:53:57.373446 env[1409]: 2025-03-17 18:53:57.303 [INFO][4330] ipam/ipam.go 155: Attempting to load block cidr=192.168.88.192/26 host="ci-3510.3.7-a-9ed44aff31" Mar 17 18:53:57.373446 env[1409]: 2025-03-17 18:53:57.306 [INFO][4330] ipam/ipam.go 232: Affinity is confirmed and block has been loaded cidr=192.168.88.192/26 host="ci-3510.3.7-a-9ed44aff31" Mar 17 18:53:57.373446 env[1409]: 2025-03-17 18:53:57.306 [INFO][4330] ipam/ipam.go 1180: Attempting to assign 1 addresses from block block=192.168.88.192/26 handle="k8s-pod-network.c19e4478f288b1a2e8039ca4507b7570c5a30429f116d812b443686c71562694" host="ci-3510.3.7-a-9ed44aff31" Mar 17 18:53:57.373446 env[1409]: 2025-03-17 18:53:57.307 [INFO][4330] ipam/ipam.go 1685: Creating new handle: k8s-pod-network.c19e4478f288b1a2e8039ca4507b7570c5a30429f116d812b443686c71562694 Mar 17 18:53:57.373446 env[1409]: 2025-03-17 18:53:57.314 [INFO][4330] ipam/ipam.go 1203: Writing block in order to claim IPs block=192.168.88.192/26 handle="k8s-pod-network.c19e4478f288b1a2e8039ca4507b7570c5a30429f116d812b443686c71562694" host="ci-3510.3.7-a-9ed44aff31" Mar 17 18:53:57.373446 env[1409]: 2025-03-17 18:53:57.328 [INFO][4330] ipam/ipam.go 1216: Successfully claimed IPs: [192.168.88.197/26] block=192.168.88.192/26 handle="k8s-pod-network.c19e4478f288b1a2e8039ca4507b7570c5a30429f116d812b443686c71562694" host="ci-3510.3.7-a-9ed44aff31" Mar 17 18:53:57.373446 env[1409]: 2025-03-17 18:53:57.328 [INFO][4330] ipam/ipam.go 847: Auto-assigned 1 out of 1 IPv4s: [192.168.88.197/26] handle="k8s-pod-network.c19e4478f288b1a2e8039ca4507b7570c5a30429f116d812b443686c71562694" host="ci-3510.3.7-a-9ed44aff31" Mar 17 18:53:57.373446 env[1409]: 2025-03-17 18:53:57.328 [INFO][4330] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Mar 17 18:53:57.373446 env[1409]: 2025-03-17 18:53:57.328 [INFO][4330] ipam/ipam_plugin.go 283: Calico CNI IPAM assigned addresses IPv4=[192.168.88.197/26] IPv6=[] ContainerID="c19e4478f288b1a2e8039ca4507b7570c5a30429f116d812b443686c71562694" HandleID="k8s-pod-network.c19e4478f288b1a2e8039ca4507b7570c5a30429f116d812b443686c71562694" Workload="ci--3510.3.7--a--9ed44aff31-k8s-csi--node--driver--qb29d-eth0" Mar 17 18:53:57.374482 env[1409]: 2025-03-17 18:53:57.330 [INFO][4312] cni-plugin/k8s.go 386: Populated endpoint ContainerID="c19e4478f288b1a2e8039ca4507b7570c5a30429f116d812b443686c71562694" Namespace="calico-system" Pod="csi-node-driver-qb29d" WorkloadEndpoint="ci--3510.3.7--a--9ed44aff31-k8s-csi--node--driver--qb29d-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ci--3510.3.7--a--9ed44aff31-k8s-csi--node--driver--qb29d-eth0", GenerateName:"csi-node-driver-", Namespace:"calico-system", SelfLink:"", UID:"fa4b58f5-7cb3-428f-9da4-44a5cc6627b4", ResourceVersion:"820", Generation:0, CreationTimestamp:time.Date(2025, time.March, 17, 18, 53, 27, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"csi-node-driver", "controller-revision-hash":"84cddb44f", "k8s-app":"csi-node-driver", "name":"csi-node-driver", "pod-template-generation":"1", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"csi-node-driver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ci-3510.3.7-a-9ed44aff31", ContainerID:"", Pod:"csi-node-driver-qb29d", Endpoint:"eth0", ServiceAccountName:"csi-node-driver", IPNetworks:[]string{"192.168.88.197/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.csi-node-driver"}, InterfaceName:"calibadabe137f4", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil)}} Mar 17 18:53:57.374482 env[1409]: 2025-03-17 18:53:57.330 [INFO][4312] cni-plugin/k8s.go 387: Calico CNI using IPs: [192.168.88.197/32] ContainerID="c19e4478f288b1a2e8039ca4507b7570c5a30429f116d812b443686c71562694" Namespace="calico-system" Pod="csi-node-driver-qb29d" WorkloadEndpoint="ci--3510.3.7--a--9ed44aff31-k8s-csi--node--driver--qb29d-eth0" Mar 17 18:53:57.374482 env[1409]: 2025-03-17 18:53:57.330 [INFO][4312] cni-plugin/dataplane_linux.go 69: Setting the host side veth name to calibadabe137f4 ContainerID="c19e4478f288b1a2e8039ca4507b7570c5a30429f116d812b443686c71562694" Namespace="calico-system" Pod="csi-node-driver-qb29d" WorkloadEndpoint="ci--3510.3.7--a--9ed44aff31-k8s-csi--node--driver--qb29d-eth0" Mar 17 18:53:57.374482 env[1409]: 2025-03-17 18:53:57.352 [INFO][4312] cni-plugin/dataplane_linux.go 508: Disabling IPv4 forwarding ContainerID="c19e4478f288b1a2e8039ca4507b7570c5a30429f116d812b443686c71562694" Namespace="calico-system" Pod="csi-node-driver-qb29d" WorkloadEndpoint="ci--3510.3.7--a--9ed44aff31-k8s-csi--node--driver--qb29d-eth0" Mar 17 18:53:57.374482 env[1409]: 2025-03-17 18:53:57.353 [INFO][4312] cni-plugin/k8s.go 414: Added Mac, interface name, and active container ID to endpoint ContainerID="c19e4478f288b1a2e8039ca4507b7570c5a30429f116d812b443686c71562694" Namespace="calico-system" Pod="csi-node-driver-qb29d" WorkloadEndpoint="ci--3510.3.7--a--9ed44aff31-k8s-csi--node--driver--qb29d-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ci--3510.3.7--a--9ed44aff31-k8s-csi--node--driver--qb29d-eth0", GenerateName:"csi-node-driver-", Namespace:"calico-system", SelfLink:"", UID:"fa4b58f5-7cb3-428f-9da4-44a5cc6627b4", ResourceVersion:"820", Generation:0, CreationTimestamp:time.Date(2025, time.March, 17, 18, 53, 27, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"csi-node-driver", "controller-revision-hash":"84cddb44f", "k8s-app":"csi-node-driver", "name":"csi-node-driver", "pod-template-generation":"1", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"csi-node-driver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ci-3510.3.7-a-9ed44aff31", ContainerID:"c19e4478f288b1a2e8039ca4507b7570c5a30429f116d812b443686c71562694", Pod:"csi-node-driver-qb29d", Endpoint:"eth0", ServiceAccountName:"csi-node-driver", IPNetworks:[]string{"192.168.88.197/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.csi-node-driver"}, InterfaceName:"calibadabe137f4", MAC:"32:f3:0c:c9:60:7f", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil)}} Mar 17 18:53:57.374482 env[1409]: 2025-03-17 18:53:57.368 [INFO][4312] cni-plugin/k8s.go 500: Wrote updated endpoint to datastore ContainerID="c19e4478f288b1a2e8039ca4507b7570c5a30429f116d812b443686c71562694" Namespace="calico-system" Pod="csi-node-driver-qb29d" WorkloadEndpoint="ci--3510.3.7--a--9ed44aff31-k8s-csi--node--driver--qb29d-eth0" Mar 17 18:53:57.401000 audit[4366]: NETFILTER_CFG table=filter:116 family=2 entries=56 op=nft_register_chain pid=4366 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Mar 17 18:53:57.401000 audit[4366]: SYSCALL arch=c000003e syscall=46 success=yes exit=26752 a0=3 a1=7ffca3e6e930 a2=0 a3=7ffca3e6e91c items=0 ppid=3599 pid=4366 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:53:57.401000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Mar 17 18:53:57.410325 env[1409]: time="2025-03-17T18:53:57.408739251Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Mar 17 18:53:57.410325 env[1409]: time="2025-03-17T18:53:57.408780351Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Mar 17 18:53:57.410325 env[1409]: time="2025-03-17T18:53:57.408794951Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Mar 17 18:53:57.410325 env[1409]: time="2025-03-17T18:53:57.408957652Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/c19e4478f288b1a2e8039ca4507b7570c5a30429f116d812b443686c71562694 pid=4375 runtime=io.containerd.runc.v2 Mar 17 18:53:57.424686 systemd[1]: Started cri-containerd-c19e4478f288b1a2e8039ca4507b7570c5a30429f116d812b443686c71562694.scope. Mar 17 18:53:57.446436 systemd-networkd[1562]: cali75d2b046d1c: Link UP Mar 17 18:53:57.456000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:57.456000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:57.456000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:57.456000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:57.456000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:57.456000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:57.456000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:57.456000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:57.456000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:57.456000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:57.456000 audit: BPF prog-id=180 op=LOAD Mar 17 18:53:57.459512 systemd-networkd[1562]: cali75d2b046d1c: Gained carrier Mar 17 18:53:57.462000 audit[4383]: AVC avc: denied { bpf } for pid=4383 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:57.462000 audit[4383]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000145c48 a2=10 a3=1c items=0 ppid=4375 pid=4383 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:53:57.462000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6331396534343738663238386231613265383033396361343530376237 Mar 17 18:53:57.463000 audit[4383]: AVC avc: denied { perfmon } for pid=4383 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:57.463000 audit[4383]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001456b0 a2=3c a3=8 items=0 ppid=4375 pid=4383 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:53:57.463000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6331396534343738663238386231613265383033396361343530376237 Mar 17 18:53:57.463000 audit[4383]: AVC avc: denied { bpf } for pid=4383 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:57.463000 audit[4383]: AVC avc: denied { bpf } for pid=4383 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:57.463000 audit[4383]: AVC avc: denied { bpf } for pid=4383 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:57.463000 audit[4383]: AVC avc: denied { perfmon } for pid=4383 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:57.463000 audit[4383]: AVC avc: denied { perfmon } for pid=4383 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:57.463000 audit[4383]: AVC avc: denied { perfmon } for pid=4383 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:57.463000 audit[4383]: AVC avc: denied { perfmon } for pid=4383 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:57.463000 audit[4383]: AVC avc: denied { perfmon } for pid=4383 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:57.463000 audit[4383]: AVC avc: denied { bpf } for pid=4383 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:57.463000 audit[4383]: AVC avc: denied { bpf } for pid=4383 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:57.463000 audit: BPF prog-id=181 op=LOAD Mar 17 18:53:57.470854 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): cali75d2b046d1c: link becomes ready Mar 17 18:53:57.463000 audit[4383]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001459d8 a2=78 a3=c000185c70 items=0 ppid=4375 pid=4383 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:53:57.463000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6331396534343738663238386231613265383033396361343530376237 Mar 17 18:53:57.470000 audit[4383]: AVC avc: denied { bpf } for pid=4383 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:57.470000 audit[4383]: AVC avc: denied { bpf } for pid=4383 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:57.470000 audit[4383]: AVC avc: denied { perfmon } for pid=4383 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:57.470000 audit[4383]: AVC avc: denied { perfmon } for pid=4383 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:57.470000 audit[4383]: AVC avc: denied { perfmon } for pid=4383 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:57.470000 audit[4383]: AVC avc: denied { perfmon } for pid=4383 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:57.470000 audit[4383]: AVC avc: denied { perfmon } for pid=4383 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:57.470000 audit[4383]: AVC avc: denied { bpf } for pid=4383 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:57.470000 audit[4383]: AVC avc: denied { bpf } for pid=4383 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:57.470000 audit: BPF prog-id=182 op=LOAD Mar 17 18:53:57.470000 audit[4383]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000145770 a2=78 a3=c000185cb8 items=0 ppid=4375 pid=4383 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:53:57.470000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6331396534343738663238386231613265383033396361343530376237 Mar 17 18:53:57.470000 audit: BPF prog-id=182 op=UNLOAD Mar 17 18:53:57.470000 audit: BPF prog-id=181 op=UNLOAD Mar 17 18:53:57.470000 audit[4383]: AVC avc: denied { bpf } for pid=4383 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:57.470000 audit[4383]: AVC avc: denied { bpf } for pid=4383 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:57.470000 audit[4383]: AVC avc: denied { bpf } for pid=4383 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:57.470000 audit[4383]: AVC avc: denied { perfmon } for pid=4383 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:57.470000 audit[4383]: AVC avc: denied { perfmon } for pid=4383 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:57.470000 audit[4383]: AVC avc: denied { perfmon } for pid=4383 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:57.470000 audit[4383]: AVC avc: denied { perfmon } for pid=4383 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:57.470000 audit[4383]: AVC avc: denied { perfmon } for pid=4383 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:57.470000 audit[4383]: AVC avc: denied { bpf } for pid=4383 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:57.470000 audit[4383]: AVC avc: denied { bpf } for pid=4383 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:57.470000 audit: BPF prog-id=183 op=LOAD Mar 17 18:53:57.470000 audit[4383]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000145c30 a2=78 a3=c0001c00c8 items=0 ppid=4375 pid=4383 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:53:57.470000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6331396534343738663238386231613265383033396361343530376237 Mar 17 18:53:57.476398 env[1409]: 2025-03-17 18:53:57.268 [INFO][4316] cni-plugin/plugin.go 325: Calico CNI found existing endpoint: &{{WorkloadEndpoint projectcalico.org/v3} {ci--3510.3.7--a--9ed44aff31-k8s-calico--kube--controllers--79dcd7cc77--7gsvv-eth0 calico-kube-controllers-79dcd7cc77- calico-system 5962bc12-5113-4699-8f4b-318bf87ebc57 821 0 2025-03-17 18:53:27 +0000 UTC map[app.kubernetes.io/name:calico-kube-controllers k8s-app:calico-kube-controllers pod-template-hash:79dcd7cc77 projectcalico.org/namespace:calico-system projectcalico.org/orchestrator:k8s projectcalico.org/serviceaccount:calico-kube-controllers] map[] [] [] []} {k8s ci-3510.3.7-a-9ed44aff31 calico-kube-controllers-79dcd7cc77-7gsvv eth0 calico-kube-controllers [] [] [kns.calico-system ksa.calico-system.calico-kube-controllers] cali75d2b046d1c [] []}} ContainerID="22ea3535509a8003b7c34e6eb24c8636bc8e86c22a9dbf50b30aa438bb611449" Namespace="calico-system" Pod="calico-kube-controllers-79dcd7cc77-7gsvv" WorkloadEndpoint="ci--3510.3.7--a--9ed44aff31-k8s-calico--kube--controllers--79dcd7cc77--7gsvv-" Mar 17 18:53:57.476398 env[1409]: 2025-03-17 18:53:57.268 [INFO][4316] cni-plugin/k8s.go 77: Extracted identifiers for CmdAddK8s ContainerID="22ea3535509a8003b7c34e6eb24c8636bc8e86c22a9dbf50b30aa438bb611449" Namespace="calico-system" Pod="calico-kube-controllers-79dcd7cc77-7gsvv" WorkloadEndpoint="ci--3510.3.7--a--9ed44aff31-k8s-calico--kube--controllers--79dcd7cc77--7gsvv-eth0" Mar 17 18:53:57.476398 env[1409]: 2025-03-17 18:53:57.319 [INFO][4348] ipam/ipam_plugin.go 225: Calico CNI IPAM request count IPv4=1 IPv6=0 ContainerID="22ea3535509a8003b7c34e6eb24c8636bc8e86c22a9dbf50b30aa438bb611449" HandleID="k8s-pod-network.22ea3535509a8003b7c34e6eb24c8636bc8e86c22a9dbf50b30aa438bb611449" Workload="ci--3510.3.7--a--9ed44aff31-k8s-calico--kube--controllers--79dcd7cc77--7gsvv-eth0" Mar 17 18:53:57.476398 env[1409]: 2025-03-17 18:53:57.384 [INFO][4348] ipam/ipam_plugin.go 265: Auto assigning IP ContainerID="22ea3535509a8003b7c34e6eb24c8636bc8e86c22a9dbf50b30aa438bb611449" HandleID="k8s-pod-network.22ea3535509a8003b7c34e6eb24c8636bc8e86c22a9dbf50b30aa438bb611449" Workload="ci--3510.3.7--a--9ed44aff31-k8s-calico--kube--controllers--79dcd7cc77--7gsvv-eth0" assignArgs=ipam.AutoAssignArgs{Num4:1, Num6:0, HandleID:(*string)(0xc000310ff0), Attrs:map[string]string{"namespace":"calico-system", "node":"ci-3510.3.7-a-9ed44aff31", "pod":"calico-kube-controllers-79dcd7cc77-7gsvv", "timestamp":"2025-03-17 18:53:57.319988874 +0000 UTC"}, Hostname:"ci-3510.3.7-a-9ed44aff31", IPv4Pools:[]net.IPNet{}, IPv6Pools:[]net.IPNet{}, MaxBlocksPerHost:0, HostReservedAttrIPv4s:(*ipam.HostReservedAttr)(nil), HostReservedAttrIPv6s:(*ipam.HostReservedAttr)(nil), IntendedUse:"Workload"} Mar 17 18:53:57.476398 env[1409]: 2025-03-17 18:53:57.385 [INFO][4348] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Mar 17 18:53:57.476398 env[1409]: 2025-03-17 18:53:57.385 [INFO][4348] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Mar 17 18:53:57.476398 env[1409]: 2025-03-17 18:53:57.385 [INFO][4348] ipam/ipam.go 107: Auto-assign 1 ipv4, 0 ipv6 addrs for host 'ci-3510.3.7-a-9ed44aff31' Mar 17 18:53:57.476398 env[1409]: 2025-03-17 18:53:57.394 [INFO][4348] ipam/ipam.go 660: Looking up existing affinities for host handle="k8s-pod-network.22ea3535509a8003b7c34e6eb24c8636bc8e86c22a9dbf50b30aa438bb611449" host="ci-3510.3.7-a-9ed44aff31" Mar 17 18:53:57.476398 env[1409]: 2025-03-17 18:53:57.399 [INFO][4348] ipam/ipam.go 372: Looking up existing affinities for host host="ci-3510.3.7-a-9ed44aff31" Mar 17 18:53:57.476398 env[1409]: 2025-03-17 18:53:57.406 [INFO][4348] ipam/ipam.go 489: Trying affinity for 192.168.88.192/26 host="ci-3510.3.7-a-9ed44aff31" Mar 17 18:53:57.476398 env[1409]: 2025-03-17 18:53:57.410 [INFO][4348] ipam/ipam.go 155: Attempting to load block cidr=192.168.88.192/26 host="ci-3510.3.7-a-9ed44aff31" Mar 17 18:53:57.476398 env[1409]: 2025-03-17 18:53:57.414 [INFO][4348] ipam/ipam.go 232: Affinity is confirmed and block has been loaded cidr=192.168.88.192/26 host="ci-3510.3.7-a-9ed44aff31" Mar 17 18:53:57.476398 env[1409]: 2025-03-17 18:53:57.414 [INFO][4348] ipam/ipam.go 1180: Attempting to assign 1 addresses from block block=192.168.88.192/26 handle="k8s-pod-network.22ea3535509a8003b7c34e6eb24c8636bc8e86c22a9dbf50b30aa438bb611449" host="ci-3510.3.7-a-9ed44aff31" Mar 17 18:53:57.476398 env[1409]: 2025-03-17 18:53:57.415 [INFO][4348] ipam/ipam.go 1685: Creating new handle: k8s-pod-network.22ea3535509a8003b7c34e6eb24c8636bc8e86c22a9dbf50b30aa438bb611449 Mar 17 18:53:57.476398 env[1409]: 2025-03-17 18:53:57.427 [INFO][4348] ipam/ipam.go 1203: Writing block in order to claim IPs block=192.168.88.192/26 handle="k8s-pod-network.22ea3535509a8003b7c34e6eb24c8636bc8e86c22a9dbf50b30aa438bb611449" host="ci-3510.3.7-a-9ed44aff31" Mar 17 18:53:57.476398 env[1409]: 2025-03-17 18:53:57.440 [INFO][4348] ipam/ipam.go 1216: Successfully claimed IPs: [192.168.88.198/26] block=192.168.88.192/26 handle="k8s-pod-network.22ea3535509a8003b7c34e6eb24c8636bc8e86c22a9dbf50b30aa438bb611449" host="ci-3510.3.7-a-9ed44aff31" Mar 17 18:53:57.476398 env[1409]: 2025-03-17 18:53:57.440 [INFO][4348] ipam/ipam.go 847: Auto-assigned 1 out of 1 IPv4s: [192.168.88.198/26] handle="k8s-pod-network.22ea3535509a8003b7c34e6eb24c8636bc8e86c22a9dbf50b30aa438bb611449" host="ci-3510.3.7-a-9ed44aff31" Mar 17 18:53:57.476398 env[1409]: 2025-03-17 18:53:57.440 [INFO][4348] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Mar 17 18:53:57.476398 env[1409]: 2025-03-17 18:53:57.440 [INFO][4348] ipam/ipam_plugin.go 283: Calico CNI IPAM assigned addresses IPv4=[192.168.88.198/26] IPv6=[] ContainerID="22ea3535509a8003b7c34e6eb24c8636bc8e86c22a9dbf50b30aa438bb611449" HandleID="k8s-pod-network.22ea3535509a8003b7c34e6eb24c8636bc8e86c22a9dbf50b30aa438bb611449" Workload="ci--3510.3.7--a--9ed44aff31-k8s-calico--kube--controllers--79dcd7cc77--7gsvv-eth0" Mar 17 18:53:57.477298 env[1409]: 2025-03-17 18:53:57.442 [INFO][4316] cni-plugin/k8s.go 386: Populated endpoint ContainerID="22ea3535509a8003b7c34e6eb24c8636bc8e86c22a9dbf50b30aa438bb611449" Namespace="calico-system" Pod="calico-kube-controllers-79dcd7cc77-7gsvv" WorkloadEndpoint="ci--3510.3.7--a--9ed44aff31-k8s-calico--kube--controllers--79dcd7cc77--7gsvv-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ci--3510.3.7--a--9ed44aff31-k8s-calico--kube--controllers--79dcd7cc77--7gsvv-eth0", GenerateName:"calico-kube-controllers-79dcd7cc77-", Namespace:"calico-system", SelfLink:"", UID:"5962bc12-5113-4699-8f4b-318bf87ebc57", ResourceVersion:"821", Generation:0, CreationTimestamp:time.Date(2025, time.March, 17, 18, 53, 27, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"calico-kube-controllers", "k8s-app":"calico-kube-controllers", "pod-template-hash":"79dcd7cc77", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-kube-controllers"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ci-3510.3.7-a-9ed44aff31", ContainerID:"", Pod:"calico-kube-controllers-79dcd7cc77-7gsvv", Endpoint:"eth0", ServiceAccountName:"calico-kube-controllers", IPNetworks:[]string{"192.168.88.198/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.calico-kube-controllers"}, InterfaceName:"cali75d2b046d1c", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil)}} Mar 17 18:53:57.477298 env[1409]: 2025-03-17 18:53:57.442 [INFO][4316] cni-plugin/k8s.go 387: Calico CNI using IPs: [192.168.88.198/32] ContainerID="22ea3535509a8003b7c34e6eb24c8636bc8e86c22a9dbf50b30aa438bb611449" Namespace="calico-system" Pod="calico-kube-controllers-79dcd7cc77-7gsvv" WorkloadEndpoint="ci--3510.3.7--a--9ed44aff31-k8s-calico--kube--controllers--79dcd7cc77--7gsvv-eth0" Mar 17 18:53:57.477298 env[1409]: 2025-03-17 18:53:57.442 [INFO][4316] cni-plugin/dataplane_linux.go 69: Setting the host side veth name to cali75d2b046d1c ContainerID="22ea3535509a8003b7c34e6eb24c8636bc8e86c22a9dbf50b30aa438bb611449" Namespace="calico-system" Pod="calico-kube-controllers-79dcd7cc77-7gsvv" WorkloadEndpoint="ci--3510.3.7--a--9ed44aff31-k8s-calico--kube--controllers--79dcd7cc77--7gsvv-eth0" Mar 17 18:53:57.477298 env[1409]: 2025-03-17 18:53:57.446 [INFO][4316] cni-plugin/dataplane_linux.go 508: Disabling IPv4 forwarding ContainerID="22ea3535509a8003b7c34e6eb24c8636bc8e86c22a9dbf50b30aa438bb611449" Namespace="calico-system" Pod="calico-kube-controllers-79dcd7cc77-7gsvv" WorkloadEndpoint="ci--3510.3.7--a--9ed44aff31-k8s-calico--kube--controllers--79dcd7cc77--7gsvv-eth0" Mar 17 18:53:57.477298 env[1409]: 2025-03-17 18:53:57.447 [INFO][4316] cni-plugin/k8s.go 414: Added Mac, interface name, and active container ID to endpoint ContainerID="22ea3535509a8003b7c34e6eb24c8636bc8e86c22a9dbf50b30aa438bb611449" Namespace="calico-system" Pod="calico-kube-controllers-79dcd7cc77-7gsvv" WorkloadEndpoint="ci--3510.3.7--a--9ed44aff31-k8s-calico--kube--controllers--79dcd7cc77--7gsvv-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ci--3510.3.7--a--9ed44aff31-k8s-calico--kube--controllers--79dcd7cc77--7gsvv-eth0", GenerateName:"calico-kube-controllers-79dcd7cc77-", Namespace:"calico-system", SelfLink:"", UID:"5962bc12-5113-4699-8f4b-318bf87ebc57", ResourceVersion:"821", Generation:0, CreationTimestamp:time.Date(2025, time.March, 17, 18, 53, 27, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"calico-kube-controllers", "k8s-app":"calico-kube-controllers", "pod-template-hash":"79dcd7cc77", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-kube-controllers"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ci-3510.3.7-a-9ed44aff31", ContainerID:"22ea3535509a8003b7c34e6eb24c8636bc8e86c22a9dbf50b30aa438bb611449", Pod:"calico-kube-controllers-79dcd7cc77-7gsvv", Endpoint:"eth0", ServiceAccountName:"calico-kube-controllers", IPNetworks:[]string{"192.168.88.198/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.calico-kube-controllers"}, InterfaceName:"cali75d2b046d1c", MAC:"82:2c:8c:0b:4b:27", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil)}} Mar 17 18:53:57.477298 env[1409]: 2025-03-17 18:53:57.472 [INFO][4316] cni-plugin/k8s.go 500: Wrote updated endpoint to datastore ContainerID="22ea3535509a8003b7c34e6eb24c8636bc8e86c22a9dbf50b30aa438bb611449" Namespace="calico-system" Pod="calico-kube-controllers-79dcd7cc77-7gsvv" WorkloadEndpoint="ci--3510.3.7--a--9ed44aff31-k8s-calico--kube--controllers--79dcd7cc77--7gsvv-eth0" Mar 17 18:53:57.485409 systemd-networkd[1562]: calibb2707be1e8: Gained IPv6LL Mar 17 18:53:57.521361 env[1409]: time="2025-03-17T18:53:57.520251125Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Mar 17 18:53:57.521361 env[1409]: time="2025-03-17T18:53:57.520312526Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Mar 17 18:53:57.521361 env[1409]: time="2025-03-17T18:53:57.520326926Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Mar 17 18:53:57.521361 env[1409]: time="2025-03-17T18:53:57.520486126Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/22ea3535509a8003b7c34e6eb24c8636bc8e86c22a9dbf50b30aa438bb611449 pid=4420 runtime=io.containerd.runc.v2 Mar 17 18:53:57.529316 env[1409]: time="2025-03-17T18:53:57.529270364Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:csi-node-driver-qb29d,Uid:fa4b58f5-7cb3-428f-9da4-44a5cc6627b4,Namespace:calico-system,Attempt:1,} returns sandbox id \"c19e4478f288b1a2e8039ca4507b7570c5a30429f116d812b443686c71562694\"" Mar 17 18:53:57.542000 audit[4419]: NETFILTER_CFG table=filter:117 family=2 entries=52 op=nft_register_chain pid=4419 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Mar 17 18:53:57.542000 audit[4419]: SYSCALL arch=c000003e syscall=46 success=yes exit=25040 a0=3 a1=7ffe9fa5cdb0 a2=0 a3=7ffe9fa5cd9c items=0 ppid=3599 pid=4419 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:53:57.542000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Mar 17 18:53:57.563153 systemd[1]: Started cri-containerd-22ea3535509a8003b7c34e6eb24c8636bc8e86c22a9dbf50b30aa438bb611449.scope. Mar 17 18:53:57.590000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:57.590000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:57.590000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:57.590000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:57.590000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:57.590000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:57.590000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:57.590000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:57.590000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:57.590000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:57.590000 audit: BPF prog-id=184 op=LOAD Mar 17 18:53:57.591000 audit[4435]: AVC avc: denied { bpf } for pid=4435 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:57.591000 audit[4435]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000117c48 a2=10 a3=1c items=0 ppid=4420 pid=4435 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:53:57.591000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3232656133353335353039613830303362376333346536656232346338 Mar 17 18:53:57.591000 audit[4435]: AVC avc: denied { perfmon } for pid=4435 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:57.591000 audit[4435]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001176b0 a2=3c a3=c items=0 ppid=4420 pid=4435 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:53:57.591000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3232656133353335353039613830303362376333346536656232346338 Mar 17 18:53:57.591000 audit[4435]: AVC avc: denied { bpf } for pid=4435 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:57.591000 audit[4435]: AVC avc: denied { bpf } for pid=4435 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:57.591000 audit[4435]: AVC avc: denied { bpf } for pid=4435 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:57.591000 audit[4435]: AVC avc: denied { perfmon } for pid=4435 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:57.591000 audit[4435]: AVC avc: denied { perfmon } for pid=4435 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:57.591000 audit[4435]: AVC avc: denied { perfmon } for pid=4435 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:57.591000 audit[4435]: AVC avc: denied { perfmon } for pid=4435 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:57.591000 audit[4435]: AVC avc: denied { perfmon } for pid=4435 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:57.591000 audit[4435]: AVC avc: denied { bpf } for pid=4435 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:57.591000 audit[4435]: AVC avc: denied { bpf } for pid=4435 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:57.591000 audit: BPF prog-id=185 op=LOAD Mar 17 18:53:57.591000 audit[4435]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001179d8 a2=78 a3=c0002815d0 items=0 ppid=4420 pid=4435 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:53:57.591000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3232656133353335353039613830303362376333346536656232346338 Mar 17 18:53:57.591000 audit[4435]: AVC avc: denied { bpf } for pid=4435 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:57.591000 audit[4435]: AVC avc: denied { bpf } for pid=4435 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:57.591000 audit[4435]: AVC avc: denied { perfmon } for pid=4435 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:57.591000 audit[4435]: AVC avc: denied { perfmon } for pid=4435 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:57.591000 audit[4435]: AVC avc: denied { perfmon } for pid=4435 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:57.591000 audit[4435]: AVC avc: denied { perfmon } for pid=4435 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:57.591000 audit[4435]: AVC avc: denied { perfmon } for pid=4435 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:57.591000 audit[4435]: AVC avc: denied { bpf } for pid=4435 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:57.591000 audit[4435]: AVC avc: denied { bpf } for pid=4435 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:57.591000 audit: BPF prog-id=186 op=LOAD Mar 17 18:53:57.591000 audit[4435]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000117770 a2=78 a3=c000281618 items=0 ppid=4420 pid=4435 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:53:57.591000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3232656133353335353039613830303362376333346536656232346338 Mar 17 18:53:57.591000 audit: BPF prog-id=186 op=UNLOAD Mar 17 18:53:57.591000 audit: BPF prog-id=185 op=UNLOAD Mar 17 18:53:57.591000 audit[4435]: AVC avc: denied { bpf } for pid=4435 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:57.591000 audit[4435]: AVC avc: denied { bpf } for pid=4435 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:57.591000 audit[4435]: AVC avc: denied { bpf } for pid=4435 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:57.591000 audit[4435]: AVC avc: denied { perfmon } for pid=4435 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:57.591000 audit[4435]: AVC avc: denied { perfmon } for pid=4435 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:57.591000 audit[4435]: AVC avc: denied { perfmon } for pid=4435 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:57.591000 audit[4435]: AVC avc: denied { perfmon } for pid=4435 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:57.591000 audit[4435]: AVC avc: denied { perfmon } for pid=4435 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:57.591000 audit[4435]: AVC avc: denied { bpf } for pid=4435 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:57.591000 audit[4435]: AVC avc: denied { bpf } for pid=4435 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:57.591000 audit: BPF prog-id=187 op=LOAD Mar 17 18:53:57.591000 audit[4435]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000117c30 a2=78 a3=c000281a28 items=0 ppid=4420 pid=4435 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:53:57.591000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3232656133353335353039613830303362376333346536656232346338 Mar 17 18:53:57.634059 env[1409]: time="2025-03-17T18:53:57.634013209Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-kube-controllers-79dcd7cc77-7gsvv,Uid:5962bc12-5113-4699-8f4b-318bf87ebc57,Namespace:calico-system,Attempt:1,} returns sandbox id \"22ea3535509a8003b7c34e6eb24c8636bc8e86c22a9dbf50b30aa438bb611449\"" Mar 17 18:53:58.381707 systemd-networkd[1562]: cali51208d89f9a: Gained IPv6LL Mar 17 18:53:59.021505 systemd-networkd[1562]: calibadabe137f4: Gained IPv6LL Mar 17 18:53:59.259226 env[1409]: time="2025-03-17T18:53:59.259177033Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/apiserver:v3.29.1,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Mar 17 18:53:59.265169 env[1409]: time="2025-03-17T18:53:59.265130258Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:421726ace5ed13894f7edf594dd3a462947aedc13d0f69d08525d7369477fb70,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Mar 17 18:53:59.270420 env[1409]: time="2025-03-17T18:53:59.270383480Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/apiserver:v3.29.1,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Mar 17 18:53:59.274024 env[1409]: time="2025-03-17T18:53:59.273826194Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/apiserver@sha256:b8c43e264fe52e0c327b0bf3ac882a0224b33bdd7f4ff58a74242da7d9b00486,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Mar 17 18:53:59.274760 env[1409]: time="2025-03-17T18:53:59.274727098Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/apiserver:v3.29.1\" returns image reference \"sha256:421726ace5ed13894f7edf594dd3a462947aedc13d0f69d08525d7369477fb70\"" Mar 17 18:53:59.276544 env[1409]: time="2025-03-17T18:53:59.276513805Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/apiserver:v3.29.1\"" Mar 17 18:53:59.278059 env[1409]: time="2025-03-17T18:53:59.278030611Z" level=info msg="CreateContainer within sandbox \"9c6f55438ce577054d49a02fc19619c7f7c44c024da34178533d3aac4328c094\" for container &ContainerMetadata{Name:calico-apiserver,Attempt:0,}" Mar 17 18:53:59.313004 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount130678079.mount: Deactivated successfully. Mar 17 18:53:59.325358 env[1409]: time="2025-03-17T18:53:59.325322207Z" level=info msg="CreateContainer within sandbox \"9c6f55438ce577054d49a02fc19619c7f7c44c024da34178533d3aac4328c094\" for &ContainerMetadata{Name:calico-apiserver,Attempt:0,} returns container id \"dd3bb52b6f4a07b09fa152f7114fff7ac0c738517264d96e56b6be56e2dacaad\"" Mar 17 18:53:59.326944 env[1409]: time="2025-03-17T18:53:59.326919514Z" level=info msg="StartContainer for \"dd3bb52b6f4a07b09fa152f7114fff7ac0c738517264d96e56b6be56e2dacaad\"" Mar 17 18:53:59.341425 systemd-networkd[1562]: cali75d2b046d1c: Gained IPv6LL Mar 17 18:53:59.357370 systemd[1]: Started cri-containerd-dd3bb52b6f4a07b09fa152f7114fff7ac0c738517264d96e56b6be56e2dacaad.scope. Mar 17 18:53:59.369000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:59.374964 kernel: kauditd_printk_skb: 494 callbacks suppressed Mar 17 18:53:59.375032 kernel: audit: type=1400 audit(1742237639.369:1274): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:59.369000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:59.373000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:59.415073 kernel: audit: type=1400 audit(1742237639.369:1275): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:59.415138 kernel: audit: type=1400 audit(1742237639.373:1276): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:59.373000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:59.428706 kernel: audit: type=1400 audit(1742237639.373:1277): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:59.433288 kernel: audit: type=1400 audit(1742237639.373:1278): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:59.373000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:59.373000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:59.454815 kernel: audit: type=1400 audit(1742237639.373:1279): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:59.454867 kernel: audit: type=1400 audit(1742237639.373:1280): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:59.373000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:59.373000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:59.482256 kernel: audit: type=1400 audit(1742237639.373:1281): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:59.373000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:59.495879 kernel: audit: type=1400 audit(1742237639.373:1282): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:59.497143 kernel: audit: type=1400 audit(1742237639.374:1283): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:59.374000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:59.374000 audit: BPF prog-id=188 op=LOAD Mar 17 18:53:59.375000 audit[4472]: AVC avc: denied { bpf } for pid=4472 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:59.375000 audit[4472]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c0001bdc48 a2=10 a3=1c items=0 ppid=4165 pid=4472 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:53:59.375000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6464336262353262366634613037623039666131353266373131346666 Mar 17 18:53:59.375000 audit[4472]: AVC avc: denied { perfmon } for pid=4472 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:59.375000 audit[4472]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001bd6b0 a2=3c a3=8 items=0 ppid=4165 pid=4472 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:53:59.375000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6464336262353262366634613037623039666131353266373131346666 Mar 17 18:53:59.375000 audit[4472]: AVC avc: denied { bpf } for pid=4472 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:59.375000 audit[4472]: AVC avc: denied { bpf } for pid=4472 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:59.375000 audit[4472]: AVC avc: denied { bpf } for pid=4472 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:59.375000 audit[4472]: AVC avc: denied { perfmon } for pid=4472 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:59.375000 audit[4472]: AVC avc: denied { perfmon } for pid=4472 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:59.375000 audit[4472]: AVC avc: denied { perfmon } for pid=4472 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:59.375000 audit[4472]: AVC avc: denied { perfmon } for pid=4472 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:59.375000 audit[4472]: AVC avc: denied { perfmon } for pid=4472 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:59.375000 audit[4472]: AVC avc: denied { bpf } for pid=4472 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:59.375000 audit[4472]: AVC avc: denied { bpf } for pid=4472 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:59.375000 audit: BPF prog-id=189 op=LOAD Mar 17 18:53:59.375000 audit[4472]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001bd9d8 a2=78 a3=c0003ac720 items=0 ppid=4165 pid=4472 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:53:59.375000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6464336262353262366634613037623039666131353266373131346666 Mar 17 18:53:59.387000 audit[4472]: AVC avc: denied { bpf } for pid=4472 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:59.387000 audit[4472]: AVC avc: denied { bpf } for pid=4472 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:59.387000 audit[4472]: AVC avc: denied { perfmon } for pid=4472 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:59.387000 audit[4472]: AVC avc: denied { perfmon } for pid=4472 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:59.387000 audit[4472]: AVC avc: denied { perfmon } for pid=4472 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:59.387000 audit[4472]: AVC avc: denied { perfmon } for pid=4472 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:59.387000 audit[4472]: AVC avc: denied { perfmon } for pid=4472 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:59.387000 audit[4472]: AVC avc: denied { bpf } for pid=4472 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:59.387000 audit[4472]: AVC avc: denied { bpf } for pid=4472 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:59.387000 audit: BPF prog-id=190 op=LOAD Mar 17 18:53:59.387000 audit[4472]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c0001bd770 a2=78 a3=c0003ac768 items=0 ppid=4165 pid=4472 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:53:59.387000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6464336262353262366634613037623039666131353266373131346666 Mar 17 18:53:59.388000 audit: BPF prog-id=190 op=UNLOAD Mar 17 18:53:59.388000 audit: BPF prog-id=189 op=UNLOAD Mar 17 18:53:59.388000 audit[4472]: AVC avc: denied { bpf } for pid=4472 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:59.388000 audit[4472]: AVC avc: denied { bpf } for pid=4472 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:59.388000 audit[4472]: AVC avc: denied { bpf } for pid=4472 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:59.388000 audit[4472]: AVC avc: denied { perfmon } for pid=4472 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:59.388000 audit[4472]: AVC avc: denied { perfmon } for pid=4472 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:59.388000 audit[4472]: AVC avc: denied { perfmon } for pid=4472 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:59.388000 audit[4472]: AVC avc: denied { perfmon } for pid=4472 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:59.388000 audit[4472]: AVC avc: denied { perfmon } for pid=4472 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:59.388000 audit[4472]: AVC avc: denied { bpf } for pid=4472 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:59.388000 audit[4472]: AVC avc: denied { bpf } for pid=4472 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:59.388000 audit: BPF prog-id=191 op=LOAD Mar 17 18:53:59.388000 audit[4472]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001bdc30 a2=78 a3=c0003acb78 items=0 ppid=4165 pid=4472 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:53:59.388000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6464336262353262366634613037623039666131353266373131346666 Mar 17 18:53:59.525158 env[1409]: time="2025-03-17T18:53:59.525066533Z" level=info msg="StartContainer for \"dd3bb52b6f4a07b09fa152f7114fff7ac0c738517264d96e56b6be56e2dacaad\" returns successfully" Mar 17 18:53:59.681116 env[1409]: time="2025-03-17T18:53:59.681063079Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/apiserver:v3.29.1,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Mar 17 18:53:59.688713 env[1409]: time="2025-03-17T18:53:59.688662810Z" level=info msg="ImageUpdate event &ImageUpdate{Name:sha256:421726ace5ed13894f7edf594dd3a462947aedc13d0f69d08525d7369477fb70,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Mar 17 18:53:59.694291 env[1409]: time="2025-03-17T18:53:59.694247433Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/apiserver:v3.29.1,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Mar 17 18:53:59.701227 env[1409]: time="2025-03-17T18:53:59.701192462Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/apiserver@sha256:b8c43e264fe52e0c327b0bf3ac882a0224b33bdd7f4ff58a74242da7d9b00486,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Mar 17 18:53:59.701983 env[1409]: time="2025-03-17T18:53:59.701942065Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/apiserver:v3.29.1\" returns image reference \"sha256:421726ace5ed13894f7edf594dd3a462947aedc13d0f69d08525d7369477fb70\"" Mar 17 18:53:59.703968 env[1409]: time="2025-03-17T18:53:59.703937773Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/csi:v3.29.1\"" Mar 17 18:53:59.707081 env[1409]: time="2025-03-17T18:53:59.707048186Z" level=info msg="CreateContainer within sandbox \"89eb8d75da9350ccd1f1763d6a2e73cc9101dc9c17ffc917af21a3162c014c9e\" for container &ContainerMetadata{Name:calico-apiserver,Attempt:0,}" Mar 17 18:53:59.755680 env[1409]: time="2025-03-17T18:53:59.755634387Z" level=info msg="CreateContainer within sandbox \"89eb8d75da9350ccd1f1763d6a2e73cc9101dc9c17ffc917af21a3162c014c9e\" for &ContainerMetadata{Name:calico-apiserver,Attempt:0,} returns container id \"6b6722a31be70a4f89b25f40e6670132ba8ea925ee57bf2ce08a7e8cc1e380cc\"" Mar 17 18:53:59.756642 env[1409]: time="2025-03-17T18:53:59.756606191Z" level=info msg="StartContainer for \"6b6722a31be70a4f89b25f40e6670132ba8ea925ee57bf2ce08a7e8cc1e380cc\"" Mar 17 18:53:59.778039 systemd[1]: Started cri-containerd-6b6722a31be70a4f89b25f40e6670132ba8ea925ee57bf2ce08a7e8cc1e380cc.scope. Mar 17 18:53:59.814000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:59.814000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:59.814000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:59.814000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:59.814000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:59.814000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:59.814000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:59.814000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:59.814000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:59.814000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:59.814000 audit: BPF prog-id=192 op=LOAD Mar 17 18:53:59.815000 audit[4509]: AVC avc: denied { bpf } for pid=4509 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:59.815000 audit[4509]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000145c48 a2=10 a3=1c items=0 ppid=4222 pid=4509 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:53:59.815000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3662363732326133316265373061346638396232356634306536363730 Mar 17 18:53:59.815000 audit[4509]: AVC avc: denied { perfmon } for pid=4509 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:59.815000 audit[4509]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001456b0 a2=3c a3=8 items=0 ppid=4222 pid=4509 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:53:59.815000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3662363732326133316265373061346638396232356634306536363730 Mar 17 18:53:59.815000 audit[4509]: AVC avc: denied { bpf } for pid=4509 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:59.815000 audit[4509]: AVC avc: denied { bpf } for pid=4509 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:59.815000 audit[4509]: AVC avc: denied { bpf } for pid=4509 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:59.815000 audit[4509]: AVC avc: denied { perfmon } for pid=4509 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:59.815000 audit[4509]: AVC avc: denied { perfmon } for pid=4509 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:59.815000 audit[4509]: AVC avc: denied { perfmon } for pid=4509 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:59.815000 audit[4509]: AVC avc: denied { perfmon } for pid=4509 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:59.815000 audit[4509]: AVC avc: denied { perfmon } for pid=4509 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:59.815000 audit[4509]: AVC avc: denied { bpf } for pid=4509 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:59.815000 audit[4509]: AVC avc: denied { bpf } for pid=4509 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:59.815000 audit: BPF prog-id=193 op=LOAD Mar 17 18:53:59.815000 audit[4509]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001459d8 a2=78 a3=c0001d8ef0 items=0 ppid=4222 pid=4509 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:53:59.815000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3662363732326133316265373061346638396232356634306536363730 Mar 17 18:53:59.815000 audit[4509]: AVC avc: denied { bpf } for pid=4509 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:59.815000 audit[4509]: AVC avc: denied { bpf } for pid=4509 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:59.815000 audit[4509]: AVC avc: denied { perfmon } for pid=4509 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:59.815000 audit[4509]: AVC avc: denied { perfmon } for pid=4509 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:59.815000 audit[4509]: AVC avc: denied { perfmon } for pid=4509 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:59.815000 audit[4509]: AVC avc: denied { perfmon } for pid=4509 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:59.815000 audit[4509]: AVC avc: denied { perfmon } for pid=4509 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:59.815000 audit[4509]: AVC avc: denied { bpf } for pid=4509 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:59.815000 audit[4509]: AVC avc: denied { bpf } for pid=4509 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:59.815000 audit: BPF prog-id=194 op=LOAD Mar 17 18:53:59.815000 audit[4509]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000145770 a2=78 a3=c0001d8f38 items=0 ppid=4222 pid=4509 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:53:59.815000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3662363732326133316265373061346638396232356634306536363730 Mar 17 18:53:59.815000 audit: BPF prog-id=194 op=UNLOAD Mar 17 18:53:59.815000 audit: BPF prog-id=193 op=UNLOAD Mar 17 18:53:59.815000 audit[4509]: AVC avc: denied { bpf } for pid=4509 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:59.815000 audit[4509]: AVC avc: denied { bpf } for pid=4509 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:59.815000 audit[4509]: AVC avc: denied { bpf } for pid=4509 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:59.815000 audit[4509]: AVC avc: denied { perfmon } for pid=4509 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:59.815000 audit[4509]: AVC avc: denied { perfmon } for pid=4509 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:59.815000 audit[4509]: AVC avc: denied { perfmon } for pid=4509 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:59.815000 audit[4509]: AVC avc: denied { perfmon } for pid=4509 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:59.815000 audit[4509]: AVC avc: denied { perfmon } for pid=4509 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:59.815000 audit[4509]: AVC avc: denied { bpf } for pid=4509 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:59.815000 audit[4509]: AVC avc: denied { bpf } for pid=4509 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:53:59.815000 audit: BPF prog-id=195 op=LOAD Mar 17 18:53:59.815000 audit[4509]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000145c30 a2=78 a3=c0001d9348 items=0 ppid=4222 pid=4509 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:53:59.815000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3662363732326133316265373061346638396232356634306536363730 Mar 17 18:53:59.854586 env[1409]: time="2025-03-17T18:53:59.854539996Z" level=info msg="StartContainer for \"6b6722a31be70a4f89b25f40e6670132ba8ea925ee57bf2ce08a7e8cc1e380cc\" returns successfully" Mar 17 18:54:00.135564 kubelet[2450]: I0317 18:54:00.135410 2450 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="calico-apiserver/calico-apiserver-5858799f47-k8zn6" podStartSLOduration=30.357734295 podStartE2EDuration="33.135386251s" podCreationTimestamp="2025-03-17 18:53:27 +0000 UTC" firstStartedPulling="2025-03-17 18:53:56.498043146 +0000 UTC m=+42.655860212" lastFinishedPulling="2025-03-17 18:53:59.275695102 +0000 UTC m=+45.433512168" observedRunningTime="2025-03-17 18:54:00.134432947 +0000 UTC m=+46.292250013" watchObservedRunningTime="2025-03-17 18:54:00.135386251 +0000 UTC m=+46.293203317" Mar 17 18:54:00.184000 audit[4544]: NETFILTER_CFG table=filter:118 family=2 entries=10 op=nft_register_rule pid=4544 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Mar 17 18:54:00.184000 audit[4544]: SYSCALL arch=c000003e syscall=46 success=yes exit=3760 a0=3 a1=7ffe96ca4870 a2=0 a3=7ffe96ca485c items=0 ppid=2619 pid=4544 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:54:00.184000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Mar 17 18:54:00.191000 audit[4544]: NETFILTER_CFG table=nat:119 family=2 entries=20 op=nft_register_rule pid=4544 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Mar 17 18:54:00.191000 audit[4544]: SYSCALL arch=c000003e syscall=46 success=yes exit=5772 a0=3 a1=7ffe96ca4870 a2=0 a3=7ffe96ca485c items=0 ppid=2619 pid=4544 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:54:00.191000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Mar 17 18:54:00.207000 audit[4546]: NETFILTER_CFG table=filter:120 family=2 entries=10 op=nft_register_rule pid=4546 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Mar 17 18:54:00.207000 audit[4546]: SYSCALL arch=c000003e syscall=46 success=yes exit=3760 a0=3 a1=7ffd64c94d30 a2=0 a3=7ffd64c94d1c items=0 ppid=2619 pid=4546 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:54:00.207000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Mar 17 18:54:00.213000 audit[4546]: NETFILTER_CFG table=nat:121 family=2 entries=20 op=nft_register_rule pid=4546 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Mar 17 18:54:00.213000 audit[4546]: SYSCALL arch=c000003e syscall=46 success=yes exit=5772 a0=3 a1=7ffd64c94d30 a2=0 a3=7ffd64c94d1c items=0 ppid=2619 pid=4546 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:54:00.213000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Mar 17 18:54:00.307304 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount2433278339.mount: Deactivated successfully. Mar 17 18:54:00.324000 audit[4482]: AVC avc: denied { watch } for pid=4482 comm="apiserver" path="/calico-apiserver-certs/..2025_03_17_18_53_40.4205256663/tls.crt" dev="tmpfs" ino=3 scontext=system_u:system_r:svirt_lxc_net_t:s0:c211,c345 tcontext=system_u:object_r:svirt_lxc_file_t:s0:c211,c345 tclass=file permissive=0 Mar 17 18:54:00.324000 audit[4482]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=7 a1=c000bbfde0 a2=fc6 a3=0 items=0 ppid=4165 pid=4482 auid=4294967295 uid=10001 gid=10001 euid=10001 suid=10001 fsuid=10001 egid=10001 sgid=10001 fsgid=10001 tty=(none) ses=4294967295 comm="apiserver" exe="/code/apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c211,c345 key=(null) Mar 17 18:54:00.324000 audit: PROCTITLE proctitle=2F636F64652F617069736572766572002D2D7365637572652D706F72743D35343433002D2D746C732D707269766174652D6B65792D66696C653D2F63616C69636F2D6170697365727665722D63657274732F746C732E6B6579002D2D746C732D636572742D66696C653D2F63616C69636F2D6170697365727665722D63657274 Mar 17 18:54:00.949000 audit[4522]: AVC avc: denied { watch } for pid=4522 comm="apiserver" path="/calico-apiserver-certs/..2025_03_17_18_53_40.2855878070/tls.crt" dev="tmpfs" ino=4 scontext=system_u:system_r:svirt_lxc_net_t:s0:c206,c226 tcontext=system_u:object_r:svirt_lxc_file_t:s0:c206,c226 tclass=file permissive=0 Mar 17 18:54:00.949000 audit[4522]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=7 a1=c000aa7960 a2=fc6 a3=0 items=0 ppid=4222 pid=4522 auid=4294967295 uid=10001 gid=10001 euid=10001 suid=10001 fsuid=10001 egid=10001 sgid=10001 fsgid=10001 tty=(none) ses=4294967295 comm="apiserver" exe="/code/apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c206,c226 key=(null) Mar 17 18:54:00.949000 audit: PROCTITLE proctitle=2F636F64652F617069736572766572002D2D7365637572652D706F72743D35343433002D2D746C732D707269766174652D6B65792D66696C653D2F63616C69636F2D6170697365727665722D63657274732F746C732E6B6579002D2D746C732D636572742D66696C653D2F63616C69636F2D6170697365727665722D63657274 Mar 17 18:54:01.124226 kubelet[2450]: I0317 18:54:01.124188 2450 prober_manager.go:312] "Failed to trigger a manual run" probe="Readiness" Mar 17 18:54:01.124711 kubelet[2450]: I0317 18:54:01.124688 2450 prober_manager.go:312] "Failed to trigger a manual run" probe="Readiness" Mar 17 18:54:01.291200 env[1409]: time="2025-03-17T18:54:01.291156752Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/csi:v3.29.1,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Mar 17 18:54:01.297230 env[1409]: time="2025-03-17T18:54:01.297191776Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:bda8c42e04758c4f061339e213f50ccdc7502c4176fbf631aa12357e62b63540,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Mar 17 18:54:01.300888 env[1409]: time="2025-03-17T18:54:01.300859191Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/csi:v3.29.1,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Mar 17 18:54:01.304557 env[1409]: time="2025-03-17T18:54:01.304466405Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/csi@sha256:eaa7e01fb16b603c155a67b81f16992281db7f831684c7b2081d3434587a7ff3,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Mar 17 18:54:01.305472 env[1409]: time="2025-03-17T18:54:01.305443509Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/csi:v3.29.1\" returns image reference \"sha256:bda8c42e04758c4f061339e213f50ccdc7502c4176fbf631aa12357e62b63540\"" Mar 17 18:54:01.308328 env[1409]: time="2025-03-17T18:54:01.307524418Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/kube-controllers:v3.29.1\"" Mar 17 18:54:01.309305 env[1409]: time="2025-03-17T18:54:01.309256124Z" level=info msg="CreateContainer within sandbox \"c19e4478f288b1a2e8039ca4507b7570c5a30429f116d812b443686c71562694\" for container &ContainerMetadata{Name:calico-csi,Attempt:0,}" Mar 17 18:54:01.343027 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount2540648868.mount: Deactivated successfully. Mar 17 18:54:01.356974 env[1409]: time="2025-03-17T18:54:01.356918916Z" level=info msg="CreateContainer within sandbox \"c19e4478f288b1a2e8039ca4507b7570c5a30429f116d812b443686c71562694\" for &ContainerMetadata{Name:calico-csi,Attempt:0,} returns container id \"72fc1ee69edaa1aac5581e825cbd8f72df37461aa24d48466aa7adfb9e7f3757\"" Mar 17 18:54:01.357841 env[1409]: time="2025-03-17T18:54:01.357798520Z" level=info msg="StartContainer for \"72fc1ee69edaa1aac5581e825cbd8f72df37461aa24d48466aa7adfb9e7f3757\"" Mar 17 18:54:01.392902 systemd[1]: Started cri-containerd-72fc1ee69edaa1aac5581e825cbd8f72df37461aa24d48466aa7adfb9e7f3757.scope. Mar 17 18:54:01.427000 audit[4555]: AVC avc: denied { perfmon } for pid=4555 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:54:01.427000 audit[4555]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=0 a1=c0001456b0 a2=3c a3=7f3b52502cc8 items=0 ppid=4375 pid=4555 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:54:01.427000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3732666331656536396564616131616163353538316538323563626438 Mar 17 18:54:01.427000 audit[4555]: AVC avc: denied { bpf } for pid=4555 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:54:01.427000 audit[4555]: AVC avc: denied { bpf } for pid=4555 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:54:01.427000 audit[4555]: AVC avc: denied { bpf } for pid=4555 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:54:01.427000 audit[4555]: AVC avc: denied { perfmon } for pid=4555 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:54:01.427000 audit[4555]: AVC avc: denied { perfmon } for pid=4555 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:54:01.427000 audit[4555]: AVC avc: denied { perfmon } for pid=4555 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:54:01.427000 audit[4555]: AVC avc: denied { perfmon } for pid=4555 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:54:01.427000 audit[4555]: AVC avc: denied { perfmon } for pid=4555 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:54:01.427000 audit[4555]: AVC avc: denied { bpf } for pid=4555 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:54:01.427000 audit[4555]: AVC avc: denied { bpf } for pid=4555 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:54:01.427000 audit: BPF prog-id=196 op=LOAD Mar 17 18:54:01.427000 audit[4555]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c0001459d8 a2=78 a3=c000284cd8 items=0 ppid=4375 pid=4555 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:54:01.427000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3732666331656536396564616131616163353538316538323563626438 Mar 17 18:54:01.427000 audit[4555]: AVC avc: denied { bpf } for pid=4555 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:54:01.427000 audit[4555]: AVC avc: denied { bpf } for pid=4555 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:54:01.427000 audit[4555]: AVC avc: denied { perfmon } for pid=4555 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:54:01.427000 audit[4555]: AVC avc: denied { perfmon } for pid=4555 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:54:01.427000 audit[4555]: AVC avc: denied { perfmon } for pid=4555 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:54:01.427000 audit[4555]: AVC avc: denied { perfmon } for pid=4555 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:54:01.427000 audit[4555]: AVC avc: denied { perfmon } for pid=4555 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:54:01.427000 audit[4555]: AVC avc: denied { bpf } for pid=4555 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:54:01.427000 audit[4555]: AVC avc: denied { bpf } for pid=4555 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:54:01.427000 audit: BPF prog-id=197 op=LOAD Mar 17 18:54:01.427000 audit[4555]: SYSCALL arch=c000003e syscall=321 success=yes exit=17 a0=5 a1=c000145770 a2=78 a3=c000284d28 items=0 ppid=4375 pid=4555 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:54:01.427000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3732666331656536396564616131616163353538316538323563626438 Mar 17 18:54:01.427000 audit: BPF prog-id=197 op=UNLOAD Mar 17 18:54:01.427000 audit: BPF prog-id=196 op=UNLOAD Mar 17 18:54:01.427000 audit[4555]: AVC avc: denied { bpf } for pid=4555 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:54:01.427000 audit[4555]: AVC avc: denied { bpf } for pid=4555 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:54:01.427000 audit[4555]: AVC avc: denied { bpf } for pid=4555 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:54:01.427000 audit[4555]: AVC avc: denied { perfmon } for pid=4555 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:54:01.427000 audit[4555]: AVC avc: denied { perfmon } for pid=4555 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:54:01.427000 audit[4555]: AVC avc: denied { perfmon } for pid=4555 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:54:01.427000 audit[4555]: AVC avc: denied { perfmon } for pid=4555 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:54:01.427000 audit[4555]: AVC avc: denied { perfmon } for pid=4555 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:54:01.427000 audit[4555]: AVC avc: denied { bpf } for pid=4555 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:54:01.427000 audit[4555]: AVC avc: denied { bpf } for pid=4555 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:54:01.427000 audit: BPF prog-id=198 op=LOAD Mar 17 18:54:01.427000 audit[4555]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c000145c30 a2=78 a3=c000284db8 items=0 ppid=4375 pid=4555 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:54:01.427000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3732666331656536396564616131616163353538316538323563626438 Mar 17 18:54:01.451681 env[1409]: time="2025-03-17T18:54:01.451625498Z" level=info msg="StartContainer for \"72fc1ee69edaa1aac5581e825cbd8f72df37461aa24d48466aa7adfb9e7f3757\" returns successfully" Mar 17 18:54:02.337386 systemd[1]: run-containerd-runc-k8s.io-72fc1ee69edaa1aac5581e825cbd8f72df37461aa24d48466aa7adfb9e7f3757-runc.70zXPE.mount: Deactivated successfully. Mar 17 18:54:03.709354 env[1409]: time="2025-03-17T18:54:03.709309663Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/kube-controllers:v3.29.1,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Mar 17 18:54:03.715976 env[1409]: time="2025-03-17T18:54:03.715930289Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:6331715a2ae96b18a770a395cac108321d108e445e08b616e5bc9fbd1f9c21da,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Mar 17 18:54:03.720028 env[1409]: time="2025-03-17T18:54:03.719994405Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/kube-controllers:v3.29.1,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Mar 17 18:54:03.723924 env[1409]: time="2025-03-17T18:54:03.723889320Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/kube-controllers@sha256:1072d6a98167a14ca361e9ce757733f9bae36d1f1c6a9621ea10934b6b1e10d9,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Mar 17 18:54:03.724422 env[1409]: time="2025-03-17T18:54:03.724386722Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/kube-controllers:v3.29.1\" returns image reference \"sha256:6331715a2ae96b18a770a395cac108321d108e445e08b616e5bc9fbd1f9c21da\"" Mar 17 18:54:03.726037 env[1409]: time="2025-03-17T18:54:03.725607427Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/node-driver-registrar:v3.29.1\"" Mar 17 18:54:03.746069 env[1409]: time="2025-03-17T18:54:03.746028707Z" level=info msg="CreateContainer within sandbox \"22ea3535509a8003b7c34e6eb24c8636bc8e86c22a9dbf50b30aa438bb611449\" for container &ContainerMetadata{Name:calico-kube-controllers,Attempt:0,}" Mar 17 18:54:03.786911 env[1409]: time="2025-03-17T18:54:03.786872667Z" level=info msg="CreateContainer within sandbox \"22ea3535509a8003b7c34e6eb24c8636bc8e86c22a9dbf50b30aa438bb611449\" for &ContainerMetadata{Name:calico-kube-controllers,Attempt:0,} returns container id \"23d1c930fdae8fdcdaa6d8440934bb876648bde06d1cd24e876f111607576e01\"" Mar 17 18:54:03.789165 env[1409]: time="2025-03-17T18:54:03.787537870Z" level=info msg="StartContainer for \"23d1c930fdae8fdcdaa6d8440934bb876648bde06d1cd24e876f111607576e01\"" Mar 17 18:54:03.810638 systemd[1]: Started cri-containerd-23d1c930fdae8fdcdaa6d8440934bb876648bde06d1cd24e876f111607576e01.scope. Mar 17 18:54:03.831000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:54:03.831000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:54:03.831000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:54:03.831000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:54:03.831000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:54:03.831000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:54:03.831000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:54:03.831000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:54:03.831000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:54:03.831000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:54:03.831000 audit: BPF prog-id=199 op=LOAD Mar 17 18:54:03.832000 audit[4599]: AVC avc: denied { bpf } for pid=4599 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:54:03.832000 audit[4599]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000147c48 a2=10 a3=1c items=0 ppid=4420 pid=4599 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:54:03.832000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3233643163393330666461653866646364616136643834343039333462 Mar 17 18:54:03.832000 audit[4599]: AVC avc: denied { perfmon } for pid=4599 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:54:03.832000 audit[4599]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001476b0 a2=3c a3=8 items=0 ppid=4420 pid=4599 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:54:03.832000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3233643163393330666461653866646364616136643834343039333462 Mar 17 18:54:03.832000 audit[4599]: AVC avc: denied { bpf } for pid=4599 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:54:03.832000 audit[4599]: AVC avc: denied { bpf } for pid=4599 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:54:03.832000 audit[4599]: AVC avc: denied { bpf } for pid=4599 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:54:03.832000 audit[4599]: AVC avc: denied { perfmon } for pid=4599 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:54:03.832000 audit[4599]: AVC avc: denied { perfmon } for pid=4599 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:54:03.832000 audit[4599]: AVC avc: denied { perfmon } for pid=4599 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:54:03.832000 audit[4599]: AVC avc: denied { perfmon } for pid=4599 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:54:03.832000 audit[4599]: AVC avc: denied { perfmon } for pid=4599 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:54:03.832000 audit[4599]: AVC avc: denied { bpf } for pid=4599 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:54:03.832000 audit[4599]: AVC avc: denied { bpf } for pid=4599 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:54:03.832000 audit: BPF prog-id=200 op=LOAD Mar 17 18:54:03.832000 audit[4599]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001479d8 a2=78 a3=c0001bd700 items=0 ppid=4420 pid=4599 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:54:03.832000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3233643163393330666461653866646364616136643834343039333462 Mar 17 18:54:03.832000 audit[4599]: AVC avc: denied { bpf } for pid=4599 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:54:03.832000 audit[4599]: AVC avc: denied { bpf } for pid=4599 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:54:03.832000 audit[4599]: AVC avc: denied { perfmon } for pid=4599 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:54:03.832000 audit[4599]: AVC avc: denied { perfmon } for pid=4599 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:54:03.832000 audit[4599]: AVC avc: denied { perfmon } for pid=4599 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:54:03.832000 audit[4599]: AVC avc: denied { perfmon } for pid=4599 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:54:03.832000 audit[4599]: AVC avc: denied { perfmon } for pid=4599 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:54:03.832000 audit[4599]: AVC avc: denied { bpf } for pid=4599 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:54:03.832000 audit[4599]: AVC avc: denied { bpf } for pid=4599 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:54:03.832000 audit: BPF prog-id=201 op=LOAD Mar 17 18:54:03.832000 audit[4599]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000147770 a2=78 a3=c0001bd748 items=0 ppid=4420 pid=4599 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:54:03.832000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3233643163393330666461653866646364616136643834343039333462 Mar 17 18:54:03.832000 audit: BPF prog-id=201 op=UNLOAD Mar 17 18:54:03.832000 audit: BPF prog-id=200 op=UNLOAD Mar 17 18:54:03.832000 audit[4599]: AVC avc: denied { bpf } for pid=4599 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:54:03.832000 audit[4599]: AVC avc: denied { bpf } for pid=4599 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:54:03.832000 audit[4599]: AVC avc: denied { bpf } for pid=4599 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:54:03.832000 audit[4599]: AVC avc: denied { perfmon } for pid=4599 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:54:03.832000 audit[4599]: AVC avc: denied { perfmon } for pid=4599 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:54:03.832000 audit[4599]: AVC avc: denied { perfmon } for pid=4599 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:54:03.832000 audit[4599]: AVC avc: denied { perfmon } for pid=4599 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:54:03.832000 audit[4599]: AVC avc: denied { perfmon } for pid=4599 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:54:03.832000 audit[4599]: AVC avc: denied { bpf } for pid=4599 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:54:03.832000 audit[4599]: AVC avc: denied { bpf } for pid=4599 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:54:03.832000 audit: BPF prog-id=202 op=LOAD Mar 17 18:54:03.832000 audit[4599]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000147c30 a2=78 a3=c0001bdb58 items=0 ppid=4420 pid=4599 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:54:03.832000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3233643163393330666461653866646364616136643834343039333462 Mar 17 18:54:03.863516 env[1409]: time="2025-03-17T18:54:03.863323767Z" level=info msg="StartContainer for \"23d1c930fdae8fdcdaa6d8440934bb876648bde06d1cd24e876f111607576e01\" returns successfully" Mar 17 18:54:04.156591 kubelet[2450]: I0317 18:54:04.156438 2450 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="calico-apiserver/calico-apiserver-5858799f47-ln8wx" podStartSLOduration=34.041726676 podStartE2EDuration="37.15641671s" podCreationTimestamp="2025-03-17 18:53:27 +0000 UTC" firstStartedPulling="2025-03-17 18:53:56.588758237 +0000 UTC m=+42.746575303" lastFinishedPulling="2025-03-17 18:53:59.703448371 +0000 UTC m=+45.861265337" observedRunningTime="2025-03-17 18:54:00.164217968 +0000 UTC m=+46.322035034" watchObservedRunningTime="2025-03-17 18:54:04.15641671 +0000 UTC m=+50.314233776" Mar 17 18:54:04.213648 kubelet[2450]: I0317 18:54:04.213564 2450 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="calico-system/calico-kube-controllers-79dcd7cc77-7gsvv" podStartSLOduration=31.123716621 podStartE2EDuration="37.213541531s" podCreationTimestamp="2025-03-17 18:53:27 +0000 UTC" firstStartedPulling="2025-03-17 18:53:57.635634616 +0000 UTC m=+43.793451582" lastFinishedPulling="2025-03-17 18:54:03.725459426 +0000 UTC m=+49.883276492" observedRunningTime="2025-03-17 18:54:04.157125712 +0000 UTC m=+50.314942778" watchObservedRunningTime="2025-03-17 18:54:04.213541531 +0000 UTC m=+50.371358597" Mar 17 18:54:05.296458 env[1409]: time="2025-03-17T18:54:05.296403412Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/node-driver-registrar:v3.29.1,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Mar 17 18:54:05.302925 env[1409]: time="2025-03-17T18:54:05.302870237Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:8b7d18f262d5cf6a6343578ad0db68a140c4c9989d9e02c58c27cb5d2c70320f,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Mar 17 18:54:05.307318 env[1409]: time="2025-03-17T18:54:05.307289054Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/node-driver-registrar:v3.29.1,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Mar 17 18:54:05.311903 env[1409]: time="2025-03-17T18:54:05.311870071Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/node-driver-registrar@sha256:a338da9488cbaa83c78457c3d7354d84149969c0480e88dd768e036632ff5b76,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Mar 17 18:54:05.312445 env[1409]: time="2025-03-17T18:54:05.312415473Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/node-driver-registrar:v3.29.1\" returns image reference \"sha256:8b7d18f262d5cf6a6343578ad0db68a140c4c9989d9e02c58c27cb5d2c70320f\"" Mar 17 18:54:05.315720 env[1409]: time="2025-03-17T18:54:05.315326084Z" level=info msg="CreateContainer within sandbox \"c19e4478f288b1a2e8039ca4507b7570c5a30429f116d812b443686c71562694\" for container &ContainerMetadata{Name:csi-node-driver-registrar,Attempt:0,}" Mar 17 18:54:05.358222 env[1409]: time="2025-03-17T18:54:05.358185848Z" level=info msg="CreateContainer within sandbox \"c19e4478f288b1a2e8039ca4507b7570c5a30429f116d812b443686c71562694\" for &ContainerMetadata{Name:csi-node-driver-registrar,Attempt:0,} returns container id \"cd48ceae3268c70f4deead2d61272714c34a3cca02d199876261151884afc7ea\"" Mar 17 18:54:05.360311 env[1409]: time="2025-03-17T18:54:05.358839151Z" level=info msg="StartContainer for \"cd48ceae3268c70f4deead2d61272714c34a3cca02d199876261151884afc7ea\"" Mar 17 18:54:05.388793 systemd[1]: run-containerd-runc-k8s.io-cd48ceae3268c70f4deead2d61272714c34a3cca02d199876261151884afc7ea-runc.B7hag2.mount: Deactivated successfully. Mar 17 18:54:05.393628 systemd[1]: Started cri-containerd-cd48ceae3268c70f4deead2d61272714c34a3cca02d199876261151884afc7ea.scope. Mar 17 18:54:05.407000 audit[4654]: AVC avc: denied { perfmon } for pid=4654 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:54:05.412410 kernel: kauditd_printk_skb: 222 callbacks suppressed Mar 17 18:54:05.412502 kernel: audit: type=1400 audit(1742237645.407:1340): avc: denied { perfmon } for pid=4654 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:54:05.447878 kernel: audit: type=1300 audit(1742237645.407:1340): arch=c000003e syscall=321 success=yes exit=15 a0=0 a1=c0001456b0 a2=3c a3=7f41f6b02cb8 items=0 ppid=4375 pid=4654 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:54:05.407000 audit[4654]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=0 a1=c0001456b0 a2=3c a3=7f41f6b02cb8 items=0 ppid=4375 pid=4654 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:54:05.407000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6364343863656165333236386337306634646565616432643631323732 Mar 17 18:54:05.465883 kernel: audit: type=1327 audit(1742237645.407:1340): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6364343863656165333236386337306634646565616432643631323732 Mar 17 18:54:05.408000 audit[4654]: AVC avc: denied { bpf } for pid=4654 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:54:05.484299 kernel: audit: type=1400 audit(1742237645.408:1341): avc: denied { bpf } for pid=4654 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:54:05.484373 kernel: audit: type=1400 audit(1742237645.408:1341): avc: denied { bpf } for pid=4654 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:54:05.408000 audit[4654]: AVC avc: denied { bpf } for pid=4654 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:54:05.408000 audit[4654]: AVC avc: denied { bpf } for pid=4654 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:54:05.508060 kernel: audit: type=1400 audit(1742237645.408:1341): avc: denied { bpf } for pid=4654 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:54:05.408000 audit[4654]: AVC avc: denied { perfmon } for pid=4654 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:54:05.521165 kernel: audit: type=1400 audit(1742237645.408:1341): avc: denied { perfmon } for pid=4654 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:54:05.408000 audit[4654]: AVC avc: denied { perfmon } for pid=4654 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:54:05.535644 env[1409]: time="2025-03-17T18:54:05.535592327Z" level=info msg="StartContainer for \"cd48ceae3268c70f4deead2d61272714c34a3cca02d199876261151884afc7ea\" returns successfully" Mar 17 18:54:05.536289 kernel: audit: type=1400 audit(1742237645.408:1341): avc: denied { perfmon } for pid=4654 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:54:05.408000 audit[4654]: AVC avc: denied { perfmon } for pid=4654 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:54:05.408000 audit[4654]: AVC avc: denied { perfmon } for pid=4654 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:54:05.562802 kernel: audit: type=1400 audit(1742237645.408:1341): avc: denied { perfmon } for pid=4654 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:54:05.562888 kernel: audit: type=1400 audit(1742237645.408:1341): avc: denied { perfmon } for pid=4654 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:54:05.408000 audit[4654]: AVC avc: denied { perfmon } for pid=4654 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:54:05.408000 audit[4654]: AVC avc: denied { bpf } for pid=4654 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:54:05.408000 audit[4654]: AVC avc: denied { bpf } for pid=4654 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:54:05.408000 audit: BPF prog-id=203 op=LOAD Mar 17 18:54:05.408000 audit[4654]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c0001459d8 a2=78 a3=c0001b5478 items=0 ppid=4375 pid=4654 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:54:05.408000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6364343863656165333236386337306634646565616432643631323732 Mar 17 18:54:05.426000 audit[4654]: AVC avc: denied { bpf } for pid=4654 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:54:05.426000 audit[4654]: AVC avc: denied { bpf } for pid=4654 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:54:05.426000 audit[4654]: AVC avc: denied { perfmon } for pid=4654 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:54:05.426000 audit[4654]: AVC avc: denied { perfmon } for pid=4654 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:54:05.426000 audit[4654]: AVC avc: denied { perfmon } for pid=4654 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:54:05.426000 audit[4654]: AVC avc: denied { perfmon } for pid=4654 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:54:05.426000 audit[4654]: AVC avc: denied { perfmon } for pid=4654 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:54:05.426000 audit[4654]: AVC avc: denied { bpf } for pid=4654 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:54:05.426000 audit[4654]: AVC avc: denied { bpf } for pid=4654 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:54:05.426000 audit: BPF prog-id=204 op=LOAD Mar 17 18:54:05.426000 audit[4654]: SYSCALL arch=c000003e syscall=321 success=yes exit=17 a0=5 a1=c000145770 a2=78 a3=c0001b54c8 items=0 ppid=4375 pid=4654 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:54:05.426000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6364343863656165333236386337306634646565616432643631323732 Mar 17 18:54:05.426000 audit: BPF prog-id=204 op=UNLOAD Mar 17 18:54:05.426000 audit: BPF prog-id=203 op=UNLOAD Mar 17 18:54:05.426000 audit[4654]: AVC avc: denied { bpf } for pid=4654 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:54:05.426000 audit[4654]: AVC avc: denied { bpf } for pid=4654 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:54:05.426000 audit[4654]: AVC avc: denied { bpf } for pid=4654 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:54:05.426000 audit[4654]: AVC avc: denied { perfmon } for pid=4654 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:54:05.426000 audit[4654]: AVC avc: denied { perfmon } for pid=4654 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:54:05.426000 audit[4654]: AVC avc: denied { perfmon } for pid=4654 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:54:05.426000 audit[4654]: AVC avc: denied { perfmon } for pid=4654 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:54:05.426000 audit[4654]: AVC avc: denied { perfmon } for pid=4654 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:54:05.426000 audit[4654]: AVC avc: denied { bpf } for pid=4654 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:54:05.426000 audit[4654]: AVC avc: denied { bpf } for pid=4654 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:54:05.426000 audit: BPF prog-id=205 op=LOAD Mar 17 18:54:05.426000 audit[4654]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c000145c30 a2=78 a3=c0001b5558 items=0 ppid=4375 pid=4654 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:54:05.426000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6364343863656165333236386337306634646565616432643631323732 Mar 17 18:54:06.053970 kubelet[2450]: I0317 18:54:06.053936 2450 csi_plugin.go:100] kubernetes.io/csi: Trying to validate a new CSI Driver with name: csi.tigera.io endpoint: /var/lib/kubelet/plugins/csi.tigera.io/csi.sock versions: 1.0.0 Mar 17 18:54:06.054535 kubelet[2450]: I0317 18:54:06.054024 2450 csi_plugin.go:113] kubernetes.io/csi: Register new plugin with name: csi.tigera.io at endpoint: /var/lib/kubelet/plugins/csi.tigera.io/csi.sock Mar 17 18:54:10.217162 kubelet[2450]: I0317 18:54:10.217118 2450 prober_manager.go:312] "Failed to trigger a manual run" probe="Readiness" Mar 17 18:54:10.239727 kubelet[2450]: I0317 18:54:10.239661 2450 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="calico-system/csi-node-driver-qb29d" podStartSLOduration=35.458344826 podStartE2EDuration="43.239642426s" podCreationTimestamp="2025-03-17 18:53:27 +0000 UTC" firstStartedPulling="2025-03-17 18:53:57.532252477 +0000 UTC m=+43.690069443" lastFinishedPulling="2025-03-17 18:54:05.313550077 +0000 UTC m=+51.471367043" observedRunningTime="2025-03-17 18:54:06.156664296 +0000 UTC m=+52.314481262" watchObservedRunningTime="2025-03-17 18:54:10.239642426 +0000 UTC m=+56.397459492" Mar 17 18:54:10.268000 audit[4690]: NETFILTER_CFG table=filter:122 family=2 entries=9 op=nft_register_rule pid=4690 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Mar 17 18:54:10.268000 audit[4690]: SYSCALL arch=c000003e syscall=46 success=yes exit=3016 a0=3 a1=7ffcd0a25490 a2=0 a3=7ffcd0a2547c items=0 ppid=2619 pid=4690 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:54:10.268000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Mar 17 18:54:10.272000 audit[4690]: NETFILTER_CFG table=nat:123 family=2 entries=27 op=nft_register_chain pid=4690 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Mar 17 18:54:10.272000 audit[4690]: SYSCALL arch=c000003e syscall=46 success=yes exit=9348 a0=3 a1=7ffcd0a25490 a2=0 a3=7ffcd0a2547c items=0 ppid=2619 pid=4690 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:54:10.272000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Mar 17 18:54:10.633000 audit[2323]: AVC avc: denied { watch } for pid=2323 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=7361 scontext=system_u:system_r:svirt_lxc_net_t:s0:c454,c669 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Mar 17 18:54:10.638787 kernel: kauditd_printk_skb: 39 callbacks suppressed Mar 17 18:54:10.638886 kernel: audit: type=1400 audit(1742237650.633:1348): avc: denied { watch } for pid=2323 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=7361 scontext=system_u:system_r:svirt_lxc_net_t:s0:c454,c669 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Mar 17 18:54:10.633000 audit[2323]: AVC avc: denied { watch } for pid=2323 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=7355 scontext=system_u:system_r:svirt_lxc_net_t:s0:c454,c669 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Mar 17 18:54:10.672627 kernel: audit: type=1400 audit(1742237650.633:1349): avc: denied { watch } for pid=2323 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=7355 scontext=system_u:system_r:svirt_lxc_net_t:s0:c454,c669 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Mar 17 18:54:10.672744 kernel: audit: type=1300 audit(1742237650.633:1349): arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c001f969c0 a2=fc6 a3=0 items=0 ppid=2152 pid=2323 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c454,c669 key=(null) Mar 17 18:54:10.633000 audit[2323]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c001f969c0 a2=fc6 a3=0 items=0 ppid=2152 pid=2323 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c454,c669 key=(null) Mar 17 18:54:10.695353 kernel: audit: type=1327 audit(1742237650.633:1349): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Mar 17 18:54:10.633000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Mar 17 18:54:10.633000 audit[2323]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=9 a1=c0023d7e00 a2=fc6 a3=0 items=0 ppid=2152 pid=2323 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c454,c669 key=(null) Mar 17 18:54:10.713436 kernel: audit: type=1300 audit(1742237650.633:1348): arch=c000003e syscall=254 success=no exit=-13 a0=9 a1=c0023d7e00 a2=fc6 a3=0 items=0 ppid=2152 pid=2323 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c454,c669 key=(null) Mar 17 18:54:10.633000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Mar 17 18:54:10.753127 kernel: audit: type=1327 audit(1742237650.633:1348): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Mar 17 18:54:11.015000 audit[2272]: AVC avc: denied { watch } for pid=2272 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=7355 scontext=system_u:system_r:svirt_lxc_net_t:s0:c306,c585 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Mar 17 18:54:11.015000 audit[2272]: AVC avc: denied { watch } for pid=2272 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=7361 scontext=system_u:system_r:svirt_lxc_net_t:s0:c306,c585 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Mar 17 18:54:11.056163 kernel: audit: type=1400 audit(1742237651.015:1351): avc: denied { watch } for pid=2272 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=7355 scontext=system_u:system_r:svirt_lxc_net_t:s0:c306,c585 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Mar 17 18:54:11.057239 kernel: audit: type=1400 audit(1742237651.015:1350): avc: denied { watch } for pid=2272 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=7361 scontext=system_u:system_r:svirt_lxc_net_t:s0:c306,c585 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Mar 17 18:54:11.058110 kernel: audit: type=1300 audit(1742237651.015:1350): arch=c000003e syscall=254 success=no exit=-13 a0=70 a1=c00a1f2f30 a2=fc6 a3=0 items=0 ppid=2131 pid=2272 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c306,c585 key=(null) Mar 17 18:54:11.015000 audit[2272]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=70 a1=c00a1f2f30 a2=fc6 a3=0 items=0 ppid=2131 pid=2272 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c306,c585 key=(null) Mar 17 18:54:11.015000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E382E3335002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265 Mar 17 18:54:11.102568 kernel: audit: type=1327 audit(1742237651.015:1350): proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E382E3335002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265 Mar 17 18:54:11.018000 audit[2272]: AVC avc: denied { watch } for pid=2272 comm="kube-apiserver" path="/etc/kubernetes/pki/apiserver.crt" dev="sda9" ino=7357 scontext=system_u:system_r:svirt_lxc_net_t:s0:c306,c585 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Mar 17 18:54:11.018000 audit[2272]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=70 a1=c00a1f2fc0 a2=fc6 a3=0 items=0 ppid=2131 pid=2272 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c306,c585 key=(null) Mar 17 18:54:11.018000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E382E3335002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265 Mar 17 18:54:11.015000 audit[2272]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=6f a1=c0096b9200 a2=fc6 a3=0 items=0 ppid=2131 pid=2272 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c306,c585 key=(null) Mar 17 18:54:11.015000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E382E3335002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265 Mar 17 18:54:11.021000 audit[2272]: AVC avc: denied { watch } for pid=2272 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-client.crt" dev="sda9" ino=7363 scontext=system_u:system_r:svirt_lxc_net_t:s0:c306,c585 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Mar 17 18:54:11.021000 audit[2272]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=6f a1=c00a21a060 a2=fc6 a3=0 items=0 ppid=2131 pid=2272 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c306,c585 key=(null) Mar 17 18:54:11.021000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E382E3335002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265 Mar 17 18:54:11.027000 audit[2272]: AVC avc: denied { watch } for pid=2272 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=7355 scontext=system_u:system_r:svirt_lxc_net_t:s0:c306,c585 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Mar 17 18:54:11.027000 audit[2272]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=6f a1=c0096517c0 a2=fc6 a3=0 items=0 ppid=2131 pid=2272 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c306,c585 key=(null) Mar 17 18:54:11.027000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E382E3335002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265 Mar 17 18:54:11.027000 audit[2272]: AVC avc: denied { watch } for pid=2272 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=7361 scontext=system_u:system_r:svirt_lxc_net_t:s0:c306,c585 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Mar 17 18:54:11.027000 audit[2272]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=6f a1=c00a1f31d0 a2=fc6 a3=0 items=0 ppid=2131 pid=2272 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c306,c585 key=(null) Mar 17 18:54:11.027000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E382E3335002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265 Mar 17 18:54:13.286572 kubelet[2450]: I0317 18:54:13.286517 2450 prober_manager.go:312] "Failed to trigger a manual run" probe="Readiness" Mar 17 18:54:13.328000 audit[4698]: NETFILTER_CFG table=filter:124 family=2 entries=8 op=nft_register_rule pid=4698 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Mar 17 18:54:13.328000 audit[4698]: SYSCALL arch=c000003e syscall=46 success=yes exit=3016 a0=3 a1=7ffefe30bfb0 a2=0 a3=7ffefe30bf9c items=0 ppid=2619 pid=4698 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:54:13.328000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Mar 17 18:54:13.335000 audit[4698]: NETFILTER_CFG table=nat:125 family=2 entries=34 op=nft_register_chain pid=4698 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Mar 17 18:54:13.335000 audit[4698]: SYSCALL arch=c000003e syscall=46 success=yes exit=11236 a0=3 a1=7ffefe30bfb0 a2=0 a3=7ffefe30bf9c items=0 ppid=2619 pid=4698 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:54:13.335000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Mar 17 18:54:13.934641 env[1409]: time="2025-03-17T18:54:13.934599337Z" level=info msg="StopPodSandbox for \"ca1f5fe91026fd47441d347a38e8a9d7a74a6cd4b145b95491a11731c6c629d7\"" Mar 17 18:54:14.014811 env[1409]: 2025-03-17 18:54:13.980 [WARNING][4711] cni-plugin/k8s.go 572: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="ca1f5fe91026fd47441d347a38e8a9d7a74a6cd4b145b95491a11731c6c629d7" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ci--3510.3.7--a--9ed44aff31-k8s-calico--kube--controllers--79dcd7cc77--7gsvv-eth0", GenerateName:"calico-kube-controllers-79dcd7cc77-", Namespace:"calico-system", SelfLink:"", UID:"5962bc12-5113-4699-8f4b-318bf87ebc57", ResourceVersion:"866", Generation:0, CreationTimestamp:time.Date(2025, time.March, 17, 18, 53, 27, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"calico-kube-controllers", "k8s-app":"calico-kube-controllers", "pod-template-hash":"79dcd7cc77", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-kube-controllers"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ci-3510.3.7-a-9ed44aff31", ContainerID:"22ea3535509a8003b7c34e6eb24c8636bc8e86c22a9dbf50b30aa438bb611449", Pod:"calico-kube-controllers-79dcd7cc77-7gsvv", Endpoint:"eth0", ServiceAccountName:"calico-kube-controllers", IPNetworks:[]string{"192.168.88.198/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.calico-kube-controllers"}, InterfaceName:"cali75d2b046d1c", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil)}} Mar 17 18:54:14.014811 env[1409]: 2025-03-17 18:54:13.980 [INFO][4711] cni-plugin/k8s.go 608: Cleaning up netns ContainerID="ca1f5fe91026fd47441d347a38e8a9d7a74a6cd4b145b95491a11731c6c629d7" Mar 17 18:54:14.014811 env[1409]: 2025-03-17 18:54:13.980 [INFO][4711] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="ca1f5fe91026fd47441d347a38e8a9d7a74a6cd4b145b95491a11731c6c629d7" iface="eth0" netns="" Mar 17 18:54:14.014811 env[1409]: 2025-03-17 18:54:13.980 [INFO][4711] cni-plugin/k8s.go 615: Releasing IP address(es) ContainerID="ca1f5fe91026fd47441d347a38e8a9d7a74a6cd4b145b95491a11731c6c629d7" Mar 17 18:54:14.014811 env[1409]: 2025-03-17 18:54:13.980 [INFO][4711] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="ca1f5fe91026fd47441d347a38e8a9d7a74a6cd4b145b95491a11731c6c629d7" Mar 17 18:54:14.014811 env[1409]: 2025-03-17 18:54:14.004 [INFO][4718] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="ca1f5fe91026fd47441d347a38e8a9d7a74a6cd4b145b95491a11731c6c629d7" HandleID="k8s-pod-network.ca1f5fe91026fd47441d347a38e8a9d7a74a6cd4b145b95491a11731c6c629d7" Workload="ci--3510.3.7--a--9ed44aff31-k8s-calico--kube--controllers--79dcd7cc77--7gsvv-eth0" Mar 17 18:54:14.014811 env[1409]: 2025-03-17 18:54:14.004 [INFO][4718] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Mar 17 18:54:14.014811 env[1409]: 2025-03-17 18:54:14.005 [INFO][4718] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Mar 17 18:54:14.014811 env[1409]: 2025-03-17 18:54:14.011 [WARNING][4718] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="ca1f5fe91026fd47441d347a38e8a9d7a74a6cd4b145b95491a11731c6c629d7" HandleID="k8s-pod-network.ca1f5fe91026fd47441d347a38e8a9d7a74a6cd4b145b95491a11731c6c629d7" Workload="ci--3510.3.7--a--9ed44aff31-k8s-calico--kube--controllers--79dcd7cc77--7gsvv-eth0" Mar 17 18:54:14.014811 env[1409]: 2025-03-17 18:54:14.011 [INFO][4718] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="ca1f5fe91026fd47441d347a38e8a9d7a74a6cd4b145b95491a11731c6c629d7" HandleID="k8s-pod-network.ca1f5fe91026fd47441d347a38e8a9d7a74a6cd4b145b95491a11731c6c629d7" Workload="ci--3510.3.7--a--9ed44aff31-k8s-calico--kube--controllers--79dcd7cc77--7gsvv-eth0" Mar 17 18:54:14.014811 env[1409]: 2025-03-17 18:54:14.012 [INFO][4718] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Mar 17 18:54:14.014811 env[1409]: 2025-03-17 18:54:14.013 [INFO][4711] cni-plugin/k8s.go 621: Teardown processing complete. ContainerID="ca1f5fe91026fd47441d347a38e8a9d7a74a6cd4b145b95491a11731c6c629d7" Mar 17 18:54:14.015738 env[1409]: time="2025-03-17T18:54:14.014863217Z" level=info msg="TearDown network for sandbox \"ca1f5fe91026fd47441d347a38e8a9d7a74a6cd4b145b95491a11731c6c629d7\" successfully" Mar 17 18:54:14.015738 env[1409]: time="2025-03-17T18:54:14.014905417Z" level=info msg="StopPodSandbox for \"ca1f5fe91026fd47441d347a38e8a9d7a74a6cd4b145b95491a11731c6c629d7\" returns successfully" Mar 17 18:54:14.015738 env[1409]: time="2025-03-17T18:54:14.015659319Z" level=info msg="RemovePodSandbox for \"ca1f5fe91026fd47441d347a38e8a9d7a74a6cd4b145b95491a11731c6c629d7\"" Mar 17 18:54:14.015949 env[1409]: time="2025-03-17T18:54:14.015723020Z" level=info msg="Forcibly stopping sandbox \"ca1f5fe91026fd47441d347a38e8a9d7a74a6cd4b145b95491a11731c6c629d7\"" Mar 17 18:54:14.094930 env[1409]: 2025-03-17 18:54:14.060 [WARNING][4738] cni-plugin/k8s.go 572: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="ca1f5fe91026fd47441d347a38e8a9d7a74a6cd4b145b95491a11731c6c629d7" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ci--3510.3.7--a--9ed44aff31-k8s-calico--kube--controllers--79dcd7cc77--7gsvv-eth0", GenerateName:"calico-kube-controllers-79dcd7cc77-", Namespace:"calico-system", SelfLink:"", UID:"5962bc12-5113-4699-8f4b-318bf87ebc57", ResourceVersion:"866", Generation:0, CreationTimestamp:time.Date(2025, time.March, 17, 18, 53, 27, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"calico-kube-controllers", "k8s-app":"calico-kube-controllers", "pod-template-hash":"79dcd7cc77", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-kube-controllers"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ci-3510.3.7-a-9ed44aff31", ContainerID:"22ea3535509a8003b7c34e6eb24c8636bc8e86c22a9dbf50b30aa438bb611449", Pod:"calico-kube-controllers-79dcd7cc77-7gsvv", Endpoint:"eth0", ServiceAccountName:"calico-kube-controllers", IPNetworks:[]string{"192.168.88.198/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.calico-kube-controllers"}, InterfaceName:"cali75d2b046d1c", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil)}} Mar 17 18:54:14.094930 env[1409]: 2025-03-17 18:54:14.061 [INFO][4738] cni-plugin/k8s.go 608: Cleaning up netns ContainerID="ca1f5fe91026fd47441d347a38e8a9d7a74a6cd4b145b95491a11731c6c629d7" Mar 17 18:54:14.094930 env[1409]: 2025-03-17 18:54:14.061 [INFO][4738] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="ca1f5fe91026fd47441d347a38e8a9d7a74a6cd4b145b95491a11731c6c629d7" iface="eth0" netns="" Mar 17 18:54:14.094930 env[1409]: 2025-03-17 18:54:14.061 [INFO][4738] cni-plugin/k8s.go 615: Releasing IP address(es) ContainerID="ca1f5fe91026fd47441d347a38e8a9d7a74a6cd4b145b95491a11731c6c629d7" Mar 17 18:54:14.094930 env[1409]: 2025-03-17 18:54:14.061 [INFO][4738] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="ca1f5fe91026fd47441d347a38e8a9d7a74a6cd4b145b95491a11731c6c629d7" Mar 17 18:54:14.094930 env[1409]: 2025-03-17 18:54:14.084 [INFO][4744] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="ca1f5fe91026fd47441d347a38e8a9d7a74a6cd4b145b95491a11731c6c629d7" HandleID="k8s-pod-network.ca1f5fe91026fd47441d347a38e8a9d7a74a6cd4b145b95491a11731c6c629d7" Workload="ci--3510.3.7--a--9ed44aff31-k8s-calico--kube--controllers--79dcd7cc77--7gsvv-eth0" Mar 17 18:54:14.094930 env[1409]: 2025-03-17 18:54:14.084 [INFO][4744] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Mar 17 18:54:14.094930 env[1409]: 2025-03-17 18:54:14.084 [INFO][4744] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Mar 17 18:54:14.094930 env[1409]: 2025-03-17 18:54:14.090 [WARNING][4744] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="ca1f5fe91026fd47441d347a38e8a9d7a74a6cd4b145b95491a11731c6c629d7" HandleID="k8s-pod-network.ca1f5fe91026fd47441d347a38e8a9d7a74a6cd4b145b95491a11731c6c629d7" Workload="ci--3510.3.7--a--9ed44aff31-k8s-calico--kube--controllers--79dcd7cc77--7gsvv-eth0" Mar 17 18:54:14.094930 env[1409]: 2025-03-17 18:54:14.090 [INFO][4744] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="ca1f5fe91026fd47441d347a38e8a9d7a74a6cd4b145b95491a11731c6c629d7" HandleID="k8s-pod-network.ca1f5fe91026fd47441d347a38e8a9d7a74a6cd4b145b95491a11731c6c629d7" Workload="ci--3510.3.7--a--9ed44aff31-k8s-calico--kube--controllers--79dcd7cc77--7gsvv-eth0" Mar 17 18:54:14.094930 env[1409]: 2025-03-17 18:54:14.092 [INFO][4744] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Mar 17 18:54:14.094930 env[1409]: 2025-03-17 18:54:14.093 [INFO][4738] cni-plugin/k8s.go 621: Teardown processing complete. ContainerID="ca1f5fe91026fd47441d347a38e8a9d7a74a6cd4b145b95491a11731c6c629d7" Mar 17 18:54:14.095683 env[1409]: time="2025-03-17T18:54:14.094980194Z" level=info msg="TearDown network for sandbox \"ca1f5fe91026fd47441d347a38e8a9d7a74a6cd4b145b95491a11731c6c629d7\" successfully" Mar 17 18:54:14.105957 env[1409]: time="2025-03-17T18:54:14.105911031Z" level=info msg="RemovePodSandbox \"ca1f5fe91026fd47441d347a38e8a9d7a74a6cd4b145b95491a11731c6c629d7\" returns successfully" Mar 17 18:54:14.106527 env[1409]: time="2025-03-17T18:54:14.106497633Z" level=info msg="StopPodSandbox for \"de5145d6114dbc64accc334b6c1a79dd7d3ea3b0416dd9163394f163c56670c0\"" Mar 17 18:54:14.187813 env[1409]: 2025-03-17 18:54:14.144 [WARNING][4762] cni-plugin/k8s.go 572: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="de5145d6114dbc64accc334b6c1a79dd7d3ea3b0416dd9163394f163c56670c0" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ci--3510.3.7--a--9ed44aff31-k8s-calico--apiserver--5858799f47--k8zn6-eth0", GenerateName:"calico-apiserver-5858799f47-", Namespace:"calico-apiserver", SelfLink:"", UID:"7312b29a-7b59-4311-b619-758dbd249078", ResourceVersion:"886", Generation:0, CreationTimestamp:time.Date(2025, time.March, 17, 18, 53, 27, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"apiserver":"true", "app.kubernetes.io/name":"calico-apiserver", "k8s-app":"calico-apiserver", "pod-template-hash":"5858799f47", "projectcalico.org/namespace":"calico-apiserver", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-apiserver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ci-3510.3.7-a-9ed44aff31", ContainerID:"9c6f55438ce577054d49a02fc19619c7f7c44c024da34178533d3aac4328c094", Pod:"calico-apiserver-5858799f47-k8zn6", Endpoint:"eth0", ServiceAccountName:"calico-apiserver", IPNetworks:[]string{"192.168.88.195/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-apiserver", "ksa.calico-apiserver.calico-apiserver"}, InterfaceName:"calibb2707be1e8", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil)}} Mar 17 18:54:14.187813 env[1409]: 2025-03-17 18:54:14.144 [INFO][4762] cni-plugin/k8s.go 608: Cleaning up netns ContainerID="de5145d6114dbc64accc334b6c1a79dd7d3ea3b0416dd9163394f163c56670c0" Mar 17 18:54:14.187813 env[1409]: 2025-03-17 18:54:14.144 [INFO][4762] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="de5145d6114dbc64accc334b6c1a79dd7d3ea3b0416dd9163394f163c56670c0" iface="eth0" netns="" Mar 17 18:54:14.187813 env[1409]: 2025-03-17 18:54:14.144 [INFO][4762] cni-plugin/k8s.go 615: Releasing IP address(es) ContainerID="de5145d6114dbc64accc334b6c1a79dd7d3ea3b0416dd9163394f163c56670c0" Mar 17 18:54:14.187813 env[1409]: 2025-03-17 18:54:14.144 [INFO][4762] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="de5145d6114dbc64accc334b6c1a79dd7d3ea3b0416dd9163394f163c56670c0" Mar 17 18:54:14.187813 env[1409]: 2025-03-17 18:54:14.173 [INFO][4768] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="de5145d6114dbc64accc334b6c1a79dd7d3ea3b0416dd9163394f163c56670c0" HandleID="k8s-pod-network.de5145d6114dbc64accc334b6c1a79dd7d3ea3b0416dd9163394f163c56670c0" Workload="ci--3510.3.7--a--9ed44aff31-k8s-calico--apiserver--5858799f47--k8zn6-eth0" Mar 17 18:54:14.187813 env[1409]: 2025-03-17 18:54:14.173 [INFO][4768] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Mar 17 18:54:14.187813 env[1409]: 2025-03-17 18:54:14.173 [INFO][4768] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Mar 17 18:54:14.187813 env[1409]: 2025-03-17 18:54:14.180 [WARNING][4768] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="de5145d6114dbc64accc334b6c1a79dd7d3ea3b0416dd9163394f163c56670c0" HandleID="k8s-pod-network.de5145d6114dbc64accc334b6c1a79dd7d3ea3b0416dd9163394f163c56670c0" Workload="ci--3510.3.7--a--9ed44aff31-k8s-calico--apiserver--5858799f47--k8zn6-eth0" Mar 17 18:54:14.187813 env[1409]: 2025-03-17 18:54:14.181 [INFO][4768] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="de5145d6114dbc64accc334b6c1a79dd7d3ea3b0416dd9163394f163c56670c0" HandleID="k8s-pod-network.de5145d6114dbc64accc334b6c1a79dd7d3ea3b0416dd9163394f163c56670c0" Workload="ci--3510.3.7--a--9ed44aff31-k8s-calico--apiserver--5858799f47--k8zn6-eth0" Mar 17 18:54:14.187813 env[1409]: 2025-03-17 18:54:14.182 [INFO][4768] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Mar 17 18:54:14.187813 env[1409]: 2025-03-17 18:54:14.185 [INFO][4762] cni-plugin/k8s.go 621: Teardown processing complete. ContainerID="de5145d6114dbc64accc334b6c1a79dd7d3ea3b0416dd9163394f163c56670c0" Mar 17 18:54:14.189068 env[1409]: time="2025-03-17T18:54:14.189030919Z" level=info msg="TearDown network for sandbox \"de5145d6114dbc64accc334b6c1a79dd7d3ea3b0416dd9163394f163c56670c0\" successfully" Mar 17 18:54:14.189195 env[1409]: time="2025-03-17T18:54:14.189173219Z" level=info msg="StopPodSandbox for \"de5145d6114dbc64accc334b6c1a79dd7d3ea3b0416dd9163394f163c56670c0\" returns successfully" Mar 17 18:54:14.194982 env[1409]: time="2025-03-17T18:54:14.194949539Z" level=info msg="RemovePodSandbox for \"de5145d6114dbc64accc334b6c1a79dd7d3ea3b0416dd9163394f163c56670c0\"" Mar 17 18:54:14.195105 env[1409]: time="2025-03-17T18:54:14.194984440Z" level=info msg="Forcibly stopping sandbox \"de5145d6114dbc64accc334b6c1a79dd7d3ea3b0416dd9163394f163c56670c0\"" Mar 17 18:54:14.257976 env[1409]: 2025-03-17 18:54:14.231 [WARNING][4788] cni-plugin/k8s.go 572: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="de5145d6114dbc64accc334b6c1a79dd7d3ea3b0416dd9163394f163c56670c0" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ci--3510.3.7--a--9ed44aff31-k8s-calico--apiserver--5858799f47--k8zn6-eth0", GenerateName:"calico-apiserver-5858799f47-", Namespace:"calico-apiserver", SelfLink:"", UID:"7312b29a-7b59-4311-b619-758dbd249078", ResourceVersion:"886", Generation:0, CreationTimestamp:time.Date(2025, time.March, 17, 18, 53, 27, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"apiserver":"true", "app.kubernetes.io/name":"calico-apiserver", "k8s-app":"calico-apiserver", "pod-template-hash":"5858799f47", "projectcalico.org/namespace":"calico-apiserver", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-apiserver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ci-3510.3.7-a-9ed44aff31", ContainerID:"9c6f55438ce577054d49a02fc19619c7f7c44c024da34178533d3aac4328c094", Pod:"calico-apiserver-5858799f47-k8zn6", Endpoint:"eth0", ServiceAccountName:"calico-apiserver", IPNetworks:[]string{"192.168.88.195/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-apiserver", "ksa.calico-apiserver.calico-apiserver"}, InterfaceName:"calibb2707be1e8", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil)}} Mar 17 18:54:14.257976 env[1409]: 2025-03-17 18:54:14.231 [INFO][4788] cni-plugin/k8s.go 608: Cleaning up netns ContainerID="de5145d6114dbc64accc334b6c1a79dd7d3ea3b0416dd9163394f163c56670c0" Mar 17 18:54:14.257976 env[1409]: 2025-03-17 18:54:14.231 [INFO][4788] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="de5145d6114dbc64accc334b6c1a79dd7d3ea3b0416dd9163394f163c56670c0" iface="eth0" netns="" Mar 17 18:54:14.257976 env[1409]: 2025-03-17 18:54:14.231 [INFO][4788] cni-plugin/k8s.go 615: Releasing IP address(es) ContainerID="de5145d6114dbc64accc334b6c1a79dd7d3ea3b0416dd9163394f163c56670c0" Mar 17 18:54:14.257976 env[1409]: 2025-03-17 18:54:14.231 [INFO][4788] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="de5145d6114dbc64accc334b6c1a79dd7d3ea3b0416dd9163394f163c56670c0" Mar 17 18:54:14.257976 env[1409]: 2025-03-17 18:54:14.248 [INFO][4794] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="de5145d6114dbc64accc334b6c1a79dd7d3ea3b0416dd9163394f163c56670c0" HandleID="k8s-pod-network.de5145d6114dbc64accc334b6c1a79dd7d3ea3b0416dd9163394f163c56670c0" Workload="ci--3510.3.7--a--9ed44aff31-k8s-calico--apiserver--5858799f47--k8zn6-eth0" Mar 17 18:54:14.257976 env[1409]: 2025-03-17 18:54:14.249 [INFO][4794] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Mar 17 18:54:14.257976 env[1409]: 2025-03-17 18:54:14.249 [INFO][4794] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Mar 17 18:54:14.257976 env[1409]: 2025-03-17 18:54:14.254 [WARNING][4794] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="de5145d6114dbc64accc334b6c1a79dd7d3ea3b0416dd9163394f163c56670c0" HandleID="k8s-pod-network.de5145d6114dbc64accc334b6c1a79dd7d3ea3b0416dd9163394f163c56670c0" Workload="ci--3510.3.7--a--9ed44aff31-k8s-calico--apiserver--5858799f47--k8zn6-eth0" Mar 17 18:54:14.257976 env[1409]: 2025-03-17 18:54:14.254 [INFO][4794] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="de5145d6114dbc64accc334b6c1a79dd7d3ea3b0416dd9163394f163c56670c0" HandleID="k8s-pod-network.de5145d6114dbc64accc334b6c1a79dd7d3ea3b0416dd9163394f163c56670c0" Workload="ci--3510.3.7--a--9ed44aff31-k8s-calico--apiserver--5858799f47--k8zn6-eth0" Mar 17 18:54:14.257976 env[1409]: 2025-03-17 18:54:14.255 [INFO][4794] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Mar 17 18:54:14.257976 env[1409]: 2025-03-17 18:54:14.256 [INFO][4788] cni-plugin/k8s.go 621: Teardown processing complete. ContainerID="de5145d6114dbc64accc334b6c1a79dd7d3ea3b0416dd9163394f163c56670c0" Mar 17 18:54:14.258657 env[1409]: time="2025-03-17T18:54:14.258018358Z" level=info msg="TearDown network for sandbox \"de5145d6114dbc64accc334b6c1a79dd7d3ea3b0416dd9163394f163c56670c0\" successfully" Mar 17 18:54:14.265813 env[1409]: time="2025-03-17T18:54:14.265772184Z" level=info msg="RemovePodSandbox \"de5145d6114dbc64accc334b6c1a79dd7d3ea3b0416dd9163394f163c56670c0\" returns successfully" Mar 17 18:54:14.266273 env[1409]: time="2025-03-17T18:54:14.266235786Z" level=info msg="StopPodSandbox for \"304940bfa11edace9460b45a66850dc2d1525742296a41972caed85159dc4e39\"" Mar 17 18:54:14.336554 env[1409]: 2025-03-17 18:54:14.301 [WARNING][4812] cni-plugin/k8s.go 572: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="304940bfa11edace9460b45a66850dc2d1525742296a41972caed85159dc4e39" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ci--3510.3.7--a--9ed44aff31-k8s-calico--apiserver--5858799f47--ln8wx-eth0", GenerateName:"calico-apiserver-5858799f47-", Namespace:"calico-apiserver", SelfLink:"", UID:"640a4f62-1afa-4bd0-b183-7d5406f3f026", ResourceVersion:"902", Generation:0, CreationTimestamp:time.Date(2025, time.March, 17, 18, 53, 27, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"apiserver":"true", "app.kubernetes.io/name":"calico-apiserver", "k8s-app":"calico-apiserver", "pod-template-hash":"5858799f47", "projectcalico.org/namespace":"calico-apiserver", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-apiserver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ci-3510.3.7-a-9ed44aff31", ContainerID:"89eb8d75da9350ccd1f1763d6a2e73cc9101dc9c17ffc917af21a3162c014c9e", Pod:"calico-apiserver-5858799f47-ln8wx", Endpoint:"eth0", ServiceAccountName:"calico-apiserver", IPNetworks:[]string{"192.168.88.196/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-apiserver", "ksa.calico-apiserver.calico-apiserver"}, InterfaceName:"cali51208d89f9a", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil)}} Mar 17 18:54:14.336554 env[1409]: 2025-03-17 18:54:14.301 [INFO][4812] cni-plugin/k8s.go 608: Cleaning up netns ContainerID="304940bfa11edace9460b45a66850dc2d1525742296a41972caed85159dc4e39" Mar 17 18:54:14.336554 env[1409]: 2025-03-17 18:54:14.301 [INFO][4812] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="304940bfa11edace9460b45a66850dc2d1525742296a41972caed85159dc4e39" iface="eth0" netns="" Mar 17 18:54:14.336554 env[1409]: 2025-03-17 18:54:14.301 [INFO][4812] cni-plugin/k8s.go 615: Releasing IP address(es) ContainerID="304940bfa11edace9460b45a66850dc2d1525742296a41972caed85159dc4e39" Mar 17 18:54:14.336554 env[1409]: 2025-03-17 18:54:14.301 [INFO][4812] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="304940bfa11edace9460b45a66850dc2d1525742296a41972caed85159dc4e39" Mar 17 18:54:14.336554 env[1409]: 2025-03-17 18:54:14.328 [INFO][4818] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="304940bfa11edace9460b45a66850dc2d1525742296a41972caed85159dc4e39" HandleID="k8s-pod-network.304940bfa11edace9460b45a66850dc2d1525742296a41972caed85159dc4e39" Workload="ci--3510.3.7--a--9ed44aff31-k8s-calico--apiserver--5858799f47--ln8wx-eth0" Mar 17 18:54:14.336554 env[1409]: 2025-03-17 18:54:14.328 [INFO][4818] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Mar 17 18:54:14.336554 env[1409]: 2025-03-17 18:54:14.328 [INFO][4818] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Mar 17 18:54:14.336554 env[1409]: 2025-03-17 18:54:14.333 [WARNING][4818] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="304940bfa11edace9460b45a66850dc2d1525742296a41972caed85159dc4e39" HandleID="k8s-pod-network.304940bfa11edace9460b45a66850dc2d1525742296a41972caed85159dc4e39" Workload="ci--3510.3.7--a--9ed44aff31-k8s-calico--apiserver--5858799f47--ln8wx-eth0" Mar 17 18:54:14.336554 env[1409]: 2025-03-17 18:54:14.333 [INFO][4818] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="304940bfa11edace9460b45a66850dc2d1525742296a41972caed85159dc4e39" HandleID="k8s-pod-network.304940bfa11edace9460b45a66850dc2d1525742296a41972caed85159dc4e39" Workload="ci--3510.3.7--a--9ed44aff31-k8s-calico--apiserver--5858799f47--ln8wx-eth0" Mar 17 18:54:14.336554 env[1409]: 2025-03-17 18:54:14.334 [INFO][4818] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Mar 17 18:54:14.336554 env[1409]: 2025-03-17 18:54:14.335 [INFO][4812] cni-plugin/k8s.go 621: Teardown processing complete. ContainerID="304940bfa11edace9460b45a66850dc2d1525742296a41972caed85159dc4e39" Mar 17 18:54:14.337170 env[1409]: time="2025-03-17T18:54:14.336594429Z" level=info msg="TearDown network for sandbox \"304940bfa11edace9460b45a66850dc2d1525742296a41972caed85159dc4e39\" successfully" Mar 17 18:54:14.337170 env[1409]: time="2025-03-17T18:54:14.336631429Z" level=info msg="StopPodSandbox for \"304940bfa11edace9460b45a66850dc2d1525742296a41972caed85159dc4e39\" returns successfully" Mar 17 18:54:14.337443 env[1409]: time="2025-03-17T18:54:14.337408032Z" level=info msg="RemovePodSandbox for \"304940bfa11edace9460b45a66850dc2d1525742296a41972caed85159dc4e39\"" Mar 17 18:54:14.337565 env[1409]: time="2025-03-17T18:54:14.337447132Z" level=info msg="Forcibly stopping sandbox \"304940bfa11edace9460b45a66850dc2d1525742296a41972caed85159dc4e39\"" Mar 17 18:54:14.398536 env[1409]: 2025-03-17 18:54:14.369 [WARNING][4836] cni-plugin/k8s.go 572: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="304940bfa11edace9460b45a66850dc2d1525742296a41972caed85159dc4e39" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ci--3510.3.7--a--9ed44aff31-k8s-calico--apiserver--5858799f47--ln8wx-eth0", GenerateName:"calico-apiserver-5858799f47-", Namespace:"calico-apiserver", SelfLink:"", UID:"640a4f62-1afa-4bd0-b183-7d5406f3f026", ResourceVersion:"902", Generation:0, CreationTimestamp:time.Date(2025, time.March, 17, 18, 53, 27, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"apiserver":"true", "app.kubernetes.io/name":"calico-apiserver", "k8s-app":"calico-apiserver", "pod-template-hash":"5858799f47", "projectcalico.org/namespace":"calico-apiserver", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-apiserver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ci-3510.3.7-a-9ed44aff31", ContainerID:"89eb8d75da9350ccd1f1763d6a2e73cc9101dc9c17ffc917af21a3162c014c9e", Pod:"calico-apiserver-5858799f47-ln8wx", Endpoint:"eth0", ServiceAccountName:"calico-apiserver", IPNetworks:[]string{"192.168.88.196/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-apiserver", "ksa.calico-apiserver.calico-apiserver"}, InterfaceName:"cali51208d89f9a", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil)}} Mar 17 18:54:14.398536 env[1409]: 2025-03-17 18:54:14.370 [INFO][4836] cni-plugin/k8s.go 608: Cleaning up netns ContainerID="304940bfa11edace9460b45a66850dc2d1525742296a41972caed85159dc4e39" Mar 17 18:54:14.398536 env[1409]: 2025-03-17 18:54:14.370 [INFO][4836] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="304940bfa11edace9460b45a66850dc2d1525742296a41972caed85159dc4e39" iface="eth0" netns="" Mar 17 18:54:14.398536 env[1409]: 2025-03-17 18:54:14.370 [INFO][4836] cni-plugin/k8s.go 615: Releasing IP address(es) ContainerID="304940bfa11edace9460b45a66850dc2d1525742296a41972caed85159dc4e39" Mar 17 18:54:14.398536 env[1409]: 2025-03-17 18:54:14.370 [INFO][4836] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="304940bfa11edace9460b45a66850dc2d1525742296a41972caed85159dc4e39" Mar 17 18:54:14.398536 env[1409]: 2025-03-17 18:54:14.390 [INFO][4843] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="304940bfa11edace9460b45a66850dc2d1525742296a41972caed85159dc4e39" HandleID="k8s-pod-network.304940bfa11edace9460b45a66850dc2d1525742296a41972caed85159dc4e39" Workload="ci--3510.3.7--a--9ed44aff31-k8s-calico--apiserver--5858799f47--ln8wx-eth0" Mar 17 18:54:14.398536 env[1409]: 2025-03-17 18:54:14.390 [INFO][4843] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Mar 17 18:54:14.398536 env[1409]: 2025-03-17 18:54:14.390 [INFO][4843] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Mar 17 18:54:14.398536 env[1409]: 2025-03-17 18:54:14.395 [WARNING][4843] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="304940bfa11edace9460b45a66850dc2d1525742296a41972caed85159dc4e39" HandleID="k8s-pod-network.304940bfa11edace9460b45a66850dc2d1525742296a41972caed85159dc4e39" Workload="ci--3510.3.7--a--9ed44aff31-k8s-calico--apiserver--5858799f47--ln8wx-eth0" Mar 17 18:54:14.398536 env[1409]: 2025-03-17 18:54:14.395 [INFO][4843] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="304940bfa11edace9460b45a66850dc2d1525742296a41972caed85159dc4e39" HandleID="k8s-pod-network.304940bfa11edace9460b45a66850dc2d1525742296a41972caed85159dc4e39" Workload="ci--3510.3.7--a--9ed44aff31-k8s-calico--apiserver--5858799f47--ln8wx-eth0" Mar 17 18:54:14.398536 env[1409]: 2025-03-17 18:54:14.396 [INFO][4843] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Mar 17 18:54:14.398536 env[1409]: 2025-03-17 18:54:14.397 [INFO][4836] cni-plugin/k8s.go 621: Teardown processing complete. ContainerID="304940bfa11edace9460b45a66850dc2d1525742296a41972caed85159dc4e39" Mar 17 18:54:14.399138 env[1409]: time="2025-03-17T18:54:14.399089445Z" level=info msg="TearDown network for sandbox \"304940bfa11edace9460b45a66850dc2d1525742296a41972caed85159dc4e39\" successfully" Mar 17 18:54:14.404236 env[1409]: time="2025-03-17T18:54:14.404195563Z" level=info msg="RemovePodSandbox \"304940bfa11edace9460b45a66850dc2d1525742296a41972caed85159dc4e39\" returns successfully" Mar 17 18:54:14.404720 env[1409]: time="2025-03-17T18:54:14.404689065Z" level=info msg="StopPodSandbox for \"1123a5210483c4fd0b9bd699ed48ce3f3b24a27ae167b552026f5f0cd76e5fb3\"" Mar 17 18:54:14.469469 env[1409]: 2025-03-17 18:54:14.437 [WARNING][4861] cni-plugin/k8s.go 572: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="1123a5210483c4fd0b9bd699ed48ce3f3b24a27ae167b552026f5f0cd76e5fb3" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ci--3510.3.7--a--9ed44aff31-k8s-coredns--668d6bf9bc--6dxdl-eth0", GenerateName:"coredns-668d6bf9bc-", Namespace:"kube-system", SelfLink:"", UID:"047ac9e7-ffcc-423c-9a51-54609fb136cc", ResourceVersion:"784", Generation:0, CreationTimestamp:time.Date(2025, time.March, 17, 18, 53, 20, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"k8s-app":"kube-dns", "pod-template-hash":"668d6bf9bc", "projectcalico.org/namespace":"kube-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"coredns"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ci-3510.3.7-a-9ed44aff31", ContainerID:"885a6adcd41c1d80a1e7b0d6922ae579899294b50a7ee97bb230d59d2b9a39ad", Pod:"coredns-668d6bf9bc-6dxdl", Endpoint:"eth0", ServiceAccountName:"coredns", IPNetworks:[]string{"192.168.88.193/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.kube-system", "ksa.kube-system.coredns"}, InterfaceName:"cali68b6c989586", MAC:"", Ports:[]v3.WorkloadEndpointPort{v3.WorkloadEndpointPort{Name:"dns", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"UDP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"dns-tcp", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"metrics", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x23c1, HostPort:0x0, HostIP:""}}, AllowSpoofedSourcePrefixes:[]string(nil)}} Mar 17 18:54:14.469469 env[1409]: 2025-03-17 18:54:14.437 [INFO][4861] cni-plugin/k8s.go 608: Cleaning up netns ContainerID="1123a5210483c4fd0b9bd699ed48ce3f3b24a27ae167b552026f5f0cd76e5fb3" Mar 17 18:54:14.469469 env[1409]: 2025-03-17 18:54:14.437 [INFO][4861] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="1123a5210483c4fd0b9bd699ed48ce3f3b24a27ae167b552026f5f0cd76e5fb3" iface="eth0" netns="" Mar 17 18:54:14.469469 env[1409]: 2025-03-17 18:54:14.437 [INFO][4861] cni-plugin/k8s.go 615: Releasing IP address(es) ContainerID="1123a5210483c4fd0b9bd699ed48ce3f3b24a27ae167b552026f5f0cd76e5fb3" Mar 17 18:54:14.469469 env[1409]: 2025-03-17 18:54:14.438 [INFO][4861] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="1123a5210483c4fd0b9bd699ed48ce3f3b24a27ae167b552026f5f0cd76e5fb3" Mar 17 18:54:14.469469 env[1409]: 2025-03-17 18:54:14.458 [INFO][4867] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="1123a5210483c4fd0b9bd699ed48ce3f3b24a27ae167b552026f5f0cd76e5fb3" HandleID="k8s-pod-network.1123a5210483c4fd0b9bd699ed48ce3f3b24a27ae167b552026f5f0cd76e5fb3" Workload="ci--3510.3.7--a--9ed44aff31-k8s-coredns--668d6bf9bc--6dxdl-eth0" Mar 17 18:54:14.469469 env[1409]: 2025-03-17 18:54:14.458 [INFO][4867] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Mar 17 18:54:14.469469 env[1409]: 2025-03-17 18:54:14.458 [INFO][4867] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Mar 17 18:54:14.469469 env[1409]: 2025-03-17 18:54:14.464 [WARNING][4867] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="1123a5210483c4fd0b9bd699ed48ce3f3b24a27ae167b552026f5f0cd76e5fb3" HandleID="k8s-pod-network.1123a5210483c4fd0b9bd699ed48ce3f3b24a27ae167b552026f5f0cd76e5fb3" Workload="ci--3510.3.7--a--9ed44aff31-k8s-coredns--668d6bf9bc--6dxdl-eth0" Mar 17 18:54:14.469469 env[1409]: 2025-03-17 18:54:14.464 [INFO][4867] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="1123a5210483c4fd0b9bd699ed48ce3f3b24a27ae167b552026f5f0cd76e5fb3" HandleID="k8s-pod-network.1123a5210483c4fd0b9bd699ed48ce3f3b24a27ae167b552026f5f0cd76e5fb3" Workload="ci--3510.3.7--a--9ed44aff31-k8s-coredns--668d6bf9bc--6dxdl-eth0" Mar 17 18:54:14.469469 env[1409]: 2025-03-17 18:54:14.465 [INFO][4867] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Mar 17 18:54:14.469469 env[1409]: 2025-03-17 18:54:14.467 [INFO][4861] cni-plugin/k8s.go 621: Teardown processing complete. ContainerID="1123a5210483c4fd0b9bd699ed48ce3f3b24a27ae167b552026f5f0cd76e5fb3" Mar 17 18:54:14.469469 env[1409]: time="2025-03-17T18:54:14.468594286Z" level=info msg="TearDown network for sandbox \"1123a5210483c4fd0b9bd699ed48ce3f3b24a27ae167b552026f5f0cd76e5fb3\" successfully" Mar 17 18:54:14.469469 env[1409]: time="2025-03-17T18:54:14.468634286Z" level=info msg="StopPodSandbox for \"1123a5210483c4fd0b9bd699ed48ce3f3b24a27ae167b552026f5f0cd76e5fb3\" returns successfully" Mar 17 18:54:14.469469 env[1409]: time="2025-03-17T18:54:14.469429689Z" level=info msg="RemovePodSandbox for \"1123a5210483c4fd0b9bd699ed48ce3f3b24a27ae167b552026f5f0cd76e5fb3\"" Mar 17 18:54:14.471576 env[1409]: time="2025-03-17T18:54:14.471509496Z" level=info msg="Forcibly stopping sandbox \"1123a5210483c4fd0b9bd699ed48ce3f3b24a27ae167b552026f5f0cd76e5fb3\"" Mar 17 18:54:14.539794 env[1409]: 2025-03-17 18:54:14.505 [WARNING][4885] cni-plugin/k8s.go 572: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="1123a5210483c4fd0b9bd699ed48ce3f3b24a27ae167b552026f5f0cd76e5fb3" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ci--3510.3.7--a--9ed44aff31-k8s-coredns--668d6bf9bc--6dxdl-eth0", GenerateName:"coredns-668d6bf9bc-", Namespace:"kube-system", SelfLink:"", UID:"047ac9e7-ffcc-423c-9a51-54609fb136cc", ResourceVersion:"784", Generation:0, CreationTimestamp:time.Date(2025, time.March, 17, 18, 53, 20, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"k8s-app":"kube-dns", "pod-template-hash":"668d6bf9bc", "projectcalico.org/namespace":"kube-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"coredns"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ci-3510.3.7-a-9ed44aff31", ContainerID:"885a6adcd41c1d80a1e7b0d6922ae579899294b50a7ee97bb230d59d2b9a39ad", Pod:"coredns-668d6bf9bc-6dxdl", Endpoint:"eth0", ServiceAccountName:"coredns", IPNetworks:[]string{"192.168.88.193/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.kube-system", "ksa.kube-system.coredns"}, InterfaceName:"cali68b6c989586", MAC:"", Ports:[]v3.WorkloadEndpointPort{v3.WorkloadEndpointPort{Name:"dns", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"UDP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"dns-tcp", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"metrics", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x23c1, HostPort:0x0, HostIP:""}}, AllowSpoofedSourcePrefixes:[]string(nil)}} Mar 17 18:54:14.539794 env[1409]: 2025-03-17 18:54:14.506 [INFO][4885] cni-plugin/k8s.go 608: Cleaning up netns ContainerID="1123a5210483c4fd0b9bd699ed48ce3f3b24a27ae167b552026f5f0cd76e5fb3" Mar 17 18:54:14.539794 env[1409]: 2025-03-17 18:54:14.506 [INFO][4885] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="1123a5210483c4fd0b9bd699ed48ce3f3b24a27ae167b552026f5f0cd76e5fb3" iface="eth0" netns="" Mar 17 18:54:14.539794 env[1409]: 2025-03-17 18:54:14.506 [INFO][4885] cni-plugin/k8s.go 615: Releasing IP address(es) ContainerID="1123a5210483c4fd0b9bd699ed48ce3f3b24a27ae167b552026f5f0cd76e5fb3" Mar 17 18:54:14.539794 env[1409]: 2025-03-17 18:54:14.506 [INFO][4885] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="1123a5210483c4fd0b9bd699ed48ce3f3b24a27ae167b552026f5f0cd76e5fb3" Mar 17 18:54:14.539794 env[1409]: 2025-03-17 18:54:14.529 [INFO][4891] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="1123a5210483c4fd0b9bd699ed48ce3f3b24a27ae167b552026f5f0cd76e5fb3" HandleID="k8s-pod-network.1123a5210483c4fd0b9bd699ed48ce3f3b24a27ae167b552026f5f0cd76e5fb3" Workload="ci--3510.3.7--a--9ed44aff31-k8s-coredns--668d6bf9bc--6dxdl-eth0" Mar 17 18:54:14.539794 env[1409]: 2025-03-17 18:54:14.529 [INFO][4891] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Mar 17 18:54:14.539794 env[1409]: 2025-03-17 18:54:14.529 [INFO][4891] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Mar 17 18:54:14.539794 env[1409]: 2025-03-17 18:54:14.535 [WARNING][4891] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="1123a5210483c4fd0b9bd699ed48ce3f3b24a27ae167b552026f5f0cd76e5fb3" HandleID="k8s-pod-network.1123a5210483c4fd0b9bd699ed48ce3f3b24a27ae167b552026f5f0cd76e5fb3" Workload="ci--3510.3.7--a--9ed44aff31-k8s-coredns--668d6bf9bc--6dxdl-eth0" Mar 17 18:54:14.539794 env[1409]: 2025-03-17 18:54:14.535 [INFO][4891] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="1123a5210483c4fd0b9bd699ed48ce3f3b24a27ae167b552026f5f0cd76e5fb3" HandleID="k8s-pod-network.1123a5210483c4fd0b9bd699ed48ce3f3b24a27ae167b552026f5f0cd76e5fb3" Workload="ci--3510.3.7--a--9ed44aff31-k8s-coredns--668d6bf9bc--6dxdl-eth0" Mar 17 18:54:14.539794 env[1409]: 2025-03-17 18:54:14.537 [INFO][4891] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Mar 17 18:54:14.539794 env[1409]: 2025-03-17 18:54:14.538 [INFO][4885] cni-plugin/k8s.go 621: Teardown processing complete. ContainerID="1123a5210483c4fd0b9bd699ed48ce3f3b24a27ae167b552026f5f0cd76e5fb3" Mar 17 18:54:14.540505 env[1409]: time="2025-03-17T18:54:14.539833932Z" level=info msg="TearDown network for sandbox \"1123a5210483c4fd0b9bd699ed48ce3f3b24a27ae167b552026f5f0cd76e5fb3\" successfully" Mar 17 18:54:14.547876 env[1409]: time="2025-03-17T18:54:14.547837460Z" level=info msg="RemovePodSandbox \"1123a5210483c4fd0b9bd699ed48ce3f3b24a27ae167b552026f5f0cd76e5fb3\" returns successfully" Mar 17 18:54:14.548320 env[1409]: time="2025-03-17T18:54:14.548293961Z" level=info msg="StopPodSandbox for \"008354fedab1e1c2571c3d344c4e1377e32b6de745504a5e5bc3e8fe0e3d9edc\"" Mar 17 18:54:14.614998 env[1409]: 2025-03-17 18:54:14.585 [WARNING][4909] cni-plugin/k8s.go 572: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="008354fedab1e1c2571c3d344c4e1377e32b6de745504a5e5bc3e8fe0e3d9edc" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ci--3510.3.7--a--9ed44aff31-k8s-csi--node--driver--qb29d-eth0", GenerateName:"csi-node-driver-", Namespace:"calico-system", SelfLink:"", UID:"fa4b58f5-7cb3-428f-9da4-44a5cc6627b4", ResourceVersion:"878", Generation:0, CreationTimestamp:time.Date(2025, time.March, 17, 18, 53, 27, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"csi-node-driver", "controller-revision-hash":"84cddb44f", "k8s-app":"csi-node-driver", "name":"csi-node-driver", "pod-template-generation":"1", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"csi-node-driver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ci-3510.3.7-a-9ed44aff31", ContainerID:"c19e4478f288b1a2e8039ca4507b7570c5a30429f116d812b443686c71562694", Pod:"csi-node-driver-qb29d", Endpoint:"eth0", ServiceAccountName:"csi-node-driver", IPNetworks:[]string{"192.168.88.197/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.csi-node-driver"}, InterfaceName:"calibadabe137f4", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil)}} Mar 17 18:54:14.614998 env[1409]: 2025-03-17 18:54:14.585 [INFO][4909] cni-plugin/k8s.go 608: Cleaning up netns ContainerID="008354fedab1e1c2571c3d344c4e1377e32b6de745504a5e5bc3e8fe0e3d9edc" Mar 17 18:54:14.614998 env[1409]: 2025-03-17 18:54:14.585 [INFO][4909] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="008354fedab1e1c2571c3d344c4e1377e32b6de745504a5e5bc3e8fe0e3d9edc" iface="eth0" netns="" Mar 17 18:54:14.614998 env[1409]: 2025-03-17 18:54:14.585 [INFO][4909] cni-plugin/k8s.go 615: Releasing IP address(es) ContainerID="008354fedab1e1c2571c3d344c4e1377e32b6de745504a5e5bc3e8fe0e3d9edc" Mar 17 18:54:14.614998 env[1409]: 2025-03-17 18:54:14.585 [INFO][4909] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="008354fedab1e1c2571c3d344c4e1377e32b6de745504a5e5bc3e8fe0e3d9edc" Mar 17 18:54:14.614998 env[1409]: 2025-03-17 18:54:14.604 [INFO][4915] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="008354fedab1e1c2571c3d344c4e1377e32b6de745504a5e5bc3e8fe0e3d9edc" HandleID="k8s-pod-network.008354fedab1e1c2571c3d344c4e1377e32b6de745504a5e5bc3e8fe0e3d9edc" Workload="ci--3510.3.7--a--9ed44aff31-k8s-csi--node--driver--qb29d-eth0" Mar 17 18:54:14.614998 env[1409]: 2025-03-17 18:54:14.604 [INFO][4915] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Mar 17 18:54:14.614998 env[1409]: 2025-03-17 18:54:14.604 [INFO][4915] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Mar 17 18:54:14.614998 env[1409]: 2025-03-17 18:54:14.611 [WARNING][4915] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="008354fedab1e1c2571c3d344c4e1377e32b6de745504a5e5bc3e8fe0e3d9edc" HandleID="k8s-pod-network.008354fedab1e1c2571c3d344c4e1377e32b6de745504a5e5bc3e8fe0e3d9edc" Workload="ci--3510.3.7--a--9ed44aff31-k8s-csi--node--driver--qb29d-eth0" Mar 17 18:54:14.614998 env[1409]: 2025-03-17 18:54:14.611 [INFO][4915] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="008354fedab1e1c2571c3d344c4e1377e32b6de745504a5e5bc3e8fe0e3d9edc" HandleID="k8s-pod-network.008354fedab1e1c2571c3d344c4e1377e32b6de745504a5e5bc3e8fe0e3d9edc" Workload="ci--3510.3.7--a--9ed44aff31-k8s-csi--node--driver--qb29d-eth0" Mar 17 18:54:14.614998 env[1409]: 2025-03-17 18:54:14.612 [INFO][4915] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Mar 17 18:54:14.614998 env[1409]: 2025-03-17 18:54:14.613 [INFO][4909] cni-plugin/k8s.go 621: Teardown processing complete. ContainerID="008354fedab1e1c2571c3d344c4e1377e32b6de745504a5e5bc3e8fe0e3d9edc" Mar 17 18:54:14.615597 env[1409]: time="2025-03-17T18:54:14.615032792Z" level=info msg="TearDown network for sandbox \"008354fedab1e1c2571c3d344c4e1377e32b6de745504a5e5bc3e8fe0e3d9edc\" successfully" Mar 17 18:54:14.615597 env[1409]: time="2025-03-17T18:54:14.615071792Z" level=info msg="StopPodSandbox for \"008354fedab1e1c2571c3d344c4e1377e32b6de745504a5e5bc3e8fe0e3d9edc\" returns successfully" Mar 17 18:54:14.615913 env[1409]: time="2025-03-17T18:54:14.615874495Z" level=info msg="RemovePodSandbox for \"008354fedab1e1c2571c3d344c4e1377e32b6de745504a5e5bc3e8fe0e3d9edc\"" Mar 17 18:54:14.616027 env[1409]: time="2025-03-17T18:54:14.615918295Z" level=info msg="Forcibly stopping sandbox \"008354fedab1e1c2571c3d344c4e1377e32b6de745504a5e5bc3e8fe0e3d9edc\"" Mar 17 18:54:14.676075 env[1409]: 2025-03-17 18:54:14.647 [WARNING][4933] cni-plugin/k8s.go 572: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="008354fedab1e1c2571c3d344c4e1377e32b6de745504a5e5bc3e8fe0e3d9edc" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ci--3510.3.7--a--9ed44aff31-k8s-csi--node--driver--qb29d-eth0", GenerateName:"csi-node-driver-", Namespace:"calico-system", SelfLink:"", UID:"fa4b58f5-7cb3-428f-9da4-44a5cc6627b4", ResourceVersion:"878", Generation:0, CreationTimestamp:time.Date(2025, time.March, 17, 18, 53, 27, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"csi-node-driver", "controller-revision-hash":"84cddb44f", "k8s-app":"csi-node-driver", "name":"csi-node-driver", "pod-template-generation":"1", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"csi-node-driver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ci-3510.3.7-a-9ed44aff31", ContainerID:"c19e4478f288b1a2e8039ca4507b7570c5a30429f116d812b443686c71562694", Pod:"csi-node-driver-qb29d", Endpoint:"eth0", ServiceAccountName:"csi-node-driver", IPNetworks:[]string{"192.168.88.197/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.csi-node-driver"}, InterfaceName:"calibadabe137f4", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil)}} Mar 17 18:54:14.676075 env[1409]: 2025-03-17 18:54:14.647 [INFO][4933] cni-plugin/k8s.go 608: Cleaning up netns ContainerID="008354fedab1e1c2571c3d344c4e1377e32b6de745504a5e5bc3e8fe0e3d9edc" Mar 17 18:54:14.676075 env[1409]: 2025-03-17 18:54:14.647 [INFO][4933] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="008354fedab1e1c2571c3d344c4e1377e32b6de745504a5e5bc3e8fe0e3d9edc" iface="eth0" netns="" Mar 17 18:54:14.676075 env[1409]: 2025-03-17 18:54:14.648 [INFO][4933] cni-plugin/k8s.go 615: Releasing IP address(es) ContainerID="008354fedab1e1c2571c3d344c4e1377e32b6de745504a5e5bc3e8fe0e3d9edc" Mar 17 18:54:14.676075 env[1409]: 2025-03-17 18:54:14.648 [INFO][4933] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="008354fedab1e1c2571c3d344c4e1377e32b6de745504a5e5bc3e8fe0e3d9edc" Mar 17 18:54:14.676075 env[1409]: 2025-03-17 18:54:14.667 [INFO][4939] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="008354fedab1e1c2571c3d344c4e1377e32b6de745504a5e5bc3e8fe0e3d9edc" HandleID="k8s-pod-network.008354fedab1e1c2571c3d344c4e1377e32b6de745504a5e5bc3e8fe0e3d9edc" Workload="ci--3510.3.7--a--9ed44aff31-k8s-csi--node--driver--qb29d-eth0" Mar 17 18:54:14.676075 env[1409]: 2025-03-17 18:54:14.667 [INFO][4939] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Mar 17 18:54:14.676075 env[1409]: 2025-03-17 18:54:14.667 [INFO][4939] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Mar 17 18:54:14.676075 env[1409]: 2025-03-17 18:54:14.672 [WARNING][4939] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="008354fedab1e1c2571c3d344c4e1377e32b6de745504a5e5bc3e8fe0e3d9edc" HandleID="k8s-pod-network.008354fedab1e1c2571c3d344c4e1377e32b6de745504a5e5bc3e8fe0e3d9edc" Workload="ci--3510.3.7--a--9ed44aff31-k8s-csi--node--driver--qb29d-eth0" Mar 17 18:54:14.676075 env[1409]: 2025-03-17 18:54:14.672 [INFO][4939] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="008354fedab1e1c2571c3d344c4e1377e32b6de745504a5e5bc3e8fe0e3d9edc" HandleID="k8s-pod-network.008354fedab1e1c2571c3d344c4e1377e32b6de745504a5e5bc3e8fe0e3d9edc" Workload="ci--3510.3.7--a--9ed44aff31-k8s-csi--node--driver--qb29d-eth0" Mar 17 18:54:14.676075 env[1409]: 2025-03-17 18:54:14.674 [INFO][4939] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Mar 17 18:54:14.676075 env[1409]: 2025-03-17 18:54:14.675 [INFO][4933] cni-plugin/k8s.go 621: Teardown processing complete. ContainerID="008354fedab1e1c2571c3d344c4e1377e32b6de745504a5e5bc3e8fe0e3d9edc" Mar 17 18:54:14.676782 env[1409]: time="2025-03-17T18:54:14.676112903Z" level=info msg="TearDown network for sandbox \"008354fedab1e1c2571c3d344c4e1377e32b6de745504a5e5bc3e8fe0e3d9edc\" successfully" Mar 17 18:54:14.683207 env[1409]: time="2025-03-17T18:54:14.683164128Z" level=info msg="RemovePodSandbox \"008354fedab1e1c2571c3d344c4e1377e32b6de745504a5e5bc3e8fe0e3d9edc\" returns successfully" Mar 17 18:54:14.683801 env[1409]: time="2025-03-17T18:54:14.683732230Z" level=info msg="StopPodSandbox for \"648d5fd3a31c687d83fb27810080702536d28c9ff711a4c61f869dcfb2e3ad23\"" Mar 17 18:54:14.746370 env[1409]: 2025-03-17 18:54:14.715 [WARNING][4957] cni-plugin/k8s.go 572: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="648d5fd3a31c687d83fb27810080702536d28c9ff711a4c61f869dcfb2e3ad23" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ci--3510.3.7--a--9ed44aff31-k8s-coredns--668d6bf9bc--xjnb2-eth0", GenerateName:"coredns-668d6bf9bc-", Namespace:"kube-system", SelfLink:"", UID:"f6e876a2-e0ad-437c-8982-fb194bf7b8dd", ResourceVersion:"804", Generation:0, CreationTimestamp:time.Date(2025, time.March, 17, 18, 53, 20, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"k8s-app":"kube-dns", "pod-template-hash":"668d6bf9bc", "projectcalico.org/namespace":"kube-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"coredns"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ci-3510.3.7-a-9ed44aff31", ContainerID:"5db20a01bfb7bedd3ba9f9c57ce5082f24f82e7a7159d510ad0ba113c757b961", Pod:"coredns-668d6bf9bc-xjnb2", Endpoint:"eth0", ServiceAccountName:"coredns", IPNetworks:[]string{"192.168.88.194/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.kube-system", "ksa.kube-system.coredns"}, InterfaceName:"cali7435b94cef9", MAC:"", Ports:[]v3.WorkloadEndpointPort{v3.WorkloadEndpointPort{Name:"dns", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"UDP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"dns-tcp", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"metrics", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x23c1, HostPort:0x0, HostIP:""}}, AllowSpoofedSourcePrefixes:[]string(nil)}} Mar 17 18:54:14.746370 env[1409]: 2025-03-17 18:54:14.715 [INFO][4957] cni-plugin/k8s.go 608: Cleaning up netns ContainerID="648d5fd3a31c687d83fb27810080702536d28c9ff711a4c61f869dcfb2e3ad23" Mar 17 18:54:14.746370 env[1409]: 2025-03-17 18:54:14.716 [INFO][4957] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="648d5fd3a31c687d83fb27810080702536d28c9ff711a4c61f869dcfb2e3ad23" iface="eth0" netns="" Mar 17 18:54:14.746370 env[1409]: 2025-03-17 18:54:14.716 [INFO][4957] cni-plugin/k8s.go 615: Releasing IP address(es) ContainerID="648d5fd3a31c687d83fb27810080702536d28c9ff711a4c61f869dcfb2e3ad23" Mar 17 18:54:14.746370 env[1409]: 2025-03-17 18:54:14.716 [INFO][4957] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="648d5fd3a31c687d83fb27810080702536d28c9ff711a4c61f869dcfb2e3ad23" Mar 17 18:54:14.746370 env[1409]: 2025-03-17 18:54:14.734 [INFO][4963] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="648d5fd3a31c687d83fb27810080702536d28c9ff711a4c61f869dcfb2e3ad23" HandleID="k8s-pod-network.648d5fd3a31c687d83fb27810080702536d28c9ff711a4c61f869dcfb2e3ad23" Workload="ci--3510.3.7--a--9ed44aff31-k8s-coredns--668d6bf9bc--xjnb2-eth0" Mar 17 18:54:14.746370 env[1409]: 2025-03-17 18:54:14.734 [INFO][4963] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Mar 17 18:54:14.746370 env[1409]: 2025-03-17 18:54:14.734 [INFO][4963] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Mar 17 18:54:14.746370 env[1409]: 2025-03-17 18:54:14.743 [WARNING][4963] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="648d5fd3a31c687d83fb27810080702536d28c9ff711a4c61f869dcfb2e3ad23" HandleID="k8s-pod-network.648d5fd3a31c687d83fb27810080702536d28c9ff711a4c61f869dcfb2e3ad23" Workload="ci--3510.3.7--a--9ed44aff31-k8s-coredns--668d6bf9bc--xjnb2-eth0" Mar 17 18:54:14.746370 env[1409]: 2025-03-17 18:54:14.743 [INFO][4963] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="648d5fd3a31c687d83fb27810080702536d28c9ff711a4c61f869dcfb2e3ad23" HandleID="k8s-pod-network.648d5fd3a31c687d83fb27810080702536d28c9ff711a4c61f869dcfb2e3ad23" Workload="ci--3510.3.7--a--9ed44aff31-k8s-coredns--668d6bf9bc--xjnb2-eth0" Mar 17 18:54:14.746370 env[1409]: 2025-03-17 18:54:14.744 [INFO][4963] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Mar 17 18:54:14.746370 env[1409]: 2025-03-17 18:54:14.745 [INFO][4957] cni-plugin/k8s.go 621: Teardown processing complete. ContainerID="648d5fd3a31c687d83fb27810080702536d28c9ff711a4c61f869dcfb2e3ad23" Mar 17 18:54:14.747010 env[1409]: time="2025-03-17T18:54:14.746398747Z" level=info msg="TearDown network for sandbox \"648d5fd3a31c687d83fb27810080702536d28c9ff711a4c61f869dcfb2e3ad23\" successfully" Mar 17 18:54:14.747010 env[1409]: time="2025-03-17T18:54:14.746440347Z" level=info msg="StopPodSandbox for \"648d5fd3a31c687d83fb27810080702536d28c9ff711a4c61f869dcfb2e3ad23\" returns successfully" Mar 17 18:54:14.747010 env[1409]: time="2025-03-17T18:54:14.746969648Z" level=info msg="RemovePodSandbox for \"648d5fd3a31c687d83fb27810080702536d28c9ff711a4c61f869dcfb2e3ad23\"" Mar 17 18:54:14.747136 env[1409]: time="2025-03-17T18:54:14.747009949Z" level=info msg="Forcibly stopping sandbox \"648d5fd3a31c687d83fb27810080702536d28c9ff711a4c61f869dcfb2e3ad23\"" Mar 17 18:54:14.814923 env[1409]: 2025-03-17 18:54:14.785 [WARNING][4983] cni-plugin/k8s.go 572: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="648d5fd3a31c687d83fb27810080702536d28c9ff711a4c61f869dcfb2e3ad23" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ci--3510.3.7--a--9ed44aff31-k8s-coredns--668d6bf9bc--xjnb2-eth0", GenerateName:"coredns-668d6bf9bc-", Namespace:"kube-system", SelfLink:"", UID:"f6e876a2-e0ad-437c-8982-fb194bf7b8dd", ResourceVersion:"804", Generation:0, CreationTimestamp:time.Date(2025, time.March, 17, 18, 53, 20, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"k8s-app":"kube-dns", "pod-template-hash":"668d6bf9bc", "projectcalico.org/namespace":"kube-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"coredns"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ci-3510.3.7-a-9ed44aff31", ContainerID:"5db20a01bfb7bedd3ba9f9c57ce5082f24f82e7a7159d510ad0ba113c757b961", Pod:"coredns-668d6bf9bc-xjnb2", Endpoint:"eth0", ServiceAccountName:"coredns", IPNetworks:[]string{"192.168.88.194/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.kube-system", "ksa.kube-system.coredns"}, InterfaceName:"cali7435b94cef9", MAC:"", Ports:[]v3.WorkloadEndpointPort{v3.WorkloadEndpointPort{Name:"dns", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"UDP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"dns-tcp", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"metrics", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x23c1, HostPort:0x0, HostIP:""}}, AllowSpoofedSourcePrefixes:[]string(nil)}} Mar 17 18:54:14.814923 env[1409]: 2025-03-17 18:54:14.785 [INFO][4983] cni-plugin/k8s.go 608: Cleaning up netns ContainerID="648d5fd3a31c687d83fb27810080702536d28c9ff711a4c61f869dcfb2e3ad23" Mar 17 18:54:14.814923 env[1409]: 2025-03-17 18:54:14.785 [INFO][4983] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="648d5fd3a31c687d83fb27810080702536d28c9ff711a4c61f869dcfb2e3ad23" iface="eth0" netns="" Mar 17 18:54:14.814923 env[1409]: 2025-03-17 18:54:14.785 [INFO][4983] cni-plugin/k8s.go 615: Releasing IP address(es) ContainerID="648d5fd3a31c687d83fb27810080702536d28c9ff711a4c61f869dcfb2e3ad23" Mar 17 18:54:14.814923 env[1409]: 2025-03-17 18:54:14.785 [INFO][4983] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="648d5fd3a31c687d83fb27810080702536d28c9ff711a4c61f869dcfb2e3ad23" Mar 17 18:54:14.814923 env[1409]: 2025-03-17 18:54:14.804 [INFO][4989] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="648d5fd3a31c687d83fb27810080702536d28c9ff711a4c61f869dcfb2e3ad23" HandleID="k8s-pod-network.648d5fd3a31c687d83fb27810080702536d28c9ff711a4c61f869dcfb2e3ad23" Workload="ci--3510.3.7--a--9ed44aff31-k8s-coredns--668d6bf9bc--xjnb2-eth0" Mar 17 18:54:14.814923 env[1409]: 2025-03-17 18:54:14.804 [INFO][4989] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Mar 17 18:54:14.814923 env[1409]: 2025-03-17 18:54:14.804 [INFO][4989] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Mar 17 18:54:14.814923 env[1409]: 2025-03-17 18:54:14.810 [WARNING][4989] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="648d5fd3a31c687d83fb27810080702536d28c9ff711a4c61f869dcfb2e3ad23" HandleID="k8s-pod-network.648d5fd3a31c687d83fb27810080702536d28c9ff711a4c61f869dcfb2e3ad23" Workload="ci--3510.3.7--a--9ed44aff31-k8s-coredns--668d6bf9bc--xjnb2-eth0" Mar 17 18:54:14.814923 env[1409]: 2025-03-17 18:54:14.810 [INFO][4989] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="648d5fd3a31c687d83fb27810080702536d28c9ff711a4c61f869dcfb2e3ad23" HandleID="k8s-pod-network.648d5fd3a31c687d83fb27810080702536d28c9ff711a4c61f869dcfb2e3ad23" Workload="ci--3510.3.7--a--9ed44aff31-k8s-coredns--668d6bf9bc--xjnb2-eth0" Mar 17 18:54:14.814923 env[1409]: 2025-03-17 18:54:14.812 [INFO][4989] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Mar 17 18:54:14.814923 env[1409]: 2025-03-17 18:54:14.813 [INFO][4983] cni-plugin/k8s.go 621: Teardown processing complete. ContainerID="648d5fd3a31c687d83fb27810080702536d28c9ff711a4c61f869dcfb2e3ad23" Mar 17 18:54:14.815633 env[1409]: time="2025-03-17T18:54:14.814944584Z" level=info msg="TearDown network for sandbox \"648d5fd3a31c687d83fb27810080702536d28c9ff711a4c61f869dcfb2e3ad23\" successfully" Mar 17 18:54:14.823071 env[1409]: time="2025-03-17T18:54:14.823026112Z" level=info msg="RemovePodSandbox \"648d5fd3a31c687d83fb27810080702536d28c9ff711a4c61f869dcfb2e3ad23\" returns successfully" Mar 17 18:54:15.066000 audit[2323]: AVC avc: denied { watch } for pid=2323 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=7355 scontext=system_u:system_r:svirt_lxc_net_t:s0:c454,c669 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Mar 17 18:54:15.066000 audit[2323]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=9 a1=c002046560 a2=fc6 a3=0 items=0 ppid=2152 pid=2323 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c454,c669 key=(null) Mar 17 18:54:15.066000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Mar 17 18:54:15.067000 audit[2323]: AVC avc: denied { watch } for pid=2323 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=7355 scontext=system_u:system_r:svirt_lxc_net_t:s0:c454,c669 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Mar 17 18:54:15.067000 audit[2323]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=9 a1=c002046580 a2=fc6 a3=0 items=0 ppid=2152 pid=2323 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c454,c669 key=(null) Mar 17 18:54:15.067000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Mar 17 18:54:15.067000 audit[2323]: AVC avc: denied { watch } for pid=2323 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=7355 scontext=system_u:system_r:svirt_lxc_net_t:s0:c454,c669 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Mar 17 18:54:15.067000 audit[2323]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=9 a1=c00207da20 a2=fc6 a3=0 items=0 ppid=2152 pid=2323 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c454,c669 key=(null) Mar 17 18:54:15.067000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Mar 17 18:54:15.069000 audit[2323]: AVC avc: denied { watch } for pid=2323 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=7355 scontext=system_u:system_r:svirt_lxc_net_t:s0:c454,c669 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Mar 17 18:54:15.069000 audit[2323]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=9 a1=c002046840 a2=fc6 a3=0 items=0 ppid=2152 pid=2323 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c454,c669 key=(null) Mar 17 18:54:15.069000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Mar 17 18:54:15.771180 systemd[1]: run-containerd-runc-k8s.io-23d1c930fdae8fdcdaa6d8440934bb876648bde06d1cd24e876f111607576e01-runc.MGVWBJ.mount: Deactivated successfully. Mar 17 18:54:20.112676 systemd[1]: run-containerd-runc-k8s.io-8210af86bf3c1d7b8307d59b92cdaa67dec84cfe373fd9efa32d6fbc32f1d9f2-runc.owIIGV.mount: Deactivated successfully. Mar 17 18:54:34.162653 systemd[1]: run-containerd-runc-k8s.io-23d1c930fdae8fdcdaa6d8440934bb876648bde06d1cd24e876f111607576e01-runc.nVdF9C.mount: Deactivated successfully. Mar 17 18:54:50.102845 systemd[1]: run-containerd-runc-k8s.io-8210af86bf3c1d7b8307d59b92cdaa67dec84cfe373fd9efa32d6fbc32f1d9f2-runc.jKml6N.mount: Deactivated successfully. Mar 17 18:55:00.324000 audit[4482]: AVC avc: denied { watch } for pid=4482 comm="apiserver" path="/calico-apiserver-certs/..2025_03_17_18_53_40.4205256663/tls.crt" dev="tmpfs" ino=3 scontext=system_u:system_r:svirt_lxc_net_t:s0:c211,c345 tcontext=system_u:object_r:svirt_lxc_file_t:s0:c211,c345 tclass=file permissive=0 Mar 17 18:55:00.330753 kernel: kauditd_printk_skb: 32 callbacks suppressed Mar 17 18:55:00.331375 kernel: audit: type=1400 audit(1742237700.324:1362): avc: denied { watch } for pid=4482 comm="apiserver" path="/calico-apiserver-certs/..2025_03_17_18_53_40.4205256663/tls.crt" dev="tmpfs" ino=3 scontext=system_u:system_r:svirt_lxc_net_t:s0:c211,c345 tcontext=system_u:object_r:svirt_lxc_file_t:s0:c211,c345 tclass=file permissive=0 Mar 17 18:55:00.324000 audit[4482]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=8 a1=c000f61720 a2=fc6 a3=0 items=0 ppid=4165 pid=4482 auid=4294967295 uid=10001 gid=10001 euid=10001 suid=10001 fsuid=10001 egid=10001 sgid=10001 fsgid=10001 tty=(none) ses=4294967295 comm="apiserver" exe="/code/apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c211,c345 key=(null) Mar 17 18:55:00.379334 kernel: audit: type=1300 audit(1742237700.324:1362): arch=c000003e syscall=254 success=no exit=-13 a0=8 a1=c000f61720 a2=fc6 a3=0 items=0 ppid=4165 pid=4482 auid=4294967295 uid=10001 gid=10001 euid=10001 suid=10001 fsuid=10001 egid=10001 sgid=10001 fsgid=10001 tty=(none) ses=4294967295 comm="apiserver" exe="/code/apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c211,c345 key=(null) Mar 17 18:55:00.382094 kernel: audit: type=1327 audit(1742237700.324:1362): proctitle=2F636F64652F617069736572766572002D2D7365637572652D706F72743D35343433002D2D746C732D707269766174652D6B65792D66696C653D2F63616C69636F2D6170697365727665722D63657274732F746C732E6B6579002D2D746C732D636572742D66696C653D2F63616C69636F2D6170697365727665722D63657274 Mar 17 18:55:00.324000 audit: PROCTITLE proctitle=2F636F64652F617069736572766572002D2D7365637572652D706F72743D35343433002D2D746C732D707269766174652D6B65792D66696C653D2F63616C69636F2D6170697365727665722D63657274732F746C732E6B6579002D2D746C732D636572742D66696C653D2F63616C69636F2D6170697365727665722D63657274 Mar 17 18:55:00.948000 audit[4522]: AVC avc: denied { watch } for pid=4522 comm="apiserver" path="/calico-apiserver-certs/..2025_03_17_18_53_40.2855878070/tls.crt" dev="tmpfs" ino=4 scontext=system_u:system_r:svirt_lxc_net_t:s0:c206,c226 tcontext=system_u:object_r:svirt_lxc_file_t:s0:c206,c226 tclass=file permissive=0 Mar 17 18:55:00.948000 audit[4522]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=7 a1=c0009a3f20 a2=fc6 a3=0 items=0 ppid=4222 pid=4522 auid=4294967295 uid=10001 gid=10001 euid=10001 suid=10001 fsuid=10001 egid=10001 sgid=10001 fsgid=10001 tty=(none) ses=4294967295 comm="apiserver" exe="/code/apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c206,c226 key=(null) Mar 17 18:55:00.997032 kernel: audit: type=1400 audit(1742237700.948:1363): avc: denied { watch } for pid=4522 comm="apiserver" path="/calico-apiserver-certs/..2025_03_17_18_53_40.2855878070/tls.crt" dev="tmpfs" ino=4 scontext=system_u:system_r:svirt_lxc_net_t:s0:c206,c226 tcontext=system_u:object_r:svirt_lxc_file_t:s0:c206,c226 tclass=file permissive=0 Mar 17 18:55:00.997149 kernel: audit: type=1300 audit(1742237700.948:1363): arch=c000003e syscall=254 success=no exit=-13 a0=7 a1=c0009a3f20 a2=fc6 a3=0 items=0 ppid=4222 pid=4522 auid=4294967295 uid=10001 gid=10001 euid=10001 suid=10001 fsuid=10001 egid=10001 sgid=10001 fsgid=10001 tty=(none) ses=4294967295 comm="apiserver" exe="/code/apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c206,c226 key=(null) Mar 17 18:55:00.997185 kernel: audit: type=1327 audit(1742237700.948:1363): proctitle=2F636F64652F617069736572766572002D2D7365637572652D706F72743D35343433002D2D746C732D707269766174652D6B65792D66696C653D2F63616C69636F2D6170697365727665722D63657274732F746C732E6B6579002D2D746C732D636572742D66696C653D2F63616C69636F2D6170697365727665722D63657274 Mar 17 18:55:00.948000 audit: PROCTITLE proctitle=2F636F64652F617069736572766572002D2D7365637572652D706F72743D35343433002D2D746C732D707269766174652D6B65792D66696C653D2F63616C69636F2D6170697365727665722D63657274732F746C732E6B6579002D2D746C732D636572742D66696C653D2F63616C69636F2D6170697365727665722D63657274 Mar 17 18:55:10.633000 audit[2323]: AVC avc: denied { watch } for pid=2323 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=7361 scontext=system_u:system_r:svirt_lxc_net_t:s0:c454,c669 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Mar 17 18:55:10.633000 audit[2323]: AVC avc: denied { watch } for pid=2323 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=7355 scontext=system_u:system_r:svirt_lxc_net_t:s0:c454,c669 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Mar 17 18:55:10.653288 kernel: audit: type=1400 audit(1742237710.633:1365): avc: denied { watch } for pid=2323 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=7361 scontext=system_u:system_r:svirt_lxc_net_t:s0:c454,c669 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Mar 17 18:55:10.653351 kernel: audit: type=1400 audit(1742237710.633:1364): avc: denied { watch } for pid=2323 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=7355 scontext=system_u:system_r:svirt_lxc_net_t:s0:c454,c669 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Mar 17 18:55:10.633000 audit[2323]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c00157ec60 a2=fc6 a3=0 items=0 ppid=2152 pid=2323 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c454,c669 key=(null) Mar 17 18:55:10.692096 kernel: audit: type=1300 audit(1742237710.633:1365): arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c00157ec60 a2=fc6 a3=0 items=0 ppid=2152 pid=2323 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c454,c669 key=(null) Mar 17 18:55:10.633000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Mar 17 18:55:10.711672 kernel: audit: type=1327 audit(1742237710.633:1365): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Mar 17 18:55:10.711763 kernel: audit: type=1300 audit(1742237710.633:1364): arch=c000003e syscall=254 success=no exit=-13 a0=9 a1=c002d81440 a2=fc6 a3=0 items=0 ppid=2152 pid=2323 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c454,c669 key=(null) Mar 17 18:55:10.633000 audit[2323]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=9 a1=c002d81440 a2=fc6 a3=0 items=0 ppid=2152 pid=2323 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c454,c669 key=(null) Mar 17 18:55:10.633000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Mar 17 18:55:10.750738 kernel: audit: type=1327 audit(1742237710.633:1364): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Mar 17 18:55:11.017000 audit[2272]: AVC avc: denied { watch } for pid=2272 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=7361 scontext=system_u:system_r:svirt_lxc_net_t:s0:c306,c585 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Mar 17 18:55:11.037287 kernel: audit: type=1400 audit(1742237711.017:1367): avc: denied { watch } for pid=2272 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=7361 scontext=system_u:system_r:svirt_lxc_net_t:s0:c306,c585 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Mar 17 18:55:11.017000 audit[2272]: AVC avc: denied { watch } for pid=2272 comm="kube-apiserver" path="/etc/kubernetes/pki/apiserver.crt" dev="sda9" ino=7357 scontext=system_u:system_r:svirt_lxc_net_t:s0:c306,c585 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Mar 17 18:55:11.054389 kernel: audit: type=1400 audit(1742237711.017:1366): avc: denied { watch } for pid=2272 comm="kube-apiserver" path="/etc/kubernetes/pki/apiserver.crt" dev="sda9" ino=7357 scontext=system_u:system_r:svirt_lxc_net_t:s0:c306,c585 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Mar 17 18:55:11.054428 kernel: audit: type=1300 audit(1742237711.017:1366): arch=c000003e syscall=254 success=no exit=-13 a0=6b a1=c00d9b7800 a2=fc6 a3=0 items=0 ppid=2131 pid=2272 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c306,c585 key=(null) Mar 17 18:55:11.017000 audit[2272]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=6b a1=c00d9b7800 a2=fc6 a3=0 items=0 ppid=2131 pid=2272 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c306,c585 key=(null) Mar 17 18:55:11.017000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E382E3335002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265 Mar 17 18:55:11.093237 kernel: audit: type=1327 audit(1742237711.017:1366): proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E382E3335002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265 Mar 17 18:55:11.018000 audit[2272]: AVC avc: denied { watch } for pid=2272 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=7355 scontext=system_u:system_r:svirt_lxc_net_t:s0:c306,c585 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Mar 17 18:55:11.018000 audit[2272]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=6b a1=c00df82d60 a2=fc6 a3=0 items=0 ppid=2131 pid=2272 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c306,c585 key=(null) Mar 17 18:55:11.018000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E382E3335002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265 Mar 17 18:55:11.017000 audit[2272]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=6c a1=c00d5ba1b0 a2=fc6 a3=0 items=0 ppid=2131 pid=2272 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c306,c585 key=(null) Mar 17 18:55:11.017000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E382E3335002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265 Mar 17 18:55:11.021000 audit[2272]: AVC avc: denied { watch } for pid=2272 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-client.crt" dev="sda9" ino=7363 scontext=system_u:system_r:svirt_lxc_net_t:s0:c306,c585 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Mar 17 18:55:11.021000 audit[2272]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=6b a1=c00d5ba210 a2=fc6 a3=0 items=0 ppid=2131 pid=2272 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c306,c585 key=(null) Mar 17 18:55:11.021000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E382E3335002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265 Mar 17 18:55:11.027000 audit[2272]: AVC avc: denied { watch } for pid=2272 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=7355 scontext=system_u:system_r:svirt_lxc_net_t:s0:c306,c585 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Mar 17 18:55:11.027000 audit[2272]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=6b a1=c00df83200 a2=fc6 a3=0 items=0 ppid=2131 pid=2272 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c306,c585 key=(null) Mar 17 18:55:11.027000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E382E3335002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265 Mar 17 18:55:11.027000 audit[2272]: AVC avc: denied { watch } for pid=2272 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=7361 scontext=system_u:system_r:svirt_lxc_net_t:s0:c306,c585 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Mar 17 18:55:11.027000 audit[2272]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=6b a1=c00d5ba240 a2=fc6 a3=0 items=0 ppid=2131 pid=2272 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c306,c585 key=(null) Mar 17 18:55:11.027000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E382E3335002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265 Mar 17 18:55:15.066000 audit[2323]: AVC avc: denied { watch } for pid=2323 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=7355 scontext=system_u:system_r:svirt_lxc_net_t:s0:c454,c669 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Mar 17 18:55:15.066000 audit[2323]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=9 a1=c002d81660 a2=fc6 a3=0 items=0 ppid=2152 pid=2323 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c454,c669 key=(null) Mar 17 18:55:15.066000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Mar 17 18:55:15.066000 audit[2323]: AVC avc: denied { watch } for pid=2323 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=7355 scontext=system_u:system_r:svirt_lxc_net_t:s0:c454,c669 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Mar 17 18:55:15.066000 audit[2323]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c00210abc0 a2=fc6 a3=0 items=0 ppid=2152 pid=2323 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c454,c669 key=(null) Mar 17 18:55:15.066000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Mar 17 18:55:15.067000 audit[2323]: AVC avc: denied { watch } for pid=2323 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=7355 scontext=system_u:system_r:svirt_lxc_net_t:s0:c454,c669 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Mar 17 18:55:15.067000 audit[2323]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=9 a1=c00210ad60 a2=fc6 a3=0 items=0 ppid=2152 pid=2323 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c454,c669 key=(null) Mar 17 18:55:15.067000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Mar 17 18:55:15.069000 audit[2323]: AVC avc: denied { watch } for pid=2323 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=7355 scontext=system_u:system_r:svirt_lxc_net_t:s0:c454,c669 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Mar 17 18:55:15.069000 audit[2323]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=9 a1=c002d81800 a2=fc6 a3=0 items=0 ppid=2152 pid=2323 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c454,c669 key=(null) Mar 17 18:55:15.069000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Mar 17 18:55:15.770072 systemd[1]: run-containerd-runc-k8s.io-23d1c930fdae8fdcdaa6d8440934bb876648bde06d1cd24e876f111607576e01-runc.RQjQqc.mount: Deactivated successfully. Mar 17 18:55:46.474391 kernel: kauditd_printk_skb: 26 callbacks suppressed Mar 17 18:55:46.474571 kernel: audit: type=1130 audit(1742237746.462:1376): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@7-10.200.8.35:22-10.200.16.10:40124 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:55:46.462000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@7-10.200.8.35:22-10.200.16.10:40124 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:55:46.463146 systemd[1]: Started sshd@7-10.200.8.35:22-10.200.16.10:40124.service. Mar 17 18:55:47.091000 audit[5205]: USER_ACCT pid=5205 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Mar 17 18:55:47.113291 kernel: audit: type=1101 audit(1742237747.091:1377): pid=5205 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Mar 17 18:55:47.113417 sshd[5205]: Accepted publickey for core from 10.200.16.10 port 40124 ssh2: RSA SHA256:Id7fTtJmja0nOLdf0IQA3jnxxJrUKKdGU1UW83zjTQg Mar 17 18:55:47.114530 sshd[5205]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Mar 17 18:55:47.112000 audit[5205]: CRED_ACQ pid=5205 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Mar 17 18:55:47.121944 systemd-logind[1398]: New session 10 of user core. Mar 17 18:55:47.123891 systemd[1]: Started session-10.scope. Mar 17 18:55:47.134488 kernel: audit: type=1103 audit(1742237747.112:1378): pid=5205 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Mar 17 18:55:47.134565 kernel: audit: type=1006 audit(1742237747.112:1379): pid=5205 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=10 res=1 Mar 17 18:55:47.112000 audit[5205]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffe491e6a10 a2=3 a3=0 items=0 ppid=1 pid=5205 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=10 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:55:47.144314 kernel: audit: type=1300 audit(1742237747.112:1379): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffe491e6a10 a2=3 a3=0 items=0 ppid=1 pid=5205 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=10 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:55:47.112000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Mar 17 18:55:47.162358 kernel: audit: type=1327 audit(1742237747.112:1379): proctitle=737368643A20636F7265205B707269765D Mar 17 18:55:47.127000 audit[5205]: USER_START pid=5205 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Mar 17 18:55:47.168282 kernel: audit: type=1105 audit(1742237747.127:1380): pid=5205 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Mar 17 18:55:47.129000 audit[5207]: CRED_ACQ pid=5207 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Mar 17 18:55:47.203005 kernel: audit: type=1103 audit(1742237747.129:1381): pid=5207 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Mar 17 18:55:47.606776 sshd[5205]: pam_unix(sshd:session): session closed for user core Mar 17 18:55:47.607000 audit[5205]: USER_END pid=5205 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Mar 17 18:55:47.613382 systemd[1]: sshd@7-10.200.8.35:22-10.200.16.10:40124.service: Deactivated successfully. Mar 17 18:55:47.614320 systemd[1]: session-10.scope: Deactivated successfully. Mar 17 18:55:47.615950 systemd-logind[1398]: Session 10 logged out. Waiting for processes to exit. Mar 17 18:55:47.617115 systemd-logind[1398]: Removed session 10. Mar 17 18:55:47.607000 audit[5205]: CRED_DISP pid=5205 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Mar 17 18:55:47.648278 kernel: audit: type=1106 audit(1742237747.607:1382): pid=5205 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Mar 17 18:55:47.648366 kernel: audit: type=1104 audit(1742237747.607:1383): pid=5205 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Mar 17 18:55:47.607000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@7-10.200.8.35:22-10.200.16.10:40124 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:55:50.105404 systemd[1]: run-containerd-runc-k8s.io-8210af86bf3c1d7b8307d59b92cdaa67dec84cfe373fd9efa32d6fbc32f1d9f2-runc.jKeyDK.mount: Deactivated successfully. Mar 17 18:55:52.736318 kernel: kauditd_printk_skb: 1 callbacks suppressed Mar 17 18:55:52.736465 kernel: audit: type=1130 audit(1742237752.711:1385): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@8-10.200.8.35:22-10.200.16.10:33198 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:55:52.711000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@8-10.200.8.35:22-10.200.16.10:33198 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:55:52.712858 systemd[1]: Started sshd@8-10.200.8.35:22-10.200.16.10:33198.service. Mar 17 18:55:53.341000 audit[5244]: USER_ACCT pid=5244 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Mar 17 18:55:53.365136 sshd[5244]: Accepted publickey for core from 10.200.16.10 port 33198 ssh2: RSA SHA256:Id7fTtJmja0nOLdf0IQA3jnxxJrUKKdGU1UW83zjTQg Mar 17 18:55:53.365497 kernel: audit: type=1101 audit(1742237753.341:1386): pid=5244 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Mar 17 18:55:53.365627 sshd[5244]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Mar 17 18:55:53.363000 audit[5244]: CRED_ACQ pid=5244 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Mar 17 18:55:53.375713 systemd-logind[1398]: New session 11 of user core. Mar 17 18:55:53.376498 systemd[1]: Started session-11.scope. Mar 17 18:55:53.395520 kernel: audit: type=1103 audit(1742237753.363:1387): pid=5244 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Mar 17 18:55:53.395607 kernel: audit: type=1006 audit(1742237753.363:1388): pid=5244 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=11 res=1 Mar 17 18:55:53.395633 kernel: audit: type=1300 audit(1742237753.363:1388): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffd1ea55140 a2=3 a3=0 items=0 ppid=1 pid=5244 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=11 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:55:53.363000 audit[5244]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffd1ea55140 a2=3 a3=0 items=0 ppid=1 pid=5244 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=11 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:55:53.363000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Mar 17 18:55:53.420021 kernel: audit: type=1327 audit(1742237753.363:1388): proctitle=737368643A20636F7265205B707269765D Mar 17 18:55:53.380000 audit[5244]: USER_START pid=5244 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Mar 17 18:55:53.439065 kernel: audit: type=1105 audit(1742237753.380:1389): pid=5244 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Mar 17 18:55:53.439137 kernel: audit: type=1103 audit(1742237753.380:1390): pid=5246 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Mar 17 18:55:53.380000 audit[5246]: CRED_ACQ pid=5246 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Mar 17 18:55:53.855889 sshd[5244]: pam_unix(sshd:session): session closed for user core Mar 17 18:55:53.856000 audit[5244]: USER_END pid=5244 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Mar 17 18:55:53.859419 systemd[1]: sshd@8-10.200.8.35:22-10.200.16.10:33198.service: Deactivated successfully. Mar 17 18:55:53.860255 systemd[1]: session-11.scope: Deactivated successfully. Mar 17 18:55:53.861828 systemd-logind[1398]: Session 11 logged out. Waiting for processes to exit. Mar 17 18:55:53.862791 systemd-logind[1398]: Removed session 11. Mar 17 18:55:53.856000 audit[5244]: CRED_DISP pid=5244 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Mar 17 18:55:53.895681 kernel: audit: type=1106 audit(1742237753.856:1391): pid=5244 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Mar 17 18:55:53.895789 kernel: audit: type=1104 audit(1742237753.856:1392): pid=5244 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Mar 17 18:55:53.858000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@8-10.200.8.35:22-10.200.16.10:33198 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:55:58.973671 kernel: kauditd_printk_skb: 1 callbacks suppressed Mar 17 18:55:58.973803 kernel: audit: type=1130 audit(1742237758.962:1394): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@9-10.200.8.35:22-10.200.16.10:33800 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:55:58.962000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@9-10.200.8.35:22-10.200.16.10:33800 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:55:58.962709 systemd[1]: Started sshd@9-10.200.8.35:22-10.200.16.10:33800.service. Mar 17 18:55:59.592000 audit[5257]: USER_ACCT pid=5257 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Mar 17 18:55:59.595690 sshd[5257]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Mar 17 18:55:59.613458 kernel: audit: type=1101 audit(1742237759.592:1395): pid=5257 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Mar 17 18:55:59.613490 sshd[5257]: Accepted publickey for core from 10.200.16.10 port 33800 ssh2: RSA SHA256:Id7fTtJmja0nOLdf0IQA3jnxxJrUKKdGU1UW83zjTQg Mar 17 18:55:59.594000 audit[5257]: CRED_ACQ pid=5257 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Mar 17 18:55:59.622211 systemd[1]: Started session-12.scope. Mar 17 18:55:59.623308 systemd-logind[1398]: New session 12 of user core. Mar 17 18:55:59.641300 kernel: audit: type=1103 audit(1742237759.594:1396): pid=5257 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Mar 17 18:55:59.641384 kernel: audit: type=1006 audit(1742237759.594:1397): pid=5257 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=12 res=1 Mar 17 18:55:59.594000 audit[5257]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7fffbc4a17a0 a2=3 a3=0 items=0 ppid=1 pid=5257 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=12 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:55:59.643304 kernel: audit: type=1300 audit(1742237759.594:1397): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7fffbc4a17a0 a2=3 a3=0 items=0 ppid=1 pid=5257 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=12 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:55:59.660763 kernel: audit: type=1327 audit(1742237759.594:1397): proctitle=737368643A20636F7265205B707269765D Mar 17 18:55:59.594000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Mar 17 18:55:59.627000 audit[5257]: USER_START pid=5257 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Mar 17 18:55:59.667295 kernel: audit: type=1105 audit(1742237759.627:1398): pid=5257 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Mar 17 18:55:59.629000 audit[5259]: CRED_ACQ pid=5259 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Mar 17 18:55:59.686282 kernel: audit: type=1103 audit(1742237759.629:1399): pid=5259 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Mar 17 18:56:00.124770 sshd[5257]: pam_unix(sshd:session): session closed for user core Mar 17 18:56:00.124000 audit[5257]: USER_END pid=5257 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Mar 17 18:56:00.130962 systemd-logind[1398]: Session 12 logged out. Waiting for processes to exit. Mar 17 18:56:00.132348 systemd[1]: sshd@9-10.200.8.35:22-10.200.16.10:33800.service: Deactivated successfully. Mar 17 18:56:00.133136 systemd[1]: session-12.scope: Deactivated successfully. Mar 17 18:56:00.134407 systemd-logind[1398]: Removed session 12. Mar 17 18:56:00.151683 kernel: audit: type=1106 audit(1742237760.124:1400): pid=5257 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Mar 17 18:56:00.151796 kernel: audit: type=1104 audit(1742237760.124:1401): pid=5257 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Mar 17 18:56:00.124000 audit[5257]: CRED_DISP pid=5257 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Mar 17 18:56:00.130000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@9-10.200.8.35:22-10.200.16.10:33800 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:56:00.254305 systemd[1]: Started sshd@10-10.200.8.35:22-10.200.16.10:33816.service. Mar 17 18:56:00.253000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@10-10.200.8.35:22-10.200.16.10:33816 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:56:00.325000 audit[4482]: AVC avc: denied { watch } for pid=4482 comm="apiserver" path="/calico-apiserver-certs/..2025_03_17_18_53_40.4205256663/tls.crt" dev="tmpfs" ino=3 scontext=system_u:system_r:svirt_lxc_net_t:s0:c211,c345 tcontext=system_u:object_r:svirt_lxc_file_t:s0:c211,c345 tclass=file permissive=0 Mar 17 18:56:00.325000 audit[4482]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=8 a1=c001074560 a2=fc6 a3=0 items=0 ppid=4165 pid=4482 auid=4294967295 uid=10001 gid=10001 euid=10001 suid=10001 fsuid=10001 egid=10001 sgid=10001 fsgid=10001 tty=(none) ses=4294967295 comm="apiserver" exe="/code/apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c211,c345 key=(null) Mar 17 18:56:00.325000 audit: PROCTITLE proctitle=2F636F64652F617069736572766572002D2D7365637572652D706F72743D35343433002D2D746C732D707269766174652D6B65792D66696C653D2F63616C69636F2D6170697365727665722D63657274732F746C732E6B6579002D2D746C732D636572742D66696C653D2F63616C69636F2D6170697365727665722D63657274 Mar 17 18:56:00.882000 audit[5269]: USER_ACCT pid=5269 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Mar 17 18:56:00.884449 sshd[5269]: Accepted publickey for core from 10.200.16.10 port 33816 ssh2: RSA SHA256:Id7fTtJmja0nOLdf0IQA3jnxxJrUKKdGU1UW83zjTQg Mar 17 18:56:00.884000 audit[5269]: CRED_ACQ pid=5269 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Mar 17 18:56:00.884000 audit[5269]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffd0ce8e240 a2=3 a3=0 items=0 ppid=1 pid=5269 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=13 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:56:00.884000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Mar 17 18:56:00.885834 sshd[5269]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Mar 17 18:56:00.890781 systemd[1]: Started session-13.scope. Mar 17 18:56:00.891400 systemd-logind[1398]: New session 13 of user core. Mar 17 18:56:00.894000 audit[5269]: USER_START pid=5269 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Mar 17 18:56:00.896000 audit[5271]: CRED_ACQ pid=5271 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Mar 17 18:56:00.949000 audit[4522]: AVC avc: denied { watch } for pid=4522 comm="apiserver" path="/calico-apiserver-certs/..2025_03_17_18_53_40.2855878070/tls.crt" dev="tmpfs" ino=4 scontext=system_u:system_r:svirt_lxc_net_t:s0:c206,c226 tcontext=system_u:object_r:svirt_lxc_file_t:s0:c206,c226 tclass=file permissive=0 Mar 17 18:56:00.949000 audit[4522]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=7 a1=c000de0ac0 a2=fc6 a3=0 items=0 ppid=4222 pid=4522 auid=4294967295 uid=10001 gid=10001 euid=10001 suid=10001 fsuid=10001 egid=10001 sgid=10001 fsgid=10001 tty=(none) ses=4294967295 comm="apiserver" exe="/code/apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c206,c226 key=(null) Mar 17 18:56:00.949000 audit: PROCTITLE proctitle=2F636F64652F617069736572766572002D2D7365637572652D706F72743D35343433002D2D746C732D707269766174652D6B65792D66696C653D2F63616C69636F2D6170697365727665722D63657274732F746C732E6B6579002D2D746C732D636572742D66696C653D2F63616C69636F2D6170697365727665722D63657274 Mar 17 18:56:01.429781 sshd[5269]: pam_unix(sshd:session): session closed for user core Mar 17 18:56:01.430000 audit[5269]: USER_END pid=5269 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Mar 17 18:56:01.433622 systemd[1]: sshd@10-10.200.8.35:22-10.200.16.10:33816.service: Deactivated successfully. Mar 17 18:56:01.430000 audit[5269]: CRED_DISP pid=5269 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Mar 17 18:56:01.432000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@10-10.200.8.35:22-10.200.16.10:33816 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:56:01.434922 systemd[1]: session-13.scope: Deactivated successfully. Mar 17 18:56:01.434939 systemd-logind[1398]: Session 13 logged out. Waiting for processes to exit. Mar 17 18:56:01.435995 systemd-logind[1398]: Removed session 13. Mar 17 18:56:01.533000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@11-10.200.8.35:22-10.200.16.10:33824 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:56:01.534779 systemd[1]: Started sshd@11-10.200.8.35:22-10.200.16.10:33824.service. Mar 17 18:56:02.164000 audit[5279]: USER_ACCT pid=5279 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Mar 17 18:56:02.165839 sshd[5279]: Accepted publickey for core from 10.200.16.10 port 33824 ssh2: RSA SHA256:Id7fTtJmja0nOLdf0IQA3jnxxJrUKKdGU1UW83zjTQg Mar 17 18:56:02.165000 audit[5279]: CRED_ACQ pid=5279 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Mar 17 18:56:02.165000 audit[5279]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffc7f4a36b0 a2=3 a3=0 items=0 ppid=1 pid=5279 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=14 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:56:02.165000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Mar 17 18:56:02.167256 sshd[5279]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Mar 17 18:56:02.172313 systemd[1]: Started session-14.scope. Mar 17 18:56:02.172795 systemd-logind[1398]: New session 14 of user core. Mar 17 18:56:02.176000 audit[5279]: USER_START pid=5279 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Mar 17 18:56:02.177000 audit[5281]: CRED_ACQ pid=5281 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Mar 17 18:56:02.666915 sshd[5279]: pam_unix(sshd:session): session closed for user core Mar 17 18:56:02.667000 audit[5279]: USER_END pid=5279 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Mar 17 18:56:02.667000 audit[5279]: CRED_DISP pid=5279 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Mar 17 18:56:02.670510 systemd[1]: sshd@11-10.200.8.35:22-10.200.16.10:33824.service: Deactivated successfully. Mar 17 18:56:02.669000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@11-10.200.8.35:22-10.200.16.10:33824 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:56:02.671598 systemd[1]: session-14.scope: Deactivated successfully. Mar 17 18:56:02.672328 systemd-logind[1398]: Session 14 logged out. Waiting for processes to exit. Mar 17 18:56:02.673094 systemd-logind[1398]: Removed session 14. Mar 17 18:56:04.159813 systemd[1]: run-containerd-runc-k8s.io-23d1c930fdae8fdcdaa6d8440934bb876648bde06d1cd24e876f111607576e01-runc.gdNyRc.mount: Deactivated successfully. Mar 17 18:56:07.775000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@12-10.200.8.35:22-10.200.16.10:33832 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:56:07.776067 systemd[1]: Started sshd@12-10.200.8.35:22-10.200.16.10:33832.service. Mar 17 18:56:07.793123 kernel: kauditd_printk_skb: 29 callbacks suppressed Mar 17 18:56:07.793189 kernel: audit: type=1130 audit(1742237767.775:1423): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@12-10.200.8.35:22-10.200.16.10:33832 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:56:08.415000 audit[5309]: USER_ACCT pid=5309 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Mar 17 18:56:08.436716 sshd[5309]: Accepted publickey for core from 10.200.16.10 port 33832 ssh2: RSA SHA256:Id7fTtJmja0nOLdf0IQA3jnxxJrUKKdGU1UW83zjTQg Mar 17 18:56:08.435000 audit[5309]: CRED_ACQ pid=5309 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Mar 17 18:56:08.437150 sshd[5309]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Mar 17 18:56:08.442420 systemd[1]: Started session-15.scope. Mar 17 18:56:08.443505 systemd-logind[1398]: New session 15 of user core. Mar 17 18:56:08.454592 kernel: audit: type=1101 audit(1742237768.415:1424): pid=5309 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Mar 17 18:56:08.454670 kernel: audit: type=1103 audit(1742237768.435:1425): pid=5309 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Mar 17 18:56:08.454698 kernel: audit: type=1006 audit(1742237768.435:1426): pid=5309 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=15 res=1 Mar 17 18:56:08.435000 audit[5309]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7fff3aae66d0 a2=3 a3=0 items=0 ppid=1 pid=5309 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=15 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:56:08.483327 kernel: audit: type=1300 audit(1742237768.435:1426): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7fff3aae66d0 a2=3 a3=0 items=0 ppid=1 pid=5309 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=15 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:56:08.435000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Mar 17 18:56:08.484282 kernel: audit: type=1327 audit(1742237768.435:1426): proctitle=737368643A20636F7265205B707269765D Mar 17 18:56:08.447000 audit[5309]: USER_START pid=5309 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Mar 17 18:56:08.490282 kernel: audit: type=1105 audit(1742237768.447:1427): pid=5309 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Mar 17 18:56:08.450000 audit[5311]: CRED_ACQ pid=5311 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Mar 17 18:56:08.509290 kernel: audit: type=1103 audit(1742237768.450:1428): pid=5311 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Mar 17 18:56:08.930988 sshd[5309]: pam_unix(sshd:session): session closed for user core Mar 17 18:56:08.931000 audit[5309]: USER_END pid=5309 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Mar 17 18:56:08.934820 systemd[1]: sshd@12-10.200.8.35:22-10.200.16.10:33832.service: Deactivated successfully. Mar 17 18:56:08.935621 systemd[1]: session-15.scope: Deactivated successfully. Mar 17 18:56:08.939402 systemd-logind[1398]: Session 15 logged out. Waiting for processes to exit. Mar 17 18:56:08.940385 systemd-logind[1398]: Removed session 15. Mar 17 18:56:08.954286 kernel: audit: type=1106 audit(1742237768.931:1429): pid=5309 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Mar 17 18:56:08.954360 kernel: audit: type=1104 audit(1742237768.931:1430): pid=5309 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Mar 17 18:56:08.931000 audit[5309]: CRED_DISP pid=5309 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Mar 17 18:56:08.931000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@12-10.200.8.35:22-10.200.16.10:33832 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:56:10.635000 audit[2323]: AVC avc: denied { watch } for pid=2323 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=7361 scontext=system_u:system_r:svirt_lxc_net_t:s0:c454,c669 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Mar 17 18:56:10.635000 audit[2323]: AVC avc: denied { watch } for pid=2323 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=7355 scontext=system_u:system_r:svirt_lxc_net_t:s0:c454,c669 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Mar 17 18:56:10.635000 audit[2323]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=9 a1=c002046580 a2=fc6 a3=0 items=0 ppid=2152 pid=2323 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c454,c669 key=(null) Mar 17 18:56:10.635000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Mar 17 18:56:10.635000 audit[2323]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c002112ab0 a2=fc6 a3=0 items=0 ppid=2152 pid=2323 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c454,c669 key=(null) Mar 17 18:56:10.635000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Mar 17 18:56:11.019000 audit[2272]: AVC avc: denied { watch } for pid=2272 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=7355 scontext=system_u:system_r:svirt_lxc_net_t:s0:c306,c585 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Mar 17 18:56:11.019000 audit[2272]: AVC avc: denied { watch } for pid=2272 comm="kube-apiserver" path="/etc/kubernetes/pki/apiserver.crt" dev="sda9" ino=7357 scontext=system_u:system_r:svirt_lxc_net_t:s0:c306,c585 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Mar 17 18:56:11.019000 audit[2272]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=62 a1=c011db3280 a2=fc6 a3=0 items=0 ppid=2131 pid=2272 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c306,c585 key=(null) Mar 17 18:56:11.019000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E382E3335002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265 Mar 17 18:56:11.019000 audit[2272]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=63 a1=c011e2e0c0 a2=fc6 a3=0 items=0 ppid=2131 pid=2272 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c306,c585 key=(null) Mar 17 18:56:11.019000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E382E3335002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265 Mar 17 18:56:11.019000 audit[2272]: AVC avc: denied { watch } for pid=2272 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=7361 scontext=system_u:system_r:svirt_lxc_net_t:s0:c306,c585 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Mar 17 18:56:11.019000 audit[2272]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=63 a1=c011e2e1e0 a2=fc6 a3=0 items=0 ppid=2131 pid=2272 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c306,c585 key=(null) Mar 17 18:56:11.019000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E382E3335002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265 Mar 17 18:56:11.022000 audit[2272]: AVC avc: denied { watch } for pid=2272 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-client.crt" dev="sda9" ino=7363 scontext=system_u:system_r:svirt_lxc_net_t:s0:c306,c585 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Mar 17 18:56:11.022000 audit[2272]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=62 a1=c011dee6f0 a2=fc6 a3=0 items=0 ppid=2131 pid=2272 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c306,c585 key=(null) Mar 17 18:56:11.022000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E382E3335002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265 Mar 17 18:56:11.028000 audit[2272]: AVC avc: denied { watch } for pid=2272 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=7361 scontext=system_u:system_r:svirt_lxc_net_t:s0:c306,c585 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Mar 17 18:56:11.028000 audit[2272]: AVC avc: denied { watch } for pid=2272 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=7355 scontext=system_u:system_r:svirt_lxc_net_t:s0:c306,c585 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Mar 17 18:56:11.028000 audit[2272]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=62 a1=c011e2e270 a2=fc6 a3=0 items=0 ppid=2131 pid=2272 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c306,c585 key=(null) Mar 17 18:56:11.028000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E382E3335002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265 Mar 17 18:56:11.028000 audit[2272]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=63 a1=c011db33e0 a2=fc6 a3=0 items=0 ppid=2131 pid=2272 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c306,c585 key=(null) Mar 17 18:56:11.028000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E382E3335002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265 Mar 17 18:56:14.035000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@13-10.200.8.35:22-10.200.16.10:40316 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:56:14.036774 systemd[1]: Started sshd@13-10.200.8.35:22-10.200.16.10:40316.service. Mar 17 18:56:14.042323 kernel: kauditd_printk_skb: 25 callbacks suppressed Mar 17 18:56:14.042395 kernel: audit: type=1130 audit(1742237774.035:1440): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@13-10.200.8.35:22-10.200.16.10:40316 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:56:14.664000 audit[5327]: USER_ACCT pid=5327 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Mar 17 18:56:14.686027 sshd[5327]: Accepted publickey for core from 10.200.16.10 port 40316 ssh2: RSA SHA256:Id7fTtJmja0nOLdf0IQA3jnxxJrUKKdGU1UW83zjTQg Mar 17 18:56:14.686389 kernel: audit: type=1101 audit(1742237774.664:1441): pid=5327 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Mar 17 18:56:14.684000 audit[5327]: CRED_ACQ pid=5327 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Mar 17 18:56:14.686612 sshd[5327]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Mar 17 18:56:14.691793 systemd[1]: Started session-16.scope. Mar 17 18:56:14.692906 systemd-logind[1398]: New session 16 of user core. Mar 17 18:56:14.714055 kernel: audit: type=1103 audit(1742237774.684:1442): pid=5327 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Mar 17 18:56:14.714143 kernel: audit: type=1006 audit(1742237774.684:1443): pid=5327 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=16 res=1 Mar 17 18:56:14.714175 kernel: audit: type=1300 audit(1742237774.684:1443): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffd11f9c670 a2=3 a3=0 items=0 ppid=1 pid=5327 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=16 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:56:14.684000 audit[5327]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffd11f9c670 a2=3 a3=0 items=0 ppid=1 pid=5327 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=16 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:56:14.684000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Mar 17 18:56:14.737962 kernel: audit: type=1327 audit(1742237774.684:1443): proctitle=737368643A20636F7265205B707269765D Mar 17 18:56:14.738036 kernel: audit: type=1105 audit(1742237774.696:1444): pid=5327 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Mar 17 18:56:14.696000 audit[5327]: USER_START pid=5327 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Mar 17 18:56:14.696000 audit[5329]: CRED_ACQ pid=5329 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Mar 17 18:56:14.772727 kernel: audit: type=1103 audit(1742237774.696:1445): pid=5329 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Mar 17 18:56:15.067000 audit[2323]: AVC avc: denied { watch } for pid=2323 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=7355 scontext=system_u:system_r:svirt_lxc_net_t:s0:c454,c669 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Mar 17 18:56:15.096403 kernel: audit: type=1400 audit(1742237775.067:1446): avc: denied { watch } for pid=2323 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=7355 scontext=system_u:system_r:svirt_lxc_net_t:s0:c454,c669 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Mar 17 18:56:15.096513 kernel: audit: type=1400 audit(1742237775.067:1447): avc: denied { watch } for pid=2323 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=7355 scontext=system_u:system_r:svirt_lxc_net_t:s0:c454,c669 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Mar 17 18:56:15.067000 audit[2323]: AVC avc: denied { watch } for pid=2323 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=7355 scontext=system_u:system_r:svirt_lxc_net_t:s0:c454,c669 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Mar 17 18:56:15.067000 audit[2323]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c002ad8360 a2=fc6 a3=0 items=0 ppid=2152 pid=2323 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c454,c669 key=(null) Mar 17 18:56:15.067000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Mar 17 18:56:15.067000 audit[2323]: AVC avc: denied { watch } for pid=2323 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=7355 scontext=system_u:system_r:svirt_lxc_net_t:s0:c454,c669 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Mar 17 18:56:15.067000 audit[2323]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c002ad8500 a2=fc6 a3=0 items=0 ppid=2152 pid=2323 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c454,c669 key=(null) Mar 17 18:56:15.067000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Mar 17 18:56:15.067000 audit[2323]: AVC avc: denied { watch } for pid=2323 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=7355 scontext=system_u:system_r:svirt_lxc_net_t:s0:c454,c669 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Mar 17 18:56:15.067000 audit[2323]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c002ad86a0 a2=fc6 a3=0 items=0 ppid=2152 pid=2323 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c454,c669 key=(null) Mar 17 18:56:15.067000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Mar 17 18:56:15.067000 audit[2323]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=9 a1=c0028c8940 a2=fc6 a3=0 items=0 ppid=2152 pid=2323 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c454,c669 key=(null) Mar 17 18:56:15.067000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Mar 17 18:56:15.201537 sshd[5327]: pam_unix(sshd:session): session closed for user core Mar 17 18:56:15.201000 audit[5327]: USER_END pid=5327 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Mar 17 18:56:15.202000 audit[5327]: CRED_DISP pid=5327 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Mar 17 18:56:15.205014 systemd[1]: sshd@13-10.200.8.35:22-10.200.16.10:40316.service: Deactivated successfully. Mar 17 18:56:15.204000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@13-10.200.8.35:22-10.200.16.10:40316 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:56:15.206213 systemd[1]: session-16.scope: Deactivated successfully. Mar 17 18:56:15.206898 systemd-logind[1398]: Session 16 logged out. Waiting for processes to exit. Mar 17 18:56:15.207726 systemd-logind[1398]: Removed session 16. Mar 17 18:56:15.771384 systemd[1]: run-containerd-runc-k8s.io-23d1c930fdae8fdcdaa6d8440934bb876648bde06d1cd24e876f111607576e01-runc.r59Dsv.mount: Deactivated successfully. Mar 17 18:56:20.106619 systemd[1]: run-containerd-runc-k8s.io-8210af86bf3c1d7b8307d59b92cdaa67dec84cfe373fd9efa32d6fbc32f1d9f2-runc.LTLODC.mount: Deactivated successfully. Mar 17 18:56:20.331707 kernel: kauditd_printk_skb: 13 callbacks suppressed Mar 17 18:56:20.331842 kernel: audit: type=1130 audit(1742237780.306:1453): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@14-10.200.8.35:22-10.200.16.10:47340 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:56:20.306000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@14-10.200.8.35:22-10.200.16.10:47340 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:56:20.307750 systemd[1]: Started sshd@14-10.200.8.35:22-10.200.16.10:47340.service. Mar 17 18:56:20.936000 audit[5380]: USER_ACCT pid=5380 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Mar 17 18:56:20.938164 sshd[5380]: Accepted publickey for core from 10.200.16.10 port 47340 ssh2: RSA SHA256:Id7fTtJmja0nOLdf0IQA3jnxxJrUKKdGU1UW83zjTQg Mar 17 18:56:20.958156 sshd[5380]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Mar 17 18:56:20.958504 kernel: audit: type=1101 audit(1742237780.936:1454): pid=5380 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Mar 17 18:56:20.956000 audit[5380]: CRED_ACQ pid=5380 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Mar 17 18:56:20.970039 systemd[1]: Started session-17.scope. Mar 17 18:56:20.971187 systemd-logind[1398]: New session 17 of user core. Mar 17 18:56:20.981286 kernel: audit: type=1103 audit(1742237780.956:1455): pid=5380 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Mar 17 18:56:20.981371 kernel: audit: type=1006 audit(1742237780.956:1456): pid=5380 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=17 res=1 Mar 17 18:56:20.956000 audit[5380]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffe12dbb1f0 a2=3 a3=0 items=0 ppid=1 pid=5380 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=17 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:56:21.010767 kernel: audit: type=1300 audit(1742237780.956:1456): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffe12dbb1f0 a2=3 a3=0 items=0 ppid=1 pid=5380 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=17 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:56:21.012225 kernel: audit: type=1327 audit(1742237780.956:1456): proctitle=737368643A20636F7265205B707269765D Mar 17 18:56:20.956000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Mar 17 18:56:20.977000 audit[5380]: USER_START pid=5380 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Mar 17 18:56:21.037574 kernel: audit: type=1105 audit(1742237780.977:1457): pid=5380 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Mar 17 18:56:20.979000 audit[5382]: CRED_ACQ pid=5382 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Mar 17 18:56:21.055307 kernel: audit: type=1103 audit(1742237780.979:1458): pid=5382 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Mar 17 18:56:21.494634 sshd[5380]: pam_unix(sshd:session): session closed for user core Mar 17 18:56:21.494000 audit[5380]: USER_END pid=5380 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Mar 17 18:56:21.517302 kernel: audit: type=1106 audit(1742237781.494:1459): pid=5380 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Mar 17 18:56:21.517443 systemd[1]: sshd@14-10.200.8.35:22-10.200.16.10:47340.service: Deactivated successfully. Mar 17 18:56:21.518563 systemd[1]: session-17.scope: Deactivated successfully. Mar 17 18:56:21.494000 audit[5380]: CRED_DISP pid=5380 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Mar 17 18:56:21.519303 systemd-logind[1398]: Session 17 logged out. Waiting for processes to exit. Mar 17 18:56:21.520341 systemd-logind[1398]: Removed session 17. Mar 17 18:56:21.516000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@14-10.200.8.35:22-10.200.16.10:47340 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:56:21.538283 kernel: audit: type=1104 audit(1742237781.494:1460): pid=5380 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Mar 17 18:56:21.601116 systemd[1]: Started sshd@15-10.200.8.35:22-10.200.16.10:47350.service. Mar 17 18:56:21.600000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@15-10.200.8.35:22-10.200.16.10:47350 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:56:22.231000 audit[5393]: USER_ACCT pid=5393 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Mar 17 18:56:22.233124 sshd[5393]: Accepted publickey for core from 10.200.16.10 port 47350 ssh2: RSA SHA256:Id7fTtJmja0nOLdf0IQA3jnxxJrUKKdGU1UW83zjTQg Mar 17 18:56:22.234415 sshd[5393]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Mar 17 18:56:22.232000 audit[5393]: CRED_ACQ pid=5393 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Mar 17 18:56:22.232000 audit[5393]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffc711572e0 a2=3 a3=0 items=0 ppid=1 pid=5393 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=18 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:56:22.232000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Mar 17 18:56:22.239840 systemd[1]: Started session-18.scope. Mar 17 18:56:22.240494 systemd-logind[1398]: New session 18 of user core. Mar 17 18:56:22.245000 audit[5393]: USER_START pid=5393 uid=0 auid=500 ses=18 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Mar 17 18:56:22.247000 audit[5395]: CRED_ACQ pid=5395 uid=0 auid=500 ses=18 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Mar 17 18:56:22.806518 sshd[5393]: pam_unix(sshd:session): session closed for user core Mar 17 18:56:22.806000 audit[5393]: USER_END pid=5393 uid=0 auid=500 ses=18 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Mar 17 18:56:22.806000 audit[5393]: CRED_DISP pid=5393 uid=0 auid=500 ses=18 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Mar 17 18:56:22.809376 systemd[1]: sshd@15-10.200.8.35:22-10.200.16.10:47350.service: Deactivated successfully. Mar 17 18:56:22.808000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@15-10.200.8.35:22-10.200.16.10:47350 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:56:22.810683 systemd-logind[1398]: Session 18 logged out. Waiting for processes to exit. Mar 17 18:56:22.810780 systemd[1]: session-18.scope: Deactivated successfully. Mar 17 18:56:22.812039 systemd-logind[1398]: Removed session 18. Mar 17 18:56:22.916000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@16-10.200.8.35:22-10.200.16.10:47360 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:56:22.917629 systemd[1]: Started sshd@16-10.200.8.35:22-10.200.16.10:47360.service. Mar 17 18:56:23.545000 audit[5402]: USER_ACCT pid=5402 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Mar 17 18:56:23.547451 sshd[5402]: Accepted publickey for core from 10.200.16.10 port 47360 ssh2: RSA SHA256:Id7fTtJmja0nOLdf0IQA3jnxxJrUKKdGU1UW83zjTQg Mar 17 18:56:23.547000 audit[5402]: CRED_ACQ pid=5402 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Mar 17 18:56:23.547000 audit[5402]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffd093dfee0 a2=3 a3=0 items=0 ppid=1 pid=5402 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=19 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:56:23.547000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Mar 17 18:56:23.548870 sshd[5402]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Mar 17 18:56:23.553951 systemd[1]: Started session-19.scope. Mar 17 18:56:23.554574 systemd-logind[1398]: New session 19 of user core. Mar 17 18:56:23.557000 audit[5402]: USER_START pid=5402 uid=0 auid=500 ses=19 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Mar 17 18:56:23.559000 audit[5404]: CRED_ACQ pid=5404 uid=0 auid=500 ses=19 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Mar 17 18:56:24.766000 audit[5414]: NETFILTER_CFG table=filter:126 family=2 entries=20 op=nft_register_rule pid=5414 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Mar 17 18:56:24.766000 audit[5414]: SYSCALL arch=c000003e syscall=46 success=yes exit=11944 a0=3 a1=7ffe677c8580 a2=0 a3=7ffe677c856c items=0 ppid=2619 pid=5414 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:56:24.766000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Mar 17 18:56:24.773000 audit[5414]: NETFILTER_CFG table=nat:127 family=2 entries=22 op=nft_register_rule pid=5414 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Mar 17 18:56:24.773000 audit[5414]: SYSCALL arch=c000003e syscall=46 success=yes exit=6540 a0=3 a1=7ffe677c8580 a2=0 a3=0 items=0 ppid=2619 pid=5414 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:56:24.773000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Mar 17 18:56:24.795000 audit[5416]: NETFILTER_CFG table=filter:128 family=2 entries=32 op=nft_register_rule pid=5416 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Mar 17 18:56:24.795000 audit[5416]: SYSCALL arch=c000003e syscall=46 success=yes exit=11944 a0=3 a1=7ffe655e0cb0 a2=0 a3=7ffe655e0c9c items=0 ppid=2619 pid=5416 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:56:24.795000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Mar 17 18:56:24.805000 audit[5416]: NETFILTER_CFG table=nat:129 family=2 entries=22 op=nft_register_rule pid=5416 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Mar 17 18:56:24.805000 audit[5416]: SYSCALL arch=c000003e syscall=46 success=yes exit=6540 a0=3 a1=7ffe655e0cb0 a2=0 a3=0 items=0 ppid=2619 pid=5416 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:56:24.805000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Mar 17 18:56:24.888876 sshd[5402]: pam_unix(sshd:session): session closed for user core Mar 17 18:56:24.889000 audit[5402]: USER_END pid=5402 uid=0 auid=500 ses=19 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Mar 17 18:56:24.889000 audit[5402]: CRED_DISP pid=5402 uid=0 auid=500 ses=19 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Mar 17 18:56:24.892445 systemd[1]: sshd@16-10.200.8.35:22-10.200.16.10:47360.service: Deactivated successfully. Mar 17 18:56:24.893449 systemd[1]: session-19.scope: Deactivated successfully. Mar 17 18:56:24.891000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@16-10.200.8.35:22-10.200.16.10:47360 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:56:24.894253 systemd-logind[1398]: Session 19 logged out. Waiting for processes to exit. Mar 17 18:56:24.895249 systemd-logind[1398]: Removed session 19. Mar 17 18:56:24.994060 systemd[1]: Started sshd@17-10.200.8.35:22-10.200.16.10:47370.service. Mar 17 18:56:25.001000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@17-10.200.8.35:22-10.200.16.10:47370 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:56:25.641571 kernel: kauditd_printk_skb: 36 callbacks suppressed Mar 17 18:56:25.641681 kernel: audit: type=1101 audit(1742237785.634:1485): pid=5419 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Mar 17 18:56:25.634000 audit[5419]: USER_ACCT pid=5419 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Mar 17 18:56:25.637134 sshd[5419]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Mar 17 18:56:25.642021 sshd[5419]: Accepted publickey for core from 10.200.16.10 port 47370 ssh2: RSA SHA256:Id7fTtJmja0nOLdf0IQA3jnxxJrUKKdGU1UW83zjTQg Mar 17 18:56:25.652850 systemd[1]: Started session-20.scope. Mar 17 18:56:25.654431 systemd-logind[1398]: New session 20 of user core. Mar 17 18:56:25.635000 audit[5419]: CRED_ACQ pid=5419 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Mar 17 18:56:25.689417 kernel: audit: type=1103 audit(1742237785.635:1486): pid=5419 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Mar 17 18:56:25.689526 kernel: audit: type=1006 audit(1742237785.635:1487): pid=5419 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=20 res=1 Mar 17 18:56:25.691281 kernel: audit: type=1300 audit(1742237785.635:1487): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7fff53200380 a2=3 a3=0 items=0 ppid=1 pid=5419 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=20 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:56:25.635000 audit[5419]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7fff53200380 a2=3 a3=0 items=0 ppid=1 pid=5419 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=20 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:56:25.635000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Mar 17 18:56:25.708324 kernel: audit: type=1327 audit(1742237785.635:1487): proctitle=737368643A20636F7265205B707269765D Mar 17 18:56:25.658000 audit[5419]: USER_START pid=5419 uid=0 auid=500 ses=20 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Mar 17 18:56:25.733190 kernel: audit: type=1105 audit(1742237785.658:1488): pid=5419 uid=0 auid=500 ses=20 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Mar 17 18:56:25.662000 audit[5421]: CRED_ACQ pid=5421 uid=0 auid=500 ses=20 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Mar 17 18:56:25.750293 kernel: audit: type=1103 audit(1742237785.662:1489): pid=5421 uid=0 auid=500 ses=20 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Mar 17 18:56:26.261865 sshd[5419]: pam_unix(sshd:session): session closed for user core Mar 17 18:56:26.262000 audit[5419]: USER_END pid=5419 uid=0 auid=500 ses=20 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Mar 17 18:56:26.265777 systemd[1]: sshd@17-10.200.8.35:22-10.200.16.10:47370.service: Deactivated successfully. Mar 17 18:56:26.266752 systemd[1]: session-20.scope: Deactivated successfully. Mar 17 18:56:26.268310 systemd-logind[1398]: Session 20 logged out. Waiting for processes to exit. Mar 17 18:56:26.269509 systemd-logind[1398]: Removed session 20. Mar 17 18:56:26.284299 kernel: audit: type=1106 audit(1742237786.262:1490): pid=5419 uid=0 auid=500 ses=20 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Mar 17 18:56:26.284370 kernel: audit: type=1104 audit(1742237786.262:1491): pid=5419 uid=0 auid=500 ses=20 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Mar 17 18:56:26.262000 audit[5419]: CRED_DISP pid=5419 uid=0 auid=500 ses=20 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Mar 17 18:56:26.262000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@17-10.200.8.35:22-10.200.16.10:47370 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:56:26.315612 kernel: audit: type=1131 audit(1742237786.262:1492): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@17-10.200.8.35:22-10.200.16.10:47370 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:56:26.367834 systemd[1]: Started sshd@18-10.200.8.35:22-10.200.16.10:47372.service. Mar 17 18:56:26.367000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@18-10.200.8.35:22-10.200.16.10:47372 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:56:26.995000 audit[5429]: USER_ACCT pid=5429 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Mar 17 18:56:26.997302 sshd[5429]: Accepted publickey for core from 10.200.16.10 port 47372 ssh2: RSA SHA256:Id7fTtJmja0nOLdf0IQA3jnxxJrUKKdGU1UW83zjTQg Mar 17 18:56:26.997000 audit[5429]: CRED_ACQ pid=5429 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Mar 17 18:56:26.997000 audit[5429]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffe574b1ea0 a2=3 a3=0 items=0 ppid=1 pid=5429 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=21 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:56:26.997000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Mar 17 18:56:26.999177 sshd[5429]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Mar 17 18:56:27.004251 systemd-logind[1398]: New session 21 of user core. Mar 17 18:56:27.004834 systemd[1]: Started session-21.scope. Mar 17 18:56:27.008000 audit[5429]: USER_START pid=5429 uid=0 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Mar 17 18:56:27.009000 audit[5431]: CRED_ACQ pid=5431 uid=0 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Mar 17 18:56:27.491455 sshd[5429]: pam_unix(sshd:session): session closed for user core Mar 17 18:56:27.491000 audit[5429]: USER_END pid=5429 uid=0 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Mar 17 18:56:27.491000 audit[5429]: CRED_DISP pid=5429 uid=0 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Mar 17 18:56:27.494970 systemd[1]: sshd@18-10.200.8.35:22-10.200.16.10:47372.service: Deactivated successfully. Mar 17 18:56:27.493000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@18-10.200.8.35:22-10.200.16.10:47372 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:56:27.496062 systemd[1]: session-21.scope: Deactivated successfully. Mar 17 18:56:27.497196 systemd-logind[1398]: Session 21 logged out. Waiting for processes to exit. Mar 17 18:56:27.498115 systemd-logind[1398]: Removed session 21. Mar 17 18:56:32.071309 kernel: kauditd_printk_skb: 11 callbacks suppressed Mar 17 18:56:32.071450 kernel: audit: type=1325 audit(1742237792.064:1502): table=filter:130 family=2 entries=20 op=nft_register_rule pid=5447 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Mar 17 18:56:32.064000 audit[5447]: NETFILTER_CFG table=filter:130 family=2 entries=20 op=nft_register_rule pid=5447 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Mar 17 18:56:32.083286 kernel: audit: type=1300 audit(1742237792.064:1502): arch=c000003e syscall=46 success=yes exit=3016 a0=3 a1=7ffec6044680 a2=0 a3=7ffec604466c items=0 ppid=2619 pid=5447 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:56:32.064000 audit[5447]: SYSCALL arch=c000003e syscall=46 success=yes exit=3016 a0=3 a1=7ffec6044680 a2=0 a3=7ffec604466c items=0 ppid=2619 pid=5447 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:56:32.064000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Mar 17 18:56:32.111021 kernel: audit: type=1327 audit(1742237792.064:1502): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Mar 17 18:56:32.111374 kernel: audit: type=1325 audit(1742237792.101:1503): table=nat:131 family=2 entries=106 op=nft_register_chain pid=5447 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Mar 17 18:56:32.101000 audit[5447]: NETFILTER_CFG table=nat:131 family=2 entries=106 op=nft_register_chain pid=5447 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Mar 17 18:56:32.122793 kernel: audit: type=1300 audit(1742237792.101:1503): arch=c000003e syscall=46 success=yes exit=49452 a0=3 a1=7ffec6044680 a2=0 a3=7ffec604466c items=0 ppid=2619 pid=5447 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:56:32.101000 audit[5447]: SYSCALL arch=c000003e syscall=46 success=yes exit=49452 a0=3 a1=7ffec6044680 a2=0 a3=7ffec604466c items=0 ppid=2619 pid=5447 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:56:32.101000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Mar 17 18:56:32.143286 kernel: audit: type=1327 audit(1742237792.101:1503): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Mar 17 18:56:32.595000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@19-10.200.8.35:22-10.200.16.10:59542 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:56:32.596954 systemd[1]: Started sshd@19-10.200.8.35:22-10.200.16.10:59542.service. Mar 17 18:56:32.615299 kernel: audit: type=1130 audit(1742237792.595:1504): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@19-10.200.8.35:22-10.200.16.10:59542 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:56:33.227000 audit[5449]: USER_ACCT pid=5449 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Mar 17 18:56:33.228926 sshd[5449]: Accepted publickey for core from 10.200.16.10 port 59542 ssh2: RSA SHA256:Id7fTtJmja0nOLdf0IQA3jnxxJrUKKdGU1UW83zjTQg Mar 17 18:56:33.249295 kernel: audit: type=1101 audit(1742237793.227:1505): pid=5449 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Mar 17 18:56:33.249420 kernel: audit: type=1103 audit(1742237793.247:1506): pid=5449 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Mar 17 18:56:33.247000 audit[5449]: CRED_ACQ pid=5449 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Mar 17 18:56:33.249837 sshd[5449]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Mar 17 18:56:33.255258 systemd-logind[1398]: New session 22 of user core. Mar 17 18:56:33.257964 systemd[1]: Started session-22.scope. Mar 17 18:56:33.278026 kernel: audit: type=1006 audit(1742237793.247:1507): pid=5449 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=22 res=1 Mar 17 18:56:33.247000 audit[5449]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffe74412b90 a2=3 a3=0 items=0 ppid=1 pid=5449 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=22 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:56:33.247000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Mar 17 18:56:33.262000 audit[5449]: USER_START pid=5449 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Mar 17 18:56:33.264000 audit[5451]: CRED_ACQ pid=5451 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Mar 17 18:56:33.730327 sshd[5449]: pam_unix(sshd:session): session closed for user core Mar 17 18:56:33.730000 audit[5449]: USER_END pid=5449 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Mar 17 18:56:33.730000 audit[5449]: CRED_DISP pid=5449 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Mar 17 18:56:33.734092 systemd[1]: sshd@19-10.200.8.35:22-10.200.16.10:59542.service: Deactivated successfully. Mar 17 18:56:33.733000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@19-10.200.8.35:22-10.200.16.10:59542 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:56:33.735181 systemd[1]: session-22.scope: Deactivated successfully. Mar 17 18:56:33.735999 systemd-logind[1398]: Session 22 logged out. Waiting for processes to exit. Mar 17 18:56:33.736979 systemd-logind[1398]: Removed session 22. Mar 17 18:56:34.161212 systemd[1]: run-containerd-runc-k8s.io-23d1c930fdae8fdcdaa6d8440934bb876648bde06d1cd24e876f111607576e01-runc.YF5ZNn.mount: Deactivated successfully. Mar 17 18:56:38.835000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@20-10.200.8.35:22-10.200.16.10:35394 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:56:38.843908 kernel: kauditd_printk_skb: 7 callbacks suppressed Mar 17 18:56:38.843972 kernel: audit: type=1130 audit(1742237798.835:1513): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@20-10.200.8.35:22-10.200.16.10:35394 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:56:38.836684 systemd[1]: Started sshd@20-10.200.8.35:22-10.200.16.10:35394.service. Mar 17 18:56:39.466000 audit[5483]: USER_ACCT pid=5483 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Mar 17 18:56:39.488536 kernel: audit: type=1101 audit(1742237799.466:1514): pid=5483 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Mar 17 18:56:39.488597 sshd[5483]: Accepted publickey for core from 10.200.16.10 port 35394 ssh2: RSA SHA256:Id7fTtJmja0nOLdf0IQA3jnxxJrUKKdGU1UW83zjTQg Mar 17 18:56:39.488869 sshd[5483]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Mar 17 18:56:39.487000 audit[5483]: CRED_ACQ pid=5483 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Mar 17 18:56:39.496081 systemd[1]: Started session-23.scope. Mar 17 18:56:39.497146 systemd-logind[1398]: New session 23 of user core. Mar 17 18:56:39.510589 kernel: audit: type=1103 audit(1742237799.487:1515): pid=5483 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Mar 17 18:56:39.487000 audit[5483]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7fffc8c50620 a2=3 a3=0 items=0 ppid=1 pid=5483 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=23 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:56:39.539784 kernel: audit: type=1006 audit(1742237799.487:1516): pid=5483 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=23 res=1 Mar 17 18:56:39.539865 kernel: audit: type=1300 audit(1742237799.487:1516): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7fffc8c50620 a2=3 a3=0 items=0 ppid=1 pid=5483 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=23 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:56:39.487000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Mar 17 18:56:39.546341 kernel: audit: type=1327 audit(1742237799.487:1516): proctitle=737368643A20636F7265205B707269765D Mar 17 18:56:39.546416 kernel: audit: type=1105 audit(1742237799.501:1517): pid=5483 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Mar 17 18:56:39.501000 audit[5483]: USER_START pid=5483 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Mar 17 18:56:39.510000 audit[5488]: CRED_ACQ pid=5488 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Mar 17 18:56:39.566329 kernel: audit: type=1103 audit(1742237799.510:1518): pid=5488 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Mar 17 18:56:39.964833 sshd[5483]: pam_unix(sshd:session): session closed for user core Mar 17 18:56:39.965000 audit[5483]: USER_END pid=5483 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Mar 17 18:56:39.968038 systemd[1]: sshd@20-10.200.8.35:22-10.200.16.10:35394.service: Deactivated successfully. Mar 17 18:56:39.968850 systemd[1]: session-23.scope: Deactivated successfully. Mar 17 18:56:39.971403 systemd-logind[1398]: Session 23 logged out. Waiting for processes to exit. Mar 17 18:56:39.972307 systemd-logind[1398]: Removed session 23. Mar 17 18:56:39.989340 kernel: audit: type=1106 audit(1742237799.965:1519): pid=5483 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Mar 17 18:56:39.989419 kernel: audit: type=1104 audit(1742237799.965:1520): pid=5483 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Mar 17 18:56:39.965000 audit[5483]: CRED_DISP pid=5483 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Mar 17 18:56:39.966000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@20-10.200.8.35:22-10.200.16.10:35394 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:56:45.070905 systemd[1]: Started sshd@21-10.200.8.35:22-10.200.16.10:35408.service. Mar 17 18:56:45.070000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@21-10.200.8.35:22-10.200.16.10:35408 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:56:45.076946 kernel: kauditd_printk_skb: 1 callbacks suppressed Mar 17 18:56:45.077024 kernel: audit: type=1130 audit(1742237805.070:1522): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@21-10.200.8.35:22-10.200.16.10:35408 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:56:45.702000 audit[5497]: USER_ACCT pid=5497 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Mar 17 18:56:45.703577 sshd[5497]: Accepted publickey for core from 10.200.16.10 port 35408 ssh2: RSA SHA256:Id7fTtJmja0nOLdf0IQA3jnxxJrUKKdGU1UW83zjTQg Mar 17 18:56:45.723290 kernel: audit: type=1101 audit(1742237805.702:1523): pid=5497 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Mar 17 18:56:45.722000 audit[5497]: CRED_ACQ pid=5497 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Mar 17 18:56:45.723992 sshd[5497]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Mar 17 18:56:45.729612 systemd[1]: Started session-24.scope. Mar 17 18:56:45.731005 systemd-logind[1398]: New session 24 of user core. Mar 17 18:56:45.741284 kernel: audit: type=1103 audit(1742237805.722:1524): pid=5497 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Mar 17 18:56:45.741358 kernel: audit: type=1006 audit(1742237805.722:1525): pid=5497 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=24 res=1 Mar 17 18:56:45.722000 audit[5497]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7fff0d92b0a0 a2=3 a3=0 items=0 ppid=1 pid=5497 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=24 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:56:45.769026 kernel: audit: type=1300 audit(1742237805.722:1525): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7fff0d92b0a0 a2=3 a3=0 items=0 ppid=1 pid=5497 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=24 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:56:45.722000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Mar 17 18:56:45.735000 audit[5497]: USER_START pid=5497 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Mar 17 18:56:45.794049 kernel: audit: type=1327 audit(1742237805.722:1525): proctitle=737368643A20636F7265205B707269765D Mar 17 18:56:45.794133 kernel: audit: type=1105 audit(1742237805.735:1526): pid=5497 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Mar 17 18:56:45.794174 kernel: audit: type=1103 audit(1742237805.738:1527): pid=5499 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Mar 17 18:56:45.738000 audit[5499]: CRED_ACQ pid=5499 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Mar 17 18:56:46.213849 sshd[5497]: pam_unix(sshd:session): session closed for user core Mar 17 18:56:46.214000 audit[5497]: USER_END pid=5497 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Mar 17 18:56:46.217865 systemd[1]: sshd@21-10.200.8.35:22-10.200.16.10:35408.service: Deactivated successfully. Mar 17 18:56:46.218680 systemd[1]: session-24.scope: Deactivated successfully. Mar 17 18:56:46.221532 systemd-logind[1398]: Session 24 logged out. Waiting for processes to exit. Mar 17 18:56:46.222470 systemd-logind[1398]: Removed session 24. Mar 17 18:56:46.214000 audit[5497]: CRED_DISP pid=5497 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Mar 17 18:56:46.252175 kernel: audit: type=1106 audit(1742237806.214:1528): pid=5497 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Mar 17 18:56:46.252270 kernel: audit: type=1104 audit(1742237806.214:1529): pid=5497 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Mar 17 18:56:46.214000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@21-10.200.8.35:22-10.200.16.10:35408 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:56:50.105991 systemd[1]: run-containerd-runc-k8s.io-8210af86bf3c1d7b8307d59b92cdaa67dec84cfe373fd9efa32d6fbc32f1d9f2-runc.dpUngz.mount: Deactivated successfully. Mar 17 18:56:51.319000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@22-10.200.8.35:22-10.200.16.10:38854 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:56:51.319650 systemd[1]: Started sshd@22-10.200.8.35:22-10.200.16.10:38854.service. Mar 17 18:56:51.326347 kernel: kauditd_printk_skb: 1 callbacks suppressed Mar 17 18:56:51.326454 kernel: audit: type=1130 audit(1742237811.319:1531): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@22-10.200.8.35:22-10.200.16.10:38854 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:56:51.951000 audit[5533]: USER_ACCT pid=5533 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Mar 17 18:56:51.952050 sshd[5533]: Accepted publickey for core from 10.200.16.10 port 38854 ssh2: RSA SHA256:Id7fTtJmja0nOLdf0IQA3jnxxJrUKKdGU1UW83zjTQg Mar 17 18:56:51.972289 kernel: audit: type=1101 audit(1742237811.951:1532): pid=5533 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Mar 17 18:56:51.972596 sshd[5533]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Mar 17 18:56:51.971000 audit[5533]: CRED_ACQ pid=5533 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Mar 17 18:56:51.980332 systemd[1]: Started session-25.scope. Mar 17 18:56:51.981702 systemd-logind[1398]: New session 25 of user core. Mar 17 18:56:51.992281 kernel: audit: type=1103 audit(1742237811.971:1533): pid=5533 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Mar 17 18:56:51.971000 audit[5533]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffe241e63f0 a2=3 a3=0 items=0 ppid=1 pid=5533 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=25 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:56:52.005284 kernel: audit: type=1006 audit(1742237811.971:1534): pid=5533 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=25 res=1 Mar 17 18:56:52.005331 kernel: audit: type=1300 audit(1742237811.971:1534): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffe241e63f0 a2=3 a3=0 items=0 ppid=1 pid=5533 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=25 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:56:51.971000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Mar 17 18:56:52.023284 kernel: audit: type=1327 audit(1742237811.971:1534): proctitle=737368643A20636F7265205B707269765D Mar 17 18:56:51.985000 audit[5533]: USER_START pid=5533 uid=0 auid=500 ses=25 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Mar 17 18:56:52.046658 kernel: audit: type=1105 audit(1742237811.985:1535): pid=5533 uid=0 auid=500 ses=25 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Mar 17 18:56:52.047442 kernel: audit: type=1103 audit(1742237811.985:1536): pid=5537 uid=0 auid=500 ses=25 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Mar 17 18:56:51.985000 audit[5537]: CRED_ACQ pid=5537 uid=0 auid=500 ses=25 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Mar 17 18:56:52.450232 sshd[5533]: pam_unix(sshd:session): session closed for user core Mar 17 18:56:52.451000 audit[5533]: USER_END pid=5533 uid=0 auid=500 ses=25 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Mar 17 18:56:52.453927 systemd-logind[1398]: Session 25 logged out. Waiting for processes to exit. Mar 17 18:56:52.455499 systemd[1]: sshd@22-10.200.8.35:22-10.200.16.10:38854.service: Deactivated successfully. Mar 17 18:56:52.456409 systemd[1]: session-25.scope: Deactivated successfully. Mar 17 18:56:52.458058 systemd-logind[1398]: Removed session 25. Mar 17 18:56:52.451000 audit[5533]: CRED_DISP pid=5533 uid=0 auid=500 ses=25 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Mar 17 18:56:52.488235 kernel: audit: type=1106 audit(1742237812.451:1537): pid=5533 uid=0 auid=500 ses=25 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Mar 17 18:56:52.488494 kernel: audit: type=1104 audit(1742237812.451:1538): pid=5533 uid=0 auid=500 ses=25 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Mar 17 18:56:52.455000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@22-10.200.8.35:22-10.200.16.10:38854 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:56:57.556248 systemd[1]: Started sshd@23-10.200.8.35:22-10.200.16.10:38864.service. Mar 17 18:56:57.580840 kernel: kauditd_printk_skb: 1 callbacks suppressed Mar 17 18:56:57.580942 kernel: audit: type=1130 audit(1742237817.556:1540): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@23-10.200.8.35:22-10.200.16.10:38864 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:56:57.556000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@23-10.200.8.35:22-10.200.16.10:38864 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:56:58.185000 audit[5553]: USER_ACCT pid=5553 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Mar 17 18:56:58.206193 sshd[5553]: Accepted publickey for core from 10.200.16.10 port 38864 ssh2: RSA SHA256:Id7fTtJmja0nOLdf0IQA3jnxxJrUKKdGU1UW83zjTQg Mar 17 18:56:58.206552 kernel: audit: type=1101 audit(1742237818.185:1541): pid=5553 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Mar 17 18:56:58.206465 sshd[5553]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Mar 17 18:56:58.187000 audit[5553]: CRED_ACQ pid=5553 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Mar 17 18:56:58.211765 systemd[1]: Started session-26.scope. Mar 17 18:56:58.212870 systemd-logind[1398]: New session 26 of user core. Mar 17 18:56:58.234995 kernel: audit: type=1103 audit(1742237818.187:1542): pid=5553 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Mar 17 18:56:58.235074 kernel: audit: type=1006 audit(1742237818.187:1543): pid=5553 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=26 res=1 Mar 17 18:56:58.235103 kernel: audit: type=1300 audit(1742237818.187:1543): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffe4194cb90 a2=3 a3=0 items=0 ppid=1 pid=5553 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=26 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:56:58.187000 audit[5553]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffe4194cb90 a2=3 a3=0 items=0 ppid=1 pid=5553 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=26 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:56:58.187000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Mar 17 18:56:58.259189 kernel: audit: type=1327 audit(1742237818.187:1543): proctitle=737368643A20636F7265205B707269765D Mar 17 18:56:58.259245 kernel: audit: type=1105 audit(1742237818.219:1544): pid=5553 uid=0 auid=500 ses=26 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Mar 17 18:56:58.219000 audit[5553]: USER_START pid=5553 uid=0 auid=500 ses=26 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Mar 17 18:56:58.279692 kernel: audit: type=1103 audit(1742237818.221:1545): pid=5555 uid=0 auid=500 ses=26 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Mar 17 18:56:58.221000 audit[5555]: CRED_ACQ pid=5555 uid=0 auid=500 ses=26 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Mar 17 18:56:58.698146 sshd[5553]: pam_unix(sshd:session): session closed for user core Mar 17 18:56:58.699000 audit[5553]: USER_END pid=5553 uid=0 auid=500 ses=26 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Mar 17 18:56:58.702140 systemd-logind[1398]: Session 26 logged out. Waiting for processes to exit. Mar 17 18:56:58.703850 systemd[1]: sshd@23-10.200.8.35:22-10.200.16.10:38864.service: Deactivated successfully. Mar 17 18:56:58.704645 systemd[1]: session-26.scope: Deactivated successfully. Mar 17 18:56:58.706306 systemd-logind[1398]: Removed session 26. Mar 17 18:56:58.699000 audit[5553]: CRED_DISP pid=5553 uid=0 auid=500 ses=26 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Mar 17 18:56:58.740380 kernel: audit: type=1106 audit(1742237818.699:1546): pid=5553 uid=0 auid=500 ses=26 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Mar 17 18:56:58.740533 kernel: audit: type=1104 audit(1742237818.699:1547): pid=5553 uid=0 auid=500 ses=26 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Mar 17 18:56:58.699000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@23-10.200.8.35:22-10.200.16.10:38864 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:57:00.326000 audit[4482]: AVC avc: denied { watch } for pid=4482 comm="apiserver" path="/calico-apiserver-certs/..2025_03_17_18_53_40.4205256663/tls.crt" dev="tmpfs" ino=3 scontext=system_u:system_r:svirt_lxc_net_t:s0:c211,c345 tcontext=system_u:object_r:svirt_lxc_file_t:s0:c211,c345 tclass=file permissive=0 Mar 17 18:57:00.326000 audit[4482]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=8 a1=c001075a20 a2=fc6 a3=0 items=0 ppid=4165 pid=4482 auid=4294967295 uid=10001 gid=10001 euid=10001 suid=10001 fsuid=10001 egid=10001 sgid=10001 fsgid=10001 tty=(none) ses=4294967295 comm="apiserver" exe="/code/apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c211,c345 key=(null) Mar 17 18:57:00.326000 audit: PROCTITLE proctitle=2F636F64652F617069736572766572002D2D7365637572652D706F72743D35343433002D2D746C732D707269766174652D6B65792D66696C653D2F63616C69636F2D6170697365727665722D63657274732F746C732E6B6579002D2D746C732D636572742D66696C653D2F63616C69636F2D6170697365727665722D63657274 Mar 17 18:57:00.951000 audit[4522]: AVC avc: denied { watch } for pid=4522 comm="apiserver" path="/calico-apiserver-certs/..2025_03_17_18_53_40.2855878070/tls.crt" dev="tmpfs" ino=4 scontext=system_u:system_r:svirt_lxc_net_t:s0:c206,c226 tcontext=system_u:object_r:svirt_lxc_file_t:s0:c206,c226 tclass=file permissive=0 Mar 17 18:57:00.951000 audit[4522]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=7 a1=c000de0c00 a2=fc6 a3=0 items=0 ppid=4222 pid=4522 auid=4294967295 uid=10001 gid=10001 euid=10001 suid=10001 fsuid=10001 egid=10001 sgid=10001 fsgid=10001 tty=(none) ses=4294967295 comm="apiserver" exe="/code/apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c206,c226 key=(null) Mar 17 18:57:00.951000 audit: PROCTITLE proctitle=2F636F64652F617069736572766572002D2D7365637572652D706F72743D35343433002D2D746C732D707269766174652D6B65792D66696C653D2F63616C69636F2D6170697365727665722D63657274732F746C732E6B6579002D2D746C732D636572742D66696C653D2F63616C69636F2D6170697365727665722D63657274 Mar 17 18:57:03.804000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@24-10.200.8.35:22-10.200.16.10:49178 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:57:03.804655 systemd[1]: Started sshd@24-10.200.8.35:22-10.200.16.10:49178.service. Mar 17 18:57:03.810149 kernel: kauditd_printk_skb: 7 callbacks suppressed Mar 17 18:57:03.810222 kernel: audit: type=1130 audit(1742237823.804:1551): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@24-10.200.8.35:22-10.200.16.10:49178 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:57:04.160804 systemd[1]: run-containerd-runc-k8s.io-23d1c930fdae8fdcdaa6d8440934bb876648bde06d1cd24e876f111607576e01-runc.w5PjsT.mount: Deactivated successfully. Mar 17 18:57:04.454722 kernel: audit: type=1101 audit(1742237824.434:1552): pid=5580 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Mar 17 18:57:04.434000 audit[5580]: USER_ACCT pid=5580 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Mar 17 18:57:04.436531 sshd[5580]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Mar 17 18:57:04.455285 sshd[5580]: Accepted publickey for core from 10.200.16.10 port 49178 ssh2: RSA SHA256:Id7fTtJmja0nOLdf0IQA3jnxxJrUKKdGU1UW83zjTQg Mar 17 18:57:04.435000 audit[5580]: CRED_ACQ pid=5580 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Mar 17 18:57:04.462874 systemd[1]: Started session-27.scope. Mar 17 18:57:04.464388 systemd-logind[1398]: New session 27 of user core. Mar 17 18:57:04.475283 kernel: audit: type=1103 audit(1742237824.435:1553): pid=5580 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Mar 17 18:57:04.475356 kernel: audit: type=1006 audit(1742237824.435:1554): pid=5580 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=27 res=1 Mar 17 18:57:04.435000 audit[5580]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffd035ed2c0 a2=3 a3=0 items=0 ppid=1 pid=5580 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=27 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:57:04.502127 kernel: audit: type=1300 audit(1742237824.435:1554): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffd035ed2c0 a2=3 a3=0 items=0 ppid=1 pid=5580 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=27 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:57:04.502424 kernel: audit: type=1327 audit(1742237824.435:1554): proctitle=737368643A20636F7265205B707269765D Mar 17 18:57:04.435000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Mar 17 18:57:04.466000 audit[5580]: USER_START pid=5580 uid=0 auid=500 ses=27 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Mar 17 18:57:04.527441 kernel: audit: type=1105 audit(1742237824.466:1555): pid=5580 uid=0 auid=500 ses=27 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Mar 17 18:57:04.527512 kernel: audit: type=1103 audit(1742237824.466:1556): pid=5600 uid=0 auid=500 ses=27 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Mar 17 18:57:04.466000 audit[5600]: CRED_ACQ pid=5600 uid=0 auid=500 ses=27 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Mar 17 18:57:04.938651 sshd[5580]: pam_unix(sshd:session): session closed for user core Mar 17 18:57:04.940000 audit[5580]: USER_END pid=5580 uid=0 auid=500 ses=27 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Mar 17 18:57:04.942032 systemd[1]: sshd@24-10.200.8.35:22-10.200.16.10:49178.service: Deactivated successfully. Mar 17 18:57:04.942849 systemd[1]: session-27.scope: Deactivated successfully. Mar 17 18:57:04.944525 systemd-logind[1398]: Session 27 logged out. Waiting for processes to exit. Mar 17 18:57:04.945449 systemd-logind[1398]: Removed session 27. Mar 17 18:57:04.940000 audit[5580]: CRED_DISP pid=5580 uid=0 auid=500 ses=27 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Mar 17 18:57:04.977184 kernel: audit: type=1106 audit(1742237824.940:1557): pid=5580 uid=0 auid=500 ses=27 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Mar 17 18:57:04.977328 kernel: audit: type=1104 audit(1742237824.940:1558): pid=5580 uid=0 auid=500 ses=27 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Mar 17 18:57:04.941000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@24-10.200.8.35:22-10.200.16.10:49178 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:57:10.637000 audit[2323]: AVC avc: denied { watch } for pid=2323 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=7355 scontext=system_u:system_r:svirt_lxc_net_t:s0:c454,c669 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Mar 17 18:57:10.642417 kernel: kauditd_printk_skb: 1 callbacks suppressed Mar 17 18:57:10.642522 kernel: audit: type=1400 audit(1742237830.637:1560): avc: denied { watch } for pid=2323 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=7355 scontext=system_u:system_r:svirt_lxc_net_t:s0:c454,c669 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Mar 17 18:57:10.637000 audit[2323]: AVC avc: denied { watch } for pid=2323 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=7361 scontext=system_u:system_r:svirt_lxc_net_t:s0:c454,c669 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Mar 17 18:57:10.676814 kernel: audit: type=1400 audit(1742237830.637:1561): avc: denied { watch } for pid=2323 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=7361 scontext=system_u:system_r:svirt_lxc_net_t:s0:c454,c669 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Mar 17 18:57:10.676927 kernel: audit: type=1300 audit(1742237830.637:1561): arch=c000003e syscall=254 success=no exit=-13 a0=9 a1=c00157f830 a2=fc6 a3=0 items=0 ppid=2152 pid=2323 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c454,c669 key=(null) Mar 17 18:57:10.637000 audit[2323]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=9 a1=c00157f830 a2=fc6 a3=0 items=0 ppid=2152 pid=2323 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c454,c669 key=(null) Mar 17 18:57:10.699310 kernel: audit: type=1327 audit(1742237830.637:1561): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Mar 17 18:57:10.637000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269