Mar 17 18:44:22.851673 kernel: Linux version 5.15.179-flatcar (build@pony-truck.infra.kinvolk.io) (x86_64-cros-linux-gnu-gcc (Gentoo Hardened 11.3.1_p20221209 p3) 11.3.1 20221209, GNU ld (Gentoo 2.39 p5) 2.39.0) #1 SMP Mon Mar 17 17:12:34 -00 2025 Mar 17 18:44:22.851694 kernel: Command line: BOOT_IMAGE=/flatcar/vmlinuz-a mount.usr=/dev/mapper/usr verity.usr=PARTUUID=7130c94a-213a-4e5a-8e26-6cce9662f132 rootflags=rw mount.usrflags=ro consoleblank=0 root=LABEL=ROOT console=ttyS0,115200 flatcar.first_boot=detected verity.usrhash=249ccd113f901380672c0d31e18f792e8e0344094c0e39eedc449f039418b31a Mar 17 18:44:22.851702 kernel: BIOS-provided physical RAM map: Mar 17 18:44:22.851708 kernel: BIOS-e820: [mem 0x0000000000000000-0x000000000009fbff] usable Mar 17 18:44:22.851713 kernel: BIOS-e820: [mem 0x000000000009fc00-0x000000000009ffff] reserved Mar 17 18:44:22.851718 kernel: BIOS-e820: [mem 0x00000000000f0000-0x00000000000fffff] reserved Mar 17 18:44:22.851725 kernel: BIOS-e820: [mem 0x0000000000100000-0x000000009cfdbfff] usable Mar 17 18:44:22.851730 kernel: BIOS-e820: [mem 0x000000009cfdc000-0x000000009cffffff] reserved Mar 17 18:44:22.851737 kernel: BIOS-e820: [mem 0x00000000b0000000-0x00000000bfffffff] reserved Mar 17 18:44:22.851743 kernel: BIOS-e820: [mem 0x00000000fed1c000-0x00000000fed1ffff] reserved Mar 17 18:44:22.851748 kernel: BIOS-e820: [mem 0x00000000feffc000-0x00000000feffffff] reserved Mar 17 18:44:22.851762 kernel: BIOS-e820: [mem 0x00000000fffc0000-0x00000000ffffffff] reserved Mar 17 18:44:22.851770 kernel: BIOS-e820: [mem 0x000000fd00000000-0x000000ffffffffff] reserved Mar 17 18:44:22.851777 kernel: NX (Execute Disable) protection: active Mar 17 18:44:22.851788 kernel: SMBIOS 2.8 present. Mar 17 18:44:22.851796 kernel: DMI: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014 Mar 17 18:44:22.851803 kernel: Hypervisor detected: KVM Mar 17 18:44:22.851809 kernel: kvm-clock: Using msrs 4b564d01 and 4b564d00 Mar 17 18:44:22.851815 kernel: kvm-clock: cpu 0, msr 3419a001, primary cpu clock Mar 17 18:44:22.851821 kernel: kvm-clock: using sched offset of 2381416337 cycles Mar 17 18:44:22.851827 kernel: clocksource: kvm-clock: mask: 0xffffffffffffffff max_cycles: 0x1cd42e4dffb, max_idle_ns: 881590591483 ns Mar 17 18:44:22.851833 kernel: tsc: Detected 2794.750 MHz processor Mar 17 18:44:22.851840 kernel: e820: update [mem 0x00000000-0x00000fff] usable ==> reserved Mar 17 18:44:22.851847 kernel: e820: remove [mem 0x000a0000-0x000fffff] usable Mar 17 18:44:22.851853 kernel: last_pfn = 0x9cfdc max_arch_pfn = 0x400000000 Mar 17 18:44:22.851860 kernel: x86/PAT: Configuration [0-7]: WB WC UC- UC WB WP UC- WT Mar 17 18:44:22.851866 kernel: Using GB pages for direct mapping Mar 17 18:44:22.851872 kernel: ACPI: Early table checksum verification disabled Mar 17 18:44:22.851878 kernel: ACPI: RSDP 0x00000000000F59D0 000014 (v00 BOCHS ) Mar 17 18:44:22.851884 kernel: ACPI: RSDT 0x000000009CFE2408 000038 (v01 BOCHS BXPC 00000001 BXPC 00000001) Mar 17 18:44:22.851890 kernel: ACPI: FACP 0x000000009CFE21E8 0000F4 (v03 BOCHS BXPC 00000001 BXPC 00000001) Mar 17 18:44:22.851896 kernel: ACPI: DSDT 0x000000009CFE0040 0021A8 (v01 BOCHS BXPC 00000001 BXPC 00000001) Mar 17 18:44:22.851903 kernel: ACPI: FACS 0x000000009CFE0000 000040 Mar 17 18:44:22.851909 kernel: ACPI: APIC 0x000000009CFE22DC 000090 (v01 BOCHS BXPC 00000001 BXPC 00000001) Mar 17 18:44:22.851915 kernel: ACPI: HPET 0x000000009CFE236C 000038 (v01 BOCHS BXPC 00000001 BXPC 00000001) Mar 17 18:44:22.851921 kernel: ACPI: MCFG 0x000000009CFE23A4 00003C (v01 BOCHS BXPC 00000001 BXPC 00000001) Mar 17 18:44:22.851927 kernel: ACPI: WAET 0x000000009CFE23E0 000028 (v01 BOCHS BXPC 00000001 BXPC 00000001) Mar 17 18:44:22.851933 kernel: ACPI: Reserving FACP table memory at [mem 0x9cfe21e8-0x9cfe22db] Mar 17 18:44:22.851939 kernel: ACPI: Reserving DSDT table memory at [mem 0x9cfe0040-0x9cfe21e7] Mar 17 18:44:22.851945 kernel: ACPI: Reserving FACS table memory at [mem 0x9cfe0000-0x9cfe003f] Mar 17 18:44:22.851955 kernel: ACPI: Reserving APIC table memory at [mem 0x9cfe22dc-0x9cfe236b] Mar 17 18:44:22.851962 kernel: ACPI: Reserving HPET table memory at [mem 0x9cfe236c-0x9cfe23a3] Mar 17 18:44:22.851968 kernel: ACPI: Reserving MCFG table memory at [mem 0x9cfe23a4-0x9cfe23df] Mar 17 18:44:22.851974 kernel: ACPI: Reserving WAET table memory at [mem 0x9cfe23e0-0x9cfe2407] Mar 17 18:44:22.851981 kernel: No NUMA configuration found Mar 17 18:44:22.851987 kernel: Faking a node at [mem 0x0000000000000000-0x000000009cfdbfff] Mar 17 18:44:22.851995 kernel: NODE_DATA(0) allocated [mem 0x9cfd6000-0x9cfdbfff] Mar 17 18:44:22.852001 kernel: Zone ranges: Mar 17 18:44:22.852008 kernel: DMA [mem 0x0000000000001000-0x0000000000ffffff] Mar 17 18:44:22.852014 kernel: DMA32 [mem 0x0000000001000000-0x000000009cfdbfff] Mar 17 18:44:22.852020 kernel: Normal empty Mar 17 18:44:22.852027 kernel: Movable zone start for each node Mar 17 18:44:22.852033 kernel: Early memory node ranges Mar 17 18:44:22.852040 kernel: node 0: [mem 0x0000000000001000-0x000000000009efff] Mar 17 18:44:22.852046 kernel: node 0: [mem 0x0000000000100000-0x000000009cfdbfff] Mar 17 18:44:22.852052 kernel: Initmem setup node 0 [mem 0x0000000000001000-0x000000009cfdbfff] Mar 17 18:44:22.852069 kernel: On node 0, zone DMA: 1 pages in unavailable ranges Mar 17 18:44:22.852083 kernel: On node 0, zone DMA: 97 pages in unavailable ranges Mar 17 18:44:22.852104 kernel: On node 0, zone DMA32: 12324 pages in unavailable ranges Mar 17 18:44:22.852129 kernel: ACPI: PM-Timer IO Port: 0x608 Mar 17 18:44:22.852144 kernel: ACPI: LAPIC_NMI (acpi_id[0xff] dfl dfl lint[0x1]) Mar 17 18:44:22.852151 kernel: IOAPIC[0]: apic_id 0, version 17, address 0xfec00000, GSI 0-23 Mar 17 18:44:22.852158 kernel: ACPI: INT_SRC_OVR (bus 0 bus_irq 0 global_irq 2 dfl dfl) Mar 17 18:44:22.852164 kernel: ACPI: INT_SRC_OVR (bus 0 bus_irq 5 global_irq 5 high level) Mar 17 18:44:22.852171 kernel: ACPI: INT_SRC_OVR (bus 0 bus_irq 9 global_irq 9 high level) Mar 17 18:44:22.852179 kernel: ACPI: INT_SRC_OVR (bus 0 bus_irq 10 global_irq 10 high level) Mar 17 18:44:22.852185 kernel: ACPI: INT_SRC_OVR (bus 0 bus_irq 11 global_irq 11 high level) Mar 17 18:44:22.852192 kernel: ACPI: Using ACPI (MADT) for SMP configuration information Mar 17 18:44:22.852198 kernel: ACPI: HPET id: 0x8086a201 base: 0xfed00000 Mar 17 18:44:22.852205 kernel: TSC deadline timer available Mar 17 18:44:22.852211 kernel: smpboot: Allowing 4 CPUs, 0 hotplug CPUs Mar 17 18:44:22.852218 kernel: kvm-guest: KVM setup pv remote TLB flush Mar 17 18:44:22.852224 kernel: kvm-guest: setup PV sched yield Mar 17 18:44:22.852231 kernel: [mem 0xc0000000-0xfed1bfff] available for PCI devices Mar 17 18:44:22.852238 kernel: Booting paravirtualized kernel on KVM Mar 17 18:44:22.852245 kernel: clocksource: refined-jiffies: mask: 0xffffffff max_cycles: 0xffffffff, max_idle_ns: 1910969940391419 ns Mar 17 18:44:22.852251 kernel: setup_percpu: NR_CPUS:512 nr_cpumask_bits:512 nr_cpu_ids:4 nr_node_ids:1 Mar 17 18:44:22.852258 kernel: percpu: Embedded 56 pages/cpu s188696 r8192 d32488 u524288 Mar 17 18:44:22.852264 kernel: pcpu-alloc: s188696 r8192 d32488 u524288 alloc=1*2097152 Mar 17 18:44:22.852270 kernel: pcpu-alloc: [0] 0 1 2 3 Mar 17 18:44:22.852277 kernel: kvm-guest: setup async PF for cpu 0 Mar 17 18:44:22.852290 kernel: kvm-guest: stealtime: cpu 0, msr 9a41c0c0 Mar 17 18:44:22.852304 kernel: kvm-guest: PV spinlocks enabled Mar 17 18:44:22.852313 kernel: PV qspinlock hash table entries: 256 (order: 0, 4096 bytes, linear) Mar 17 18:44:22.852320 kernel: Built 1 zonelists, mobility grouping on. Total pages: 632732 Mar 17 18:44:22.852326 kernel: Policy zone: DMA32 Mar 17 18:44:22.852334 kernel: Kernel command line: rootflags=rw mount.usrflags=ro BOOT_IMAGE=/flatcar/vmlinuz-a mount.usr=/dev/mapper/usr verity.usr=PARTUUID=7130c94a-213a-4e5a-8e26-6cce9662f132 rootflags=rw mount.usrflags=ro consoleblank=0 root=LABEL=ROOT console=ttyS0,115200 flatcar.first_boot=detected verity.usrhash=249ccd113f901380672c0d31e18f792e8e0344094c0e39eedc449f039418b31a Mar 17 18:44:22.852341 kernel: Unknown kernel command line parameters "BOOT_IMAGE=/flatcar/vmlinuz-a", will be passed to user space. Mar 17 18:44:22.852348 kernel: Dentry cache hash table entries: 524288 (order: 10, 4194304 bytes, linear) Mar 17 18:44:22.852354 kernel: Inode-cache hash table entries: 262144 (order: 9, 2097152 bytes, linear) Mar 17 18:44:22.852361 kernel: mem auto-init: stack:off, heap alloc:off, heap free:off Mar 17 18:44:22.852370 kernel: Memory: 2436696K/2571752K available (12294K kernel code, 2278K rwdata, 13724K rodata, 47472K init, 4108K bss, 134796K reserved, 0K cma-reserved) Mar 17 18:44:22.852376 kernel: SLUB: HWalign=64, Order=0-3, MinObjects=0, CPUs=4, Nodes=1 Mar 17 18:44:22.852383 kernel: ftrace: allocating 34580 entries in 136 pages Mar 17 18:44:22.852389 kernel: ftrace: allocated 136 pages with 2 groups Mar 17 18:44:22.852396 kernel: rcu: Hierarchical RCU implementation. Mar 17 18:44:22.852403 kernel: rcu: RCU event tracing is enabled. Mar 17 18:44:22.852410 kernel: rcu: RCU restricting CPUs from NR_CPUS=512 to nr_cpu_ids=4. Mar 17 18:44:22.852418 kernel: Rude variant of Tasks RCU enabled. Mar 17 18:44:22.852426 kernel: Tracing variant of Tasks RCU enabled. Mar 17 18:44:22.852435 kernel: rcu: RCU calculated value of scheduler-enlistment delay is 100 jiffies. Mar 17 18:44:22.852444 kernel: rcu: Adjusting geometry for rcu_fanout_leaf=16, nr_cpu_ids=4 Mar 17 18:44:22.852452 kernel: NR_IRQS: 33024, nr_irqs: 456, preallocated irqs: 16 Mar 17 18:44:22.852461 kernel: random: crng init done Mar 17 18:44:22.852469 kernel: Console: colour VGA+ 80x25 Mar 17 18:44:22.852477 kernel: printk: console [ttyS0] enabled Mar 17 18:44:22.852485 kernel: ACPI: Core revision 20210730 Mar 17 18:44:22.852493 kernel: clocksource: hpet: mask: 0xffffffff max_cycles: 0xffffffff, max_idle_ns: 19112604467 ns Mar 17 18:44:22.852501 kernel: APIC: Switch to symmetric I/O mode setup Mar 17 18:44:22.852511 kernel: x2apic enabled Mar 17 18:44:22.852519 kernel: Switched APIC routing to physical x2apic. Mar 17 18:44:22.852527 kernel: kvm-guest: setup PV IPIs Mar 17 18:44:22.852535 kernel: ..TIMER: vector=0x30 apic1=0 pin1=2 apic2=-1 pin2=-1 Mar 17 18:44:22.852543 kernel: tsc: Marking TSC unstable due to TSCs unsynchronized Mar 17 18:44:22.852552 kernel: Calibrating delay loop (skipped) preset value.. 5589.50 BogoMIPS (lpj=2794750) Mar 17 18:44:22.852560 kernel: x86/cpu: User Mode Instruction Prevention (UMIP) activated Mar 17 18:44:22.852568 kernel: Last level iTLB entries: 4KB 512, 2MB 255, 4MB 127 Mar 17 18:44:22.852577 kernel: Last level dTLB entries: 4KB 512, 2MB 255, 4MB 127, 1GB 0 Mar 17 18:44:22.852591 kernel: Spectre V1 : Mitigation: usercopy/swapgs barriers and __user pointer sanitization Mar 17 18:44:22.852598 kernel: Spectre V2 : Mitigation: Retpolines Mar 17 18:44:22.852605 kernel: Spectre V2 : Spectre v2 / SpectreRSB mitigation: Filling RSB on context switch Mar 17 18:44:22.852613 kernel: Spectre V2 : Spectre v2 / SpectreRSB : Filling RSB on VMEXIT Mar 17 18:44:22.852620 kernel: Spectre V2 : Enabling Speculation Barrier for firmware calls Mar 17 18:44:22.852627 kernel: RETBleed: Mitigation: untrained return thunk Mar 17 18:44:22.852646 kernel: Spectre V2 : mitigation: Enabling conditional Indirect Branch Prediction Barrier Mar 17 18:44:22.852653 kernel: Speculative Store Bypass: Mitigation: Speculative Store Bypass disabled via prctl and seccomp Mar 17 18:44:22.852661 kernel: x86/fpu: Supporting XSAVE feature 0x001: 'x87 floating point registers' Mar 17 18:44:22.852670 kernel: x86/fpu: Supporting XSAVE feature 0x002: 'SSE registers' Mar 17 18:44:22.852677 kernel: x86/fpu: Supporting XSAVE feature 0x004: 'AVX registers' Mar 17 18:44:22.852684 kernel: x86/fpu: xstate_offset[2]: 576, xstate_sizes[2]: 256 Mar 17 18:44:22.852690 kernel: x86/fpu: Enabled xstate features 0x7, context size is 832 bytes, using 'standard' format. Mar 17 18:44:22.852697 kernel: Freeing SMP alternatives memory: 32K Mar 17 18:44:22.852704 kernel: pid_max: default: 32768 minimum: 301 Mar 17 18:44:22.852711 kernel: LSM: Security Framework initializing Mar 17 18:44:22.852718 kernel: SELinux: Initializing. Mar 17 18:44:22.852726 kernel: Mount-cache hash table entries: 8192 (order: 4, 65536 bytes, linear) Mar 17 18:44:22.852733 kernel: Mountpoint-cache hash table entries: 8192 (order: 4, 65536 bytes, linear) Mar 17 18:44:22.852740 kernel: smpboot: CPU0: AMD EPYC 7402P 24-Core Processor (family: 0x17, model: 0x31, stepping: 0x0) Mar 17 18:44:22.852747 kernel: Performance Events: Fam17h+ core perfctr, AMD PMU driver. Mar 17 18:44:22.852762 kernel: ... version: 0 Mar 17 18:44:22.852771 kernel: ... bit width: 48 Mar 17 18:44:22.852779 kernel: ... generic registers: 6 Mar 17 18:44:22.852788 kernel: ... value mask: 0000ffffffffffff Mar 17 18:44:22.852797 kernel: ... max period: 00007fffffffffff Mar 17 18:44:22.852808 kernel: ... fixed-purpose events: 0 Mar 17 18:44:22.852817 kernel: ... event mask: 000000000000003f Mar 17 18:44:22.852824 kernel: signal: max sigframe size: 1776 Mar 17 18:44:22.852831 kernel: rcu: Hierarchical SRCU implementation. Mar 17 18:44:22.852838 kernel: smp: Bringing up secondary CPUs ... Mar 17 18:44:22.852845 kernel: x86: Booting SMP configuration: Mar 17 18:44:22.852852 kernel: .... node #0, CPUs: #1 Mar 17 18:44:22.852858 kernel: kvm-clock: cpu 1, msr 3419a041, secondary cpu clock Mar 17 18:44:22.852865 kernel: kvm-guest: setup async PF for cpu 1 Mar 17 18:44:22.852873 kernel: kvm-guest: stealtime: cpu 1, msr 9a49c0c0 Mar 17 18:44:22.852880 kernel: #2 Mar 17 18:44:22.852887 kernel: kvm-clock: cpu 2, msr 3419a081, secondary cpu clock Mar 17 18:44:22.852894 kernel: kvm-guest: setup async PF for cpu 2 Mar 17 18:44:22.852901 kernel: kvm-guest: stealtime: cpu 2, msr 9a51c0c0 Mar 17 18:44:22.852907 kernel: #3 Mar 17 18:44:22.852914 kernel: kvm-clock: cpu 3, msr 3419a0c1, secondary cpu clock Mar 17 18:44:22.852921 kernel: kvm-guest: setup async PF for cpu 3 Mar 17 18:44:22.852928 kernel: kvm-guest: stealtime: cpu 3, msr 9a59c0c0 Mar 17 18:44:22.852936 kernel: smp: Brought up 1 node, 4 CPUs Mar 17 18:44:22.852943 kernel: smpboot: Max logical packages: 1 Mar 17 18:44:22.852950 kernel: smpboot: Total of 4 processors activated (22358.00 BogoMIPS) Mar 17 18:44:22.852956 kernel: devtmpfs: initialized Mar 17 18:44:22.852963 kernel: x86/mm: Memory block size: 128MB Mar 17 18:44:22.852970 kernel: clocksource: jiffies: mask: 0xffffffff max_cycles: 0xffffffff, max_idle_ns: 1911260446275000 ns Mar 17 18:44:22.852977 kernel: futex hash table entries: 1024 (order: 4, 65536 bytes, linear) Mar 17 18:44:22.852984 kernel: pinctrl core: initialized pinctrl subsystem Mar 17 18:44:22.852991 kernel: NET: Registered PF_NETLINK/PF_ROUTE protocol family Mar 17 18:44:22.852998 kernel: audit: initializing netlink subsys (disabled) Mar 17 18:44:22.853006 kernel: audit: type=2000 audit(1742237063.147:1): state=initialized audit_enabled=0 res=1 Mar 17 18:44:22.853013 kernel: thermal_sys: Registered thermal governor 'step_wise' Mar 17 18:44:22.853020 kernel: thermal_sys: Registered thermal governor 'user_space' Mar 17 18:44:22.853027 kernel: cpuidle: using governor menu Mar 17 18:44:22.853033 kernel: ACPI: bus type PCI registered Mar 17 18:44:22.853040 kernel: acpiphp: ACPI Hot Plug PCI Controller Driver version: 0.5 Mar 17 18:44:22.853047 kernel: dca service started, version 1.12.1 Mar 17 18:44:22.853054 kernel: PCI: MMCONFIG for domain 0000 [bus 00-ff] at [mem 0xb0000000-0xbfffffff] (base 0xb0000000) Mar 17 18:44:22.853061 kernel: PCI: MMCONFIG at [mem 0xb0000000-0xbfffffff] reserved in E820 Mar 17 18:44:22.853069 kernel: PCI: Using configuration type 1 for base access Mar 17 18:44:22.853076 kernel: kprobes: kprobe jump-optimization is enabled. All kprobes are optimized if possible. Mar 17 18:44:22.853083 kernel: HugeTLB registered 1.00 GiB page size, pre-allocated 0 pages Mar 17 18:44:22.853090 kernel: HugeTLB registered 2.00 MiB page size, pre-allocated 0 pages Mar 17 18:44:22.853097 kernel: ACPI: Added _OSI(Module Device) Mar 17 18:44:22.853103 kernel: ACPI: Added _OSI(Processor Device) Mar 17 18:44:22.853110 kernel: ACPI: Added _OSI(3.0 _SCP Extensions) Mar 17 18:44:22.853117 kernel: ACPI: Added _OSI(Processor Aggregator Device) Mar 17 18:44:22.853124 kernel: ACPI: Added _OSI(Linux-Dell-Video) Mar 17 18:44:22.853132 kernel: ACPI: Added _OSI(Linux-Lenovo-NV-HDMI-Audio) Mar 17 18:44:22.853139 kernel: ACPI: Added _OSI(Linux-HPI-Hybrid-Graphics) Mar 17 18:44:22.853146 kernel: ACPI: 1 ACPI AML tables successfully acquired and loaded Mar 17 18:44:22.853153 kernel: ACPI: Interpreter enabled Mar 17 18:44:22.853159 kernel: ACPI: PM: (supports S0 S3 S5) Mar 17 18:44:22.853166 kernel: ACPI: Using IOAPIC for interrupt routing Mar 17 18:44:22.853173 kernel: PCI: Using host bridge windows from ACPI; if necessary, use "pci=nocrs" and report a bug Mar 17 18:44:22.853180 kernel: ACPI: Enabled 2 GPEs in block 00 to 3F Mar 17 18:44:22.853187 kernel: ACPI: PCI Root Bridge [PCI0] (domain 0000 [bus 00-ff]) Mar 17 18:44:22.853329 kernel: acpi PNP0A08:00: _OSC: OS supports [ExtendedConfig ASPM ClockPM Segments MSI HPX-Type3] Mar 17 18:44:22.853420 kernel: acpi PNP0A08:00: _OSC: platform does not support [PCIeHotplug LTR] Mar 17 18:44:22.853491 kernel: acpi PNP0A08:00: _OSC: OS now controls [PME AER PCIeCapability] Mar 17 18:44:22.853500 kernel: PCI host bridge to bus 0000:00 Mar 17 18:44:22.853576 kernel: pci_bus 0000:00: root bus resource [io 0x0000-0x0cf7 window] Mar 17 18:44:22.853662 kernel: pci_bus 0000:00: root bus resource [io 0x0d00-0xffff window] Mar 17 18:44:22.853731 kernel: pci_bus 0000:00: root bus resource [mem 0x000a0000-0x000bffff window] Mar 17 18:44:22.853810 kernel: pci_bus 0000:00: root bus resource [mem 0x9d000000-0xafffffff window] Mar 17 18:44:22.853872 kernel: pci_bus 0000:00: root bus resource [mem 0xc0000000-0xfebfffff window] Mar 17 18:44:22.853932 kernel: pci_bus 0000:00: root bus resource [mem 0x100000000-0x8ffffffff window] Mar 17 18:44:22.853993 kernel: pci_bus 0000:00: root bus resource [bus 00-ff] Mar 17 18:44:22.854075 kernel: pci 0000:00:00.0: [8086:29c0] type 00 class 0x060000 Mar 17 18:44:22.854152 kernel: pci 0000:00:01.0: [1234:1111] type 00 class 0x030000 Mar 17 18:44:22.854224 kernel: pci 0000:00:01.0: reg 0x10: [mem 0xfd000000-0xfdffffff pref] Mar 17 18:44:22.854292 kernel: pci 0000:00:01.0: reg 0x18: [mem 0xfebd0000-0xfebd0fff] Mar 17 18:44:22.854361 kernel: pci 0000:00:01.0: reg 0x30: [mem 0xfebc0000-0xfebcffff pref] Mar 17 18:44:22.854429 kernel: pci 0000:00:01.0: Video device with shadowed ROM at [mem 0x000c0000-0x000dffff] Mar 17 18:44:22.854505 kernel: pci 0000:00:02.0: [1af4:1005] type 00 class 0x00ff00 Mar 17 18:44:22.854574 kernel: pci 0000:00:02.0: reg 0x10: [io 0xc0c0-0xc0df] Mar 17 18:44:22.854663 kernel: pci 0000:00:02.0: reg 0x14: [mem 0xfebd1000-0xfebd1fff] Mar 17 18:44:22.854733 kernel: pci 0000:00:02.0: reg 0x20: [mem 0xfe000000-0xfe003fff 64bit pref] Mar 17 18:44:22.854829 kernel: pci 0000:00:03.0: [1af4:1001] type 00 class 0x010000 Mar 17 18:44:22.854898 kernel: pci 0000:00:03.0: reg 0x10: [io 0xc000-0xc07f] Mar 17 18:44:22.854966 kernel: pci 0000:00:03.0: reg 0x14: [mem 0xfebd2000-0xfebd2fff] Mar 17 18:44:22.855032 kernel: pci 0000:00:03.0: reg 0x20: [mem 0xfe004000-0xfe007fff 64bit pref] Mar 17 18:44:22.855108 kernel: pci 0000:00:04.0: [1af4:1000] type 00 class 0x020000 Mar 17 18:44:22.855181 kernel: pci 0000:00:04.0: reg 0x10: [io 0xc0e0-0xc0ff] Mar 17 18:44:22.855250 kernel: pci 0000:00:04.0: reg 0x14: [mem 0xfebd3000-0xfebd3fff] Mar 17 18:44:22.855318 kernel: pci 0000:00:04.0: reg 0x20: [mem 0xfe008000-0xfe00bfff 64bit pref] Mar 17 18:44:22.855386 kernel: pci 0000:00:04.0: reg 0x30: [mem 0xfeb80000-0xfebbffff pref] Mar 17 18:44:22.855457 kernel: pci 0000:00:1f.0: [8086:2918] type 00 class 0x060100 Mar 17 18:44:22.855524 kernel: pci 0000:00:1f.0: quirk: [io 0x0600-0x067f] claimed by ICH6 ACPI/GPIO/TCO Mar 17 18:44:22.855600 kernel: pci 0000:00:1f.2: [8086:2922] type 00 class 0x010601 Mar 17 18:44:22.855684 kernel: pci 0000:00:1f.2: reg 0x20: [io 0xc100-0xc11f] Mar 17 18:44:22.855759 kernel: pci 0000:00:1f.2: reg 0x24: [mem 0xfebd4000-0xfebd4fff] Mar 17 18:44:22.855841 kernel: pci 0000:00:1f.3: [8086:2930] type 00 class 0x0c0500 Mar 17 18:44:22.855910 kernel: pci 0000:00:1f.3: reg 0x20: [io 0x0700-0x073f] Mar 17 18:44:22.855920 kernel: ACPI: PCI: Interrupt link LNKA configured for IRQ 10 Mar 17 18:44:22.855927 kernel: ACPI: PCI: Interrupt link LNKB configured for IRQ 10 Mar 17 18:44:22.855934 kernel: ACPI: PCI: Interrupt link LNKC configured for IRQ 11 Mar 17 18:44:22.855943 kernel: ACPI: PCI: Interrupt link LNKD configured for IRQ 11 Mar 17 18:44:22.855950 kernel: ACPI: PCI: Interrupt link LNKE configured for IRQ 10 Mar 17 18:44:22.855957 kernel: ACPI: PCI: Interrupt link LNKF configured for IRQ 10 Mar 17 18:44:22.855964 kernel: ACPI: PCI: Interrupt link LNKG configured for IRQ 11 Mar 17 18:44:22.855971 kernel: ACPI: PCI: Interrupt link LNKH configured for IRQ 11 Mar 17 18:44:22.855977 kernel: ACPI: PCI: Interrupt link GSIA configured for IRQ 16 Mar 17 18:44:22.855984 kernel: ACPI: PCI: Interrupt link GSIB configured for IRQ 17 Mar 17 18:44:22.855991 kernel: ACPI: PCI: Interrupt link GSIC configured for IRQ 18 Mar 17 18:44:22.855998 kernel: ACPI: PCI: Interrupt link GSID configured for IRQ 19 Mar 17 18:44:22.856006 kernel: ACPI: PCI: Interrupt link GSIE configured for IRQ 20 Mar 17 18:44:22.856012 kernel: ACPI: PCI: Interrupt link GSIF configured for IRQ 21 Mar 17 18:44:22.856019 kernel: ACPI: PCI: Interrupt link GSIG configured for IRQ 22 Mar 17 18:44:22.856026 kernel: ACPI: PCI: Interrupt link GSIH configured for IRQ 23 Mar 17 18:44:22.856033 kernel: iommu: Default domain type: Translated Mar 17 18:44:22.856039 kernel: iommu: DMA domain TLB invalidation policy: lazy mode Mar 17 18:44:22.856108 kernel: pci 0000:00:01.0: vgaarb: setting as boot VGA device Mar 17 18:44:22.856175 kernel: pci 0000:00:01.0: vgaarb: VGA device added: decodes=io+mem,owns=io+mem,locks=none Mar 17 18:44:22.856243 kernel: pci 0000:00:01.0: vgaarb: bridge control possible Mar 17 18:44:22.856254 kernel: vgaarb: loaded Mar 17 18:44:22.856261 kernel: pps_core: LinuxPPS API ver. 1 registered Mar 17 18:44:22.856268 kernel: pps_core: Software ver. 5.3.6 - Copyright 2005-2007 Rodolfo Giometti Mar 17 18:44:22.856275 kernel: PTP clock support registered Mar 17 18:44:22.856282 kernel: PCI: Using ACPI for IRQ routing Mar 17 18:44:22.856289 kernel: PCI: pci_cache_line_size set to 64 bytes Mar 17 18:44:22.856296 kernel: e820: reserve RAM buffer [mem 0x0009fc00-0x0009ffff] Mar 17 18:44:22.856303 kernel: e820: reserve RAM buffer [mem 0x9cfdc000-0x9fffffff] Mar 17 18:44:22.856309 kernel: hpet0: at MMIO 0xfed00000, IRQs 2, 8, 0 Mar 17 18:44:22.856317 kernel: hpet0: 3 comparators, 64-bit 100.000000 MHz counter Mar 17 18:44:22.856324 kernel: clocksource: Switched to clocksource kvm-clock Mar 17 18:44:22.856331 kernel: VFS: Disk quotas dquot_6.6.0 Mar 17 18:44:22.856338 kernel: VFS: Dquot-cache hash table entries: 512 (order 0, 4096 bytes) Mar 17 18:44:22.856345 kernel: pnp: PnP ACPI init Mar 17 18:44:22.856417 kernel: system 00:05: [mem 0xb0000000-0xbfffffff window] has been reserved Mar 17 18:44:22.856427 kernel: pnp: PnP ACPI: found 6 devices Mar 17 18:44:22.856435 kernel: clocksource: acpi_pm: mask: 0xffffff max_cycles: 0xffffff, max_idle_ns: 2085701024 ns Mar 17 18:44:22.856443 kernel: NET: Registered PF_INET protocol family Mar 17 18:44:22.856450 kernel: IP idents hash table entries: 65536 (order: 7, 524288 bytes, linear) Mar 17 18:44:22.856457 kernel: tcp_listen_portaddr_hash hash table entries: 2048 (order: 3, 32768 bytes, linear) Mar 17 18:44:22.856464 kernel: Table-perturb hash table entries: 65536 (order: 6, 262144 bytes, linear) Mar 17 18:44:22.856471 kernel: TCP established hash table entries: 32768 (order: 6, 262144 bytes, linear) Mar 17 18:44:22.856478 kernel: TCP bind hash table entries: 32768 (order: 7, 524288 bytes, linear) Mar 17 18:44:22.856485 kernel: TCP: Hash tables configured (established 32768 bind 32768) Mar 17 18:44:22.856492 kernel: UDP hash table entries: 2048 (order: 4, 65536 bytes, linear) Mar 17 18:44:22.856499 kernel: UDP-Lite hash table entries: 2048 (order: 4, 65536 bytes, linear) Mar 17 18:44:22.856507 kernel: NET: Registered PF_UNIX/PF_LOCAL protocol family Mar 17 18:44:22.856514 kernel: NET: Registered PF_XDP protocol family Mar 17 18:44:22.856575 kernel: pci_bus 0000:00: resource 4 [io 0x0000-0x0cf7 window] Mar 17 18:44:22.856661 kernel: pci_bus 0000:00: resource 5 [io 0x0d00-0xffff window] Mar 17 18:44:22.857801 kernel: pci_bus 0000:00: resource 6 [mem 0x000a0000-0x000bffff window] Mar 17 18:44:22.857912 kernel: pci_bus 0000:00: resource 7 [mem 0x9d000000-0xafffffff window] Mar 17 18:44:22.857979 kernel: pci_bus 0000:00: resource 8 [mem 0xc0000000-0xfebfffff window] Mar 17 18:44:22.858044 kernel: pci_bus 0000:00: resource 9 [mem 0x100000000-0x8ffffffff window] Mar 17 18:44:22.858059 kernel: PCI: CLS 0 bytes, default 64 Mar 17 18:44:22.858067 kernel: Initialise system trusted keyrings Mar 17 18:44:22.858075 kernel: workingset: timestamp_bits=39 max_order=20 bucket_order=0 Mar 17 18:44:22.858083 kernel: Key type asymmetric registered Mar 17 18:44:22.858090 kernel: Asymmetric key parser 'x509' registered Mar 17 18:44:22.858098 kernel: Block layer SCSI generic (bsg) driver version 0.4 loaded (major 249) Mar 17 18:44:22.858105 kernel: io scheduler mq-deadline registered Mar 17 18:44:22.858113 kernel: io scheduler kyber registered Mar 17 18:44:22.858120 kernel: io scheduler bfq registered Mar 17 18:44:22.858129 kernel: ioatdma: Intel(R) QuickData Technology Driver 5.00 Mar 17 18:44:22.858137 kernel: ACPI: \_SB_.GSIG: Enabled at IRQ 22 Mar 17 18:44:22.858145 kernel: ACPI: \_SB_.GSIH: Enabled at IRQ 23 Mar 17 18:44:22.858152 kernel: ACPI: \_SB_.GSIE: Enabled at IRQ 20 Mar 17 18:44:22.858159 kernel: Serial: 8250/16550 driver, 4 ports, IRQ sharing enabled Mar 17 18:44:22.858167 kernel: 00:03: ttyS0 at I/O 0x3f8 (irq = 4, base_baud = 115200) is a 16550A Mar 17 18:44:22.858174 kernel: i8042: PNP: PS/2 Controller [PNP0303:KBD,PNP0f13:MOU] at 0x60,0x64 irq 1,12 Mar 17 18:44:22.858182 kernel: serio: i8042 KBD port at 0x60,0x64 irq 1 Mar 17 18:44:22.858189 kernel: serio: i8042 AUX port at 0x60,0x64 irq 12 Mar 17 18:44:22.858198 kernel: input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input0 Mar 17 18:44:22.858280 kernel: rtc_cmos 00:04: RTC can wake from S4 Mar 17 18:44:22.858417 kernel: rtc_cmos 00:04: registered as rtc0 Mar 17 18:44:22.858492 kernel: rtc_cmos 00:04: setting system clock to 2025-03-17T18:44:22 UTC (1742237062) Mar 17 18:44:22.858621 kernel: rtc_cmos 00:04: alarms up to one day, y3k, 242 bytes nvram, hpet irqs Mar 17 18:44:22.858649 kernel: NET: Registered PF_INET6 protocol family Mar 17 18:44:22.858656 kernel: Segment Routing with IPv6 Mar 17 18:44:22.858664 kernel: In-situ OAM (IOAM) with IPv6 Mar 17 18:44:22.858674 kernel: NET: Registered PF_PACKET protocol family Mar 17 18:44:22.858682 kernel: Key type dns_resolver registered Mar 17 18:44:22.858688 kernel: IPI shorthand broadcast: enabled Mar 17 18:44:22.858696 kernel: sched_clock: Marking stable (442296757, 101171907)->(559990542, -16521878) Mar 17 18:44:22.858703 kernel: registered taskstats version 1 Mar 17 18:44:22.858710 kernel: Loading compiled-in X.509 certificates Mar 17 18:44:22.858718 kernel: Loaded X.509 cert 'Kinvolk GmbH: Module signing key for 5.15.179-flatcar: d5b956bbabb2d386c0246a969032c0de9eaa8220' Mar 17 18:44:22.858726 kernel: Key type .fscrypt registered Mar 17 18:44:22.858733 kernel: Key type fscrypt-provisioning registered Mar 17 18:44:22.858742 kernel: ima: No TPM chip found, activating TPM-bypass! Mar 17 18:44:22.858758 kernel: ima: Allocated hash algorithm: sha1 Mar 17 18:44:22.858765 kernel: ima: No architecture policies found Mar 17 18:44:22.858773 kernel: clk: Disabling unused clocks Mar 17 18:44:22.858780 kernel: Freeing unused kernel image (initmem) memory: 47472K Mar 17 18:44:22.858788 kernel: Write protecting the kernel read-only data: 28672k Mar 17 18:44:22.858795 kernel: Freeing unused kernel image (text/rodata gap) memory: 2040K Mar 17 18:44:22.858803 kernel: Freeing unused kernel image (rodata/data gap) memory: 612K Mar 17 18:44:22.858810 kernel: Run /init as init process Mar 17 18:44:22.858819 kernel: with arguments: Mar 17 18:44:22.858826 kernel: /init Mar 17 18:44:22.858833 kernel: with environment: Mar 17 18:44:22.858840 kernel: HOME=/ Mar 17 18:44:22.858847 kernel: TERM=linux Mar 17 18:44:22.858854 kernel: BOOT_IMAGE=/flatcar/vmlinuz-a Mar 17 18:44:22.858864 systemd[1]: systemd 252 running in system mode (+PAM +AUDIT +SELINUX -APPARMOR +IMA +SMACK +SECCOMP +GCRYPT -GNUTLS +OPENSSL -ACL +BLKID +CURL -ELFUTILS -FIDO2 +IDN2 -IDN +IPTC +KMOD +LIBCRYPTSETUP +LIBFDISK +PCRE2 -PWQUALITY -P11KIT -QRENCODE -TPM2 +BZIP2 +LZ4 +XZ +ZLIB +ZSTD -BPF_FRAMEWORK -XKBCOMMON +UTMP +SYSVINIT default-hierarchy=unified) Mar 17 18:44:22.858875 systemd[1]: Detected virtualization kvm. Mar 17 18:44:22.858884 systemd[1]: Detected architecture x86-64. Mar 17 18:44:22.858892 systemd[1]: Running in initrd. Mar 17 18:44:22.858899 systemd[1]: No hostname configured, using default hostname. Mar 17 18:44:22.858907 systemd[1]: Hostname set to . Mar 17 18:44:22.858915 systemd[1]: Initializing machine ID from VM UUID. Mar 17 18:44:22.858922 systemd[1]: Queued start job for default target initrd.target. Mar 17 18:44:22.858930 systemd[1]: Started systemd-ask-password-console.path. Mar 17 18:44:22.858938 systemd[1]: Reached target cryptsetup.target. Mar 17 18:44:22.858947 systemd[1]: Reached target paths.target. Mar 17 18:44:22.858961 systemd[1]: Reached target slices.target. Mar 17 18:44:22.858970 systemd[1]: Reached target swap.target. Mar 17 18:44:22.858978 systemd[1]: Reached target timers.target. Mar 17 18:44:22.858986 systemd[1]: Listening on iscsid.socket. Mar 17 18:44:22.858995 systemd[1]: Listening on iscsiuio.socket. Mar 17 18:44:22.859003 systemd[1]: Listening on systemd-journald-audit.socket. Mar 17 18:44:22.859011 systemd[1]: Listening on systemd-journald-dev-log.socket. Mar 17 18:44:22.859019 systemd[1]: Listening on systemd-journald.socket. Mar 17 18:44:22.859027 systemd[1]: Listening on systemd-networkd.socket. Mar 17 18:44:22.859035 systemd[1]: Listening on systemd-udevd-control.socket. Mar 17 18:44:22.859043 systemd[1]: Listening on systemd-udevd-kernel.socket. Mar 17 18:44:22.859050 systemd[1]: Reached target sockets.target. Mar 17 18:44:22.859058 systemd[1]: Starting kmod-static-nodes.service... Mar 17 18:44:22.859068 systemd[1]: Finished network-cleanup.service. Mar 17 18:44:22.859076 systemd[1]: Starting systemd-fsck-usr.service... Mar 17 18:44:22.859084 systemd[1]: Starting systemd-journald.service... Mar 17 18:44:22.859092 systemd[1]: Starting systemd-modules-load.service... Mar 17 18:44:22.859100 systemd[1]: Starting systemd-resolved.service... Mar 17 18:44:22.859108 systemd[1]: Starting systemd-vconsole-setup.service... Mar 17 18:44:22.859115 systemd[1]: Finished kmod-static-nodes.service. Mar 17 18:44:22.859123 systemd[1]: Finished systemd-fsck-usr.service. Mar 17 18:44:22.859131 systemd[1]: Starting systemd-tmpfiles-setup-dev.service... Mar 17 18:44:22.859145 systemd-journald[198]: Journal started Mar 17 18:44:22.859192 systemd-journald[198]: Runtime Journal (/run/log/journal/5d20fa49fcf24967a5a4c605d274ba63) is 6.0M, max 48.5M, 42.5M free. Mar 17 18:44:22.852782 systemd-modules-load[199]: Inserted module 'overlay' Mar 17 18:44:22.890525 systemd[1]: Finished systemd-tmpfiles-setup-dev.service. Mar 17 18:44:22.890554 kernel: bridge: filtering via arp/ip/ip6tables is no longer available by default. Update your scripts to load br_netfilter if you need this. Mar 17 18:44:22.890569 kernel: Bridge firewalling registered Mar 17 18:44:22.877938 systemd-resolved[200]: Positive Trust Anchors: Mar 17 18:44:22.896941 systemd[1]: Started systemd-journald.service. Mar 17 18:44:22.896967 kernel: audit: type=1130 audit(1742237062.891:2): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-tmpfiles-setup-dev comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:44:22.891000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-tmpfiles-setup-dev comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:44:22.877947 systemd-resolved[200]: . IN DS 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d Mar 17 18:44:22.897000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-journald comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:44:22.877974 systemd-resolved[200]: Negative trust anchors: home.arpa 10.in-addr.arpa 16.172.in-addr.arpa 17.172.in-addr.arpa 18.172.in-addr.arpa 19.172.in-addr.arpa 20.172.in-addr.arpa 21.172.in-addr.arpa 22.172.in-addr.arpa 23.172.in-addr.arpa 24.172.in-addr.arpa 25.172.in-addr.arpa 26.172.in-addr.arpa 27.172.in-addr.arpa 28.172.in-addr.arpa 29.172.in-addr.arpa 30.172.in-addr.arpa 31.172.in-addr.arpa 168.192.in-addr.arpa d.f.ip6.arpa corp home internal intranet lan local private test Mar 17 18:44:22.909827 kernel: audit: type=1130 audit(1742237062.897:3): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-journald comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:44:22.909854 kernel: audit: type=1130 audit(1742237062.902:4): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-resolved comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:44:22.902000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-resolved comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:44:22.880162 systemd-resolved[200]: Defaulting to hostname 'linux'. Mar 17 18:44:22.890444 systemd-modules-load[199]: Inserted module 'br_netfilter' Mar 17 18:44:22.918803 kernel: SCSI subsystem initialized Mar 17 18:44:22.898217 systemd[1]: Started systemd-resolved.service. Mar 17 18:44:22.903150 systemd[1]: Finished systemd-vconsole-setup.service. Mar 17 18:44:22.913000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-vconsole-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:44:22.913664 systemd[1]: Reached target nss-lookup.target. Mar 17 18:44:22.925571 kernel: audit: type=1130 audit(1742237062.913:5): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-vconsole-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:44:22.914859 systemd[1]: Starting dracut-cmdline-ask.service... Mar 17 18:44:22.931141 kernel: device-mapper: core: CONFIG_IMA_DISABLE_HTABLE is disabled. Duplicate IMA measurements will not be recorded in the IMA log. Mar 17 18:44:22.931170 kernel: device-mapper: uevent: version 1.0.3 Mar 17 18:44:22.931664 kernel: device-mapper: ioctl: 4.45.0-ioctl (2021-03-22) initialised: dm-devel@redhat.com Mar 17 18:44:22.933318 systemd[1]: Finished dracut-cmdline-ask.service. Mar 17 18:44:22.932000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-cmdline-ask comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:44:22.934142 systemd[1]: Starting dracut-cmdline.service... Mar 17 18:44:22.941471 kernel: audit: type=1130 audit(1742237062.932:6): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-cmdline-ask comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:44:22.939384 systemd-modules-load[199]: Inserted module 'dm_multipath' Mar 17 18:44:22.947050 kernel: audit: type=1130 audit(1742237062.940:7): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-modules-load comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:44:22.940000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-modules-load comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:44:22.947112 dracut-cmdline[217]: dracut-dracut-053 Mar 17 18:44:22.940057 systemd[1]: Finished systemd-modules-load.service. Mar 17 18:44:22.949391 dracut-cmdline[217]: Using kernel command line parameters: rd.driver.pre=btrfs rootflags=rw mount.usrflags=ro BOOT_IMAGE=/flatcar/vmlinuz-a mount.usr=/dev/mapper/usr verity.usr=PARTUUID=7130c94a-213a-4e5a-8e26-6cce9662f132 rootflags=rw mount.usrflags=ro consoleblank=0 root=LABEL=ROOT console=ttyS0,115200 flatcar.first_boot=detected verity.usrhash=249ccd113f901380672c0d31e18f792e8e0344094c0e39eedc449f039418b31a Mar 17 18:44:22.942103 systemd[1]: Starting systemd-sysctl.service... Mar 17 18:44:22.956000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-sysctl comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:44:22.960664 kernel: audit: type=1130 audit(1742237062.956:8): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-sysctl comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:44:22.956097 systemd[1]: Finished systemd-sysctl.service. Mar 17 18:44:23.008693 kernel: Loading iSCSI transport class v2.0-870. Mar 17 18:44:23.027668 kernel: iscsi: registered transport (tcp) Mar 17 18:44:23.050677 kernel: iscsi: registered transport (qla4xxx) Mar 17 18:44:23.050756 kernel: QLogic iSCSI HBA Driver Mar 17 18:44:23.083048 systemd[1]: Finished dracut-cmdline.service. Mar 17 18:44:23.084000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-cmdline comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:44:23.085935 systemd[1]: Starting dracut-pre-udev.service... Mar 17 18:44:23.089582 kernel: audit: type=1130 audit(1742237063.084:9): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-cmdline comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:44:23.134661 kernel: raid6: avx2x4 gen() 30008 MB/s Mar 17 18:44:23.151661 kernel: raid6: avx2x4 xor() 6981 MB/s Mar 17 18:44:23.168657 kernel: raid6: avx2x2 gen() 22649 MB/s Mar 17 18:44:23.185660 kernel: raid6: avx2x2 xor() 18949 MB/s Mar 17 18:44:23.202660 kernel: raid6: avx2x1 gen() 26096 MB/s Mar 17 18:44:23.219663 kernel: raid6: avx2x1 xor() 15120 MB/s Mar 17 18:44:23.236661 kernel: raid6: sse2x4 gen() 14677 MB/s Mar 17 18:44:23.253663 kernel: raid6: sse2x4 xor() 7457 MB/s Mar 17 18:44:23.270692 kernel: raid6: sse2x2 gen() 16255 MB/s Mar 17 18:44:23.287663 kernel: raid6: sse2x2 xor() 9711 MB/s Mar 17 18:44:23.304677 kernel: raid6: sse2x1 gen() 12024 MB/s Mar 17 18:44:23.322113 kernel: raid6: sse2x1 xor() 7691 MB/s Mar 17 18:44:23.322188 kernel: raid6: using algorithm avx2x4 gen() 30008 MB/s Mar 17 18:44:23.322201 kernel: raid6: .... xor() 6981 MB/s, rmw enabled Mar 17 18:44:23.322802 kernel: raid6: using avx2x2 recovery algorithm Mar 17 18:44:23.334663 kernel: xor: automatically using best checksumming function avx Mar 17 18:44:23.425679 kernel: Btrfs loaded, crc32c=crc32c-intel, zoned=no, fsverity=no Mar 17 18:44:23.433928 systemd[1]: Finished dracut-pre-udev.service. Mar 17 18:44:23.435000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-udev comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:44:23.438000 audit: BPF prog-id=7 op=LOAD Mar 17 18:44:23.438000 audit: BPF prog-id=8 op=LOAD Mar 17 18:44:23.438644 kernel: audit: type=1130 audit(1742237063.435:10): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-udev comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:44:23.438968 systemd[1]: Starting systemd-udevd.service... Mar 17 18:44:23.450398 systemd-udevd[401]: Using default interface naming scheme 'v252'. Mar 17 18:44:23.454144 systemd[1]: Started systemd-udevd.service. Mar 17 18:44:23.455000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-udevd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:44:23.456798 systemd[1]: Starting dracut-pre-trigger.service... Mar 17 18:44:23.465561 dracut-pre-trigger[409]: rd.md=0: removing MD RAID activation Mar 17 18:44:23.490565 systemd[1]: Finished dracut-pre-trigger.service. Mar 17 18:44:23.490000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-trigger comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:44:23.492976 systemd[1]: Starting systemd-udev-trigger.service... Mar 17 18:44:23.524399 systemd[1]: Finished systemd-udev-trigger.service. Mar 17 18:44:23.525000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-udev-trigger comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:44:23.557654 kernel: cryptd: max_cpu_qlen set to 1000 Mar 17 18:44:23.565648 kernel: libata version 3.00 loaded. Mar 17 18:44:23.567655 kernel: AVX2 version of gcm_enc/dec engaged. Mar 17 18:44:23.569706 kernel: AES CTR mode by8 optimization enabled Mar 17 18:44:23.574689 kernel: ahci 0000:00:1f.2: version 3.0 Mar 17 18:44:23.583158 kernel: ACPI: \_SB_.GSIA: Enabled at IRQ 16 Mar 17 18:44:23.583176 kernel: virtio_blk virtio1: [vda] 19775488 512-byte logical blocks (10.1 GB/9.43 GiB) Mar 17 18:44:23.583285 kernel: ahci 0000:00:1f.2: AHCI 0001.0000 32 slots 6 ports 1.5 Gbps 0x3f impl SATA mode Mar 17 18:44:23.583369 kernel: ahci 0000:00:1f.2: flags: 64bit ncq only Mar 17 18:44:23.583447 kernel: scsi host0: ahci Mar 17 18:44:23.583547 kernel: scsi host1: ahci Mar 17 18:44:23.583630 kernel: scsi host2: ahci Mar 17 18:44:23.583742 kernel: scsi host3: ahci Mar 17 18:44:23.583824 kernel: GPT:Primary header thinks Alt. header is not at the end of the disk. Mar 17 18:44:23.583834 kernel: GPT:9289727 != 19775487 Mar 17 18:44:23.583842 kernel: GPT:Alternate GPT header not at the end of the disk. Mar 17 18:44:23.583851 kernel: GPT:9289727 != 19775487 Mar 17 18:44:23.583861 kernel: GPT: Use GNU Parted to correct GPT errors. Mar 17 18:44:23.583870 kernel: vda: vda1 vda2 vda3 vda4 vda6 vda7 vda9 Mar 17 18:44:23.583879 kernel: scsi host4: ahci Mar 17 18:44:23.583963 kernel: scsi host5: ahci Mar 17 18:44:23.584044 kernel: ata1: SATA max UDMA/133 abar m4096@0xfebd4000 port 0xfebd4100 irq 31 Mar 17 18:44:23.584053 kernel: ata2: SATA max UDMA/133 abar m4096@0xfebd4000 port 0xfebd4180 irq 31 Mar 17 18:44:23.584062 kernel: ata3: SATA max UDMA/133 abar m4096@0xfebd4000 port 0xfebd4200 irq 31 Mar 17 18:44:23.584070 kernel: ata4: SATA max UDMA/133 abar m4096@0xfebd4000 port 0xfebd4280 irq 31 Mar 17 18:44:23.584081 kernel: ata5: SATA max UDMA/133 abar m4096@0xfebd4000 port 0xfebd4300 irq 31 Mar 17 18:44:23.584090 kernel: ata6: SATA max UDMA/133 abar m4096@0xfebd4000 port 0xfebd4380 irq 31 Mar 17 18:44:23.597492 systemd[1]: Found device dev-disk-by\x2dpartuuid-7130c94a\x2d213a\x2d4e5a\x2d8e26\x2d6cce9662f132.device. Mar 17 18:44:23.640374 kernel: BTRFS: device label OEM devid 1 transid 12 /dev/vda6 scanned by (udev-worker) (447) Mar 17 18:44:23.642824 systemd[1]: Found device dev-disk-by\x2dpartlabel-USR\x2dA.device. Mar 17 18:44:23.653992 systemd[1]: Found device dev-disk-by\x2dlabel-EFI\x2dSYSTEM.device. Mar 17 18:44:23.660324 systemd[1]: Found device dev-disk-by\x2dlabel-ROOT.device. Mar 17 18:44:23.669725 systemd[1]: Found device dev-disk-by\x2dlabel-OEM.device. Mar 17 18:44:23.672210 systemd[1]: Starting disk-uuid.service... Mar 17 18:44:23.680656 disk-uuid[525]: Primary Header is updated. Mar 17 18:44:23.680656 disk-uuid[525]: Secondary Entries is updated. Mar 17 18:44:23.680656 disk-uuid[525]: Secondary Header is updated. Mar 17 18:44:23.684668 kernel: vda: vda1 vda2 vda3 vda4 vda6 vda7 vda9 Mar 17 18:44:23.687660 kernel: vda: vda1 vda2 vda3 vda4 vda6 vda7 vda9 Mar 17 18:44:23.891668 kernel: ata3: SATA link up 1.5 Gbps (SStatus 113 SControl 300) Mar 17 18:44:23.891714 kernel: ata1: SATA link down (SStatus 0 SControl 300) Mar 17 18:44:23.892671 kernel: ata2: SATA link down (SStatus 0 SControl 300) Mar 17 18:44:23.894987 kernel: ata3.00: ATAPI: QEMU DVD-ROM, 2.5+, max UDMA/100 Mar 17 18:44:23.895060 kernel: ata3.00: applying bridge limits Mar 17 18:44:23.895071 kernel: ata3.00: configured for UDMA/100 Mar 17 18:44:23.896661 kernel: scsi 2:0:0:0: CD-ROM QEMU QEMU DVD-ROM 2.5+ PQ: 0 ANSI: 5 Mar 17 18:44:23.901668 kernel: ata4: SATA link down (SStatus 0 SControl 300) Mar 17 18:44:23.901699 kernel: ata6: SATA link down (SStatus 0 SControl 300) Mar 17 18:44:23.902672 kernel: ata5: SATA link down (SStatus 0 SControl 300) Mar 17 18:44:23.936866 kernel: sr 2:0:0:0: [sr0] scsi3-mmc drive: 4x/4x cd/rw xa/form2 tray Mar 17 18:44:23.954314 kernel: cdrom: Uniform CD-ROM driver Revision: 3.20 Mar 17 18:44:23.954345 kernel: sr 2:0:0:0: Attached scsi CD-ROM sr0 Mar 17 18:44:24.689663 kernel: vda: vda1 vda2 vda3 vda4 vda6 vda7 vda9 Mar 17 18:44:24.689747 disk-uuid[526]: The operation has completed successfully. Mar 17 18:44:24.709290 systemd[1]: disk-uuid.service: Deactivated successfully. Mar 17 18:44:24.708000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=disk-uuid comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:44:24.708000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=disk-uuid comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:44:24.709378 systemd[1]: Finished disk-uuid.service. Mar 17 18:44:24.715962 systemd[1]: Starting verity-setup.service... Mar 17 18:44:24.728665 kernel: device-mapper: verity: sha256 using implementation "sha256-ni" Mar 17 18:44:24.745969 systemd[1]: Found device dev-mapper-usr.device. Mar 17 18:44:24.748291 systemd[1]: Mounting sysusr-usr.mount... Mar 17 18:44:24.751408 systemd[1]: Finished verity-setup.service. Mar 17 18:44:24.752000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=verity-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:44:24.810654 kernel: EXT4-fs (dm-0): mounted filesystem without journal. Opts: norecovery. Quota mode: none. Mar 17 18:44:24.810866 systemd[1]: Mounted sysusr-usr.mount. Mar 17 18:44:24.811037 systemd[1]: afterburn-network-kargs.service was skipped because no trigger condition checks were met. Mar 17 18:44:24.811624 systemd[1]: Starting ignition-setup.service... Mar 17 18:44:24.814642 systemd[1]: Starting parse-ip-for-networkd.service... Mar 17 18:44:24.822351 kernel: BTRFS info (device vda6): using crc32c (crc32c-intel) checksum algorithm Mar 17 18:44:24.822387 kernel: BTRFS info (device vda6): using free space tree Mar 17 18:44:24.822399 kernel: BTRFS info (device vda6): has skinny extents Mar 17 18:44:24.829450 systemd[1]: mnt-oem.mount: Deactivated successfully. Mar 17 18:44:24.837454 systemd[1]: Finished ignition-setup.service. Mar 17 18:44:24.837000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:44:24.839275 systemd[1]: Starting ignition-fetch-offline.service... Mar 17 18:44:24.876793 ignition[637]: Ignition 2.14.0 Mar 17 18:44:24.876804 ignition[637]: Stage: fetch-offline Mar 17 18:44:24.876850 ignition[637]: no configs at "/usr/lib/ignition/base.d" Mar 17 18:44:24.876858 ignition[637]: no config dir at "/usr/lib/ignition/base.platform.d/qemu" Mar 17 18:44:24.876950 ignition[637]: parsed url from cmdline: "" Mar 17 18:44:24.876953 ignition[637]: no config URL provided Mar 17 18:44:24.876957 ignition[637]: reading system config file "/usr/lib/ignition/user.ign" Mar 17 18:44:24.876964 ignition[637]: no config at "/usr/lib/ignition/user.ign" Mar 17 18:44:24.881000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=parse-ip-for-networkd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:44:24.883000 audit: BPF prog-id=9 op=LOAD Mar 17 18:44:24.881662 systemd[1]: Finished parse-ip-for-networkd.service. Mar 17 18:44:24.876980 ignition[637]: op(1): [started] loading QEMU firmware config module Mar 17 18:44:24.884475 systemd[1]: Starting systemd-networkd.service... Mar 17 18:44:24.876987 ignition[637]: op(1): executing: "modprobe" "qemu_fw_cfg" Mar 17 18:44:24.890163 ignition[637]: op(1): [finished] loading QEMU firmware config module Mar 17 18:44:24.904877 systemd-networkd[718]: lo: Link UP Mar 17 18:44:24.904886 systemd-networkd[718]: lo: Gained carrier Mar 17 18:44:24.905265 systemd-networkd[718]: Enumeration completed Mar 17 18:44:24.905485 systemd-networkd[718]: eth0: Configuring with /usr/lib/systemd/network/zz-default.network. Mar 17 18:44:24.913000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-networkd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:44:24.906546 systemd-networkd[718]: eth0: Link UP Mar 17 18:44:24.906549 systemd-networkd[718]: eth0: Gained carrier Mar 17 18:44:24.907378 systemd[1]: Started systemd-networkd.service. Mar 17 18:44:24.914366 systemd[1]: Reached target network.target. Mar 17 18:44:24.916223 systemd[1]: Starting iscsiuio.service... Mar 17 18:44:24.927574 systemd[1]: Started iscsiuio.service. Mar 17 18:44:24.927000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=iscsiuio comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:44:24.929261 systemd[1]: Starting iscsid.service... Mar 17 18:44:24.932021 iscsid[723]: iscsid: can't open InitiatorName configuration file /etc/iscsi/initiatorname.iscsi Mar 17 18:44:24.932021 iscsid[723]: iscsid: Warning: InitiatorName file /etc/iscsi/initiatorname.iscsi does not exist or does not contain a properly formatted InitiatorName. If using software iscsi (iscsi_tcp or ib_iser) or partial offload (bnx2i or cxgbi iscsi), you may not be able to log into or discover targets. Please create a file /etc/iscsi/initiatorname.iscsi that contains a sting with the format: InitiatorName=iqn.yyyy-mm.[:identifier]. Mar 17 18:44:24.932021 iscsid[723]: Example: InitiatorName=iqn.2001-04.com.redhat:fc6. Mar 17 18:44:24.932021 iscsid[723]: If using hardware iscsi like qla4xxx this message can be ignored. Mar 17 18:44:24.932021 iscsid[723]: iscsid: can't open InitiatorAlias configuration file /etc/iscsi/initiatorname.iscsi Mar 17 18:44:24.932021 iscsid[723]: iscsid: can't open iscsid.safe_logout configuration file /etc/iscsi/iscsid.conf Mar 17 18:44:24.934000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=iscsid comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:44:24.947000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-initqueue comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:44:24.933026 systemd[1]: Started iscsid.service. Mar 17 18:44:24.935664 systemd[1]: Starting dracut-initqueue.service... Mar 17 18:44:24.945525 systemd[1]: Finished dracut-initqueue.service. Mar 17 18:44:24.948108 systemd[1]: Reached target remote-fs-pre.target. Mar 17 18:44:24.950791 systemd[1]: Reached target remote-cryptsetup.target. Mar 17 18:44:24.951979 systemd[1]: Reached target remote-fs.target. Mar 17 18:44:24.953983 systemd[1]: Starting dracut-pre-mount.service... Mar 17 18:44:24.961587 systemd[1]: Finished dracut-pre-mount.service. Mar 17 18:44:24.962000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-mount comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:44:24.963915 ignition[637]: parsing config with SHA512: 8490372e6a6f39a71cc83b591f96c6efb96c09b003bc2e2601688ece93b05f69b06255fb13f23198f84329f9e51c691f68143ee6bc03ed323083255a9c834a67 Mar 17 18:44:24.970238 unknown[637]: fetched base config from "system" Mar 17 18:44:24.970252 unknown[637]: fetched user config from "qemu" Mar 17 18:44:24.970925 ignition[637]: fetch-offline: fetch-offline passed Mar 17 18:44:24.972000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-fetch-offline comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:44:24.971946 systemd[1]: Finished ignition-fetch-offline.service. Mar 17 18:44:24.970990 ignition[637]: Ignition finished successfully Mar 17 18:44:24.973247 systemd[1]: ignition-fetch.service was skipped because of an unmet condition check (ConditionPathExists=!/run/ignition.json). Mar 17 18:44:24.974063 systemd[1]: Starting ignition-kargs.service... Mar 17 18:44:24.980753 systemd-networkd[718]: eth0: DHCPv4 address 10.0.0.110/16, gateway 10.0.0.1 acquired from 10.0.0.1 Mar 17 18:44:24.983985 ignition[737]: Ignition 2.14.0 Mar 17 18:44:24.983995 ignition[737]: Stage: kargs Mar 17 18:44:24.984095 ignition[737]: no configs at "/usr/lib/ignition/base.d" Mar 17 18:44:24.984106 ignition[737]: no config dir at "/usr/lib/ignition/base.platform.d/qemu" Mar 17 18:44:24.986974 systemd[1]: Finished ignition-kargs.service. Mar 17 18:44:24.988000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-kargs comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:44:24.985272 ignition[737]: kargs: kargs passed Mar 17 18:44:24.989858 systemd[1]: Starting ignition-disks.service... Mar 17 18:44:24.985313 ignition[737]: Ignition finished successfully Mar 17 18:44:24.996159 ignition[743]: Ignition 2.14.0 Mar 17 18:44:24.996167 ignition[743]: Stage: disks Mar 17 18:44:24.996250 ignition[743]: no configs at "/usr/lib/ignition/base.d" Mar 17 18:44:24.996259 ignition[743]: no config dir at "/usr/lib/ignition/base.platform.d/qemu" Mar 17 18:44:24.999000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-disks comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:44:24.997947 systemd[1]: Finished ignition-disks.service. Mar 17 18:44:24.997230 ignition[743]: disks: disks passed Mar 17 18:44:24.999858 systemd[1]: Reached target initrd-root-device.target. Mar 17 18:44:24.997263 ignition[743]: Ignition finished successfully Mar 17 18:44:25.001766 systemd[1]: Reached target local-fs-pre.target. Mar 17 18:44:25.002593 systemd[1]: Reached target local-fs.target. Mar 17 18:44:25.003377 systemd[1]: Reached target sysinit.target. Mar 17 18:44:25.004198 systemd[1]: Reached target basic.target. Mar 17 18:44:25.006838 systemd[1]: Starting systemd-fsck-root.service... Mar 17 18:44:25.018609 systemd-fsck[751]: ROOT: clean, 623/553520 files, 56022/553472 blocks Mar 17 18:44:25.024413 systemd[1]: Finished systemd-fsck-root.service. Mar 17 18:44:25.025000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-fsck-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:44:25.027322 systemd[1]: Mounting sysroot.mount... Mar 17 18:44:25.033655 kernel: EXT4-fs (vda9): mounted filesystem with ordered data mode. Opts: (null). Quota mode: none. Mar 17 18:44:25.034387 systemd[1]: Mounted sysroot.mount. Mar 17 18:44:25.035185 systemd[1]: Reached target initrd-root-fs.target. Mar 17 18:44:25.037755 systemd[1]: Mounting sysroot-usr.mount... Mar 17 18:44:25.039559 systemd[1]: flatcar-metadata-hostname.service was skipped because no trigger condition checks were met. Mar 17 18:44:25.039606 systemd[1]: ignition-remount-sysroot.service was skipped because of an unmet condition check (ConditionPathIsReadWrite=!/sysroot). Mar 17 18:44:25.039669 systemd[1]: Reached target ignition-diskful.target. Mar 17 18:44:25.042779 systemd[1]: Mounted sysroot-usr.mount. Mar 17 18:44:25.045039 systemd[1]: Starting initrd-setup-root.service... Mar 17 18:44:25.049737 initrd-setup-root[761]: cut: /sysroot/etc/passwd: No such file or directory Mar 17 18:44:25.052833 initrd-setup-root[769]: cut: /sysroot/etc/group: No such file or directory Mar 17 18:44:25.056615 initrd-setup-root[777]: cut: /sysroot/etc/shadow: No such file or directory Mar 17 18:44:25.059207 initrd-setup-root[785]: cut: /sysroot/etc/gshadow: No such file or directory Mar 17 18:44:25.080641 systemd[1]: Finished initrd-setup-root.service. Mar 17 18:44:25.080000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-setup-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:44:25.081384 systemd[1]: Starting ignition-mount.service... Mar 17 18:44:25.082264 systemd[1]: Starting sysroot-boot.service... Mar 17 18:44:25.086231 bash[802]: umount: /sysroot/usr/share/oem: not mounted. Mar 17 18:44:25.093260 ignition[803]: INFO : Ignition 2.14.0 Mar 17 18:44:25.093260 ignition[803]: INFO : Stage: mount Mar 17 18:44:25.095992 ignition[803]: INFO : no configs at "/usr/lib/ignition/base.d" Mar 17 18:44:25.095992 ignition[803]: INFO : no config dir at "/usr/lib/ignition/base.platform.d/qemu" Mar 17 18:44:25.095992 ignition[803]: INFO : mount: mount passed Mar 17 18:44:25.095992 ignition[803]: INFO : Ignition finished successfully Mar 17 18:44:25.095000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-mount comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:44:25.094773 systemd[1]: Finished ignition-mount.service. Mar 17 18:44:25.100000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=sysroot-boot comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:44:25.099762 systemd[1]: Finished sysroot-boot.service. Mar 17 18:44:25.757123 systemd[1]: Mounting sysroot-usr-share-oem.mount... Mar 17 18:44:25.763685 kernel: BTRFS: device label OEM devid 1 transid 13 /dev/vda6 scanned by mount (813) Mar 17 18:44:25.763742 kernel: BTRFS info (device vda6): using crc32c (crc32c-intel) checksum algorithm Mar 17 18:44:25.763752 kernel: BTRFS info (device vda6): using free space tree Mar 17 18:44:25.765222 kernel: BTRFS info (device vda6): has skinny extents Mar 17 18:44:25.767699 systemd[1]: Mounted sysroot-usr-share-oem.mount. Mar 17 18:44:25.769071 systemd[1]: Starting ignition-files.service... Mar 17 18:44:25.781098 ignition[833]: INFO : Ignition 2.14.0 Mar 17 18:44:25.781098 ignition[833]: INFO : Stage: files Mar 17 18:44:25.783254 ignition[833]: INFO : no configs at "/usr/lib/ignition/base.d" Mar 17 18:44:25.783254 ignition[833]: INFO : no config dir at "/usr/lib/ignition/base.platform.d/qemu" Mar 17 18:44:25.783254 ignition[833]: DEBUG : files: compiled without relabeling support, skipping Mar 17 18:44:25.783254 ignition[833]: INFO : files: ensureUsers: op(1): [started] creating or modifying user "core" Mar 17 18:44:25.783254 ignition[833]: DEBUG : files: ensureUsers: op(1): executing: "usermod" "--root" "/sysroot" "core" Mar 17 18:44:25.790298 ignition[833]: INFO : files: ensureUsers: op(1): [finished] creating or modifying user "core" Mar 17 18:44:25.790298 ignition[833]: INFO : files: ensureUsers: op(2): [started] adding ssh keys to user "core" Mar 17 18:44:25.790298 ignition[833]: INFO : files: ensureUsers: op(2): [finished] adding ssh keys to user "core" Mar 17 18:44:25.790298 ignition[833]: INFO : files: createFilesystemsFiles: createFiles: op(3): [started] writing file "/sysroot/opt/helm-v3.13.2-linux-amd64.tar.gz" Mar 17 18:44:25.790298 ignition[833]: INFO : files: createFilesystemsFiles: createFiles: op(3): GET https://get.helm.sh/helm-v3.13.2-linux-amd64.tar.gz: attempt #1 Mar 17 18:44:25.784736 unknown[833]: wrote ssh authorized keys file for user: core Mar 17 18:44:25.857169 ignition[833]: INFO : files: createFilesystemsFiles: createFiles: op(3): GET result: OK Mar 17 18:44:25.962423 ignition[833]: INFO : files: createFilesystemsFiles: createFiles: op(3): [finished] writing file "/sysroot/opt/helm-v3.13.2-linux-amd64.tar.gz" Mar 17 18:44:25.962423 ignition[833]: INFO : files: createFilesystemsFiles: createFiles: op(4): [started] writing file "/sysroot/home/core/install.sh" Mar 17 18:44:25.966438 ignition[833]: INFO : files: createFilesystemsFiles: createFiles: op(4): [finished] writing file "/sysroot/home/core/install.sh" Mar 17 18:44:25.966438 ignition[833]: INFO : files: createFilesystemsFiles: createFiles: op(5): [started] writing file "/sysroot/home/core/nginx.yaml" Mar 17 18:44:25.966438 ignition[833]: INFO : files: createFilesystemsFiles: createFiles: op(5): [finished] writing file "/sysroot/home/core/nginx.yaml" Mar 17 18:44:25.966438 ignition[833]: INFO : files: createFilesystemsFiles: createFiles: op(6): [started] writing file "/sysroot/home/core/nfs-pod.yaml" Mar 17 18:44:25.966438 ignition[833]: INFO : files: createFilesystemsFiles: createFiles: op(6): [finished] writing file "/sysroot/home/core/nfs-pod.yaml" Mar 17 18:44:25.966438 ignition[833]: INFO : files: createFilesystemsFiles: createFiles: op(7): [started] writing file "/sysroot/home/core/nfs-pvc.yaml" Mar 17 18:44:25.966438 ignition[833]: INFO : files: createFilesystemsFiles: createFiles: op(7): [finished] writing file "/sysroot/home/core/nfs-pvc.yaml" Mar 17 18:44:25.966438 ignition[833]: INFO : files: createFilesystemsFiles: createFiles: op(8): [started] writing file "/sysroot/etc/flatcar/update.conf" Mar 17 18:44:25.966438 ignition[833]: INFO : files: createFilesystemsFiles: createFiles: op(8): [finished] writing file "/sysroot/etc/flatcar/update.conf" Mar 17 18:44:25.966438 ignition[833]: INFO : files: createFilesystemsFiles: createFiles: op(9): [started] writing link "/sysroot/etc/extensions/kubernetes.raw" -> "/opt/extensions/kubernetes/kubernetes-v1.30.1-x86-64.raw" Mar 17 18:44:25.966438 ignition[833]: INFO : files: createFilesystemsFiles: createFiles: op(9): [finished] writing link "/sysroot/etc/extensions/kubernetes.raw" -> "/opt/extensions/kubernetes/kubernetes-v1.30.1-x86-64.raw" Mar 17 18:44:25.966438 ignition[833]: INFO : files: createFilesystemsFiles: createFiles: op(a): [started] writing file "/sysroot/opt/extensions/kubernetes/kubernetes-v1.30.1-x86-64.raw" Mar 17 18:44:25.966438 ignition[833]: INFO : files: createFilesystemsFiles: createFiles: op(a): GET https://github.com/flatcar/sysext-bakery/releases/download/latest/kubernetes-v1.30.1-x86-64.raw: attempt #1 Mar 17 18:44:26.328273 ignition[833]: INFO : files: createFilesystemsFiles: createFiles: op(a): GET result: OK Mar 17 18:44:26.357121 systemd-networkd[718]: eth0: Gained IPv6LL Mar 17 18:44:26.668018 ignition[833]: INFO : files: createFilesystemsFiles: createFiles: op(a): [finished] writing file "/sysroot/opt/extensions/kubernetes/kubernetes-v1.30.1-x86-64.raw" Mar 17 18:44:26.668018 ignition[833]: INFO : files: op(b): [started] processing unit "prepare-helm.service" Mar 17 18:44:26.672034 ignition[833]: INFO : files: op(b): op(c): [started] writing unit "prepare-helm.service" at "/sysroot/etc/systemd/system/prepare-helm.service" Mar 17 18:44:26.672034 ignition[833]: INFO : files: op(b): op(c): [finished] writing unit "prepare-helm.service" at "/sysroot/etc/systemd/system/prepare-helm.service" Mar 17 18:44:26.672034 ignition[833]: INFO : files: op(b): [finished] processing unit "prepare-helm.service" Mar 17 18:44:26.672034 ignition[833]: INFO : files: op(d): [started] processing unit "coreos-metadata.service" Mar 17 18:44:26.672034 ignition[833]: INFO : files: op(d): op(e): [started] writing unit "coreos-metadata.service" at "/sysroot/etc/systemd/system/coreos-metadata.service" Mar 17 18:44:26.672034 ignition[833]: INFO : files: op(d): op(e): [finished] writing unit "coreos-metadata.service" at "/sysroot/etc/systemd/system/coreos-metadata.service" Mar 17 18:44:26.672034 ignition[833]: INFO : files: op(d): [finished] processing unit "coreos-metadata.service" Mar 17 18:44:26.672034 ignition[833]: INFO : files: op(f): [started] setting preset to enabled for "prepare-helm.service" Mar 17 18:44:26.672034 ignition[833]: INFO : files: op(f): [finished] setting preset to enabled for "prepare-helm.service" Mar 17 18:44:26.672034 ignition[833]: INFO : files: op(10): [started] setting preset to disabled for "coreos-metadata.service" Mar 17 18:44:26.672034 ignition[833]: INFO : files: op(10): op(11): [started] removing enablement symlink(s) for "coreos-metadata.service" Mar 17 18:44:26.705689 ignition[833]: INFO : files: op(10): op(11): [finished] removing enablement symlink(s) for "coreos-metadata.service" Mar 17 18:44:26.707330 ignition[833]: INFO : files: op(10): [finished] setting preset to disabled for "coreos-metadata.service" Mar 17 18:44:26.708744 ignition[833]: INFO : files: createResultFile: createFiles: op(12): [started] writing file "/sysroot/etc/.ignition-result.json" Mar 17 18:44:26.710469 ignition[833]: INFO : files: createResultFile: createFiles: op(12): [finished] writing file "/sysroot/etc/.ignition-result.json" Mar 17 18:44:26.710469 ignition[833]: INFO : files: files passed Mar 17 18:44:26.712875 ignition[833]: INFO : Ignition finished successfully Mar 17 18:44:26.714678 systemd[1]: Finished ignition-files.service. Mar 17 18:44:26.715000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-files comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:44:26.717065 systemd[1]: Starting initrd-setup-root-after-ignition.service... Mar 17 18:44:26.718018 systemd[1]: torcx-profile-populate.service was skipped because of an unmet condition check (ConditionPathExists=/sysroot/etc/torcx/next-profile). Mar 17 18:44:26.718515 systemd[1]: Starting ignition-quench.service... Mar 17 18:44:26.721000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-quench comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:44:26.721000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-quench comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:44:26.721150 systemd[1]: ignition-quench.service: Deactivated successfully. Mar 17 18:44:26.721219 systemd[1]: Finished ignition-quench.service. Mar 17 18:44:26.728196 initrd-setup-root-after-ignition[858]: grep: /sysroot/usr/share/oem/oem-release: No such file or directory Mar 17 18:44:26.729721 initrd-setup-root-after-ignition[860]: grep: /sysroot/etc/flatcar/enabled-sysext.conf: No such file or directory Mar 17 18:44:26.730193 systemd[1]: Finished initrd-setup-root-after-ignition.service. Mar 17 18:44:26.731000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-setup-root-after-ignition comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:44:26.732321 systemd[1]: Reached target ignition-complete.target. Mar 17 18:44:26.734740 systemd[1]: Starting initrd-parse-etc.service... Mar 17 18:44:26.746742 systemd[1]: initrd-parse-etc.service: Deactivated successfully. Mar 17 18:44:26.746831 systemd[1]: Finished initrd-parse-etc.service. Mar 17 18:44:26.747000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-parse-etc comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:44:26.747000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-parse-etc comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:44:26.748689 systemd[1]: Reached target initrd-fs.target. Mar 17 18:44:26.750131 systemd[1]: Reached target initrd.target. Mar 17 18:44:26.750894 systemd[1]: dracut-mount.service was skipped because no trigger condition checks were met. Mar 17 18:44:26.751465 systemd[1]: Starting dracut-pre-pivot.service... Mar 17 18:44:26.760457 systemd[1]: Finished dracut-pre-pivot.service. Mar 17 18:44:26.760000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-pivot comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:44:26.761901 systemd[1]: Starting initrd-cleanup.service... Mar 17 18:44:26.769902 systemd[1]: Stopped target nss-lookup.target. Mar 17 18:44:26.770796 systemd[1]: Stopped target remote-cryptsetup.target. Mar 17 18:44:26.772385 systemd[1]: Stopped target timers.target. Mar 17 18:44:26.773982 systemd[1]: dracut-pre-pivot.service: Deactivated successfully. Mar 17 18:44:26.774000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-pivot comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:44:26.774069 systemd[1]: Stopped dracut-pre-pivot.service. Mar 17 18:44:26.775547 systemd[1]: Stopped target initrd.target. Mar 17 18:44:26.777172 systemd[1]: Stopped target basic.target. Mar 17 18:44:26.778720 systemd[1]: Stopped target ignition-complete.target. Mar 17 18:44:26.780280 systemd[1]: Stopped target ignition-diskful.target. Mar 17 18:44:26.781873 systemd[1]: Stopped target initrd-root-device.target. Mar 17 18:44:26.783669 systemd[1]: Stopped target remote-fs.target. Mar 17 18:44:26.785275 systemd[1]: Stopped target remote-fs-pre.target. Mar 17 18:44:26.787017 systemd[1]: Stopped target sysinit.target. Mar 17 18:44:26.788528 systemd[1]: Stopped target local-fs.target. Mar 17 18:44:26.790096 systemd[1]: Stopped target local-fs-pre.target. Mar 17 18:44:26.791680 systemd[1]: Stopped target swap.target. Mar 17 18:44:26.794000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-mount comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:44:26.793103 systemd[1]: dracut-pre-mount.service: Deactivated successfully. Mar 17 18:44:26.793189 systemd[1]: Stopped dracut-pre-mount.service. Mar 17 18:44:26.797000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-initqueue comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:44:26.794776 systemd[1]: Stopped target cryptsetup.target. Mar 17 18:44:26.798000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-fetch-offline comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:44:26.796225 systemd[1]: dracut-initqueue.service: Deactivated successfully. Mar 17 18:44:26.796307 systemd[1]: Stopped dracut-initqueue.service. Mar 17 18:44:26.798045 systemd[1]: ignition-fetch-offline.service: Deactivated successfully. Mar 17 18:44:26.798126 systemd[1]: Stopped ignition-fetch-offline.service. Mar 17 18:44:26.799695 systemd[1]: Stopped target paths.target. Mar 17 18:44:26.801114 systemd[1]: systemd-ask-password-console.path: Deactivated successfully. Mar 17 18:44:26.804695 systemd[1]: Stopped systemd-ask-password-console.path. Mar 17 18:44:26.805830 systemd[1]: Stopped target slices.target. Mar 17 18:44:26.810000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-setup-root-after-ignition comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:44:26.807261 systemd[1]: Stopped target sockets.target. Mar 17 18:44:26.811000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-files comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:44:26.809105 systemd[1]: initrd-setup-root-after-ignition.service: Deactivated successfully. Mar 17 18:44:26.816303 iscsid[723]: iscsid shutting down. Mar 17 18:44:26.809196 systemd[1]: Stopped initrd-setup-root-after-ignition.service. Mar 17 18:44:26.819000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-udev-trigger comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:44:26.810993 systemd[1]: ignition-files.service: Deactivated successfully. Mar 17 18:44:26.822731 ignition[873]: INFO : Ignition 2.14.0 Mar 17 18:44:26.822731 ignition[873]: INFO : Stage: umount Mar 17 18:44:26.822731 ignition[873]: INFO : no configs at "/usr/lib/ignition/base.d" Mar 17 18:44:26.822731 ignition[873]: INFO : no config dir at "/usr/lib/ignition/base.platform.d/qemu" Mar 17 18:44:26.822731 ignition[873]: INFO : umount: umount passed Mar 17 18:44:26.822731 ignition[873]: INFO : Ignition finished successfully Mar 17 18:44:26.822000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-trigger comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:44:26.824000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=iscsid comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:44:26.826000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-mount comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:44:26.830000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-disks comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:44:26.832000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-kargs comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:44:26.833000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:44:26.811087 systemd[1]: Stopped ignition-files.service. Mar 17 18:44:26.813185 systemd[1]: Stopping ignition-mount.service... Mar 17 18:44:26.837000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-cleanup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:44:26.837000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-cleanup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:44:26.814196 systemd[1]: Stopping iscsid.service... Mar 17 18:44:26.816925 systemd[1]: Stopping sysroot-boot.service... Mar 17 18:44:26.838000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=iscsiuio comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:44:26.818102 systemd[1]: systemd-udev-trigger.service: Deactivated successfully. Mar 17 18:44:26.818257 systemd[1]: Stopped systemd-udev-trigger.service. Mar 17 18:44:26.820425 systemd[1]: dracut-pre-trigger.service: Deactivated successfully. Mar 17 18:44:26.820546 systemd[1]: Stopped dracut-pre-trigger.service. Mar 17 18:44:26.824182 systemd[1]: iscsid.service: Deactivated successfully. Mar 17 18:44:26.824259 systemd[1]: Stopped iscsid.service. Mar 17 18:44:26.825747 systemd[1]: ignition-mount.service: Deactivated successfully. Mar 17 18:44:26.850000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-networkd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:44:26.825806 systemd[1]: Stopped ignition-mount.service. Mar 17 18:44:26.827577 systemd[1]: iscsid.socket: Deactivated successfully. Mar 17 18:44:26.853000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-resolved comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:44:26.827661 systemd[1]: Closed iscsid.socket. Mar 17 18:44:26.829424 systemd[1]: ignition-disks.service: Deactivated successfully. Mar 17 18:44:26.829454 systemd[1]: Stopped ignition-disks.service. Mar 17 18:44:26.857000 audit: BPF prog-id=6 op=UNLOAD Mar 17 18:44:26.831385 systemd[1]: ignition-kargs.service: Deactivated successfully. Mar 17 18:44:26.831412 systemd[1]: Stopped ignition-kargs.service. Mar 17 18:44:26.861000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=parse-ip-for-networkd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:44:26.833281 systemd[1]: ignition-setup.service: Deactivated successfully. Mar 17 18:44:26.863000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-sysctl comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:44:26.833312 systemd[1]: Stopped ignition-setup.service. Mar 17 18:44:26.865000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-modules-load comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:44:26.834188 systemd[1]: Stopping iscsiuio.service... Mar 17 18:44:26.835835 systemd[1]: sysroot-boot.mount: Deactivated successfully. Mar 17 18:44:26.836208 systemd[1]: initrd-cleanup.service: Deactivated successfully. Mar 17 18:44:26.836270 systemd[1]: Finished initrd-cleanup.service. Mar 17 18:44:26.838049 systemd[1]: iscsiuio.service: Deactivated successfully. Mar 17 18:44:26.838113 systemd[1]: Stopped iscsiuio.service. Mar 17 18:44:26.872000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=network-cleanup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:44:26.840156 systemd[1]: Stopped target network.target. Mar 17 18:44:26.841035 systemd[1]: iscsiuio.socket: Deactivated successfully. Mar 17 18:44:26.841062 systemd[1]: Closed iscsiuio.socket. Mar 17 18:44:26.841177 systemd[1]: Stopping systemd-networkd.service... Mar 17 18:44:26.876000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-udevd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:44:26.841346 systemd[1]: Stopping systemd-resolved.service... Mar 17 18:44:26.847689 systemd-networkd[718]: eth0: DHCPv6 lease lost Mar 17 18:44:26.879000 audit: BPF prog-id=9 op=UNLOAD Mar 17 18:44:26.879000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-udev comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:44:26.879000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-cmdline comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:44:26.880000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-cmdline-ask comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:44:26.881000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-tmpfiles-setup-dev comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:44:26.849479 systemd[1]: systemd-networkd.service: Deactivated successfully. Mar 17 18:44:26.886000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=kmod-static-nodes comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:44:26.849554 systemd[1]: Stopped systemd-networkd.service. Mar 17 18:44:26.889000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-vconsole-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:44:26.852736 systemd[1]: systemd-resolved.service: Deactivated successfully. Mar 17 18:44:26.852809 systemd[1]: Stopped systemd-resolved.service. Mar 17 18:44:26.856395 systemd[1]: systemd-networkd.socket: Deactivated successfully. Mar 17 18:44:26.856418 systemd[1]: Closed systemd-networkd.socket. Mar 17 18:44:26.858658 systemd[1]: Stopping network-cleanup.service... Mar 17 18:44:26.859950 systemd[1]: parse-ip-for-networkd.service: Deactivated successfully. Mar 17 18:44:26.859996 systemd[1]: Stopped parse-ip-for-networkd.service. Mar 17 18:44:26.861868 systemd[1]: systemd-sysctl.service: Deactivated successfully. Mar 17 18:44:26.861909 systemd[1]: Stopped systemd-sysctl.service. Mar 17 18:44:26.863903 systemd[1]: systemd-modules-load.service: Deactivated successfully. Mar 17 18:44:26.863943 systemd[1]: Stopped systemd-modules-load.service. Mar 17 18:44:26.865794 systemd[1]: Stopping systemd-udevd.service... Mar 17 18:44:26.868437 systemd[1]: run-credentials-systemd\x2dsysctl.service.mount: Deactivated successfully. Mar 17 18:44:26.871150 systemd[1]: network-cleanup.service: Deactivated successfully. Mar 17 18:44:26.871253 systemd[1]: Stopped network-cleanup.service. Mar 17 18:44:26.875483 systemd[1]: systemd-udevd.service: Deactivated successfully. Mar 17 18:44:26.875585 systemd[1]: Stopped systemd-udevd.service. Mar 17 18:44:26.877780 systemd[1]: systemd-udevd-control.socket: Deactivated successfully. Mar 17 18:44:26.877846 systemd[1]: Closed systemd-udevd-control.socket. Mar 17 18:44:26.878761 systemd[1]: systemd-udevd-kernel.socket: Deactivated successfully. Mar 17 18:44:26.878785 systemd[1]: Closed systemd-udevd-kernel.socket. Mar 17 18:44:26.880380 systemd[1]: dracut-pre-udev.service: Deactivated successfully. Mar 17 18:44:26.880412 systemd[1]: Stopped dracut-pre-udev.service. Mar 17 18:44:26.880486 systemd[1]: dracut-cmdline.service: Deactivated successfully. Mar 17 18:44:26.911000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=sysroot-boot comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:44:26.880512 systemd[1]: Stopped dracut-cmdline.service. Mar 17 18:44:26.880680 systemd[1]: dracut-cmdline-ask.service: Deactivated successfully. Mar 17 18:44:26.880713 systemd[1]: Stopped dracut-cmdline-ask.service. Mar 17 18:44:26.881382 systemd[1]: Starting initrd-udevadm-cleanup-db.service... Mar 17 18:44:26.881590 systemd[1]: systemd-tmpfiles-setup-dev.service: Deactivated successfully. Mar 17 18:44:26.881624 systemd[1]: Stopped systemd-tmpfiles-setup-dev.service. Mar 17 18:44:26.884905 systemd[1]: kmod-static-nodes.service: Deactivated successfully. Mar 17 18:44:26.884936 systemd[1]: Stopped kmod-static-nodes.service. Mar 17 18:44:26.888116 systemd[1]: systemd-vconsole-setup.service: Deactivated successfully. Mar 17 18:44:26.888161 systemd[1]: Stopped systemd-vconsole-setup.service. Mar 17 18:44:26.921000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-udevadm-cleanup-db comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:44:26.921000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-udevadm-cleanup-db comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:44:26.901184 systemd[1]: run-credentials-systemd\x2dtmpfiles\x2dsetup\x2ddev.service.mount: Deactivated successfully. Mar 17 18:44:26.908322 systemd[1]: sysroot-boot.service: Deactivated successfully. Mar 17 18:44:26.910024 systemd[1]: Stopped sysroot-boot.service. Mar 17 18:44:26.918134 systemd[1]: initrd-udevadm-cleanup-db.service: Deactivated successfully. Mar 17 18:44:26.920589 systemd[1]: Finished initrd-udevadm-cleanup-db.service. Mar 17 18:44:26.924702 systemd[1]: Reached target initrd-switch-root.target. Mar 17 18:44:26.929888 systemd[1]: initrd-setup-root.service: Deactivated successfully. Mar 17 18:44:26.930846 systemd[1]: Stopped initrd-setup-root.service. Mar 17 18:44:26.931000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-setup-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:44:26.933278 systemd[1]: Starting initrd-switch-root.service... Mar 17 18:44:26.949259 systemd[1]: Switching root. Mar 17 18:44:26.965185 systemd-journald[198]: Journal stopped Mar 17 18:44:29.504888 systemd-journald[198]: Received SIGTERM from PID 1 (systemd). Mar 17 18:44:29.504944 kernel: SELinux: Class mctp_socket not defined in policy. Mar 17 18:44:29.504957 kernel: SELinux: Class anon_inode not defined in policy. Mar 17 18:44:29.504966 kernel: SELinux: the above unknown classes and permissions will be allowed Mar 17 18:44:29.504978 kernel: SELinux: policy capability network_peer_controls=1 Mar 17 18:44:29.504987 kernel: SELinux: policy capability open_perms=1 Mar 17 18:44:29.504997 kernel: SELinux: policy capability extended_socket_class=1 Mar 17 18:44:29.505011 kernel: SELinux: policy capability always_check_network=0 Mar 17 18:44:29.505020 kernel: SELinux: policy capability cgroup_seclabel=1 Mar 17 18:44:29.505029 kernel: SELinux: policy capability nnp_nosuid_transition=1 Mar 17 18:44:29.505039 kernel: SELinux: policy capability genfs_seclabel_symlinks=0 Mar 17 18:44:29.505048 kernel: SELinux: policy capability ioctl_skip_cloexec=0 Mar 17 18:44:29.505062 systemd[1]: Successfully loaded SELinux policy in 37.502ms. Mar 17 18:44:29.505082 systemd[1]: Relabelled /dev, /dev/shm, /run, /sys/fs/cgroup in 6.372ms. Mar 17 18:44:29.505093 systemd[1]: systemd 252 running in system mode (+PAM +AUDIT +SELINUX -APPARMOR +IMA +SMACK +SECCOMP +GCRYPT -GNUTLS +OPENSSL -ACL +BLKID +CURL -ELFUTILS -FIDO2 +IDN2 -IDN +IPTC +KMOD +LIBCRYPTSETUP +LIBFDISK +PCRE2 -PWQUALITY -P11KIT -QRENCODE -TPM2 +BZIP2 +LZ4 +XZ +ZLIB +ZSTD -BPF_FRAMEWORK -XKBCOMMON +UTMP +SYSVINIT default-hierarchy=unified) Mar 17 18:44:29.505103 systemd[1]: Detected virtualization kvm. Mar 17 18:44:29.505113 systemd[1]: Detected architecture x86-64. Mar 17 18:44:29.505123 systemd[1]: Detected first boot. Mar 17 18:44:29.505132 systemd[1]: Initializing machine ID from VM UUID. Mar 17 18:44:29.505142 kernel: kauditd_printk_skb: 66 callbacks suppressed Mar 17 18:44:29.505158 kernel: audit: type=1400 audit(1742237067.310:77): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=1 Mar 17 18:44:29.505172 kernel: audit: type=1400 audit(1742237067.310:78): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=1 Mar 17 18:44:29.505181 kernel: audit: type=1334 audit(1742237067.313:79): prog-id=10 op=LOAD Mar 17 18:44:29.505190 kernel: audit: type=1334 audit(1742237067.313:80): prog-id=10 op=UNLOAD Mar 17 18:44:29.505199 kernel: audit: type=1334 audit(1742237067.316:81): prog-id=11 op=LOAD Mar 17 18:44:29.505208 kernel: audit: type=1334 audit(1742237067.316:82): prog-id=11 op=UNLOAD Mar 17 18:44:29.505217 kernel: SELinux: Context system_u:object_r:container_file_t:s0:c1022,c1023 is not valid (left unmapped). Mar 17 18:44:29.505227 kernel: audit: type=1400 audit(1742237067.347:83): avc: denied { associate } for pid=906 comm="torcx-generator" name="docker" dev="tmpfs" ino=2 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:tmpfs_t:s0 tclass=filesystem permissive=1 srawcon="system_u:object_r:container_file_t:s0:c1022,c1023" Mar 17 18:44:29.505239 kernel: audit: type=1300 audit(1742237067.347:83): arch=c000003e syscall=188 success=yes exit=0 a0=c0001178dc a1=c00002ae40 a2=c000029100 a3=32 items=0 ppid=889 pid=906 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="torcx-generator" exe="/usr/lib/systemd/system-generators/torcx-generator" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:44:29.505250 kernel: audit: type=1327 audit(1742237067.347:83): proctitle=2F7573722F6C69622F73797374656D642F73797374656D2D67656E657261746F72732F746F7263782D67656E657261746F72002F72756E2F73797374656D642F67656E657261746F72002F72756E2F73797374656D642F67656E657261746F722E6561726C79002F72756E2F73797374656D642F67656E657261746F722E6C61 Mar 17 18:44:29.505260 kernel: audit: type=1400 audit(1742237067.349:84): avc: denied { associate } for pid=906 comm="torcx-generator" name="lib" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:tmpfs_t:s0 tclass=filesystem permissive=1 Mar 17 18:44:29.505269 systemd[1]: Populated /etc with preset unit settings. Mar 17 18:44:29.505280 systemd[1]: /usr/lib/systemd/system/locksmithd.service:8: Unit uses CPUShares=; please use CPUWeight= instead. Support for CPUShares= will be removed soon. Mar 17 18:44:29.505291 systemd[1]: /usr/lib/systemd/system/locksmithd.service:9: Unit uses MemoryLimit=; please use MemoryMax= instead. Support for MemoryLimit= will be removed soon. Mar 17 18:44:29.505303 systemd[1]: /run/systemd/system/docker.socket:8: ListenStream= references a path below legacy directory /var/run/, updating /var/run/docker.sock → /run/docker.sock; please update the unit file accordingly. Mar 17 18:44:29.505313 systemd[1]: initrd-switch-root.service: Deactivated successfully. Mar 17 18:44:29.505323 systemd[1]: Stopped initrd-switch-root.service. Mar 17 18:44:29.505334 systemd[1]: systemd-journald.service: Scheduled restart job, restart counter is at 1. Mar 17 18:44:29.505345 systemd[1]: Created slice system-addon\x2dconfig.slice. Mar 17 18:44:29.505355 systemd[1]: Created slice system-addon\x2drun.slice. Mar 17 18:44:29.505365 systemd[1]: Created slice system-getty.slice. Mar 17 18:44:29.505376 systemd[1]: Created slice system-modprobe.slice. Mar 17 18:44:29.505386 systemd[1]: Created slice system-serial\x2dgetty.slice. Mar 17 18:44:29.505396 systemd[1]: Created slice system-system\x2dcloudinit.slice. Mar 17 18:44:29.505406 systemd[1]: Created slice system-systemd\x2dfsck.slice. Mar 17 18:44:29.505416 systemd[1]: Created slice user.slice. Mar 17 18:44:29.505428 systemd[1]: Started systemd-ask-password-console.path. Mar 17 18:44:29.505438 systemd[1]: Started systemd-ask-password-wall.path. Mar 17 18:44:29.505448 systemd[1]: Set up automount boot.automount. Mar 17 18:44:29.505458 systemd[1]: Set up automount proc-sys-fs-binfmt_misc.automount. Mar 17 18:44:29.505469 systemd[1]: Stopped target initrd-switch-root.target. Mar 17 18:44:29.505478 systemd[1]: Stopped target initrd-fs.target. Mar 17 18:44:29.505488 systemd[1]: Stopped target initrd-root-fs.target. Mar 17 18:44:29.505498 systemd[1]: Reached target integritysetup.target. Mar 17 18:44:29.505507 systemd[1]: Reached target remote-cryptsetup.target. Mar 17 18:44:29.505518 systemd[1]: Reached target remote-fs.target. Mar 17 18:44:29.505529 systemd[1]: Reached target slices.target. Mar 17 18:44:29.505538 systemd[1]: Reached target swap.target. Mar 17 18:44:29.505549 systemd[1]: Reached target torcx.target. Mar 17 18:44:29.505559 systemd[1]: Reached target veritysetup.target. Mar 17 18:44:29.505568 systemd[1]: Listening on systemd-coredump.socket. Mar 17 18:44:29.505578 systemd[1]: Listening on systemd-initctl.socket. Mar 17 18:44:29.505595 systemd[1]: Listening on systemd-networkd.socket. Mar 17 18:44:29.505605 systemd[1]: Listening on systemd-udevd-control.socket. Mar 17 18:44:29.505615 systemd[1]: Listening on systemd-udevd-kernel.socket. Mar 17 18:44:29.505626 systemd[1]: Listening on systemd-userdbd.socket. Mar 17 18:44:29.505648 systemd[1]: Mounting dev-hugepages.mount... Mar 17 18:44:29.505657 systemd[1]: Mounting dev-mqueue.mount... Mar 17 18:44:29.505667 systemd[1]: Mounting media.mount... Mar 17 18:44:29.505678 systemd[1]: proc-xen.mount was skipped because of an unmet condition check (ConditionVirtualization=xen). Mar 17 18:44:29.505688 systemd[1]: Mounting sys-kernel-debug.mount... Mar 17 18:44:29.505698 systemd[1]: Mounting sys-kernel-tracing.mount... Mar 17 18:44:29.505708 systemd[1]: Mounting tmp.mount... Mar 17 18:44:29.505718 systemd[1]: Starting flatcar-tmpfiles.service... Mar 17 18:44:29.505729 systemd[1]: ignition-delete-config.service was skipped because no trigger condition checks were met. Mar 17 18:44:29.505739 systemd[1]: Starting kmod-static-nodes.service... Mar 17 18:44:29.505748 systemd[1]: Starting modprobe@configfs.service... Mar 17 18:44:29.505758 systemd[1]: Starting modprobe@dm_mod.service... Mar 17 18:44:29.505771 systemd[1]: Starting modprobe@drm.service... Mar 17 18:44:29.505781 systemd[1]: Starting modprobe@efi_pstore.service... Mar 17 18:44:29.505791 systemd[1]: Starting modprobe@fuse.service... Mar 17 18:44:29.505800 systemd[1]: Starting modprobe@loop.service... Mar 17 18:44:29.505811 systemd[1]: setup-nsswitch.service was skipped because of an unmet condition check (ConditionPathExists=!/etc/nsswitch.conf). Mar 17 18:44:29.505822 systemd[1]: systemd-fsck-root.service: Deactivated successfully. Mar 17 18:44:29.505833 systemd[1]: Stopped systemd-fsck-root.service. Mar 17 18:44:29.505844 kernel: loop: module loaded Mar 17 18:44:29.505854 systemd[1]: systemd-fsck-usr.service: Deactivated successfully. Mar 17 18:44:29.505864 systemd[1]: Stopped systemd-fsck-usr.service. Mar 17 18:44:29.505873 kernel: fuse: init (API version 7.34) Mar 17 18:44:29.505882 systemd[1]: Stopped systemd-journald.service. Mar 17 18:44:29.505892 systemd[1]: Starting systemd-journald.service... Mar 17 18:44:29.505902 systemd[1]: Starting systemd-modules-load.service... Mar 17 18:44:29.505913 systemd[1]: Starting systemd-network-generator.service... Mar 17 18:44:29.505923 systemd[1]: Starting systemd-remount-fs.service... Mar 17 18:44:29.505933 systemd[1]: Starting systemd-udev-trigger.service... Mar 17 18:44:29.505943 systemd[1]: verity-setup.service: Deactivated successfully. Mar 17 18:44:29.505955 systemd-journald[991]: Journal started Mar 17 18:44:29.505989 systemd-journald[991]: Runtime Journal (/run/log/journal/5d20fa49fcf24967a5a4c605d274ba63) is 6.0M, max 48.5M, 42.5M free. Mar 17 18:44:27.021000 audit: MAC_POLICY_LOAD auid=4294967295 ses=4294967295 lsm=selinux res=1 Mar 17 18:44:27.310000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=1 Mar 17 18:44:27.310000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=1 Mar 17 18:44:27.313000 audit: BPF prog-id=10 op=LOAD Mar 17 18:44:27.313000 audit: BPF prog-id=10 op=UNLOAD Mar 17 18:44:27.316000 audit: BPF prog-id=11 op=LOAD Mar 17 18:44:27.316000 audit: BPF prog-id=11 op=UNLOAD Mar 17 18:44:27.347000 audit[906]: AVC avc: denied { associate } for pid=906 comm="torcx-generator" name="docker" dev="tmpfs" ino=2 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:tmpfs_t:s0 tclass=filesystem permissive=1 srawcon="system_u:object_r:container_file_t:s0:c1022,c1023" Mar 17 18:44:27.347000 audit[906]: SYSCALL arch=c000003e syscall=188 success=yes exit=0 a0=c0001178dc a1=c00002ae40 a2=c000029100 a3=32 items=0 ppid=889 pid=906 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="torcx-generator" exe="/usr/lib/systemd/system-generators/torcx-generator" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:44:27.347000 audit: PROCTITLE proctitle=2F7573722F6C69622F73797374656D642F73797374656D2D67656E657261746F72732F746F7263782D67656E657261746F72002F72756E2F73797374656D642F67656E657261746F72002F72756E2F73797374656D642F67656E657261746F722E6561726C79002F72756E2F73797374656D642F67656E657261746F722E6C61 Mar 17 18:44:27.349000 audit[906]: AVC avc: denied { associate } for pid=906 comm="torcx-generator" name="lib" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:tmpfs_t:s0 tclass=filesystem permissive=1 Mar 17 18:44:27.349000 audit[906]: SYSCALL arch=c000003e syscall=258 success=yes exit=0 a0=ffffffffffffff9c a1=c0001179b5 a2=1ed a3=0 items=2 ppid=889 pid=906 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="torcx-generator" exe="/usr/lib/systemd/system-generators/torcx-generator" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:44:27.349000 audit: CWD cwd="/" Mar 17 18:44:27.349000 audit: PATH item=0 name=(null) inode=2 dev=00:1b mode=040755 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:unlabeled_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Mar 17 18:44:27.349000 audit: PATH item=1 name=(null) inode=3 dev=00:1b mode=040755 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:unlabeled_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Mar 17 18:44:27.349000 audit: PROCTITLE proctitle=2F7573722F6C69622F73797374656D642F73797374656D2D67656E657261746F72732F746F7263782D67656E657261746F72002F72756E2F73797374656D642F67656E657261746F72002F72756E2F73797374656D642F67656E657261746F722E6561726C79002F72756E2F73797374656D642F67656E657261746F722E6C61 Mar 17 18:44:29.383000 audit: BPF prog-id=12 op=LOAD Mar 17 18:44:29.383000 audit: BPF prog-id=3 op=UNLOAD Mar 17 18:44:29.384000 audit: BPF prog-id=13 op=LOAD Mar 17 18:44:29.384000 audit: BPF prog-id=14 op=LOAD Mar 17 18:44:29.384000 audit: BPF prog-id=4 op=UNLOAD Mar 17 18:44:29.384000 audit: BPF prog-id=5 op=UNLOAD Mar 17 18:44:29.384000 audit: BPF prog-id=15 op=LOAD Mar 17 18:44:29.384000 audit: BPF prog-id=12 op=UNLOAD Mar 17 18:44:29.385000 audit: BPF prog-id=16 op=LOAD Mar 17 18:44:29.385000 audit: BPF prog-id=17 op=LOAD Mar 17 18:44:29.385000 audit: BPF prog-id=13 op=UNLOAD Mar 17 18:44:29.385000 audit: BPF prog-id=14 op=UNLOAD Mar 17 18:44:29.385000 audit: BPF prog-id=18 op=LOAD Mar 17 18:44:29.385000 audit: BPF prog-id=15 op=UNLOAD Mar 17 18:44:29.385000 audit: BPF prog-id=19 op=LOAD Mar 17 18:44:29.385000 audit: BPF prog-id=20 op=LOAD Mar 17 18:44:29.385000 audit: BPF prog-id=16 op=UNLOAD Mar 17 18:44:29.385000 audit: BPF prog-id=17 op=UNLOAD Mar 17 18:44:29.386000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-journald comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:44:29.389000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=initrd-switch-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:44:29.389000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=initrd-switch-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:44:29.396000 audit: BPF prog-id=18 op=UNLOAD Mar 17 18:44:29.484000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-fsck-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:44:29.487000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-fsck-usr comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:44:29.489000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-journald comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:44:29.506806 systemd[1]: Stopped verity-setup.service. Mar 17 18:44:29.489000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-journald comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:44:29.490000 audit: BPF prog-id=21 op=LOAD Mar 17 18:44:29.490000 audit: BPF prog-id=22 op=LOAD Mar 17 18:44:29.490000 audit: BPF prog-id=23 op=LOAD Mar 17 18:44:29.490000 audit: BPF prog-id=19 op=UNLOAD Mar 17 18:44:29.490000 audit: BPF prog-id=20 op=UNLOAD Mar 17 18:44:29.503000 audit: CONFIG_CHANGE op=set audit_enabled=1 old=1 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 res=1 Mar 17 18:44:29.503000 audit[991]: SYSCALL arch=c000003e syscall=46 success=yes exit=60 a0=6 a1=7ffefdcd3b30 a2=4000 a3=7ffefdcd3bcc items=0 ppid=1 pid=991 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="systemd-journal" exe="/usr/lib/systemd/systemd-journald" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:44:29.503000 audit: PROCTITLE proctitle="/usr/lib/systemd/systemd-journald" Mar 17 18:44:27.346901 /usr/lib/systemd/system-generators/torcx-generator[906]: time="2025-03-17T18:44:27Z" level=debug msg="common configuration parsed" base_dir=/var/lib/torcx/ conf_dir=/etc/torcx/ run_dir=/run/torcx/ store_paths="[/usr/share/torcx/store /usr/share/oem/torcx/store/3510.3.7 /usr/share/oem/torcx/store /var/lib/torcx/store/3510.3.7 /var/lib/torcx/store]" Mar 17 18:44:29.383259 systemd[1]: Queued start job for default target multi-user.target. Mar 17 18:44:27.347081 /usr/lib/systemd/system-generators/torcx-generator[906]: time="2025-03-17T18:44:27Z" level=debug msg="profile found" name=docker-1.12-no path=/usr/share/torcx/profiles/docker-1.12-no.json Mar 17 18:44:29.383269 systemd[1]: Unnecessary job was removed for dev-vda6.device. Mar 17 18:44:27.347097 /usr/lib/systemd/system-generators/torcx-generator[906]: time="2025-03-17T18:44:27Z" level=debug msg="profile found" name=vendor path=/usr/share/torcx/profiles/vendor.json Mar 17 18:44:29.386811 systemd[1]: systemd-journald.service: Deactivated successfully. Mar 17 18:44:27.347120 /usr/lib/systemd/system-generators/torcx-generator[906]: time="2025-03-17T18:44:27Z" level=info msg="no vendor profile selected by /etc/flatcar/docker-1.12" Mar 17 18:44:27.347129 /usr/lib/systemd/system-generators/torcx-generator[906]: time="2025-03-17T18:44:27Z" level=debug msg="skipped missing lower profile" missing profile=oem Mar 17 18:44:27.347154 /usr/lib/systemd/system-generators/torcx-generator[906]: time="2025-03-17T18:44:27Z" level=warning msg="no next profile: unable to read profile file: open /etc/torcx/next-profile: no such file or directory" Mar 17 18:44:27.347166 /usr/lib/systemd/system-generators/torcx-generator[906]: time="2025-03-17T18:44:27Z" level=debug msg="apply configuration parsed" lower profiles (vendor/oem)="[vendor]" upper profile (user)= Mar 17 18:44:27.347334 /usr/lib/systemd/system-generators/torcx-generator[906]: time="2025-03-17T18:44:27Z" level=debug msg="mounted tmpfs" target=/run/torcx/unpack Mar 17 18:44:29.507000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=verity-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:44:27.347362 /usr/lib/systemd/system-generators/torcx-generator[906]: time="2025-03-17T18:44:27Z" level=debug msg="profile found" name=docker-1.12-no path=/usr/share/torcx/profiles/docker-1.12-no.json Mar 17 18:44:27.347372 /usr/lib/systemd/system-generators/torcx-generator[906]: time="2025-03-17T18:44:27Z" level=debug msg="profile found" name=vendor path=/usr/share/torcx/profiles/vendor.json Mar 17 18:44:27.347654 /usr/lib/systemd/system-generators/torcx-generator[906]: time="2025-03-17T18:44:27Z" level=debug msg="new archive/reference added to cache" format=tgz name=docker path="/usr/share/torcx/store/docker:20.10.torcx.tgz" reference=20.10 Mar 17 18:44:27.347683 /usr/lib/systemd/system-generators/torcx-generator[906]: time="2025-03-17T18:44:27Z" level=debug msg="new archive/reference added to cache" format=tgz name=docker path="/usr/share/torcx/store/docker:com.coreos.cl.torcx.tgz" reference=com.coreos.cl Mar 17 18:44:27.347699 /usr/lib/systemd/system-generators/torcx-generator[906]: time="2025-03-17T18:44:27Z" level=info msg="store skipped" err="open /usr/share/oem/torcx/store/3510.3.7: no such file or directory" path=/usr/share/oem/torcx/store/3510.3.7 Mar 17 18:44:27.347711 /usr/lib/systemd/system-generators/torcx-generator[906]: time="2025-03-17T18:44:27Z" level=info msg="store skipped" err="open /usr/share/oem/torcx/store: no such file or directory" path=/usr/share/oem/torcx/store Mar 17 18:44:27.347725 /usr/lib/systemd/system-generators/torcx-generator[906]: time="2025-03-17T18:44:27Z" level=info msg="store skipped" err="open /var/lib/torcx/store/3510.3.7: no such file or directory" path=/var/lib/torcx/store/3510.3.7 Mar 17 18:44:27.347736 /usr/lib/systemd/system-generators/torcx-generator[906]: time="2025-03-17T18:44:27Z" level=info msg="store skipped" err="open /var/lib/torcx/store: no such file or directory" path=/var/lib/torcx/store Mar 17 18:44:29.128840 /usr/lib/systemd/system-generators/torcx-generator[906]: time="2025-03-17T18:44:29Z" level=debug msg="image unpacked" image=docker path=/run/torcx/unpack/docker reference=com.coreos.cl Mar 17 18:44:29.129091 /usr/lib/systemd/system-generators/torcx-generator[906]: time="2025-03-17T18:44:29Z" level=debug msg="binaries propagated" assets="[/bin/containerd /bin/containerd-shim /bin/ctr /bin/docker /bin/docker-containerd /bin/docker-containerd-shim /bin/docker-init /bin/docker-proxy /bin/docker-runc /bin/dockerd /bin/runc /bin/tini]" image=docker path=/run/torcx/unpack/docker reference=com.coreos.cl Mar 17 18:44:29.129322 /usr/lib/systemd/system-generators/torcx-generator[906]: time="2025-03-17T18:44:29Z" level=debug msg="networkd units propagated" assets="[/lib/systemd/network/50-docker.network /lib/systemd/network/90-docker-veth.network]" image=docker path=/run/torcx/unpack/docker reference=com.coreos.cl Mar 17 18:44:29.129611 /usr/lib/systemd/system-generators/torcx-generator[906]: time="2025-03-17T18:44:29Z" level=debug msg="systemd units propagated" assets="[/lib/systemd/system/containerd.service /lib/systemd/system/docker.service /lib/systemd/system/docker.socket /lib/systemd/system/sockets.target.wants /lib/systemd/system/multi-user.target.wants]" image=docker path=/run/torcx/unpack/docker reference=com.coreos.cl Mar 17 18:44:29.129675 /usr/lib/systemd/system-generators/torcx-generator[906]: time="2025-03-17T18:44:29Z" level=debug msg="profile applied" sealed profile=/run/torcx/profile.json upper profile= Mar 17 18:44:29.129727 /usr/lib/systemd/system-generators/torcx-generator[906]: time="2025-03-17T18:44:29Z" level=debug msg="system state sealed" content="[TORCX_LOWER_PROFILES=\"vendor\" TORCX_UPPER_PROFILE=\"\" TORCX_PROFILE_PATH=\"/run/torcx/profile.json\" TORCX_BINDIR=\"/run/torcx/bin\" TORCX_UNPACKDIR=\"/run/torcx/unpack\"]" path=/run/metadata/torcx Mar 17 18:44:29.509667 systemd[1]: xenserver-pv-version.service was skipped because of an unmet condition check (ConditionVirtualization=xen). Mar 17 18:44:29.512671 systemd[1]: Started systemd-journald.service. Mar 17 18:44:29.511000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-journald comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:44:29.513013 systemd[1]: Mounted dev-hugepages.mount. Mar 17 18:44:29.513903 systemd[1]: Mounted dev-mqueue.mount. Mar 17 18:44:29.514762 systemd[1]: Mounted media.mount. Mar 17 18:44:29.515533 systemd[1]: Mounted sys-kernel-debug.mount. Mar 17 18:44:29.516456 systemd[1]: Mounted sys-kernel-tracing.mount. Mar 17 18:44:29.517394 systemd[1]: Mounted tmp.mount. Mar 17 18:44:29.518359 systemd[1]: Finished flatcar-tmpfiles.service. Mar 17 18:44:29.519000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=flatcar-tmpfiles comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:44:29.519523 systemd[1]: Finished kmod-static-nodes.service. Mar 17 18:44:29.520000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kmod-static-nodes comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:44:29.520609 systemd[1]: modprobe@configfs.service: Deactivated successfully. Mar 17 18:44:29.520788 systemd[1]: Finished modprobe@configfs.service. Mar 17 18:44:29.521000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@configfs comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:44:29.521000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@configfs comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:44:29.521886 systemd[1]: modprobe@dm_mod.service: Deactivated successfully. Mar 17 18:44:29.522037 systemd[1]: Finished modprobe@dm_mod.service. Mar 17 18:44:29.522000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@dm_mod comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:44:29.522000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@dm_mod comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:44:29.523183 systemd[1]: modprobe@drm.service: Deactivated successfully. Mar 17 18:44:29.523348 systemd[1]: Finished modprobe@drm.service. Mar 17 18:44:29.524000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@drm comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:44:29.524000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@drm comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:44:29.524356 systemd[1]: modprobe@efi_pstore.service: Deactivated successfully. Mar 17 18:44:29.524520 systemd[1]: Finished modprobe@efi_pstore.service. Mar 17 18:44:29.525000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@efi_pstore comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:44:29.525000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@efi_pstore comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:44:29.525693 systemd[1]: modprobe@fuse.service: Deactivated successfully. Mar 17 18:44:29.525850 systemd[1]: Finished modprobe@fuse.service. Mar 17 18:44:29.526000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@fuse comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:44:29.526000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@fuse comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:44:29.526897 systemd[1]: modprobe@loop.service: Deactivated successfully. Mar 17 18:44:29.527052 systemd[1]: Finished modprobe@loop.service. Mar 17 18:44:29.527000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@loop comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:44:29.527000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@loop comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:44:29.528206 systemd[1]: Finished systemd-modules-load.service. Mar 17 18:44:29.529000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-modules-load comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:44:29.529430 systemd[1]: Finished systemd-network-generator.service. Mar 17 18:44:29.530000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-network-generator comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:44:29.530613 systemd[1]: Finished systemd-remount-fs.service. Mar 17 18:44:29.530000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-remount-fs comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:44:29.531921 systemd[1]: Reached target network-pre.target. Mar 17 18:44:29.533790 systemd[1]: Mounting sys-fs-fuse-connections.mount... Mar 17 18:44:29.535411 systemd[1]: Mounting sys-kernel-config.mount... Mar 17 18:44:29.536492 systemd[1]: remount-root.service was skipped because of an unmet condition check (ConditionPathIsReadWrite=!/). Mar 17 18:44:29.537831 systemd[1]: Starting systemd-hwdb-update.service... Mar 17 18:44:29.539564 systemd[1]: Starting systemd-journal-flush.service... Mar 17 18:44:29.540692 systemd[1]: systemd-pstore.service was skipped because of an unmet condition check (ConditionDirectoryNotEmpty=/sys/fs/pstore). Mar 17 18:44:29.541461 systemd[1]: Starting systemd-random-seed.service... Mar 17 18:44:29.542616 systemd[1]: systemd-repart.service was skipped because no trigger condition checks were met. Mar 17 18:44:29.544038 systemd-journald[991]: Time spent on flushing to /var/log/journal/5d20fa49fcf24967a5a4c605d274ba63 is 14.636ms for 1105 entries. Mar 17 18:44:29.544038 systemd-journald[991]: System Journal (/var/log/journal/5d20fa49fcf24967a5a4c605d274ba63) is 8.0M, max 195.6M, 187.6M free. Mar 17 18:44:29.567160 systemd-journald[991]: Received client request to flush runtime journal. Mar 17 18:44:29.552000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-random-seed comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:44:29.559000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-udev-trigger comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:44:29.560000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-sysusers comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:44:29.561000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-sysctl comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:44:29.543596 systemd[1]: Starting systemd-sysctl.service... Mar 17 18:44:29.546783 systemd[1]: Starting systemd-sysusers.service... Mar 17 18:44:29.549325 systemd[1]: Mounted sys-fs-fuse-connections.mount. Mar 17 18:44:29.550514 systemd[1]: Mounted sys-kernel-config.mount. Mar 17 18:44:29.551848 systemd[1]: Finished systemd-random-seed.service. Mar 17 18:44:29.552883 systemd[1]: Reached target first-boot-complete.target. Mar 17 18:44:29.555507 systemd[1]: Finished systemd-udev-trigger.service. Mar 17 18:44:29.560009 systemd[1]: Finished systemd-sysusers.service. Mar 17 18:44:29.561113 systemd[1]: Finished systemd-sysctl.service. Mar 17 18:44:29.562956 systemd[1]: Starting systemd-tmpfiles-setup-dev.service... Mar 17 18:44:29.564669 systemd[1]: Starting systemd-udev-settle.service... Mar 17 18:44:29.567995 systemd[1]: Finished systemd-journal-flush.service. Mar 17 18:44:29.568000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-journal-flush comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:44:29.573033 udevadm[1012]: systemd-udev-settle.service is deprecated. Please fix lvm2-activation.service, lvm2-activation-early.service not to pull it in. Mar 17 18:44:29.579796 systemd[1]: Finished systemd-tmpfiles-setup-dev.service. Mar 17 18:44:29.580000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-tmpfiles-setup-dev comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:44:29.971758 systemd[1]: Finished systemd-hwdb-update.service. Mar 17 18:44:29.972000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-hwdb-update comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:44:29.972000 audit: BPF prog-id=24 op=LOAD Mar 17 18:44:29.972000 audit: BPF prog-id=25 op=LOAD Mar 17 18:44:29.972000 audit: BPF prog-id=7 op=UNLOAD Mar 17 18:44:29.972000 audit: BPF prog-id=8 op=UNLOAD Mar 17 18:44:29.974118 systemd[1]: Starting systemd-udevd.service... Mar 17 18:44:29.989503 systemd-udevd[1014]: Using default interface naming scheme 'v252'. Mar 17 18:44:30.001837 systemd[1]: Started systemd-udevd.service. Mar 17 18:44:30.002000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-udevd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:44:30.003000 audit: BPF prog-id=26 op=LOAD Mar 17 18:44:30.004583 systemd[1]: Starting systemd-networkd.service... Mar 17 18:44:30.010000 audit: BPF prog-id=27 op=LOAD Mar 17 18:44:30.010000 audit: BPF prog-id=28 op=LOAD Mar 17 18:44:30.010000 audit: BPF prog-id=29 op=LOAD Mar 17 18:44:30.011747 systemd[1]: Starting systemd-userdbd.service... Mar 17 18:44:30.033788 systemd[1]: Condition check resulted in dev-ttyS0.device being skipped. Mar 17 18:44:30.037418 systemd[1]: Started systemd-userdbd.service. Mar 17 18:44:30.037000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-userdbd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:44:30.040804 systemd[1]: Found device dev-disk-by\x2dlabel-OEM.device. Mar 17 18:44:30.067673 kernel: input: Power Button as /devices/LNXSYSTM:00/LNXPWRBN:00/input/input2 Mar 17 18:44:30.074662 kernel: ACPI: button: Power Button [PWRF] Mar 17 18:44:30.080386 systemd-networkd[1025]: lo: Link UP Mar 17 18:44:30.080625 systemd-networkd[1025]: lo: Gained carrier Mar 17 18:44:30.081083 systemd-networkd[1025]: Enumeration completed Mar 17 18:44:30.081213 systemd[1]: Started systemd-networkd.service. Mar 17 18:44:30.081440 systemd-networkd[1025]: eth0: Configuring with /usr/lib/systemd/network/zz-default.network. Mar 17 18:44:30.081000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-networkd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:44:30.083149 systemd-networkd[1025]: eth0: Link UP Mar 17 18:44:30.083224 systemd-networkd[1025]: eth0: Gained carrier Mar 17 18:44:30.086000 audit[1015]: AVC avc: denied { confidentiality } for pid=1015 comm="(udev-worker)" lockdown_reason="use of tracefs" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=lockdown permissive=1 Mar 17 18:44:30.098755 systemd-networkd[1025]: eth0: DHCPv4 address 10.0.0.110/16, gateway 10.0.0.1 acquired from 10.0.0.1 Mar 17 18:44:30.086000 audit[1015]: SYSCALL arch=c000003e syscall=175 success=yes exit=0 a0=55d4b7d58f70 a1=338ac a2=7fd0e44b6bc5 a3=5 items=110 ppid=1014 pid=1015 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="(udev-worker)" exe="/usr/bin/udevadm" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:44:30.086000 audit: CWD cwd="/" Mar 17 18:44:30.086000 audit: PATH item=0 name=(null) inode=1041 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Mar 17 18:44:30.086000 audit: PATH item=1 name=(null) inode=15147 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Mar 17 18:44:30.086000 audit: PATH item=2 name=(null) inode=15147 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Mar 17 18:44:30.086000 audit: PATH item=3 name=(null) inode=15148 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Mar 17 18:44:30.086000 audit: PATH item=4 name=(null) inode=15147 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Mar 17 18:44:30.086000 audit: PATH item=5 name=(null) inode=15149 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Mar 17 18:44:30.086000 audit: PATH item=6 name=(null) inode=15147 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Mar 17 18:44:30.086000 audit: PATH item=7 name=(null) inode=15150 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Mar 17 18:44:30.086000 audit: PATH item=8 name=(null) inode=15150 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Mar 17 18:44:30.086000 audit: PATH item=9 name=(null) inode=15151 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Mar 17 18:44:30.086000 audit: PATH item=10 name=(null) inode=15150 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Mar 17 18:44:30.086000 audit: PATH item=11 name=(null) inode=15152 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Mar 17 18:44:30.086000 audit: PATH item=12 name=(null) inode=15150 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Mar 17 18:44:30.086000 audit: PATH item=13 name=(null) inode=15153 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Mar 17 18:44:30.086000 audit: PATH item=14 name=(null) inode=15150 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Mar 17 18:44:30.086000 audit: PATH item=15 name=(null) inode=15154 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Mar 17 18:44:30.086000 audit: PATH item=16 name=(null) inode=15150 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Mar 17 18:44:30.086000 audit: PATH item=17 name=(null) inode=15155 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Mar 17 18:44:30.086000 audit: PATH item=18 name=(null) inode=15147 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Mar 17 18:44:30.086000 audit: PATH item=19 name=(null) inode=15156 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Mar 17 18:44:30.086000 audit: PATH item=20 name=(null) inode=15156 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Mar 17 18:44:30.086000 audit: PATH item=21 name=(null) inode=15157 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Mar 17 18:44:30.086000 audit: PATH item=22 name=(null) inode=15156 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Mar 17 18:44:30.086000 audit: PATH item=23 name=(null) inode=15158 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Mar 17 18:44:30.086000 audit: PATH item=24 name=(null) inode=15156 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Mar 17 18:44:30.086000 audit: PATH item=25 name=(null) inode=15159 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Mar 17 18:44:30.086000 audit: PATH item=26 name=(null) inode=15156 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Mar 17 18:44:30.086000 audit: PATH item=27 name=(null) inode=15160 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Mar 17 18:44:30.086000 audit: PATH item=28 name=(null) inode=15156 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Mar 17 18:44:30.086000 audit: PATH item=29 name=(null) inode=15161 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Mar 17 18:44:30.086000 audit: PATH item=30 name=(null) inode=15147 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Mar 17 18:44:30.086000 audit: PATH item=31 name=(null) inode=15162 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Mar 17 18:44:30.086000 audit: PATH item=32 name=(null) inode=15162 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Mar 17 18:44:30.086000 audit: PATH item=33 name=(null) inode=15163 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Mar 17 18:44:30.086000 audit: PATH item=34 name=(null) inode=15162 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Mar 17 18:44:30.086000 audit: PATH item=35 name=(null) inode=15164 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Mar 17 18:44:30.086000 audit: PATH item=36 name=(null) inode=15162 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Mar 17 18:44:30.086000 audit: PATH item=37 name=(null) inode=15165 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Mar 17 18:44:30.086000 audit: PATH item=38 name=(null) inode=15162 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Mar 17 18:44:30.086000 audit: PATH item=39 name=(null) inode=15166 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Mar 17 18:44:30.086000 audit: PATH item=40 name=(null) inode=15162 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Mar 17 18:44:30.086000 audit: PATH item=41 name=(null) inode=15167 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Mar 17 18:44:30.086000 audit: PATH item=42 name=(null) inode=15147 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Mar 17 18:44:30.086000 audit: PATH item=43 name=(null) inode=15168 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Mar 17 18:44:30.086000 audit: PATH item=44 name=(null) inode=15168 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Mar 17 18:44:30.086000 audit: PATH item=45 name=(null) inode=15169 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Mar 17 18:44:30.086000 audit: PATH item=46 name=(null) inode=15168 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Mar 17 18:44:30.086000 audit: PATH item=47 name=(null) inode=15170 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Mar 17 18:44:30.086000 audit: PATH item=48 name=(null) inode=15168 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Mar 17 18:44:30.086000 audit: PATH item=49 name=(null) inode=15171 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Mar 17 18:44:30.086000 audit: PATH item=50 name=(null) inode=15168 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Mar 17 18:44:30.086000 audit: PATH item=51 name=(null) inode=15172 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Mar 17 18:44:30.086000 audit: PATH item=52 name=(null) inode=15168 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Mar 17 18:44:30.086000 audit: PATH item=53 name=(null) inode=15173 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Mar 17 18:44:30.086000 audit: PATH item=54 name=(null) inode=1041 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Mar 17 18:44:30.086000 audit: PATH item=55 name=(null) inode=15174 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Mar 17 18:44:30.086000 audit: PATH item=56 name=(null) inode=15174 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Mar 17 18:44:30.086000 audit: PATH item=57 name=(null) inode=15175 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Mar 17 18:44:30.086000 audit: PATH item=58 name=(null) inode=15174 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Mar 17 18:44:30.086000 audit: PATH item=59 name=(null) inode=15176 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Mar 17 18:44:30.086000 audit: PATH item=60 name=(null) inode=15174 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Mar 17 18:44:30.086000 audit: PATH item=61 name=(null) inode=15177 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Mar 17 18:44:30.086000 audit: PATH item=62 name=(null) inode=15177 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Mar 17 18:44:30.086000 audit: PATH item=63 name=(null) inode=15178 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Mar 17 18:44:30.086000 audit: PATH item=64 name=(null) inode=15177 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Mar 17 18:44:30.086000 audit: PATH item=65 name=(null) inode=15179 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Mar 17 18:44:30.086000 audit: PATH item=66 name=(null) inode=15177 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Mar 17 18:44:30.086000 audit: PATH item=67 name=(null) inode=15180 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Mar 17 18:44:30.086000 audit: PATH item=68 name=(null) inode=15177 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Mar 17 18:44:30.086000 audit: PATH item=69 name=(null) inode=15181 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Mar 17 18:44:30.086000 audit: PATH item=70 name=(null) inode=15177 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Mar 17 18:44:30.086000 audit: PATH item=71 name=(null) inode=15182 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Mar 17 18:44:30.086000 audit: PATH item=72 name=(null) inode=15174 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Mar 17 18:44:30.086000 audit: PATH item=73 name=(null) inode=15183 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Mar 17 18:44:30.086000 audit: PATH item=74 name=(null) inode=15183 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Mar 17 18:44:30.086000 audit: PATH item=75 name=(null) inode=15184 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Mar 17 18:44:30.086000 audit: PATH item=76 name=(null) inode=15183 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Mar 17 18:44:30.086000 audit: PATH item=77 name=(null) inode=15185 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Mar 17 18:44:30.086000 audit: PATH item=78 name=(null) inode=15183 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Mar 17 18:44:30.086000 audit: PATH item=79 name=(null) inode=15186 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Mar 17 18:44:30.086000 audit: PATH item=80 name=(null) inode=15183 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Mar 17 18:44:30.086000 audit: PATH item=81 name=(null) inode=15187 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Mar 17 18:44:30.086000 audit: PATH item=82 name=(null) inode=15183 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Mar 17 18:44:30.086000 audit: PATH item=83 name=(null) inode=15188 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Mar 17 18:44:30.086000 audit: PATH item=84 name=(null) inode=15174 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Mar 17 18:44:30.086000 audit: PATH item=85 name=(null) inode=15189 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Mar 17 18:44:30.086000 audit: PATH item=86 name=(null) inode=15189 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Mar 17 18:44:30.086000 audit: PATH item=87 name=(null) inode=15190 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Mar 17 18:44:30.086000 audit: PATH item=88 name=(null) inode=15189 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Mar 17 18:44:30.086000 audit: PATH item=89 name=(null) inode=15191 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Mar 17 18:44:30.086000 audit: PATH item=90 name=(null) inode=15189 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Mar 17 18:44:30.086000 audit: PATH item=91 name=(null) inode=15192 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Mar 17 18:44:30.086000 audit: PATH item=92 name=(null) inode=15189 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Mar 17 18:44:30.086000 audit: PATH item=93 name=(null) inode=15193 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Mar 17 18:44:30.086000 audit: PATH item=94 name=(null) inode=15189 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Mar 17 18:44:30.086000 audit: PATH item=95 name=(null) inode=15194 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Mar 17 18:44:30.086000 audit: PATH item=96 name=(null) inode=15174 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Mar 17 18:44:30.086000 audit: PATH item=97 name=(null) inode=15195 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Mar 17 18:44:30.086000 audit: PATH item=98 name=(null) inode=15195 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Mar 17 18:44:30.086000 audit: PATH item=99 name=(null) inode=15196 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Mar 17 18:44:30.086000 audit: PATH item=100 name=(null) inode=15195 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Mar 17 18:44:30.086000 audit: PATH item=101 name=(null) inode=15197 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Mar 17 18:44:30.086000 audit: PATH item=102 name=(null) inode=15195 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Mar 17 18:44:30.086000 audit: PATH item=103 name=(null) inode=15198 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Mar 17 18:44:30.086000 audit: PATH item=104 name=(null) inode=15195 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Mar 17 18:44:30.086000 audit: PATH item=105 name=(null) inode=15199 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Mar 17 18:44:30.086000 audit: PATH item=106 name=(null) inode=15195 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Mar 17 18:44:30.086000 audit: PATH item=107 name=(null) inode=15200 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Mar 17 18:44:30.086000 audit: PATH item=108 name=(null) inode=1 dev=00:07 mode=040700 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:debugfs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Mar 17 18:44:30.086000 audit: PATH item=109 name=(null) inode=13937 dev=00:07 mode=040755 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:debugfs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Mar 17 18:44:30.086000 audit: PROCTITLE proctitle="(udev-worker)" Mar 17 18:44:30.123655 kernel: input: ImExPS/2 Generic Explorer Mouse as /devices/platform/i8042/serio1/input/input3 Mar 17 18:44:30.128660 kernel: mousedev: PS/2 mouse device common for all mice Mar 17 18:44:30.133990 kernel: i801_smbus 0000:00:1f.3: SMBus using PCI interrupt Mar 17 18:44:30.139978 kernel: i2c i2c-0: 1/1 memory slots populated (from DMI) Mar 17 18:44:30.140082 kernel: i2c i2c-0: Memory type 0x07 not supported yet, not instantiating SPD Mar 17 18:44:30.166673 kernel: kvm: Nested Virtualization enabled Mar 17 18:44:30.166884 kernel: SVM: kvm: Nested Paging enabled Mar 17 18:44:30.166917 kernel: SVM: Virtual VMLOAD VMSAVE supported Mar 17 18:44:30.166943 kernel: SVM: Virtual GIF supported Mar 17 18:44:30.181676 kernel: EDAC MC: Ver: 3.0.0 Mar 17 18:44:30.212004 systemd[1]: Finished systemd-udev-settle.service. Mar 17 18:44:30.212000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-udev-settle comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:44:30.214004 systemd[1]: Starting lvm2-activation-early.service... Mar 17 18:44:30.220462 lvm[1049]: WARNING: Failed to connect to lvmetad. Falling back to device scanning. Mar 17 18:44:30.249277 systemd[1]: Finished lvm2-activation-early.service. Mar 17 18:44:30.249000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=lvm2-activation-early comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:44:30.250275 systemd[1]: Reached target cryptsetup.target. Mar 17 18:44:30.252075 systemd[1]: Starting lvm2-activation.service... Mar 17 18:44:30.255105 lvm[1050]: WARNING: Failed to connect to lvmetad. Falling back to device scanning. Mar 17 18:44:30.278858 systemd[1]: Finished lvm2-activation.service. Mar 17 18:44:30.279000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=lvm2-activation comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:44:30.279843 systemd[1]: Reached target local-fs-pre.target. Mar 17 18:44:30.280703 systemd[1]: var-lib-machines.mount was skipped because of an unmet condition check (ConditionPathExists=/var/lib/machines.raw). Mar 17 18:44:30.280729 systemd[1]: Reached target local-fs.target. Mar 17 18:44:30.281512 systemd[1]: Reached target machines.target. Mar 17 18:44:30.283281 systemd[1]: Starting ldconfig.service... Mar 17 18:44:30.284193 systemd[1]: systemd-binfmt.service was skipped because no trigger condition checks were met. Mar 17 18:44:30.284227 systemd[1]: systemd-boot-system-token.service was skipped because of an unmet condition check (ConditionPathExists=/sys/firmware/efi/efivars/LoaderFeatures-4a67b082-0a4c-41cf-b6c7-440b29bb8c4f). Mar 17 18:44:30.285050 systemd[1]: Starting systemd-boot-update.service... Mar 17 18:44:30.286690 systemd[1]: Starting systemd-fsck@dev-disk-by\x2dlabel-OEM.service... Mar 17 18:44:30.289047 systemd[1]: Starting systemd-machine-id-commit.service... Mar 17 18:44:30.290926 systemd[1]: Starting systemd-sysext.service... Mar 17 18:44:30.293131 systemd[1]: boot.automount: Got automount request for /boot, triggered by 1052 (bootctl) Mar 17 18:44:30.294065 systemd[1]: Starting systemd-fsck@dev-disk-by\x2dlabel-EFI\x2dSYSTEM.service... Mar 17 18:44:30.297000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-fsck@dev-disk-by\x2dlabel-OEM comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:44:30.297924 systemd[1]: Finished systemd-fsck@dev-disk-by\x2dlabel-OEM.service. Mar 17 18:44:30.304814 systemd[1]: Unmounting usr-share-oem.mount... Mar 17 18:44:30.308759 systemd[1]: usr-share-oem.mount: Deactivated successfully. Mar 17 18:44:30.308918 systemd[1]: Unmounted usr-share-oem.mount. Mar 17 18:44:30.318660 kernel: loop0: detected capacity change from 0 to 210664 Mar 17 18:44:30.326039 systemd-fsck[1059]: fsck.fat 4.2 (2021-01-31) Mar 17 18:44:30.326039 systemd-fsck[1059]: /dev/vda1: 789 files, 119299/258078 clusters Mar 17 18:44:30.328298 systemd[1]: Finished systemd-fsck@dev-disk-by\x2dlabel-EFI\x2dSYSTEM.service. Mar 17 18:44:30.328000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-fsck@dev-disk-by\x2dlabel-EFI\x2dSYSTEM comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:44:30.332023 systemd[1]: Mounting boot.mount... Mar 17 18:44:30.553821 systemd[1]: Mounted boot.mount. Mar 17 18:44:30.560646 kernel: squashfs: version 4.0 (2009/01/31) Phillip Lougher Mar 17 18:44:30.562673 systemd[1]: etc-machine\x2did.mount: Deactivated successfully. Mar 17 18:44:30.563208 systemd[1]: Finished systemd-machine-id-commit.service. Mar 17 18:44:30.563000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-machine-id-commit comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:44:30.566411 systemd[1]: Finished systemd-boot-update.service. Mar 17 18:44:30.567000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-boot-update comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:44:30.575652 kernel: loop1: detected capacity change from 0 to 210664 Mar 17 18:44:30.578502 (sd-sysext)[1066]: Using extensions 'kubernetes'. Mar 17 18:44:30.578969 (sd-sysext)[1066]: Merged extensions into '/usr'. Mar 17 18:44:30.592832 systemd[1]: proc-xen.mount was skipped because of an unmet condition check (ConditionVirtualization=xen). Mar 17 18:44:30.593994 systemd[1]: Mounting usr-share-oem.mount... Mar 17 18:44:30.595036 systemd[1]: ignition-delete-config.service was skipped because no trigger condition checks were met. Mar 17 18:44:30.595877 systemd[1]: Starting modprobe@dm_mod.service... Mar 17 18:44:30.597752 systemd[1]: Starting modprobe@efi_pstore.service... Mar 17 18:44:30.599425 systemd[1]: Starting modprobe@loop.service... Mar 17 18:44:30.600284 systemd[1]: systemd-binfmt.service was skipped because no trigger condition checks were met. Mar 17 18:44:30.600416 systemd[1]: systemd-boot-system-token.service was skipped because of an unmet condition check (ConditionPathExists=/sys/firmware/efi/efivars/LoaderFeatures-4a67b082-0a4c-41cf-b6c7-440b29bb8c4f). Mar 17 18:44:30.600552 systemd[1]: xenserver-pv-version.service was skipped because of an unmet condition check (ConditionVirtualization=xen). Mar 17 18:44:30.603461 systemd[1]: Mounted usr-share-oem.mount. Mar 17 18:44:30.604785 systemd[1]: modprobe@dm_mod.service: Deactivated successfully. Mar 17 18:44:30.604907 systemd[1]: Finished modprobe@dm_mod.service. Mar 17 18:44:30.605000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@dm_mod comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:44:30.605000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@dm_mod comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:44:30.606505 systemd[1]: modprobe@efi_pstore.service: Deactivated successfully. Mar 17 18:44:30.606650 systemd[1]: Finished modprobe@efi_pstore.service. Mar 17 18:44:30.607000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@efi_pstore comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:44:30.607000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@efi_pstore comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:44:30.608254 systemd[1]: modprobe@loop.service: Deactivated successfully. Mar 17 18:44:30.608390 systemd[1]: Finished modprobe@loop.service. Mar 17 18:44:30.608000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@loop comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:44:30.609000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@loop comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:44:30.610074 systemd[1]: systemd-pstore.service was skipped because of an unmet condition check (ConditionDirectoryNotEmpty=/sys/fs/pstore). Mar 17 18:44:30.610189 systemd[1]: systemd-repart.service was skipped because no trigger condition checks were met. Mar 17 18:44:30.611132 systemd[1]: Finished systemd-sysext.service. Mar 17 18:44:30.611000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-sysext comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:44:30.613658 systemd[1]: Starting ensure-sysext.service... Mar 17 18:44:30.615531 systemd[1]: Starting systemd-tmpfiles-setup.service... Mar 17 18:44:30.620917 systemd[1]: Reloading. Mar 17 18:44:30.622107 ldconfig[1051]: /sbin/ldconfig: /lib/ld.so.conf is not an ELF file - it has the wrong magic bytes at the start. Mar 17 18:44:30.626249 systemd-tmpfiles[1073]: /usr/lib/tmpfiles.d/legacy.conf:13: Duplicate line for path "/run/lock", ignoring. Mar 17 18:44:30.627215 systemd-tmpfiles[1073]: /usr/lib/tmpfiles.d/provision.conf:20: Duplicate line for path "/root", ignoring. Mar 17 18:44:30.629324 systemd-tmpfiles[1073]: /usr/lib/tmpfiles.d/systemd.conf:29: Duplicate line for path "/var/lib/systemd", ignoring. Mar 17 18:44:30.660130 /usr/lib/systemd/system-generators/torcx-generator[1092]: time="2025-03-17T18:44:30Z" level=debug msg="common configuration parsed" base_dir=/var/lib/torcx/ conf_dir=/etc/torcx/ run_dir=/run/torcx/ store_paths="[/usr/share/torcx/store /usr/share/oem/torcx/store/3510.3.7 /usr/share/oem/torcx/store /var/lib/torcx/store/3510.3.7 /var/lib/torcx/store]" Mar 17 18:44:30.660457 /usr/lib/systemd/system-generators/torcx-generator[1092]: time="2025-03-17T18:44:30Z" level=info msg="torcx already run" Mar 17 18:44:30.720430 systemd[1]: /usr/lib/systemd/system/locksmithd.service:8: Unit uses CPUShares=; please use CPUWeight= instead. Support for CPUShares= will be removed soon. Mar 17 18:44:30.720445 systemd[1]: /usr/lib/systemd/system/locksmithd.service:9: Unit uses MemoryLimit=; please use MemoryMax= instead. Support for MemoryLimit= will be removed soon. Mar 17 18:44:30.736786 systemd[1]: /run/systemd/system/docker.socket:8: ListenStream= references a path below legacy directory /var/run/, updating /var/run/docker.sock → /run/docker.sock; please update the unit file accordingly. Mar 17 18:44:30.784000 audit: BPF prog-id=30 op=LOAD Mar 17 18:44:30.784000 audit: BPF prog-id=27 op=UNLOAD Mar 17 18:44:30.784000 audit: BPF prog-id=31 op=LOAD Mar 17 18:44:30.784000 audit: BPF prog-id=32 op=LOAD Mar 17 18:44:30.784000 audit: BPF prog-id=28 op=UNLOAD Mar 17 18:44:30.784000 audit: BPF prog-id=29 op=UNLOAD Mar 17 18:44:30.785000 audit: BPF prog-id=33 op=LOAD Mar 17 18:44:30.785000 audit: BPF prog-id=26 op=UNLOAD Mar 17 18:44:30.786000 audit: BPF prog-id=34 op=LOAD Mar 17 18:44:30.786000 audit: BPF prog-id=21 op=UNLOAD Mar 17 18:44:30.786000 audit: BPF prog-id=35 op=LOAD Mar 17 18:44:30.786000 audit: BPF prog-id=36 op=LOAD Mar 17 18:44:30.786000 audit: BPF prog-id=22 op=UNLOAD Mar 17 18:44:30.786000 audit: BPF prog-id=23 op=UNLOAD Mar 17 18:44:30.787000 audit: BPF prog-id=37 op=LOAD Mar 17 18:44:30.787000 audit: BPF prog-id=38 op=LOAD Mar 17 18:44:30.787000 audit: BPF prog-id=24 op=UNLOAD Mar 17 18:44:30.787000 audit: BPF prog-id=25 op=UNLOAD Mar 17 18:44:30.790513 systemd[1]: Finished ldconfig.service. Mar 17 18:44:30.790000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=ldconfig comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:44:30.792222 systemd[1]: Finished systemd-tmpfiles-setup.service. Mar 17 18:44:30.792000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-tmpfiles-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:44:30.795369 systemd[1]: Starting audit-rules.service... Mar 17 18:44:30.796794 systemd[1]: Starting clean-ca-certificates.service... Mar 17 18:44:30.798850 systemd[1]: Starting systemd-journal-catalog-update.service... Mar 17 18:44:30.799000 audit: BPF prog-id=39 op=LOAD Mar 17 18:44:30.801000 audit: BPF prog-id=40 op=LOAD Mar 17 18:44:30.801108 systemd[1]: Starting systemd-resolved.service... Mar 17 18:44:30.803046 systemd[1]: Starting systemd-timesyncd.service... Mar 17 18:44:30.804604 systemd[1]: Starting systemd-update-utmp.service... Mar 17 18:44:30.805932 systemd[1]: Finished clean-ca-certificates.service. Mar 17 18:44:30.806000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=clean-ca-certificates comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:44:30.808605 systemd[1]: update-ca-certificates.service was skipped because of an unmet condition check (ConditionPathIsSymbolicLink=!/etc/ssl/certs/ca-certificates.crt). Mar 17 18:44:30.810277 systemd[1]: proc-xen.mount was skipped because of an unmet condition check (ConditionVirtualization=xen). Mar 17 18:44:30.810444 systemd[1]: ignition-delete-config.service was skipped because no trigger condition checks were met. Mar 17 18:44:30.811000 audit[1146]: SYSTEM_BOOT pid=1146 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg=' comm="systemd-update-utmp" exe="/usr/lib/systemd/systemd-update-utmp" hostname=? addr=? terminal=? res=success' Mar 17 18:44:30.811490 systemd[1]: Starting modprobe@dm_mod.service... Mar 17 18:44:30.813183 systemd[1]: Starting modprobe@efi_pstore.service... Mar 17 18:44:30.814897 systemd[1]: Starting modprobe@loop.service... Mar 17 18:44:30.815679 systemd[1]: systemd-binfmt.service was skipped because no trigger condition checks were met. Mar 17 18:44:30.817000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@dm_mod comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:44:30.817000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@dm_mod comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:44:30.815782 systemd[1]: systemd-boot-system-token.service was skipped because of an unmet condition check (ConditionPathExists=/sys/firmware/efi/efivars/LoaderFeatures-4a67b082-0a4c-41cf-b6c7-440b29bb8c4f). Mar 17 18:44:30.815877 systemd[1]: update-ca-certificates.service was skipped because of an unmet condition check (ConditionPathIsSymbolicLink=!/etc/ssl/certs/ca-certificates.crt). Mar 17 18:44:30.815961 systemd[1]: xenserver-pv-version.service was skipped because of an unmet condition check (ConditionVirtualization=xen). Mar 17 18:44:30.816769 systemd[1]: modprobe@dm_mod.service: Deactivated successfully. Mar 17 18:44:30.816877 systemd[1]: Finished modprobe@dm_mod.service. Mar 17 18:44:30.818038 systemd[1]: modprobe@efi_pstore.service: Deactivated successfully. Mar 17 18:44:30.818136 systemd[1]: Finished modprobe@efi_pstore.service. Mar 17 18:44:30.818000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@efi_pstore comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:44:30.818000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@efi_pstore comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:44:30.820849 systemd[1]: modprobe@loop.service: Deactivated successfully. Mar 17 18:44:30.821000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@loop comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:44:30.821000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@loop comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:44:30.820944 systemd[1]: Finished modprobe@loop.service. Mar 17 18:44:30.822118 systemd[1]: systemd-pstore.service was skipped because of an unmet condition check (ConditionDirectoryNotEmpty=/sys/fs/pstore). Mar 17 18:44:30.822254 systemd[1]: systemd-repart.service was skipped because no trigger condition checks were met. Mar 17 18:44:30.824271 systemd[1]: proc-xen.mount was skipped because of an unmet condition check (ConditionVirtualization=xen). Mar 17 18:44:30.824475 systemd[1]: ignition-delete-config.service was skipped because no trigger condition checks were met. Mar 17 18:44:30.825728 systemd[1]: Starting modprobe@dm_mod.service... Mar 17 18:44:30.827513 systemd[1]: Starting modprobe@efi_pstore.service... Mar 17 18:44:30.829073 systemd[1]: Starting modprobe@loop.service... Mar 17 18:44:30.829859 systemd[1]: systemd-binfmt.service was skipped because no trigger condition checks were met. Mar 17 18:44:30.829950 systemd[1]: systemd-boot-system-token.service was skipped because of an unmet condition check (ConditionPathExists=/sys/firmware/efi/efivars/LoaderFeatures-4a67b082-0a4c-41cf-b6c7-440b29bb8c4f). Mar 17 18:44:30.830034 systemd[1]: update-ca-certificates.service was skipped because of an unmet condition check (ConditionPathIsSymbolicLink=!/etc/ssl/certs/ca-certificates.crt). Mar 17 18:44:30.830103 systemd[1]: xenserver-pv-version.service was skipped because of an unmet condition check (ConditionVirtualization=xen). Mar 17 18:44:30.829000 audit: CONFIG_CHANGE auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op=add_rule key=(null) list=5 res=1 Mar 17 18:44:30.829000 audit[1159]: SYSCALL arch=c000003e syscall=44 success=yes exit=1056 a0=3 a1=7fff5bf856c0 a2=420 a3=0 items=0 ppid=1134 pid=1159 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auditctl" exe="/usr/sbin/auditctl" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:44:30.829000 audit: PROCTITLE proctitle=2F7362696E2F617564697463746C002D52002F6574632F61756469742F61756469742E72756C6573 Mar 17 18:44:30.830839 augenrules[1159]: No rules Mar 17 18:44:30.830918 systemd[1]: Finished systemd-update-utmp.service. Mar 17 18:44:30.832132 systemd[1]: modprobe@dm_mod.service: Deactivated successfully. Mar 17 18:44:30.832235 systemd[1]: Finished modprobe@dm_mod.service. Mar 17 18:44:30.833421 systemd[1]: Finished audit-rules.service. Mar 17 18:44:30.834517 systemd[1]: Finished systemd-journal-catalog-update.service. Mar 17 18:44:30.835795 systemd[1]: modprobe@efi_pstore.service: Deactivated successfully. Mar 17 18:44:30.835890 systemd[1]: Finished modprobe@efi_pstore.service. Mar 17 18:44:30.837278 systemd[1]: modprobe@loop.service: Deactivated successfully. Mar 17 18:44:30.837430 systemd[1]: Finished modprobe@loop.service. Mar 17 18:44:30.839623 systemd[1]: systemd-pstore.service was skipped because of an unmet condition check (ConditionDirectoryNotEmpty=/sys/fs/pstore). Mar 17 18:44:30.839772 systemd[1]: systemd-repart.service was skipped because no trigger condition checks were met. Mar 17 18:44:30.841213 systemd[1]: Starting systemd-update-done.service... Mar 17 18:44:30.845038 systemd[1]: proc-xen.mount was skipped because of an unmet condition check (ConditionVirtualization=xen). Mar 17 18:44:30.845227 systemd[1]: ignition-delete-config.service was skipped because no trigger condition checks were met. Mar 17 18:44:30.846280 systemd[1]: Starting modprobe@dm_mod.service... Mar 17 18:44:30.847784 systemd[1]: Starting modprobe@drm.service... Mar 17 18:44:30.849354 systemd[1]: Starting modprobe@efi_pstore.service... Mar 17 18:44:30.851157 systemd[1]: Starting modprobe@loop.service... Mar 17 18:44:30.851968 systemd[1]: systemd-binfmt.service was skipped because no trigger condition checks were met. Mar 17 18:44:30.852103 systemd[1]: systemd-boot-system-token.service was skipped because of an unmet condition check (ConditionPathExists=/sys/firmware/efi/efivars/LoaderFeatures-4a67b082-0a4c-41cf-b6c7-440b29bb8c4f). Mar 17 18:44:30.853297 systemd[1]: Starting systemd-networkd-wait-online.service... Mar 17 18:44:30.854229 systemd[1]: update-ca-certificates.service was skipped because of an unmet condition check (ConditionPathIsSymbolicLink=!/etc/ssl/certs/ca-certificates.crt). Mar 17 18:44:30.854339 systemd[1]: xenserver-pv-version.service was skipped because of an unmet condition check (ConditionVirtualization=xen). Mar 17 18:44:30.855441 systemd[1]: Finished systemd-update-done.service. Mar 17 18:44:30.856710 systemd[1]: modprobe@dm_mod.service: Deactivated successfully. Mar 17 18:44:30.856834 systemd[1]: Finished modprobe@dm_mod.service. Mar 17 18:44:30.857985 systemd[1]: modprobe@drm.service: Deactivated successfully. Mar 17 18:44:30.858098 systemd[1]: Finished modprobe@drm.service. Mar 17 18:44:30.859230 systemd[1]: modprobe@efi_pstore.service: Deactivated successfully. Mar 17 18:44:30.859315 systemd[1]: Finished modprobe@efi_pstore.service. Mar 17 18:44:30.860413 systemd[1]: modprobe@loop.service: Deactivated successfully. Mar 17 18:44:30.860503 systemd[1]: Finished modprobe@loop.service. Mar 17 18:44:30.861531 systemd[1]: systemd-pstore.service was skipped because of an unmet condition check (ConditionDirectoryNotEmpty=/sys/fs/pstore). Mar 17 18:44:30.861619 systemd[1]: systemd-repart.service was skipped because no trigger condition checks were met. Mar 17 18:44:30.862828 systemd[1]: Finished ensure-sysext.service. Mar 17 18:44:30.863742 systemd-resolved[1143]: Positive Trust Anchors: Mar 17 18:44:30.863922 systemd-resolved[1143]: . IN DS 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d Mar 17 18:44:30.864007 systemd-resolved[1143]: Negative trust anchors: home.arpa 10.in-addr.arpa 16.172.in-addr.arpa 17.172.in-addr.arpa 18.172.in-addr.arpa 19.172.in-addr.arpa 20.172.in-addr.arpa 21.172.in-addr.arpa 22.172.in-addr.arpa 23.172.in-addr.arpa 24.172.in-addr.arpa 25.172.in-addr.arpa 26.172.in-addr.arpa 27.172.in-addr.arpa 28.172.in-addr.arpa 29.172.in-addr.arpa 30.172.in-addr.arpa 31.172.in-addr.arpa 168.192.in-addr.arpa d.f.ip6.arpa corp home internal intranet lan local private test Mar 17 18:44:30.869375 systemd[1]: Started systemd-timesyncd.service. Mar 17 18:44:30.870266 systemd[1]: Reached target time-set.target. Mar 17 18:44:30.870674 systemd-resolved[1143]: Defaulting to hostname 'linux'. Mar 17 18:44:31.975334 systemd-timesyncd[1144]: Contacted time server 10.0.0.1:123 (10.0.0.1). Mar 17 18:44:31.975378 systemd-timesyncd[1144]: Initial clock synchronization to Mon 2025-03-17 18:44:31.975270 UTC. Mar 17 18:44:31.975899 systemd-resolved[1143]: Clock change detected. Flushing caches. Mar 17 18:44:31.975908 systemd[1]: Started systemd-resolved.service. Mar 17 18:44:31.976736 systemd[1]: Reached target network.target. Mar 17 18:44:31.977493 systemd[1]: Reached target nss-lookup.target. Mar 17 18:44:31.978286 systemd[1]: Reached target sysinit.target. Mar 17 18:44:31.979133 systemd[1]: Started motdgen.path. Mar 17 18:44:31.979830 systemd[1]: Started user-cloudinit@var-lib-flatcar\x2dinstall-user_data.path. Mar 17 18:44:31.981003 systemd[1]: Started logrotate.timer. Mar 17 18:44:31.981784 systemd[1]: Started mdadm.timer. Mar 17 18:44:31.982428 systemd[1]: Started systemd-tmpfiles-clean.timer. Mar 17 18:44:31.983248 systemd[1]: update-engine-stub.timer was skipped because of an unmet condition check (ConditionPathExists=/usr/.noupdate). Mar 17 18:44:31.983267 systemd[1]: Reached target paths.target. Mar 17 18:44:31.983996 systemd[1]: Reached target timers.target. Mar 17 18:44:31.984958 systemd[1]: Listening on dbus.socket. Mar 17 18:44:31.986507 systemd[1]: Starting docker.socket... Mar 17 18:44:31.989007 systemd[1]: Listening on sshd.socket. Mar 17 18:44:31.989816 systemd[1]: systemd-pcrphase-sysinit.service was skipped because of an unmet condition check (ConditionPathExists=/sys/firmware/efi/efivars/StubPcrKernelImage-4a67b082-0a4c-41cf-b6c7-440b29bb8c4f). Mar 17 18:44:31.990130 systemd[1]: Listening on docker.socket. Mar 17 18:44:31.990897 systemd[1]: Reached target sockets.target. Mar 17 18:44:31.991669 systemd[1]: Reached target basic.target. Mar 17 18:44:31.992409 systemd[1]: addon-config@usr-share-oem.service was skipped because no trigger condition checks were met. Mar 17 18:44:31.992428 systemd[1]: addon-run@usr-share-oem.service was skipped because no trigger condition checks were met. Mar 17 18:44:31.993179 systemd[1]: Starting containerd.service... Mar 17 18:44:31.994614 systemd[1]: Starting dbus.service... Mar 17 18:44:31.995883 systemd[1]: Starting enable-oem-cloudinit.service... Mar 17 18:44:31.997391 systemd[1]: Starting extend-filesystems.service... Mar 17 18:44:31.999205 systemd[1]: flatcar-setup-environment.service was skipped because of an unmet condition check (ConditionPathExists=/usr/share/oem/bin/flatcar-setup-environment). Mar 17 18:44:31.999507 jq[1177]: false Mar 17 18:44:32.000030 systemd[1]: Starting motdgen.service... Mar 17 18:44:32.001579 systemd[1]: Starting prepare-helm.service... Mar 17 18:44:32.003211 systemd[1]: Starting ssh-key-proc-cmdline.service... Mar 17 18:44:32.005309 systemd[1]: Starting sshd-keygen.service... Mar 17 18:44:32.007810 extend-filesystems[1178]: Found loop1 Mar 17 18:44:32.007810 extend-filesystems[1178]: Found sr0 Mar 17 18:44:32.007810 extend-filesystems[1178]: Found vda Mar 17 18:44:32.007810 extend-filesystems[1178]: Found vda1 Mar 17 18:44:32.007810 extend-filesystems[1178]: Found vda2 Mar 17 18:44:32.014514 extend-filesystems[1178]: Found vda3 Mar 17 18:44:32.014514 extend-filesystems[1178]: Found usr Mar 17 18:44:32.014514 extend-filesystems[1178]: Found vda4 Mar 17 18:44:32.014514 extend-filesystems[1178]: Found vda6 Mar 17 18:44:32.014514 extend-filesystems[1178]: Found vda7 Mar 17 18:44:32.014514 extend-filesystems[1178]: Found vda9 Mar 17 18:44:32.014514 extend-filesystems[1178]: Checking size of /dev/vda9 Mar 17 18:44:32.007842 systemd[1]: Starting systemd-logind.service... Mar 17 18:44:32.009371 systemd[1]: systemd-pcrphase.service was skipped because of an unmet condition check (ConditionPathExists=/sys/firmware/efi/efivars/StubPcrKernelImage-4a67b082-0a4c-41cf-b6c7-440b29bb8c4f). Mar 17 18:44:32.009419 systemd[1]: tcsd.service was skipped because of an unmet condition check (ConditionPathExists=/dev/tpm0). Mar 17 18:44:32.010411 systemd[1]: cgroup compatibility translation between legacy and unified hierarchy settings activated. See cgroup-compat debug messages for details. Mar 17 18:44:32.011694 systemd[1]: Starting update-engine.service... Mar 17 18:44:32.020745 systemd[1]: Starting update-ssh-keys-after-ignition.service... Mar 17 18:44:32.022154 dbus-daemon[1176]: [system] SELinux support is enabled Mar 17 18:44:32.024064 jq[1198]: true Mar 17 18:44:32.023416 systemd[1]: Started dbus.service. Mar 17 18:44:32.026580 systemd[1]: enable-oem-cloudinit.service: Skipped due to 'exec-condition'. Mar 17 18:44:32.026733 systemd[1]: Condition check resulted in enable-oem-cloudinit.service being skipped. Mar 17 18:44:32.026946 systemd[1]: motdgen.service: Deactivated successfully. Mar 17 18:44:32.027061 systemd[1]: Finished motdgen.service. Mar 17 18:44:32.028862 systemd[1]: ssh-key-proc-cmdline.service: Deactivated successfully. Mar 17 18:44:32.029003 systemd[1]: Finished ssh-key-proc-cmdline.service. Mar 17 18:44:32.031768 systemd[1]: system-cloudinit@usr-share-oem-cloud\x2dconfig.yml.service was skipped because of an unmet condition check (ConditionFileNotEmpty=/usr/share/oem/cloud-config.yml). Mar 17 18:44:32.031790 systemd[1]: Reached target system-config.target. Mar 17 18:44:32.053795 kernel: EXT4-fs (vda9): resizing filesystem from 553472 to 1864699 blocks Mar 17 18:44:32.053872 tar[1200]: linux-amd64/helm Mar 17 18:44:32.054039 jq[1201]: true Mar 17 18:44:32.054093 extend-filesystems[1178]: Resized partition /dev/vda9 Mar 17 18:44:32.033319 systemd[1]: user-cloudinit-proc-cmdline.service was skipped because of an unmet condition check (ConditionKernelCommandLine=cloud-config-url). Mar 17 18:44:32.055710 extend-filesystems[1207]: resize2fs 1.46.5 (30-Dec-2021) Mar 17 18:44:32.033333 systemd[1]: Reached target user-config.target. Mar 17 18:44:32.068791 systemd-logind[1188]: Watching system buttons on /dev/input/event1 (Power Button) Mar 17 18:44:32.069009 systemd-logind[1188]: Watching system buttons on /dev/input/event0 (AT Translated Set 2 keyboard) Mar 17 18:44:32.071468 systemd-logind[1188]: New seat seat0. Mar 17 18:44:32.076319 update_engine[1195]: I0317 18:44:32.076056 1195 main.cc:92] Flatcar Update Engine starting Mar 17 18:44:32.077778 systemd[1]: Started update-engine.service. Mar 17 18:44:32.077932 update_engine[1195]: I0317 18:44:32.077800 1195 update_check_scheduler.cc:74] Next update check in 9m31s Mar 17 18:44:32.079104 systemd[1]: Started systemd-logind.service. Mar 17 18:44:32.079359 env[1203]: time="2025-03-17T18:44:32.079315071Z" level=info msg="starting containerd" revision=92b3a9d6f1b3bcc6dc74875cfdea653fe39f09c2 version=1.6.16 Mar 17 18:44:32.080656 kernel: EXT4-fs (vda9): resized filesystem to 1864699 Mar 17 18:44:32.085445 systemd[1]: Started locksmithd.service. Mar 17 18:44:32.102558 env[1203]: time="2025-03-17T18:44:32.102490936Z" level=info msg="loading plugin \"io.containerd.content.v1.content\"..." type=io.containerd.content.v1 Mar 17 18:44:32.107073 extend-filesystems[1207]: Filesystem at /dev/vda9 is mounted on /; on-line resizing required Mar 17 18:44:32.107073 extend-filesystems[1207]: old_desc_blocks = 1, new_desc_blocks = 1 Mar 17 18:44:32.107073 extend-filesystems[1207]: The filesystem on /dev/vda9 is now 1864699 (4k) blocks long. Mar 17 18:44:32.112739 extend-filesystems[1178]: Resized filesystem in /dev/vda9 Mar 17 18:44:32.113689 env[1203]: time="2025-03-17T18:44:32.111743885Z" level=info msg="loading plugin \"io.containerd.snapshotter.v1.aufs\"..." type=io.containerd.snapshotter.v1 Mar 17 18:44:32.113729 bash[1228]: Updated "/home/core/.ssh/authorized_keys" Mar 17 18:44:32.107763 systemd[1]: extend-filesystems.service: Deactivated successfully. Mar 17 18:44:32.107908 systemd[1]: Finished extend-filesystems.service. Mar 17 18:44:32.109813 systemd[1]: Finished update-ssh-keys-after-ignition.service. Mar 17 18:44:32.115701 env[1203]: time="2025-03-17T18:44:32.115670618Z" level=info msg="skip loading plugin \"io.containerd.snapshotter.v1.aufs\"..." error="aufs is not supported (modprobe aufs failed: exit status 1 \"modprobe: FATAL: Module aufs not found in directory /lib/modules/5.15.179-flatcar\\n\"): skip plugin" type=io.containerd.snapshotter.v1 Mar 17 18:44:32.115701 env[1203]: time="2025-03-17T18:44:32.115697258Z" level=info msg="loading plugin \"io.containerd.snapshotter.v1.btrfs\"..." type=io.containerd.snapshotter.v1 Mar 17 18:44:32.115902 env[1203]: time="2025-03-17T18:44:32.115875282Z" level=info msg="skip loading plugin \"io.containerd.snapshotter.v1.btrfs\"..." error="path /var/lib/containerd/io.containerd.snapshotter.v1.btrfs (ext4) must be a btrfs filesystem to be used with the btrfs snapshotter: skip plugin" type=io.containerd.snapshotter.v1 Mar 17 18:44:32.115902 env[1203]: time="2025-03-17T18:44:32.115892855Z" level=info msg="loading plugin \"io.containerd.snapshotter.v1.devmapper\"..." type=io.containerd.snapshotter.v1 Mar 17 18:44:32.115966 env[1203]: time="2025-03-17T18:44:32.115903805Z" level=warning msg="failed to load plugin io.containerd.snapshotter.v1.devmapper" error="devmapper not configured" Mar 17 18:44:32.115966 env[1203]: time="2025-03-17T18:44:32.115912522Z" level=info msg="loading plugin \"io.containerd.snapshotter.v1.native\"..." type=io.containerd.snapshotter.v1 Mar 17 18:44:32.116003 env[1203]: time="2025-03-17T18:44:32.115968527Z" level=info msg="loading plugin \"io.containerd.snapshotter.v1.overlayfs\"..." type=io.containerd.snapshotter.v1 Mar 17 18:44:32.116164 env[1203]: time="2025-03-17T18:44:32.116143014Z" level=info msg="loading plugin \"io.containerd.snapshotter.v1.zfs\"..." type=io.containerd.snapshotter.v1 Mar 17 18:44:32.116271 env[1203]: time="2025-03-17T18:44:32.116254082Z" level=info msg="skip loading plugin \"io.containerd.snapshotter.v1.zfs\"..." error="path /var/lib/containerd/io.containerd.snapshotter.v1.zfs must be a zfs filesystem to be used with the zfs snapshotter: skip plugin" type=io.containerd.snapshotter.v1 Mar 17 18:44:32.116271 env[1203]: time="2025-03-17T18:44:32.116269551Z" level=info msg="loading plugin \"io.containerd.metadata.v1.bolt\"..." type=io.containerd.metadata.v1 Mar 17 18:44:32.116318 env[1203]: time="2025-03-17T18:44:32.116308795Z" level=warning msg="could not use snapshotter devmapper in metadata plugin" error="devmapper not configured" Mar 17 18:44:32.116377 env[1203]: time="2025-03-17T18:44:32.116318813Z" level=info msg="metadata content store policy set" policy=shared Mar 17 18:44:32.122701 env[1203]: time="2025-03-17T18:44:32.121850085Z" level=info msg="loading plugin \"io.containerd.differ.v1.walking\"..." type=io.containerd.differ.v1 Mar 17 18:44:32.122701 env[1203]: time="2025-03-17T18:44:32.121875492Z" level=info msg="loading plugin \"io.containerd.event.v1.exchange\"..." type=io.containerd.event.v1 Mar 17 18:44:32.122701 env[1203]: time="2025-03-17T18:44:32.121888597Z" level=info msg="loading plugin \"io.containerd.gc.v1.scheduler\"..." type=io.containerd.gc.v1 Mar 17 18:44:32.122701 env[1203]: time="2025-03-17T18:44:32.121913594Z" level=info msg="loading plugin \"io.containerd.service.v1.introspection-service\"..." type=io.containerd.service.v1 Mar 17 18:44:32.122701 env[1203]: time="2025-03-17T18:44:32.121925165Z" level=info msg="loading plugin \"io.containerd.service.v1.containers-service\"..." type=io.containerd.service.v1 Mar 17 18:44:32.122701 env[1203]: time="2025-03-17T18:44:32.121938380Z" level=info msg="loading plugin \"io.containerd.service.v1.content-service\"..." type=io.containerd.service.v1 Mar 17 18:44:32.122701 env[1203]: time="2025-03-17T18:44:32.121949090Z" level=info msg="loading plugin \"io.containerd.service.v1.diff-service\"..." type=io.containerd.service.v1 Mar 17 18:44:32.122701 env[1203]: time="2025-03-17T18:44:32.121961804Z" level=info msg="loading plugin \"io.containerd.service.v1.images-service\"..." type=io.containerd.service.v1 Mar 17 18:44:32.122701 env[1203]: time="2025-03-17T18:44:32.121972825Z" level=info msg="loading plugin \"io.containerd.service.v1.leases-service\"..." type=io.containerd.service.v1 Mar 17 18:44:32.122701 env[1203]: time="2025-03-17T18:44:32.121984016Z" level=info msg="loading plugin \"io.containerd.service.v1.namespaces-service\"..." type=io.containerd.service.v1 Mar 17 18:44:32.122701 env[1203]: time="2025-03-17T18:44:32.121994565Z" level=info msg="loading plugin \"io.containerd.service.v1.snapshots-service\"..." type=io.containerd.service.v1 Mar 17 18:44:32.122701 env[1203]: time="2025-03-17T18:44:32.122004454Z" level=info msg="loading plugin \"io.containerd.runtime.v1.linux\"..." type=io.containerd.runtime.v1 Mar 17 18:44:32.122701 env[1203]: time="2025-03-17T18:44:32.122074666Z" level=info msg="loading plugin \"io.containerd.runtime.v2.task\"..." type=io.containerd.runtime.v2 Mar 17 18:44:32.122701 env[1203]: time="2025-03-17T18:44:32.122130731Z" level=info msg="loading plugin \"io.containerd.monitor.v1.cgroups\"..." type=io.containerd.monitor.v1 Mar 17 18:44:32.122981 env[1203]: time="2025-03-17T18:44:32.122317230Z" level=info msg="loading plugin \"io.containerd.service.v1.tasks-service\"..." type=io.containerd.service.v1 Mar 17 18:44:32.122981 env[1203]: time="2025-03-17T18:44:32.122335765Z" level=info msg="loading plugin \"io.containerd.grpc.v1.introspection\"..." type=io.containerd.grpc.v1 Mar 17 18:44:32.122981 env[1203]: time="2025-03-17T18:44:32.122346565Z" level=info msg="loading plugin \"io.containerd.internal.v1.restart\"..." type=io.containerd.internal.v1 Mar 17 18:44:32.122981 env[1203]: time="2025-03-17T18:44:32.122382974Z" level=info msg="loading plugin \"io.containerd.grpc.v1.containers\"..." type=io.containerd.grpc.v1 Mar 17 18:44:32.122981 env[1203]: time="2025-03-17T18:44:32.122393674Z" level=info msg="loading plugin \"io.containerd.grpc.v1.content\"..." type=io.containerd.grpc.v1 Mar 17 18:44:32.122981 env[1203]: time="2025-03-17T18:44:32.122404354Z" level=info msg="loading plugin \"io.containerd.grpc.v1.diff\"..." type=io.containerd.grpc.v1 Mar 17 18:44:32.122981 env[1203]: time="2025-03-17T18:44:32.122415004Z" level=info msg="loading plugin \"io.containerd.grpc.v1.events\"..." type=io.containerd.grpc.v1 Mar 17 18:44:32.122981 env[1203]: time="2025-03-17T18:44:32.122428008Z" level=info msg="loading plugin \"io.containerd.grpc.v1.healthcheck\"..." type=io.containerd.grpc.v1 Mar 17 18:44:32.122981 env[1203]: time="2025-03-17T18:44:32.122438838Z" level=info msg="loading plugin \"io.containerd.grpc.v1.images\"..." type=io.containerd.grpc.v1 Mar 17 18:44:32.122981 env[1203]: time="2025-03-17T18:44:32.122448597Z" level=info msg="loading plugin \"io.containerd.grpc.v1.leases\"..." type=io.containerd.grpc.v1 Mar 17 18:44:32.122981 env[1203]: time="2025-03-17T18:44:32.122457814Z" level=info msg="loading plugin \"io.containerd.grpc.v1.namespaces\"..." type=io.containerd.grpc.v1 Mar 17 18:44:32.122981 env[1203]: time="2025-03-17T18:44:32.122469276Z" level=info msg="loading plugin \"io.containerd.internal.v1.opt\"..." type=io.containerd.internal.v1 Mar 17 18:44:32.122981 env[1203]: time="2025-03-17T18:44:32.122575084Z" level=info msg="loading plugin \"io.containerd.grpc.v1.snapshots\"..." type=io.containerd.grpc.v1 Mar 17 18:44:32.122981 env[1203]: time="2025-03-17T18:44:32.122588168Z" level=info msg="loading plugin \"io.containerd.grpc.v1.tasks\"..." type=io.containerd.grpc.v1 Mar 17 18:44:32.122981 env[1203]: time="2025-03-17T18:44:32.122597616Z" level=info msg="loading plugin \"io.containerd.grpc.v1.version\"..." type=io.containerd.grpc.v1 Mar 17 18:44:32.123239 env[1203]: time="2025-03-17T18:44:32.122607314Z" level=info msg="loading plugin \"io.containerd.tracing.processor.v1.otlp\"..." type=io.containerd.tracing.processor.v1 Mar 17 18:44:32.123239 env[1203]: time="2025-03-17T18:44:32.122618976Z" level=info msg="skip loading plugin \"io.containerd.tracing.processor.v1.otlp\"..." error="no OpenTelemetry endpoint: skip plugin" type=io.containerd.tracing.processor.v1 Mar 17 18:44:32.123239 env[1203]: time="2025-03-17T18:44:32.122641128Z" level=info msg="loading plugin \"io.containerd.internal.v1.tracing\"..." type=io.containerd.internal.v1 Mar 17 18:44:32.124247 env[1203]: time="2025-03-17T18:44:32.123311996Z" level=error msg="failed to initialize a tracing processor \"otlp\"" error="no OpenTelemetry endpoint: skip plugin" Mar 17 18:44:32.124247 env[1203]: time="2025-03-17T18:44:32.123357010Z" level=info msg="loading plugin \"io.containerd.grpc.v1.cri\"..." type=io.containerd.grpc.v1 Mar 17 18:44:32.124324 env[1203]: time="2025-03-17T18:44:32.123518172Z" level=info msg="Start cri plugin with config {PluginConfig:{ContainerdConfig:{Snapshotter:overlayfs DefaultRuntimeName:runc DefaultRuntime:{Type: Path: Engine: PodAnnotations:[] ContainerAnnotations:[] Root: Options:map[] PrivilegedWithoutHostDevices:false BaseRuntimeSpec: NetworkPluginConfDir: NetworkPluginMaxConfNum:0} UntrustedWorkloadRuntime:{Type: Path: Engine: PodAnnotations:[] ContainerAnnotations:[] Root: Options:map[] PrivilegedWithoutHostDevices:false BaseRuntimeSpec: NetworkPluginConfDir: NetworkPluginMaxConfNum:0} Runtimes:map[runc:{Type:io.containerd.runc.v2 Path: Engine: PodAnnotations:[] ContainerAnnotations:[] Root: Options:map[SystemdCgroup:true] PrivilegedWithoutHostDevices:false BaseRuntimeSpec: NetworkPluginConfDir: NetworkPluginMaxConfNum:0}] NoPivot:false DisableSnapshotAnnotations:true DiscardUnpackedLayers:false IgnoreRdtNotEnabledErrors:false} CniConfig:{NetworkPluginBinDir:/opt/cni/bin NetworkPluginConfDir:/etc/cni/net.d NetworkPluginMaxConfNum:1 NetworkPluginConfTemplate: IPPreference:} Registry:{ConfigPath: Mirrors:map[] Configs:map[] Auths:map[] Headers:map[]} ImageDecryption:{KeyModel:node} DisableTCPService:true StreamServerAddress:127.0.0.1 StreamServerPort:0 StreamIdleTimeout:4h0m0s EnableSelinux:true SelinuxCategoryRange:1024 SandboxImage:registry.k8s.io/pause:3.6 StatsCollectPeriod:10 SystemdCgroup:false EnableTLSStreaming:false X509KeyPairStreaming:{TLSCertFile: TLSKeyFile:} MaxContainerLogLineSize:16384 DisableCgroup:false DisableApparmor:false RestrictOOMScoreAdj:false MaxConcurrentDownloads:3 DisableProcMount:false UnsetSeccompProfile: TolerateMissingHugetlbController:true DisableHugetlbController:true DeviceOwnershipFromSecurityContext:false IgnoreImageDefinedVolumes:false NetNSMountsUnderStateDir:false EnableUnprivilegedPorts:false EnableUnprivilegedICMP:false} ContainerdRootDir:/var/lib/containerd ContainerdEndpoint:/run/containerd/containerd.sock RootDir:/var/lib/containerd/io.containerd.grpc.v1.cri StateDir:/run/containerd/io.containerd.grpc.v1.cri}" Mar 17 18:44:32.124324 env[1203]: time="2025-03-17T18:44:32.123572143Z" level=info msg="Connect containerd service" Mar 17 18:44:32.124324 env[1203]: time="2025-03-17T18:44:32.123597972Z" level=info msg="Get image filesystem path \"/var/lib/containerd/io.containerd.snapshotter.v1.overlayfs\"" Mar 17 18:44:32.124324 env[1203]: time="2025-03-17T18:44:32.124019683Z" level=error msg="failed to load cni during init, please check CRI plugin status before setting up network for pods" error="cni config load failed: no network config found in /etc/cni/net.d: cni plugin not initialized: failed to load cni config" Mar 17 18:44:32.124324 env[1203]: time="2025-03-17T18:44:32.124236549Z" level=info msg="Start subscribing containerd event" Mar 17 18:44:32.124324 env[1203]: time="2025-03-17T18:44:32.124281323Z" level=info msg="Start recovering state" Mar 17 18:44:32.124324 env[1203]: time="2025-03-17T18:44:32.124323142Z" level=info msg="Start event monitor" Mar 17 18:44:32.124975 env[1203]: time="2025-03-17T18:44:32.124338591Z" level=info msg="Start snapshots syncer" Mar 17 18:44:32.124975 env[1203]: time="2025-03-17T18:44:32.124345874Z" level=info msg="Start cni network conf syncer for default" Mar 17 18:44:32.124975 env[1203]: time="2025-03-17T18:44:32.124352026Z" level=info msg="Start streaming server" Mar 17 18:44:32.124975 env[1203]: time="2025-03-17T18:44:32.124236850Z" level=info msg=serving... address=/run/containerd/containerd.sock.ttrpc Mar 17 18:44:32.124975 env[1203]: time="2025-03-17T18:44:32.124469716Z" level=info msg=serving... address=/run/containerd/containerd.sock Mar 17 18:44:32.124975 env[1203]: time="2025-03-17T18:44:32.124815184Z" level=info msg="containerd successfully booted in 0.047579s" Mar 17 18:44:32.124803 systemd[1]: Started containerd.service. Mar 17 18:44:32.128874 locksmithd[1231]: locksmithd starting currentOperation="UPDATE_STATUS_IDLE" strategy="reboot" Mar 17 18:44:32.423866 tar[1200]: linux-amd64/LICENSE Mar 17 18:44:32.424000 tar[1200]: linux-amd64/README.md Mar 17 18:44:32.428551 systemd[1]: Finished prepare-helm.service. Mar 17 18:44:33.156771 systemd-networkd[1025]: eth0: Gained IPv6LL Mar 17 18:44:33.158467 systemd[1]: Finished systemd-networkd-wait-online.service. Mar 17 18:44:33.160150 systemd[1]: Reached target network-online.target. Mar 17 18:44:33.162772 systemd[1]: Starting kubelet.service... Mar 17 18:44:33.444702 sshd_keygen[1197]: ssh-keygen: generating new host keys: RSA ECDSA ED25519 Mar 17 18:44:33.462416 systemd[1]: Finished sshd-keygen.service. Mar 17 18:44:33.464563 systemd[1]: Starting issuegen.service... Mar 17 18:44:33.469153 systemd[1]: issuegen.service: Deactivated successfully. Mar 17 18:44:33.469280 systemd[1]: Finished issuegen.service. Mar 17 18:44:33.471130 systemd[1]: Starting systemd-user-sessions.service... Mar 17 18:44:33.476475 systemd[1]: Finished systemd-user-sessions.service. Mar 17 18:44:33.478644 systemd[1]: Started getty@tty1.service. Mar 17 18:44:33.480717 systemd[1]: Started serial-getty@ttyS0.service. Mar 17 18:44:33.481819 systemd[1]: Reached target getty.target. Mar 17 18:44:33.711241 systemd[1]: Started kubelet.service. Mar 17 18:44:33.712448 systemd[1]: Reached target multi-user.target. Mar 17 18:44:33.714257 systemd[1]: Starting systemd-update-utmp-runlevel.service... Mar 17 18:44:33.721029 systemd[1]: systemd-update-utmp-runlevel.service: Deactivated successfully. Mar 17 18:44:33.721154 systemd[1]: Finished systemd-update-utmp-runlevel.service. Mar 17 18:44:33.722283 systemd[1]: Startup finished in 652ms (kernel) + 4.265s (initrd) + 5.635s (userspace) = 10.553s. Mar 17 18:44:34.130519 kubelet[1257]: E0317 18:44:34.130396 1257 run.go:74] "command failed" err="failed to load kubelet config file, path: /var/lib/kubelet/config.yaml, error: failed to load Kubelet config file /var/lib/kubelet/config.yaml, error failed to read kubelet config file \"/var/lib/kubelet/config.yaml\", error: open /var/lib/kubelet/config.yaml: no such file or directory" Mar 17 18:44:34.132056 systemd[1]: kubelet.service: Main process exited, code=exited, status=1/FAILURE Mar 17 18:44:34.132168 systemd[1]: kubelet.service: Failed with result 'exit-code'. Mar 17 18:44:41.656136 systemd[1]: Created slice system-sshd.slice. Mar 17 18:44:41.657153 systemd[1]: Started sshd@0-10.0.0.110:22-10.0.0.1:56828.service. Mar 17 18:44:41.696086 sshd[1267]: Accepted publickey for core from 10.0.0.1 port 56828 ssh2: RSA SHA256:EcJpbXadXymLrINQtrmLSqTXC2wy0UoSwO9MmZb5CTo Mar 17 18:44:41.697866 sshd[1267]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Mar 17 18:44:41.709876 systemd-logind[1188]: New session 1 of user core. Mar 17 18:44:41.711156 systemd[1]: Created slice user-500.slice. Mar 17 18:44:41.712563 systemd[1]: Starting user-runtime-dir@500.service... Mar 17 18:44:41.721170 systemd[1]: Finished user-runtime-dir@500.service. Mar 17 18:44:41.722996 systemd[1]: Starting user@500.service... Mar 17 18:44:41.726421 (systemd)[1270]: pam_unix(systemd-user:session): session opened for user core(uid=500) by (uid=0) Mar 17 18:44:41.821623 systemd[1270]: Queued start job for default target default.target. Mar 17 18:44:41.822209 systemd[1270]: Reached target paths.target. Mar 17 18:44:41.822234 systemd[1270]: Reached target sockets.target. Mar 17 18:44:41.822250 systemd[1270]: Reached target timers.target. Mar 17 18:44:41.822265 systemd[1270]: Reached target basic.target. Mar 17 18:44:41.822318 systemd[1270]: Reached target default.target. Mar 17 18:44:41.822351 systemd[1270]: Startup finished in 89ms. Mar 17 18:44:41.822503 systemd[1]: Started user@500.service. Mar 17 18:44:41.823846 systemd[1]: Started session-1.scope. Mar 17 18:44:41.876228 systemd[1]: Started sshd@1-10.0.0.110:22-10.0.0.1:56832.service. Mar 17 18:44:41.907618 sshd[1279]: Accepted publickey for core from 10.0.0.1 port 56832 ssh2: RSA SHA256:EcJpbXadXymLrINQtrmLSqTXC2wy0UoSwO9MmZb5CTo Mar 17 18:44:41.908824 sshd[1279]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Mar 17 18:44:41.912888 systemd-logind[1188]: New session 2 of user core. Mar 17 18:44:41.914125 systemd[1]: Started session-2.scope. Mar 17 18:44:41.967243 sshd[1279]: pam_unix(sshd:session): session closed for user core Mar 17 18:44:41.969845 systemd[1]: sshd@1-10.0.0.110:22-10.0.0.1:56832.service: Deactivated successfully. Mar 17 18:44:41.970358 systemd[1]: session-2.scope: Deactivated successfully. Mar 17 18:44:41.970974 systemd-logind[1188]: Session 2 logged out. Waiting for processes to exit. Mar 17 18:44:41.971809 systemd[1]: Started sshd@2-10.0.0.110:22-10.0.0.1:56842.service. Mar 17 18:44:41.972703 systemd-logind[1188]: Removed session 2. Mar 17 18:44:42.005684 sshd[1285]: Accepted publickey for core from 10.0.0.1 port 56842 ssh2: RSA SHA256:EcJpbXadXymLrINQtrmLSqTXC2wy0UoSwO9MmZb5CTo Mar 17 18:44:42.006840 sshd[1285]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Mar 17 18:44:42.010524 systemd-logind[1188]: New session 3 of user core. Mar 17 18:44:42.011724 systemd[1]: Started session-3.scope. Mar 17 18:44:42.060848 sshd[1285]: pam_unix(sshd:session): session closed for user core Mar 17 18:44:42.064120 systemd[1]: sshd@2-10.0.0.110:22-10.0.0.1:56842.service: Deactivated successfully. Mar 17 18:44:42.064641 systemd[1]: session-3.scope: Deactivated successfully. Mar 17 18:44:42.065125 systemd-logind[1188]: Session 3 logged out. Waiting for processes to exit. Mar 17 18:44:42.066106 systemd[1]: Started sshd@3-10.0.0.110:22-10.0.0.1:56850.service. Mar 17 18:44:42.067015 systemd-logind[1188]: Removed session 3. Mar 17 18:44:42.097060 sshd[1292]: Accepted publickey for core from 10.0.0.1 port 56850 ssh2: RSA SHA256:EcJpbXadXymLrINQtrmLSqTXC2wy0UoSwO9MmZb5CTo Mar 17 18:44:42.098135 sshd[1292]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Mar 17 18:44:42.101479 systemd-logind[1188]: New session 4 of user core. Mar 17 18:44:42.102399 systemd[1]: Started session-4.scope. Mar 17 18:44:42.156059 sshd[1292]: pam_unix(sshd:session): session closed for user core Mar 17 18:44:42.159470 systemd[1]: sshd@3-10.0.0.110:22-10.0.0.1:56850.service: Deactivated successfully. Mar 17 18:44:42.160189 systemd[1]: session-4.scope: Deactivated successfully. Mar 17 18:44:42.160813 systemd-logind[1188]: Session 4 logged out. Waiting for processes to exit. Mar 17 18:44:42.162124 systemd[1]: Started sshd@4-10.0.0.110:22-10.0.0.1:56858.service. Mar 17 18:44:42.163015 systemd-logind[1188]: Removed session 4. Mar 17 18:44:42.196422 sshd[1298]: Accepted publickey for core from 10.0.0.1 port 56858 ssh2: RSA SHA256:EcJpbXadXymLrINQtrmLSqTXC2wy0UoSwO9MmZb5CTo Mar 17 18:44:42.197727 sshd[1298]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Mar 17 18:44:42.201075 systemd-logind[1188]: New session 5 of user core. Mar 17 18:44:42.201973 systemd[1]: Started session-5.scope. Mar 17 18:44:42.257700 sudo[1301]: core : PWD=/home/core ; USER=root ; COMMAND=/usr/sbin/setenforce 1 Mar 17 18:44:42.257881 sudo[1301]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=500) Mar 17 18:44:42.266892 dbus-daemon[1176]: \xd0=\xa9(\xd7U: received setenforce notice (enforcing=-463500608) Mar 17 18:44:42.268809 sudo[1301]: pam_unix(sudo:session): session closed for user root Mar 17 18:44:42.270892 sshd[1298]: pam_unix(sshd:session): session closed for user core Mar 17 18:44:42.275893 systemd[1]: Started sshd@5-10.0.0.110:22-10.0.0.1:56862.service. Mar 17 18:44:42.276554 systemd[1]: sshd@4-10.0.0.110:22-10.0.0.1:56858.service: Deactivated successfully. Mar 17 18:44:42.277279 systemd[1]: session-5.scope: Deactivated successfully. Mar 17 18:44:42.277943 systemd-logind[1188]: Session 5 logged out. Waiting for processes to exit. Mar 17 18:44:42.278828 systemd-logind[1188]: Removed session 5. Mar 17 18:44:42.306589 sshd[1304]: Accepted publickey for core from 10.0.0.1 port 56862 ssh2: RSA SHA256:EcJpbXadXymLrINQtrmLSqTXC2wy0UoSwO9MmZb5CTo Mar 17 18:44:42.307600 sshd[1304]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Mar 17 18:44:42.311327 systemd-logind[1188]: New session 6 of user core. Mar 17 18:44:42.312417 systemd[1]: Started session-6.scope. Mar 17 18:44:42.366600 sudo[1309]: core : PWD=/home/core ; USER=root ; COMMAND=/usr/bin/rm -rf /etc/audit/rules.d/80-selinux.rules /etc/audit/rules.d/99-default.rules Mar 17 18:44:42.366872 sudo[1309]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=500) Mar 17 18:44:42.369678 sudo[1309]: pam_unix(sudo:session): session closed for user root Mar 17 18:44:42.374063 sudo[1308]: core : PWD=/home/core ; USER=root ; COMMAND=/usr/bin/systemctl restart audit-rules Mar 17 18:44:42.374242 sudo[1308]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=500) Mar 17 18:44:42.383193 systemd[1]: Stopping audit-rules.service... Mar 17 18:44:42.383000 audit: CONFIG_CHANGE auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op=remove_rule key=(null) list=5 res=1 Mar 17 18:44:42.385191 kernel: kauditd_printk_skb: 237 callbacks suppressed Mar 17 18:44:42.385241 kernel: audit: type=1305 audit(1742237082.383:200): auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op=remove_rule key=(null) list=5 res=1 Mar 17 18:44:42.385465 auditctl[1312]: No rules Mar 17 18:44:42.383000 audit[1312]: SYSCALL arch=c000003e syscall=44 success=yes exit=1056 a0=3 a1=7ffe30d34550 a2=420 a3=0 items=0 ppid=1 pid=1312 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auditctl" exe="/usr/sbin/auditctl" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:44:42.387839 systemd[1]: audit-rules.service: Deactivated successfully. Mar 17 18:44:42.388074 systemd[1]: Stopped audit-rules.service. Mar 17 18:44:42.390047 systemd[1]: Starting audit-rules.service... Mar 17 18:44:42.391850 kernel: audit: type=1300 audit(1742237082.383:200): arch=c000003e syscall=44 success=yes exit=1056 a0=3 a1=7ffe30d34550 a2=420 a3=0 items=0 ppid=1 pid=1312 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auditctl" exe="/usr/sbin/auditctl" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:44:42.391904 kernel: audit: type=1327 audit(1742237082.383:200): proctitle=2F7362696E2F617564697463746C002D44 Mar 17 18:44:42.383000 audit: PROCTITLE proctitle=2F7362696E2F617564697463746C002D44 Mar 17 18:44:42.387000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=audit-rules comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:44:42.396542 kernel: audit: type=1131 audit(1742237082.387:201): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=audit-rules comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:44:42.407941 augenrules[1329]: No rules Mar 17 18:44:42.408795 systemd[1]: Finished audit-rules.service. Mar 17 18:44:42.418670 kernel: audit: type=1130 audit(1742237082.408:202): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=audit-rules comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:44:42.418780 kernel: audit: type=1106 audit(1742237082.409:203): pid=1308 uid=500 auid=500 ses=6 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_limits,pam_env,pam_unix,pam_permit,pam_systemd acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Mar 17 18:44:42.418808 kernel: audit: type=1104 audit(1742237082.409:204): pid=1308 uid=500 auid=500 ses=6 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Mar 17 18:44:42.408000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=audit-rules comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:44:42.409000 audit[1308]: USER_END pid=1308 uid=500 auid=500 ses=6 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_limits,pam_env,pam_unix,pam_permit,pam_systemd acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Mar 17 18:44:42.409000 audit[1308]: CRED_DISP pid=1308 uid=500 auid=500 ses=6 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Mar 17 18:44:42.414193 systemd[1]: sshd@5-10.0.0.110:22-10.0.0.1:56862.service: Deactivated successfully. Mar 17 18:44:42.409600 sudo[1308]: pam_unix(sudo:session): session closed for user root Mar 17 18:44:42.414843 systemd[1]: session-6.scope: Deactivated successfully. Mar 17 18:44:42.410911 sshd[1304]: pam_unix(sshd:session): session closed for user core Mar 17 18:44:42.415393 systemd-logind[1188]: Session 6 logged out. Waiting for processes to exit. Mar 17 18:44:42.416537 systemd[1]: Started sshd@6-10.0.0.110:22-10.0.0.1:56876.service. Mar 17 18:44:42.417489 systemd-logind[1188]: Removed session 6. Mar 17 18:44:42.411000 audit[1304]: USER_END pid=1304 uid=0 auid=500 ses=6 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Mar 17 18:44:42.424736 kernel: audit: type=1106 audit(1742237082.411:205): pid=1304 uid=0 auid=500 ses=6 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Mar 17 18:44:42.424856 kernel: audit: type=1104 audit(1742237082.411:206): pid=1304 uid=0 auid=500 ses=6 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Mar 17 18:44:42.411000 audit[1304]: CRED_DISP pid=1304 uid=0 auid=500 ses=6 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Mar 17 18:44:42.428115 kernel: audit: type=1131 audit(1742237082.413:207): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@5-10.0.0.110:22-10.0.0.1:56862 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:44:42.413000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@5-10.0.0.110:22-10.0.0.1:56862 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:44:42.416000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@6-10.0.0.110:22-10.0.0.1:56876 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:44:42.449000 audit[1335]: USER_ACCT pid=1335 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Mar 17 18:44:42.450320 sshd[1335]: Accepted publickey for core from 10.0.0.1 port 56876 ssh2: RSA SHA256:EcJpbXadXymLrINQtrmLSqTXC2wy0UoSwO9MmZb5CTo Mar 17 18:44:42.450000 audit[1335]: CRED_ACQ pid=1335 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Mar 17 18:44:42.450000 audit[1335]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffd815a6870 a2=3 a3=0 items=0 ppid=1 pid=1335 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=7 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:44:42.450000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Mar 17 18:44:42.451641 sshd[1335]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Mar 17 18:44:42.455230 systemd-logind[1188]: New session 7 of user core. Mar 17 18:44:42.456055 systemd[1]: Started session-7.scope. Mar 17 18:44:42.458000 audit[1335]: USER_START pid=1335 uid=0 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Mar 17 18:44:42.459000 audit[1337]: CRED_ACQ pid=1337 uid=0 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Mar 17 18:44:42.506000 audit[1338]: USER_ACCT pid=1338 uid=500 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Mar 17 18:44:42.506000 audit[1338]: CRED_REFR pid=1338 uid=500 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Mar 17 18:44:42.506917 sudo[1338]: core : PWD=/home/core ; USER=root ; COMMAND=/home/core/install.sh Mar 17 18:44:42.507097 sudo[1338]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=500) Mar 17 18:44:42.508000 audit[1338]: USER_START pid=1338 uid=500 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_limits,pam_env,pam_unix,pam_permit,pam_systemd acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Mar 17 18:44:42.815866 systemd[1]: Starting docker.service... Mar 17 18:44:42.846547 env[1350]: time="2025-03-17T18:44:42.846495031Z" level=info msg="Starting up" Mar 17 18:44:42.847876 env[1350]: time="2025-03-17T18:44:42.847848409Z" level=info msg="parsed scheme: \"unix\"" module=grpc Mar 17 18:44:42.847876 env[1350]: time="2025-03-17T18:44:42.847863978Z" level=info msg="scheme \"unix\" not registered, fallback to default scheme" module=grpc Mar 17 18:44:42.847968 env[1350]: time="2025-03-17T18:44:42.847879838Z" level=info msg="ccResolverWrapper: sending update to cc: {[{unix:///var/run/docker/libcontainerd/docker-containerd.sock 0 }] }" module=grpc Mar 17 18:44:42.847968 env[1350]: time="2025-03-17T18:44:42.847889215Z" level=info msg="ClientConn switching balancer to \"pick_first\"" module=grpc Mar 17 18:44:42.849243 env[1350]: time="2025-03-17T18:44:42.849204090Z" level=info msg="parsed scheme: \"unix\"" module=grpc Mar 17 18:44:42.849243 env[1350]: time="2025-03-17T18:44:42.849229318Z" level=info msg="scheme \"unix\" not registered, fallback to default scheme" module=grpc Mar 17 18:44:42.849332 env[1350]: time="2025-03-17T18:44:42.849255176Z" level=info msg="ccResolverWrapper: sending update to cc: {[{unix:///var/run/docker/libcontainerd/docker-containerd.sock 0 }] }" module=grpc Mar 17 18:44:42.849332 env[1350]: time="2025-03-17T18:44:42.849286325Z" level=info msg="ClientConn switching balancer to \"pick_first\"" module=grpc Mar 17 18:44:42.853967 systemd[1]: var-lib-docker-check\x2doverlayfs\x2dsupport662139450-merged.mount: Deactivated successfully. Mar 17 18:44:42.940859 env[1350]: time="2025-03-17T18:44:42.940803960Z" level=info msg="Loading containers: start." Mar 17 18:44:42.988000 audit[1384]: NETFILTER_CFG table=nat:2 family=2 entries=2 op=nft_register_chain pid=1384 subj=system_u:system_r:kernel_t:s0 comm="iptables" Mar 17 18:44:42.988000 audit[1384]: SYSCALL arch=c000003e syscall=46 success=yes exit=116 a0=3 a1=7ffd5cb664f0 a2=0 a3=7ffd5cb664dc items=0 ppid=1350 pid=1384 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:44:42.988000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D74006E6174002D4E00444F434B4552 Mar 17 18:44:42.989000 audit[1386]: NETFILTER_CFG table=filter:3 family=2 entries=2 op=nft_register_chain pid=1386 subj=system_u:system_r:kernel_t:s0 comm="iptables" Mar 17 18:44:42.989000 audit[1386]: SYSCALL arch=c000003e syscall=46 success=yes exit=124 a0=3 a1=7ffdab410100 a2=0 a3=7ffdab4100ec items=0 ppid=1350 pid=1386 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:44:42.989000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D740066696C746572002D4E00444F434B4552 Mar 17 18:44:42.991000 audit[1388]: NETFILTER_CFG table=filter:4 family=2 entries=1 op=nft_register_chain pid=1388 subj=system_u:system_r:kernel_t:s0 comm="iptables" Mar 17 18:44:42.991000 audit[1388]: SYSCALL arch=c000003e syscall=46 success=yes exit=112 a0=3 a1=7fff62cfed70 a2=0 a3=7fff62cfed5c items=0 ppid=1350 pid=1388 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:44:42.991000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D740066696C746572002D4E00444F434B45522D49534F4C4154494F4E2D53544147452D31 Mar 17 18:44:42.992000 audit[1390]: NETFILTER_CFG table=filter:5 family=2 entries=1 op=nft_register_chain pid=1390 subj=system_u:system_r:kernel_t:s0 comm="iptables" Mar 17 18:44:42.992000 audit[1390]: SYSCALL arch=c000003e syscall=46 success=yes exit=112 a0=3 a1=7ffd1ae4c700 a2=0 a3=7ffd1ae4c6ec items=0 ppid=1350 pid=1390 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:44:42.992000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D740066696C746572002D4E00444F434B45522D49534F4C4154494F4E2D53544147452D32 Mar 17 18:44:42.994000 audit[1392]: NETFILTER_CFG table=filter:6 family=2 entries=1 op=nft_register_rule pid=1392 subj=system_u:system_r:kernel_t:s0 comm="iptables" Mar 17 18:44:42.994000 audit[1392]: SYSCALL arch=c000003e syscall=46 success=yes exit=228 a0=3 a1=7ffe43bec5c0 a2=0 a3=7ffe43bec5ac items=0 ppid=1350 pid=1392 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:44:42.994000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4100444F434B45522D49534F4C4154494F4E2D53544147452D31002D6A0052455455524E Mar 17 18:44:43.011000 audit[1397]: NETFILTER_CFG table=filter:7 family=2 entries=1 op=nft_register_rule pid=1397 subj=system_u:system_r:kernel_t:s0 comm="iptables" Mar 17 18:44:43.011000 audit[1397]: SYSCALL arch=c000003e syscall=46 success=yes exit=228 a0=3 a1=7fff2f878970 a2=0 a3=7fff2f87895c items=0 ppid=1350 pid=1397 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:44:43.011000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4100444F434B45522D49534F4C4154494F4E2D53544147452D32002D6A0052455455524E Mar 17 18:44:43.020000 audit[1399]: NETFILTER_CFG table=filter:8 family=2 entries=1 op=nft_register_chain pid=1399 subj=system_u:system_r:kernel_t:s0 comm="iptables" Mar 17 18:44:43.020000 audit[1399]: SYSCALL arch=c000003e syscall=46 success=yes exit=96 a0=3 a1=7fffd90f4ab0 a2=0 a3=7fffd90f4a9c items=0 ppid=1350 pid=1399 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:44:43.020000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D740066696C746572002D4E00444F434B45522D55534552 Mar 17 18:44:43.022000 audit[1401]: NETFILTER_CFG table=filter:9 family=2 entries=1 op=nft_register_rule pid=1401 subj=system_u:system_r:kernel_t:s0 comm="iptables" Mar 17 18:44:43.022000 audit[1401]: SYSCALL arch=c000003e syscall=46 success=yes exit=212 a0=3 a1=7ffd061321e0 a2=0 a3=7ffd061321cc items=0 ppid=1350 pid=1401 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:44:43.022000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4100444F434B45522D55534552002D6A0052455455524E Mar 17 18:44:43.023000 audit[1403]: NETFILTER_CFG table=filter:10 family=2 entries=2 op=nft_register_chain pid=1403 subj=system_u:system_r:kernel_t:s0 comm="iptables" Mar 17 18:44:43.023000 audit[1403]: SYSCALL arch=c000003e syscall=46 success=yes exit=308 a0=3 a1=7ffef6f77680 a2=0 a3=7ffef6f7766c items=0 ppid=1350 pid=1403 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:44:43.023000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6A00444F434B45522D55534552 Mar 17 18:44:43.031000 audit[1408]: NETFILTER_CFG table=filter:11 family=2 entries=1 op=nft_unregister_rule pid=1408 subj=system_u:system_r:kernel_t:s0 comm="iptables" Mar 17 18:44:43.031000 audit[1408]: SYSCALL arch=c000003e syscall=46 success=yes exit=216 a0=3 a1=7ffea347c410 a2=0 a3=7ffea347c3fc items=0 ppid=1350 pid=1408 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:44:43.031000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4400464F5257415244002D6A00444F434B45522D55534552 Mar 17 18:44:43.037000 audit[1409]: NETFILTER_CFG table=filter:12 family=2 entries=1 op=nft_register_rule pid=1409 subj=system_u:system_r:kernel_t:s0 comm="iptables" Mar 17 18:44:43.037000 audit[1409]: SYSCALL arch=c000003e syscall=46 success=yes exit=224 a0=3 a1=7ffd925d7780 a2=0 a3=7ffd925d776c items=0 ppid=1350 pid=1409 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:44:43.037000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6A00444F434B45522D55534552 Mar 17 18:44:43.046655 kernel: Initializing XFRM netlink socket Mar 17 18:44:43.075545 env[1350]: time="2025-03-17T18:44:43.075444571Z" level=info msg="Default bridge (docker0) is assigned with an IP address 172.17.0.0/16. Daemon option --bip can be used to set a preferred IP address" Mar 17 18:44:43.092000 audit[1417]: NETFILTER_CFG table=nat:13 family=2 entries=2 op=nft_register_chain pid=1417 subj=system_u:system_r:kernel_t:s0 comm="iptables" Mar 17 18:44:43.092000 audit[1417]: SYSCALL arch=c000003e syscall=46 success=yes exit=492 a0=3 a1=7ffc60abf410 a2=0 a3=7ffc60abf3fc items=0 ppid=1350 pid=1417 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:44:43.092000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D74006E6174002D4900504F5354524F5554494E47002D73003137322E31372E302E302F31360000002D6F00646F636B657230002D6A004D415351554552414445 Mar 17 18:44:43.106000 audit[1420]: NETFILTER_CFG table=nat:14 family=2 entries=1 op=nft_register_rule pid=1420 subj=system_u:system_r:kernel_t:s0 comm="iptables" Mar 17 18:44:43.106000 audit[1420]: SYSCALL arch=c000003e syscall=46 success=yes exit=288 a0=3 a1=7ffd73145ff0 a2=0 a3=7ffd73145fdc items=0 ppid=1350 pid=1420 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:44:43.106000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D74006E6174002D4900444F434B4552002D6900646F636B657230002D6A0052455455524E Mar 17 18:44:43.108000 audit[1423]: NETFILTER_CFG table=filter:15 family=2 entries=1 op=nft_register_rule pid=1423 subj=system_u:system_r:kernel_t:s0 comm="iptables" Mar 17 18:44:43.108000 audit[1423]: SYSCALL arch=c000003e syscall=46 success=yes exit=376 a0=3 a1=7ffffd49e050 a2=0 a3=7ffffd49e03c items=0 ppid=1350 pid=1423 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:44:43.108000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6900646F636B657230002D6F00646F636B657230002D6A00414343455054 Mar 17 18:44:43.110000 audit[1425]: NETFILTER_CFG table=filter:16 family=2 entries=1 op=nft_register_rule pid=1425 subj=system_u:system_r:kernel_t:s0 comm="iptables" Mar 17 18:44:43.110000 audit[1425]: SYSCALL arch=c000003e syscall=46 success=yes exit=376 a0=3 a1=7ffd74c17510 a2=0 a3=7ffd74c174fc items=0 ppid=1350 pid=1425 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:44:43.110000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6900646F636B6572300000002D6F00646F636B657230002D6A00414343455054 Mar 17 18:44:43.111000 audit[1427]: NETFILTER_CFG table=nat:17 family=2 entries=2 op=nft_register_chain pid=1427 subj=system_u:system_r:kernel_t:s0 comm="iptables" Mar 17 18:44:43.111000 audit[1427]: SYSCALL arch=c000003e syscall=46 success=yes exit=356 a0=3 a1=7ffc11532940 a2=0 a3=7ffc1153292c items=0 ppid=1350 pid=1427 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:44:43.111000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D74006E6174002D4100505245524F5554494E47002D6D006164647274797065002D2D6473742D74797065004C4F43414C002D6A00444F434B4552 Mar 17 18:44:43.113000 audit[1429]: NETFILTER_CFG table=nat:18 family=2 entries=2 op=nft_register_chain pid=1429 subj=system_u:system_r:kernel_t:s0 comm="iptables" Mar 17 18:44:43.113000 audit[1429]: SYSCALL arch=c000003e syscall=46 success=yes exit=444 a0=3 a1=7ffc195a7c00 a2=0 a3=7ffc195a7bec items=0 ppid=1350 pid=1429 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:44:43.113000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D74006E6174002D41004F5554505554002D6D006164647274797065002D2D6473742D74797065004C4F43414C002D6A00444F434B45520000002D2D647374003132372E302E302E302F38 Mar 17 18:44:43.114000 audit[1431]: NETFILTER_CFG table=filter:19 family=2 entries=1 op=nft_register_rule pid=1431 subj=system_u:system_r:kernel_t:s0 comm="iptables" Mar 17 18:44:43.114000 audit[1431]: SYSCALL arch=c000003e syscall=46 success=yes exit=304 a0=3 a1=7ffee964a4d0 a2=0 a3=7ffee964a4bc items=0 ppid=1350 pid=1431 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:44:43.114000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6F00646F636B657230002D6A00444F434B4552 Mar 17 18:44:43.120000 audit[1434]: NETFILTER_CFG table=filter:20 family=2 entries=1 op=nft_register_rule pid=1434 subj=system_u:system_r:kernel_t:s0 comm="iptables" Mar 17 18:44:43.120000 audit[1434]: SYSCALL arch=c000003e syscall=46 success=yes exit=508 a0=3 a1=7ffc337d6620 a2=0 a3=7ffc337d660c items=0 ppid=1350 pid=1434 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:44:43.120000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6F00646F636B657230002D6D00636F6E6E747261636B002D2D637473746174650052454C415445442C45535441424C4953484544002D6A00414343455054 Mar 17 18:44:43.122000 audit[1436]: NETFILTER_CFG table=filter:21 family=2 entries=1 op=nft_register_rule pid=1436 subj=system_u:system_r:kernel_t:s0 comm="iptables" Mar 17 18:44:43.122000 audit[1436]: SYSCALL arch=c000003e syscall=46 success=yes exit=240 a0=3 a1=7ffcaf174430 a2=0 a3=7ffcaf17441c items=0 ppid=1350 pid=1436 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:44:43.122000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6A00444F434B45522D49534F4C4154494F4E2D53544147452D31 Mar 17 18:44:43.124000 audit[1438]: NETFILTER_CFG table=filter:22 family=2 entries=1 op=nft_register_rule pid=1438 subj=system_u:system_r:kernel_t:s0 comm="iptables" Mar 17 18:44:43.124000 audit[1438]: SYSCALL arch=c000003e syscall=46 success=yes exit=428 a0=3 a1=7fff02be07a0 a2=0 a3=7fff02be078c items=0 ppid=1350 pid=1438 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:44:43.124000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D740066696C746572002D4900444F434B45522D49534F4C4154494F4E2D53544147452D31002D6900646F636B6572300000002D6F00646F636B657230002D6A00444F434B45522D49534F4C4154494F4E2D53544147452D32 Mar 17 18:44:43.125000 audit[1440]: NETFILTER_CFG table=filter:23 family=2 entries=1 op=nft_register_rule pid=1440 subj=system_u:system_r:kernel_t:s0 comm="iptables" Mar 17 18:44:43.125000 audit[1440]: SYSCALL arch=c000003e syscall=46 success=yes exit=312 a0=3 a1=7ffd1a9fe700 a2=0 a3=7ffd1a9fe6ec items=0 ppid=1350 pid=1440 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:44:43.125000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D740066696C746572002D4900444F434B45522D49534F4C4154494F4E2D53544147452D32002D6F00646F636B657230002D6A0044524F50 Mar 17 18:44:43.126410 systemd-networkd[1025]: docker0: Link UP Mar 17 18:44:43.134000 audit[1444]: NETFILTER_CFG table=filter:24 family=2 entries=1 op=nft_unregister_rule pid=1444 subj=system_u:system_r:kernel_t:s0 comm="iptables" Mar 17 18:44:43.134000 audit[1444]: SYSCALL arch=c000003e syscall=46 success=yes exit=228 a0=3 a1=7ffc7722e830 a2=0 a3=7ffc7722e81c items=0 ppid=1350 pid=1444 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:44:43.134000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4400464F5257415244002D6A00444F434B45522D55534552 Mar 17 18:44:43.139000 audit[1445]: NETFILTER_CFG table=filter:25 family=2 entries=1 op=nft_register_rule pid=1445 subj=system_u:system_r:kernel_t:s0 comm="iptables" Mar 17 18:44:43.139000 audit[1445]: SYSCALL arch=c000003e syscall=46 success=yes exit=224 a0=3 a1=7ffd4ec6e610 a2=0 a3=7ffd4ec6e5fc items=0 ppid=1350 pid=1445 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:44:43.139000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6A00444F434B45522D55534552 Mar 17 18:44:43.140662 env[1350]: time="2025-03-17T18:44:43.140615106Z" level=info msg="Loading containers: done." Mar 17 18:44:43.150240 systemd[1]: var-lib-docker-overlay2-opaque\x2dbug\x2dcheck504916218-merged.mount: Deactivated successfully. Mar 17 18:44:43.154893 env[1350]: time="2025-03-17T18:44:43.154859254Z" level=warning msg="Not using native diff for overlay2, this may cause degraded performance for building images: kernel has CONFIG_OVERLAY_FS_REDIRECT_DIR enabled" storage-driver=overlay2 Mar 17 18:44:43.155032 env[1350]: time="2025-03-17T18:44:43.154999226Z" level=info msg="Docker daemon" commit=112bdf3343 graphdriver(s)=overlay2 version=20.10.23 Mar 17 18:44:43.155102 env[1350]: time="2025-03-17T18:44:43.155082462Z" level=info msg="Daemon has completed initialization" Mar 17 18:44:43.171237 systemd[1]: Started docker.service. Mar 17 18:44:43.170000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=docker comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:44:43.174704 env[1350]: time="2025-03-17T18:44:43.174658027Z" level=info msg="API listen on /run/docker.sock" Mar 17 18:44:43.907879 env[1203]: time="2025-03-17T18:44:43.907819574Z" level=info msg="PullImage \"registry.k8s.io/kube-apiserver:v1.30.11\"" Mar 17 18:44:44.382897 systemd[1]: kubelet.service: Scheduled restart job, restart counter is at 1. Mar 17 18:44:44.382000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:44:44.382000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:44:44.383079 systemd[1]: Stopped kubelet.service. Mar 17 18:44:44.384319 systemd[1]: Starting kubelet.service... Mar 17 18:44:44.464529 systemd[1]: Started kubelet.service. Mar 17 18:44:44.464000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:44:44.589840 kubelet[1493]: E0317 18:44:44.589772 1493 run.go:74] "command failed" err="failed to load kubelet config file, path: /var/lib/kubelet/config.yaml, error: failed to load Kubelet config file /var/lib/kubelet/config.yaml, error failed to read kubelet config file \"/var/lib/kubelet/config.yaml\", error: open /var/lib/kubelet/config.yaml: no such file or directory" Mar 17 18:44:44.593925 systemd[1]: kubelet.service: Main process exited, code=exited, status=1/FAILURE Mar 17 18:44:44.594094 systemd[1]: kubelet.service: Failed with result 'exit-code'. Mar 17 18:44:44.593000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' Mar 17 18:44:44.838854 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount1626255990.mount: Deactivated successfully. Mar 17 18:44:46.392696 env[1203]: time="2025-03-17T18:44:46.392613562Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-apiserver:v1.30.11,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Mar 17 18:44:46.394655 env[1203]: time="2025-03-17T18:44:46.394595378Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:4db5a05c271eac8f5da2f95895ea1ccb9a38f48db3135ba3bdfe35941a396ea8,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Mar 17 18:44:46.396400 env[1203]: time="2025-03-17T18:44:46.396347704Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/kube-apiserver:v1.30.11,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Mar 17 18:44:46.397873 env[1203]: time="2025-03-17T18:44:46.397838479Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-apiserver@sha256:77c54346965036acc7ac95c3200597ede36db9246179248dde21c1a3ecc1caf0,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Mar 17 18:44:46.398502 env[1203]: time="2025-03-17T18:44:46.398458722Z" level=info msg="PullImage \"registry.k8s.io/kube-apiserver:v1.30.11\" returns image reference \"sha256:4db5a05c271eac8f5da2f95895ea1ccb9a38f48db3135ba3bdfe35941a396ea8\"" Mar 17 18:44:46.406622 env[1203]: time="2025-03-17T18:44:46.406593445Z" level=info msg="PullImage \"registry.k8s.io/kube-controller-manager:v1.30.11\"" Mar 17 18:44:49.035319 env[1203]: time="2025-03-17T18:44:49.035213687Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-controller-manager:v1.30.11,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Mar 17 18:44:49.038553 env[1203]: time="2025-03-17T18:44:49.038473399Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:de1025c2d496829d3250130380737609ffcdd10a4dce6f2dcd03f23a85a15e6a,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Mar 17 18:44:49.040686 env[1203]: time="2025-03-17T18:44:49.040594566Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/kube-controller-manager:v1.30.11,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Mar 17 18:44:49.045491 env[1203]: time="2025-03-17T18:44:49.045421236Z" level=info msg="PullImage \"registry.k8s.io/kube-controller-manager:v1.30.11\" returns image reference \"sha256:de1025c2d496829d3250130380737609ffcdd10a4dce6f2dcd03f23a85a15e6a\"" Mar 17 18:44:49.046674 env[1203]: time="2025-03-17T18:44:49.046596530Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-controller-manager@sha256:d8874f3fb45591ecdac67a3035c730808f18b3ab13147495c7d77eb1960d4f6f,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Mar 17 18:44:49.057589 env[1203]: time="2025-03-17T18:44:49.057511155Z" level=info msg="PullImage \"registry.k8s.io/kube-scheduler:v1.30.11\"" Mar 17 18:44:50.414704 env[1203]: time="2025-03-17T18:44:50.414623279Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-scheduler:v1.30.11,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Mar 17 18:44:50.417069 env[1203]: time="2025-03-17T18:44:50.417021967Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:11492f0faf138e933cadd6f533f03e401da9a35e53711e833f18afa6b185b2b7,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Mar 17 18:44:50.420924 env[1203]: time="2025-03-17T18:44:50.420860544Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/kube-scheduler:v1.30.11,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Mar 17 18:44:50.423787 env[1203]: time="2025-03-17T18:44:50.423724875Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-scheduler@sha256:c699f8c97ae7ec819c8bd878d3db104ba72fc440d810d9030e09286b696017b5,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Mar 17 18:44:50.424725 env[1203]: time="2025-03-17T18:44:50.424687931Z" level=info msg="PullImage \"registry.k8s.io/kube-scheduler:v1.30.11\" returns image reference \"sha256:11492f0faf138e933cadd6f533f03e401da9a35e53711e833f18afa6b185b2b7\"" Mar 17 18:44:50.434374 env[1203]: time="2025-03-17T18:44:50.434318969Z" level=info msg="PullImage \"registry.k8s.io/kube-proxy:v1.30.11\"" Mar 17 18:44:51.679076 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount2077628601.mount: Deactivated successfully. Mar 17 18:44:52.777314 env[1203]: time="2025-03-17T18:44:52.777248050Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-proxy:v1.30.11,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Mar 17 18:44:52.779258 env[1203]: time="2025-03-17T18:44:52.779195151Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:01045f200a8856c3f5ccfa7be03d72274f1f16fc7a047659e709d603d5c019dc,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Mar 17 18:44:52.780860 env[1203]: time="2025-03-17T18:44:52.780827892Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/kube-proxy:v1.30.11,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Mar 17 18:44:52.782561 env[1203]: time="2025-03-17T18:44:52.782501340Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-proxy@sha256:ea4da798040a18ed3f302e8d5f67307c7275a2a53bcf3d51bcec223acda84a55,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Mar 17 18:44:52.782906 env[1203]: time="2025-03-17T18:44:52.782871775Z" level=info msg="PullImage \"registry.k8s.io/kube-proxy:v1.30.11\" returns image reference \"sha256:01045f200a8856c3f5ccfa7be03d72274f1f16fc7a047659e709d603d5c019dc\"" Mar 17 18:44:52.791677 env[1203]: time="2025-03-17T18:44:52.791636308Z" level=info msg="PullImage \"registry.k8s.io/coredns/coredns:v1.11.1\"" Mar 17 18:44:53.300824 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount4032221484.mount: Deactivated successfully. Mar 17 18:44:54.217022 env[1203]: time="2025-03-17T18:44:54.216952155Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/coredns/coredns:v1.11.1,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Mar 17 18:44:54.218763 env[1203]: time="2025-03-17T18:44:54.218719048Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:cbb01a7bd410dc08ba382018ab909a674fb0e48687f0c00797ed5bc34fcc6bb4,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Mar 17 18:44:54.220518 env[1203]: time="2025-03-17T18:44:54.220475632Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/coredns/coredns:v1.11.1,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Mar 17 18:44:54.222257 env[1203]: time="2025-03-17T18:44:54.222216315Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/coredns/coredns@sha256:1eeb4c7316bacb1d4c8ead65571cd92dd21e27359f0d4917f1a5822a73b75db1,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Mar 17 18:44:54.222842 env[1203]: time="2025-03-17T18:44:54.222810259Z" level=info msg="PullImage \"registry.k8s.io/coredns/coredns:v1.11.1\" returns image reference \"sha256:cbb01a7bd410dc08ba382018ab909a674fb0e48687f0c00797ed5bc34fcc6bb4\"" Mar 17 18:44:54.231230 env[1203]: time="2025-03-17T18:44:54.231208746Z" level=info msg="PullImage \"registry.k8s.io/pause:3.9\"" Mar 17 18:44:54.717402 systemd[1]: kubelet.service: Scheduled restart job, restart counter is at 2. Mar 17 18:44:54.716000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:44:54.717571 systemd[1]: Stopped kubelet.service. Mar 17 18:44:54.718507 kernel: kauditd_printk_skb: 88 callbacks suppressed Mar 17 18:44:54.718590 kernel: audit: type=1130 audit(1742237094.716:246): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:44:54.718712 systemd[1]: Starting kubelet.service... Mar 17 18:44:54.716000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:44:54.725475 kernel: audit: type=1131 audit(1742237094.716:247): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:44:54.793738 systemd[1]: Started kubelet.service. Mar 17 18:44:54.793000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:44:54.798654 kernel: audit: type=1130 audit(1742237094.793:248): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:44:54.984060 kubelet[1536]: E0317 18:44:54.983927 1536 run.go:74] "command failed" err="failed to load kubelet config file, path: /var/lib/kubelet/config.yaml, error: failed to load Kubelet config file /var/lib/kubelet/config.yaml, error failed to read kubelet config file \"/var/lib/kubelet/config.yaml\", error: open /var/lib/kubelet/config.yaml: no such file or directory" Mar 17 18:44:54.985952 systemd[1]: kubelet.service: Main process exited, code=exited, status=1/FAILURE Mar 17 18:44:54.986098 systemd[1]: kubelet.service: Failed with result 'exit-code'. Mar 17 18:44:54.985000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' Mar 17 18:44:54.990657 kernel: audit: type=1131 audit(1742237094.985:249): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' Mar 17 18:44:55.122153 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount1810233666.mount: Deactivated successfully. Mar 17 18:44:55.128733 env[1203]: time="2025-03-17T18:44:55.128676979Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/pause:3.9,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Mar 17 18:44:55.130644 env[1203]: time="2025-03-17T18:44:55.130576250Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:e6f1816883972d4be47bd48879a08919b96afcd344132622e4d444987919323c,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Mar 17 18:44:55.132681 env[1203]: time="2025-03-17T18:44:55.132613039Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause:3.9,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Mar 17 18:44:55.134245 env[1203]: time="2025-03-17T18:44:55.134212548Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/pause@sha256:7031c1b283388d2c2e09b57badb803c05ebed362dc88d84b480cc47f72a21097,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Mar 17 18:44:55.134824 env[1203]: time="2025-03-17T18:44:55.134784851Z" level=info msg="PullImage \"registry.k8s.io/pause:3.9\" returns image reference \"sha256:e6f1816883972d4be47bd48879a08919b96afcd344132622e4d444987919323c\"" Mar 17 18:44:55.145805 env[1203]: time="2025-03-17T18:44:55.145765971Z" level=info msg="PullImage \"registry.k8s.io/etcd:3.5.12-0\"" Mar 17 18:44:55.700016 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount1959499768.mount: Deactivated successfully. Mar 17 18:44:58.664979 env[1203]: time="2025-03-17T18:44:58.664898083Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/etcd:3.5.12-0,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Mar 17 18:44:58.667099 env[1203]: time="2025-03-17T18:44:58.667049527Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:3861cfcd7c04ccac1f062788eca39487248527ef0c0cfd477a83d7691a75a899,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Mar 17 18:44:58.669139 env[1203]: time="2025-03-17T18:44:58.669074453Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/etcd:3.5.12-0,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Mar 17 18:44:58.673767 env[1203]: time="2025-03-17T18:44:58.673697912Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/etcd@sha256:44a8e24dcbba3470ee1fee21d5e88d128c936e9b55d4bc51fbef8086f8ed123b,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Mar 17 18:44:58.674471 env[1203]: time="2025-03-17T18:44:58.674432590Z" level=info msg="PullImage \"registry.k8s.io/etcd:3.5.12-0\" returns image reference \"sha256:3861cfcd7c04ccac1f062788eca39487248527ef0c0cfd477a83d7691a75a899\"" Mar 17 18:45:01.187730 systemd[1]: Stopped kubelet.service. Mar 17 18:45:01.187000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:45:01.189434 systemd[1]: Starting kubelet.service... Mar 17 18:45:01.187000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:45:01.194617 kernel: audit: type=1130 audit(1742237101.187:250): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:45:01.194697 kernel: audit: type=1131 audit(1742237101.187:251): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:45:01.201739 systemd[1]: Reloading. Mar 17 18:45:01.273049 /usr/lib/systemd/system-generators/torcx-generator[1650]: time="2025-03-17T18:45:01Z" level=debug msg="common configuration parsed" base_dir=/var/lib/torcx/ conf_dir=/etc/torcx/ run_dir=/run/torcx/ store_paths="[/usr/share/torcx/store /usr/share/oem/torcx/store/3510.3.7 /usr/share/oem/torcx/store /var/lib/torcx/store/3510.3.7 /var/lib/torcx/store]" Mar 17 18:45:01.273394 /usr/lib/systemd/system-generators/torcx-generator[1650]: time="2025-03-17T18:45:01Z" level=info msg="torcx already run" Mar 17 18:45:01.516141 systemd[1]: /usr/lib/systemd/system/locksmithd.service:8: Unit uses CPUShares=; please use CPUWeight= instead. Support for CPUShares= will be removed soon. Mar 17 18:45:01.516159 systemd[1]: /usr/lib/systemd/system/locksmithd.service:9: Unit uses MemoryLimit=; please use MemoryMax= instead. Support for MemoryLimit= will be removed soon. Mar 17 18:45:01.532381 systemd[1]: /run/systemd/system/docker.socket:8: ListenStream= references a path below legacy directory /var/run/, updating /var/run/docker.sock → /run/docker.sock; please update the unit file accordingly. Mar 17 18:45:01.588000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:01.588000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:01.595729 kernel: audit: type=1400 audit(1742237101.588:252): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:01.595773 kernel: audit: type=1400 audit(1742237101.588:253): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:01.595801 kernel: audit: type=1400 audit(1742237101.588:254): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:01.588000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:01.588000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:01.603001 kernel: audit: type=1400 audit(1742237101.588:255): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:01.603041 kernel: audit: type=1400 audit(1742237101.588:256): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:01.588000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:01.588000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:01.609456 kernel: audit: type=1400 audit(1742237101.588:257): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:01.609492 kernel: audit: type=1400 audit(1742237101.588:258): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:01.588000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:01.588000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:01.615818 kernel: audit: type=1400 audit(1742237101.588:259): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:01.588000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:01.595000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:01.595000 audit: BPF prog-id=46 op=LOAD Mar 17 18:45:01.595000 audit: BPF prog-id=30 op=UNLOAD Mar 17 18:45:01.595000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:01.595000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:01.595000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:01.595000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:01.595000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:01.595000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:01.595000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:01.595000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:01.598000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:01.598000 audit: BPF prog-id=47 op=LOAD Mar 17 18:45:01.598000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:01.598000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:01.598000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:01.598000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:01.598000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:01.598000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:01.598000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:01.598000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:01.598000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:01.598000 audit: BPF prog-id=48 op=LOAD Mar 17 18:45:01.598000 audit: BPF prog-id=31 op=UNLOAD Mar 17 18:45:01.598000 audit: BPF prog-id=32 op=UNLOAD Mar 17 18:45:01.599000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:01.599000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:01.599000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:01.599000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:01.599000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:01.599000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:01.599000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:01.599000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:01.599000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:01.605000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:01.605000 audit: BPF prog-id=49 op=LOAD Mar 17 18:45:01.605000 audit: BPF prog-id=33 op=UNLOAD Mar 17 18:45:01.606000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:01.606000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:01.606000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:01.606000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:01.606000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:01.606000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:01.606000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:01.606000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:01.606000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:01.612000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:01.612000 audit: BPF prog-id=50 op=LOAD Mar 17 18:45:01.612000 audit: BPF prog-id=39 op=UNLOAD Mar 17 18:45:01.613000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:01.613000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:01.613000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:01.613000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:01.613000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:01.613000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:01.613000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:01.613000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:01.613000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:01.615000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:01.615000 audit: BPF prog-id=51 op=LOAD Mar 17 18:45:01.615000 audit: BPF prog-id=44 op=UNLOAD Mar 17 18:45:01.615000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:01.615000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:01.615000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:01.615000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:01.615000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:01.615000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:01.615000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:01.615000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:01.615000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:01.615000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:01.615000 audit: BPF prog-id=52 op=LOAD Mar 17 18:45:01.615000 audit: BPF prog-id=34 op=UNLOAD Mar 17 18:45:01.615000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:01.615000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:01.615000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:01.615000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:01.615000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:01.615000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:01.615000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:01.615000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:01.615000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:01.615000 audit: BPF prog-id=53 op=LOAD Mar 17 18:45:01.616000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:01.616000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:01.616000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:01.616000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:01.616000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:01.616000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:01.616000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:01.616000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:01.616000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:01.616000 audit: BPF prog-id=54 op=LOAD Mar 17 18:45:01.616000 audit: BPF prog-id=35 op=UNLOAD Mar 17 18:45:01.616000 audit: BPF prog-id=36 op=UNLOAD Mar 17 18:45:01.616000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:01.616000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:01.616000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:01.616000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:01.616000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:01.616000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:01.616000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:01.616000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:01.616000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:01.616000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:01.616000 audit: BPF prog-id=55 op=LOAD Mar 17 18:45:01.616000 audit: BPF prog-id=40 op=UNLOAD Mar 17 18:45:01.616000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:01.616000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:01.616000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:01.616000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:01.616000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:01.616000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:01.616000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:01.616000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:01.617000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:01.617000 audit: BPF prog-id=56 op=LOAD Mar 17 18:45:01.617000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:01.617000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:01.617000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:01.617000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:01.617000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:01.617000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:01.617000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:01.617000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:01.617000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:01.617000 audit: BPF prog-id=57 op=LOAD Mar 17 18:45:01.617000 audit: BPF prog-id=37 op=UNLOAD Mar 17 18:45:01.617000 audit: BPF prog-id=38 op=UNLOAD Mar 17 18:45:01.618000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:01.618000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:01.618000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:01.618000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:01.618000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:01.618000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:01.618000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:01.618000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:01.618000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:01.619000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:01.619000 audit: BPF prog-id=58 op=LOAD Mar 17 18:45:01.619000 audit: BPF prog-id=41 op=UNLOAD Mar 17 18:45:01.619000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:01.619000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:01.619000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:01.619000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:01.619000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:01.619000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:01.619000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:01.619000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:01.619000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:01.619000 audit: BPF prog-id=59 op=LOAD Mar 17 18:45:01.619000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:01.619000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:01.619000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:01.619000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:01.619000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:01.619000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:01.619000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:01.619000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:01.619000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:01.619000 audit: BPF prog-id=60 op=LOAD Mar 17 18:45:01.619000 audit: BPF prog-id=42 op=UNLOAD Mar 17 18:45:01.619000 audit: BPF prog-id=43 op=UNLOAD Mar 17 18:45:01.632373 systemd[1]: Started kubelet.service. Mar 17 18:45:01.631000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:45:01.633869 systemd[1]: Stopping kubelet.service... Mar 17 18:45:01.634165 systemd[1]: kubelet.service: Deactivated successfully. Mar 17 18:45:01.634357 systemd[1]: Stopped kubelet.service. Mar 17 18:45:01.633000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:45:01.636043 systemd[1]: Starting kubelet.service... Mar 17 18:45:01.710501 systemd[1]: Started kubelet.service. Mar 17 18:45:01.710000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:45:01.747490 kubelet[1698]: Flag --container-runtime-endpoint has been deprecated, This parameter should be set via the config file specified by the Kubelet's --config flag. See https://kubernetes.io/docs/tasks/administer-cluster/kubelet-config-file/ for more information. Mar 17 18:45:01.747490 kubelet[1698]: Flag --pod-infra-container-image has been deprecated, will be removed in a future release. Image garbage collector will get sandbox image information from CRI. Mar 17 18:45:01.747490 kubelet[1698]: Flag --volume-plugin-dir has been deprecated, This parameter should be set via the config file specified by the Kubelet's --config flag. See https://kubernetes.io/docs/tasks/administer-cluster/kubelet-config-file/ for more information. Mar 17 18:45:01.749306 kubelet[1698]: I0317 18:45:01.749260 1698 server.go:205] "--pod-infra-container-image will not be pruned by the image garbage collector in kubelet and should also be set in the remote runtime" Mar 17 18:45:02.111958 kubelet[1698]: I0317 18:45:02.111926 1698 server.go:484] "Kubelet version" kubeletVersion="v1.30.1" Mar 17 18:45:02.111958 kubelet[1698]: I0317 18:45:02.111952 1698 server.go:486] "Golang settings" GOGC="" GOMAXPROCS="" GOTRACEBACK="" Mar 17 18:45:02.112140 kubelet[1698]: I0317 18:45:02.112131 1698 server.go:927] "Client rotation is on, will bootstrap in background" Mar 17 18:45:02.123675 kubelet[1698]: I0317 18:45:02.123662 1698 dynamic_cafile_content.go:157] "Starting controller" name="client-ca-bundle::/etc/kubernetes/pki/ca.crt" Mar 17 18:45:02.123824 kubelet[1698]: E0317 18:45:02.123807 1698 certificate_manager.go:562] kubernetes.io/kube-apiserver-client-kubelet: Failed while requesting a signed certificate from the control plane: cannot create certificate signing request: Post "https://10.0.0.110:6443/apis/certificates.k8s.io/v1/certificatesigningrequests": dial tcp 10.0.0.110:6443: connect: connection refused Mar 17 18:45:02.134395 kubelet[1698]: I0317 18:45:02.134373 1698 server.go:742] "--cgroups-per-qos enabled, but --cgroup-root was not specified. defaulting to /" Mar 17 18:45:02.135496 kubelet[1698]: I0317 18:45:02.135467 1698 container_manager_linux.go:265] "Container manager verified user specified cgroup-root exists" cgroupRoot=[] Mar 17 18:45:02.135644 kubelet[1698]: I0317 18:45:02.135493 1698 container_manager_linux.go:270] "Creating Container Manager object based on Node Config" nodeConfig={"NodeName":"localhost","RuntimeCgroupsName":"","SystemCgroupsName":"","KubeletCgroupsName":"","KubeletOOMScoreAdj":-999,"ContainerRuntime":"","CgroupsPerQOS":true,"CgroupRoot":"/","CgroupDriver":"systemd","KubeletRootDir":"/var/lib/kubelet","ProtectKernelDefaults":false,"KubeReservedCgroupName":"","SystemReservedCgroupName":"","ReservedSystemCPUs":{},"EnforceNodeAllocatable":{"pods":{}},"KubeReserved":null,"SystemReserved":null,"HardEvictionThresholds":[{"Signal":"imagefs.inodesFree","Operator":"LessThan","Value":{"Quantity":null,"Percentage":0.05},"GracePeriod":0,"MinReclaim":null},{"Signal":"memory.available","Operator":"LessThan","Value":{"Quantity":"100Mi","Percentage":0},"GracePeriod":0,"MinReclaim":null},{"Signal":"nodefs.available","Operator":"LessThan","Value":{"Quantity":null,"Percentage":0.1},"GracePeriod":0,"MinReclaim":null},{"Signal":"nodefs.inodesFree","Operator":"LessThan","Value":{"Quantity":null,"Percentage":0.05},"GracePeriod":0,"MinReclaim":null},{"Signal":"imagefs.available","Operator":"LessThan","Value":{"Quantity":null,"Percentage":0.15},"GracePeriod":0,"MinReclaim":null}],"QOSReserved":{},"CPUManagerPolicy":"none","CPUManagerPolicyOptions":null,"TopologyManagerScope":"container","CPUManagerReconcilePeriod":10000000000,"ExperimentalMemoryManagerPolicy":"None","ExperimentalMemoryManagerReservedMemory":null,"PodPidsLimit":-1,"EnforceCPULimits":true,"CPUCFSQuotaPeriod":100000000,"TopologyManagerPolicy":"none","TopologyManagerPolicyOptions":null} Mar 17 18:45:02.135749 kubelet[1698]: I0317 18:45:02.135654 1698 topology_manager.go:138] "Creating topology manager with none policy" Mar 17 18:45:02.135749 kubelet[1698]: I0317 18:45:02.135663 1698 container_manager_linux.go:301] "Creating device plugin manager" Mar 17 18:45:02.135800 kubelet[1698]: I0317 18:45:02.135752 1698 state_mem.go:36] "Initialized new in-memory state store" Mar 17 18:45:02.136289 kubelet[1698]: I0317 18:45:02.136273 1698 kubelet.go:400] "Attempting to sync node with API server" Mar 17 18:45:02.136289 kubelet[1698]: I0317 18:45:02.136286 1698 kubelet.go:301] "Adding static pod path" path="/etc/kubernetes/manifests" Mar 17 18:45:02.136343 kubelet[1698]: I0317 18:45:02.136301 1698 kubelet.go:312] "Adding apiserver pod source" Mar 17 18:45:02.136343 kubelet[1698]: I0317 18:45:02.136313 1698 apiserver.go:42] "Waiting for node sync before watching apiserver pods" Mar 17 18:45:02.136902 kubelet[1698]: W0317 18:45:02.136850 1698 reflector.go:547] k8s.io/client-go/informers/factory.go:160: failed to list *v1.Service: Get "https://10.0.0.110:6443/api/v1/services?limit=500&resourceVersion=0": dial tcp 10.0.0.110:6443: connect: connection refused Mar 17 18:45:02.136948 kubelet[1698]: E0317 18:45:02.136908 1698 reflector.go:150] k8s.io/client-go/informers/factory.go:160: Failed to watch *v1.Service: failed to list *v1.Service: Get "https://10.0.0.110:6443/api/v1/services?limit=500&resourceVersion=0": dial tcp 10.0.0.110:6443: connect: connection refused Mar 17 18:45:02.137198 kubelet[1698]: W0317 18:45:02.137167 1698 reflector.go:547] k8s.io/client-go/informers/factory.go:160: failed to list *v1.Node: Get "https://10.0.0.110:6443/api/v1/nodes?fieldSelector=metadata.name%3Dlocalhost&limit=500&resourceVersion=0": dial tcp 10.0.0.110:6443: connect: connection refused Mar 17 18:45:02.137198 kubelet[1698]: E0317 18:45:02.137200 1698 reflector.go:150] k8s.io/client-go/informers/factory.go:160: Failed to watch *v1.Node: failed to list *v1.Node: Get "https://10.0.0.110:6443/api/v1/nodes?fieldSelector=metadata.name%3Dlocalhost&limit=500&resourceVersion=0": dial tcp 10.0.0.110:6443: connect: connection refused Mar 17 18:45:02.143185 kubelet[1698]: I0317 18:45:02.143170 1698 kuberuntime_manager.go:261] "Container runtime initialized" containerRuntime="containerd" version="1.6.16" apiVersion="v1" Mar 17 18:45:02.146003 kubelet[1698]: I0317 18:45:02.145990 1698 kubelet.go:815] "Not starting ClusterTrustBundle informer because we are in static kubelet mode" Mar 17 18:45:02.146063 kubelet[1698]: W0317 18:45:02.146023 1698 probe.go:272] Flexvolume plugin directory at /opt/libexec/kubernetes/kubelet-plugins/volume/exec/ does not exist. Recreating. Mar 17 18:45:02.146442 kubelet[1698]: I0317 18:45:02.146426 1698 server.go:1264] "Started kubelet" Mar 17 18:45:02.146665 kubelet[1698]: I0317 18:45:02.146649 1698 server.go:163] "Starting to listen" address="0.0.0.0" port=10250 Mar 17 18:45:02.147398 kubelet[1698]: I0317 18:45:02.147381 1698 server.go:455] "Adding debug handlers to kubelet server" Mar 17 18:45:02.148201 kubelet[1698]: I0317 18:45:02.147955 1698 ratelimit.go:55] "Setting rate limiting for endpoint" service="podresources" qps=100 burstTokens=10 Mar 17 18:45:02.148201 kubelet[1698]: I0317 18:45:02.148179 1698 server.go:227] "Starting to serve the podresources API" endpoint="unix:/var/lib/kubelet/pod-resources/kubelet.sock" Mar 17 18:45:02.148000 audit[1698]: AVC avc: denied { mac_admin } for pid=1698 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:02.148000 audit: SELINUX_ERR op=setxattr invalid_context="system_u:object_r:container_file_t:s0" Mar 17 18:45:02.148000 audit[1698]: SYSCALL arch=c000003e syscall=188 success=no exit=-22 a0=c000c5a1b0 a1=c00041f0e0 a2=c000c5a180 a3=25 items=0 ppid=1 pid=1698 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/usr/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:45:02.148000 audit: PROCTITLE proctitle=2F7573722F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 Mar 17 18:45:02.148000 audit[1698]: AVC avc: denied { mac_admin } for pid=1698 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:02.148000 audit: SELINUX_ERR op=setxattr invalid_context="system_u:object_r:container_file_t:s0" Mar 17 18:45:02.148000 audit[1698]: SYSCALL arch=c000003e syscall=188 success=no exit=-22 a0=c0009d0a40 a1=c00041f0f8 a2=c000c5a240 a3=25 items=0 ppid=1 pid=1698 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/usr/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:45:02.148000 audit: PROCTITLE proctitle=2F7573722F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 Mar 17 18:45:02.149384 kubelet[1698]: I0317 18:45:02.149099 1698 kubelet.go:1419] "Unprivileged containerized plugins might not work, could not set selinux context on plugin registration dir" path="/var/lib/kubelet/plugins_registry" err="setxattr /var/lib/kubelet/plugins_registry: invalid argument" Mar 17 18:45:02.149384 kubelet[1698]: I0317 18:45:02.149125 1698 kubelet.go:1423] "Unprivileged containerized plugins might not work, could not set selinux context on plugins dir" path="/var/lib/kubelet/plugins" err="setxattr /var/lib/kubelet/plugins: invalid argument" Mar 17 18:45:02.149384 kubelet[1698]: I0317 18:45:02.149164 1698 fs_resource_analyzer.go:67] "Starting FS ResourceAnalyzer" Mar 17 18:45:02.151621 kubelet[1698]: E0317 18:45:02.151439 1698 kubelet_node_status.go:462] "Error getting the current node from lister" err="node \"localhost\" not found" Mar 17 18:45:02.151621 kubelet[1698]: I0317 18:45:02.151472 1698 volume_manager.go:291] "Starting Kubelet Volume Manager" Mar 17 18:45:02.151621 kubelet[1698]: I0317 18:45:02.151540 1698 desired_state_of_world_populator.go:149] "Desired state populator starts to run" Mar 17 18:45:02.151621 kubelet[1698]: I0317 18:45:02.151574 1698 reconciler.go:26] "Reconciler: start to sync state" Mar 17 18:45:02.151000 audit[1710]: NETFILTER_CFG table=mangle:26 family=2 entries=2 op=nft_register_chain pid=1710 subj=system_u:system_r:kernel_t:s0 comm="iptables" Mar 17 18:45:02.151000 audit[1710]: SYSCALL arch=c000003e syscall=46 success=yes exit=136 a0=3 a1=7fff022e3a10 a2=0 a3=7fff022e39fc items=0 ppid=1698 pid=1710 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:45:02.151000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D49505441424C45532D48494E54002D74006D616E676C65 Mar 17 18:45:02.151985 kubelet[1698]: W0317 18:45:02.151910 1698 reflector.go:547] k8s.io/client-go/informers/factory.go:160: failed to list *v1.CSIDriver: Get "https://10.0.0.110:6443/apis/storage.k8s.io/v1/csidrivers?limit=500&resourceVersion=0": dial tcp 10.0.0.110:6443: connect: connection refused Mar 17 18:45:02.151985 kubelet[1698]: E0317 18:45:02.151951 1698 reflector.go:150] k8s.io/client-go/informers/factory.go:160: Failed to watch *v1.CSIDriver: failed to list *v1.CSIDriver: Get "https://10.0.0.110:6443/apis/storage.k8s.io/v1/csidrivers?limit=500&resourceVersion=0": dial tcp 10.0.0.110:6443: connect: connection refused Mar 17 18:45:02.152304 kubelet[1698]: E0317 18:45:02.152271 1698 controller.go:145] "Failed to ensure lease exists, will retry" err="Get \"https://10.0.0.110:6443/apis/coordination.k8s.io/v1/namespaces/kube-node-lease/leases/localhost?timeout=10s\": dial tcp 10.0.0.110:6443: connect: connection refused" interval="200ms" Mar 17 18:45:02.152517 kubelet[1698]: E0317 18:45:02.152503 1698 kubelet.go:1467] "Image garbage collection failed once. Stats initialization may not have completed yet" err="invalid capacity 0 on image filesystem" Mar 17 18:45:02.152718 kubelet[1698]: I0317 18:45:02.152701 1698 factory.go:219] Registration of the crio container factory failed: Get "http://%2Fvar%2Frun%2Fcrio%2Fcrio.sock/info": dial unix /var/run/crio/crio.sock: connect: no such file or directory Mar 17 18:45:02.152000 audit[1711]: NETFILTER_CFG table=filter:27 family=2 entries=1 op=nft_register_chain pid=1711 subj=system_u:system_r:kernel_t:s0 comm="iptables" Mar 17 18:45:02.152000 audit[1711]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7ffe56025cd0 a2=0 a3=7ffe56025cbc items=0 ppid=1698 pid=1711 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:45:02.152000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D4649524557414C4C002D740066696C746572 Mar 17 18:45:02.153695 kubelet[1698]: I0317 18:45:02.153656 1698 factory.go:221] Registration of the containerd container factory successfully Mar 17 18:45:02.153695 kubelet[1698]: I0317 18:45:02.153673 1698 factory.go:221] Registration of the systemd container factory successfully Mar 17 18:45:02.154000 audit[1713]: NETFILTER_CFG table=filter:28 family=2 entries=2 op=nft_register_chain pid=1713 subj=system_u:system_r:kernel_t:s0 comm="iptables" Mar 17 18:45:02.154000 audit[1713]: SYSCALL arch=c000003e syscall=46 success=yes exit=312 a0=3 a1=7ffc1298d9e0 a2=0 a3=7ffc1298d9cc items=0 ppid=1698 pid=1713 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:45:02.154000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D49004F5554505554002D740066696C746572002D6A004B5542452D4649524557414C4C Mar 17 18:45:02.155789 kubelet[1698]: E0317 18:45:02.155220 1698 event.go:368] "Unable to write event (may retry after sleeping)" err="Post \"https://10.0.0.110:6443/api/v1/namespaces/default/events\": dial tcp 10.0.0.110:6443: connect: connection refused" event="&Event{ObjectMeta:{localhost.182dab69e3f15aa1 default 0 0001-01-01 00:00:00 +0000 UTC map[] map[] [] [] []},InvolvedObject:ObjectReference{Kind:Node,Namespace:,Name:localhost,UID:localhost,APIVersion:,ResourceVersion:,FieldPath:,},Reason:Starting,Message:Starting kubelet.,Source:EventSource{Component:kubelet,Host:localhost,},FirstTimestamp:2025-03-17 18:45:02.146411169 +0000 UTC m=+0.432996470,LastTimestamp:2025-03-17 18:45:02.146411169 +0000 UTC m=+0.432996470,Count:1,Type:Normal,EventTime:0001-01-01 00:00:00 +0000 UTC,Series:nil,Action:,Related:nil,ReportingController:kubelet,ReportingInstance:localhost,}" Mar 17 18:45:02.159000 audit[1715]: NETFILTER_CFG table=filter:29 family=2 entries=2 op=nft_register_chain pid=1715 subj=system_u:system_r:kernel_t:s0 comm="iptables" Mar 17 18:45:02.159000 audit[1715]: SYSCALL arch=c000003e syscall=46 success=yes exit=312 a0=3 a1=7ffd89429e50 a2=0 a3=7ffd89429e3c items=0 ppid=1698 pid=1715 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:45:02.159000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6A004B5542452D4649524557414C4C Mar 17 18:45:02.164505 kubelet[1698]: I0317 18:45:02.164487 1698 cpu_manager.go:214] "Starting CPU manager" policy="none" Mar 17 18:45:02.164505 kubelet[1698]: I0317 18:45:02.164500 1698 cpu_manager.go:215] "Reconciling" reconcilePeriod="10s" Mar 17 18:45:02.164505 kubelet[1698]: I0317 18:45:02.164512 1698 state_mem.go:36] "Initialized new in-memory state store" Mar 17 18:45:02.165000 audit[1722]: NETFILTER_CFG table=filter:30 family=2 entries=1 op=nft_register_rule pid=1722 subj=system_u:system_r:kernel_t:s0 comm="iptables" Mar 17 18:45:02.165000 audit[1722]: SYSCALL arch=c000003e syscall=46 success=yes exit=924 a0=3 a1=7ffc6c99b530 a2=0 a3=7ffc6c99b51c items=0 ppid=1698 pid=1722 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:45:02.165000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D41004B5542452D4649524557414C4C002D740066696C746572002D6D00636F6D6D656E74002D2D636F6D6D656E7400626C6F636B20696E636F6D696E67206C6F63616C6E657420636F6E6E656374696F6E73002D2D647374003132372E302E302E302F38 Mar 17 18:45:02.166149 kubelet[1698]: I0317 18:45:02.166117 1698 kubelet_network_linux.go:50] "Initialized iptables rules." protocol="IPv4" Mar 17 18:45:02.166000 audit[1723]: NETFILTER_CFG table=mangle:31 family=10 entries=2 op=nft_register_chain pid=1723 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Mar 17 18:45:02.166000 audit[1723]: SYSCALL arch=c000003e syscall=46 success=yes exit=136 a0=3 a1=7ffe0915fb20 a2=0 a3=7ffe0915fb0c items=0 ppid=1698 pid=1723 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:45:02.166000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D49505441424C45532D48494E54002D74006D616E676C65 Mar 17 18:45:02.166977 kubelet[1698]: I0317 18:45:02.166869 1698 kubelet_network_linux.go:50] "Initialized iptables rules." protocol="IPv6" Mar 17 18:45:02.166977 kubelet[1698]: I0317 18:45:02.166889 1698 status_manager.go:217] "Starting to sync pod status with apiserver" Mar 17 18:45:02.166977 kubelet[1698]: I0317 18:45:02.166903 1698 kubelet.go:2337] "Starting kubelet main sync loop" Mar 17 18:45:02.166977 kubelet[1698]: E0317 18:45:02.166932 1698 kubelet.go:2361] "Skipping pod synchronization" err="[container runtime status check may not have completed yet, PLEG is not healthy: pleg has yet to be successful]" Mar 17 18:45:02.166000 audit[1724]: NETFILTER_CFG table=mangle:32 family=2 entries=1 op=nft_register_chain pid=1724 subj=system_u:system_r:kernel_t:s0 comm="iptables" Mar 17 18:45:02.166000 audit[1724]: SYSCALL arch=c000003e syscall=46 success=yes exit=104 a0=3 a1=7ffc9813d070 a2=0 a3=7ffc9813d05c items=0 ppid=1698 pid=1724 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:45:02.166000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D4B5542454C45542D43414E415259002D74006D616E676C65 Mar 17 18:45:02.166000 audit[1727]: NETFILTER_CFG table=mangle:33 family=10 entries=1 op=nft_register_chain pid=1727 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Mar 17 18:45:02.166000 audit[1727]: SYSCALL arch=c000003e syscall=46 success=yes exit=104 a0=3 a1=7fffd941bc20 a2=0 a3=7fffd941bc0c items=0 ppid=1698 pid=1727 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:45:02.166000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D4B5542454C45542D43414E415259002D74006D616E676C65 Mar 17 18:45:02.167976 kubelet[1698]: W0317 18:45:02.167446 1698 reflector.go:547] k8s.io/client-go/informers/factory.go:160: failed to list *v1.RuntimeClass: Get "https://10.0.0.110:6443/apis/node.k8s.io/v1/runtimeclasses?limit=500&resourceVersion=0": dial tcp 10.0.0.110:6443: connect: connection refused Mar 17 18:45:02.167976 kubelet[1698]: E0317 18:45:02.167484 1698 reflector.go:150] k8s.io/client-go/informers/factory.go:160: Failed to watch *v1.RuntimeClass: failed to list *v1.RuntimeClass: Get "https://10.0.0.110:6443/apis/node.k8s.io/v1/runtimeclasses?limit=500&resourceVersion=0": dial tcp 10.0.0.110:6443: connect: connection refused Mar 17 18:45:02.167000 audit[1726]: NETFILTER_CFG table=nat:34 family=2 entries=1 op=nft_register_chain pid=1726 subj=system_u:system_r:kernel_t:s0 comm="iptables" Mar 17 18:45:02.167000 audit[1726]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7ffd3c2c2de0 a2=0 a3=7ffd3c2c2dcc items=0 ppid=1698 pid=1726 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:45:02.167000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D4B5542454C45542D43414E415259002D74006E6174 Mar 17 18:45:02.167000 audit[1728]: NETFILTER_CFG table=nat:35 family=10 entries=2 op=nft_register_chain pid=1728 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Mar 17 18:45:02.167000 audit[1728]: SYSCALL arch=c000003e syscall=46 success=yes exit=128 a0=3 a1=7ffe76ba3080 a2=0 a3=7ffe76ba306c items=0 ppid=1698 pid=1728 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:45:02.167000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D4B5542454C45542D43414E415259002D74006E6174 Mar 17 18:45:02.168000 audit[1729]: NETFILTER_CFG table=filter:36 family=2 entries=1 op=nft_register_chain pid=1729 subj=system_u:system_r:kernel_t:s0 comm="iptables" Mar 17 18:45:02.168000 audit[1729]: SYSCALL arch=c000003e syscall=46 success=yes exit=104 a0=3 a1=7ffd1e7aa360 a2=0 a3=7ffd1e7aa34c items=0 ppid=1698 pid=1729 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:45:02.168000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D4B5542454C45542D43414E415259002D740066696C746572 Mar 17 18:45:02.168000 audit[1730]: NETFILTER_CFG table=filter:37 family=10 entries=2 op=nft_register_chain pid=1730 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Mar 17 18:45:02.168000 audit[1730]: SYSCALL arch=c000003e syscall=46 success=yes exit=136 a0=3 a1=7fff9082bfa0 a2=0 a3=7fff9082bf8c items=0 ppid=1698 pid=1730 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:45:02.168000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D4B5542454C45542D43414E415259002D740066696C746572 Mar 17 18:45:02.252889 kubelet[1698]: I0317 18:45:02.252848 1698 kubelet_node_status.go:73] "Attempting to register node" node="localhost" Mar 17 18:45:02.253134 kubelet[1698]: E0317 18:45:02.253106 1698 kubelet_node_status.go:96] "Unable to register node with API server" err="Post \"https://10.0.0.110:6443/api/v1/nodes\": dial tcp 10.0.0.110:6443: connect: connection refused" node="localhost" Mar 17 18:45:02.267245 kubelet[1698]: E0317 18:45:02.267219 1698 kubelet.go:2361] "Skipping pod synchronization" err="container runtime status check may not have completed yet" Mar 17 18:45:02.353017 kubelet[1698]: E0317 18:45:02.352952 1698 controller.go:145] "Failed to ensure lease exists, will retry" err="Get \"https://10.0.0.110:6443/apis/coordination.k8s.io/v1/namespaces/kube-node-lease/leases/localhost?timeout=10s\": dial tcp 10.0.0.110:6443: connect: connection refused" interval="400ms" Mar 17 18:45:02.454457 kubelet[1698]: I0317 18:45:02.454358 1698 kubelet_node_status.go:73] "Attempting to register node" node="localhost" Mar 17 18:45:02.454737 kubelet[1698]: E0317 18:45:02.454690 1698 kubelet_node_status.go:96] "Unable to register node with API server" err="Post \"https://10.0.0.110:6443/api/v1/nodes\": dial tcp 10.0.0.110:6443: connect: connection refused" node="localhost" Mar 17 18:45:02.467786 kubelet[1698]: E0317 18:45:02.467762 1698 kubelet.go:2361] "Skipping pod synchronization" err="container runtime status check may not have completed yet" Mar 17 18:45:02.527882 kubelet[1698]: I0317 18:45:02.527850 1698 policy_none.go:49] "None policy: Start" Mar 17 18:45:02.528357 kubelet[1698]: I0317 18:45:02.528328 1698 memory_manager.go:170] "Starting memorymanager" policy="None" Mar 17 18:45:02.528435 kubelet[1698]: I0317 18:45:02.528363 1698 state_mem.go:35] "Initializing new in-memory state store" Mar 17 18:45:02.534617 systemd[1]: Created slice kubepods.slice. Mar 17 18:45:02.538232 systemd[1]: Created slice kubepods-besteffort.slice. Mar 17 18:45:02.549455 systemd[1]: Created slice kubepods-burstable.slice. Mar 17 18:45:02.550433 kubelet[1698]: I0317 18:45:02.550413 1698 manager.go:479] "Failed to read data from checkpoint" checkpoint="kubelet_internal_checkpoint" err="checkpoint is not found" Mar 17 18:45:02.549000 audit[1698]: AVC avc: denied { mac_admin } for pid=1698 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:02.549000 audit: SELINUX_ERR op=setxattr invalid_context="system_u:object_r:container_file_t:s0" Mar 17 18:45:02.549000 audit[1698]: SYSCALL arch=c000003e syscall=188 success=no exit=-22 a0=c00056c5a0 a1=c000512b28 a2=c00056c570 a3=25 items=0 ppid=1 pid=1698 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/usr/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:45:02.549000 audit: PROCTITLE proctitle=2F7573722F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 Mar 17 18:45:02.550719 kubelet[1698]: I0317 18:45:02.550478 1698 server.go:88] "Unprivileged containerized plugins might not work. Could not set selinux context on socket dir" path="/var/lib/kubelet/device-plugins/" err="setxattr /var/lib/kubelet/device-plugins/: invalid argument" Mar 17 18:45:02.550719 kubelet[1698]: I0317 18:45:02.550567 1698 container_log_manager.go:186] "Initializing container log rotate workers" workers=1 monitorPeriod="10s" Mar 17 18:45:02.550719 kubelet[1698]: I0317 18:45:02.550682 1698 plugin_manager.go:118] "Starting Kubelet Plugin Manager" Mar 17 18:45:02.552067 kubelet[1698]: E0317 18:45:02.552045 1698 eviction_manager.go:282] "Eviction manager: failed to get summary stats" err="failed to get node info: node \"localhost\" not found" Mar 17 18:45:02.753653 kubelet[1698]: E0317 18:45:02.753586 1698 controller.go:145] "Failed to ensure lease exists, will retry" err="Get \"https://10.0.0.110:6443/apis/coordination.k8s.io/v1/namespaces/kube-node-lease/leases/localhost?timeout=10s\": dial tcp 10.0.0.110:6443: connect: connection refused" interval="800ms" Mar 17 18:45:02.856229 kubelet[1698]: I0317 18:45:02.856189 1698 kubelet_node_status.go:73] "Attempting to register node" node="localhost" Mar 17 18:45:02.856553 kubelet[1698]: E0317 18:45:02.856526 1698 kubelet_node_status.go:96] "Unable to register node with API server" err="Post \"https://10.0.0.110:6443/api/v1/nodes\": dial tcp 10.0.0.110:6443: connect: connection refused" node="localhost" Mar 17 18:45:02.868745 kubelet[1698]: I0317 18:45:02.868683 1698 topology_manager.go:215] "Topology Admit Handler" podUID="23a18e2dc14f395c5f1bea711a5a9344" podNamespace="kube-system" podName="kube-controller-manager-localhost" Mar 17 18:45:02.869559 kubelet[1698]: I0317 18:45:02.869544 1698 topology_manager.go:215] "Topology Admit Handler" podUID="d79ab404294384d4bcc36fb5b5509bbb" podNamespace="kube-system" podName="kube-scheduler-localhost" Mar 17 18:45:02.870245 kubelet[1698]: I0317 18:45:02.870226 1698 topology_manager.go:215] "Topology Admit Handler" podUID="8af96bab0ba5b79565c43d369248d9c0" podNamespace="kube-system" podName="kube-apiserver-localhost" Mar 17 18:45:02.874740 systemd[1]: Created slice kubepods-burstable-pod23a18e2dc14f395c5f1bea711a5a9344.slice. Mar 17 18:45:02.890823 systemd[1]: Created slice kubepods-burstable-podd79ab404294384d4bcc36fb5b5509bbb.slice. Mar 17 18:45:02.894217 systemd[1]: Created slice kubepods-burstable-pod8af96bab0ba5b79565c43d369248d9c0.slice. Mar 17 18:45:02.956844 kubelet[1698]: I0317 18:45:02.956807 1698 reconciler_common.go:247] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kubeconfig\" (UniqueName: \"kubernetes.io/host-path/23a18e2dc14f395c5f1bea711a5a9344-kubeconfig\") pod \"kube-controller-manager-localhost\" (UID: \"23a18e2dc14f395c5f1bea711a5a9344\") " pod="kube-system/kube-controller-manager-localhost" Mar 17 18:45:02.956844 kubelet[1698]: I0317 18:45:02.956842 1698 reconciler_common.go:247] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kubeconfig\" (UniqueName: \"kubernetes.io/host-path/d79ab404294384d4bcc36fb5b5509bbb-kubeconfig\") pod \"kube-scheduler-localhost\" (UID: \"d79ab404294384d4bcc36fb5b5509bbb\") " pod="kube-system/kube-scheduler-localhost" Mar 17 18:45:02.956918 kubelet[1698]: I0317 18:45:02.956858 1698 reconciler_common.go:247] "operationExecutor.VerifyControllerAttachedVolume started for volume \"ca-certs\" (UniqueName: \"kubernetes.io/host-path/8af96bab0ba5b79565c43d369248d9c0-ca-certs\") pod \"kube-apiserver-localhost\" (UID: \"8af96bab0ba5b79565c43d369248d9c0\") " pod="kube-system/kube-apiserver-localhost" Mar 17 18:45:02.956918 kubelet[1698]: I0317 18:45:02.956893 1698 reconciler_common.go:247] "operationExecutor.VerifyControllerAttachedVolume started for volume \"k8s-certs\" (UniqueName: \"kubernetes.io/host-path/8af96bab0ba5b79565c43d369248d9c0-k8s-certs\") pod \"kube-apiserver-localhost\" (UID: \"8af96bab0ba5b79565c43d369248d9c0\") " pod="kube-system/kube-apiserver-localhost" Mar 17 18:45:02.956967 kubelet[1698]: I0317 18:45:02.956916 1698 reconciler_common.go:247] "operationExecutor.VerifyControllerAttachedVolume started for volume \"usr-share-ca-certificates\" (UniqueName: \"kubernetes.io/host-path/8af96bab0ba5b79565c43d369248d9c0-usr-share-ca-certificates\") pod \"kube-apiserver-localhost\" (UID: \"8af96bab0ba5b79565c43d369248d9c0\") " pod="kube-system/kube-apiserver-localhost" Mar 17 18:45:02.956967 kubelet[1698]: I0317 18:45:02.956938 1698 reconciler_common.go:247] "operationExecutor.VerifyControllerAttachedVolume started for volume \"k8s-certs\" (UniqueName: \"kubernetes.io/host-path/23a18e2dc14f395c5f1bea711a5a9344-k8s-certs\") pod \"kube-controller-manager-localhost\" (UID: \"23a18e2dc14f395c5f1bea711a5a9344\") " pod="kube-system/kube-controller-manager-localhost" Mar 17 18:45:02.956967 kubelet[1698]: I0317 18:45:02.956956 1698 reconciler_common.go:247] "operationExecutor.VerifyControllerAttachedVolume started for volume \"flexvolume-dir\" (UniqueName: \"kubernetes.io/host-path/23a18e2dc14f395c5f1bea711a5a9344-flexvolume-dir\") pod \"kube-controller-manager-localhost\" (UID: \"23a18e2dc14f395c5f1bea711a5a9344\") " pod="kube-system/kube-controller-manager-localhost" Mar 17 18:45:02.957027 kubelet[1698]: I0317 18:45:02.956974 1698 reconciler_common.go:247] "operationExecutor.VerifyControllerAttachedVolume started for volume \"usr-share-ca-certificates\" (UniqueName: \"kubernetes.io/host-path/23a18e2dc14f395c5f1bea711a5a9344-usr-share-ca-certificates\") pod \"kube-controller-manager-localhost\" (UID: \"23a18e2dc14f395c5f1bea711a5a9344\") " pod="kube-system/kube-controller-manager-localhost" Mar 17 18:45:02.957027 kubelet[1698]: I0317 18:45:02.957003 1698 reconciler_common.go:247] "operationExecutor.VerifyControllerAttachedVolume started for volume \"ca-certs\" (UniqueName: \"kubernetes.io/host-path/23a18e2dc14f395c5f1bea711a5a9344-ca-certs\") pod \"kube-controller-manager-localhost\" (UID: \"23a18e2dc14f395c5f1bea711a5a9344\") " pod="kube-system/kube-controller-manager-localhost" Mar 17 18:45:03.140541 kubelet[1698]: W0317 18:45:03.140419 1698 reflector.go:547] k8s.io/client-go/informers/factory.go:160: failed to list *v1.RuntimeClass: Get "https://10.0.0.110:6443/apis/node.k8s.io/v1/runtimeclasses?limit=500&resourceVersion=0": dial tcp 10.0.0.110:6443: connect: connection refused Mar 17 18:45:03.140541 kubelet[1698]: E0317 18:45:03.140466 1698 reflector.go:150] k8s.io/client-go/informers/factory.go:160: Failed to watch *v1.RuntimeClass: failed to list *v1.RuntimeClass: Get "https://10.0.0.110:6443/apis/node.k8s.io/v1/runtimeclasses?limit=500&resourceVersion=0": dial tcp 10.0.0.110:6443: connect: connection refused Mar 17 18:45:03.189642 kubelet[1698]: E0317 18:45:03.189581 1698 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Mar 17 18:45:03.190302 env[1203]: time="2025-03-17T18:45:03.190253032Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-controller-manager-localhost,Uid:23a18e2dc14f395c5f1bea711a5a9344,Namespace:kube-system,Attempt:0,}" Mar 17 18:45:03.193368 kubelet[1698]: E0317 18:45:03.193350 1698 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Mar 17 18:45:03.193656 env[1203]: time="2025-03-17T18:45:03.193620065Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-scheduler-localhost,Uid:d79ab404294384d4bcc36fb5b5509bbb,Namespace:kube-system,Attempt:0,}" Mar 17 18:45:03.195851 kubelet[1698]: E0317 18:45:03.195820 1698 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Mar 17 18:45:03.196105 env[1203]: time="2025-03-17T18:45:03.196074677Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-apiserver-localhost,Uid:8af96bab0ba5b79565c43d369248d9c0,Namespace:kube-system,Attempt:0,}" Mar 17 18:45:03.255785 kubelet[1698]: W0317 18:45:03.255716 1698 reflector.go:547] k8s.io/client-go/informers/factory.go:160: failed to list *v1.Service: Get "https://10.0.0.110:6443/api/v1/services?limit=500&resourceVersion=0": dial tcp 10.0.0.110:6443: connect: connection refused Mar 17 18:45:03.255785 kubelet[1698]: E0317 18:45:03.255782 1698 reflector.go:150] k8s.io/client-go/informers/factory.go:160: Failed to watch *v1.Service: failed to list *v1.Service: Get "https://10.0.0.110:6443/api/v1/services?limit=500&resourceVersion=0": dial tcp 10.0.0.110:6443: connect: connection refused Mar 17 18:45:03.554421 kubelet[1698]: E0317 18:45:03.554374 1698 controller.go:145] "Failed to ensure lease exists, will retry" err="Get \"https://10.0.0.110:6443/apis/coordination.k8s.io/v1/namespaces/kube-node-lease/leases/localhost?timeout=10s\": dial tcp 10.0.0.110:6443: connect: connection refused" interval="1.6s" Mar 17 18:45:03.581930 kubelet[1698]: W0317 18:45:03.581885 1698 reflector.go:547] k8s.io/client-go/informers/factory.go:160: failed to list *v1.Node: Get "https://10.0.0.110:6443/api/v1/nodes?fieldSelector=metadata.name%3Dlocalhost&limit=500&resourceVersion=0": dial tcp 10.0.0.110:6443: connect: connection refused Mar 17 18:45:03.581981 kubelet[1698]: E0317 18:45:03.581933 1698 reflector.go:150] k8s.io/client-go/informers/factory.go:160: Failed to watch *v1.Node: failed to list *v1.Node: Get "https://10.0.0.110:6443/api/v1/nodes?fieldSelector=metadata.name%3Dlocalhost&limit=500&resourceVersion=0": dial tcp 10.0.0.110:6443: connect: connection refused Mar 17 18:45:03.583090 kubelet[1698]: W0317 18:45:03.583064 1698 reflector.go:547] k8s.io/client-go/informers/factory.go:160: failed to list *v1.CSIDriver: Get "https://10.0.0.110:6443/apis/storage.k8s.io/v1/csidrivers?limit=500&resourceVersion=0": dial tcp 10.0.0.110:6443: connect: connection refused Mar 17 18:45:03.583090 kubelet[1698]: E0317 18:45:03.583089 1698 reflector.go:150] k8s.io/client-go/informers/factory.go:160: Failed to watch *v1.CSIDriver: failed to list *v1.CSIDriver: Get "https://10.0.0.110:6443/apis/storage.k8s.io/v1/csidrivers?limit=500&resourceVersion=0": dial tcp 10.0.0.110:6443: connect: connection refused Mar 17 18:45:03.657478 kubelet[1698]: I0317 18:45:03.657444 1698 kubelet_node_status.go:73] "Attempting to register node" node="localhost" Mar 17 18:45:03.657733 kubelet[1698]: E0317 18:45:03.657710 1698 kubelet_node_status.go:96] "Unable to register node with API server" err="Post \"https://10.0.0.110:6443/api/v1/nodes\": dial tcp 10.0.0.110:6443: connect: connection refused" node="localhost" Mar 17 18:45:04.003667 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount205799694.mount: Deactivated successfully. Mar 17 18:45:04.007745 env[1203]: time="2025-03-17T18:45:04.007678054Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/pause:3.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Mar 17 18:45:04.011710 env[1203]: time="2025-03-17T18:45:04.011655331Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:6270bb605e12e581514ada5fd5b3216f727db55dc87d5889c790e4c760683fee,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Mar 17 18:45:04.013008 env[1203]: time="2025-03-17T18:45:04.012961730Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause:3.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Mar 17 18:45:04.013546 env[1203]: time="2025-03-17T18:45:04.013526049Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause:3.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Mar 17 18:45:04.014105 env[1203]: time="2025-03-17T18:45:04.014078124Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause:3.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Mar 17 18:45:04.016647 env[1203]: time="2025-03-17T18:45:04.016604601Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/pause@sha256:3d380ca8864549e74af4b29c10f9cb0956236dfb01c40ca076fb6c37253234db,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Mar 17 18:45:04.017886 env[1203]: time="2025-03-17T18:45:04.017849425Z" level=info msg="ImageUpdate event &ImageUpdate{Name:sha256:6270bb605e12e581514ada5fd5b3216f727db55dc87d5889c790e4c760683fee,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Mar 17 18:45:04.019267 env[1203]: time="2025-03-17T18:45:04.019234883Z" level=info msg="ImageUpdate event &ImageUpdate{Name:sha256:6270bb605e12e581514ada5fd5b3216f727db55dc87d5889c790e4c760683fee,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Mar 17 18:45:04.020402 env[1203]: time="2025-03-17T18:45:04.020371293Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause:3.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Mar 17 18:45:04.022184 env[1203]: time="2025-03-17T18:45:04.022148295Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause:3.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Mar 17 18:45:04.023313 env[1203]: time="2025-03-17T18:45:04.023287070Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause@sha256:3d380ca8864549e74af4b29c10f9cb0956236dfb01c40ca076fb6c37253234db,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Mar 17 18:45:04.026294 env[1203]: time="2025-03-17T18:45:04.026264173Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause@sha256:3d380ca8864549e74af4b29c10f9cb0956236dfb01c40ca076fb6c37253234db,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Mar 17 18:45:04.042205 env[1203]: time="2025-03-17T18:45:04.041362201Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Mar 17 18:45:04.042205 env[1203]: time="2025-03-17T18:45:04.041408689Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Mar 17 18:45:04.042205 env[1203]: time="2025-03-17T18:45:04.041589538Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Mar 17 18:45:04.042431 env[1203]: time="2025-03-17T18:45:04.042327712Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/93df50525c6109178a76e8f580d9f6f6cc8e709ec60bb323f1d15e21d01358cc pid=1739 runtime=io.containerd.runc.v2 Mar 17 18:45:04.054766 systemd[1]: Started cri-containerd-93df50525c6109178a76e8f580d9f6f6cc8e709ec60bb323f1d15e21d01358cc.scope. Mar 17 18:45:04.059417 env[1203]: time="2025-03-17T18:45:04.059349347Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Mar 17 18:45:04.059417 env[1203]: time="2025-03-17T18:45:04.059384934Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Mar 17 18:45:04.059417 env[1203]: time="2025-03-17T18:45:04.059395093Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Mar 17 18:45:04.059619 env[1203]: time="2025-03-17T18:45:04.059514337Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/f1d5733a4af27013ab1b80fb85fb45b05a55a9e2dc926a5a45362481124ce765 pid=1777 runtime=io.containerd.runc.v2 Mar 17 18:45:04.060482 env[1203]: time="2025-03-17T18:45:04.060433390Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Mar 17 18:45:04.060582 env[1203]: time="2025-03-17T18:45:04.060558985Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Mar 17 18:45:04.060700 env[1203]: time="2025-03-17T18:45:04.060673841Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Mar 17 18:45:04.061430 env[1203]: time="2025-03-17T18:45:04.060942504Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/3928f0238c27a86c917676f6a4f96a91cec9f5f405845b2a771444312dc88a9c pid=1773 runtime=io.containerd.runc.v2 Mar 17 18:45:04.064000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:04.064000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:04.064000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:04.064000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:04.064000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:04.064000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:04.064000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:04.064000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:04.064000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:04.064000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:04.064000 audit: BPF prog-id=61 op=LOAD Mar 17 18:45:04.065000 audit[1749]: AVC avc: denied { bpf } for pid=1749 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:04.065000 audit[1749]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c0001bdc48 a2=10 a3=1c items=0 ppid=1739 pid=1749 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:45:04.065000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3933646635303532356336313039313738613736653866353830643966 Mar 17 18:45:04.065000 audit[1749]: AVC avc: denied { perfmon } for pid=1749 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:04.065000 audit[1749]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001bd6b0 a2=3c a3=c items=0 ppid=1739 pid=1749 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:45:04.065000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3933646635303532356336313039313738613736653866353830643966 Mar 17 18:45:04.065000 audit[1749]: AVC avc: denied { bpf } for pid=1749 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:04.065000 audit[1749]: AVC avc: denied { bpf } for pid=1749 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:04.065000 audit[1749]: AVC avc: denied { bpf } for pid=1749 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:04.065000 audit[1749]: AVC avc: denied { perfmon } for pid=1749 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:04.065000 audit[1749]: AVC avc: denied { perfmon } for pid=1749 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:04.065000 audit[1749]: AVC avc: denied { perfmon } for pid=1749 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:04.065000 audit[1749]: AVC avc: denied { perfmon } for pid=1749 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:04.065000 audit[1749]: AVC avc: denied { perfmon } for pid=1749 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:04.065000 audit[1749]: AVC avc: denied { bpf } for pid=1749 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:04.065000 audit[1749]: AVC avc: denied { bpf } for pid=1749 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:04.065000 audit: BPF prog-id=62 op=LOAD Mar 17 18:45:04.065000 audit[1749]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001bd9d8 a2=78 a3=c00024d9b0 items=0 ppid=1739 pid=1749 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:45:04.065000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3933646635303532356336313039313738613736653866353830643966 Mar 17 18:45:04.065000 audit[1749]: AVC avc: denied { bpf } for pid=1749 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:04.065000 audit[1749]: AVC avc: denied { bpf } for pid=1749 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:04.065000 audit[1749]: AVC avc: denied { perfmon } for pid=1749 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:04.065000 audit[1749]: AVC avc: denied { perfmon } for pid=1749 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:04.065000 audit[1749]: AVC avc: denied { perfmon } for pid=1749 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:04.065000 audit[1749]: AVC avc: denied { perfmon } for pid=1749 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:04.065000 audit[1749]: AVC avc: denied { perfmon } for pid=1749 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:04.065000 audit[1749]: AVC avc: denied { bpf } for pid=1749 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:04.065000 audit[1749]: AVC avc: denied { bpf } for pid=1749 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:04.065000 audit: BPF prog-id=63 op=LOAD Mar 17 18:45:04.065000 audit[1749]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c0001bd770 a2=78 a3=c00024d9f8 items=0 ppid=1739 pid=1749 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:45:04.065000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3933646635303532356336313039313738613736653866353830643966 Mar 17 18:45:04.065000 audit: BPF prog-id=63 op=UNLOAD Mar 17 18:45:04.065000 audit: BPF prog-id=62 op=UNLOAD Mar 17 18:45:04.065000 audit[1749]: AVC avc: denied { bpf } for pid=1749 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:04.065000 audit[1749]: AVC avc: denied { bpf } for pid=1749 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:04.065000 audit[1749]: AVC avc: denied { bpf } for pid=1749 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:04.065000 audit[1749]: AVC avc: denied { perfmon } for pid=1749 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:04.065000 audit[1749]: AVC avc: denied { perfmon } for pid=1749 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:04.065000 audit[1749]: AVC avc: denied { perfmon } for pid=1749 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:04.065000 audit[1749]: AVC avc: denied { perfmon } for pid=1749 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:04.065000 audit[1749]: AVC avc: denied { perfmon } for pid=1749 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:04.065000 audit[1749]: AVC avc: denied { bpf } for pid=1749 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:04.065000 audit[1749]: AVC avc: denied { bpf } for pid=1749 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:04.065000 audit: BPF prog-id=64 op=LOAD Mar 17 18:45:04.065000 audit[1749]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001bdc30 a2=78 a3=c00024de08 items=0 ppid=1739 pid=1749 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:45:04.065000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3933646635303532356336313039313738613736653866353830643966 Mar 17 18:45:04.073211 systemd[1]: Started cri-containerd-3928f0238c27a86c917676f6a4f96a91cec9f5f405845b2a771444312dc88a9c.scope. Mar 17 18:45:04.073968 systemd[1]: Started cri-containerd-f1d5733a4af27013ab1b80fb85fb45b05a55a9e2dc926a5a45362481124ce765.scope. Mar 17 18:45:04.086000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:04.086000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:04.086000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:04.086000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:04.086000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:04.086000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:04.086000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:04.086000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:04.086000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:04.086000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:04.086000 audit: BPF prog-id=65 op=LOAD Mar 17 18:45:04.087000 audit[1805]: AVC avc: denied { bpf } for pid=1805 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:04.087000 audit[1805]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000197c48 a2=10 a3=1c items=0 ppid=1773 pid=1805 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:45:04.087000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3339323866303233386332376138366339313736373666366134663936 Mar 17 18:45:04.087000 audit[1805]: AVC avc: denied { perfmon } for pid=1805 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:04.087000 audit[1805]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001976b0 a2=3c a3=c items=0 ppid=1773 pid=1805 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:45:04.087000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3339323866303233386332376138366339313736373666366134663936 Mar 17 18:45:04.087000 audit[1805]: AVC avc: denied { bpf } for pid=1805 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:04.087000 audit[1805]: AVC avc: denied { bpf } for pid=1805 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:04.087000 audit[1805]: AVC avc: denied { bpf } for pid=1805 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:04.087000 audit[1805]: AVC avc: denied { perfmon } for pid=1805 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:04.087000 audit[1805]: AVC avc: denied { perfmon } for pid=1805 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:04.087000 audit[1805]: AVC avc: denied { perfmon } for pid=1805 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:04.087000 audit[1805]: AVC avc: denied { perfmon } for pid=1805 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:04.087000 audit[1805]: AVC avc: denied { perfmon } for pid=1805 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:04.087000 audit[1805]: AVC avc: denied { bpf } for pid=1805 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:04.087000 audit[1805]: AVC avc: denied { bpf } for pid=1805 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:04.087000 audit: BPF prog-id=66 op=LOAD Mar 17 18:45:04.087000 audit[1805]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001979d8 a2=78 a3=c00020f170 items=0 ppid=1773 pid=1805 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:45:04.087000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3339323866303233386332376138366339313736373666366134663936 Mar 17 18:45:04.088000 audit[1805]: AVC avc: denied { bpf } for pid=1805 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:04.088000 audit[1805]: AVC avc: denied { bpf } for pid=1805 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:04.088000 audit[1805]: AVC avc: denied { perfmon } for pid=1805 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:04.088000 audit[1805]: AVC avc: denied { perfmon } for pid=1805 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:04.088000 audit[1805]: AVC avc: denied { perfmon } for pid=1805 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:04.088000 audit[1805]: AVC avc: denied { perfmon } for pid=1805 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:04.088000 audit[1805]: AVC avc: denied { perfmon } for pid=1805 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:04.088000 audit[1805]: AVC avc: denied { bpf } for pid=1805 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:04.088000 audit[1805]: AVC avc: denied { bpf } for pid=1805 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:04.088000 audit: BPF prog-id=67 op=LOAD Mar 17 18:45:04.088000 audit[1805]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000197770 a2=78 a3=c00020f1b8 items=0 ppid=1773 pid=1805 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:45:04.088000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3339323866303233386332376138366339313736373666366134663936 Mar 17 18:45:04.088000 audit: BPF prog-id=67 op=UNLOAD Mar 17 18:45:04.088000 audit: BPF prog-id=66 op=UNLOAD Mar 17 18:45:04.088000 audit[1805]: AVC avc: denied { bpf } for pid=1805 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:04.088000 audit[1805]: AVC avc: denied { bpf } for pid=1805 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:04.088000 audit[1805]: AVC avc: denied { bpf } for pid=1805 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:04.088000 audit[1805]: AVC avc: denied { perfmon } for pid=1805 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:04.088000 audit[1805]: AVC avc: denied { perfmon } for pid=1805 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:04.088000 audit[1805]: AVC avc: denied { perfmon } for pid=1805 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:04.088000 audit[1805]: AVC avc: denied { perfmon } for pid=1805 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:04.088000 audit[1805]: AVC avc: denied { perfmon } for pid=1805 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:04.088000 audit[1805]: AVC avc: denied { bpf } for pid=1805 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:04.088000 audit[1805]: AVC avc: denied { bpf } for pid=1805 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:04.088000 audit: BPF prog-id=68 op=LOAD Mar 17 18:45:04.088000 audit[1805]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000197c30 a2=78 a3=c00020f5c8 items=0 ppid=1773 pid=1805 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:45:04.088000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:04.088000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3339323866303233386332376138366339313736373666366134663936 Mar 17 18:45:04.088000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:04.088000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:04.088000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:04.088000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:04.088000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:04.088000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:04.088000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:04.088000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:04.088000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:04.088000 audit: BPF prog-id=69 op=LOAD Mar 17 18:45:04.089000 audit[1804]: AVC avc: denied { bpf } for pid=1804 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:04.089000 audit[1804]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000145c48 a2=10 a3=1c items=0 ppid=1777 pid=1804 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:45:04.089000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6631643537333361346166323730313361623162383066623835666234 Mar 17 18:45:04.089000 audit[1804]: AVC avc: denied { perfmon } for pid=1804 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:04.089000 audit[1804]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001456b0 a2=3c a3=c items=0 ppid=1777 pid=1804 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:45:04.089000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6631643537333361346166323730313361623162383066623835666234 Mar 17 18:45:04.089000 audit[1804]: AVC avc: denied { bpf } for pid=1804 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:04.089000 audit[1804]: AVC avc: denied { bpf } for pid=1804 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:04.089000 audit[1804]: AVC avc: denied { bpf } for pid=1804 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:04.089000 audit[1804]: AVC avc: denied { perfmon } for pid=1804 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:04.089000 audit[1804]: AVC avc: denied { perfmon } for pid=1804 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:04.089000 audit[1804]: AVC avc: denied { perfmon } for pid=1804 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:04.089000 audit[1804]: AVC avc: denied { perfmon } for pid=1804 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:04.089000 audit[1804]: AVC avc: denied { perfmon } for pid=1804 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:04.089000 audit[1804]: AVC avc: denied { bpf } for pid=1804 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:04.089000 audit[1804]: AVC avc: denied { bpf } for pid=1804 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:04.089000 audit: BPF prog-id=70 op=LOAD Mar 17 18:45:04.089000 audit[1804]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001459d8 a2=78 a3=c000279d90 items=0 ppid=1777 pid=1804 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:45:04.089000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6631643537333361346166323730313361623162383066623835666234 Mar 17 18:45:04.089000 audit[1804]: AVC avc: denied { bpf } for pid=1804 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:04.089000 audit[1804]: AVC avc: denied { bpf } for pid=1804 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:04.089000 audit[1804]: AVC avc: denied { perfmon } for pid=1804 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:04.089000 audit[1804]: AVC avc: denied { perfmon } for pid=1804 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:04.089000 audit[1804]: AVC avc: denied { perfmon } for pid=1804 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:04.089000 audit[1804]: AVC avc: denied { perfmon } for pid=1804 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:04.089000 audit[1804]: AVC avc: denied { perfmon } for pid=1804 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:04.089000 audit[1804]: AVC avc: denied { bpf } for pid=1804 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:04.089000 audit[1804]: AVC avc: denied { bpf } for pid=1804 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:04.089000 audit: BPF prog-id=71 op=LOAD Mar 17 18:45:04.089000 audit[1804]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000145770 a2=78 a3=c000279dd8 items=0 ppid=1777 pid=1804 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:45:04.089000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6631643537333361346166323730313361623162383066623835666234 Mar 17 18:45:04.089000 audit: BPF prog-id=71 op=UNLOAD Mar 17 18:45:04.089000 audit: BPF prog-id=70 op=UNLOAD Mar 17 18:45:04.089000 audit[1804]: AVC avc: denied { bpf } for pid=1804 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:04.089000 audit[1804]: AVC avc: denied { bpf } for pid=1804 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:04.089000 audit[1804]: AVC avc: denied { bpf } for pid=1804 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:04.089000 audit[1804]: AVC avc: denied { perfmon } for pid=1804 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:04.089000 audit[1804]: AVC avc: denied { perfmon } for pid=1804 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:04.089000 audit[1804]: AVC avc: denied { perfmon } for pid=1804 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:04.089000 audit[1804]: AVC avc: denied { perfmon } for pid=1804 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:04.089000 audit[1804]: AVC avc: denied { perfmon } for pid=1804 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:04.089000 audit[1804]: AVC avc: denied { bpf } for pid=1804 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:04.089000 audit[1804]: AVC avc: denied { bpf } for pid=1804 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:04.089000 audit: BPF prog-id=72 op=LOAD Mar 17 18:45:04.089000 audit[1804]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000145c30 a2=78 a3=c0003ee1e8 items=0 ppid=1777 pid=1804 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:45:04.089000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6631643537333361346166323730313361623162383066623835666234 Mar 17 18:45:04.093171 env[1203]: time="2025-03-17T18:45:04.093128132Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-controller-manager-localhost,Uid:23a18e2dc14f395c5f1bea711a5a9344,Namespace:kube-system,Attempt:0,} returns sandbox id \"93df50525c6109178a76e8f580d9f6f6cc8e709ec60bb323f1d15e21d01358cc\"" Mar 17 18:45:04.094246 kubelet[1698]: E0317 18:45:04.094022 1698 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Mar 17 18:45:04.096427 env[1203]: time="2025-03-17T18:45:04.096402382Z" level=info msg="CreateContainer within sandbox \"93df50525c6109178a76e8f580d9f6f6cc8e709ec60bb323f1d15e21d01358cc\" for container &ContainerMetadata{Name:kube-controller-manager,Attempt:0,}" Mar 17 18:45:04.112423 env[1203]: time="2025-03-17T18:45:04.112390219Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-scheduler-localhost,Uid:d79ab404294384d4bcc36fb5b5509bbb,Namespace:kube-system,Attempt:0,} returns sandbox id \"3928f0238c27a86c917676f6a4f96a91cec9f5f405845b2a771444312dc88a9c\"" Mar 17 18:45:04.113744 env[1203]: time="2025-03-17T18:45:04.112896658Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-apiserver-localhost,Uid:8af96bab0ba5b79565c43d369248d9c0,Namespace:kube-system,Attempt:0,} returns sandbox id \"f1d5733a4af27013ab1b80fb85fb45b05a55a9e2dc926a5a45362481124ce765\"" Mar 17 18:45:04.113879 env[1203]: time="2025-03-17T18:45:04.113751141Z" level=info msg="CreateContainer within sandbox \"93df50525c6109178a76e8f580d9f6f6cc8e709ec60bb323f1d15e21d01358cc\" for &ContainerMetadata{Name:kube-controller-manager,Attempt:0,} returns container id \"0a4aa43de95000fb7879e3bb8599c3b77301d07d4527e714d69c5a7c483e7a79\"" Mar 17 18:45:04.114327 env[1203]: time="2025-03-17T18:45:04.114288508Z" level=info msg="StartContainer for \"0a4aa43de95000fb7879e3bb8599c3b77301d07d4527e714d69c5a7c483e7a79\"" Mar 17 18:45:04.114930 kubelet[1698]: E0317 18:45:04.114872 1698 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Mar 17 18:45:04.115098 kubelet[1698]: E0317 18:45:04.115076 1698 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Mar 17 18:45:04.117114 env[1203]: time="2025-03-17T18:45:04.117087136Z" level=info msg="CreateContainer within sandbox \"f1d5733a4af27013ab1b80fb85fb45b05a55a9e2dc926a5a45362481124ce765\" for container &ContainerMetadata{Name:kube-apiserver,Attempt:0,}" Mar 17 18:45:04.117203 env[1203]: time="2025-03-17T18:45:04.117108025Z" level=info msg="CreateContainer within sandbox \"3928f0238c27a86c917676f6a4f96a91cec9f5f405845b2a771444312dc88a9c\" for container &ContainerMetadata{Name:kube-scheduler,Attempt:0,}" Mar 17 18:45:04.129942 systemd[1]: Started cri-containerd-0a4aa43de95000fb7879e3bb8599c3b77301d07d4527e714d69c5a7c483e7a79.scope. Mar 17 18:45:04.132826 env[1203]: time="2025-03-17T18:45:04.132789017Z" level=info msg="CreateContainer within sandbox \"f1d5733a4af27013ab1b80fb85fb45b05a55a9e2dc926a5a45362481124ce765\" for &ContainerMetadata{Name:kube-apiserver,Attempt:0,} returns container id \"fe6b546d38adbc419049e9f546a7bca7d39dac3eb1c4a197abb58c6f51b33133\"" Mar 17 18:45:04.133166 env[1203]: time="2025-03-17T18:45:04.133133022Z" level=info msg="StartContainer for \"fe6b546d38adbc419049e9f546a7bca7d39dac3eb1c4a197abb58c6f51b33133\"" Mar 17 18:45:04.139000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:04.139000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:04.139000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:04.139000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:04.139000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:04.139000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:04.139000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:04.139000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:04.139000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:04.139000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:04.139000 audit: BPF prog-id=73 op=LOAD Mar 17 18:45:04.140000 audit[1870]: AVC avc: denied { bpf } for pid=1870 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:04.140000 audit[1870]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000197c48 a2=10 a3=1c items=0 ppid=1739 pid=1870 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:45:04.140000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3061346161343364653935303030666237383739653362623835393963 Mar 17 18:45:04.140000 audit[1870]: AVC avc: denied { perfmon } for pid=1870 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:04.140000 audit[1870]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001976b0 a2=3c a3=8 items=0 ppid=1739 pid=1870 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:45:04.140000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3061346161343364653935303030666237383739653362623835393963 Mar 17 18:45:04.140000 audit[1870]: AVC avc: denied { bpf } for pid=1870 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:04.140000 audit[1870]: AVC avc: denied { bpf } for pid=1870 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:04.140000 audit[1870]: AVC avc: denied { bpf } for pid=1870 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:04.140000 audit[1870]: AVC avc: denied { perfmon } for pid=1870 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:04.140000 audit[1870]: AVC avc: denied { perfmon } for pid=1870 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:04.140000 audit[1870]: AVC avc: denied { perfmon } for pid=1870 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:04.140000 audit[1870]: AVC avc: denied { perfmon } for pid=1870 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:04.140000 audit[1870]: AVC avc: denied { perfmon } for pid=1870 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:04.140000 audit[1870]: AVC avc: denied { bpf } for pid=1870 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:04.140000 audit[1870]: AVC avc: denied { bpf } for pid=1870 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:04.140000 audit: BPF prog-id=74 op=LOAD Mar 17 18:45:04.140000 audit[1870]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001979d8 a2=78 a3=c000325c90 items=0 ppid=1739 pid=1870 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:45:04.140000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3061346161343364653935303030666237383739653362623835393963 Mar 17 18:45:04.140000 audit[1870]: AVC avc: denied { bpf } for pid=1870 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:04.140000 audit[1870]: AVC avc: denied { bpf } for pid=1870 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:04.140000 audit[1870]: AVC avc: denied { perfmon } for pid=1870 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:04.140000 audit[1870]: AVC avc: denied { perfmon } for pid=1870 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:04.140000 audit[1870]: AVC avc: denied { perfmon } for pid=1870 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:04.140000 audit[1870]: AVC avc: denied { perfmon } for pid=1870 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:04.140000 audit[1870]: AVC avc: denied { perfmon } for pid=1870 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:04.140000 audit[1870]: AVC avc: denied { bpf } for pid=1870 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:04.140000 audit[1870]: AVC avc: denied { bpf } for pid=1870 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:04.140000 audit: BPF prog-id=75 op=LOAD Mar 17 18:45:04.140000 audit[1870]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000197770 a2=78 a3=c000325cd8 items=0 ppid=1739 pid=1870 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:45:04.140000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3061346161343364653935303030666237383739653362623835393963 Mar 17 18:45:04.140000 audit: BPF prog-id=75 op=UNLOAD Mar 17 18:45:04.140000 audit: BPF prog-id=74 op=UNLOAD Mar 17 18:45:04.140000 audit[1870]: AVC avc: denied { bpf } for pid=1870 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:04.140000 audit[1870]: AVC avc: denied { bpf } for pid=1870 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:04.140000 audit[1870]: AVC avc: denied { bpf } for pid=1870 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:04.140000 audit[1870]: AVC avc: denied { perfmon } for pid=1870 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:04.140000 audit[1870]: AVC avc: denied { perfmon } for pid=1870 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:04.140000 audit[1870]: AVC avc: denied { perfmon } for pid=1870 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:04.140000 audit[1870]: AVC avc: denied { perfmon } for pid=1870 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:04.140000 audit[1870]: AVC avc: denied { perfmon } for pid=1870 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:04.140000 audit[1870]: AVC avc: denied { bpf } for pid=1870 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:04.140000 audit[1870]: AVC avc: denied { bpf } for pid=1870 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:04.140000 audit: BPF prog-id=76 op=LOAD Mar 17 18:45:04.140000 audit[1870]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000197c30 a2=78 a3=c0004120e8 items=0 ppid=1739 pid=1870 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:45:04.140000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3061346161343364653935303030666237383739653362623835393963 Mar 17 18:45:04.144854 systemd[1]: Started cri-containerd-fe6b546d38adbc419049e9f546a7bca7d39dac3eb1c4a197abb58c6f51b33133.scope. Mar 17 18:45:04.153000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:04.153000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:04.153000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:04.153000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:04.153000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:04.153000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:04.153000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:04.153000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:04.153000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:04.153000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:04.153000 audit: BPF prog-id=77 op=LOAD Mar 17 18:45:04.154000 audit[1894]: AVC avc: denied { bpf } for pid=1894 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:04.154000 audit[1894]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000145c48 a2=10 a3=1c items=0 ppid=1777 pid=1894 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:45:04.154000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6665366235343664333861646263343139303439653966353436613762 Mar 17 18:45:04.154000 audit[1894]: AVC avc: denied { perfmon } for pid=1894 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:04.154000 audit[1894]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001456b0 a2=3c a3=8 items=0 ppid=1777 pid=1894 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:45:04.154000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6665366235343664333861646263343139303439653966353436613762 Mar 17 18:45:04.154000 audit[1894]: AVC avc: denied { bpf } for pid=1894 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:04.154000 audit[1894]: AVC avc: denied { bpf } for pid=1894 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:04.154000 audit[1894]: AVC avc: denied { bpf } for pid=1894 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:04.154000 audit[1894]: AVC avc: denied { perfmon } for pid=1894 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:04.154000 audit[1894]: AVC avc: denied { perfmon } for pid=1894 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:04.154000 audit[1894]: AVC avc: denied { perfmon } for pid=1894 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:04.154000 audit[1894]: AVC avc: denied { perfmon } for pid=1894 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:04.154000 audit[1894]: AVC avc: denied { perfmon } for pid=1894 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:04.154000 audit[1894]: AVC avc: denied { bpf } for pid=1894 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:04.154000 audit[1894]: AVC avc: denied { bpf } for pid=1894 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:04.154000 audit: BPF prog-id=78 op=LOAD Mar 17 18:45:04.154000 audit[1894]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001459d8 a2=78 a3=c0001d5bb0 items=0 ppid=1777 pid=1894 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:45:04.154000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6665366235343664333861646263343139303439653966353436613762 Mar 17 18:45:04.154000 audit[1894]: AVC avc: denied { bpf } for pid=1894 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:04.154000 audit[1894]: AVC avc: denied { bpf } for pid=1894 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:04.154000 audit[1894]: AVC avc: denied { perfmon } for pid=1894 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:04.154000 audit[1894]: AVC avc: denied { perfmon } for pid=1894 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:04.154000 audit[1894]: AVC avc: denied { perfmon } for pid=1894 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:04.154000 audit[1894]: AVC avc: denied { perfmon } for pid=1894 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:04.154000 audit[1894]: AVC avc: denied { perfmon } for pid=1894 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:04.154000 audit[1894]: AVC avc: denied { bpf } for pid=1894 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:04.154000 audit[1894]: AVC avc: denied { bpf } for pid=1894 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:04.154000 audit: BPF prog-id=79 op=LOAD Mar 17 18:45:04.154000 audit[1894]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000145770 a2=78 a3=c0001d5bf8 items=0 ppid=1777 pid=1894 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:45:04.154000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6665366235343664333861646263343139303439653966353436613762 Mar 17 18:45:04.154000 audit: BPF prog-id=79 op=UNLOAD Mar 17 18:45:04.154000 audit: BPF prog-id=78 op=UNLOAD Mar 17 18:45:04.154000 audit[1894]: AVC avc: denied { bpf } for pid=1894 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:04.154000 audit[1894]: AVC avc: denied { bpf } for pid=1894 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:04.154000 audit[1894]: AVC avc: denied { bpf } for pid=1894 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:04.154000 audit[1894]: AVC avc: denied { perfmon } for pid=1894 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:04.154000 audit[1894]: AVC avc: denied { perfmon } for pid=1894 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:04.154000 audit[1894]: AVC avc: denied { perfmon } for pid=1894 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:04.154000 audit[1894]: AVC avc: denied { perfmon } for pid=1894 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:04.154000 audit[1894]: AVC avc: denied { perfmon } for pid=1894 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:04.154000 audit[1894]: AVC avc: denied { bpf } for pid=1894 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:04.154000 audit[1894]: AVC avc: denied { bpf } for pid=1894 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:04.154000 audit: BPF prog-id=80 op=LOAD Mar 17 18:45:04.154000 audit[1894]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000145c30 a2=78 a3=c0003b6008 items=0 ppid=1777 pid=1894 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:45:04.154000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6665366235343664333861646263343139303439653966353436613762 Mar 17 18:45:04.165609 env[1203]: time="2025-03-17T18:45:04.165570993Z" level=info msg="StartContainer for \"0a4aa43de95000fb7879e3bb8599c3b77301d07d4527e714d69c5a7c483e7a79\" returns successfully" Mar 17 18:45:04.173364 kubelet[1698]: E0317 18:45:04.173333 1698 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Mar 17 18:45:04.180641 env[1203]: time="2025-03-17T18:45:04.180598379Z" level=info msg="StartContainer for \"fe6b546d38adbc419049e9f546a7bca7d39dac3eb1c4a197abb58c6f51b33133\" returns successfully" Mar 17 18:45:04.192079 env[1203]: time="2025-03-17T18:45:04.192031857Z" level=info msg="CreateContainer within sandbox \"3928f0238c27a86c917676f6a4f96a91cec9f5f405845b2a771444312dc88a9c\" for &ContainerMetadata{Name:kube-scheduler,Attempt:0,} returns container id \"bccae5897d86c79e81e9bf9c3a4ce80ad95aa7c26b7f06bf4107b17565776fbf\"" Mar 17 18:45:04.192538 env[1203]: time="2025-03-17T18:45:04.192517487Z" level=info msg="StartContainer for \"bccae5897d86c79e81e9bf9c3a4ce80ad95aa7c26b7f06bf4107b17565776fbf\"" Mar 17 18:45:04.207766 systemd[1]: Started cri-containerd-bccae5897d86c79e81e9bf9c3a4ce80ad95aa7c26b7f06bf4107b17565776fbf.scope. Mar 17 18:45:04.221000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:04.221000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:04.221000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:04.221000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:04.221000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:04.221000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:04.221000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:04.221000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:04.221000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:04.221000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:04.221000 audit: BPF prog-id=81 op=LOAD Mar 17 18:45:04.222000 audit[1944]: AVC avc: denied { bpf } for pid=1944 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:04.222000 audit[1944]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c00011fc48 a2=10 a3=1c items=0 ppid=1773 pid=1944 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:45:04.222000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6263636165353839376438366337396538316539626639633361346365 Mar 17 18:45:04.222000 audit[1944]: AVC avc: denied { perfmon } for pid=1944 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:04.222000 audit[1944]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c00011f6b0 a2=3c a3=8 items=0 ppid=1773 pid=1944 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:45:04.222000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6263636165353839376438366337396538316539626639633361346365 Mar 17 18:45:04.222000 audit[1944]: AVC avc: denied { bpf } for pid=1944 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:04.222000 audit[1944]: AVC avc: denied { bpf } for pid=1944 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:04.222000 audit[1944]: AVC avc: denied { bpf } for pid=1944 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:04.222000 audit[1944]: AVC avc: denied { perfmon } for pid=1944 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:04.222000 audit[1944]: AVC avc: denied { perfmon } for pid=1944 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:04.222000 audit[1944]: AVC avc: denied { perfmon } for pid=1944 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:04.222000 audit[1944]: AVC avc: denied { perfmon } for pid=1944 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:04.222000 audit[1944]: AVC avc: denied { perfmon } for pid=1944 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:04.222000 audit[1944]: AVC avc: denied { bpf } for pid=1944 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:04.222000 audit[1944]: AVC avc: denied { bpf } for pid=1944 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:04.222000 audit: BPF prog-id=82 op=LOAD Mar 17 18:45:04.222000 audit[1944]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c00011f9d8 a2=78 a3=c0003e09a0 items=0 ppid=1773 pid=1944 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:45:04.222000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6263636165353839376438366337396538316539626639633361346365 Mar 17 18:45:04.222000 audit[1944]: AVC avc: denied { bpf } for pid=1944 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:04.222000 audit[1944]: AVC avc: denied { bpf } for pid=1944 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:04.222000 audit[1944]: AVC avc: denied { perfmon } for pid=1944 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:04.222000 audit[1944]: AVC avc: denied { perfmon } for pid=1944 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:04.222000 audit[1944]: AVC avc: denied { perfmon } for pid=1944 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:04.222000 audit[1944]: AVC avc: denied { perfmon } for pid=1944 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:04.222000 audit[1944]: AVC avc: denied { perfmon } for pid=1944 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:04.222000 audit[1944]: AVC avc: denied { bpf } for pid=1944 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:04.222000 audit[1944]: AVC avc: denied { bpf } for pid=1944 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:04.222000 audit: BPF prog-id=83 op=LOAD Mar 17 18:45:04.222000 audit[1944]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c00011f770 a2=78 a3=c0003e09e8 items=0 ppid=1773 pid=1944 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:45:04.222000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6263636165353839376438366337396538316539626639633361346365 Mar 17 18:45:04.222000 audit: BPF prog-id=83 op=UNLOAD Mar 17 18:45:04.222000 audit: BPF prog-id=82 op=UNLOAD Mar 17 18:45:04.222000 audit[1944]: AVC avc: denied { bpf } for pid=1944 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:04.222000 audit[1944]: AVC avc: denied { bpf } for pid=1944 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:04.222000 audit[1944]: AVC avc: denied { bpf } for pid=1944 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:04.222000 audit[1944]: AVC avc: denied { perfmon } for pid=1944 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:04.222000 audit[1944]: AVC avc: denied { perfmon } for pid=1944 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:04.222000 audit[1944]: AVC avc: denied { perfmon } for pid=1944 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:04.222000 audit[1944]: AVC avc: denied { perfmon } for pid=1944 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:04.222000 audit[1944]: AVC avc: denied { perfmon } for pid=1944 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:04.222000 audit[1944]: AVC avc: denied { bpf } for pid=1944 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:04.222000 audit[1944]: AVC avc: denied { bpf } for pid=1944 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:04.222000 audit: BPF prog-id=84 op=LOAD Mar 17 18:45:04.222000 audit[1944]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c00011fc30 a2=78 a3=c0003e0df8 items=0 ppid=1773 pid=1944 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:45:04.222000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6263636165353839376438366337396538316539626639633361346365 Mar 17 18:45:04.250941 env[1203]: time="2025-03-17T18:45:04.250872703Z" level=info msg="StartContainer for \"bccae5897d86c79e81e9bf9c3a4ce80ad95aa7c26b7f06bf4107b17565776fbf\" returns successfully" Mar 17 18:45:05.090000 audit[1905]: AVC avc: denied { watch } for pid=1905 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="vda9" ino=8236 scontext=system_u:system_r:svirt_lxc_net_t:s0:c311,c316 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Mar 17 18:45:05.090000 audit[1905]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=41 a1=c005b341b0 a2=fc6 a3=0 items=0 ppid=1777 pid=1905 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c311,c316 key=(null) Mar 17 18:45:05.090000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E313130002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75626572 Mar 17 18:45:05.090000 audit[1905]: AVC avc: denied { watch } for pid=1905 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=8230 scontext=system_u:system_r:svirt_lxc_net_t:s0:c311,c316 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Mar 17 18:45:05.090000 audit[1905]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=41 a1=c0066999e0 a2=fc6 a3=0 items=0 ppid=1777 pid=1905 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c311,c316 key=(null) Mar 17 18:45:05.090000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E313130002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75626572 Mar 17 18:45:05.090000 audit[1905]: AVC avc: denied { watch } for pid=1905 comm="kube-apiserver" path="/etc/kubernetes/pki/apiserver.crt" dev="vda9" ino=8232 scontext=system_u:system_r:svirt_lxc_net_t:s0:c311,c316 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Mar 17 18:45:05.090000 audit[1905]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=41 a1=c005b342d0 a2=fc6 a3=0 items=0 ppid=1777 pid=1905 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c311,c316 key=(null) Mar 17 18:45:05.090000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E313130002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75626572 Mar 17 18:45:05.097000 audit[1905]: AVC avc: denied { watch } for pid=1905 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-client.crt" dev="vda9" ino=8238 scontext=system_u:system_r:svirt_lxc_net_t:s0:c311,c316 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Mar 17 18:45:05.097000 audit[1905]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=4d a1=c004148c30 a2=fc6 a3=0 items=0 ppid=1777 pid=1905 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c311,c316 key=(null) Mar 17 18:45:05.097000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E313130002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75626572 Mar 17 18:45:05.098000 audit[1905]: AVC avc: denied { watch } for pid=1905 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=8230 scontext=system_u:system_r:svirt_lxc_net_t:s0:c311,c316 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Mar 17 18:45:05.098000 audit[1905]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=4d a1=c0072db600 a2=fc6 a3=0 items=0 ppid=1777 pid=1905 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c311,c316 key=(null) Mar 17 18:45:05.098000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E313130002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75626572 Mar 17 18:45:05.099000 audit[1905]: AVC avc: denied { watch } for pid=1905 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="vda9" ino=8236 scontext=system_u:system_r:svirt_lxc_net_t:s0:c311,c316 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Mar 17 18:45:05.099000 audit[1905]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=4d a1=c004148cf0 a2=fc6 a3=0 items=0 ppid=1777 pid=1905 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c311,c316 key=(null) Mar 17 18:45:05.099000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E313130002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75626572 Mar 17 18:45:05.158109 kubelet[1698]: E0317 18:45:05.158055 1698 nodelease.go:49] "Failed to get node when trying to set owner ref to the node lease" err="nodes \"localhost\" not found" node="localhost" Mar 17 18:45:05.178554 kubelet[1698]: E0317 18:45:05.178523 1698 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Mar 17 18:45:05.179972 kubelet[1698]: E0317 18:45:05.179948 1698 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Mar 17 18:45:05.259473 kubelet[1698]: I0317 18:45:05.259431 1698 kubelet_node_status.go:73] "Attempting to register node" node="localhost" Mar 17 18:45:05.265637 kubelet[1698]: I0317 18:45:05.265577 1698 kubelet_node_status.go:76] "Successfully registered node" node="localhost" Mar 17 18:45:05.275497 kubelet[1698]: E0317 18:45:05.275463 1698 kubelet_node_status.go:462] "Error getting the current node from lister" err="node \"localhost\" not found" Mar 17 18:45:05.376062 kubelet[1698]: E0317 18:45:05.375940 1698 kubelet_node_status.go:462] "Error getting the current node from lister" err="node \"localhost\" not found" Mar 17 18:45:05.456000 audit[1881]: AVC avc: denied { watch } for pid=1881 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="vda9" ino=8236 scontext=system_u:system_r:svirt_lxc_net_t:s0:c117,c888 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Mar 17 18:45:05.456000 audit[1881]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=6 a1=c000b1a000 a2=fc6 a3=0 items=0 ppid=1739 pid=1881 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c117,c888 key=(null) Mar 17 18:45:05.456000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Mar 17 18:45:05.456000 audit[1881]: AVC avc: denied { watch } for pid=1881 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=8230 scontext=system_u:system_r:svirt_lxc_net_t:s0:c117,c888 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Mar 17 18:45:05.456000 audit[1881]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=6 a1=c0004a6a00 a2=fc6 a3=0 items=0 ppid=1739 pid=1881 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c117,c888 key=(null) Mar 17 18:45:05.456000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Mar 17 18:45:05.476558 kubelet[1698]: E0317 18:45:05.476506 1698 kubelet_node_status.go:462] "Error getting the current node from lister" err="node \"localhost\" not found" Mar 17 18:45:05.576814 kubelet[1698]: E0317 18:45:05.576771 1698 kubelet_node_status.go:462] "Error getting the current node from lister" err="node \"localhost\" not found" Mar 17 18:45:05.677512 kubelet[1698]: E0317 18:45:05.677419 1698 kubelet_node_status.go:462] "Error getting the current node from lister" err="node \"localhost\" not found" Mar 17 18:45:05.778036 kubelet[1698]: E0317 18:45:05.777991 1698 kubelet_node_status.go:462] "Error getting the current node from lister" err="node \"localhost\" not found" Mar 17 18:45:05.878696 kubelet[1698]: E0317 18:45:05.878619 1698 kubelet_node_status.go:462] "Error getting the current node from lister" err="node \"localhost\" not found" Mar 17 18:45:05.979250 kubelet[1698]: E0317 18:45:05.979204 1698 kubelet_node_status.go:462] "Error getting the current node from lister" err="node \"localhost\" not found" Mar 17 18:45:06.079832 kubelet[1698]: E0317 18:45:06.079776 1698 kubelet_node_status.go:462] "Error getting the current node from lister" err="node \"localhost\" not found" Mar 17 18:45:06.180105 kubelet[1698]: E0317 18:45:06.180052 1698 kubelet_node_status.go:462] "Error getting the current node from lister" err="node \"localhost\" not found" Mar 17 18:45:06.182330 kubelet[1698]: E0317 18:45:06.182299 1698 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Mar 17 18:45:06.182769 kubelet[1698]: E0317 18:45:06.182729 1698 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Mar 17 18:45:07.139103 kubelet[1698]: I0317 18:45:07.139059 1698 apiserver.go:52] "Watching apiserver" Mar 17 18:45:07.142927 systemd[1]: Reloading. Mar 17 18:45:07.152183 kubelet[1698]: I0317 18:45:07.152153 1698 desired_state_of_world_populator.go:157] "Finished populating initial desired state of world" Mar 17 18:45:07.192196 kubelet[1698]: E0317 18:45:07.192162 1698 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Mar 17 18:45:07.203723 /usr/lib/systemd/system-generators/torcx-generator[2000]: time="2025-03-17T18:45:07Z" level=debug msg="common configuration parsed" base_dir=/var/lib/torcx/ conf_dir=/etc/torcx/ run_dir=/run/torcx/ store_paths="[/usr/share/torcx/store /usr/share/oem/torcx/store/3510.3.7 /usr/share/oem/torcx/store /var/lib/torcx/store/3510.3.7 /var/lib/torcx/store]" Mar 17 18:45:07.203750 /usr/lib/systemd/system-generators/torcx-generator[2000]: time="2025-03-17T18:45:07Z" level=info msg="torcx already run" Mar 17 18:45:07.262285 systemd[1]: /usr/lib/systemd/system/locksmithd.service:8: Unit uses CPUShares=; please use CPUWeight= instead. Support for CPUShares= will be removed soon. Mar 17 18:45:07.262301 systemd[1]: /usr/lib/systemd/system/locksmithd.service:9: Unit uses MemoryLimit=; please use MemoryMax= instead. Support for MemoryLimit= will be removed soon. Mar 17 18:45:07.279212 systemd[1]: /run/systemd/system/docker.socket:8: ListenStream= references a path below legacy directory /var/run/, updating /var/run/docker.sock → /run/docker.sock; please update the unit file accordingly. Mar 17 18:45:07.374095 kernel: kauditd_printk_skb: 581 callbacks suppressed Mar 17 18:45:07.374237 kernel: audit: type=1400 audit(1742237107.363:558): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:07.374257 kernel: audit: type=1400 audit(1742237107.363:559): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:07.374273 kernel: audit: type=1400 audit(1742237107.363:560): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:07.363000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:07.363000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:07.363000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:07.363000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:07.377354 kernel: audit: type=1400 audit(1742237107.363:561): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:07.377416 kernel: audit: type=1400 audit(1742237107.363:562): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:07.363000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:07.363000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:07.383332 kernel: audit: type=1400 audit(1742237107.363:563): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:07.383373 kernel: audit: type=1400 audit(1742237107.363:564): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:07.363000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:07.386303 kernel: audit: audit_backlog=65 > audit_backlog_limit=64 Mar 17 18:45:07.386347 kernel: audit: type=1400 audit(1742237107.363:565): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:07.363000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:07.387160 kernel: audit: audit_lost=1 audit_rate_limit=0 audit_backlog_limit=64 Mar 17 18:45:07.363000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:07.367000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:07.367000 audit: BPF prog-id=85 op=LOAD Mar 17 18:45:07.367000 audit: BPF prog-id=46 op=UNLOAD Mar 17 18:45:07.367000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:07.367000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:07.367000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:07.367000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:07.367000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:07.367000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:07.367000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:07.367000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:07.370000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:07.370000 audit: BPF prog-id=86 op=LOAD Mar 17 18:45:07.370000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:07.370000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:07.370000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:07.370000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:07.370000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:07.370000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:07.370000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:07.370000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:07.373000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:07.373000 audit: BPF prog-id=87 op=LOAD Mar 17 18:45:07.373000 audit: BPF prog-id=47 op=UNLOAD Mar 17 18:45:07.373000 audit: BPF prog-id=48 op=UNLOAD Mar 17 18:45:07.374000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:07.374000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:07.374000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:07.374000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:07.374000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:07.374000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:07.374000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:07.374000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:07.374000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:07.376000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:07.376000 audit: BPF prog-id=88 op=LOAD Mar 17 18:45:07.376000 audit: BPF prog-id=49 op=UNLOAD Mar 17 18:45:07.377000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:07.377000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:07.377000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:07.377000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:07.377000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:07.377000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:07.377000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:07.377000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:07.377000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:07.379000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:07.379000 audit: BPF prog-id=89 op=LOAD Mar 17 18:45:07.379000 audit: BPF prog-id=61 op=UNLOAD Mar 17 18:45:07.380000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:07.380000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:07.380000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:07.380000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:07.380000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:07.380000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:07.380000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:07.380000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:07.380000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:07.382000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:07.382000 audit: BPF prog-id=90 op=LOAD Mar 17 18:45:07.382000 audit: BPF prog-id=50 op=UNLOAD Mar 17 18:45:07.383000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:07.383000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:07.386000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:07.390000 audit: BPF prog-id=81 op=UNLOAD Mar 17 18:45:07.390000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:07.390000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:07.390000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:07.390000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:07.390000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:07.390000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:07.390000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:07.390000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:07.390000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:07.390000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:07.390000 audit: BPF prog-id=92 op=LOAD Mar 17 18:45:07.390000 audit: BPF prog-id=51 op=UNLOAD Mar 17 18:45:07.391000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:07.391000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:07.391000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:07.391000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:07.391000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:07.391000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:07.391000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:07.391000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:07.391000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:07.391000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:07.391000 audit: BPF prog-id=93 op=LOAD Mar 17 18:45:07.391000 audit: BPF prog-id=52 op=UNLOAD Mar 17 18:45:07.391000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:07.391000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:07.391000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:07.391000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:07.391000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:07.391000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:07.391000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:07.391000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:07.391000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:07.391000 audit: BPF prog-id=94 op=LOAD Mar 17 18:45:07.391000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:07.391000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:07.391000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:07.391000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:07.391000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:07.391000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:07.391000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:07.391000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:07.392000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:07.392000 audit: BPF prog-id=95 op=LOAD Mar 17 18:45:07.392000 audit: BPF prog-id=53 op=UNLOAD Mar 17 18:45:07.392000 audit: BPF prog-id=54 op=UNLOAD Mar 17 18:45:07.392000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:07.392000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:07.392000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:07.392000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:07.392000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:07.392000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:07.392000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:07.392000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:07.392000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:07.392000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:07.392000 audit: BPF prog-id=96 op=LOAD Mar 17 18:45:07.392000 audit: BPF prog-id=55 op=UNLOAD Mar 17 18:45:07.393000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:07.393000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:07.393000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:07.393000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:07.393000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:07.393000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:07.393000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:07.393000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:07.393000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:07.393000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:07.393000 audit: BPF prog-id=97 op=LOAD Mar 17 18:45:07.393000 audit: BPF prog-id=65 op=UNLOAD Mar 17 18:45:07.393000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:07.393000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:07.393000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:07.393000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:07.393000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:07.393000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:07.393000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:07.393000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:07.393000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:07.393000 audit: BPF prog-id=98 op=LOAD Mar 17 18:45:07.393000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:07.393000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:07.393000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:07.393000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:07.393000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:07.393000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:07.393000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:07.393000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:07.393000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:07.393000 audit: BPF prog-id=99 op=LOAD Mar 17 18:45:07.393000 audit: BPF prog-id=56 op=UNLOAD Mar 17 18:45:07.393000 audit: BPF prog-id=57 op=UNLOAD Mar 17 18:45:07.394000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:07.394000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:07.394000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:07.394000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:07.394000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:07.394000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:07.394000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:07.394000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:07.394000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:07.394000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:07.394000 audit: BPF prog-id=100 op=LOAD Mar 17 18:45:07.394000 audit: BPF prog-id=73 op=UNLOAD Mar 17 18:45:07.395000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:07.395000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:07.395000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:07.395000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:07.395000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:07.395000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:07.395000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:07.395000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:07.395000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:07.395000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:07.395000 audit: BPF prog-id=101 op=LOAD Mar 17 18:45:07.395000 audit: BPF prog-id=69 op=UNLOAD Mar 17 18:45:07.395000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:07.395000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:07.395000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:07.395000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:07.395000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:07.395000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:07.395000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:07.395000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:07.395000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:07.395000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:07.395000 audit: BPF prog-id=102 op=LOAD Mar 17 18:45:07.395000 audit: BPF prog-id=77 op=UNLOAD Mar 17 18:45:07.396000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:07.396000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:07.396000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:07.396000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:07.396000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:07.396000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:07.396000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:07.396000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:07.396000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:07.396000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:07.396000 audit: BPF prog-id=103 op=LOAD Mar 17 18:45:07.396000 audit: BPF prog-id=58 op=UNLOAD Mar 17 18:45:07.396000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:07.396000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:07.396000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:07.396000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:07.396000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:07.396000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:07.396000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:07.396000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:07.396000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:07.396000 audit: BPF prog-id=104 op=LOAD Mar 17 18:45:07.396000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:07.396000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:07.396000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:07.396000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:07.396000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:07.396000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:07.396000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:07.396000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:07.396000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:07.396000 audit: BPF prog-id=105 op=LOAD Mar 17 18:45:07.396000 audit: BPF prog-id=59 op=UNLOAD Mar 17 18:45:07.396000 audit: BPF prog-id=60 op=UNLOAD Mar 17 18:45:07.407438 systemd[1]: Stopping kubelet.service... Mar 17 18:45:07.426899 systemd[1]: kubelet.service: Deactivated successfully. Mar 17 18:45:07.427050 systemd[1]: Stopped kubelet.service. Mar 17 18:45:07.426000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:45:07.428450 systemd[1]: Starting kubelet.service... Mar 17 18:45:07.508357 systemd[1]: Started kubelet.service. Mar 17 18:45:07.508000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:45:07.556247 kubelet[2045]: Flag --container-runtime-endpoint has been deprecated, This parameter should be set via the config file specified by the Kubelet's --config flag. See https://kubernetes.io/docs/tasks/administer-cluster/kubelet-config-file/ for more information. Mar 17 18:45:07.556247 kubelet[2045]: Flag --pod-infra-container-image has been deprecated, will be removed in a future release. Image garbage collector will get sandbox image information from CRI. Mar 17 18:45:07.556247 kubelet[2045]: Flag --volume-plugin-dir has been deprecated, This parameter should be set via the config file specified by the Kubelet's --config flag. See https://kubernetes.io/docs/tasks/administer-cluster/kubelet-config-file/ for more information. Mar 17 18:45:07.556845 kubelet[2045]: I0317 18:45:07.556285 2045 server.go:205] "--pod-infra-container-image will not be pruned by the image garbage collector in kubelet and should also be set in the remote runtime" Mar 17 18:45:07.560150 kubelet[2045]: I0317 18:45:07.560118 2045 server.go:484] "Kubelet version" kubeletVersion="v1.30.1" Mar 17 18:45:07.560150 kubelet[2045]: I0317 18:45:07.560144 2045 server.go:486] "Golang settings" GOGC="" GOMAXPROCS="" GOTRACEBACK="" Mar 17 18:45:07.560417 kubelet[2045]: I0317 18:45:07.560394 2045 server.go:927] "Client rotation is on, will bootstrap in background" Mar 17 18:45:07.561670 kubelet[2045]: I0317 18:45:07.561622 2045 certificate_store.go:130] Loading cert/key pair from "/var/lib/kubelet/pki/kubelet-client-current.pem". Mar 17 18:45:07.562858 kubelet[2045]: I0317 18:45:07.562823 2045 dynamic_cafile_content.go:157] "Starting controller" name="client-ca-bundle::/etc/kubernetes/pki/ca.crt" Mar 17 18:45:07.573027 kubelet[2045]: I0317 18:45:07.572993 2045 server.go:742] "--cgroups-per-qos enabled, but --cgroup-root was not specified. defaulting to /" Mar 17 18:45:07.573202 kubelet[2045]: I0317 18:45:07.573167 2045 container_manager_linux.go:265] "Container manager verified user specified cgroup-root exists" cgroupRoot=[] Mar 17 18:45:07.573348 kubelet[2045]: I0317 18:45:07.573195 2045 container_manager_linux.go:270] "Creating Container Manager object based on Node Config" nodeConfig={"NodeName":"localhost","RuntimeCgroupsName":"","SystemCgroupsName":"","KubeletCgroupsName":"","KubeletOOMScoreAdj":-999,"ContainerRuntime":"","CgroupsPerQOS":true,"CgroupRoot":"/","CgroupDriver":"systemd","KubeletRootDir":"/var/lib/kubelet","ProtectKernelDefaults":false,"KubeReservedCgroupName":"","SystemReservedCgroupName":"","ReservedSystemCPUs":{},"EnforceNodeAllocatable":{"pods":{}},"KubeReserved":null,"SystemReserved":null,"HardEvictionThresholds":[{"Signal":"nodefs.available","Operator":"LessThan","Value":{"Quantity":null,"Percentage":0.1},"GracePeriod":0,"MinReclaim":null},{"Signal":"nodefs.inodesFree","Operator":"LessThan","Value":{"Quantity":null,"Percentage":0.05},"GracePeriod":0,"MinReclaim":null},{"Signal":"imagefs.available","Operator":"LessThan","Value":{"Quantity":null,"Percentage":0.15},"GracePeriod":0,"MinReclaim":null},{"Signal":"imagefs.inodesFree","Operator":"LessThan","Value":{"Quantity":null,"Percentage":0.05},"GracePeriod":0,"MinReclaim":null},{"Signal":"memory.available","Operator":"LessThan","Value":{"Quantity":"100Mi","Percentage":0},"GracePeriod":0,"MinReclaim":null}],"QOSReserved":{},"CPUManagerPolicy":"none","CPUManagerPolicyOptions":null,"TopologyManagerScope":"container","CPUManagerReconcilePeriod":10000000000,"ExperimentalMemoryManagerPolicy":"None","ExperimentalMemoryManagerReservedMemory":null,"PodPidsLimit":-1,"EnforceCPULimits":true,"CPUCFSQuotaPeriod":100000000,"TopologyManagerPolicy":"none","TopologyManagerPolicyOptions":null} Mar 17 18:45:07.573424 kubelet[2045]: I0317 18:45:07.573357 2045 topology_manager.go:138] "Creating topology manager with none policy" Mar 17 18:45:07.573424 kubelet[2045]: I0317 18:45:07.573366 2045 container_manager_linux.go:301] "Creating device plugin manager" Mar 17 18:45:07.573424 kubelet[2045]: I0317 18:45:07.573400 2045 state_mem.go:36] "Initialized new in-memory state store" Mar 17 18:45:07.573493 kubelet[2045]: I0317 18:45:07.573479 2045 kubelet.go:400] "Attempting to sync node with API server" Mar 17 18:45:07.573493 kubelet[2045]: I0317 18:45:07.573488 2045 kubelet.go:301] "Adding static pod path" path="/etc/kubernetes/manifests" Mar 17 18:45:07.573533 kubelet[2045]: I0317 18:45:07.573505 2045 kubelet.go:312] "Adding apiserver pod source" Mar 17 18:45:07.573533 kubelet[2045]: I0317 18:45:07.573518 2045 apiserver.go:42] "Waiting for node sync before watching apiserver pods" Mar 17 18:45:07.574535 kubelet[2045]: I0317 18:45:07.574513 2045 kuberuntime_manager.go:261] "Container runtime initialized" containerRuntime="containerd" version="1.6.16" apiVersion="v1" Mar 17 18:45:07.574761 kubelet[2045]: I0317 18:45:07.574747 2045 kubelet.go:815] "Not starting ClusterTrustBundle informer because we are in static kubelet mode" Mar 17 18:45:07.575179 kubelet[2045]: I0317 18:45:07.575167 2045 server.go:1264] "Started kubelet" Mar 17 18:45:07.576000 audit[2045]: AVC avc: denied { mac_admin } for pid=2045 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:07.576000 audit: SELINUX_ERR op=setxattr invalid_context="system_u:object_r:container_file_t:s0" Mar 17 18:45:07.576000 audit[2045]: SYSCALL arch=c000003e syscall=188 success=no exit=-22 a0=c00062ade0 a1=c000c50d08 a2=c00062adb0 a3=25 items=0 ppid=1 pid=2045 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/usr/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:45:07.576000 audit: PROCTITLE proctitle=2F7573722F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 Mar 17 18:45:07.576000 audit[2045]: AVC avc: denied { mac_admin } for pid=2045 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:07.576000 audit: SELINUX_ERR op=setxattr invalid_context="system_u:object_r:container_file_t:s0" Mar 17 18:45:07.576000 audit[2045]: SYSCALL arch=c000003e syscall=188 success=no exit=-22 a0=c000c68b20 a1=c000c50d20 a2=c00062ae70 a3=25 items=0 ppid=1 pid=2045 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/usr/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:45:07.576000 audit: PROCTITLE proctitle=2F7573722F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 Mar 17 18:45:07.577937 kubelet[2045]: I0317 18:45:07.577327 2045 kubelet.go:1419] "Unprivileged containerized plugins might not work, could not set selinux context on plugin registration dir" path="/var/lib/kubelet/plugins_registry" err="setxattr /var/lib/kubelet/plugins_registry: invalid argument" Mar 17 18:45:07.577937 kubelet[2045]: I0317 18:45:07.577367 2045 kubelet.go:1423] "Unprivileged containerized plugins might not work, could not set selinux context on plugins dir" path="/var/lib/kubelet/plugins" err="setxattr /var/lib/kubelet/plugins: invalid argument" Mar 17 18:45:07.577937 kubelet[2045]: I0317 18:45:07.577396 2045 fs_resource_analyzer.go:67] "Starting FS ResourceAnalyzer" Mar 17 18:45:07.582199 kubelet[2045]: I0317 18:45:07.582173 2045 volume_manager.go:291] "Starting Kubelet Volume Manager" Mar 17 18:45:07.582326 kubelet[2045]: I0317 18:45:07.582024 2045 server.go:163] "Starting to listen" address="0.0.0.0" port=10250 Mar 17 18:45:07.583282 kubelet[2045]: I0317 18:45:07.583252 2045 server.go:455] "Adding debug handlers to kubelet server" Mar 17 18:45:07.584020 kubelet[2045]: I0317 18:45:07.583961 2045 ratelimit.go:55] "Setting rate limiting for endpoint" service="podresources" qps=100 burstTokens=10 Mar 17 18:45:07.584149 kubelet[2045]: I0317 18:45:07.584123 2045 server.go:227] "Starting to serve the podresources API" endpoint="unix:/var/lib/kubelet/pod-resources/kubelet.sock" Mar 17 18:45:07.585120 kubelet[2045]: I0317 18:45:07.585104 2045 desired_state_of_world_populator.go:149] "Desired state populator starts to run" Mar 17 18:45:07.585242 kubelet[2045]: I0317 18:45:07.585231 2045 reconciler.go:26] "Reconciler: start to sync state" Mar 17 18:45:07.587673 kubelet[2045]: I0317 18:45:07.587067 2045 kubelet_network_linux.go:50] "Initialized iptables rules." protocol="IPv4" Mar 17 18:45:07.587913 kubelet[2045]: I0317 18:45:07.587894 2045 factory.go:221] Registration of the systemd container factory successfully Mar 17 18:45:07.587992 kubelet[2045]: I0317 18:45:07.587974 2045 factory.go:219] Registration of the crio container factory failed: Get "http://%2Fvar%2Frun%2Fcrio%2Fcrio.sock/info": dial unix /var/run/crio/crio.sock: connect: no such file or directory Mar 17 18:45:07.589607 kubelet[2045]: I0317 18:45:07.589585 2045 factory.go:221] Registration of the containerd container factory successfully Mar 17 18:45:07.593672 kubelet[2045]: E0317 18:45:07.593605 2045 kubelet.go:1467] "Image garbage collection failed once. Stats initialization may not have completed yet" err="invalid capacity 0 on image filesystem" Mar 17 18:45:07.594704 kubelet[2045]: I0317 18:45:07.594467 2045 kubelet_network_linux.go:50] "Initialized iptables rules." protocol="IPv6" Mar 17 18:45:07.594704 kubelet[2045]: I0317 18:45:07.594502 2045 status_manager.go:217] "Starting to sync pod status with apiserver" Mar 17 18:45:07.594704 kubelet[2045]: I0317 18:45:07.594521 2045 kubelet.go:2337] "Starting kubelet main sync loop" Mar 17 18:45:07.594704 kubelet[2045]: E0317 18:45:07.594565 2045 kubelet.go:2361] "Skipping pod synchronization" err="[container runtime status check may not have completed yet, PLEG is not healthy: pleg has yet to be successful]" Mar 17 18:45:07.618727 kubelet[2045]: I0317 18:45:07.618700 2045 cpu_manager.go:214] "Starting CPU manager" policy="none" Mar 17 18:45:07.618727 kubelet[2045]: I0317 18:45:07.618714 2045 cpu_manager.go:215] "Reconciling" reconcilePeriod="10s" Mar 17 18:45:07.618727 kubelet[2045]: I0317 18:45:07.618730 2045 state_mem.go:36] "Initialized new in-memory state store" Mar 17 18:45:07.618949 kubelet[2045]: I0317 18:45:07.618867 2045 state_mem.go:88] "Updated default CPUSet" cpuSet="" Mar 17 18:45:07.618949 kubelet[2045]: I0317 18:45:07.618876 2045 state_mem.go:96] "Updated CPUSet assignments" assignments={} Mar 17 18:45:07.618949 kubelet[2045]: I0317 18:45:07.618897 2045 policy_none.go:49] "None policy: Start" Mar 17 18:45:07.619464 kubelet[2045]: I0317 18:45:07.619439 2045 memory_manager.go:170] "Starting memorymanager" policy="None" Mar 17 18:45:07.619464 kubelet[2045]: I0317 18:45:07.619459 2045 state_mem.go:35] "Initializing new in-memory state store" Mar 17 18:45:07.619566 kubelet[2045]: I0317 18:45:07.619560 2045 state_mem.go:75] "Updated machine memory state" Mar 17 18:45:07.623244 kubelet[2045]: I0317 18:45:07.623225 2045 manager.go:479] "Failed to read data from checkpoint" checkpoint="kubelet_internal_checkpoint" err="checkpoint is not found" Mar 17 18:45:07.622000 audit[2045]: AVC avc: denied { mac_admin } for pid=2045 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:07.622000 audit: SELINUX_ERR op=setxattr invalid_context="system_u:object_r:container_file_t:s0" Mar 17 18:45:07.622000 audit[2045]: SYSCALL arch=c000003e syscall=188 success=no exit=-22 a0=c000feadb0 a1=c000f7fce0 a2=c000fead80 a3=25 items=0 ppid=1 pid=2045 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/usr/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:45:07.622000 audit: PROCTITLE proctitle=2F7573722F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 Mar 17 18:45:07.623685 kubelet[2045]: I0317 18:45:07.623345 2045 server.go:88] "Unprivileged containerized plugins might not work. Could not set selinux context on socket dir" path="/var/lib/kubelet/device-plugins/" err="setxattr /var/lib/kubelet/device-plugins/: invalid argument" Mar 17 18:45:07.623685 kubelet[2045]: I0317 18:45:07.623464 2045 container_log_manager.go:186] "Initializing container log rotate workers" workers=1 monitorPeriod="10s" Mar 17 18:45:07.623685 kubelet[2045]: I0317 18:45:07.623547 2045 plugin_manager.go:118] "Starting Kubelet Plugin Manager" Mar 17 18:45:07.685717 kubelet[2045]: I0317 18:45:07.685645 2045 kubelet_node_status.go:73] "Attempting to register node" node="localhost" Mar 17 18:45:07.692794 kubelet[2045]: I0317 18:45:07.692763 2045 kubelet_node_status.go:112] "Node was previously registered" node="localhost" Mar 17 18:45:07.692882 kubelet[2045]: I0317 18:45:07.692839 2045 kubelet_node_status.go:76] "Successfully registered node" node="localhost" Mar 17 18:45:07.695209 kubelet[2045]: I0317 18:45:07.695172 2045 topology_manager.go:215] "Topology Admit Handler" podUID="8af96bab0ba5b79565c43d369248d9c0" podNamespace="kube-system" podName="kube-apiserver-localhost" Mar 17 18:45:07.695347 kubelet[2045]: I0317 18:45:07.695246 2045 topology_manager.go:215] "Topology Admit Handler" podUID="23a18e2dc14f395c5f1bea711a5a9344" podNamespace="kube-system" podName="kube-controller-manager-localhost" Mar 17 18:45:07.695347 kubelet[2045]: I0317 18:45:07.695298 2045 topology_manager.go:215] "Topology Admit Handler" podUID="d79ab404294384d4bcc36fb5b5509bbb" podNamespace="kube-system" podName="kube-scheduler-localhost" Mar 17 18:45:07.701164 kubelet[2045]: E0317 18:45:07.701130 2045 kubelet.go:1928] "Failed creating a mirror pod for" err="pods \"kube-apiserver-localhost\" already exists" pod="kube-system/kube-apiserver-localhost" Mar 17 18:45:07.886239 kubelet[2045]: I0317 18:45:07.886173 2045 reconciler_common.go:247] "operationExecutor.VerifyControllerAttachedVolume started for volume \"k8s-certs\" (UniqueName: \"kubernetes.io/host-path/23a18e2dc14f395c5f1bea711a5a9344-k8s-certs\") pod \"kube-controller-manager-localhost\" (UID: \"23a18e2dc14f395c5f1bea711a5a9344\") " pod="kube-system/kube-controller-manager-localhost" Mar 17 18:45:07.886239 kubelet[2045]: I0317 18:45:07.886215 2045 reconciler_common.go:247] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kubeconfig\" (UniqueName: \"kubernetes.io/host-path/23a18e2dc14f395c5f1bea711a5a9344-kubeconfig\") pod \"kube-controller-manager-localhost\" (UID: \"23a18e2dc14f395c5f1bea711a5a9344\") " pod="kube-system/kube-controller-manager-localhost" Mar 17 18:45:07.886239 kubelet[2045]: I0317 18:45:07.886235 2045 reconciler_common.go:247] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kubeconfig\" (UniqueName: \"kubernetes.io/host-path/d79ab404294384d4bcc36fb5b5509bbb-kubeconfig\") pod \"kube-scheduler-localhost\" (UID: \"d79ab404294384d4bcc36fb5b5509bbb\") " pod="kube-system/kube-scheduler-localhost" Mar 17 18:45:07.886239 kubelet[2045]: I0317 18:45:07.886249 2045 reconciler_common.go:247] "operationExecutor.VerifyControllerAttachedVolume started for volume \"ca-certs\" (UniqueName: \"kubernetes.io/host-path/8af96bab0ba5b79565c43d369248d9c0-ca-certs\") pod \"kube-apiserver-localhost\" (UID: \"8af96bab0ba5b79565c43d369248d9c0\") " pod="kube-system/kube-apiserver-localhost" Mar 17 18:45:07.886504 kubelet[2045]: I0317 18:45:07.886264 2045 reconciler_common.go:247] "operationExecutor.VerifyControllerAttachedVolume started for volume \"ca-certs\" (UniqueName: \"kubernetes.io/host-path/23a18e2dc14f395c5f1bea711a5a9344-ca-certs\") pod \"kube-controller-manager-localhost\" (UID: \"23a18e2dc14f395c5f1bea711a5a9344\") " pod="kube-system/kube-controller-manager-localhost" Mar 17 18:45:07.886504 kubelet[2045]: I0317 18:45:07.886278 2045 reconciler_common.go:247] "operationExecutor.VerifyControllerAttachedVolume started for volume \"flexvolume-dir\" (UniqueName: \"kubernetes.io/host-path/23a18e2dc14f395c5f1bea711a5a9344-flexvolume-dir\") pod \"kube-controller-manager-localhost\" (UID: \"23a18e2dc14f395c5f1bea711a5a9344\") " pod="kube-system/kube-controller-manager-localhost" Mar 17 18:45:07.886504 kubelet[2045]: I0317 18:45:07.886293 2045 reconciler_common.go:247] "operationExecutor.VerifyControllerAttachedVolume started for volume \"usr-share-ca-certificates\" (UniqueName: \"kubernetes.io/host-path/23a18e2dc14f395c5f1bea711a5a9344-usr-share-ca-certificates\") pod \"kube-controller-manager-localhost\" (UID: \"23a18e2dc14f395c5f1bea711a5a9344\") " pod="kube-system/kube-controller-manager-localhost" Mar 17 18:45:07.886504 kubelet[2045]: I0317 18:45:07.886305 2045 reconciler_common.go:247] "operationExecutor.VerifyControllerAttachedVolume started for volume \"k8s-certs\" (UniqueName: \"kubernetes.io/host-path/8af96bab0ba5b79565c43d369248d9c0-k8s-certs\") pod \"kube-apiserver-localhost\" (UID: \"8af96bab0ba5b79565c43d369248d9c0\") " pod="kube-system/kube-apiserver-localhost" Mar 17 18:45:07.886504 kubelet[2045]: I0317 18:45:07.886331 2045 reconciler_common.go:247] "operationExecutor.VerifyControllerAttachedVolume started for volume \"usr-share-ca-certificates\" (UniqueName: \"kubernetes.io/host-path/8af96bab0ba5b79565c43d369248d9c0-usr-share-ca-certificates\") pod \"kube-apiserver-localhost\" (UID: \"8af96bab0ba5b79565c43d369248d9c0\") " pod="kube-system/kube-apiserver-localhost" Mar 17 18:45:08.001837 kubelet[2045]: E0317 18:45:08.001790 2045 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Mar 17 18:45:08.003454 kubelet[2045]: E0317 18:45:08.002386 2045 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Mar 17 18:45:08.005843 kubelet[2045]: E0317 18:45:08.005798 2045 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Mar 17 18:45:08.271000 audit[1881]: AVC avc: denied { watch } for pid=1881 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=8230 scontext=system_u:system_r:svirt_lxc_net_t:s0:c117,c888 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Mar 17 18:45:08.271000 audit[1881]: AVC avc: denied { watch } for pid=1881 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=8230 scontext=system_u:system_r:svirt_lxc_net_t:s0:c117,c888 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Mar 17 18:45:08.271000 audit[1881]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=8 a1=c000fb41c0 a2=fc6 a3=0 items=0 ppid=1739 pid=1881 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c117,c888 key=(null) Mar 17 18:45:08.271000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Mar 17 18:45:08.271000 audit[1881]: AVC avc: denied { watch } for pid=1881 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=8230 scontext=system_u:system_r:svirt_lxc_net_t:s0:c117,c888 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Mar 17 18:45:08.271000 audit[1881]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=8 a1=c000fb4200 a2=fc6 a3=0 items=0 ppid=1739 pid=1881 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c117,c888 key=(null) Mar 17 18:45:08.271000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Mar 17 18:45:08.271000 audit[1881]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=7 a1=c0008e4900 a2=fc6 a3=0 items=0 ppid=1739 pid=1881 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c117,c888 key=(null) Mar 17 18:45:08.272000 audit[1881]: AVC avc: denied { watch } for pid=1881 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=8230 scontext=system_u:system_r:svirt_lxc_net_t:s0:c117,c888 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Mar 17 18:45:08.272000 audit[1881]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=8 a1=c0009ece80 a2=fc6 a3=0 items=0 ppid=1739 pid=1881 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c117,c888 key=(null) Mar 17 18:45:08.272000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Mar 17 18:45:08.271000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Mar 17 18:45:08.574739 kubelet[2045]: I0317 18:45:08.574607 2045 apiserver.go:52] "Watching apiserver" Mar 17 18:45:08.587763 kubelet[2045]: I0317 18:45:08.587730 2045 desired_state_of_world_populator.go:157] "Finished populating initial desired state of world" Mar 17 18:45:08.605527 kubelet[2045]: E0317 18:45:08.605488 2045 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Mar 17 18:45:08.612601 kubelet[2045]: E0317 18:45:08.612560 2045 kubelet.go:1928] "Failed creating a mirror pod for" err="pods \"kube-controller-manager-localhost\" already exists" pod="kube-system/kube-controller-manager-localhost" Mar 17 18:45:08.613232 kubelet[2045]: E0317 18:45:08.613209 2045 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Mar 17 18:45:08.620944 kubelet[2045]: E0317 18:45:08.620893 2045 kubelet.go:1928] "Failed creating a mirror pod for" err="pods \"kube-apiserver-localhost\" already exists" pod="kube-system/kube-apiserver-localhost" Mar 17 18:45:08.621396 kubelet[2045]: E0317 18:45:08.621373 2045 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Mar 17 18:45:08.634072 kubelet[2045]: I0317 18:45:08.633992 2045 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="kube-system/kube-controller-manager-localhost" podStartSLOduration=1.633972468 podStartE2EDuration="1.633972468s" podCreationTimestamp="2025-03-17 18:45:07 +0000 UTC" firstStartedPulling="0001-01-01 00:00:00 +0000 UTC" lastFinishedPulling="0001-01-01 00:00:00 +0000 UTC" observedRunningTime="2025-03-17 18:45:08.633512916 +0000 UTC m=+1.121513764" watchObservedRunningTime="2025-03-17 18:45:08.633972468 +0000 UTC m=+1.121973306" Mar 17 18:45:08.634308 kubelet[2045]: I0317 18:45:08.634152 2045 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="kube-system/kube-scheduler-localhost" podStartSLOduration=1.634147343 podStartE2EDuration="1.634147343s" podCreationTimestamp="2025-03-17 18:45:07 +0000 UTC" firstStartedPulling="0001-01-01 00:00:00 +0000 UTC" lastFinishedPulling="0001-01-01 00:00:00 +0000 UTC" observedRunningTime="2025-03-17 18:45:08.624496758 +0000 UTC m=+1.112497596" watchObservedRunningTime="2025-03-17 18:45:08.634147343 +0000 UTC m=+1.122148182" Mar 17 18:45:08.643573 kubelet[2045]: I0317 18:45:08.643491 2045 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="kube-system/kube-apiserver-localhost" podStartSLOduration=1.643471522 podStartE2EDuration="1.643471522s" podCreationTimestamp="2025-03-17 18:45:07 +0000 UTC" firstStartedPulling="0001-01-01 00:00:00 +0000 UTC" lastFinishedPulling="0001-01-01 00:00:00 +0000 UTC" observedRunningTime="2025-03-17 18:45:08.643446493 +0000 UTC m=+1.131447321" watchObservedRunningTime="2025-03-17 18:45:08.643471522 +0000 UTC m=+1.131472360" Mar 17 18:45:09.607412 kubelet[2045]: E0317 18:45:09.607365 2045 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Mar 17 18:45:09.607746 kubelet[2045]: E0317 18:45:09.607496 2045 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Mar 17 18:45:10.608397 kubelet[2045]: E0317 18:45:10.608349 2045 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Mar 17 18:45:10.608850 kubelet[2045]: E0317 18:45:10.608619 2045 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Mar 17 18:45:11.610017 kubelet[2045]: E0317 18:45:11.609978 2045 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Mar 17 18:45:12.042693 sudo[1338]: pam_unix(sudo:session): session closed for user root Mar 17 18:45:12.042000 audit[1338]: USER_END pid=1338 uid=500 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_limits,pam_env,pam_unix,pam_permit,pam_systemd acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Mar 17 18:45:12.042000 audit[1338]: CRED_DISP pid=1338 uid=500 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Mar 17 18:45:12.043909 sshd[1335]: pam_unix(sshd:session): session closed for user core Mar 17 18:45:12.044000 audit[1335]: USER_END pid=1335 uid=0 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Mar 17 18:45:12.044000 audit[1335]: CRED_DISP pid=1335 uid=0 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Mar 17 18:45:12.045933 systemd[1]: sshd@6-10.0.0.110:22-10.0.0.1:56876.service: Deactivated successfully. Mar 17 18:45:12.045000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@6-10.0.0.110:22-10.0.0.1:56876 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:45:12.046720 systemd[1]: session-7.scope: Deactivated successfully. Mar 17 18:45:12.046903 systemd[1]: session-7.scope: Consumed 3.728s CPU time. Mar 17 18:45:12.047286 systemd-logind[1188]: Session 7 logged out. Waiting for processes to exit. Mar 17 18:45:12.047902 systemd-logind[1188]: Removed session 7. Mar 17 18:45:17.173215 update_engine[1195]: I0317 18:45:17.173163 1195 update_attempter.cc:509] Updating boot flags... Mar 17 18:45:17.857361 kubelet[2045]: E0317 18:45:17.857286 2045 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Mar 17 18:45:18.621083 kubelet[2045]: E0317 18:45:18.621044 2045 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Mar 17 18:45:19.635805 kubelet[2045]: E0317 18:45:19.635765 2045 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Mar 17 18:45:20.608438 kubelet[2045]: E0317 18:45:20.608399 2045 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Mar 17 18:45:20.623056 kubelet[2045]: E0317 18:45:20.623030 2045 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Mar 17 18:45:21.529000 audit[1881]: AVC avc: denied { watch } for pid=1881 comm="kube-controller" path="/opt/libexec/kubernetes/kubelet-plugins/volume/exec" dev="vda9" ino=8272 scontext=system_u:system_r:svirt_lxc_net_t:s0:c117,c888 tcontext=system_u:object_r:usr_t:s0 tclass=dir permissive=0 Mar 17 18:45:21.531792 kernel: kauditd_printk_skb: 281 callbacks suppressed Mar 17 18:45:21.531863 kernel: audit: type=1400 audit(1742237121.529:808): avc: denied { watch } for pid=1881 comm="kube-controller" path="/opt/libexec/kubernetes/kubelet-plugins/volume/exec" dev="vda9" ino=8272 scontext=system_u:system_r:svirt_lxc_net_t:s0:c117,c888 tcontext=system_u:object_r:usr_t:s0 tclass=dir permissive=0 Mar 17 18:45:21.529000 audit[1881]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=8 a1=c000e600c0 a2=fc6 a3=0 items=0 ppid=1739 pid=1881 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c117,c888 key=(null) Mar 17 18:45:21.540337 kernel: audit: type=1300 audit(1742237121.529:808): arch=c000003e syscall=254 success=no exit=-13 a0=8 a1=c000e600c0 a2=fc6 a3=0 items=0 ppid=1739 pid=1881 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c117,c888 key=(null) Mar 17 18:45:21.540376 kernel: audit: type=1327 audit(1742237121.529:808): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Mar 17 18:45:21.529000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Mar 17 18:45:22.477752 kubelet[2045]: I0317 18:45:22.477710 2045 kuberuntime_manager.go:1523] "Updating runtime config through cri with podcidr" CIDR="192.168.0.0/24" Mar 17 18:45:22.478485 env[1203]: time="2025-03-17T18:45:22.478440259Z" level=info msg="No cni config template is specified, wait for other system components to drop the config." Mar 17 18:45:22.478725 kubelet[2045]: I0317 18:45:22.478704 2045 kubelet_network.go:61] "Updating Pod CIDR" originalPodCIDR="" newPodCIDR="192.168.0.0/24" Mar 17 18:45:22.894698 kubelet[2045]: I0317 18:45:22.894554 2045 topology_manager.go:215] "Topology Admit Handler" podUID="def1c987-966b-4734-83de-4b011b62c97b" podNamespace="kube-system" podName="kube-proxy-7k4hg" Mar 17 18:45:22.899823 systemd[1]: Created slice kubepods-besteffort-poddef1c987_966b_4734_83de_4b011b62c97b.slice. Mar 17 18:45:22.990241 kubelet[2045]: I0317 18:45:22.990209 2045 reconciler_common.go:247] "operationExecutor.VerifyControllerAttachedVolume started for volume \"xtables-lock\" (UniqueName: \"kubernetes.io/host-path/def1c987-966b-4734-83de-4b011b62c97b-xtables-lock\") pod \"kube-proxy-7k4hg\" (UID: \"def1c987-966b-4734-83de-4b011b62c97b\") " pod="kube-system/kube-proxy-7k4hg" Mar 17 18:45:22.990419 kubelet[2045]: I0317 18:45:22.990248 2045 reconciler_common.go:247] "operationExecutor.VerifyControllerAttachedVolume started for volume \"lib-modules\" (UniqueName: \"kubernetes.io/host-path/def1c987-966b-4734-83de-4b011b62c97b-lib-modules\") pod \"kube-proxy-7k4hg\" (UID: \"def1c987-966b-4734-83de-4b011b62c97b\") " pod="kube-system/kube-proxy-7k4hg" Mar 17 18:45:22.990419 kubelet[2045]: I0317 18:45:22.990278 2045 reconciler_common.go:247] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-t44kh\" (UniqueName: \"kubernetes.io/projected/def1c987-966b-4734-83de-4b011b62c97b-kube-api-access-t44kh\") pod \"kube-proxy-7k4hg\" (UID: \"def1c987-966b-4734-83de-4b011b62c97b\") " pod="kube-system/kube-proxy-7k4hg" Mar 17 18:45:22.990419 kubelet[2045]: I0317 18:45:22.990300 2045 reconciler_common.go:247] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-proxy\" (UniqueName: \"kubernetes.io/configmap/def1c987-966b-4734-83de-4b011b62c97b-kube-proxy\") pod \"kube-proxy-7k4hg\" (UID: \"def1c987-966b-4734-83de-4b011b62c97b\") " pod="kube-system/kube-proxy-7k4hg" Mar 17 18:45:23.244004 kubelet[2045]: E0317 18:45:23.243954 2045 projected.go:294] Couldn't get configMap kube-system/kube-root-ca.crt: configmap "kube-root-ca.crt" not found Mar 17 18:45:23.244004 kubelet[2045]: E0317 18:45:23.243988 2045 projected.go:200] Error preparing data for projected volume kube-api-access-t44kh for pod kube-system/kube-proxy-7k4hg: configmap "kube-root-ca.crt" not found Mar 17 18:45:23.244202 kubelet[2045]: E0317 18:45:23.244044 2045 nestedpendingoperations.go:348] Operation for "{volumeName:kubernetes.io/projected/def1c987-966b-4734-83de-4b011b62c97b-kube-api-access-t44kh podName:def1c987-966b-4734-83de-4b011b62c97b nodeName:}" failed. No retries permitted until 2025-03-17 18:45:23.744025145 +0000 UTC m=+16.232025983 (durationBeforeRetry 500ms). Error: MountVolume.SetUp failed for volume "kube-api-access-t44kh" (UniqueName: "kubernetes.io/projected/def1c987-966b-4734-83de-4b011b62c97b-kube-api-access-t44kh") pod "kube-proxy-7k4hg" (UID: "def1c987-966b-4734-83de-4b011b62c97b") : configmap "kube-root-ca.crt" not found Mar 17 18:45:23.475523 kubelet[2045]: I0317 18:45:23.475485 2045 topology_manager.go:215] "Topology Admit Handler" podUID="d31d837a-5242-442d-b9dd-6f13de0ccfa9" podNamespace="tigera-operator" podName="tigera-operator-7bc55997bb-plr5f" Mar 17 18:45:23.480672 systemd[1]: Created slice kubepods-besteffort-podd31d837a_5242_442d_b9dd_6f13de0ccfa9.slice. Mar 17 18:45:23.493959 kubelet[2045]: I0317 18:45:23.493904 2045 reconciler_common.go:247] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-tw8d5\" (UniqueName: \"kubernetes.io/projected/d31d837a-5242-442d-b9dd-6f13de0ccfa9-kube-api-access-tw8d5\") pod \"tigera-operator-7bc55997bb-plr5f\" (UID: \"d31d837a-5242-442d-b9dd-6f13de0ccfa9\") " pod="tigera-operator/tigera-operator-7bc55997bb-plr5f" Mar 17 18:45:23.493959 kubelet[2045]: I0317 18:45:23.493966 2045 reconciler_common.go:247] "operationExecutor.VerifyControllerAttachedVolume started for volume \"var-lib-calico\" (UniqueName: \"kubernetes.io/host-path/d31d837a-5242-442d-b9dd-6f13de0ccfa9-var-lib-calico\") pod \"tigera-operator-7bc55997bb-plr5f\" (UID: \"d31d837a-5242-442d-b9dd-6f13de0ccfa9\") " pod="tigera-operator/tigera-operator-7bc55997bb-plr5f" Mar 17 18:45:23.784340 env[1203]: time="2025-03-17T18:45:23.784284831Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:tigera-operator-7bc55997bb-plr5f,Uid:d31d837a-5242-442d-b9dd-6f13de0ccfa9,Namespace:tigera-operator,Attempt:0,}" Mar 17 18:45:23.800928 env[1203]: time="2025-03-17T18:45:23.800862278Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Mar 17 18:45:23.800928 env[1203]: time="2025-03-17T18:45:23.800906722Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Mar 17 18:45:23.800928 env[1203]: time="2025-03-17T18:45:23.800916160Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Mar 17 18:45:23.801089 env[1203]: time="2025-03-17T18:45:23.801048450Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/cc6f3453134f2983e1b75d7e6956c67bf63a88ee05245e67f08de1f931b1ee34 pid=2156 runtime=io.containerd.runc.v2 Mar 17 18:45:23.810114 kubelet[2045]: E0317 18:45:23.810090 2045 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Mar 17 18:45:23.811575 env[1203]: time="2025-03-17T18:45:23.811544824Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-proxy-7k4hg,Uid:def1c987-966b-4734-83de-4b011b62c97b,Namespace:kube-system,Attempt:0,}" Mar 17 18:45:23.815026 systemd[1]: Started cri-containerd-cc6f3453134f2983e1b75d7e6956c67bf63a88ee05245e67f08de1f931b1ee34.scope. Mar 17 18:45:23.826000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:23.826000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:23.832855 env[1203]: time="2025-03-17T18:45:23.830742346Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Mar 17 18:45:23.832855 env[1203]: time="2025-03-17T18:45:23.830847325Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Mar 17 18:45:23.832855 env[1203]: time="2025-03-17T18:45:23.830871741Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Mar 17 18:45:23.832855 env[1203]: time="2025-03-17T18:45:23.831204530Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/c40694dd9d23f186eef57cb59ec4cf53c7104aba75f3a4b0b37273aa71f35a64 pid=2190 runtime=io.containerd.runc.v2 Mar 17 18:45:23.836650 kernel: audit: type=1400 audit(1742237123.826:809): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:23.836705 kernel: audit: type=1400 audit(1742237123.826:810): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:23.836725 kernel: audit: type=1400 audit(1742237123.826:811): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:23.826000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:23.826000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:23.840210 kernel: audit: type=1400 audit(1742237123.826:812): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:23.840265 kernel: audit: type=1400 audit(1742237123.826:813): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:23.826000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:23.848414 kernel: audit: type=1400 audit(1742237123.826:814): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:23.826000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:23.848154 systemd[1]: Started cri-containerd-c40694dd9d23f186eef57cb59ec4cf53c7104aba75f3a4b0b37273aa71f35a64.scope. Mar 17 18:45:23.826000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:23.826000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:23.826000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:23.826000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:23.826000 audit: BPF prog-id=106 op=LOAD Mar 17 18:45:23.826000 audit[2165]: AVC avc: denied { bpf } for pid=2165 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:23.826000 audit[2165]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c00014dc48 a2=10 a3=1c items=0 ppid=2156 pid=2165 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:45:23.826000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6363366633343533313334663239383365316237356437653639353663 Mar 17 18:45:23.852666 kernel: audit: type=1400 audit(1742237123.826:815): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:23.826000 audit[2165]: AVC avc: denied { perfmon } for pid=2165 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:23.826000 audit[2165]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c00014d6b0 a2=3c a3=c items=0 ppid=2156 pid=2165 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:45:23.826000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6363366633343533313334663239383365316237356437653639353663 Mar 17 18:45:23.826000 audit[2165]: AVC avc: denied { bpf } for pid=2165 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:23.826000 audit[2165]: AVC avc: denied { bpf } for pid=2165 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:23.826000 audit[2165]: AVC avc: denied { bpf } for pid=2165 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:23.826000 audit[2165]: AVC avc: denied { perfmon } for pid=2165 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:23.826000 audit[2165]: AVC avc: denied { perfmon } for pid=2165 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:23.826000 audit[2165]: AVC avc: denied { perfmon } for pid=2165 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:23.826000 audit[2165]: AVC avc: denied { perfmon } for pid=2165 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:23.826000 audit[2165]: AVC avc: denied { perfmon } for pid=2165 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:23.826000 audit[2165]: AVC avc: denied { bpf } for pid=2165 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:23.826000 audit[2165]: AVC avc: denied { bpf } for pid=2165 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:23.826000 audit: BPF prog-id=107 op=LOAD Mar 17 18:45:23.826000 audit[2165]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c00014d9d8 a2=78 a3=c0001c5310 items=0 ppid=2156 pid=2165 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:45:23.826000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6363366633343533313334663239383365316237356437653639353663 Mar 17 18:45:23.832000 audit[2165]: AVC avc: denied { bpf } for pid=2165 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:23.832000 audit[2165]: AVC avc: denied { bpf } for pid=2165 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:23.832000 audit[2165]: AVC avc: denied { perfmon } for pid=2165 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:23.832000 audit[2165]: AVC avc: denied { perfmon } for pid=2165 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:23.832000 audit[2165]: AVC avc: denied { perfmon } for pid=2165 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:23.832000 audit[2165]: AVC avc: denied { perfmon } for pid=2165 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:23.832000 audit[2165]: AVC avc: denied { perfmon } for pid=2165 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:23.832000 audit[2165]: AVC avc: denied { bpf } for pid=2165 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:23.832000 audit[2165]: AVC avc: denied { bpf } for pid=2165 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:23.832000 audit: BPF prog-id=108 op=LOAD Mar 17 18:45:23.832000 audit[2165]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c00014d770 a2=78 a3=c0001c5358 items=0 ppid=2156 pid=2165 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:45:23.832000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6363366633343533313334663239383365316237356437653639353663 Mar 17 18:45:23.835000 audit: BPF prog-id=108 op=UNLOAD Mar 17 18:45:23.835000 audit: BPF prog-id=107 op=UNLOAD Mar 17 18:45:23.835000 audit[2165]: AVC avc: denied { bpf } for pid=2165 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:23.835000 audit[2165]: AVC avc: denied { bpf } for pid=2165 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:23.835000 audit[2165]: AVC avc: denied { bpf } for pid=2165 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:23.835000 audit[2165]: AVC avc: denied { perfmon } for pid=2165 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:23.835000 audit[2165]: AVC avc: denied { perfmon } for pid=2165 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:23.835000 audit[2165]: AVC avc: denied { perfmon } for pid=2165 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:23.835000 audit[2165]: AVC avc: denied { perfmon } for pid=2165 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:23.835000 audit[2165]: AVC avc: denied { perfmon } for pid=2165 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:23.835000 audit[2165]: AVC avc: denied { bpf } for pid=2165 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:23.835000 audit[2165]: AVC avc: denied { bpf } for pid=2165 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:23.835000 audit: BPF prog-id=109 op=LOAD Mar 17 18:45:23.835000 audit[2165]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c00014dc30 a2=78 a3=c0001c5768 items=0 ppid=2156 pid=2165 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:45:23.835000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6363366633343533313334663239383365316237356437653639353663 Mar 17 18:45:23.855000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:23.855000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:23.855000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:23.855000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:23.855000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:23.855000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:23.855000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:23.855000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:23.855000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:23.855000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:23.855000 audit: BPF prog-id=110 op=LOAD Mar 17 18:45:23.856000 audit[2202]: AVC avc: denied { bpf } for pid=2202 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:23.856000 audit[2202]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000117c48 a2=10 a3=1c items=0 ppid=2190 pid=2202 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:45:23.856000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6334303639346464396432336631383665656635376362353965633463 Mar 17 18:45:23.856000 audit[2202]: AVC avc: denied { perfmon } for pid=2202 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:23.856000 audit[2202]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=0 a1=c0001176b0 a2=3c a3=8 items=0 ppid=2190 pid=2202 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:45:23.856000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6334303639346464396432336631383665656635376362353965633463 Mar 17 18:45:23.856000 audit[2202]: AVC avc: denied { bpf } for pid=2202 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:23.856000 audit[2202]: AVC avc: denied { bpf } for pid=2202 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:23.856000 audit[2202]: AVC avc: denied { bpf } for pid=2202 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:23.856000 audit[2202]: AVC avc: denied { perfmon } for pid=2202 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:23.856000 audit[2202]: AVC avc: denied { perfmon } for pid=2202 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:23.856000 audit[2202]: AVC avc: denied { perfmon } for pid=2202 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:23.856000 audit[2202]: AVC avc: denied { perfmon } for pid=2202 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:23.856000 audit[2202]: AVC avc: denied { perfmon } for pid=2202 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:23.856000 audit[2202]: AVC avc: denied { bpf } for pid=2202 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:23.856000 audit[2202]: AVC avc: denied { bpf } for pid=2202 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:23.856000 audit: BPF prog-id=111 op=LOAD Mar 17 18:45:23.856000 audit[2202]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c0001179d8 a2=78 a3=c000322ff0 items=0 ppid=2190 pid=2202 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:45:23.856000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6334303639346464396432336631383665656635376362353965633463 Mar 17 18:45:23.856000 audit[2202]: AVC avc: denied { bpf } for pid=2202 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:23.856000 audit[2202]: AVC avc: denied { bpf } for pid=2202 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:23.856000 audit[2202]: AVC avc: denied { perfmon } for pid=2202 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:23.856000 audit[2202]: AVC avc: denied { perfmon } for pid=2202 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:23.856000 audit[2202]: AVC avc: denied { perfmon } for pid=2202 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:23.856000 audit[2202]: AVC avc: denied { perfmon } for pid=2202 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:23.856000 audit[2202]: AVC avc: denied { perfmon } for pid=2202 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:23.856000 audit[2202]: AVC avc: denied { bpf } for pid=2202 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:23.856000 audit[2202]: AVC avc: denied { bpf } for pid=2202 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:23.856000 audit: BPF prog-id=112 op=LOAD Mar 17 18:45:23.856000 audit[2202]: SYSCALL arch=c000003e syscall=321 success=yes exit=17 a0=5 a1=c000117770 a2=78 a3=c000323038 items=0 ppid=2190 pid=2202 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:45:23.856000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6334303639346464396432336631383665656635376362353965633463 Mar 17 18:45:23.856000 audit: BPF prog-id=112 op=UNLOAD Mar 17 18:45:23.856000 audit: BPF prog-id=111 op=UNLOAD Mar 17 18:45:23.856000 audit[2202]: AVC avc: denied { bpf } for pid=2202 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:23.856000 audit[2202]: AVC avc: denied { bpf } for pid=2202 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:23.856000 audit[2202]: AVC avc: denied { bpf } for pid=2202 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:23.856000 audit[2202]: AVC avc: denied { perfmon } for pid=2202 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:23.856000 audit[2202]: AVC avc: denied { perfmon } for pid=2202 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:23.856000 audit[2202]: AVC avc: denied { perfmon } for pid=2202 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:23.856000 audit[2202]: AVC avc: denied { perfmon } for pid=2202 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:23.856000 audit[2202]: AVC avc: denied { perfmon } for pid=2202 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:23.856000 audit[2202]: AVC avc: denied { bpf } for pid=2202 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:23.856000 audit[2202]: AVC avc: denied { bpf } for pid=2202 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:23.856000 audit: BPF prog-id=113 op=LOAD Mar 17 18:45:23.856000 audit[2202]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c000117c30 a2=78 a3=c000323448 items=0 ppid=2190 pid=2202 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:45:23.856000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6334303639346464396432336631383665656635376362353965633463 Mar 17 18:45:23.867853 env[1203]: time="2025-03-17T18:45:23.867781055Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-proxy-7k4hg,Uid:def1c987-966b-4734-83de-4b011b62c97b,Namespace:kube-system,Attempt:0,} returns sandbox id \"c40694dd9d23f186eef57cb59ec4cf53c7104aba75f3a4b0b37273aa71f35a64\"" Mar 17 18:45:23.885777 env[1203]: time="2025-03-17T18:45:23.870841735Z" level=info msg="CreateContainer within sandbox \"c40694dd9d23f186eef57cb59ec4cf53c7104aba75f3a4b0b37273aa71f35a64\" for container &ContainerMetadata{Name:kube-proxy,Attempt:0,}" Mar 17 18:45:23.885777 env[1203]: time="2025-03-17T18:45:23.874128071Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:tigera-operator-7bc55997bb-plr5f,Uid:d31d837a-5242-442d-b9dd-6f13de0ccfa9,Namespace:tigera-operator,Attempt:0,} returns sandbox id \"cc6f3453134f2983e1b75d7e6956c67bf63a88ee05245e67f08de1f931b1ee34\"" Mar 17 18:45:23.885924 kubelet[2045]: E0317 18:45:23.868292 2045 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Mar 17 18:45:23.893210 env[1203]: time="2025-03-17T18:45:23.893171562Z" level=info msg="PullImage \"quay.io/tigera/operator:v1.36.2\"" Mar 17 18:45:23.943802 env[1203]: time="2025-03-17T18:45:23.943738018Z" level=info msg="CreateContainer within sandbox \"c40694dd9d23f186eef57cb59ec4cf53c7104aba75f3a4b0b37273aa71f35a64\" for &ContainerMetadata{Name:kube-proxy,Attempt:0,} returns container id \"55a2519dec26221abc42ad0ab0e4317908e84f6f1d6914cbaa89355c370a78ca\"" Mar 17 18:45:23.944282 env[1203]: time="2025-03-17T18:45:23.944247112Z" level=info msg="StartContainer for \"55a2519dec26221abc42ad0ab0e4317908e84f6f1d6914cbaa89355c370a78ca\"" Mar 17 18:45:23.960959 systemd[1]: Started cri-containerd-55a2519dec26221abc42ad0ab0e4317908e84f6f1d6914cbaa89355c370a78ca.scope. Mar 17 18:45:23.972000 audit[2238]: AVC avc: denied { perfmon } for pid=2238 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:23.972000 audit[2238]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=0 a1=c0001976b0 a2=3c a3=7f5d195e2518 items=0 ppid=2190 pid=2238 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:45:23.972000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3535613235313964656332363232316162633432616430616230653433 Mar 17 18:45:23.972000 audit[2238]: AVC avc: denied { bpf } for pid=2238 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:23.972000 audit[2238]: AVC avc: denied { bpf } for pid=2238 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:23.972000 audit[2238]: AVC avc: denied { bpf } for pid=2238 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:23.972000 audit[2238]: AVC avc: denied { perfmon } for pid=2238 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:23.972000 audit[2238]: AVC avc: denied { perfmon } for pid=2238 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:23.972000 audit[2238]: AVC avc: denied { perfmon } for pid=2238 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:23.972000 audit[2238]: AVC avc: denied { perfmon } for pid=2238 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:23.972000 audit[2238]: AVC avc: denied { perfmon } for pid=2238 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:23.972000 audit[2238]: AVC avc: denied { bpf } for pid=2238 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:23.972000 audit[2238]: AVC avc: denied { bpf } for pid=2238 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:23.972000 audit: BPF prog-id=114 op=LOAD Mar 17 18:45:23.972000 audit[2238]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c0001979d8 a2=78 a3=c0002d9ba8 items=0 ppid=2190 pid=2238 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:45:23.972000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3535613235313964656332363232316162633432616430616230653433 Mar 17 18:45:23.972000 audit[2238]: AVC avc: denied { bpf } for pid=2238 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:23.972000 audit[2238]: AVC avc: denied { bpf } for pid=2238 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:23.972000 audit[2238]: AVC avc: denied { perfmon } for pid=2238 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:23.972000 audit[2238]: AVC avc: denied { perfmon } for pid=2238 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:23.972000 audit[2238]: AVC avc: denied { perfmon } for pid=2238 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:23.972000 audit[2238]: AVC avc: denied { perfmon } for pid=2238 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:23.972000 audit[2238]: AVC avc: denied { perfmon } for pid=2238 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:23.972000 audit[2238]: AVC avc: denied { bpf } for pid=2238 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:23.972000 audit[2238]: AVC avc: denied { bpf } for pid=2238 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:23.972000 audit: BPF prog-id=115 op=LOAD Mar 17 18:45:23.972000 audit[2238]: SYSCALL arch=c000003e syscall=321 success=yes exit=17 a0=5 a1=c000197770 a2=78 a3=c0002d9bf8 items=0 ppid=2190 pid=2238 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:45:23.972000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3535613235313964656332363232316162633432616430616230653433 Mar 17 18:45:23.972000 audit: BPF prog-id=115 op=UNLOAD Mar 17 18:45:23.972000 audit: BPF prog-id=114 op=UNLOAD Mar 17 18:45:23.972000 audit[2238]: AVC avc: denied { bpf } for pid=2238 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:23.972000 audit[2238]: AVC avc: denied { bpf } for pid=2238 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:23.972000 audit[2238]: AVC avc: denied { bpf } for pid=2238 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:23.972000 audit[2238]: AVC avc: denied { perfmon } for pid=2238 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:23.972000 audit[2238]: AVC avc: denied { perfmon } for pid=2238 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:23.972000 audit[2238]: AVC avc: denied { perfmon } for pid=2238 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:23.972000 audit[2238]: AVC avc: denied { perfmon } for pid=2238 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:23.972000 audit[2238]: AVC avc: denied { perfmon } for pid=2238 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:23.972000 audit[2238]: AVC avc: denied { bpf } for pid=2238 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:23.972000 audit[2238]: AVC avc: denied { bpf } for pid=2238 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:23.972000 audit: BPF prog-id=116 op=LOAD Mar 17 18:45:23.972000 audit[2238]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c000197c30 a2=78 a3=c0002d9c88 items=0 ppid=2190 pid=2238 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:45:23.972000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3535613235313964656332363232316162633432616430616230653433 Mar 17 18:45:23.987875 env[1203]: time="2025-03-17T18:45:23.987768793Z" level=info msg="StartContainer for \"55a2519dec26221abc42ad0ab0e4317908e84f6f1d6914cbaa89355c370a78ca\" returns successfully" Mar 17 18:45:24.041000 audit[2291]: NETFILTER_CFG table=mangle:38 family=10 entries=1 op=nft_register_chain pid=2291 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Mar 17 18:45:24.041000 audit[2291]: SYSCALL arch=c000003e syscall=46 success=yes exit=104 a0=3 a1=7fffe8710420 a2=0 a3=7fffe871040c items=0 ppid=2248 pid=2291 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:45:24.041000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D43414E415259002D74006D616E676C65 Mar 17 18:45:24.041000 audit[2292]: NETFILTER_CFG table=mangle:39 family=2 entries=1 op=nft_register_chain pid=2292 subj=system_u:system_r:kernel_t:s0 comm="iptables" Mar 17 18:45:24.041000 audit[2292]: SYSCALL arch=c000003e syscall=46 success=yes exit=104 a0=3 a1=7ffd7dc17d30 a2=0 a3=7ffd7dc17d1c items=0 ppid=2248 pid=2292 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:45:24.041000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D43414E415259002D74006D616E676C65 Mar 17 18:45:24.042000 audit[2293]: NETFILTER_CFG table=nat:40 family=10 entries=1 op=nft_register_chain pid=2293 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Mar 17 18:45:24.042000 audit[2293]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7ffe44cf2e70 a2=0 a3=7ffe44cf2e5c items=0 ppid=2248 pid=2293 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:45:24.042000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D43414E415259002D74006E6174 Mar 17 18:45:24.043000 audit[2294]: NETFILTER_CFG table=nat:41 family=2 entries=1 op=nft_register_chain pid=2294 subj=system_u:system_r:kernel_t:s0 comm="iptables" Mar 17 18:45:24.043000 audit[2294]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7ffdb659b270 a2=0 a3=7ffdb659b25c items=0 ppid=2248 pid=2294 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:45:24.043000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D43414E415259002D74006E6174 Mar 17 18:45:24.044000 audit[2296]: NETFILTER_CFG table=filter:42 family=2 entries=1 op=nft_register_chain pid=2296 subj=system_u:system_r:kernel_t:s0 comm="iptables" Mar 17 18:45:24.044000 audit[2296]: SYSCALL arch=c000003e syscall=46 success=yes exit=104 a0=3 a1=7ffec3e53a00 a2=0 a3=7ffec3e539ec items=0 ppid=2248 pid=2296 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:45:24.044000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D43414E415259002D740066696C746572 Mar 17 18:45:24.046000 audit[2295]: NETFILTER_CFG table=filter:43 family=10 entries=1 op=nft_register_chain pid=2295 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Mar 17 18:45:24.046000 audit[2295]: SYSCALL arch=c000003e syscall=46 success=yes exit=104 a0=3 a1=7fffeb7e3f60 a2=0 a3=7fffeb7e3f4c items=0 ppid=2248 pid=2295 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:45:24.046000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D43414E415259002D740066696C746572 Mar 17 18:45:24.143000 audit[2297]: NETFILTER_CFG table=filter:44 family=2 entries=1 op=nft_register_chain pid=2297 subj=system_u:system_r:kernel_t:s0 comm="iptables" Mar 17 18:45:24.143000 audit[2297]: SYSCALL arch=c000003e syscall=46 success=yes exit=108 a0=3 a1=7ffc992ae760 a2=0 a3=7ffc992ae74c items=0 ppid=2248 pid=2297 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:45:24.143000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D45585445524E414C2D5345525649434553002D740066696C746572 Mar 17 18:45:24.145000 audit[2299]: NETFILTER_CFG table=filter:45 family=2 entries=1 op=nft_register_rule pid=2299 subj=system_u:system_r:kernel_t:s0 comm="iptables" Mar 17 18:45:24.145000 audit[2299]: SYSCALL arch=c000003e syscall=46 success=yes exit=752 a0=3 a1=7ffe3df666a0 a2=0 a3=7ffe3df6668c items=0 ppid=2248 pid=2299 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:45:24.145000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E657465732065787465726E616C6C792D76697369626C652073657276696365 Mar 17 18:45:24.148000 audit[2302]: NETFILTER_CFG table=filter:46 family=2 entries=1 op=nft_register_rule pid=2302 subj=system_u:system_r:kernel_t:s0 comm="iptables" Mar 17 18:45:24.148000 audit[2302]: SYSCALL arch=c000003e syscall=46 success=yes exit=752 a0=3 a1=7ffc5ef4d4c0 a2=0 a3=7ffc5ef4d4ac items=0 ppid=2248 pid=2302 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:45:24.148000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E657465732065787465726E616C6C792D76697369626C65207365727669 Mar 17 18:45:24.149000 audit[2303]: NETFILTER_CFG table=filter:47 family=2 entries=1 op=nft_register_chain pid=2303 subj=system_u:system_r:kernel_t:s0 comm="iptables" Mar 17 18:45:24.149000 audit[2303]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7ffd617dd1a0 a2=0 a3=7ffd617dd18c items=0 ppid=2248 pid=2303 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:45:24.149000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D4E4F4445504F525453002D740066696C746572 Mar 17 18:45:24.151000 audit[2305]: NETFILTER_CFG table=filter:48 family=2 entries=1 op=nft_register_rule pid=2305 subj=system_u:system_r:kernel_t:s0 comm="iptables" Mar 17 18:45:24.151000 audit[2305]: SYSCALL arch=c000003e syscall=46 success=yes exit=528 a0=3 a1=7ffc180aea60 a2=0 a3=7ffc180aea4c items=0 ppid=2248 pid=2305 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:45:24.151000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206865616C746820636865636B207365727669636520706F727473002D6A004B5542452D4E4F4445504F525453 Mar 17 18:45:24.151000 audit[2306]: NETFILTER_CFG table=filter:49 family=2 entries=1 op=nft_register_chain pid=2306 subj=system_u:system_r:kernel_t:s0 comm="iptables" Mar 17 18:45:24.151000 audit[2306]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7ffe9c3530e0 a2=0 a3=7ffe9c3530cc items=0 ppid=2248 pid=2306 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:45:24.151000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D5345525649434553002D740066696C746572 Mar 17 18:45:24.153000 audit[2308]: NETFILTER_CFG table=filter:50 family=2 entries=1 op=nft_register_rule pid=2308 subj=system_u:system_r:kernel_t:s0 comm="iptables" Mar 17 18:45:24.153000 audit[2308]: SYSCALL arch=c000003e syscall=46 success=yes exit=744 a0=3 a1=7ffc5f62d0b0 a2=0 a3=7ffc5f62d09c items=0 ppid=2248 pid=2308 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:45:24.153000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D Mar 17 18:45:24.156000 audit[2311]: NETFILTER_CFG table=filter:51 family=2 entries=1 op=nft_register_rule pid=2311 subj=system_u:system_r:kernel_t:s0 comm="iptables" Mar 17 18:45:24.156000 audit[2311]: SYSCALL arch=c000003e syscall=46 success=yes exit=744 a0=3 a1=7ffdf1b1e8f0 a2=0 a3=7ffdf1b1e8dc items=0 ppid=2248 pid=2311 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:45:24.156000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D49004F5554505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D53 Mar 17 18:45:24.157000 audit[2312]: NETFILTER_CFG table=filter:52 family=2 entries=1 op=nft_register_chain pid=2312 subj=system_u:system_r:kernel_t:s0 comm="iptables" Mar 17 18:45:24.157000 audit[2312]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7ffcffe37e30 a2=0 a3=7ffcffe37e1c items=0 ppid=2248 pid=2312 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:45:24.157000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D464F5257415244002D740066696C746572 Mar 17 18:45:24.159000 audit[2314]: NETFILTER_CFG table=filter:53 family=2 entries=1 op=nft_register_rule pid=2314 subj=system_u:system_r:kernel_t:s0 comm="iptables" Mar 17 18:45:24.159000 audit[2314]: SYSCALL arch=c000003e syscall=46 success=yes exit=528 a0=3 a1=7ffea99017f0 a2=0 a3=7ffea99017dc items=0 ppid=2248 pid=2314 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:45:24.159000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E6574657320666F7277617264696E672072756C6573002D6A004B5542452D464F5257415244 Mar 17 18:45:24.160000 audit[2315]: NETFILTER_CFG table=filter:54 family=2 entries=1 op=nft_register_chain pid=2315 subj=system_u:system_r:kernel_t:s0 comm="iptables" Mar 17 18:45:24.160000 audit[2315]: SYSCALL arch=c000003e syscall=46 success=yes exit=104 a0=3 a1=7ffedf8c0140 a2=0 a3=7ffedf8c012c items=0 ppid=2248 pid=2315 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:45:24.160000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D4649524557414C4C002D740066696C746572 Mar 17 18:45:24.162000 audit[2317]: NETFILTER_CFG table=filter:55 family=2 entries=1 op=nft_register_rule pid=2317 subj=system_u:system_r:kernel_t:s0 comm="iptables" Mar 17 18:45:24.162000 audit[2317]: SYSCALL arch=c000003e syscall=46 success=yes exit=748 a0=3 a1=7fff5e806f70 a2=0 a3=7fff5e806f5c items=0 ppid=2248 pid=2317 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:45:24.162000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206C6F61642062616C616E636572206669726577616C6C002D6A Mar 17 18:45:24.164000 audit[2320]: NETFILTER_CFG table=filter:56 family=2 entries=1 op=nft_register_rule pid=2320 subj=system_u:system_r:kernel_t:s0 comm="iptables" Mar 17 18:45:24.164000 audit[2320]: SYSCALL arch=c000003e syscall=46 success=yes exit=748 a0=3 a1=7fff3621b2d0 a2=0 a3=7fff3621b2bc items=0 ppid=2248 pid=2320 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:45:24.164000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D49004F5554505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206C6F61642062616C616E636572206669726577616C6C002D6A Mar 17 18:45:24.167000 audit[2323]: NETFILTER_CFG table=filter:57 family=2 entries=1 op=nft_register_rule pid=2323 subj=system_u:system_r:kernel_t:s0 comm="iptables" Mar 17 18:45:24.167000 audit[2323]: SYSCALL arch=c000003e syscall=46 success=yes exit=748 a0=3 a1=7ffc99291740 a2=0 a3=7ffc9929172c items=0 ppid=2248 pid=2323 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:45:24.167000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206C6F61642062616C616E636572206669726577616C6C002D Mar 17 18:45:24.168000 audit[2324]: NETFILTER_CFG table=nat:58 family=2 entries=1 op=nft_register_chain pid=2324 subj=system_u:system_r:kernel_t:s0 comm="iptables" Mar 17 18:45:24.168000 audit[2324]: SYSCALL arch=c000003e syscall=46 success=yes exit=96 a0=3 a1=7ffd120fa120 a2=0 a3=7ffd120fa10c items=0 ppid=2248 pid=2324 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:45:24.168000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D5345525649434553002D74006E6174 Mar 17 18:45:24.170000 audit[2326]: NETFILTER_CFG table=nat:59 family=2 entries=1 op=nft_register_rule pid=2326 subj=system_u:system_r:kernel_t:s0 comm="iptables" Mar 17 18:45:24.170000 audit[2326]: SYSCALL arch=c000003e syscall=46 success=yes exit=524 a0=3 a1=7ffccdf46570 a2=0 a3=7ffccdf4655c items=0 ppid=2248 pid=2326 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:45:24.170000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D49004F5554505554002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D5345525649434553 Mar 17 18:45:24.172000 audit[2329]: NETFILTER_CFG table=nat:60 family=2 entries=1 op=nft_register_rule pid=2329 subj=system_u:system_r:kernel_t:s0 comm="iptables" Mar 17 18:45:24.172000 audit[2329]: SYSCALL arch=c000003e syscall=46 success=yes exit=528 a0=3 a1=7ffde56714d0 a2=0 a3=7ffde56714bc items=0 ppid=2248 pid=2329 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:45:24.172000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900505245524F5554494E47002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D5345525649434553 Mar 17 18:45:24.173000 audit[2330]: NETFILTER_CFG table=nat:61 family=2 entries=1 op=nft_register_chain pid=2330 subj=system_u:system_r:kernel_t:s0 comm="iptables" Mar 17 18:45:24.173000 audit[2330]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7ffd186ef2f0 a2=0 a3=7ffd186ef2dc items=0 ppid=2248 pid=2330 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:45:24.173000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D504F5354524F5554494E47002D74006E6174 Mar 17 18:45:24.175000 audit[2332]: NETFILTER_CFG table=nat:62 family=2 entries=1 op=nft_register_rule pid=2332 subj=system_u:system_r:kernel_t:s0 comm="iptables" Mar 17 18:45:24.175000 audit[2332]: SYSCALL arch=c000003e syscall=46 success=yes exit=532 a0=3 a1=7ffe31bd4a00 a2=0 a3=7ffe31bd49ec items=0 ppid=2248 pid=2332 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:45:24.175000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900504F5354524F5554494E47002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E6574657320706F7374726F7574696E672072756C6573002D6A004B5542452D504F5354524F5554494E47 Mar 17 18:45:24.191000 audit[2338]: NETFILTER_CFG table=filter:63 family=2 entries=8 op=nft_register_rule pid=2338 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Mar 17 18:45:24.191000 audit[2338]: SYSCALL arch=c000003e syscall=46 success=yes exit=5164 a0=3 a1=7ffc31cdcb00 a2=0 a3=7ffc31cdcaec items=0 ppid=2248 pid=2338 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:45:24.191000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Mar 17 18:45:24.201000 audit[2338]: NETFILTER_CFG table=nat:64 family=2 entries=14 op=nft_register_chain pid=2338 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Mar 17 18:45:24.201000 audit[2338]: SYSCALL arch=c000003e syscall=46 success=yes exit=5508 a0=3 a1=7ffc31cdcb00 a2=0 a3=7ffc31cdcaec items=0 ppid=2248 pid=2338 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:45:24.201000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Mar 17 18:45:24.202000 audit[2344]: NETFILTER_CFG table=filter:65 family=10 entries=1 op=nft_register_chain pid=2344 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Mar 17 18:45:24.202000 audit[2344]: SYSCALL arch=c000003e syscall=46 success=yes exit=108 a0=3 a1=7ffd7dff5e30 a2=0 a3=7ffd7dff5e1c items=0 ppid=2248 pid=2344 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:45:24.202000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D45585445524E414C2D5345525649434553002D740066696C746572 Mar 17 18:45:24.204000 audit[2346]: NETFILTER_CFG table=filter:66 family=10 entries=2 op=nft_register_chain pid=2346 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Mar 17 18:45:24.204000 audit[2346]: SYSCALL arch=c000003e syscall=46 success=yes exit=836 a0=3 a1=7ffc840184b0 a2=0 a3=7ffc8401849c items=0 ppid=2248 pid=2346 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:45:24.204000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E657465732065787465726E616C6C792D76697369626C6520736572766963 Mar 17 18:45:24.207000 audit[2349]: NETFILTER_CFG table=filter:67 family=10 entries=2 op=nft_register_chain pid=2349 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Mar 17 18:45:24.207000 audit[2349]: SYSCALL arch=c000003e syscall=46 success=yes exit=836 a0=3 a1=7fffe936c890 a2=0 a3=7fffe936c87c items=0 ppid=2248 pid=2349 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:45:24.207000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E657465732065787465726E616C6C792D76697369626C652073657276 Mar 17 18:45:24.208000 audit[2350]: NETFILTER_CFG table=filter:68 family=10 entries=1 op=nft_register_chain pid=2350 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Mar 17 18:45:24.208000 audit[2350]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7fff6856b120 a2=0 a3=7fff6856b10c items=0 ppid=2248 pid=2350 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:45:24.208000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D4E4F4445504F525453002D740066696C746572 Mar 17 18:45:24.210000 audit[2352]: NETFILTER_CFG table=filter:69 family=10 entries=1 op=nft_register_rule pid=2352 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Mar 17 18:45:24.210000 audit[2352]: SYSCALL arch=c000003e syscall=46 success=yes exit=528 a0=3 a1=7ffd2e8c6860 a2=0 a3=7ffd2e8c684c items=0 ppid=2248 pid=2352 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:45:24.210000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206865616C746820636865636B207365727669636520706F727473002D6A004B5542452D4E4F4445504F525453 Mar 17 18:45:24.211000 audit[2353]: NETFILTER_CFG table=filter:70 family=10 entries=1 op=nft_register_chain pid=2353 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Mar 17 18:45:24.211000 audit[2353]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7fff836ef820 a2=0 a3=7fff836ef80c items=0 ppid=2248 pid=2353 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:45:24.211000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D5345525649434553002D740066696C746572 Mar 17 18:45:24.213000 audit[2355]: NETFILTER_CFG table=filter:71 family=10 entries=1 op=nft_register_rule pid=2355 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Mar 17 18:45:24.213000 audit[2355]: SYSCALL arch=c000003e syscall=46 success=yes exit=744 a0=3 a1=7fff52111e00 a2=0 a3=7fff52111dec items=0 ppid=2248 pid=2355 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:45:24.213000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B554245 Mar 17 18:45:24.216000 audit[2358]: NETFILTER_CFG table=filter:72 family=10 entries=2 op=nft_register_chain pid=2358 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Mar 17 18:45:24.216000 audit[2358]: SYSCALL arch=c000003e syscall=46 success=yes exit=828 a0=3 a1=7ffefe207200 a2=0 a3=7ffefe2071ec items=0 ppid=2248 pid=2358 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:45:24.216000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D49004F5554505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D Mar 17 18:45:24.216000 audit[2359]: NETFILTER_CFG table=filter:73 family=10 entries=1 op=nft_register_chain pid=2359 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Mar 17 18:45:24.216000 audit[2359]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7ffec73be0f0 a2=0 a3=7ffec73be0dc items=0 ppid=2248 pid=2359 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:45:24.216000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D464F5257415244002D740066696C746572 Mar 17 18:45:24.218000 audit[2361]: NETFILTER_CFG table=filter:74 family=10 entries=1 op=nft_register_rule pid=2361 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Mar 17 18:45:24.218000 audit[2361]: SYSCALL arch=c000003e syscall=46 success=yes exit=528 a0=3 a1=7ffc113615b0 a2=0 a3=7ffc1136159c items=0 ppid=2248 pid=2361 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:45:24.218000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E6574657320666F7277617264696E672072756C6573002D6A004B5542452D464F5257415244 Mar 17 18:45:24.219000 audit[2362]: NETFILTER_CFG table=filter:75 family=10 entries=1 op=nft_register_chain pid=2362 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Mar 17 18:45:24.219000 audit[2362]: SYSCALL arch=c000003e syscall=46 success=yes exit=104 a0=3 a1=7fff5ca28300 a2=0 a3=7fff5ca282ec items=0 ppid=2248 pid=2362 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:45:24.219000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D4649524557414C4C002D740066696C746572 Mar 17 18:45:24.221000 audit[2364]: NETFILTER_CFG table=filter:76 family=10 entries=1 op=nft_register_rule pid=2364 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Mar 17 18:45:24.221000 audit[2364]: SYSCALL arch=c000003e syscall=46 success=yes exit=748 a0=3 a1=7ffe3dc015e0 a2=0 a3=7ffe3dc015cc items=0 ppid=2248 pid=2364 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:45:24.221000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206C6F61642062616C616E636572206669726577616C6C002D6A Mar 17 18:45:24.224000 audit[2367]: NETFILTER_CFG table=filter:77 family=10 entries=1 op=nft_register_rule pid=2367 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Mar 17 18:45:24.224000 audit[2367]: SYSCALL arch=c000003e syscall=46 success=yes exit=748 a0=3 a1=7fff5d872f40 a2=0 a3=7fff5d872f2c items=0 ppid=2248 pid=2367 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:45:24.224000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D49004F5554505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206C6F61642062616C616E636572206669726577616C6C002D Mar 17 18:45:24.227000 audit[2370]: NETFILTER_CFG table=filter:78 family=10 entries=1 op=nft_register_rule pid=2370 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Mar 17 18:45:24.227000 audit[2370]: SYSCALL arch=c000003e syscall=46 success=yes exit=748 a0=3 a1=7ffd687e7df0 a2=0 a3=7ffd687e7ddc items=0 ppid=2248 pid=2370 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:45:24.227000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206C6F61642062616C616E636572206669726577616C6C Mar 17 18:45:24.227000 audit[2371]: NETFILTER_CFG table=nat:79 family=10 entries=1 op=nft_register_chain pid=2371 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Mar 17 18:45:24.227000 audit[2371]: SYSCALL arch=c000003e syscall=46 success=yes exit=96 a0=3 a1=7ffc5fcbf8f0 a2=0 a3=7ffc5fcbf8dc items=0 ppid=2248 pid=2371 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:45:24.227000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D5345525649434553002D74006E6174 Mar 17 18:45:24.229000 audit[2373]: NETFILTER_CFG table=nat:80 family=10 entries=2 op=nft_register_chain pid=2373 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Mar 17 18:45:24.229000 audit[2373]: SYSCALL arch=c000003e syscall=46 success=yes exit=600 a0=3 a1=7ffec7e512a0 a2=0 a3=7ffec7e5128c items=0 ppid=2248 pid=2373 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:45:24.229000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D49004F5554505554002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D5345525649434553 Mar 17 18:45:24.232000 audit[2376]: NETFILTER_CFG table=nat:81 family=10 entries=2 op=nft_register_chain pid=2376 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Mar 17 18:45:24.232000 audit[2376]: SYSCALL arch=c000003e syscall=46 success=yes exit=608 a0=3 a1=7ffff2dca1c0 a2=0 a3=7ffff2dca1ac items=0 ppid=2248 pid=2376 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:45:24.232000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900505245524F5554494E47002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D5345525649434553 Mar 17 18:45:24.232000 audit[2377]: NETFILTER_CFG table=nat:82 family=10 entries=1 op=nft_register_chain pid=2377 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Mar 17 18:45:24.232000 audit[2377]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7ffc94136c10 a2=0 a3=7ffc94136bfc items=0 ppid=2248 pid=2377 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:45:24.232000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D504F5354524F5554494E47002D74006E6174 Mar 17 18:45:24.234000 audit[2379]: NETFILTER_CFG table=nat:83 family=10 entries=2 op=nft_register_chain pid=2379 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Mar 17 18:45:24.234000 audit[2379]: SYSCALL arch=c000003e syscall=46 success=yes exit=612 a0=3 a1=7ffeee3d0550 a2=0 a3=7ffeee3d053c items=0 ppid=2248 pid=2379 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:45:24.234000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900504F5354524F5554494E47002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E6574657320706F7374726F7574696E672072756C6573002D6A004B5542452D504F5354524F5554494E47 Mar 17 18:45:24.235000 audit[2380]: NETFILTER_CFG table=filter:84 family=10 entries=1 op=nft_register_chain pid=2380 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Mar 17 18:45:24.235000 audit[2380]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7ffcf10c4dc0 a2=0 a3=7ffcf10c4dac items=0 ppid=2248 pid=2380 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:45:24.235000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D4649524557414C4C002D740066696C746572 Mar 17 18:45:24.237000 audit[2382]: NETFILTER_CFG table=filter:85 family=10 entries=1 op=nft_register_rule pid=2382 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Mar 17 18:45:24.237000 audit[2382]: SYSCALL arch=c000003e syscall=46 success=yes exit=228 a0=3 a1=7ffe21d7ba20 a2=0 a3=7ffe21d7ba0c items=0 ppid=2248 pid=2382 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:45:24.237000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6A004B5542452D4649524557414C4C Mar 17 18:45:24.240000 audit[2385]: NETFILTER_CFG table=filter:86 family=10 entries=1 op=nft_register_rule pid=2385 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Mar 17 18:45:24.240000 audit[2385]: SYSCALL arch=c000003e syscall=46 success=yes exit=228 a0=3 a1=7ffcfd4fa720 a2=0 a3=7ffcfd4fa70c items=0 ppid=2248 pid=2385 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:45:24.240000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D49004F5554505554002D740066696C746572002D6A004B5542452D4649524557414C4C Mar 17 18:45:24.242000 audit[2387]: NETFILTER_CFG table=filter:87 family=10 entries=3 op=nft_register_rule pid=2387 subj=system_u:system_r:kernel_t:s0 comm="ip6tables-resto" Mar 17 18:45:24.242000 audit[2387]: SYSCALL arch=c000003e syscall=46 success=yes exit=2004 a0=3 a1=7ffc6ffe6ac0 a2=0 a3=7ffc6ffe6aac items=0 ppid=2248 pid=2387 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:45:24.242000 audit: PROCTITLE proctitle=6970367461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Mar 17 18:45:24.243000 audit[2387]: NETFILTER_CFG table=nat:88 family=10 entries=7 op=nft_register_chain pid=2387 subj=system_u:system_r:kernel_t:s0 comm="ip6tables-resto" Mar 17 18:45:24.243000 audit[2387]: SYSCALL arch=c000003e syscall=46 success=yes exit=2056 a0=3 a1=7ffc6ffe6ac0 a2=0 a3=7ffc6ffe6aac items=0 ppid=2248 pid=2387 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:45:24.243000 audit: PROCTITLE proctitle=6970367461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Mar 17 18:45:24.631524 kubelet[2045]: E0317 18:45:24.631489 2045 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Mar 17 18:45:24.638937 kubelet[2045]: I0317 18:45:24.638886 2045 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="kube-system/kube-proxy-7k4hg" podStartSLOduration=2.638867055 podStartE2EDuration="2.638867055s" podCreationTimestamp="2025-03-17 18:45:22 +0000 UTC" firstStartedPulling="0001-01-01 00:00:00 +0000 UTC" lastFinishedPulling="0001-01-01 00:00:00 +0000 UTC" observedRunningTime="2025-03-17 18:45:24.638391475 +0000 UTC m=+17.126392343" watchObservedRunningTime="2025-03-17 18:45:24.638867055 +0000 UTC m=+17.126867893" Mar 17 18:45:25.426887 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount1622411633.mount: Deactivated successfully. Mar 17 18:45:26.298073 env[1203]: time="2025-03-17T18:45:26.298015575Z" level=info msg="ImageCreate event &ImageCreate{Name:quay.io/tigera/operator:v1.36.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Mar 17 18:45:26.300066 env[1203]: time="2025-03-17T18:45:26.300016314Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:3045aa4a360d468ed15090f280e94c54bf4678269a6e863a9ebcf5b31534a346,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Mar 17 18:45:26.301870 env[1203]: time="2025-03-17T18:45:26.301841561Z" level=info msg="ImageUpdate event &ImageUpdate{Name:quay.io/tigera/operator:v1.36.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Mar 17 18:45:26.303451 env[1203]: time="2025-03-17T18:45:26.303391748Z" level=info msg="ImageCreate event &ImageCreate{Name:quay.io/tigera/operator@sha256:fc9ea45f2475fd99db1b36d2ff180a50017b1a5ea0e82a171c6b439b3a620764,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Mar 17 18:45:26.303824 env[1203]: time="2025-03-17T18:45:26.303780492Z" level=info msg="PullImage \"quay.io/tigera/operator:v1.36.2\" returns image reference \"sha256:3045aa4a360d468ed15090f280e94c54bf4678269a6e863a9ebcf5b31534a346\"" Mar 17 18:45:26.305580 env[1203]: time="2025-03-17T18:45:26.305533303Z" level=info msg="CreateContainer within sandbox \"cc6f3453134f2983e1b75d7e6956c67bf63a88ee05245e67f08de1f931b1ee34\" for container &ContainerMetadata{Name:tigera-operator,Attempt:0,}" Mar 17 18:45:26.317769 env[1203]: time="2025-03-17T18:45:26.317726390Z" level=info msg="CreateContainer within sandbox \"cc6f3453134f2983e1b75d7e6956c67bf63a88ee05245e67f08de1f931b1ee34\" for &ContainerMetadata{Name:tigera-operator,Attempt:0,} returns container id \"12d1dc7d897a41fede7d9f562431d37ebf723b6c16033dbb3eb2b1282a879dd2\"" Mar 17 18:45:26.318321 env[1203]: time="2025-03-17T18:45:26.318282782Z" level=info msg="StartContainer for \"12d1dc7d897a41fede7d9f562431d37ebf723b6c16033dbb3eb2b1282a879dd2\"" Mar 17 18:45:26.336274 systemd[1]: Started cri-containerd-12d1dc7d897a41fede7d9f562431d37ebf723b6c16033dbb3eb2b1282a879dd2.scope. Mar 17 18:45:26.344000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:26.344000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:26.344000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:26.344000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:26.344000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:26.344000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:26.344000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:26.344000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:26.344000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:26.345000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:26.345000 audit: BPF prog-id=117 op=LOAD Mar 17 18:45:26.345000 audit[2395]: AVC avc: denied { bpf } for pid=2395 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:26.345000 audit[2395]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000117c48 a2=10 a3=1c items=0 ppid=2156 pid=2395 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:45:26.345000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3132643164633764383937613431666564653764396635363234333164 Mar 17 18:45:26.345000 audit[2395]: AVC avc: denied { perfmon } for pid=2395 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:26.345000 audit[2395]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001176b0 a2=3c a3=8 items=0 ppid=2156 pid=2395 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:45:26.345000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3132643164633764383937613431666564653764396635363234333164 Mar 17 18:45:26.345000 audit[2395]: AVC avc: denied { bpf } for pid=2395 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:26.345000 audit[2395]: AVC avc: denied { bpf } for pid=2395 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:26.345000 audit[2395]: AVC avc: denied { bpf } for pid=2395 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:26.345000 audit[2395]: AVC avc: denied { perfmon } for pid=2395 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:26.345000 audit[2395]: AVC avc: denied { perfmon } for pid=2395 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:26.345000 audit[2395]: AVC avc: denied { perfmon } for pid=2395 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:26.345000 audit[2395]: AVC avc: denied { perfmon } for pid=2395 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:26.345000 audit[2395]: AVC avc: denied { perfmon } for pid=2395 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:26.345000 audit[2395]: AVC avc: denied { bpf } for pid=2395 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:26.345000 audit[2395]: AVC avc: denied { bpf } for pid=2395 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:26.345000 audit: BPF prog-id=118 op=LOAD Mar 17 18:45:26.345000 audit[2395]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001179d8 a2=78 a3=c0001ddd10 items=0 ppid=2156 pid=2395 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:45:26.345000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3132643164633764383937613431666564653764396635363234333164 Mar 17 18:45:26.345000 audit[2395]: AVC avc: denied { bpf } for pid=2395 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:26.345000 audit[2395]: AVC avc: denied { bpf } for pid=2395 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:26.345000 audit[2395]: AVC avc: denied { perfmon } for pid=2395 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:26.345000 audit[2395]: AVC avc: denied { perfmon } for pid=2395 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:26.345000 audit[2395]: AVC avc: denied { perfmon } for pid=2395 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:26.345000 audit[2395]: AVC avc: denied { perfmon } for pid=2395 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:26.345000 audit[2395]: AVC avc: denied { perfmon } for pid=2395 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:26.345000 audit[2395]: AVC avc: denied { bpf } for pid=2395 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:26.345000 audit[2395]: AVC avc: denied { bpf } for pid=2395 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:26.345000 audit: BPF prog-id=119 op=LOAD Mar 17 18:45:26.345000 audit[2395]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000117770 a2=78 a3=c0001ddd58 items=0 ppid=2156 pid=2395 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:45:26.345000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3132643164633764383937613431666564653764396635363234333164 Mar 17 18:45:26.346000 audit: BPF prog-id=119 op=UNLOAD Mar 17 18:45:26.346000 audit: BPF prog-id=118 op=UNLOAD Mar 17 18:45:26.346000 audit[2395]: AVC avc: denied { bpf } for pid=2395 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:26.346000 audit[2395]: AVC avc: denied { bpf } for pid=2395 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:26.346000 audit[2395]: AVC avc: denied { bpf } for pid=2395 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:26.346000 audit[2395]: AVC avc: denied { perfmon } for pid=2395 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:26.346000 audit[2395]: AVC avc: denied { perfmon } for pid=2395 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:26.346000 audit[2395]: AVC avc: denied { perfmon } for pid=2395 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:26.346000 audit[2395]: AVC avc: denied { perfmon } for pid=2395 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:26.346000 audit[2395]: AVC avc: denied { perfmon } for pid=2395 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:26.346000 audit[2395]: AVC avc: denied { bpf } for pid=2395 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:26.346000 audit[2395]: AVC avc: denied { bpf } for pid=2395 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:26.346000 audit: BPF prog-id=120 op=LOAD Mar 17 18:45:26.346000 audit[2395]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000117c30 a2=78 a3=c0003ba168 items=0 ppid=2156 pid=2395 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:45:26.346000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3132643164633764383937613431666564653764396635363234333164 Mar 17 18:45:26.364670 env[1203]: time="2025-03-17T18:45:26.364620135Z" level=info msg="StartContainer for \"12d1dc7d897a41fede7d9f562431d37ebf723b6c16033dbb3eb2b1282a879dd2\" returns successfully" Mar 17 18:45:26.647651 kubelet[2045]: I0317 18:45:26.647480 2045 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="tigera-operator/tigera-operator-7bc55997bb-plr5f" podStartSLOduration=1.217884784 podStartE2EDuration="3.647463544s" podCreationTimestamp="2025-03-17 18:45:23 +0000 UTC" firstStartedPulling="2025-03-17 18:45:23.874984711 +0000 UTC m=+16.362985549" lastFinishedPulling="2025-03-17 18:45:26.304563471 +0000 UTC m=+18.792564309" observedRunningTime="2025-03-17 18:45:26.647335492 +0000 UTC m=+19.135336340" watchObservedRunningTime="2025-03-17 18:45:26.647463544 +0000 UTC m=+19.135464382" Mar 17 18:45:27.313677 systemd[1]: run-containerd-runc-k8s.io-12d1dc7d897a41fede7d9f562431d37ebf723b6c16033dbb3eb2b1282a879dd2-runc.7aHuTa.mount: Deactivated successfully. Mar 17 18:45:29.456000 audit[2431]: NETFILTER_CFG table=filter:89 family=2 entries=15 op=nft_register_rule pid=2431 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Mar 17 18:45:29.459351 kernel: kauditd_printk_skb: 360 callbacks suppressed Mar 17 18:45:29.459417 kernel: audit: type=1325 audit(1742237129.456:920): table=filter:89 family=2 entries=15 op=nft_register_rule pid=2431 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Mar 17 18:45:29.456000 audit[2431]: SYSCALL arch=c000003e syscall=46 success=yes exit=5908 a0=3 a1=7ffc446ccb20 a2=0 a3=7ffc446ccb0c items=0 ppid=2248 pid=2431 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:45:29.469047 kernel: audit: type=1300 audit(1742237129.456:920): arch=c000003e syscall=46 success=yes exit=5908 a0=3 a1=7ffc446ccb20 a2=0 a3=7ffc446ccb0c items=0 ppid=2248 pid=2431 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:45:29.469131 kernel: audit: type=1327 audit(1742237129.456:920): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Mar 17 18:45:29.456000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Mar 17 18:45:29.472000 audit[2431]: NETFILTER_CFG table=nat:90 family=2 entries=12 op=nft_register_rule pid=2431 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Mar 17 18:45:29.472000 audit[2431]: SYSCALL arch=c000003e syscall=46 success=yes exit=2700 a0=3 a1=7ffc446ccb20 a2=0 a3=0 items=0 ppid=2248 pid=2431 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:45:29.483881 kernel: audit: type=1325 audit(1742237129.472:921): table=nat:90 family=2 entries=12 op=nft_register_rule pid=2431 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Mar 17 18:45:29.484039 kernel: audit: type=1300 audit(1742237129.472:921): arch=c000003e syscall=46 success=yes exit=2700 a0=3 a1=7ffc446ccb20 a2=0 a3=0 items=0 ppid=2248 pid=2431 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:45:29.484059 kernel: audit: type=1327 audit(1742237129.472:921): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Mar 17 18:45:29.472000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Mar 17 18:45:29.491000 audit[2433]: NETFILTER_CFG table=filter:91 family=2 entries=16 op=nft_register_rule pid=2433 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Mar 17 18:45:29.491000 audit[2433]: SYSCALL arch=c000003e syscall=46 success=yes exit=5908 a0=3 a1=7fffd756e4b0 a2=0 a3=7fffd756e49c items=0 ppid=2248 pid=2433 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:45:29.501319 kernel: audit: type=1325 audit(1742237129.491:922): table=filter:91 family=2 entries=16 op=nft_register_rule pid=2433 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Mar 17 18:45:29.501378 kernel: audit: type=1300 audit(1742237129.491:922): arch=c000003e syscall=46 success=yes exit=5908 a0=3 a1=7fffd756e4b0 a2=0 a3=7fffd756e49c items=0 ppid=2248 pid=2433 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:45:29.491000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Mar 17 18:45:29.503787 kernel: audit: type=1327 audit(1742237129.491:922): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Mar 17 18:45:29.504000 audit[2433]: NETFILTER_CFG table=nat:92 family=2 entries=12 op=nft_register_rule pid=2433 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Mar 17 18:45:29.504000 audit[2433]: SYSCALL arch=c000003e syscall=46 success=yes exit=2700 a0=3 a1=7fffd756e4b0 a2=0 a3=0 items=0 ppid=2248 pid=2433 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:45:29.504000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Mar 17 18:45:29.509693 kernel: audit: type=1325 audit(1742237129.504:923): table=nat:92 family=2 entries=12 op=nft_register_rule pid=2433 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Mar 17 18:45:29.620093 kubelet[2045]: I0317 18:45:29.620027 2045 topology_manager.go:215] "Topology Admit Handler" podUID="e8e2adb3-214f-45f1-8fe0-922ff0f0bb3a" podNamespace="calico-system" podName="calico-typha-854944bd89-cgpcv" Mar 17 18:45:29.627392 systemd[1]: Created slice kubepods-besteffort-pode8e2adb3_214f_45f1_8fe0_922ff0f0bb3a.slice. Mar 17 18:45:29.639138 kubelet[2045]: I0317 18:45:29.639102 2045 reconciler_common.go:247] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-hpkqd\" (UniqueName: \"kubernetes.io/projected/e8e2adb3-214f-45f1-8fe0-922ff0f0bb3a-kube-api-access-hpkqd\") pod \"calico-typha-854944bd89-cgpcv\" (UID: \"e8e2adb3-214f-45f1-8fe0-922ff0f0bb3a\") " pod="calico-system/calico-typha-854944bd89-cgpcv" Mar 17 18:45:29.639332 kubelet[2045]: I0317 18:45:29.639315 2045 reconciler_common.go:247] "operationExecutor.VerifyControllerAttachedVolume started for volume \"tigera-ca-bundle\" (UniqueName: \"kubernetes.io/configmap/e8e2adb3-214f-45f1-8fe0-922ff0f0bb3a-tigera-ca-bundle\") pod \"calico-typha-854944bd89-cgpcv\" (UID: \"e8e2adb3-214f-45f1-8fe0-922ff0f0bb3a\") " pod="calico-system/calico-typha-854944bd89-cgpcv" Mar 17 18:45:29.639458 kubelet[2045]: I0317 18:45:29.639423 2045 reconciler_common.go:247] "operationExecutor.VerifyControllerAttachedVolume started for volume \"typha-certs\" (UniqueName: \"kubernetes.io/secret/e8e2adb3-214f-45f1-8fe0-922ff0f0bb3a-typha-certs\") pod \"calico-typha-854944bd89-cgpcv\" (UID: \"e8e2adb3-214f-45f1-8fe0-922ff0f0bb3a\") " pod="calico-system/calico-typha-854944bd89-cgpcv" Mar 17 18:45:29.672807 kubelet[2045]: I0317 18:45:29.672767 2045 topology_manager.go:215] "Topology Admit Handler" podUID="a4a6a0b9-4cb6-445c-a91d-7a406225a306" podNamespace="calico-system" podName="calico-node-w9q5f" Mar 17 18:45:29.680623 systemd[1]: Created slice kubepods-besteffort-poda4a6a0b9_4cb6_445c_a91d_7a406225a306.slice. Mar 17 18:45:29.739926 kubelet[2045]: I0317 18:45:29.739875 2045 reconciler_common.go:247] "operationExecutor.VerifyControllerAttachedVolume started for volume \"policysync\" (UniqueName: \"kubernetes.io/host-path/a4a6a0b9-4cb6-445c-a91d-7a406225a306-policysync\") pod \"calico-node-w9q5f\" (UID: \"a4a6a0b9-4cb6-445c-a91d-7a406225a306\") " pod="calico-system/calico-node-w9q5f" Mar 17 18:45:29.739926 kubelet[2045]: I0317 18:45:29.739922 2045 reconciler_common.go:247] "operationExecutor.VerifyControllerAttachedVolume started for volume \"node-certs\" (UniqueName: \"kubernetes.io/secret/a4a6a0b9-4cb6-445c-a91d-7a406225a306-node-certs\") pod \"calico-node-w9q5f\" (UID: \"a4a6a0b9-4cb6-445c-a91d-7a406225a306\") " pod="calico-system/calico-node-w9q5f" Mar 17 18:45:29.740138 kubelet[2045]: I0317 18:45:29.739946 2045 reconciler_common.go:247] "operationExecutor.VerifyControllerAttachedVolume started for volume \"var-run-calico\" (UniqueName: \"kubernetes.io/host-path/a4a6a0b9-4cb6-445c-a91d-7a406225a306-var-run-calico\") pod \"calico-node-w9q5f\" (UID: \"a4a6a0b9-4cb6-445c-a91d-7a406225a306\") " pod="calico-system/calico-node-w9q5f" Mar 17 18:45:29.740138 kubelet[2045]: I0317 18:45:29.739994 2045 reconciler_common.go:247] "operationExecutor.VerifyControllerAttachedVolume started for volume \"lib-modules\" (UniqueName: \"kubernetes.io/host-path/a4a6a0b9-4cb6-445c-a91d-7a406225a306-lib-modules\") pod \"calico-node-w9q5f\" (UID: \"a4a6a0b9-4cb6-445c-a91d-7a406225a306\") " pod="calico-system/calico-node-w9q5f" Mar 17 18:45:29.740138 kubelet[2045]: I0317 18:45:29.740012 2045 reconciler_common.go:247] "operationExecutor.VerifyControllerAttachedVolume started for volume \"xtables-lock\" (UniqueName: \"kubernetes.io/host-path/a4a6a0b9-4cb6-445c-a91d-7a406225a306-xtables-lock\") pod \"calico-node-w9q5f\" (UID: \"a4a6a0b9-4cb6-445c-a91d-7a406225a306\") " pod="calico-system/calico-node-w9q5f" Mar 17 18:45:29.740138 kubelet[2045]: I0317 18:45:29.740030 2045 reconciler_common.go:247] "operationExecutor.VerifyControllerAttachedVolume started for volume \"flexvol-driver-host\" (UniqueName: \"kubernetes.io/host-path/a4a6a0b9-4cb6-445c-a91d-7a406225a306-flexvol-driver-host\") pod \"calico-node-w9q5f\" (UID: \"a4a6a0b9-4cb6-445c-a91d-7a406225a306\") " pod="calico-system/calico-node-w9q5f" Mar 17 18:45:29.740138 kubelet[2045]: I0317 18:45:29.740063 2045 reconciler_common.go:247] "operationExecutor.VerifyControllerAttachedVolume started for volume \"cni-net-dir\" (UniqueName: \"kubernetes.io/host-path/a4a6a0b9-4cb6-445c-a91d-7a406225a306-cni-net-dir\") pod \"calico-node-w9q5f\" (UID: \"a4a6a0b9-4cb6-445c-a91d-7a406225a306\") " pod="calico-system/calico-node-w9q5f" Mar 17 18:45:29.740459 kubelet[2045]: I0317 18:45:29.740427 2045 reconciler_common.go:247] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-2mmhm\" (UniqueName: \"kubernetes.io/projected/a4a6a0b9-4cb6-445c-a91d-7a406225a306-kube-api-access-2mmhm\") pod \"calico-node-w9q5f\" (UID: \"a4a6a0b9-4cb6-445c-a91d-7a406225a306\") " pod="calico-system/calico-node-w9q5f" Mar 17 18:45:29.740512 kubelet[2045]: I0317 18:45:29.740466 2045 reconciler_common.go:247] "operationExecutor.VerifyControllerAttachedVolume started for volume \"cni-bin-dir\" (UniqueName: \"kubernetes.io/host-path/a4a6a0b9-4cb6-445c-a91d-7a406225a306-cni-bin-dir\") pod \"calico-node-w9q5f\" (UID: \"a4a6a0b9-4cb6-445c-a91d-7a406225a306\") " pod="calico-system/calico-node-w9q5f" Mar 17 18:45:29.740512 kubelet[2045]: I0317 18:45:29.740488 2045 reconciler_common.go:247] "operationExecutor.VerifyControllerAttachedVolume started for volume \"cni-log-dir\" (UniqueName: \"kubernetes.io/host-path/a4a6a0b9-4cb6-445c-a91d-7a406225a306-cni-log-dir\") pod \"calico-node-w9q5f\" (UID: \"a4a6a0b9-4cb6-445c-a91d-7a406225a306\") " pod="calico-system/calico-node-w9q5f" Mar 17 18:45:29.740512 kubelet[2045]: I0317 18:45:29.740507 2045 reconciler_common.go:247] "operationExecutor.VerifyControllerAttachedVolume started for volume \"var-lib-calico\" (UniqueName: \"kubernetes.io/host-path/a4a6a0b9-4cb6-445c-a91d-7a406225a306-var-lib-calico\") pod \"calico-node-w9q5f\" (UID: \"a4a6a0b9-4cb6-445c-a91d-7a406225a306\") " pod="calico-system/calico-node-w9q5f" Mar 17 18:45:29.740586 kubelet[2045]: I0317 18:45:29.740538 2045 reconciler_common.go:247] "operationExecutor.VerifyControllerAttachedVolume started for volume \"tigera-ca-bundle\" (UniqueName: \"kubernetes.io/configmap/a4a6a0b9-4cb6-445c-a91d-7a406225a306-tigera-ca-bundle\") pod \"calico-node-w9q5f\" (UID: \"a4a6a0b9-4cb6-445c-a91d-7a406225a306\") " pod="calico-system/calico-node-w9q5f" Mar 17 18:45:29.794234 kubelet[2045]: I0317 18:45:29.794148 2045 topology_manager.go:215] "Topology Admit Handler" podUID="42df0b30-e0d7-4f61-83fe-313c16a7f709" podNamespace="calico-system" podName="csi-node-driver-6vr94" Mar 17 18:45:29.794936 kubelet[2045]: E0317 18:45:29.794916 2045 pod_workers.go:1298] "Error syncing pod, skipping" err="network is not ready: container runtime network not ready: NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" pod="calico-system/csi-node-driver-6vr94" podUID="42df0b30-e0d7-4f61-83fe-313c16a7f709" Mar 17 18:45:29.840788 kubelet[2045]: I0317 18:45:29.840732 2045 reconciler_common.go:247] "operationExecutor.VerifyControllerAttachedVolume started for volume \"varrun\" (UniqueName: \"kubernetes.io/host-path/42df0b30-e0d7-4f61-83fe-313c16a7f709-varrun\") pod \"csi-node-driver-6vr94\" (UID: \"42df0b30-e0d7-4f61-83fe-313c16a7f709\") " pod="calico-system/csi-node-driver-6vr94" Mar 17 18:45:29.840967 kubelet[2045]: I0317 18:45:29.840822 2045 reconciler_common.go:247] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kubelet-dir\" (UniqueName: \"kubernetes.io/host-path/42df0b30-e0d7-4f61-83fe-313c16a7f709-kubelet-dir\") pod \"csi-node-driver-6vr94\" (UID: \"42df0b30-e0d7-4f61-83fe-313c16a7f709\") " pod="calico-system/csi-node-driver-6vr94" Mar 17 18:45:29.840967 kubelet[2045]: I0317 18:45:29.840839 2045 reconciler_common.go:247] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-5b2xl\" (UniqueName: \"kubernetes.io/projected/42df0b30-e0d7-4f61-83fe-313c16a7f709-kube-api-access-5b2xl\") pod \"csi-node-driver-6vr94\" (UID: \"42df0b30-e0d7-4f61-83fe-313c16a7f709\") " pod="calico-system/csi-node-driver-6vr94" Mar 17 18:45:29.840967 kubelet[2045]: I0317 18:45:29.840897 2045 reconciler_common.go:247] "operationExecutor.VerifyControllerAttachedVolume started for volume \"socket-dir\" (UniqueName: \"kubernetes.io/host-path/42df0b30-e0d7-4f61-83fe-313c16a7f709-socket-dir\") pod \"csi-node-driver-6vr94\" (UID: \"42df0b30-e0d7-4f61-83fe-313c16a7f709\") " pod="calico-system/csi-node-driver-6vr94" Mar 17 18:45:29.840967 kubelet[2045]: I0317 18:45:29.840921 2045 reconciler_common.go:247] "operationExecutor.VerifyControllerAttachedVolume started for volume \"registration-dir\" (UniqueName: \"kubernetes.io/host-path/42df0b30-e0d7-4f61-83fe-313c16a7f709-registration-dir\") pod \"csi-node-driver-6vr94\" (UID: \"42df0b30-e0d7-4f61-83fe-313c16a7f709\") " pod="calico-system/csi-node-driver-6vr94" Mar 17 18:45:29.842610 kubelet[2045]: E0317 18:45:29.842584 2045 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Mar 17 18:45:29.842610 kubelet[2045]: W0317 18:45:29.842607 2045 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Mar 17 18:45:29.842706 kubelet[2045]: E0317 18:45:29.842623 2045 plugins.go:730] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Mar 17 18:45:29.849228 kubelet[2045]: E0317 18:45:29.849172 2045 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Mar 17 18:45:29.849228 kubelet[2045]: W0317 18:45:29.849221 2045 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Mar 17 18:45:29.849361 kubelet[2045]: E0317 18:45:29.849254 2045 plugins.go:730] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Mar 17 18:45:29.854796 kubelet[2045]: E0317 18:45:29.854739 2045 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Mar 17 18:45:29.854796 kubelet[2045]: W0317 18:45:29.854776 2045 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Mar 17 18:45:29.854796 kubelet[2045]: E0317 18:45:29.854795 2045 plugins.go:730] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Mar 17 18:45:29.931549 kubelet[2045]: E0317 18:45:29.931510 2045 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Mar 17 18:45:29.932354 env[1203]: time="2025-03-17T18:45:29.932016968Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-typha-854944bd89-cgpcv,Uid:e8e2adb3-214f-45f1-8fe0-922ff0f0bb3a,Namespace:calico-system,Attempt:0,}" Mar 17 18:45:29.942042 kubelet[2045]: E0317 18:45:29.942003 2045 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Mar 17 18:45:29.942246 kubelet[2045]: W0317 18:45:29.942193 2045 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Mar 17 18:45:29.942457 kubelet[2045]: E0317 18:45:29.942258 2045 plugins.go:730] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Mar 17 18:45:29.942702 kubelet[2045]: E0317 18:45:29.942663 2045 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Mar 17 18:45:29.942702 kubelet[2045]: W0317 18:45:29.942692 2045 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Mar 17 18:45:29.942909 kubelet[2045]: E0317 18:45:29.942731 2045 plugins.go:730] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Mar 17 18:45:29.943180 kubelet[2045]: E0317 18:45:29.943161 2045 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Mar 17 18:45:29.943180 kubelet[2045]: W0317 18:45:29.943176 2045 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Mar 17 18:45:29.943255 kubelet[2045]: E0317 18:45:29.943194 2045 plugins.go:730] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Mar 17 18:45:29.943496 kubelet[2045]: E0317 18:45:29.943449 2045 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Mar 17 18:45:29.943496 kubelet[2045]: W0317 18:45:29.943464 2045 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Mar 17 18:45:29.943496 kubelet[2045]: E0317 18:45:29.943493 2045 plugins.go:730] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Mar 17 18:45:29.943819 kubelet[2045]: E0317 18:45:29.943801 2045 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Mar 17 18:45:29.943819 kubelet[2045]: W0317 18:45:29.943815 2045 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Mar 17 18:45:29.943936 kubelet[2045]: E0317 18:45:29.943906 2045 plugins.go:730] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Mar 17 18:45:29.946657 kubelet[2045]: E0317 18:45:29.944176 2045 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Mar 17 18:45:29.946657 kubelet[2045]: W0317 18:45:29.944190 2045 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Mar 17 18:45:29.946657 kubelet[2045]: E0317 18:45:29.944259 2045 plugins.go:730] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Mar 17 18:45:29.946657 kubelet[2045]: E0317 18:45:29.944367 2045 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Mar 17 18:45:29.946657 kubelet[2045]: W0317 18:45:29.944375 2045 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Mar 17 18:45:29.946657 kubelet[2045]: E0317 18:45:29.944449 2045 plugins.go:730] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Mar 17 18:45:29.946657 kubelet[2045]: E0317 18:45:29.944556 2045 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Mar 17 18:45:29.946657 kubelet[2045]: W0317 18:45:29.944565 2045 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Mar 17 18:45:29.946657 kubelet[2045]: E0317 18:45:29.944643 2045 plugins.go:730] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Mar 17 18:45:29.946657 kubelet[2045]: E0317 18:45:29.944768 2045 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Mar 17 18:45:29.946969 kubelet[2045]: W0317 18:45:29.944777 2045 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Mar 17 18:45:29.946969 kubelet[2045]: E0317 18:45:29.944790 2045 plugins.go:730] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Mar 17 18:45:29.946969 kubelet[2045]: E0317 18:45:29.945004 2045 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Mar 17 18:45:29.946969 kubelet[2045]: W0317 18:45:29.945014 2045 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Mar 17 18:45:29.946969 kubelet[2045]: E0317 18:45:29.945031 2045 plugins.go:730] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Mar 17 18:45:29.946969 kubelet[2045]: E0317 18:45:29.945192 2045 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Mar 17 18:45:29.946969 kubelet[2045]: W0317 18:45:29.945203 2045 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Mar 17 18:45:29.946969 kubelet[2045]: E0317 18:45:29.945215 2045 plugins.go:730] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Mar 17 18:45:29.946969 kubelet[2045]: E0317 18:45:29.945521 2045 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Mar 17 18:45:29.946969 kubelet[2045]: W0317 18:45:29.945532 2045 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Mar 17 18:45:29.947179 kubelet[2045]: E0317 18:45:29.945641 2045 plugins.go:730] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Mar 17 18:45:29.947179 kubelet[2045]: E0317 18:45:29.945727 2045 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Mar 17 18:45:29.947179 kubelet[2045]: W0317 18:45:29.945735 2045 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Mar 17 18:45:29.947179 kubelet[2045]: E0317 18:45:29.945829 2045 plugins.go:730] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Mar 17 18:45:29.947179 kubelet[2045]: E0317 18:45:29.945918 2045 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Mar 17 18:45:29.947179 kubelet[2045]: W0317 18:45:29.945928 2045 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Mar 17 18:45:29.947179 kubelet[2045]: E0317 18:45:29.946008 2045 plugins.go:730] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Mar 17 18:45:29.947179 kubelet[2045]: E0317 18:45:29.946083 2045 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Mar 17 18:45:29.947179 kubelet[2045]: W0317 18:45:29.946091 2045 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Mar 17 18:45:29.947179 kubelet[2045]: E0317 18:45:29.946178 2045 plugins.go:730] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Mar 17 18:45:29.947393 kubelet[2045]: E0317 18:45:29.946244 2045 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Mar 17 18:45:29.947393 kubelet[2045]: W0317 18:45:29.946251 2045 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Mar 17 18:45:29.947393 kubelet[2045]: E0317 18:45:29.946335 2045 plugins.go:730] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Mar 17 18:45:29.947393 kubelet[2045]: E0317 18:45:29.946421 2045 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Mar 17 18:45:29.947393 kubelet[2045]: W0317 18:45:29.946430 2045 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Mar 17 18:45:29.947393 kubelet[2045]: E0317 18:45:29.946443 2045 plugins.go:730] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Mar 17 18:45:29.947393 kubelet[2045]: E0317 18:45:29.946609 2045 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Mar 17 18:45:29.947393 kubelet[2045]: W0317 18:45:29.946619 2045 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Mar 17 18:45:29.947393 kubelet[2045]: E0317 18:45:29.946656 2045 plugins.go:730] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Mar 17 18:45:29.947393 kubelet[2045]: E0317 18:45:29.946879 2045 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Mar 17 18:45:29.947599 kubelet[2045]: W0317 18:45:29.946889 2045 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Mar 17 18:45:29.947599 kubelet[2045]: E0317 18:45:29.946906 2045 plugins.go:730] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Mar 17 18:45:29.951703 kubelet[2045]: E0317 18:45:29.951120 2045 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Mar 17 18:45:29.951703 kubelet[2045]: W0317 18:45:29.951147 2045 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Mar 17 18:45:29.951703 kubelet[2045]: E0317 18:45:29.951175 2045 plugins.go:730] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Mar 17 18:45:29.951703 kubelet[2045]: E0317 18:45:29.951441 2045 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Mar 17 18:45:29.951703 kubelet[2045]: W0317 18:45:29.951451 2045 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Mar 17 18:45:29.951703 kubelet[2045]: E0317 18:45:29.951500 2045 plugins.go:730] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Mar 17 18:45:29.951703 kubelet[2045]: E0317 18:45:29.951665 2045 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Mar 17 18:45:29.951703 kubelet[2045]: W0317 18:45:29.951675 2045 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Mar 17 18:45:29.951977 kubelet[2045]: E0317 18:45:29.951721 2045 plugins.go:730] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Mar 17 18:45:29.952197 kubelet[2045]: E0317 18:45:29.952171 2045 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Mar 17 18:45:29.952197 kubelet[2045]: W0317 18:45:29.952188 2045 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Mar 17 18:45:29.952269 kubelet[2045]: E0317 18:45:29.952206 2045 plugins.go:730] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Mar 17 18:45:29.953713 kubelet[2045]: E0317 18:45:29.953694 2045 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Mar 17 18:45:29.953713 kubelet[2045]: W0317 18:45:29.953710 2045 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Mar 17 18:45:29.953833 kubelet[2045]: E0317 18:45:29.953732 2045 plugins.go:730] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Mar 17 18:45:29.955074 kubelet[2045]: E0317 18:45:29.954137 2045 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Mar 17 18:45:29.955074 kubelet[2045]: W0317 18:45:29.954172 2045 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Mar 17 18:45:29.955074 kubelet[2045]: E0317 18:45:29.954197 2045 plugins.go:730] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Mar 17 18:45:29.955208 env[1203]: time="2025-03-17T18:45:29.955039874Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Mar 17 18:45:29.955208 env[1203]: time="2025-03-17T18:45:29.955106881Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Mar 17 18:45:29.955208 env[1203]: time="2025-03-17T18:45:29.955131708Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Mar 17 18:45:29.958136 env[1203]: time="2025-03-17T18:45:29.955704918Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/be09d31976c04d30d4eb0e528ce6133d32e55892556acdf9a95cd47560fe691e pid=2473 runtime=io.containerd.runc.v2 Mar 17 18:45:29.962262 kubelet[2045]: E0317 18:45:29.962240 2045 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Mar 17 18:45:29.962371 kubelet[2045]: W0317 18:45:29.962352 2045 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Mar 17 18:45:29.962457 kubelet[2045]: E0317 18:45:29.962441 2045 plugins.go:730] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Mar 17 18:45:29.975497 systemd[1]: Started cri-containerd-be09d31976c04d30d4eb0e528ce6133d32e55892556acdf9a95cd47560fe691e.scope. Mar 17 18:45:29.984091 kubelet[2045]: E0317 18:45:29.983726 2045 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Mar 17 18:45:29.984612 env[1203]: time="2025-03-17T18:45:29.984568351Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-node-w9q5f,Uid:a4a6a0b9-4cb6-445c-a91d-7a406225a306,Namespace:calico-system,Attempt:0,}" Mar 17 18:45:29.986000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:29.986000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:29.986000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:29.986000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:29.986000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:29.986000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:29.986000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:29.986000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:29.986000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:29.987000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:29.987000 audit: BPF prog-id=121 op=LOAD Mar 17 18:45:29.988000 audit[2483]: AVC avc: denied { bpf } for pid=2483 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:29.988000 audit[2483]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000197c48 a2=10 a3=1c items=0 ppid=2473 pid=2483 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:45:29.988000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6265303964333139373663303464333064346562306535323863653631 Mar 17 18:45:29.992000 audit[2483]: AVC avc: denied { perfmon } for pid=2483 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:29.992000 audit[2483]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001976b0 a2=3c a3=c items=0 ppid=2473 pid=2483 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:45:29.992000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6265303964333139373663303464333064346562306535323863653631 Mar 17 18:45:29.992000 audit[2483]: AVC avc: denied { bpf } for pid=2483 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:29.992000 audit[2483]: AVC avc: denied { bpf } for pid=2483 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:29.992000 audit[2483]: AVC avc: denied { bpf } for pid=2483 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:29.992000 audit[2483]: AVC avc: denied { perfmon } for pid=2483 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:29.992000 audit[2483]: AVC avc: denied { perfmon } for pid=2483 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:29.992000 audit[2483]: AVC avc: denied { perfmon } for pid=2483 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:29.992000 audit[2483]: AVC avc: denied { perfmon } for pid=2483 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:29.992000 audit[2483]: AVC avc: denied { perfmon } for pid=2483 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:29.992000 audit[2483]: AVC avc: denied { bpf } for pid=2483 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:29.992000 audit[2483]: AVC avc: denied { bpf } for pid=2483 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:29.992000 audit: BPF prog-id=122 op=LOAD Mar 17 18:45:29.992000 audit[2483]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001979d8 a2=78 a3=c0002ade10 items=0 ppid=2473 pid=2483 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:45:29.992000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6265303964333139373663303464333064346562306535323863653631 Mar 17 18:45:29.992000 audit[2483]: AVC avc: denied { bpf } for pid=2483 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:29.992000 audit[2483]: AVC avc: denied { bpf } for pid=2483 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:29.992000 audit[2483]: AVC avc: denied { perfmon } for pid=2483 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:29.992000 audit[2483]: AVC avc: denied { perfmon } for pid=2483 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:29.992000 audit[2483]: AVC avc: denied { perfmon } for pid=2483 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:29.992000 audit[2483]: AVC avc: denied { perfmon } for pid=2483 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:29.992000 audit[2483]: AVC avc: denied { perfmon } for pid=2483 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:29.992000 audit[2483]: AVC avc: denied { bpf } for pid=2483 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:29.992000 audit[2483]: AVC avc: denied { bpf } for pid=2483 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:29.992000 audit: BPF prog-id=123 op=LOAD Mar 17 18:45:29.992000 audit[2483]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000197770 a2=78 a3=c0002ade58 items=0 ppid=2473 pid=2483 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:45:29.992000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6265303964333139373663303464333064346562306535323863653631 Mar 17 18:45:29.994000 audit: BPF prog-id=123 op=UNLOAD Mar 17 18:45:29.994000 audit: BPF prog-id=122 op=UNLOAD Mar 17 18:45:29.994000 audit[2483]: AVC avc: denied { bpf } for pid=2483 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:29.994000 audit[2483]: AVC avc: denied { bpf } for pid=2483 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:29.994000 audit[2483]: AVC avc: denied { bpf } for pid=2483 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:29.994000 audit[2483]: AVC avc: denied { perfmon } for pid=2483 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:29.994000 audit[2483]: AVC avc: denied { perfmon } for pid=2483 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:29.994000 audit[2483]: AVC avc: denied { perfmon } for pid=2483 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:29.994000 audit[2483]: AVC avc: denied { perfmon } for pid=2483 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:29.994000 audit[2483]: AVC avc: denied { perfmon } for pid=2483 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:29.994000 audit[2483]: AVC avc: denied { bpf } for pid=2483 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:29.994000 audit[2483]: AVC avc: denied { bpf } for pid=2483 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:29.994000 audit: BPF prog-id=124 op=LOAD Mar 17 18:45:29.994000 audit[2483]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000197c30 a2=78 a3=c0002fe268 items=0 ppid=2473 pid=2483 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:45:29.994000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6265303964333139373663303464333064346562306535323863653631 Mar 17 18:45:30.013974 env[1203]: time="2025-03-17T18:45:30.013794469Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Mar 17 18:45:30.013974 env[1203]: time="2025-03-17T18:45:30.013870703Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Mar 17 18:45:30.013974 env[1203]: time="2025-03-17T18:45:30.013880401Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Mar 17 18:45:30.015372 env[1203]: time="2025-03-17T18:45:30.015005573Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/16117826460450915279b8087648822d1267c59a99e1708f439b9e9fe8864fb2 pid=2511 runtime=io.containerd.runc.v2 Mar 17 18:45:30.034438 env[1203]: time="2025-03-17T18:45:30.033455690Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-typha-854944bd89-cgpcv,Uid:e8e2adb3-214f-45f1-8fe0-922ff0f0bb3a,Namespace:calico-system,Attempt:0,} returns sandbox id \"be09d31976c04d30d4eb0e528ce6133d32e55892556acdf9a95cd47560fe691e\"" Mar 17 18:45:30.034243 systemd[1]: Started cri-containerd-16117826460450915279b8087648822d1267c59a99e1708f439b9e9fe8864fb2.scope. Mar 17 18:45:30.034778 kubelet[2045]: E0317 18:45:30.034703 2045 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Mar 17 18:45:30.036401 env[1203]: time="2025-03-17T18:45:30.036350649Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/typha:v3.29.1\"" Mar 17 18:45:30.048000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:30.048000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:30.048000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:30.048000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:30.048000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:30.048000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:30.048000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:30.048000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:30.048000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:30.048000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:30.048000 audit: BPF prog-id=125 op=LOAD Mar 17 18:45:30.049000 audit[2520]: AVC avc: denied { bpf } for pid=2520 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:30.049000 audit[2520]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c00023dc48 a2=10 a3=1c items=0 ppid=2511 pid=2520 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:45:30.049000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3136313137383236343630343530393135323739623830383736343838 Mar 17 18:45:30.049000 audit[2520]: AVC avc: denied { perfmon } for pid=2520 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:30.049000 audit[2520]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c00023d6b0 a2=3c a3=c items=0 ppid=2511 pid=2520 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:45:30.049000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3136313137383236343630343530393135323739623830383736343838 Mar 17 18:45:30.049000 audit[2520]: AVC avc: denied { bpf } for pid=2520 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:30.049000 audit[2520]: AVC avc: denied { bpf } for pid=2520 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:30.049000 audit[2520]: AVC avc: denied { bpf } for pid=2520 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:30.049000 audit[2520]: AVC avc: denied { perfmon } for pid=2520 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:30.049000 audit[2520]: AVC avc: denied { perfmon } for pid=2520 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:30.049000 audit[2520]: AVC avc: denied { perfmon } for pid=2520 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:30.049000 audit[2520]: AVC avc: denied { perfmon } for pid=2520 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:30.049000 audit[2520]: AVC avc: denied { perfmon } for pid=2520 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:30.049000 audit[2520]: AVC avc: denied { bpf } for pid=2520 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:30.049000 audit[2520]: AVC avc: denied { bpf } for pid=2520 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:30.049000 audit: BPF prog-id=126 op=LOAD Mar 17 18:45:30.049000 audit[2520]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c00023d9d8 a2=78 a3=c00022da60 items=0 ppid=2511 pid=2520 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:45:30.049000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3136313137383236343630343530393135323739623830383736343838 Mar 17 18:45:30.049000 audit[2520]: AVC avc: denied { bpf } for pid=2520 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:30.049000 audit[2520]: AVC avc: denied { bpf } for pid=2520 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:30.049000 audit[2520]: AVC avc: denied { perfmon } for pid=2520 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:30.049000 audit[2520]: AVC avc: denied { perfmon } for pid=2520 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:30.049000 audit[2520]: AVC avc: denied { perfmon } for pid=2520 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:30.049000 audit[2520]: AVC avc: denied { perfmon } for pid=2520 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:30.049000 audit[2520]: AVC avc: denied { perfmon } for pid=2520 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:30.049000 audit[2520]: AVC avc: denied { bpf } for pid=2520 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:30.049000 audit[2520]: AVC avc: denied { bpf } for pid=2520 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:30.049000 audit: BPF prog-id=127 op=LOAD Mar 17 18:45:30.049000 audit[2520]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c00023d770 a2=78 a3=c00022daa8 items=0 ppid=2511 pid=2520 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:45:30.049000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3136313137383236343630343530393135323739623830383736343838 Mar 17 18:45:30.049000 audit: BPF prog-id=127 op=UNLOAD Mar 17 18:45:30.049000 audit: BPF prog-id=126 op=UNLOAD Mar 17 18:45:30.049000 audit[2520]: AVC avc: denied { bpf } for pid=2520 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:30.049000 audit[2520]: AVC avc: denied { bpf } for pid=2520 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:30.049000 audit[2520]: AVC avc: denied { bpf } for pid=2520 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:30.049000 audit[2520]: AVC avc: denied { perfmon } for pid=2520 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:30.049000 audit[2520]: AVC avc: denied { perfmon } for pid=2520 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:30.049000 audit[2520]: AVC avc: denied { perfmon } for pid=2520 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:30.049000 audit[2520]: AVC avc: denied { perfmon } for pid=2520 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:30.049000 audit[2520]: AVC avc: denied { perfmon } for pid=2520 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:30.049000 audit[2520]: AVC avc: denied { bpf } for pid=2520 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:30.049000 audit[2520]: AVC avc: denied { bpf } for pid=2520 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:30.049000 audit: BPF prog-id=128 op=LOAD Mar 17 18:45:30.049000 audit[2520]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c00023dc30 a2=78 a3=c00022deb8 items=0 ppid=2511 pid=2520 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:45:30.049000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3136313137383236343630343530393135323739623830383736343838 Mar 17 18:45:30.068420 env[1203]: time="2025-03-17T18:45:30.068355724Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-node-w9q5f,Uid:a4a6a0b9-4cb6-445c-a91d-7a406225a306,Namespace:calico-system,Attempt:0,} returns sandbox id \"16117826460450915279b8087648822d1267c59a99e1708f439b9e9fe8864fb2\"" Mar 17 18:45:30.076258 kubelet[2045]: E0317 18:45:30.075356 2045 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Mar 17 18:45:30.515000 audit[2554]: NETFILTER_CFG table=filter:93 family=2 entries=17 op=nft_register_rule pid=2554 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Mar 17 18:45:30.515000 audit[2554]: SYSCALL arch=c000003e syscall=46 success=yes exit=6652 a0=3 a1=7ffcc4e93a70 a2=0 a3=7ffcc4e93a5c items=0 ppid=2248 pid=2554 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:45:30.515000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Mar 17 18:45:30.526000 audit[2554]: NETFILTER_CFG table=nat:94 family=2 entries=12 op=nft_register_rule pid=2554 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Mar 17 18:45:30.526000 audit[2554]: SYSCALL arch=c000003e syscall=46 success=yes exit=2700 a0=3 a1=7ffcc4e93a70 a2=0 a3=0 items=0 ppid=2248 pid=2554 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:45:30.526000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Mar 17 18:45:31.595317 kubelet[2045]: E0317 18:45:31.595270 2045 pod_workers.go:1298] "Error syncing pod, skipping" err="network is not ready: container runtime network not ready: NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" pod="calico-system/csi-node-driver-6vr94" podUID="42df0b30-e0d7-4f61-83fe-313c16a7f709" Mar 17 18:45:32.733184 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount481158103.mount: Deactivated successfully. Mar 17 18:45:33.595522 kubelet[2045]: E0317 18:45:33.595464 2045 pod_workers.go:1298] "Error syncing pod, skipping" err="network is not ready: container runtime network not ready: NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" pod="calico-system/csi-node-driver-6vr94" podUID="42df0b30-e0d7-4f61-83fe-313c16a7f709" Mar 17 18:45:33.691667 env[1203]: time="2025-03-17T18:45:33.691597662Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/typha:v3.29.1,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Mar 17 18:45:33.693928 env[1203]: time="2025-03-17T18:45:33.693893577Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:4cb3738506f5a9c530033d1e24fd6b9ec618518a2ec8b012ded33572be06ab44,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Mar 17 18:45:33.695432 env[1203]: time="2025-03-17T18:45:33.695395176Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/typha:v3.29.1,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Mar 17 18:45:33.696968 env[1203]: time="2025-03-17T18:45:33.696940266Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/typha@sha256:768a194e1115c73bcbf35edb7afd18a63e16e08d940c79993565b6a3cca2da7c,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Mar 17 18:45:33.697307 env[1203]: time="2025-03-17T18:45:33.697277992Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/typha:v3.29.1\" returns image reference \"sha256:4cb3738506f5a9c530033d1e24fd6b9ec618518a2ec8b012ded33572be06ab44\"" Mar 17 18:45:33.698369 env[1203]: time="2025-03-17T18:45:33.698342397Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/pod2daemon-flexvol:v3.29.1\"" Mar 17 18:45:33.706974 env[1203]: time="2025-03-17T18:45:33.706918652Z" level=info msg="CreateContainer within sandbox \"be09d31976c04d30d4eb0e528ce6133d32e55892556acdf9a95cd47560fe691e\" for container &ContainerMetadata{Name:calico-typha,Attempt:0,}" Mar 17 18:45:33.720896 env[1203]: time="2025-03-17T18:45:33.720852899Z" level=info msg="CreateContainer within sandbox \"be09d31976c04d30d4eb0e528ce6133d32e55892556acdf9a95cd47560fe691e\" for &ContainerMetadata{Name:calico-typha,Attempt:0,} returns container id \"ee590b7994b9ea130690ef32a5aa9939744980d7a535127f6a2f5003d6edc245\"" Mar 17 18:45:33.721456 env[1203]: time="2025-03-17T18:45:33.721427632Z" level=info msg="StartContainer for \"ee590b7994b9ea130690ef32a5aa9939744980d7a535127f6a2f5003d6edc245\"" Mar 17 18:45:33.736445 systemd[1]: Started cri-containerd-ee590b7994b9ea130690ef32a5aa9939744980d7a535127f6a2f5003d6edc245.scope. Mar 17 18:45:33.748000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:33.748000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:33.748000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:33.748000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:33.748000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:33.748000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:33.748000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:33.748000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:33.748000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:33.749000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:33.749000 audit: BPF prog-id=129 op=LOAD Mar 17 18:45:33.749000 audit[2563]: AVC avc: denied { bpf } for pid=2563 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:33.749000 audit[2563]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c0001bfc48 a2=10 a3=1c items=0 ppid=2473 pid=2563 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:45:33.749000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6565353930623739393462396561313330363930656633326135616139 Mar 17 18:45:33.749000 audit[2563]: AVC avc: denied { perfmon } for pid=2563 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:33.749000 audit[2563]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001bf6b0 a2=3c a3=8 items=0 ppid=2473 pid=2563 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:45:33.749000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6565353930623739393462396561313330363930656633326135616139 Mar 17 18:45:33.749000 audit[2563]: AVC avc: denied { bpf } for pid=2563 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:33.749000 audit[2563]: AVC avc: denied { bpf } for pid=2563 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:33.749000 audit[2563]: AVC avc: denied { bpf } for pid=2563 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:33.749000 audit[2563]: AVC avc: denied { perfmon } for pid=2563 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:33.749000 audit[2563]: AVC avc: denied { perfmon } for pid=2563 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:33.749000 audit[2563]: AVC avc: denied { perfmon } for pid=2563 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:33.749000 audit[2563]: AVC avc: denied { perfmon } for pid=2563 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:33.749000 audit[2563]: AVC avc: denied { perfmon } for pid=2563 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:33.749000 audit[2563]: AVC avc: denied { bpf } for pid=2563 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:33.749000 audit[2563]: AVC avc: denied { bpf } for pid=2563 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:33.749000 audit: BPF prog-id=130 op=LOAD Mar 17 18:45:33.749000 audit[2563]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001bf9d8 a2=78 a3=c0000fbdc0 items=0 ppid=2473 pid=2563 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:45:33.749000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6565353930623739393462396561313330363930656633326135616139 Mar 17 18:45:33.749000 audit[2563]: AVC avc: denied { bpf } for pid=2563 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:33.749000 audit[2563]: AVC avc: denied { bpf } for pid=2563 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:33.749000 audit[2563]: AVC avc: denied { perfmon } for pid=2563 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:33.749000 audit[2563]: AVC avc: denied { perfmon } for pid=2563 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:33.749000 audit[2563]: AVC avc: denied { perfmon } for pid=2563 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:33.749000 audit[2563]: AVC avc: denied { perfmon } for pid=2563 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:33.749000 audit[2563]: AVC avc: denied { perfmon } for pid=2563 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:33.749000 audit[2563]: AVC avc: denied { bpf } for pid=2563 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:33.749000 audit[2563]: AVC avc: denied { bpf } for pid=2563 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:33.749000 audit: BPF prog-id=131 op=LOAD Mar 17 18:45:33.749000 audit[2563]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c0001bf770 a2=78 a3=c0000fbe08 items=0 ppid=2473 pid=2563 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:45:33.749000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6565353930623739393462396561313330363930656633326135616139 Mar 17 18:45:33.749000 audit: BPF prog-id=131 op=UNLOAD Mar 17 18:45:33.749000 audit: BPF prog-id=130 op=UNLOAD Mar 17 18:45:33.749000 audit[2563]: AVC avc: denied { bpf } for pid=2563 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:33.749000 audit[2563]: AVC avc: denied { bpf } for pid=2563 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:33.749000 audit[2563]: AVC avc: denied { bpf } for pid=2563 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:33.749000 audit[2563]: AVC avc: denied { perfmon } for pid=2563 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:33.749000 audit[2563]: AVC avc: denied { perfmon } for pid=2563 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:33.749000 audit[2563]: AVC avc: denied { perfmon } for pid=2563 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:33.749000 audit[2563]: AVC avc: denied { perfmon } for pid=2563 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:33.749000 audit[2563]: AVC avc: denied { perfmon } for pid=2563 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:33.749000 audit[2563]: AVC avc: denied { bpf } for pid=2563 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:33.749000 audit[2563]: AVC avc: denied { bpf } for pid=2563 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:33.749000 audit: BPF prog-id=132 op=LOAD Mar 17 18:45:33.749000 audit[2563]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001bfc30 a2=78 a3=c0003d4218 items=0 ppid=2473 pid=2563 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:45:33.749000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6565353930623739393462396561313330363930656633326135616139 Mar 17 18:45:33.778511 env[1203]: time="2025-03-17T18:45:33.778461413Z" level=info msg="StartContainer for \"ee590b7994b9ea130690ef32a5aa9939744980d7a535127f6a2f5003d6edc245\" returns successfully" Mar 17 18:45:34.662164 kubelet[2045]: E0317 18:45:34.662131 2045 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Mar 17 18:45:34.670481 kubelet[2045]: I0317 18:45:34.670424 2045 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="calico-system/calico-typha-854944bd89-cgpcv" podStartSLOduration=2.008387712 podStartE2EDuration="5.670409087s" podCreationTimestamp="2025-03-17 18:45:29 +0000 UTC" firstStartedPulling="2025-03-17 18:45:30.036118311 +0000 UTC m=+22.524119149" lastFinishedPulling="2025-03-17 18:45:33.698139686 +0000 UTC m=+26.186140524" observedRunningTime="2025-03-17 18:45:34.670185807 +0000 UTC m=+27.158186645" watchObservedRunningTime="2025-03-17 18:45:34.670409087 +0000 UTC m=+27.158409915" Mar 17 18:45:34.672198 kubelet[2045]: E0317 18:45:34.672171 2045 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Mar 17 18:45:34.672198 kubelet[2045]: W0317 18:45:34.672186 2045 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Mar 17 18:45:34.672198 kubelet[2045]: E0317 18:45:34.672199 2045 plugins.go:730] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Mar 17 18:45:34.672388 kubelet[2045]: E0317 18:45:34.672337 2045 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Mar 17 18:45:34.672388 kubelet[2045]: W0317 18:45:34.672347 2045 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Mar 17 18:45:34.672388 kubelet[2045]: E0317 18:45:34.672354 2045 plugins.go:730] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Mar 17 18:45:34.672644 kubelet[2045]: E0317 18:45:34.672510 2045 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Mar 17 18:45:34.672644 kubelet[2045]: W0317 18:45:34.672516 2045 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Mar 17 18:45:34.672644 kubelet[2045]: E0317 18:45:34.672522 2045 plugins.go:730] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Mar 17 18:45:34.672763 kubelet[2045]: E0317 18:45:34.672689 2045 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Mar 17 18:45:34.672763 kubelet[2045]: W0317 18:45:34.672695 2045 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Mar 17 18:45:34.672763 kubelet[2045]: E0317 18:45:34.672701 2045 plugins.go:730] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Mar 17 18:45:34.672861 kubelet[2045]: E0317 18:45:34.672854 2045 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Mar 17 18:45:34.672861 kubelet[2045]: W0317 18:45:34.672860 2045 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Mar 17 18:45:34.672924 kubelet[2045]: E0317 18:45:34.672867 2045 plugins.go:730] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Mar 17 18:45:34.673016 kubelet[2045]: E0317 18:45:34.673000 2045 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Mar 17 18:45:34.673016 kubelet[2045]: W0317 18:45:34.673008 2045 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Mar 17 18:45:34.673016 kubelet[2045]: E0317 18:45:34.673014 2045 plugins.go:730] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Mar 17 18:45:34.673182 kubelet[2045]: E0317 18:45:34.673169 2045 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Mar 17 18:45:34.673182 kubelet[2045]: W0317 18:45:34.673177 2045 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Mar 17 18:45:34.673182 kubelet[2045]: E0317 18:45:34.673182 2045 plugins.go:730] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Mar 17 18:45:34.673312 kubelet[2045]: E0317 18:45:34.673294 2045 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Mar 17 18:45:34.673312 kubelet[2045]: W0317 18:45:34.673302 2045 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Mar 17 18:45:34.673312 kubelet[2045]: E0317 18:45:34.673308 2045 plugins.go:730] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Mar 17 18:45:34.673523 kubelet[2045]: E0317 18:45:34.673500 2045 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Mar 17 18:45:34.673523 kubelet[2045]: W0317 18:45:34.673510 2045 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Mar 17 18:45:34.673523 kubelet[2045]: E0317 18:45:34.673516 2045 plugins.go:730] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Mar 17 18:45:34.673798 kubelet[2045]: E0317 18:45:34.673662 2045 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Mar 17 18:45:34.673798 kubelet[2045]: W0317 18:45:34.673668 2045 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Mar 17 18:45:34.673798 kubelet[2045]: E0317 18:45:34.673682 2045 plugins.go:730] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Mar 17 18:45:34.673907 kubelet[2045]: E0317 18:45:34.673844 2045 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Mar 17 18:45:34.673907 kubelet[2045]: W0317 18:45:34.673852 2045 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Mar 17 18:45:34.673907 kubelet[2045]: E0317 18:45:34.673858 2045 plugins.go:730] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Mar 17 18:45:34.674004 kubelet[2045]: E0317 18:45:34.673995 2045 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Mar 17 18:45:34.674004 kubelet[2045]: W0317 18:45:34.674001 2045 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Mar 17 18:45:34.674072 kubelet[2045]: E0317 18:45:34.674006 2045 plugins.go:730] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Mar 17 18:45:34.674180 kubelet[2045]: E0317 18:45:34.674166 2045 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Mar 17 18:45:34.674180 kubelet[2045]: W0317 18:45:34.674175 2045 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Mar 17 18:45:34.674180 kubelet[2045]: E0317 18:45:34.674181 2045 plugins.go:730] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Mar 17 18:45:34.674363 kubelet[2045]: E0317 18:45:34.674350 2045 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Mar 17 18:45:34.674363 kubelet[2045]: W0317 18:45:34.674358 2045 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Mar 17 18:45:34.674363 kubelet[2045]: E0317 18:45:34.674364 2045 plugins.go:730] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Mar 17 18:45:34.674544 kubelet[2045]: E0317 18:45:34.674523 2045 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Mar 17 18:45:34.674544 kubelet[2045]: W0317 18:45:34.674532 2045 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Mar 17 18:45:34.674544 kubelet[2045]: E0317 18:45:34.674538 2045 plugins.go:730] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Mar 17 18:45:34.676806 kubelet[2045]: E0317 18:45:34.676776 2045 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Mar 17 18:45:34.676806 kubelet[2045]: W0317 18:45:34.676791 2045 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Mar 17 18:45:34.676806 kubelet[2045]: E0317 18:45:34.676800 2045 plugins.go:730] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Mar 17 18:45:34.676945 kubelet[2045]: E0317 18:45:34.676931 2045 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Mar 17 18:45:34.676945 kubelet[2045]: W0317 18:45:34.676937 2045 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Mar 17 18:45:34.677005 kubelet[2045]: E0317 18:45:34.676950 2045 plugins.go:730] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Mar 17 18:45:34.677160 kubelet[2045]: E0317 18:45:34.677135 2045 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Mar 17 18:45:34.677160 kubelet[2045]: W0317 18:45:34.677145 2045 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Mar 17 18:45:34.677160 kubelet[2045]: E0317 18:45:34.677155 2045 plugins.go:730] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Mar 17 18:45:34.677308 kubelet[2045]: E0317 18:45:34.677293 2045 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Mar 17 18:45:34.677308 kubelet[2045]: W0317 18:45:34.677304 2045 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Mar 17 18:45:34.677387 kubelet[2045]: E0317 18:45:34.677315 2045 plugins.go:730] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Mar 17 18:45:34.677513 kubelet[2045]: E0317 18:45:34.677491 2045 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Mar 17 18:45:34.677513 kubelet[2045]: W0317 18:45:34.677501 2045 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Mar 17 18:45:34.677513 kubelet[2045]: E0317 18:45:34.677510 2045 plugins.go:730] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Mar 17 18:45:34.677681 kubelet[2045]: E0317 18:45:34.677614 2045 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Mar 17 18:45:34.677681 kubelet[2045]: W0317 18:45:34.677619 2045 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Mar 17 18:45:34.677764 kubelet[2045]: E0317 18:45:34.677683 2045 plugins.go:730] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Mar 17 18:45:34.677843 kubelet[2045]: E0317 18:45:34.677828 2045 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Mar 17 18:45:34.677843 kubelet[2045]: W0317 18:45:34.677838 2045 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Mar 17 18:45:34.677915 kubelet[2045]: E0317 18:45:34.677850 2045 plugins.go:730] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Mar 17 18:45:34.678162 kubelet[2045]: E0317 18:45:34.678128 2045 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Mar 17 18:45:34.678162 kubelet[2045]: W0317 18:45:34.678153 2045 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Mar 17 18:45:34.678233 kubelet[2045]: E0317 18:45:34.678183 2045 plugins.go:730] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Mar 17 18:45:34.678345 kubelet[2045]: E0317 18:45:34.678330 2045 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Mar 17 18:45:34.678345 kubelet[2045]: W0317 18:45:34.678339 2045 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Mar 17 18:45:34.678447 kubelet[2045]: E0317 18:45:34.678352 2045 plugins.go:730] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Mar 17 18:45:34.678528 kubelet[2045]: E0317 18:45:34.678509 2045 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Mar 17 18:45:34.678528 kubelet[2045]: W0317 18:45:34.678521 2045 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Mar 17 18:45:34.678639 kubelet[2045]: E0317 18:45:34.678533 2045 plugins.go:730] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Mar 17 18:45:34.678734 kubelet[2045]: E0317 18:45:34.678712 2045 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Mar 17 18:45:34.678734 kubelet[2045]: W0317 18:45:34.678730 2045 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Mar 17 18:45:34.678795 kubelet[2045]: E0317 18:45:34.678744 2045 plugins.go:730] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Mar 17 18:45:34.678999 kubelet[2045]: E0317 18:45:34.678984 2045 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Mar 17 18:45:34.678999 kubelet[2045]: W0317 18:45:34.678997 2045 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Mar 17 18:45:34.679070 kubelet[2045]: E0317 18:45:34.679016 2045 plugins.go:730] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Mar 17 18:45:34.679422 kubelet[2045]: E0317 18:45:34.679405 2045 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Mar 17 18:45:34.679422 kubelet[2045]: W0317 18:45:34.679418 2045 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Mar 17 18:45:34.679512 kubelet[2045]: E0317 18:45:34.679450 2045 plugins.go:730] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Mar 17 18:45:34.679608 kubelet[2045]: E0317 18:45:34.679590 2045 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Mar 17 18:45:34.679608 kubelet[2045]: W0317 18:45:34.679604 2045 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Mar 17 18:45:34.679709 kubelet[2045]: E0317 18:45:34.679658 2045 plugins.go:730] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Mar 17 18:45:34.679854 kubelet[2045]: E0317 18:45:34.679838 2045 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Mar 17 18:45:34.679854 kubelet[2045]: W0317 18:45:34.679850 2045 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Mar 17 18:45:34.679942 kubelet[2045]: E0317 18:45:34.679859 2045 plugins.go:730] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Mar 17 18:45:34.680120 kubelet[2045]: E0317 18:45:34.680103 2045 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Mar 17 18:45:34.680120 kubelet[2045]: W0317 18:45:34.680116 2045 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Mar 17 18:45:34.680203 kubelet[2045]: E0317 18:45:34.680125 2045 plugins.go:730] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Mar 17 18:45:34.680417 kubelet[2045]: E0317 18:45:34.680389 2045 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Mar 17 18:45:34.680417 kubelet[2045]: W0317 18:45:34.680404 2045 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Mar 17 18:45:34.680417 kubelet[2045]: E0317 18:45:34.680417 2045 plugins.go:730] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Mar 17 18:45:34.680893 kubelet[2045]: E0317 18:45:34.680869 2045 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Mar 17 18:45:34.680893 kubelet[2045]: W0317 18:45:34.680883 2045 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Mar 17 18:45:34.680893 kubelet[2045]: E0317 18:45:34.680891 2045 plugins.go:730] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Mar 17 18:45:35.484811 env[1203]: time="2025-03-17T18:45:35.484755021Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/pod2daemon-flexvol:v3.29.1,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Mar 17 18:45:35.488246 env[1203]: time="2025-03-17T18:45:35.488185820Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:2b7452b763ec8833ca0386ada5fd066e552a9b3b02b8538a5e34cc3d6d3840a6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Mar 17 18:45:35.490002 env[1203]: time="2025-03-17T18:45:35.489954870Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/pod2daemon-flexvol:v3.29.1,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Mar 17 18:45:35.492138 env[1203]: time="2025-03-17T18:45:35.492103645Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/pod2daemon-flexvol@sha256:a63f8b4ff531912d12d143664eb263fdbc6cd7b3ff4aa777dfb6e318a090462c,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Mar 17 18:45:35.492998 env[1203]: time="2025-03-17T18:45:35.492954548Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/pod2daemon-flexvol:v3.29.1\" returns image reference \"sha256:2b7452b763ec8833ca0386ada5fd066e552a9b3b02b8538a5e34cc3d6d3840a6\"" Mar 17 18:45:35.495120 env[1203]: time="2025-03-17T18:45:35.495066263Z" level=info msg="CreateContainer within sandbox \"16117826460450915279b8087648822d1267c59a99e1708f439b9e9fe8864fb2\" for container &ContainerMetadata{Name:flexvol-driver,Attempt:0,}" Mar 17 18:45:35.509923 env[1203]: time="2025-03-17T18:45:35.509861848Z" level=info msg="CreateContainer within sandbox \"16117826460450915279b8087648822d1267c59a99e1708f439b9e9fe8864fb2\" for &ContainerMetadata{Name:flexvol-driver,Attempt:0,} returns container id \"9e07e02f2c35dbd34f16c77d0c3dbc05300df931fcb9bee7724f32813e5d3f53\"" Mar 17 18:45:35.510459 env[1203]: time="2025-03-17T18:45:35.510418686Z" level=info msg="StartContainer for \"9e07e02f2c35dbd34f16c77d0c3dbc05300df931fcb9bee7724f32813e5d3f53\"" Mar 17 18:45:35.527880 systemd[1]: Started cri-containerd-9e07e02f2c35dbd34f16c77d0c3dbc05300df931fcb9bee7724f32813e5d3f53.scope. Mar 17 18:45:35.538000 audit[2636]: AVC avc: denied { perfmon } for pid=2636 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:35.548138 kernel: kauditd_printk_skb: 179 callbacks suppressed Mar 17 18:45:35.548310 kernel: audit: type=1400 audit(1742237135.538:980): avc: denied { perfmon } for pid=2636 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:35.548340 kernel: audit: type=1300 audit(1742237135.538:980): arch=c000003e syscall=321 success=yes exit=15 a0=0 a1=c0001976b0 a2=3c a3=7f153eeef0a8 items=0 ppid=2511 pid=2636 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:45:35.538000 audit[2636]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=0 a1=c0001976b0 a2=3c a3=7f153eeef0a8 items=0 ppid=2511 pid=2636 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:45:35.538000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3965303765303266326333356462643334663136633737643063336462 Mar 17 18:45:35.552909 kernel: audit: type=1327 audit(1742237135.538:980): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3965303765303266326333356462643334663136633737643063336462 Mar 17 18:45:35.553015 kernel: audit: type=1400 audit(1742237135.539:981): avc: denied { bpf } for pid=2636 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:35.539000 audit[2636]: AVC avc: denied { bpf } for pid=2636 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:35.539000 audit[2636]: AVC avc: denied { bpf } for pid=2636 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:35.559300 kernel: audit: type=1400 audit(1742237135.539:981): avc: denied { bpf } for pid=2636 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:35.562501 kernel: audit: type=1400 audit(1742237135.539:981): avc: denied { bpf } for pid=2636 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:35.539000 audit[2636]: AVC avc: denied { bpf } for pid=2636 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:35.565558 kernel: audit: type=1400 audit(1742237135.539:981): avc: denied { perfmon } for pid=2636 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:35.539000 audit[2636]: AVC avc: denied { perfmon } for pid=2636 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:35.565675 env[1203]: time="2025-03-17T18:45:35.563008662Z" level=info msg="StartContainer for \"9e07e02f2c35dbd34f16c77d0c3dbc05300df931fcb9bee7724f32813e5d3f53\" returns successfully" Mar 17 18:45:35.539000 audit[2636]: AVC avc: denied { perfmon } for pid=2636 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:35.539000 audit[2636]: AVC avc: denied { perfmon } for pid=2636 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:35.571732 kernel: audit: type=1400 audit(1742237135.539:981): avc: denied { perfmon } for pid=2636 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:35.571797 kernel: audit: type=1400 audit(1742237135.539:981): avc: denied { perfmon } for pid=2636 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:35.571826 kernel: audit: type=1400 audit(1742237135.539:981): avc: denied { perfmon } for pid=2636 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:35.539000 audit[2636]: AVC avc: denied { perfmon } for pid=2636 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:35.572181 systemd[1]: cri-containerd-9e07e02f2c35dbd34f16c77d0c3dbc05300df931fcb9bee7724f32813e5d3f53.scope: Deactivated successfully. Mar 17 18:45:35.539000 audit[2636]: AVC avc: denied { perfmon } for pid=2636 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:35.539000 audit[2636]: AVC avc: denied { bpf } for pid=2636 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:35.539000 audit[2636]: AVC avc: denied { bpf } for pid=2636 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:35.539000 audit: BPF prog-id=133 op=LOAD Mar 17 18:45:35.539000 audit[2636]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c0001979d8 a2=78 a3=c0001f9578 items=0 ppid=2511 pid=2636 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:45:35.539000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3965303765303266326333356462643334663136633737643063336462 Mar 17 18:45:35.542000 audit[2636]: AVC avc: denied { bpf } for pid=2636 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:35.542000 audit[2636]: AVC avc: denied { bpf } for pid=2636 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:35.542000 audit[2636]: AVC avc: denied { perfmon } for pid=2636 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:35.542000 audit[2636]: AVC avc: denied { perfmon } for pid=2636 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:35.542000 audit[2636]: AVC avc: denied { perfmon } for pid=2636 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:35.542000 audit[2636]: AVC avc: denied { perfmon } for pid=2636 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:35.542000 audit[2636]: AVC avc: denied { perfmon } for pid=2636 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:35.542000 audit[2636]: AVC avc: denied { bpf } for pid=2636 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:35.542000 audit[2636]: AVC avc: denied { bpf } for pid=2636 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:35.542000 audit: BPF prog-id=134 op=LOAD Mar 17 18:45:35.542000 audit[2636]: SYSCALL arch=c000003e syscall=321 success=yes exit=17 a0=5 a1=c000197770 a2=78 a3=c0001f95c8 items=0 ppid=2511 pid=2636 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:45:35.542000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3965303765303266326333356462643334663136633737643063336462 Mar 17 18:45:35.547000 audit: BPF prog-id=134 op=UNLOAD Mar 17 18:45:35.547000 audit: BPF prog-id=133 op=UNLOAD Mar 17 18:45:35.547000 audit[2636]: AVC avc: denied { bpf } for pid=2636 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:35.547000 audit[2636]: AVC avc: denied { bpf } for pid=2636 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:35.547000 audit[2636]: AVC avc: denied { bpf } for pid=2636 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:35.547000 audit[2636]: AVC avc: denied { perfmon } for pid=2636 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:35.547000 audit[2636]: AVC avc: denied { perfmon } for pid=2636 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:35.547000 audit[2636]: AVC avc: denied { perfmon } for pid=2636 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:35.547000 audit[2636]: AVC avc: denied { perfmon } for pid=2636 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:35.547000 audit[2636]: AVC avc: denied { perfmon } for pid=2636 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:35.547000 audit[2636]: AVC avc: denied { bpf } for pid=2636 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:35.547000 audit[2636]: AVC avc: denied { bpf } for pid=2636 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:35.547000 audit: BPF prog-id=135 op=LOAD Mar 17 18:45:35.547000 audit[2636]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c000197c30 a2=78 a3=c0001f9658 items=0 ppid=2511 pid=2636 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:45:35.547000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3965303765303266326333356462643334663136633737643063336462 Mar 17 18:45:35.578000 audit: BPF prog-id=135 op=UNLOAD Mar 17 18:45:35.616458 kubelet[2045]: E0317 18:45:35.616410 2045 pod_workers.go:1298] "Error syncing pod, skipping" err="network is not ready: container runtime network not ready: NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" pod="calico-system/csi-node-driver-6vr94" podUID="42df0b30-e0d7-4f61-83fe-313c16a7f709" Mar 17 18:45:35.664973 kubelet[2045]: E0317 18:45:35.664945 2045 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Mar 17 18:45:36.165069 kubelet[2045]: I0317 18:45:36.164851 2045 prober_manager.go:312] "Failed to trigger a manual run" probe="Readiness" Mar 17 18:45:35.702152 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-9e07e02f2c35dbd34f16c77d0c3dbc05300df931fcb9bee7724f32813e5d3f53-rootfs.mount: Deactivated successfully. Mar 17 18:45:36.166860 kubelet[2045]: E0317 18:45:36.166832 2045 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Mar 17 18:45:36.250000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@7-10.0.0.110:22-10.0.0.1:44390 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:45:36.251486 systemd[1]: Started sshd@7-10.0.0.110:22-10.0.0.1:44390.service. Mar 17 18:45:36.253110 env[1203]: time="2025-03-17T18:45:36.253050261Z" level=info msg="shim disconnected" id=9e07e02f2c35dbd34f16c77d0c3dbc05300df931fcb9bee7724f32813e5d3f53 Mar 17 18:45:36.253110 env[1203]: time="2025-03-17T18:45:36.253108812Z" level=warning msg="cleaning up after shim disconnected" id=9e07e02f2c35dbd34f16c77d0c3dbc05300df931fcb9bee7724f32813e5d3f53 namespace=k8s.io Mar 17 18:45:36.253294 env[1203]: time="2025-03-17T18:45:36.253121235Z" level=info msg="cleaning up dead shim" Mar 17 18:45:36.269692 env[1203]: time="2025-03-17T18:45:36.267071432Z" level=warning msg="cleanup warnings time=\"2025-03-17T18:45:36Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=2681 runtime=io.containerd.runc.v2\n" Mar 17 18:45:36.298412 sshd[2680]: Accepted publickey for core from 10.0.0.1 port 44390 ssh2: RSA SHA256:EcJpbXadXymLrINQtrmLSqTXC2wy0UoSwO9MmZb5CTo Mar 17 18:45:36.297000 audit[2680]: USER_ACCT pid=2680 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Mar 17 18:45:36.298000 audit[2680]: CRED_ACQ pid=2680 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Mar 17 18:45:36.298000 audit[2680]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffd6c0a36d0 a2=3 a3=0 items=0 ppid=1 pid=2680 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=8 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:45:36.298000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Mar 17 18:45:36.299619 sshd[2680]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Mar 17 18:45:36.303511 systemd-logind[1188]: New session 8 of user core. Mar 17 18:45:36.304302 systemd[1]: Started session-8.scope. Mar 17 18:45:36.307000 audit[2680]: USER_START pid=2680 uid=0 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Mar 17 18:45:36.308000 audit[2696]: CRED_ACQ pid=2696 uid=0 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Mar 17 18:45:36.417748 sshd[2680]: pam_unix(sshd:session): session closed for user core Mar 17 18:45:36.418000 audit[2680]: USER_END pid=2680 uid=0 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Mar 17 18:45:36.418000 audit[2680]: CRED_DISP pid=2680 uid=0 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Mar 17 18:45:36.420320 systemd[1]: sshd@7-10.0.0.110:22-10.0.0.1:44390.service: Deactivated successfully. Mar 17 18:45:36.419000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@7-10.0.0.110:22-10.0.0.1:44390 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:45:36.421034 systemd[1]: session-8.scope: Deactivated successfully. Mar 17 18:45:36.421822 systemd-logind[1188]: Session 8 logged out. Waiting for processes to exit. Mar 17 18:45:36.422685 systemd-logind[1188]: Removed session 8. Mar 17 18:45:36.669023 kubelet[2045]: E0317 18:45:36.668900 2045 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Mar 17 18:45:36.670489 env[1203]: time="2025-03-17T18:45:36.670439164Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/cni:v3.29.1\"" Mar 17 18:45:37.594988 kubelet[2045]: E0317 18:45:37.594916 2045 pod_workers.go:1298] "Error syncing pod, skipping" err="network is not ready: container runtime network not ready: NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" pod="calico-system/csi-node-driver-6vr94" podUID="42df0b30-e0d7-4f61-83fe-313c16a7f709" Mar 17 18:45:39.595816 kubelet[2045]: E0317 18:45:39.595605 2045 pod_workers.go:1298] "Error syncing pod, skipping" err="network is not ready: container runtime network not ready: NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" pod="calico-system/csi-node-driver-6vr94" podUID="42df0b30-e0d7-4f61-83fe-313c16a7f709" Mar 17 18:45:41.422000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@8-10.0.0.110:22-10.0.0.1:44396 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:45:41.422607 systemd[1]: Started sshd@8-10.0.0.110:22-10.0.0.1:44396.service. Mar 17 18:45:41.423941 kernel: kauditd_printk_skb: 45 callbacks suppressed Mar 17 18:45:41.424014 kernel: audit: type=1130 audit(1742237141.422:996): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@8-10.0.0.110:22-10.0.0.1:44396 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:45:41.457000 audit[2710]: USER_ACCT pid=2710 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Mar 17 18:45:41.459853 sshd[2710]: Accepted publickey for core from 10.0.0.1 port 44396 ssh2: RSA SHA256:EcJpbXadXymLrINQtrmLSqTXC2wy0UoSwO9MmZb5CTo Mar 17 18:45:41.462000 audit[2710]: CRED_ACQ pid=2710 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Mar 17 18:45:41.463449 sshd[2710]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Mar 17 18:45:41.466750 kernel: audit: type=1101 audit(1742237141.457:997): pid=2710 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Mar 17 18:45:41.466802 kernel: audit: type=1103 audit(1742237141.462:998): pid=2710 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Mar 17 18:45:41.466822 kernel: audit: type=1006 audit(1742237141.462:999): pid=2710 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=9 res=1 Mar 17 18:45:41.470026 kernel: audit: type=1300 audit(1742237141.462:999): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffe3797bcf0 a2=3 a3=0 items=0 ppid=1 pid=2710 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=9 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:45:41.462000 audit[2710]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffe3797bcf0 a2=3 a3=0 items=0 ppid=1 pid=2710 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=9 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:45:41.469301 systemd[1]: Started session-9.scope. Mar 17 18:45:41.469747 systemd-logind[1188]: New session 9 of user core. Mar 17 18:45:41.462000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Mar 17 18:45:41.476778 kernel: audit: type=1327 audit(1742237141.462:999): proctitle=737368643A20636F7265205B707269765D Mar 17 18:45:41.482000 audit[2710]: USER_START pid=2710 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Mar 17 18:45:41.483000 audit[2712]: CRED_ACQ pid=2712 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Mar 17 18:45:41.491172 kernel: audit: type=1105 audit(1742237141.482:1000): pid=2710 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Mar 17 18:45:41.491324 kernel: audit: type=1103 audit(1742237141.483:1001): pid=2712 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Mar 17 18:45:41.593878 sshd[2710]: pam_unix(sshd:session): session closed for user core Mar 17 18:45:41.594000 audit[2710]: USER_END pid=2710 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Mar 17 18:45:41.596803 kubelet[2045]: E0317 18:45:41.595361 2045 pod_workers.go:1298] "Error syncing pod, skipping" err="network is not ready: container runtime network not ready: NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" pod="calico-system/csi-node-driver-6vr94" podUID="42df0b30-e0d7-4f61-83fe-313c16a7f709" Mar 17 18:45:41.597855 systemd[1]: sshd@8-10.0.0.110:22-10.0.0.1:44396.service: Deactivated successfully. Mar 17 18:45:41.598734 systemd[1]: session-9.scope: Deactivated successfully. Mar 17 18:45:41.595000 audit[2710]: CRED_DISP pid=2710 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Mar 17 18:45:41.603874 kernel: audit: type=1106 audit(1742237141.594:1002): pid=2710 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Mar 17 18:45:41.603942 kernel: audit: type=1104 audit(1742237141.595:1003): pid=2710 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Mar 17 18:45:41.597000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@8-10.0.0.110:22-10.0.0.1:44396 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:45:41.604707 systemd-logind[1188]: Session 9 logged out. Waiting for processes to exit. Mar 17 18:45:41.605511 systemd-logind[1188]: Removed session 9. Mar 17 18:45:42.751585 env[1203]: time="2025-03-17T18:45:42.751509189Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/cni:v3.29.1,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Mar 17 18:45:42.753926 env[1203]: time="2025-03-17T18:45:42.753850270Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:7dd6ea186aba0d7a1791a79d426fe854527ca95192b26bbd19e8baf8373f7d0e,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Mar 17 18:45:42.756368 env[1203]: time="2025-03-17T18:45:42.756306357Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/cni:v3.29.1,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Mar 17 18:45:42.757922 env[1203]: time="2025-03-17T18:45:42.757867772Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/cni@sha256:21e759d51c90dfb34fc1397dc180dd3a3fb564c2b0580d2f61ffe108f2a3c94b,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Mar 17 18:45:42.758600 env[1203]: time="2025-03-17T18:45:42.758556467Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/cni:v3.29.1\" returns image reference \"sha256:7dd6ea186aba0d7a1791a79d426fe854527ca95192b26bbd19e8baf8373f7d0e\"" Mar 17 18:45:42.762263 env[1203]: time="2025-03-17T18:45:42.762219943Z" level=info msg="CreateContainer within sandbox \"16117826460450915279b8087648822d1267c59a99e1708f439b9e9fe8864fb2\" for container &ContainerMetadata{Name:install-cni,Attempt:0,}" Mar 17 18:45:42.781887 env[1203]: time="2025-03-17T18:45:42.781800061Z" level=info msg="CreateContainer within sandbox \"16117826460450915279b8087648822d1267c59a99e1708f439b9e9fe8864fb2\" for &ContainerMetadata{Name:install-cni,Attempt:0,} returns container id \"2d0ee5262ece752917bca42affe22d829e1c9a46be95457bf1873c4a35d9797f\"" Mar 17 18:45:42.782561 env[1203]: time="2025-03-17T18:45:42.782499426Z" level=info msg="StartContainer for \"2d0ee5262ece752917bca42affe22d829e1c9a46be95457bf1873c4a35d9797f\"" Mar 17 18:45:42.801929 systemd[1]: run-containerd-runc-k8s.io-2d0ee5262ece752917bca42affe22d829e1c9a46be95457bf1873c4a35d9797f-runc.4uOtA5.mount: Deactivated successfully. Mar 17 18:45:42.806178 systemd[1]: Started cri-containerd-2d0ee5262ece752917bca42affe22d829e1c9a46be95457bf1873c4a35d9797f.scope. Mar 17 18:45:42.820000 audit[2730]: AVC avc: denied { perfmon } for pid=2730 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:42.820000 audit[2730]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=0 a1=c0001976b0 a2=3c a3=7f7ab896da38 items=0 ppid=2511 pid=2730 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:45:42.820000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3264306565353236326563653735323931376263613432616666653232 Mar 17 18:45:42.820000 audit[2730]: AVC avc: denied { bpf } for pid=2730 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:42.820000 audit[2730]: AVC avc: denied { bpf } for pid=2730 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:42.820000 audit[2730]: AVC avc: denied { bpf } for pid=2730 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:42.820000 audit[2730]: AVC avc: denied { perfmon } for pid=2730 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:42.820000 audit[2730]: AVC avc: denied { perfmon } for pid=2730 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:42.820000 audit[2730]: AVC avc: denied { perfmon } for pid=2730 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:42.820000 audit[2730]: AVC avc: denied { perfmon } for pid=2730 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:42.820000 audit[2730]: AVC avc: denied { perfmon } for pid=2730 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:42.820000 audit[2730]: AVC avc: denied { bpf } for pid=2730 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:42.820000 audit[2730]: AVC avc: denied { bpf } for pid=2730 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:42.820000 audit: BPF prog-id=136 op=LOAD Mar 17 18:45:42.820000 audit[2730]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c0001979d8 a2=78 a3=c0003d4098 items=0 ppid=2511 pid=2730 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:45:42.820000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3264306565353236326563653735323931376263613432616666653232 Mar 17 18:45:42.820000 audit[2730]: AVC avc: denied { bpf } for pid=2730 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:42.820000 audit[2730]: AVC avc: denied { bpf } for pid=2730 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:42.820000 audit[2730]: AVC avc: denied { perfmon } for pid=2730 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:42.820000 audit[2730]: AVC avc: denied { perfmon } for pid=2730 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:42.820000 audit[2730]: AVC avc: denied { perfmon } for pid=2730 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:42.820000 audit[2730]: AVC avc: denied { perfmon } for pid=2730 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:42.820000 audit[2730]: AVC avc: denied { perfmon } for pid=2730 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:42.820000 audit[2730]: AVC avc: denied { bpf } for pid=2730 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:42.820000 audit[2730]: AVC avc: denied { bpf } for pid=2730 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:42.820000 audit: BPF prog-id=137 op=LOAD Mar 17 18:45:42.820000 audit[2730]: SYSCALL arch=c000003e syscall=321 success=yes exit=17 a0=5 a1=c000197770 a2=78 a3=c0003d40e8 items=0 ppid=2511 pid=2730 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:45:42.820000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3264306565353236326563653735323931376263613432616666653232 Mar 17 18:45:42.821000 audit: BPF prog-id=137 op=UNLOAD Mar 17 18:45:42.821000 audit: BPF prog-id=136 op=UNLOAD Mar 17 18:45:42.821000 audit[2730]: AVC avc: denied { bpf } for pid=2730 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:42.821000 audit[2730]: AVC avc: denied { bpf } for pid=2730 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:42.821000 audit[2730]: AVC avc: denied { bpf } for pid=2730 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:42.821000 audit[2730]: AVC avc: denied { perfmon } for pid=2730 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:42.821000 audit[2730]: AVC avc: denied { perfmon } for pid=2730 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:42.821000 audit[2730]: AVC avc: denied { perfmon } for pid=2730 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:42.821000 audit[2730]: AVC avc: denied { perfmon } for pid=2730 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:42.821000 audit[2730]: AVC avc: denied { perfmon } for pid=2730 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:42.821000 audit[2730]: AVC avc: denied { bpf } for pid=2730 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:42.821000 audit[2730]: AVC avc: denied { bpf } for pid=2730 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:42.821000 audit: BPF prog-id=138 op=LOAD Mar 17 18:45:42.821000 audit[2730]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c000197c30 a2=78 a3=c0003d4178 items=0 ppid=2511 pid=2730 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:45:42.821000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3264306565353236326563653735323931376263613432616666653232 Mar 17 18:45:42.970300 env[1203]: time="2025-03-17T18:45:42.970232505Z" level=info msg="StartContainer for \"2d0ee5262ece752917bca42affe22d829e1c9a46be95457bf1873c4a35d9797f\" returns successfully" Mar 17 18:45:43.595672 kubelet[2045]: E0317 18:45:43.595590 2045 pod_workers.go:1298] "Error syncing pod, skipping" err="network is not ready: container runtime network not ready: NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" pod="calico-system/csi-node-driver-6vr94" podUID="42df0b30-e0d7-4f61-83fe-313c16a7f709" Mar 17 18:45:44.076849 kubelet[2045]: I0317 18:45:44.076811 2045 prober_manager.go:312] "Failed to trigger a manual run" probe="Readiness" Mar 17 18:45:44.077571 kubelet[2045]: E0317 18:45:44.077541 2045 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Mar 17 18:45:44.078578 kubelet[2045]: E0317 18:45:44.078552 2045 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Mar 17 18:45:44.259000 audit[2759]: NETFILTER_CFG table=filter:95 family=2 entries=17 op=nft_register_rule pid=2759 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Mar 17 18:45:44.259000 audit[2759]: SYSCALL arch=c000003e syscall=46 success=yes exit=5908 a0=3 a1=7ffc19b43e60 a2=0 a3=7ffc19b43e4c items=0 ppid=2248 pid=2759 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:45:44.259000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Mar 17 18:45:44.263000 audit[2759]: NETFILTER_CFG table=nat:96 family=2 entries=19 op=nft_register_chain pid=2759 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Mar 17 18:45:44.263000 audit[2759]: SYSCALL arch=c000003e syscall=46 success=yes exit=6276 a0=3 a1=7ffc19b43e60 a2=0 a3=7ffc19b43e4c items=0 ppid=2248 pid=2759 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:45:44.263000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Mar 17 18:45:44.340561 env[1203]: time="2025-03-17T18:45:44.340375587Z" level=error msg="failed to reload cni configuration after receiving fs change event(\"/etc/cni/net.d/calico-kubeconfig\": WRITE)" error="cni config load failed: failed to load CNI config list file /etc/cni/net.d/10-calico.conflist: error parsing configuration list: unexpected end of JSON input: invalid cni config: failed to load cni config" Mar 17 18:45:44.342893 systemd[1]: cri-containerd-2d0ee5262ece752917bca42affe22d829e1c9a46be95457bf1873c4a35d9797f.scope: Deactivated successfully. Mar 17 18:45:44.346000 audit: BPF prog-id=138 op=UNLOAD Mar 17 18:45:44.362016 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-2d0ee5262ece752917bca42affe22d829e1c9a46be95457bf1873c4a35d9797f-rootfs.mount: Deactivated successfully. Mar 17 18:45:44.369383 env[1203]: time="2025-03-17T18:45:44.369323689Z" level=info msg="shim disconnected" id=2d0ee5262ece752917bca42affe22d829e1c9a46be95457bf1873c4a35d9797f Mar 17 18:45:44.369595 env[1203]: time="2025-03-17T18:45:44.369389412Z" level=warning msg="cleaning up after shim disconnected" id=2d0ee5262ece752917bca42affe22d829e1c9a46be95457bf1873c4a35d9797f namespace=k8s.io Mar 17 18:45:44.369595 env[1203]: time="2025-03-17T18:45:44.369402747Z" level=info msg="cleaning up dead shim" Mar 17 18:45:44.376877 env[1203]: time="2025-03-17T18:45:44.376809938Z" level=warning msg="cleanup warnings time=\"2025-03-17T18:45:44Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=2772 runtime=io.containerd.runc.v2\n" Mar 17 18:45:44.378539 kubelet[2045]: I0317 18:45:44.378510 2045 kubelet_node_status.go:497] "Fast updating node status as it just became ready" Mar 17 18:45:44.399317 kubelet[2045]: I0317 18:45:44.399197 2045 topology_manager.go:215] "Topology Admit Handler" podUID="7ea517d3-7ca7-4ac4-b0a9-aa4ec5ae36b5" podNamespace="kube-system" podName="coredns-7db6d8ff4d-gdwxp" Mar 17 18:45:44.405901 kubelet[2045]: I0317 18:45:44.405859 2045 topology_manager.go:215] "Topology Admit Handler" podUID="effac710-cde3-45ed-8e3f-90230de9316c" podNamespace="kube-system" podName="coredns-7db6d8ff4d-nq4kb" Mar 17 18:45:44.406114 kubelet[2045]: I0317 18:45:44.406032 2045 topology_manager.go:215] "Topology Admit Handler" podUID="7f41b2cd-adad-4fdd-914e-25770b9dbb49" podNamespace="calico-apiserver" podName="calico-apiserver-5c5c847997-cn65r" Mar 17 18:45:44.406158 kubelet[2045]: I0317 18:45:44.406124 2045 topology_manager.go:215] "Topology Admit Handler" podUID="f76afdc5-ade3-4599-9191-81e2b3c52eb2" podNamespace="calico-apiserver" podName="calico-apiserver-5c5c847997-j7phz" Mar 17 18:45:44.408915 kubelet[2045]: I0317 18:45:44.408861 2045 topology_manager.go:215] "Topology Admit Handler" podUID="ca492086-56f8-43e1-83c0-78cd15fb38dd" podNamespace="calico-system" podName="calico-kube-controllers-56d6765747-9mr6w" Mar 17 18:45:44.413293 systemd[1]: Created slice kubepods-burstable-pod7ea517d3_7ca7_4ac4_b0a9_aa4ec5ae36b5.slice. Mar 17 18:45:44.420230 systemd[1]: Created slice kubepods-besteffort-podf76afdc5_ade3_4599_9191_81e2b3c52eb2.slice. Mar 17 18:45:44.424994 systemd[1]: Created slice kubepods-besteffort-podca492086_56f8_43e1_83c0_78cd15fb38dd.slice. Mar 17 18:45:44.430139 systemd[1]: Created slice kubepods-burstable-podeffac710_cde3_45ed_8e3f_90230de9316c.slice. Mar 17 18:45:44.434498 systemd[1]: Created slice kubepods-besteffort-pod7f41b2cd_adad_4fdd_914e_25770b9dbb49.slice. Mar 17 18:45:44.474803 kubelet[2045]: I0317 18:45:44.474742 2045 reconciler_common.go:247] "operationExecutor.VerifyControllerAttachedVolume started for volume \"calico-apiserver-certs\" (UniqueName: \"kubernetes.io/secret/f76afdc5-ade3-4599-9191-81e2b3c52eb2-calico-apiserver-certs\") pod \"calico-apiserver-5c5c847997-j7phz\" (UID: \"f76afdc5-ade3-4599-9191-81e2b3c52eb2\") " pod="calico-apiserver/calico-apiserver-5c5c847997-j7phz" Mar 17 18:45:44.474803 kubelet[2045]: I0317 18:45:44.474791 2045 reconciler_common.go:247] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-5jkn8\" (UniqueName: \"kubernetes.io/projected/effac710-cde3-45ed-8e3f-90230de9316c-kube-api-access-5jkn8\") pod \"coredns-7db6d8ff4d-nq4kb\" (UID: \"effac710-cde3-45ed-8e3f-90230de9316c\") " pod="kube-system/coredns-7db6d8ff4d-nq4kb" Mar 17 18:45:44.475074 kubelet[2045]: I0317 18:45:44.474814 2045 reconciler_common.go:247] "operationExecutor.VerifyControllerAttachedVolume started for volume \"config-volume\" (UniqueName: \"kubernetes.io/configmap/7ea517d3-7ca7-4ac4-b0a9-aa4ec5ae36b5-config-volume\") pod \"coredns-7db6d8ff4d-gdwxp\" (UID: \"7ea517d3-7ca7-4ac4-b0a9-aa4ec5ae36b5\") " pod="kube-system/coredns-7db6d8ff4d-gdwxp" Mar 17 18:45:44.475074 kubelet[2045]: I0317 18:45:44.474881 2045 reconciler_common.go:247] "operationExecutor.VerifyControllerAttachedVolume started for volume \"calico-apiserver-certs\" (UniqueName: \"kubernetes.io/secret/7f41b2cd-adad-4fdd-914e-25770b9dbb49-calico-apiserver-certs\") pod \"calico-apiserver-5c5c847997-cn65r\" (UID: \"7f41b2cd-adad-4fdd-914e-25770b9dbb49\") " pod="calico-apiserver/calico-apiserver-5c5c847997-cn65r" Mar 17 18:45:44.475074 kubelet[2045]: I0317 18:45:44.474910 2045 reconciler_common.go:247] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-d85dq\" (UniqueName: \"kubernetes.io/projected/7ea517d3-7ca7-4ac4-b0a9-aa4ec5ae36b5-kube-api-access-d85dq\") pod \"coredns-7db6d8ff4d-gdwxp\" (UID: \"7ea517d3-7ca7-4ac4-b0a9-aa4ec5ae36b5\") " pod="kube-system/coredns-7db6d8ff4d-gdwxp" Mar 17 18:45:44.475074 kubelet[2045]: I0317 18:45:44.474933 2045 reconciler_common.go:247] "operationExecutor.VerifyControllerAttachedVolume started for volume \"tigera-ca-bundle\" (UniqueName: \"kubernetes.io/configmap/ca492086-56f8-43e1-83c0-78cd15fb38dd-tigera-ca-bundle\") pod \"calico-kube-controllers-56d6765747-9mr6w\" (UID: \"ca492086-56f8-43e1-83c0-78cd15fb38dd\") " pod="calico-system/calico-kube-controllers-56d6765747-9mr6w" Mar 17 18:45:44.475074 kubelet[2045]: I0317 18:45:44.474953 2045 reconciler_common.go:247] "operationExecutor.VerifyControllerAttachedVolume started for volume \"config-volume\" (UniqueName: \"kubernetes.io/configmap/effac710-cde3-45ed-8e3f-90230de9316c-config-volume\") pod \"coredns-7db6d8ff4d-nq4kb\" (UID: \"effac710-cde3-45ed-8e3f-90230de9316c\") " pod="kube-system/coredns-7db6d8ff4d-nq4kb" Mar 17 18:45:44.475285 kubelet[2045]: I0317 18:45:44.474973 2045 reconciler_common.go:247] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-znstp\" (UniqueName: \"kubernetes.io/projected/7f41b2cd-adad-4fdd-914e-25770b9dbb49-kube-api-access-znstp\") pod \"calico-apiserver-5c5c847997-cn65r\" (UID: \"7f41b2cd-adad-4fdd-914e-25770b9dbb49\") " pod="calico-apiserver/calico-apiserver-5c5c847997-cn65r" Mar 17 18:45:44.475285 kubelet[2045]: I0317 18:45:44.474992 2045 reconciler_common.go:247] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-2vl57\" (UniqueName: \"kubernetes.io/projected/f76afdc5-ade3-4599-9191-81e2b3c52eb2-kube-api-access-2vl57\") pod \"calico-apiserver-5c5c847997-j7phz\" (UID: \"f76afdc5-ade3-4599-9191-81e2b3c52eb2\") " pod="calico-apiserver/calico-apiserver-5c5c847997-j7phz" Mar 17 18:45:44.475285 kubelet[2045]: I0317 18:45:44.475014 2045 reconciler_common.go:247] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-nhvqz\" (UniqueName: \"kubernetes.io/projected/ca492086-56f8-43e1-83c0-78cd15fb38dd-kube-api-access-nhvqz\") pod \"calico-kube-controllers-56d6765747-9mr6w\" (UID: \"ca492086-56f8-43e1-83c0-78cd15fb38dd\") " pod="calico-system/calico-kube-controllers-56d6765747-9mr6w" Mar 17 18:45:44.717072 kubelet[2045]: E0317 18:45:44.717044 2045 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Mar 17 18:45:44.718012 env[1203]: time="2025-03-17T18:45:44.717954706Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:coredns-7db6d8ff4d-gdwxp,Uid:7ea517d3-7ca7-4ac4-b0a9-aa4ec5ae36b5,Namespace:kube-system,Attempt:0,}" Mar 17 18:45:44.724713 env[1203]: time="2025-03-17T18:45:44.724660749Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-apiserver-5c5c847997-j7phz,Uid:f76afdc5-ade3-4599-9191-81e2b3c52eb2,Namespace:calico-apiserver,Attempt:0,}" Mar 17 18:45:44.728184 env[1203]: time="2025-03-17T18:45:44.728148283Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-kube-controllers-56d6765747-9mr6w,Uid:ca492086-56f8-43e1-83c0-78cd15fb38dd,Namespace:calico-system,Attempt:0,}" Mar 17 18:45:44.733453 kubelet[2045]: E0317 18:45:44.733414 2045 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Mar 17 18:45:44.733851 env[1203]: time="2025-03-17T18:45:44.733817346Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:coredns-7db6d8ff4d-nq4kb,Uid:effac710-cde3-45ed-8e3f-90230de9316c,Namespace:kube-system,Attempt:0,}" Mar 17 18:45:44.737490 env[1203]: time="2025-03-17T18:45:44.737440124Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-apiserver-5c5c847997-cn65r,Uid:7f41b2cd-adad-4fdd-914e-25770b9dbb49,Namespace:calico-apiserver,Attempt:0,}" Mar 17 18:45:44.824424 env[1203]: time="2025-03-17T18:45:44.824346243Z" level=error msg="Failed to destroy network for sandbox \"12ea64e1ecca836003d8982cef0c985a3af86570749a59d72b02c70cfe7f14f8\"" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Mar 17 18:45:44.824847 env[1203]: time="2025-03-17T18:45:44.824799074Z" level=error msg="encountered an error cleaning up failed sandbox \"12ea64e1ecca836003d8982cef0c985a3af86570749a59d72b02c70cfe7f14f8\", marking sandbox state as SANDBOX_UNKNOWN" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Mar 17 18:45:44.824910 env[1203]: time="2025-03-17T18:45:44.824865479Z" level=error msg="RunPodSandbox for &PodSandboxMetadata{Name:coredns-7db6d8ff4d-gdwxp,Uid:7ea517d3-7ca7-4ac4-b0a9-aa4ec5ae36b5,Namespace:kube-system,Attempt:0,} failed, error" error="failed to setup network for sandbox \"12ea64e1ecca836003d8982cef0c985a3af86570749a59d72b02c70cfe7f14f8\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Mar 17 18:45:44.825170 kubelet[2045]: E0317 18:45:44.825126 2045 remote_runtime.go:193] "RunPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"12ea64e1ecca836003d8982cef0c985a3af86570749a59d72b02c70cfe7f14f8\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Mar 17 18:45:44.825274 kubelet[2045]: E0317 18:45:44.825203 2045 kuberuntime_sandbox.go:72] "Failed to create sandbox for pod" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"12ea64e1ecca836003d8982cef0c985a3af86570749a59d72b02c70cfe7f14f8\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="kube-system/coredns-7db6d8ff4d-gdwxp" Mar 17 18:45:44.825274 kubelet[2045]: E0317 18:45:44.825228 2045 kuberuntime_manager.go:1166] "CreatePodSandbox for pod failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"12ea64e1ecca836003d8982cef0c985a3af86570749a59d72b02c70cfe7f14f8\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="kube-system/coredns-7db6d8ff4d-gdwxp" Mar 17 18:45:44.825355 kubelet[2045]: E0317 18:45:44.825273 2045 pod_workers.go:1298] "Error syncing pod, skipping" err="failed to \"CreatePodSandbox\" for \"coredns-7db6d8ff4d-gdwxp_kube-system(7ea517d3-7ca7-4ac4-b0a9-aa4ec5ae36b5)\" with CreatePodSandboxError: \"Failed to create sandbox for pod \\\"coredns-7db6d8ff4d-gdwxp_kube-system(7ea517d3-7ca7-4ac4-b0a9-aa4ec5ae36b5)\\\": rpc error: code = Unknown desc = failed to setup network for sandbox \\\"12ea64e1ecca836003d8982cef0c985a3af86570749a59d72b02c70cfe7f14f8\\\": plugin type=\\\"calico\\\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="kube-system/coredns-7db6d8ff4d-gdwxp" podUID="7ea517d3-7ca7-4ac4-b0a9-aa4ec5ae36b5" Mar 17 18:45:44.847609 env[1203]: time="2025-03-17T18:45:44.847533699Z" level=error msg="Failed to destroy network for sandbox \"20559b123871c3bfa8c867ee93a3db1b0ec66ee15b3c5438f5405ba0069b7e18\"" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Mar 17 18:45:44.848019 env[1203]: time="2025-03-17T18:45:44.847984155Z" level=error msg="encountered an error cleaning up failed sandbox \"20559b123871c3bfa8c867ee93a3db1b0ec66ee15b3c5438f5405ba0069b7e18\", marking sandbox state as SANDBOX_UNKNOWN" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Mar 17 18:45:44.848178 env[1203]: time="2025-03-17T18:45:44.848144786Z" level=error msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-apiserver-5c5c847997-j7phz,Uid:f76afdc5-ade3-4599-9191-81e2b3c52eb2,Namespace:calico-apiserver,Attempt:0,} failed, error" error="failed to setup network for sandbox \"20559b123871c3bfa8c867ee93a3db1b0ec66ee15b3c5438f5405ba0069b7e18\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Mar 17 18:45:44.849086 kubelet[2045]: E0317 18:45:44.848537 2045 remote_runtime.go:193] "RunPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"20559b123871c3bfa8c867ee93a3db1b0ec66ee15b3c5438f5405ba0069b7e18\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Mar 17 18:45:44.849086 kubelet[2045]: E0317 18:45:44.848602 2045 kuberuntime_sandbox.go:72] "Failed to create sandbox for pod" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"20559b123871c3bfa8c867ee93a3db1b0ec66ee15b3c5438f5405ba0069b7e18\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="calico-apiserver/calico-apiserver-5c5c847997-j7phz" Mar 17 18:45:44.849086 kubelet[2045]: E0317 18:45:44.848643 2045 kuberuntime_manager.go:1166] "CreatePodSandbox for pod failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"20559b123871c3bfa8c867ee93a3db1b0ec66ee15b3c5438f5405ba0069b7e18\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="calico-apiserver/calico-apiserver-5c5c847997-j7phz" Mar 17 18:45:44.849237 kubelet[2045]: E0317 18:45:44.848694 2045 pod_workers.go:1298] "Error syncing pod, skipping" err="failed to \"CreatePodSandbox\" for \"calico-apiserver-5c5c847997-j7phz_calico-apiserver(f76afdc5-ade3-4599-9191-81e2b3c52eb2)\" with CreatePodSandboxError: \"Failed to create sandbox for pod \\\"calico-apiserver-5c5c847997-j7phz_calico-apiserver(f76afdc5-ade3-4599-9191-81e2b3c52eb2)\\\": rpc error: code = Unknown desc = failed to setup network for sandbox \\\"20559b123871c3bfa8c867ee93a3db1b0ec66ee15b3c5438f5405ba0069b7e18\\\": plugin type=\\\"calico\\\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-apiserver/calico-apiserver-5c5c847997-j7phz" podUID="f76afdc5-ade3-4599-9191-81e2b3c52eb2" Mar 17 18:45:44.861672 env[1203]: time="2025-03-17T18:45:44.861594462Z" level=error msg="Failed to destroy network for sandbox \"e89558f593d7e9c08a181ae183ab0a8320dd5ad3ce1575d1502e0a0d6fe4025b\"" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Mar 17 18:45:44.862220 env[1203]: time="2025-03-17T18:45:44.862193498Z" level=error msg="encountered an error cleaning up failed sandbox \"e89558f593d7e9c08a181ae183ab0a8320dd5ad3ce1575d1502e0a0d6fe4025b\", marking sandbox state as SANDBOX_UNKNOWN" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Mar 17 18:45:44.862356 env[1203]: time="2025-03-17T18:45:44.862321899Z" level=error msg="RunPodSandbox for &PodSandboxMetadata{Name:coredns-7db6d8ff4d-nq4kb,Uid:effac710-cde3-45ed-8e3f-90230de9316c,Namespace:kube-system,Attempt:0,} failed, error" error="failed to setup network for sandbox \"e89558f593d7e9c08a181ae183ab0a8320dd5ad3ce1575d1502e0a0d6fe4025b\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Mar 17 18:45:44.863143 kubelet[2045]: E0317 18:45:44.862675 2045 remote_runtime.go:193] "RunPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"e89558f593d7e9c08a181ae183ab0a8320dd5ad3ce1575d1502e0a0d6fe4025b\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Mar 17 18:45:44.863143 kubelet[2045]: E0317 18:45:44.862746 2045 kuberuntime_sandbox.go:72] "Failed to create sandbox for pod" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"e89558f593d7e9c08a181ae183ab0a8320dd5ad3ce1575d1502e0a0d6fe4025b\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="kube-system/coredns-7db6d8ff4d-nq4kb" Mar 17 18:45:44.863143 kubelet[2045]: E0317 18:45:44.862810 2045 kuberuntime_manager.go:1166] "CreatePodSandbox for pod failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"e89558f593d7e9c08a181ae183ab0a8320dd5ad3ce1575d1502e0a0d6fe4025b\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="kube-system/coredns-7db6d8ff4d-nq4kb" Mar 17 18:45:44.863291 kubelet[2045]: E0317 18:45:44.862864 2045 pod_workers.go:1298] "Error syncing pod, skipping" err="failed to \"CreatePodSandbox\" for \"coredns-7db6d8ff4d-nq4kb_kube-system(effac710-cde3-45ed-8e3f-90230de9316c)\" with CreatePodSandboxError: \"Failed to create sandbox for pod \\\"coredns-7db6d8ff4d-nq4kb_kube-system(effac710-cde3-45ed-8e3f-90230de9316c)\\\": rpc error: code = Unknown desc = failed to setup network for sandbox \\\"e89558f593d7e9c08a181ae183ab0a8320dd5ad3ce1575d1502e0a0d6fe4025b\\\": plugin type=\\\"calico\\\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="kube-system/coredns-7db6d8ff4d-nq4kb" podUID="effac710-cde3-45ed-8e3f-90230de9316c" Mar 17 18:45:44.867367 env[1203]: time="2025-03-17T18:45:44.867308039Z" level=error msg="Failed to destroy network for sandbox \"49bc01f8fe1fd25dbc58e081e145237ea5c49d14446d8dec1e5dc2e238eef4b6\"" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Mar 17 18:45:44.867748 env[1203]: time="2025-03-17T18:45:44.867716237Z" level=error msg="encountered an error cleaning up failed sandbox \"49bc01f8fe1fd25dbc58e081e145237ea5c49d14446d8dec1e5dc2e238eef4b6\", marking sandbox state as SANDBOX_UNKNOWN" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Mar 17 18:45:44.867801 env[1203]: time="2025-03-17T18:45:44.867762393Z" level=error msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-kube-controllers-56d6765747-9mr6w,Uid:ca492086-56f8-43e1-83c0-78cd15fb38dd,Namespace:calico-system,Attempt:0,} failed, error" error="failed to setup network for sandbox \"49bc01f8fe1fd25dbc58e081e145237ea5c49d14446d8dec1e5dc2e238eef4b6\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Mar 17 18:45:44.867989 kubelet[2045]: E0317 18:45:44.867935 2045 remote_runtime.go:193] "RunPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"49bc01f8fe1fd25dbc58e081e145237ea5c49d14446d8dec1e5dc2e238eef4b6\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Mar 17 18:45:44.868078 kubelet[2045]: E0317 18:45:44.868014 2045 kuberuntime_sandbox.go:72] "Failed to create sandbox for pod" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"49bc01f8fe1fd25dbc58e081e145237ea5c49d14446d8dec1e5dc2e238eef4b6\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="calico-system/calico-kube-controllers-56d6765747-9mr6w" Mar 17 18:45:44.868078 kubelet[2045]: E0317 18:45:44.868042 2045 kuberuntime_manager.go:1166] "CreatePodSandbox for pod failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"49bc01f8fe1fd25dbc58e081e145237ea5c49d14446d8dec1e5dc2e238eef4b6\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="calico-system/calico-kube-controllers-56d6765747-9mr6w" Mar 17 18:45:44.868153 kubelet[2045]: E0317 18:45:44.868088 2045 pod_workers.go:1298] "Error syncing pod, skipping" err="failed to \"CreatePodSandbox\" for \"calico-kube-controllers-56d6765747-9mr6w_calico-system(ca492086-56f8-43e1-83c0-78cd15fb38dd)\" with CreatePodSandboxError: \"Failed to create sandbox for pod \\\"calico-kube-controllers-56d6765747-9mr6w_calico-system(ca492086-56f8-43e1-83c0-78cd15fb38dd)\\\": rpc error: code = Unknown desc = failed to setup network for sandbox \\\"49bc01f8fe1fd25dbc58e081e145237ea5c49d14446d8dec1e5dc2e238eef4b6\\\": plugin type=\\\"calico\\\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-system/calico-kube-controllers-56d6765747-9mr6w" podUID="ca492086-56f8-43e1-83c0-78cd15fb38dd" Mar 17 18:45:44.878959 env[1203]: time="2025-03-17T18:45:44.878891098Z" level=error msg="Failed to destroy network for sandbox \"a251bdfeb83e381893a6957f1a65c91859b0e72c5f92adb95520539a022b1e90\"" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Mar 17 18:45:44.879304 env[1203]: time="2025-03-17T18:45:44.879269318Z" level=error msg="encountered an error cleaning up failed sandbox \"a251bdfeb83e381893a6957f1a65c91859b0e72c5f92adb95520539a022b1e90\", marking sandbox state as SANDBOX_UNKNOWN" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Mar 17 18:45:44.879366 env[1203]: time="2025-03-17T18:45:44.879328539Z" level=error msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-apiserver-5c5c847997-cn65r,Uid:7f41b2cd-adad-4fdd-914e-25770b9dbb49,Namespace:calico-apiserver,Attempt:0,} failed, error" error="failed to setup network for sandbox \"a251bdfeb83e381893a6957f1a65c91859b0e72c5f92adb95520539a022b1e90\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Mar 17 18:45:44.879625 kubelet[2045]: E0317 18:45:44.879583 2045 remote_runtime.go:193] "RunPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"a251bdfeb83e381893a6957f1a65c91859b0e72c5f92adb95520539a022b1e90\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Mar 17 18:45:44.879720 kubelet[2045]: E0317 18:45:44.879657 2045 kuberuntime_sandbox.go:72] "Failed to create sandbox for pod" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"a251bdfeb83e381893a6957f1a65c91859b0e72c5f92adb95520539a022b1e90\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="calico-apiserver/calico-apiserver-5c5c847997-cn65r" Mar 17 18:45:44.879720 kubelet[2045]: E0317 18:45:44.879682 2045 kuberuntime_manager.go:1166] "CreatePodSandbox for pod failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"a251bdfeb83e381893a6957f1a65c91859b0e72c5f92adb95520539a022b1e90\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="calico-apiserver/calico-apiserver-5c5c847997-cn65r" Mar 17 18:45:44.879884 kubelet[2045]: E0317 18:45:44.879728 2045 pod_workers.go:1298] "Error syncing pod, skipping" err="failed to \"CreatePodSandbox\" for \"calico-apiserver-5c5c847997-cn65r_calico-apiserver(7f41b2cd-adad-4fdd-914e-25770b9dbb49)\" with CreatePodSandboxError: \"Failed to create sandbox for pod \\\"calico-apiserver-5c5c847997-cn65r_calico-apiserver(7f41b2cd-adad-4fdd-914e-25770b9dbb49)\\\": rpc error: code = Unknown desc = failed to setup network for sandbox \\\"a251bdfeb83e381893a6957f1a65c91859b0e72c5f92adb95520539a022b1e90\\\": plugin type=\\\"calico\\\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-apiserver/calico-apiserver-5c5c847997-cn65r" podUID="7f41b2cd-adad-4fdd-914e-25770b9dbb49" Mar 17 18:45:45.081919 kubelet[2045]: I0317 18:45:45.081799 2045 pod_container_deletor.go:80] "Container not found in pod's containers" containerID="a251bdfeb83e381893a6957f1a65c91859b0e72c5f92adb95520539a022b1e90" Mar 17 18:45:45.082741 env[1203]: time="2025-03-17T18:45:45.082689094Z" level=info msg="StopPodSandbox for \"a251bdfeb83e381893a6957f1a65c91859b0e72c5f92adb95520539a022b1e90\"" Mar 17 18:45:45.084455 kubelet[2045]: I0317 18:45:45.084419 2045 pod_container_deletor.go:80] "Container not found in pod's containers" containerID="20559b123871c3bfa8c867ee93a3db1b0ec66ee15b3c5438f5405ba0069b7e18" Mar 17 18:45:45.084976 env[1203]: time="2025-03-17T18:45:45.084943440Z" level=info msg="StopPodSandbox for \"20559b123871c3bfa8c867ee93a3db1b0ec66ee15b3c5438f5405ba0069b7e18\"" Mar 17 18:45:45.086088 kubelet[2045]: I0317 18:45:45.086052 2045 pod_container_deletor.go:80] "Container not found in pod's containers" containerID="49bc01f8fe1fd25dbc58e081e145237ea5c49d14446d8dec1e5dc2e238eef4b6" Mar 17 18:45:45.087579 env[1203]: time="2025-03-17T18:45:45.086935162Z" level=info msg="StopPodSandbox for \"49bc01f8fe1fd25dbc58e081e145237ea5c49d14446d8dec1e5dc2e238eef4b6\"" Mar 17 18:45:45.088301 kubelet[2045]: I0317 18:45:45.088249 2045 pod_container_deletor.go:80] "Container not found in pod's containers" containerID="e89558f593d7e9c08a181ae183ab0a8320dd5ad3ce1575d1502e0a0d6fe4025b" Mar 17 18:45:45.088958 env[1203]: time="2025-03-17T18:45:45.088923589Z" level=info msg="StopPodSandbox for \"e89558f593d7e9c08a181ae183ab0a8320dd5ad3ce1575d1502e0a0d6fe4025b\"" Mar 17 18:45:45.089928 kubelet[2045]: I0317 18:45:45.089888 2045 pod_container_deletor.go:80] "Container not found in pod's containers" containerID="12ea64e1ecca836003d8982cef0c985a3af86570749a59d72b02c70cfe7f14f8" Mar 17 18:45:45.090673 env[1203]: time="2025-03-17T18:45:45.090607293Z" level=info msg="StopPodSandbox for \"12ea64e1ecca836003d8982cef0c985a3af86570749a59d72b02c70cfe7f14f8\"" Mar 17 18:45:45.096734 kubelet[2045]: E0317 18:45:45.096084 2045 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Mar 17 18:45:45.096734 kubelet[2045]: E0317 18:45:45.096205 2045 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Mar 17 18:45:45.097241 env[1203]: time="2025-03-17T18:45:45.097206392Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/node:v3.29.1\"" Mar 17 18:45:45.131752 env[1203]: time="2025-03-17T18:45:45.131668236Z" level=error msg="StopPodSandbox for \"20559b123871c3bfa8c867ee93a3db1b0ec66ee15b3c5438f5405ba0069b7e18\" failed" error="failed to destroy network for sandbox \"20559b123871c3bfa8c867ee93a3db1b0ec66ee15b3c5438f5405ba0069b7e18\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Mar 17 18:45:45.131938 kubelet[2045]: E0317 18:45:45.131897 2045 remote_runtime.go:222] "StopPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to destroy network for sandbox \"20559b123871c3bfa8c867ee93a3db1b0ec66ee15b3c5438f5405ba0069b7e18\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" podSandboxID="20559b123871c3bfa8c867ee93a3db1b0ec66ee15b3c5438f5405ba0069b7e18" Mar 17 18:45:45.132048 kubelet[2045]: E0317 18:45:45.131956 2045 kuberuntime_manager.go:1375] "Failed to stop sandbox" podSandboxID={"Type":"containerd","ID":"20559b123871c3bfa8c867ee93a3db1b0ec66ee15b3c5438f5405ba0069b7e18"} Mar 17 18:45:45.132048 kubelet[2045]: E0317 18:45:45.132012 2045 kuberuntime_manager.go:1075] "killPodWithSyncResult failed" err="failed to \"KillPodSandbox\" for \"f76afdc5-ade3-4599-9191-81e2b3c52eb2\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"20559b123871c3bfa8c867ee93a3db1b0ec66ee15b3c5438f5405ba0069b7e18\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" Mar 17 18:45:45.132048 kubelet[2045]: E0317 18:45:45.132033 2045 pod_workers.go:1298] "Error syncing pod, skipping" err="failed to \"KillPodSandbox\" for \"f76afdc5-ade3-4599-9191-81e2b3c52eb2\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"20559b123871c3bfa8c867ee93a3db1b0ec66ee15b3c5438f5405ba0069b7e18\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-apiserver/calico-apiserver-5c5c847997-j7phz" podUID="f76afdc5-ade3-4599-9191-81e2b3c52eb2" Mar 17 18:45:45.138488 env[1203]: time="2025-03-17T18:45:45.138392010Z" level=error msg="StopPodSandbox for \"49bc01f8fe1fd25dbc58e081e145237ea5c49d14446d8dec1e5dc2e238eef4b6\" failed" error="failed to destroy network for sandbox \"49bc01f8fe1fd25dbc58e081e145237ea5c49d14446d8dec1e5dc2e238eef4b6\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Mar 17 18:45:45.138751 kubelet[2045]: E0317 18:45:45.138688 2045 remote_runtime.go:222] "StopPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to destroy network for sandbox \"49bc01f8fe1fd25dbc58e081e145237ea5c49d14446d8dec1e5dc2e238eef4b6\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" podSandboxID="49bc01f8fe1fd25dbc58e081e145237ea5c49d14446d8dec1e5dc2e238eef4b6" Mar 17 18:45:45.138830 kubelet[2045]: E0317 18:45:45.138752 2045 kuberuntime_manager.go:1375] "Failed to stop sandbox" podSandboxID={"Type":"containerd","ID":"49bc01f8fe1fd25dbc58e081e145237ea5c49d14446d8dec1e5dc2e238eef4b6"} Mar 17 18:45:45.138830 kubelet[2045]: E0317 18:45:45.138795 2045 kuberuntime_manager.go:1075] "killPodWithSyncResult failed" err="failed to \"KillPodSandbox\" for \"ca492086-56f8-43e1-83c0-78cd15fb38dd\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"49bc01f8fe1fd25dbc58e081e145237ea5c49d14446d8dec1e5dc2e238eef4b6\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" Mar 17 18:45:45.138938 kubelet[2045]: E0317 18:45:45.138825 2045 pod_workers.go:1298] "Error syncing pod, skipping" err="failed to \"KillPodSandbox\" for \"ca492086-56f8-43e1-83c0-78cd15fb38dd\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"49bc01f8fe1fd25dbc58e081e145237ea5c49d14446d8dec1e5dc2e238eef4b6\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-system/calico-kube-controllers-56d6765747-9mr6w" podUID="ca492086-56f8-43e1-83c0-78cd15fb38dd" Mar 17 18:45:45.139396 env[1203]: time="2025-03-17T18:45:45.139357013Z" level=error msg="StopPodSandbox for \"a251bdfeb83e381893a6957f1a65c91859b0e72c5f92adb95520539a022b1e90\" failed" error="failed to destroy network for sandbox \"a251bdfeb83e381893a6957f1a65c91859b0e72c5f92adb95520539a022b1e90\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Mar 17 18:45:45.139539 kubelet[2045]: E0317 18:45:45.139502 2045 remote_runtime.go:222] "StopPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to destroy network for sandbox \"a251bdfeb83e381893a6957f1a65c91859b0e72c5f92adb95520539a022b1e90\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" podSandboxID="a251bdfeb83e381893a6957f1a65c91859b0e72c5f92adb95520539a022b1e90" Mar 17 18:45:45.139539 kubelet[2045]: E0317 18:45:45.139536 2045 kuberuntime_manager.go:1375] "Failed to stop sandbox" podSandboxID={"Type":"containerd","ID":"a251bdfeb83e381893a6957f1a65c91859b0e72c5f92adb95520539a022b1e90"} Mar 17 18:45:45.139671 kubelet[2045]: E0317 18:45:45.139564 2045 kuberuntime_manager.go:1075] "killPodWithSyncResult failed" err="failed to \"KillPodSandbox\" for \"7f41b2cd-adad-4fdd-914e-25770b9dbb49\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"a251bdfeb83e381893a6957f1a65c91859b0e72c5f92adb95520539a022b1e90\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" Mar 17 18:45:45.139671 kubelet[2045]: E0317 18:45:45.139589 2045 pod_workers.go:1298] "Error syncing pod, skipping" err="failed to \"KillPodSandbox\" for \"7f41b2cd-adad-4fdd-914e-25770b9dbb49\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"a251bdfeb83e381893a6957f1a65c91859b0e72c5f92adb95520539a022b1e90\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-apiserver/calico-apiserver-5c5c847997-cn65r" podUID="7f41b2cd-adad-4fdd-914e-25770b9dbb49" Mar 17 18:45:45.151018 env[1203]: time="2025-03-17T18:45:45.150950767Z" level=error msg="StopPodSandbox for \"e89558f593d7e9c08a181ae183ab0a8320dd5ad3ce1575d1502e0a0d6fe4025b\" failed" error="failed to destroy network for sandbox \"e89558f593d7e9c08a181ae183ab0a8320dd5ad3ce1575d1502e0a0d6fe4025b\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Mar 17 18:45:45.151263 kubelet[2045]: E0317 18:45:45.151204 2045 remote_runtime.go:222] "StopPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to destroy network for sandbox \"e89558f593d7e9c08a181ae183ab0a8320dd5ad3ce1575d1502e0a0d6fe4025b\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" podSandboxID="e89558f593d7e9c08a181ae183ab0a8320dd5ad3ce1575d1502e0a0d6fe4025b" Mar 17 18:45:45.151349 kubelet[2045]: E0317 18:45:45.151284 2045 kuberuntime_manager.go:1375] "Failed to stop sandbox" podSandboxID={"Type":"containerd","ID":"e89558f593d7e9c08a181ae183ab0a8320dd5ad3ce1575d1502e0a0d6fe4025b"} Mar 17 18:45:45.151349 kubelet[2045]: E0317 18:45:45.151328 2045 kuberuntime_manager.go:1075] "killPodWithSyncResult failed" err="failed to \"KillPodSandbox\" for \"effac710-cde3-45ed-8e3f-90230de9316c\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"e89558f593d7e9c08a181ae183ab0a8320dd5ad3ce1575d1502e0a0d6fe4025b\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" Mar 17 18:45:45.151460 kubelet[2045]: E0317 18:45:45.151356 2045 pod_workers.go:1298] "Error syncing pod, skipping" err="failed to \"KillPodSandbox\" for \"effac710-cde3-45ed-8e3f-90230de9316c\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"e89558f593d7e9c08a181ae183ab0a8320dd5ad3ce1575d1502e0a0d6fe4025b\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="kube-system/coredns-7db6d8ff4d-nq4kb" podUID="effac710-cde3-45ed-8e3f-90230de9316c" Mar 17 18:45:45.157615 env[1203]: time="2025-03-17T18:45:45.157531884Z" level=error msg="StopPodSandbox for \"12ea64e1ecca836003d8982cef0c985a3af86570749a59d72b02c70cfe7f14f8\" failed" error="failed to destroy network for sandbox \"12ea64e1ecca836003d8982cef0c985a3af86570749a59d72b02c70cfe7f14f8\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Mar 17 18:45:45.157907 kubelet[2045]: E0317 18:45:45.157836 2045 remote_runtime.go:222] "StopPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to destroy network for sandbox \"12ea64e1ecca836003d8982cef0c985a3af86570749a59d72b02c70cfe7f14f8\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" podSandboxID="12ea64e1ecca836003d8982cef0c985a3af86570749a59d72b02c70cfe7f14f8" Mar 17 18:45:45.157979 kubelet[2045]: E0317 18:45:45.157905 2045 kuberuntime_manager.go:1375] "Failed to stop sandbox" podSandboxID={"Type":"containerd","ID":"12ea64e1ecca836003d8982cef0c985a3af86570749a59d72b02c70cfe7f14f8"} Mar 17 18:45:45.157979 kubelet[2045]: E0317 18:45:45.157950 2045 kuberuntime_manager.go:1075] "killPodWithSyncResult failed" err="failed to \"KillPodSandbox\" for \"7ea517d3-7ca7-4ac4-b0a9-aa4ec5ae36b5\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"12ea64e1ecca836003d8982cef0c985a3af86570749a59d72b02c70cfe7f14f8\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" Mar 17 18:45:45.158081 kubelet[2045]: E0317 18:45:45.157979 2045 pod_workers.go:1298] "Error syncing pod, skipping" err="failed to \"KillPodSandbox\" for \"7ea517d3-7ca7-4ac4-b0a9-aa4ec5ae36b5\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"12ea64e1ecca836003d8982cef0c985a3af86570749a59d72b02c70cfe7f14f8\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="kube-system/coredns-7db6d8ff4d-gdwxp" podUID="7ea517d3-7ca7-4ac4-b0a9-aa4ec5ae36b5" Mar 17 18:45:45.601169 systemd[1]: Created slice kubepods-besteffort-pod42df0b30_e0d7_4f61_83fe_313c16a7f709.slice. Mar 17 18:45:45.603446 env[1203]: time="2025-03-17T18:45:45.603404284Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:csi-node-driver-6vr94,Uid:42df0b30-e0d7-4f61-83fe-313c16a7f709,Namespace:calico-system,Attempt:0,}" Mar 17 18:45:45.664413 env[1203]: time="2025-03-17T18:45:45.664333759Z" level=error msg="Failed to destroy network for sandbox \"5433c4137b534da4025b730d9c8ec78362c5370579e68f684283036a36a9b595\"" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Mar 17 18:45:45.664794 env[1203]: time="2025-03-17T18:45:45.664757265Z" level=error msg="encountered an error cleaning up failed sandbox \"5433c4137b534da4025b730d9c8ec78362c5370579e68f684283036a36a9b595\", marking sandbox state as SANDBOX_UNKNOWN" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Mar 17 18:45:45.664834 env[1203]: time="2025-03-17T18:45:45.664813621Z" level=error msg="RunPodSandbox for &PodSandboxMetadata{Name:csi-node-driver-6vr94,Uid:42df0b30-e0d7-4f61-83fe-313c16a7f709,Namespace:calico-system,Attempt:0,} failed, error" error="failed to setup network for sandbox \"5433c4137b534da4025b730d9c8ec78362c5370579e68f684283036a36a9b595\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Mar 17 18:45:45.665063 kubelet[2045]: E0317 18:45:45.665025 2045 remote_runtime.go:193] "RunPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"5433c4137b534da4025b730d9c8ec78362c5370579e68f684283036a36a9b595\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Mar 17 18:45:45.665131 kubelet[2045]: E0317 18:45:45.665089 2045 kuberuntime_sandbox.go:72] "Failed to create sandbox for pod" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"5433c4137b534da4025b730d9c8ec78362c5370579e68f684283036a36a9b595\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="calico-system/csi-node-driver-6vr94" Mar 17 18:45:45.665131 kubelet[2045]: E0317 18:45:45.665107 2045 kuberuntime_manager.go:1166] "CreatePodSandbox for pod failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"5433c4137b534da4025b730d9c8ec78362c5370579e68f684283036a36a9b595\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="calico-system/csi-node-driver-6vr94" Mar 17 18:45:45.665182 kubelet[2045]: E0317 18:45:45.665143 2045 pod_workers.go:1298] "Error syncing pod, skipping" err="failed to \"CreatePodSandbox\" for \"csi-node-driver-6vr94_calico-system(42df0b30-e0d7-4f61-83fe-313c16a7f709)\" with CreatePodSandboxError: \"Failed to create sandbox for pod \\\"csi-node-driver-6vr94_calico-system(42df0b30-e0d7-4f61-83fe-313c16a7f709)\\\": rpc error: code = Unknown desc = failed to setup network for sandbox \\\"5433c4137b534da4025b730d9c8ec78362c5370579e68f684283036a36a9b595\\\": plugin type=\\\"calico\\\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-system/csi-node-driver-6vr94" podUID="42df0b30-e0d7-4f61-83fe-313c16a7f709" Mar 17 18:45:45.666307 systemd[1]: run-containerd-io.containerd.grpc.v1.cri-sandboxes-5433c4137b534da4025b730d9c8ec78362c5370579e68f684283036a36a9b595-shm.mount: Deactivated successfully. Mar 17 18:45:46.098150 kubelet[2045]: I0317 18:45:46.098120 2045 pod_container_deletor.go:80] "Container not found in pod's containers" containerID="5433c4137b534da4025b730d9c8ec78362c5370579e68f684283036a36a9b595" Mar 17 18:45:46.098656 env[1203]: time="2025-03-17T18:45:46.098608143Z" level=info msg="StopPodSandbox for \"5433c4137b534da4025b730d9c8ec78362c5370579e68f684283036a36a9b595\"" Mar 17 18:45:46.121848 env[1203]: time="2025-03-17T18:45:46.121783924Z" level=error msg="StopPodSandbox for \"5433c4137b534da4025b730d9c8ec78362c5370579e68f684283036a36a9b595\" failed" error="failed to destroy network for sandbox \"5433c4137b534da4025b730d9c8ec78362c5370579e68f684283036a36a9b595\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Mar 17 18:45:46.122085 kubelet[2045]: E0317 18:45:46.122035 2045 remote_runtime.go:222] "StopPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to destroy network for sandbox \"5433c4137b534da4025b730d9c8ec78362c5370579e68f684283036a36a9b595\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" podSandboxID="5433c4137b534da4025b730d9c8ec78362c5370579e68f684283036a36a9b595" Mar 17 18:45:46.122155 kubelet[2045]: E0317 18:45:46.122094 2045 kuberuntime_manager.go:1375] "Failed to stop sandbox" podSandboxID={"Type":"containerd","ID":"5433c4137b534da4025b730d9c8ec78362c5370579e68f684283036a36a9b595"} Mar 17 18:45:46.122155 kubelet[2045]: E0317 18:45:46.122129 2045 kuberuntime_manager.go:1075] "killPodWithSyncResult failed" err="failed to \"KillPodSandbox\" for \"42df0b30-e0d7-4f61-83fe-313c16a7f709\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"5433c4137b534da4025b730d9c8ec78362c5370579e68f684283036a36a9b595\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" Mar 17 18:45:46.122261 kubelet[2045]: E0317 18:45:46.122154 2045 pod_workers.go:1298] "Error syncing pod, skipping" err="failed to \"KillPodSandbox\" for \"42df0b30-e0d7-4f61-83fe-313c16a7f709\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"5433c4137b534da4025b730d9c8ec78362c5370579e68f684283036a36a9b595\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-system/csi-node-driver-6vr94" podUID="42df0b30-e0d7-4f61-83fe-313c16a7f709" Mar 17 18:45:46.596000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@9-10.0.0.110:22-10.0.0.1:56258 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:45:46.597027 systemd[1]: Started sshd@9-10.0.0.110:22-10.0.0.1:56258.service. Mar 17 18:45:46.598066 kernel: kauditd_printk_skb: 51 callbacks suppressed Mar 17 18:45:46.598114 kernel: audit: type=1130 audit(1742237146.596:1014): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@9-10.0.0.110:22-10.0.0.1:56258 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:45:46.629000 audit[3160]: USER_ACCT pid=3160 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Mar 17 18:45:46.630369 sshd[3160]: Accepted publickey for core from 10.0.0.1 port 56258 ssh2: RSA SHA256:EcJpbXadXymLrINQtrmLSqTXC2wy0UoSwO9MmZb5CTo Mar 17 18:45:46.633000 audit[3160]: CRED_ACQ pid=3160 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Mar 17 18:45:46.634669 sshd[3160]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Mar 17 18:45:46.637871 kernel: audit: type=1101 audit(1742237146.629:1015): pid=3160 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Mar 17 18:45:46.637916 kernel: audit: type=1103 audit(1742237146.633:1016): pid=3160 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Mar 17 18:45:46.637934 kernel: audit: type=1006 audit(1742237146.633:1017): pid=3160 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=10 res=1 Mar 17 18:45:46.638748 systemd[1]: Started session-10.scope. Mar 17 18:45:46.639020 systemd-logind[1188]: New session 10 of user core. Mar 17 18:45:46.633000 audit[3160]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffc08b99bc0 a2=3 a3=0 items=0 ppid=1 pid=3160 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=10 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:45:46.644172 kernel: audit: type=1300 audit(1742237146.633:1017): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffc08b99bc0 a2=3 a3=0 items=0 ppid=1 pid=3160 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=10 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:45:46.644222 kernel: audit: type=1327 audit(1742237146.633:1017): proctitle=737368643A20636F7265205B707269765D Mar 17 18:45:46.633000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Mar 17 18:45:46.645307 kernel: audit: type=1105 audit(1742237146.642:1018): pid=3160 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Mar 17 18:45:46.642000 audit[3160]: USER_START pid=3160 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Mar 17 18:45:46.649480 kernel: audit: type=1103 audit(1742237146.643:1019): pid=3162 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Mar 17 18:45:46.643000 audit[3162]: CRED_ACQ pid=3162 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Mar 17 18:45:46.836269 sshd[3160]: pam_unix(sshd:session): session closed for user core Mar 17 18:45:46.836000 audit[3160]: USER_END pid=3160 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Mar 17 18:45:46.838692 systemd[1]: sshd@9-10.0.0.110:22-10.0.0.1:56258.service: Deactivated successfully. Mar 17 18:45:46.839444 systemd[1]: session-10.scope: Deactivated successfully. Mar 17 18:45:46.841196 systemd-logind[1188]: Session 10 logged out. Waiting for processes to exit. Mar 17 18:45:46.841985 systemd-logind[1188]: Removed session 10. Mar 17 18:45:46.836000 audit[3160]: CRED_DISP pid=3160 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Mar 17 18:45:46.845736 kernel: audit: type=1106 audit(1742237146.836:1020): pid=3160 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Mar 17 18:45:46.845779 kernel: audit: type=1104 audit(1742237146.836:1021): pid=3160 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Mar 17 18:45:46.838000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@9-10.0.0.110:22-10.0.0.1:56258 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:45:51.841000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@10-10.0.0.110:22-10.0.0.1:56268 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:45:51.841606 systemd[1]: Started sshd@10-10.0.0.110:22-10.0.0.1:56268.service. Mar 17 18:45:51.848165 kernel: kauditd_printk_skb: 1 callbacks suppressed Mar 17 18:45:51.848361 kernel: audit: type=1130 audit(1742237151.841:1023): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@10-10.0.0.110:22-10.0.0.1:56268 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:45:51.878000 audit[3174]: USER_ACCT pid=3174 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Mar 17 18:45:51.884738 kernel: audit: type=1101 audit(1742237151.878:1024): pid=3174 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Mar 17 18:45:51.884791 sshd[3174]: Accepted publickey for core from 10.0.0.1 port 56268 ssh2: RSA SHA256:EcJpbXadXymLrINQtrmLSqTXC2wy0UoSwO9MmZb5CTo Mar 17 18:45:51.884000 audit[3174]: CRED_ACQ pid=3174 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Mar 17 18:45:51.885449 sshd[3174]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Mar 17 18:45:51.890695 systemd-logind[1188]: New session 11 of user core. Mar 17 18:45:51.891748 systemd[1]: Started session-11.scope. Mar 17 18:45:51.892449 kernel: audit: type=1103 audit(1742237151.884:1025): pid=3174 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Mar 17 18:45:51.892523 kernel: audit: type=1006 audit(1742237151.884:1026): pid=3174 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=11 res=1 Mar 17 18:45:51.892554 kernel: audit: type=1300 audit(1742237151.884:1026): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffcead29a60 a2=3 a3=0 items=0 ppid=1 pid=3174 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=11 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:45:51.884000 audit[3174]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffcead29a60 a2=3 a3=0 items=0 ppid=1 pid=3174 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=11 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:45:51.897547 kernel: audit: type=1327 audit(1742237151.884:1026): proctitle=737368643A20636F7265205B707269765D Mar 17 18:45:51.884000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Mar 17 18:45:51.899674 kernel: audit: type=1105 audit(1742237151.898:1027): pid=3174 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Mar 17 18:45:51.898000 audit[3174]: USER_START pid=3174 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Mar 17 18:45:51.900000 audit[3176]: CRED_ACQ pid=3176 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Mar 17 18:45:51.908280 kernel: audit: type=1103 audit(1742237151.900:1028): pid=3176 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Mar 17 18:45:52.013427 sshd[3174]: pam_unix(sshd:session): session closed for user core Mar 17 18:45:52.015892 systemd[1]: sshd@10-10.0.0.110:22-10.0.0.1:56268.service: Deactivated successfully. Mar 17 18:45:52.016372 systemd[1]: session-11.scope: Deactivated successfully. Mar 17 18:45:52.014000 audit[3174]: USER_END pid=3174 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Mar 17 18:45:52.021974 systemd[1]: Started sshd@11-10.0.0.110:22-10.0.0.1:56280.service. Mar 17 18:45:52.025959 kernel: audit: type=1106 audit(1742237152.014:1029): pid=3174 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Mar 17 18:45:52.026069 kernel: audit: type=1104 audit(1742237152.014:1030): pid=3174 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Mar 17 18:45:52.014000 audit[3174]: CRED_DISP pid=3174 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Mar 17 18:45:52.023223 systemd-logind[1188]: Session 11 logged out. Waiting for processes to exit. Mar 17 18:45:52.024438 systemd-logind[1188]: Removed session 11. Mar 17 18:45:52.015000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@10-10.0.0.110:22-10.0.0.1:56268 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:45:52.021000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@11-10.0.0.110:22-10.0.0.1:56280 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:45:52.059000 audit[3188]: USER_ACCT pid=3188 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Mar 17 18:45:52.059908 sshd[3188]: Accepted publickey for core from 10.0.0.1 port 56280 ssh2: RSA SHA256:EcJpbXadXymLrINQtrmLSqTXC2wy0UoSwO9MmZb5CTo Mar 17 18:45:52.060000 audit[3188]: CRED_ACQ pid=3188 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Mar 17 18:45:52.060000 audit[3188]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffcd2086680 a2=3 a3=0 items=0 ppid=1 pid=3188 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=12 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:45:52.060000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Mar 17 18:45:52.061261 sshd[3188]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Mar 17 18:45:52.064872 systemd-logind[1188]: New session 12 of user core. Mar 17 18:45:52.065609 systemd[1]: Started session-12.scope. Mar 17 18:45:52.069000 audit[3188]: USER_START pid=3188 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Mar 17 18:45:52.071000 audit[3190]: CRED_ACQ pid=3190 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Mar 17 18:45:52.216946 sshd[3188]: pam_unix(sshd:session): session closed for user core Mar 17 18:45:52.217000 audit[3188]: USER_END pid=3188 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Mar 17 18:45:52.217000 audit[3188]: CRED_DISP pid=3188 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Mar 17 18:45:52.221599 systemd[1]: Started sshd@12-10.0.0.110:22-10.0.0.1:56284.service. Mar 17 18:45:52.221000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@12-10.0.0.110:22-10.0.0.1:56284 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:45:52.225498 systemd[1]: sshd@11-10.0.0.110:22-10.0.0.1:56280.service: Deactivated successfully. Mar 17 18:45:52.226183 systemd[1]: session-12.scope: Deactivated successfully. Mar 17 18:45:52.225000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@11-10.0.0.110:22-10.0.0.1:56280 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:45:52.227083 systemd-logind[1188]: Session 12 logged out. Waiting for processes to exit. Mar 17 18:45:52.227933 systemd-logind[1188]: Removed session 12. Mar 17 18:45:52.267000 audit[3198]: USER_ACCT pid=3198 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Mar 17 18:45:52.268299 sshd[3198]: Accepted publickey for core from 10.0.0.1 port 56284 ssh2: RSA SHA256:EcJpbXadXymLrINQtrmLSqTXC2wy0UoSwO9MmZb5CTo Mar 17 18:45:52.268000 audit[3198]: CRED_ACQ pid=3198 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Mar 17 18:45:52.268000 audit[3198]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffe77868510 a2=3 a3=0 items=0 ppid=1 pid=3198 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=13 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:45:52.268000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Mar 17 18:45:52.269271 sshd[3198]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Mar 17 18:45:52.274016 systemd[1]: Started session-13.scope. Mar 17 18:45:52.274420 systemd-logind[1188]: New session 13 of user core. Mar 17 18:45:52.278000 audit[3198]: USER_START pid=3198 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Mar 17 18:45:52.280000 audit[3201]: CRED_ACQ pid=3201 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Mar 17 18:45:52.392532 sshd[3198]: pam_unix(sshd:session): session closed for user core Mar 17 18:45:52.393000 audit[3198]: USER_END pid=3198 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Mar 17 18:45:52.393000 audit[3198]: CRED_DISP pid=3198 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Mar 17 18:45:52.396148 systemd[1]: sshd@12-10.0.0.110:22-10.0.0.1:56284.service: Deactivated successfully. Mar 17 18:45:52.395000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@12-10.0.0.110:22-10.0.0.1:56284 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:45:52.397061 systemd[1]: session-13.scope: Deactivated successfully. Mar 17 18:45:52.397848 systemd-logind[1188]: Session 13 logged out. Waiting for processes to exit. Mar 17 18:45:52.398852 systemd-logind[1188]: Removed session 13. Mar 17 18:45:53.258443 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount121298760.mount: Deactivated successfully. Mar 17 18:45:54.441620 env[1203]: time="2025-03-17T18:45:54.441563614Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/node:v3.29.1,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Mar 17 18:45:54.444179 env[1203]: time="2025-03-17T18:45:54.444137575Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:feb26d4585d68e875d9bd9bd6c27ea9f2d5c9ed9ef70f8b8cb0ebb0559a1d664,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Mar 17 18:45:54.446158 env[1203]: time="2025-03-17T18:45:54.446116010Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/node:v3.29.1,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Mar 17 18:45:54.447811 env[1203]: time="2025-03-17T18:45:54.447775065Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/node@sha256:99c3917516efe1f807a0cfdf2d14b628b7c5cc6bd8a9ee5a253154f31756bea1,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Mar 17 18:45:54.448250 env[1203]: time="2025-03-17T18:45:54.448209260Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/node:v3.29.1\" returns image reference \"sha256:feb26d4585d68e875d9bd9bd6c27ea9f2d5c9ed9ef70f8b8cb0ebb0559a1d664\"" Mar 17 18:45:54.456810 env[1203]: time="2025-03-17T18:45:54.456746416Z" level=info msg="CreateContainer within sandbox \"16117826460450915279b8087648822d1267c59a99e1708f439b9e9fe8864fb2\" for container &ContainerMetadata{Name:calico-node,Attempt:0,}" Mar 17 18:45:54.477789 env[1203]: time="2025-03-17T18:45:54.477736850Z" level=info msg="CreateContainer within sandbox \"16117826460450915279b8087648822d1267c59a99e1708f439b9e9fe8864fb2\" for &ContainerMetadata{Name:calico-node,Attempt:0,} returns container id \"852db944f5c7bb503fb5d3ec16a018d8137f67c725b3def4671835a83296c06f\"" Mar 17 18:45:54.479704 env[1203]: time="2025-03-17T18:45:54.478371601Z" level=info msg="StartContainer for \"852db944f5c7bb503fb5d3ec16a018d8137f67c725b3def4671835a83296c06f\"" Mar 17 18:45:54.495554 systemd[1]: Started cri-containerd-852db944f5c7bb503fb5d3ec16a018d8137f67c725b3def4671835a83296c06f.scope. Mar 17 18:45:54.514000 audit[3224]: AVC avc: denied { perfmon } for pid=3224 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:54.514000 audit[3224]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=0 a1=c0001456b0 a2=3c a3=7f00df855738 items=0 ppid=2511 pid=3224 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:45:54.514000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3835326462393434663563376262353033666235643365633136613031 Mar 17 18:45:54.514000 audit[3224]: AVC avc: denied { bpf } for pid=3224 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:54.514000 audit[3224]: AVC avc: denied { bpf } for pid=3224 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:54.514000 audit[3224]: AVC avc: denied { bpf } for pid=3224 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:54.514000 audit[3224]: AVC avc: denied { perfmon } for pid=3224 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:54.514000 audit[3224]: AVC avc: denied { perfmon } for pid=3224 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:54.514000 audit[3224]: AVC avc: denied { perfmon } for pid=3224 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:54.514000 audit[3224]: AVC avc: denied { perfmon } for pid=3224 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:54.514000 audit[3224]: AVC avc: denied { perfmon } for pid=3224 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:54.514000 audit[3224]: AVC avc: denied { bpf } for pid=3224 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:54.514000 audit[3224]: AVC avc: denied { bpf } for pid=3224 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:54.514000 audit: BPF prog-id=139 op=LOAD Mar 17 18:45:54.514000 audit[3224]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c0001459d8 a2=78 a3=c0003ca568 items=0 ppid=2511 pid=3224 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:45:54.514000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3835326462393434663563376262353033666235643365633136613031 Mar 17 18:45:54.514000 audit[3224]: AVC avc: denied { bpf } for pid=3224 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:54.514000 audit[3224]: AVC avc: denied { bpf } for pid=3224 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:54.514000 audit[3224]: AVC avc: denied { perfmon } for pid=3224 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:54.514000 audit[3224]: AVC avc: denied { perfmon } for pid=3224 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:54.514000 audit[3224]: AVC avc: denied { perfmon } for pid=3224 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:54.514000 audit[3224]: AVC avc: denied { perfmon } for pid=3224 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:54.514000 audit[3224]: AVC avc: denied { perfmon } for pid=3224 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:54.514000 audit[3224]: AVC avc: denied { bpf } for pid=3224 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:54.514000 audit[3224]: AVC avc: denied { bpf } for pid=3224 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:54.514000 audit: BPF prog-id=140 op=LOAD Mar 17 18:45:54.514000 audit[3224]: SYSCALL arch=c000003e syscall=321 success=yes exit=17 a0=5 a1=c000145770 a2=78 a3=c0003ca5b8 items=0 ppid=2511 pid=3224 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:45:54.514000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3835326462393434663563376262353033666235643365633136613031 Mar 17 18:45:54.515000 audit: BPF prog-id=140 op=UNLOAD Mar 17 18:45:54.515000 audit: BPF prog-id=139 op=UNLOAD Mar 17 18:45:54.515000 audit[3224]: AVC avc: denied { bpf } for pid=3224 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:54.515000 audit[3224]: AVC avc: denied { bpf } for pid=3224 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:54.515000 audit[3224]: AVC avc: denied { bpf } for pid=3224 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:54.515000 audit[3224]: AVC avc: denied { perfmon } for pid=3224 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:54.515000 audit[3224]: AVC avc: denied { perfmon } for pid=3224 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:54.515000 audit[3224]: AVC avc: denied { perfmon } for pid=3224 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:54.515000 audit[3224]: AVC avc: denied { perfmon } for pid=3224 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:54.515000 audit[3224]: AVC avc: denied { perfmon } for pid=3224 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:54.515000 audit[3224]: AVC avc: denied { bpf } for pid=3224 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:54.515000 audit[3224]: AVC avc: denied { bpf } for pid=3224 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:54.515000 audit: BPF prog-id=141 op=LOAD Mar 17 18:45:54.515000 audit[3224]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c000145c30 a2=78 a3=c0003ca648 items=0 ppid=2511 pid=3224 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:45:54.515000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3835326462393434663563376262353033666235643365633136613031 Mar 17 18:45:54.530079 env[1203]: time="2025-03-17T18:45:54.530030527Z" level=info msg="StartContainer for \"852db944f5c7bb503fb5d3ec16a018d8137f67c725b3def4671835a83296c06f\" returns successfully" Mar 17 18:45:54.600390 kernel: wireguard: WireGuard 1.0.0 loaded. See www.wireguard.com for information. Mar 17 18:45:54.600537 kernel: wireguard: Copyright (C) 2015-2019 Jason A. Donenfeld . All Rights Reserved. Mar 17 18:45:55.117700 kubelet[2045]: E0317 18:45:55.117658 2045 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Mar 17 18:45:55.138232 kubelet[2045]: I0317 18:45:55.138166 2045 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="calico-system/calico-node-w9q5f" podStartSLOduration=1.765336065 podStartE2EDuration="26.13815028s" podCreationTimestamp="2025-03-17 18:45:29 +0000 UTC" firstStartedPulling="2025-03-17 18:45:30.076215414 +0000 UTC m=+22.564216252" lastFinishedPulling="2025-03-17 18:45:54.449029629 +0000 UTC m=+46.937030467" observedRunningTime="2025-03-17 18:45:55.136409923 +0000 UTC m=+47.624410781" watchObservedRunningTime="2025-03-17 18:45:55.13815028 +0000 UTC m=+47.626151108" Mar 17 18:45:55.596276 env[1203]: time="2025-03-17T18:45:55.596184413Z" level=info msg="StopPodSandbox for \"20559b123871c3bfa8c867ee93a3db1b0ec66ee15b3c5438f5405ba0069b7e18\"" Mar 17 18:45:55.693340 env[1203]: 2025-03-17 18:45:55.641 [INFO][3325] cni-plugin/k8s.go 608: Cleaning up netns ContainerID="20559b123871c3bfa8c867ee93a3db1b0ec66ee15b3c5438f5405ba0069b7e18" Mar 17 18:45:55.693340 env[1203]: 2025-03-17 18:45:55.641 [INFO][3325] cni-plugin/dataplane_linux.go 559: Deleting workload's device in netns. ContainerID="20559b123871c3bfa8c867ee93a3db1b0ec66ee15b3c5438f5405ba0069b7e18" iface="eth0" netns="/var/run/netns/cni-124e06c2-7dc1-e904-8eac-96b8bcbd24be" Mar 17 18:45:55.693340 env[1203]: 2025-03-17 18:45:55.642 [INFO][3325] cni-plugin/dataplane_linux.go 570: Entered netns, deleting veth. ContainerID="20559b123871c3bfa8c867ee93a3db1b0ec66ee15b3c5438f5405ba0069b7e18" iface="eth0" netns="/var/run/netns/cni-124e06c2-7dc1-e904-8eac-96b8bcbd24be" Mar 17 18:45:55.693340 env[1203]: 2025-03-17 18:45:55.642 [INFO][3325] cni-plugin/dataplane_linux.go 597: Workload's veth was already gone. Nothing to do. ContainerID="20559b123871c3bfa8c867ee93a3db1b0ec66ee15b3c5438f5405ba0069b7e18" iface="eth0" netns="/var/run/netns/cni-124e06c2-7dc1-e904-8eac-96b8bcbd24be" Mar 17 18:45:55.693340 env[1203]: 2025-03-17 18:45:55.642 [INFO][3325] cni-plugin/k8s.go 615: Releasing IP address(es) ContainerID="20559b123871c3bfa8c867ee93a3db1b0ec66ee15b3c5438f5405ba0069b7e18" Mar 17 18:45:55.693340 env[1203]: 2025-03-17 18:45:55.642 [INFO][3325] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="20559b123871c3bfa8c867ee93a3db1b0ec66ee15b3c5438f5405ba0069b7e18" Mar 17 18:45:55.693340 env[1203]: 2025-03-17 18:45:55.683 [INFO][3333] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="20559b123871c3bfa8c867ee93a3db1b0ec66ee15b3c5438f5405ba0069b7e18" HandleID="k8s-pod-network.20559b123871c3bfa8c867ee93a3db1b0ec66ee15b3c5438f5405ba0069b7e18" Workload="localhost-k8s-calico--apiserver--5c5c847997--j7phz-eth0" Mar 17 18:45:55.693340 env[1203]: 2025-03-17 18:45:55.683 [INFO][3333] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Mar 17 18:45:55.693340 env[1203]: 2025-03-17 18:45:55.683 [INFO][3333] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Mar 17 18:45:55.693340 env[1203]: 2025-03-17 18:45:55.689 [WARNING][3333] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="20559b123871c3bfa8c867ee93a3db1b0ec66ee15b3c5438f5405ba0069b7e18" HandleID="k8s-pod-network.20559b123871c3bfa8c867ee93a3db1b0ec66ee15b3c5438f5405ba0069b7e18" Workload="localhost-k8s-calico--apiserver--5c5c847997--j7phz-eth0" Mar 17 18:45:55.693340 env[1203]: 2025-03-17 18:45:55.689 [INFO][3333] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="20559b123871c3bfa8c867ee93a3db1b0ec66ee15b3c5438f5405ba0069b7e18" HandleID="k8s-pod-network.20559b123871c3bfa8c867ee93a3db1b0ec66ee15b3c5438f5405ba0069b7e18" Workload="localhost-k8s-calico--apiserver--5c5c847997--j7phz-eth0" Mar 17 18:45:55.693340 env[1203]: 2025-03-17 18:45:55.690 [INFO][3333] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Mar 17 18:45:55.693340 env[1203]: 2025-03-17 18:45:55.692 [INFO][3325] cni-plugin/k8s.go 621: Teardown processing complete. ContainerID="20559b123871c3bfa8c867ee93a3db1b0ec66ee15b3c5438f5405ba0069b7e18" Mar 17 18:45:55.693842 env[1203]: time="2025-03-17T18:45:55.693520452Z" level=info msg="TearDown network for sandbox \"20559b123871c3bfa8c867ee93a3db1b0ec66ee15b3c5438f5405ba0069b7e18\" successfully" Mar 17 18:45:55.693842 env[1203]: time="2025-03-17T18:45:55.693557902Z" level=info msg="StopPodSandbox for \"20559b123871c3bfa8c867ee93a3db1b0ec66ee15b3c5438f5405ba0069b7e18\" returns successfully" Mar 17 18:45:55.695491 systemd[1]: run-netns-cni\x2d124e06c2\x2d7dc1\x2de904\x2d8eac\x2d96b8bcbd24be.mount: Deactivated successfully. Mar 17 18:45:55.696217 env[1203]: time="2025-03-17T18:45:55.696176637Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-apiserver-5c5c847997-j7phz,Uid:f76afdc5-ade3-4599-9191-81e2b3c52eb2,Namespace:calico-apiserver,Attempt:1,}" Mar 17 18:45:55.836000 audit[3387]: AVC avc: denied { write } for pid=3387 comm="tee" name="fd" dev="proc" ino=24175 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0 Mar 17 18:45:55.836000 audit[3387]: SYSCALL arch=c000003e syscall=257 success=yes exit=3 a0=ffffff9c a1=7ffc1b4f4a2a a2=241 a3=1b6 items=1 ppid=3348 pid=3387 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tee" exe="/usr/bin/coreutils" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:45:55.836000 audit: CWD cwd="/etc/service/enabled/bird6/log" Mar 17 18:45:55.836000 audit: PATH item=0 name="/dev/fd/63" inode=25920 dev=00:0c mode=010600 ouid=0 ogid=0 rdev=00:00 obj=system_u:system_r:kernel_t:s0 nametype=NORMAL cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Mar 17 18:45:55.836000 audit: PROCTITLE proctitle=2F7573722F62696E2F636F72657574696C73002D2D636F72657574696C732D70726F672D73686562616E673D746565002F7573722F62696E2F746565002F6465762F66642F3633 Mar 17 18:45:55.841000 audit[3397]: AVC avc: denied { write } for pid=3397 comm="tee" name="fd" dev="proc" ino=25115 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0 Mar 17 18:45:55.841000 audit[3397]: SYSCALL arch=c000003e syscall=257 success=yes exit=3 a0=ffffff9c a1=7ffe70fdea2a a2=241 a3=1b6 items=1 ppid=3357 pid=3397 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tee" exe="/usr/bin/coreutils" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:45:55.841000 audit: CWD cwd="/etc/service/enabled/confd/log" Mar 17 18:45:55.841000 audit: PATH item=0 name="/dev/fd/63" inode=25110 dev=00:0c mode=010600 ouid=0 ogid=0 rdev=00:00 obj=system_u:system_r:kernel_t:s0 nametype=NORMAL cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Mar 17 18:45:55.841000 audit: PROCTITLE proctitle=2F7573722F62696E2F636F72657574696C73002D2D636F72657574696C732D70726F672D73686562616E673D746565002F7573722F62696E2F746565002F6465762F66642F3633 Mar 17 18:45:55.852000 audit[3420]: AVC avc: denied { write } for pid=3420 comm="tee" name="fd" dev="proc" ino=25928 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0 Mar 17 18:45:55.852000 audit[3420]: SYSCALL arch=c000003e syscall=257 success=yes exit=3 a0=ffffff9c a1=7ffc204a1a1b a2=241 a3=1b6 items=1 ppid=3360 pid=3420 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tee" exe="/usr/bin/coreutils" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:45:55.852000 audit: CWD cwd="/etc/service/enabled/node-status-reporter/log" Mar 17 18:45:55.852000 audit: PATH item=0 name="/dev/fd/63" inode=26639 dev=00:0c mode=010600 ouid=0 ogid=0 rdev=00:00 obj=system_u:system_r:kernel_t:s0 nametype=NORMAL cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Mar 17 18:45:55.852000 audit: PROCTITLE proctitle=2F7573722F62696E2F636F72657574696C73002D2D636F72657574696C732D70726F672D73686562616E673D746565002F7573722F62696E2F746565002F6465762F66642F3633 Mar 17 18:45:55.853000 audit[3410]: AVC avc: denied { write } for pid=3410 comm="tee" name="fd" dev="proc" ino=25932 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0 Mar 17 18:45:55.853000 audit[3410]: SYSCALL arch=c000003e syscall=257 success=yes exit=3 a0=ffffff9c a1=7ffee8b4aa2c a2=241 a3=1b6 items=1 ppid=3349 pid=3410 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tee" exe="/usr/bin/coreutils" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:45:55.853000 audit: CWD cwd="/etc/service/enabled/cni/log" Mar 17 18:45:55.853000 audit: PATH item=0 name="/dev/fd/63" inode=25117 dev=00:0c mode=010600 ouid=0 ogid=0 rdev=00:00 obj=system_u:system_r:kernel_t:s0 nametype=NORMAL cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Mar 17 18:45:55.853000 audit: PROCTITLE proctitle=2F7573722F62696E2F636F72657574696C73002D2D636F72657574696C732D70726F672D73686562616E673D746565002F7573722F62696E2F746565002F6465762F66642F3633 Mar 17 18:45:55.857000 audit[3396]: AVC avc: denied { write } for pid=3396 comm="tee" name="fd" dev="proc" ino=24182 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0 Mar 17 18:45:55.857000 audit[3396]: SYSCALL arch=c000003e syscall=257 success=yes exit=3 a0=ffffff9c a1=7ffe5de6ea1a a2=241 a3=1b6 items=1 ppid=3351 pid=3396 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tee" exe="/usr/bin/coreutils" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:45:55.857000 audit: CWD cwd="/etc/service/enabled/allocate-tunnel-addrs/log" Mar 17 18:45:55.857000 audit: PATH item=0 name="/dev/fd/63" inode=25922 dev=00:0c mode=010600 ouid=0 ogid=0 rdev=00:00 obj=system_u:system_r:kernel_t:s0 nametype=NORMAL cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Mar 17 18:45:55.857000 audit: PROCTITLE proctitle=2F7573722F62696E2F636F72657574696C73002D2D636F72657574696C732D70726F672D73686562616E673D746565002F7573722F62696E2F746565002F6465762F66642F3633 Mar 17 18:45:55.861000 audit[3417]: AVC avc: denied { write } for pid=3417 comm="tee" name="fd" dev="proc" ino=25125 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0 Mar 17 18:45:55.861000 audit[3417]: SYSCALL arch=c000003e syscall=257 success=yes exit=3 a0=ffffff9c a1=7fff60e89a2a a2=241 a3=1b6 items=1 ppid=3364 pid=3417 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tee" exe="/usr/bin/coreutils" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:45:55.861000 audit: CWD cwd="/etc/service/enabled/felix/log" Mar 17 18:45:55.861000 audit: PATH item=0 name="/dev/fd/63" inode=25924 dev=00:0c mode=010600 ouid=0 ogid=0 rdev=00:00 obj=system_u:system_r:kernel_t:s0 nametype=NORMAL cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Mar 17 18:45:55.861000 audit: PROCTITLE proctitle=2F7573722F62696E2F636F72657574696C73002D2D636F72657574696C732D70726F672D73686562616E673D746565002F7573722F62696E2F746565002F6465762F66642F3633 Mar 17 18:45:55.879000 audit[3428]: AVC avc: denied { write } for pid=3428 comm="tee" name="fd" dev="proc" ino=26648 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0 Mar 17 18:45:55.879000 audit[3428]: SYSCALL arch=c000003e syscall=257 success=yes exit=3 a0=ffffff9c a1=7ffec0656a2b a2=241 a3=1b6 items=1 ppid=3350 pid=3428 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tee" exe="/usr/bin/coreutils" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:45:55.879000 audit: CWD cwd="/etc/service/enabled/bird/log" Mar 17 18:45:55.879000 audit: PATH item=0 name="/dev/fd/63" inode=25124 dev=00:0c mode=010600 ouid=0 ogid=0 rdev=00:00 obj=system_u:system_r:kernel_t:s0 nametype=NORMAL cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Mar 17 18:45:55.879000 audit: PROCTITLE proctitle=2F7573722F62696E2F636F72657574696C73002D2D636F72657574696C732D70726F672D73686562616E673D746565002F7573722F62696E2F746565002F6465762F66642F3633 Mar 17 18:45:56.119711 kubelet[2045]: E0317 18:45:56.119556 2045 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Mar 17 18:45:56.180000 audit[3470]: AVC avc: denied { bpf } for pid=3470 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:56.180000 audit[3470]: AVC avc: denied { bpf } for pid=3470 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:56.180000 audit[3470]: AVC avc: denied { perfmon } for pid=3470 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:56.180000 audit[3470]: AVC avc: denied { perfmon } for pid=3470 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:56.180000 audit[3470]: AVC avc: denied { perfmon } for pid=3470 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:56.180000 audit[3470]: AVC avc: denied { perfmon } for pid=3470 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:56.180000 audit[3470]: AVC avc: denied { perfmon } for pid=3470 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:56.180000 audit[3470]: AVC avc: denied { bpf } for pid=3470 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:56.180000 audit[3470]: AVC avc: denied { bpf } for pid=3470 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:56.180000 audit: BPF prog-id=142 op=LOAD Mar 17 18:45:56.180000 audit[3470]: SYSCALL arch=c000003e syscall=321 success=yes exit=3 a0=5 a1=7fff9a6290a0 a2=98 a3=3 items=0 ppid=3365 pid=3470 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:45:56.180000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Mar 17 18:45:56.180000 audit: BPF prog-id=142 op=UNLOAD Mar 17 18:45:56.180000 audit[3470]: AVC avc: denied { bpf } for pid=3470 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:56.180000 audit[3470]: AVC avc: denied { bpf } for pid=3470 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:56.180000 audit[3470]: AVC avc: denied { perfmon } for pid=3470 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:56.180000 audit[3470]: AVC avc: denied { perfmon } for pid=3470 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:56.180000 audit[3470]: AVC avc: denied { perfmon } for pid=3470 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:56.180000 audit[3470]: AVC avc: denied { perfmon } for pid=3470 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:56.180000 audit[3470]: AVC avc: denied { perfmon } for pid=3470 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:56.180000 audit[3470]: AVC avc: denied { bpf } for pid=3470 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:56.180000 audit[3470]: AVC avc: denied { bpf } for pid=3470 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:56.180000 audit: BPF prog-id=143 op=LOAD Mar 17 18:45:56.180000 audit[3470]: SYSCALL arch=c000003e syscall=321 success=yes exit=4 a0=5 a1=7fff9a628e80 a2=74 a3=540051 items=0 ppid=3365 pid=3470 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:45:56.180000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Mar 17 18:45:56.180000 audit: BPF prog-id=143 op=UNLOAD Mar 17 18:45:56.180000 audit[3470]: AVC avc: denied { bpf } for pid=3470 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:56.180000 audit[3470]: AVC avc: denied { bpf } for pid=3470 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:56.180000 audit[3470]: AVC avc: denied { perfmon } for pid=3470 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:56.180000 audit[3470]: AVC avc: denied { perfmon } for pid=3470 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:56.180000 audit[3470]: AVC avc: denied { perfmon } for pid=3470 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:56.180000 audit[3470]: AVC avc: denied { perfmon } for pid=3470 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:56.180000 audit[3470]: AVC avc: denied { perfmon } for pid=3470 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:56.180000 audit[3470]: AVC avc: denied { bpf } for pid=3470 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:56.180000 audit[3470]: AVC avc: denied { bpf } for pid=3470 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:56.180000 audit: BPF prog-id=144 op=LOAD Mar 17 18:45:56.180000 audit[3470]: SYSCALL arch=c000003e syscall=321 success=yes exit=4 a0=5 a1=7fff9a628eb0 a2=94 a3=2 items=0 ppid=3365 pid=3470 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:45:56.180000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Mar 17 18:45:56.180000 audit: BPF prog-id=144 op=UNLOAD Mar 17 18:45:56.197070 systemd[1]: run-containerd-runc-k8s.io-852db944f5c7bb503fb5d3ec16a018d8137f67c725b3def4671835a83296c06f-runc.PBLmLT.mount: Deactivated successfully. Mar 17 18:45:56.316000 audit[3470]: AVC avc: denied { bpf } for pid=3470 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:56.316000 audit[3470]: AVC avc: denied { bpf } for pid=3470 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:56.316000 audit[3470]: AVC avc: denied { perfmon } for pid=3470 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:56.316000 audit[3470]: AVC avc: denied { perfmon } for pid=3470 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:56.316000 audit[3470]: AVC avc: denied { perfmon } for pid=3470 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:56.316000 audit[3470]: AVC avc: denied { perfmon } for pid=3470 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:56.316000 audit[3470]: AVC avc: denied { perfmon } for pid=3470 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:56.316000 audit[3470]: AVC avc: denied { bpf } for pid=3470 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:56.316000 audit[3470]: AVC avc: denied { bpf } for pid=3470 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:56.316000 audit: BPF prog-id=145 op=LOAD Mar 17 18:45:56.316000 audit[3470]: SYSCALL arch=c000003e syscall=321 success=yes exit=4 a0=5 a1=7fff9a628d70 a2=40 a3=1 items=0 ppid=3365 pid=3470 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:45:56.316000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Mar 17 18:45:56.316000 audit: BPF prog-id=145 op=UNLOAD Mar 17 18:45:56.316000 audit[3470]: AVC avc: denied { perfmon } for pid=3470 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:56.316000 audit[3470]: SYSCALL arch=c000003e syscall=321 success=yes exit=4 a0=0 a1=7fff9a628e40 a2=50 a3=7fff9a628f20 items=0 ppid=3365 pid=3470 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:45:56.316000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Mar 17 18:45:56.323000 audit[3470]: AVC avc: denied { bpf } for pid=3470 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:56.323000 audit[3470]: SYSCALL arch=c000003e syscall=321 success=yes exit=4 a0=12 a1=7fff9a628d80 a2=28 a3=0 items=0 ppid=3365 pid=3470 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:45:56.323000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Mar 17 18:45:56.323000 audit[3470]: AVC avc: denied { bpf } for pid=3470 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:56.323000 audit[3470]: SYSCALL arch=c000003e syscall=321 success=no exit=-22 a0=12 a1=7fff9a628db0 a2=28 a3=0 items=0 ppid=3365 pid=3470 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:45:56.323000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Mar 17 18:45:56.323000 audit[3470]: AVC avc: denied { bpf } for pid=3470 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:56.323000 audit[3470]: SYSCALL arch=c000003e syscall=321 success=no exit=-22 a0=12 a1=7fff9a628cc0 a2=28 a3=0 items=0 ppid=3365 pid=3470 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:45:56.323000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Mar 17 18:45:56.323000 audit[3470]: AVC avc: denied { bpf } for pid=3470 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:56.323000 audit[3470]: SYSCALL arch=c000003e syscall=321 success=yes exit=4 a0=12 a1=7fff9a628dd0 a2=28 a3=0 items=0 ppid=3365 pid=3470 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:45:56.323000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Mar 17 18:45:56.323000 audit[3470]: AVC avc: denied { bpf } for pid=3470 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:56.323000 audit[3470]: SYSCALL arch=c000003e syscall=321 success=yes exit=4 a0=12 a1=7fff9a628db0 a2=28 a3=0 items=0 ppid=3365 pid=3470 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:45:56.323000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Mar 17 18:45:56.323000 audit[3470]: AVC avc: denied { bpf } for pid=3470 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:56.323000 audit[3470]: SYSCALL arch=c000003e syscall=321 success=yes exit=4 a0=12 a1=7fff9a628da0 a2=28 a3=0 items=0 ppid=3365 pid=3470 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:45:56.323000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Mar 17 18:45:56.323000 audit[3470]: AVC avc: denied { bpf } for pid=3470 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:56.323000 audit[3470]: SYSCALL arch=c000003e syscall=321 success=yes exit=4 a0=12 a1=7fff9a628dd0 a2=28 a3=0 items=0 ppid=3365 pid=3470 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:45:56.323000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Mar 17 18:45:56.323000 audit[3470]: AVC avc: denied { bpf } for pid=3470 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:56.323000 audit[3470]: SYSCALL arch=c000003e syscall=321 success=no exit=-22 a0=12 a1=7fff9a628db0 a2=28 a3=0 items=0 ppid=3365 pid=3470 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:45:56.323000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Mar 17 18:45:56.323000 audit[3470]: AVC avc: denied { bpf } for pid=3470 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:56.323000 audit[3470]: SYSCALL arch=c000003e syscall=321 success=no exit=-22 a0=12 a1=7fff9a628dd0 a2=28 a3=0 items=0 ppid=3365 pid=3470 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:45:56.323000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Mar 17 18:45:56.323000 audit[3470]: AVC avc: denied { bpf } for pid=3470 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:56.323000 audit[3470]: SYSCALL arch=c000003e syscall=321 success=no exit=-22 a0=12 a1=7fff9a628da0 a2=28 a3=0 items=0 ppid=3365 pid=3470 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:45:56.323000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Mar 17 18:45:56.323000 audit[3470]: AVC avc: denied { bpf } for pid=3470 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:56.323000 audit[3470]: SYSCALL arch=c000003e syscall=321 success=yes exit=4 a0=12 a1=7fff9a628e10 a2=28 a3=0 items=0 ppid=3365 pid=3470 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:45:56.323000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Mar 17 18:45:56.324000 audit[3470]: AVC avc: denied { perfmon } for pid=3470 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:56.324000 audit[3470]: SYSCALL arch=c000003e syscall=321 success=yes exit=5 a0=0 a1=7fff9a628bc0 a2=50 a3=1 items=0 ppid=3365 pid=3470 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:45:56.324000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Mar 17 18:45:56.324000 audit[3470]: AVC avc: denied { bpf } for pid=3470 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:56.324000 audit[3470]: AVC avc: denied { bpf } for pid=3470 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:56.324000 audit[3470]: AVC avc: denied { perfmon } for pid=3470 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:56.324000 audit[3470]: AVC avc: denied { perfmon } for pid=3470 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:56.324000 audit[3470]: AVC avc: denied { perfmon } for pid=3470 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:56.324000 audit[3470]: AVC avc: denied { perfmon } for pid=3470 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:56.324000 audit[3470]: AVC avc: denied { perfmon } for pid=3470 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:56.324000 audit[3470]: AVC avc: denied { bpf } for pid=3470 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:56.324000 audit[3470]: AVC avc: denied { bpf } for pid=3470 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:56.324000 audit: BPF prog-id=146 op=LOAD Mar 17 18:45:56.324000 audit[3470]: SYSCALL arch=c000003e syscall=321 success=yes exit=6 a0=5 a1=7fff9a628bc0 a2=94 a3=5 items=0 ppid=3365 pid=3470 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:45:56.324000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Mar 17 18:45:56.324000 audit: BPF prog-id=146 op=UNLOAD Mar 17 18:45:56.324000 audit[3470]: AVC avc: denied { perfmon } for pid=3470 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:56.324000 audit[3470]: SYSCALL arch=c000003e syscall=321 success=yes exit=5 a0=0 a1=7fff9a628c70 a2=50 a3=1 items=0 ppid=3365 pid=3470 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:45:56.324000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Mar 17 18:45:56.324000 audit[3470]: AVC avc: denied { bpf } for pid=3470 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:56.324000 audit[3470]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=16 a1=7fff9a628d90 a2=4 a3=38 items=0 ppid=3365 pid=3470 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:45:56.324000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Mar 17 18:45:56.324000 audit[3470]: AVC avc: denied { bpf } for pid=3470 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:56.324000 audit[3470]: AVC avc: denied { bpf } for pid=3470 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:56.324000 audit[3470]: AVC avc: denied { perfmon } for pid=3470 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:56.324000 audit[3470]: AVC avc: denied { bpf } for pid=3470 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:56.324000 audit[3470]: AVC avc: denied { perfmon } for pid=3470 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:56.324000 audit[3470]: AVC avc: denied { perfmon } for pid=3470 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:56.324000 audit[3470]: AVC avc: denied { perfmon } for pid=3470 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:56.324000 audit[3470]: AVC avc: denied { perfmon } for pid=3470 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:56.324000 audit[3470]: AVC avc: denied { perfmon } for pid=3470 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:56.324000 audit[3470]: AVC avc: denied { bpf } for pid=3470 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:56.324000 audit[3470]: AVC avc: denied { confidentiality } for pid=3470 comm="bpftool" lockdown_reason="use of bpf to read kernel RAM" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=lockdown permissive=0 Mar 17 18:45:56.324000 audit[3470]: SYSCALL arch=c000003e syscall=321 success=no exit=-22 a0=5 a1=7fff9a628de0 a2=94 a3=6 items=0 ppid=3365 pid=3470 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:45:56.324000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Mar 17 18:45:56.324000 audit[3470]: AVC avc: denied { bpf } for pid=3470 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:56.324000 audit[3470]: AVC avc: denied { bpf } for pid=3470 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:56.324000 audit[3470]: AVC avc: denied { perfmon } for pid=3470 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:56.324000 audit[3470]: AVC avc: denied { bpf } for pid=3470 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:56.324000 audit[3470]: AVC avc: denied { perfmon } for pid=3470 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:56.324000 audit[3470]: AVC avc: denied { perfmon } for pid=3470 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:56.324000 audit[3470]: AVC avc: denied { perfmon } for pid=3470 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:56.324000 audit[3470]: AVC avc: denied { perfmon } for pid=3470 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:56.324000 audit[3470]: AVC avc: denied { perfmon } for pid=3470 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:56.324000 audit[3470]: AVC avc: denied { bpf } for pid=3470 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:56.324000 audit[3470]: AVC avc: denied { confidentiality } for pid=3470 comm="bpftool" lockdown_reason="use of bpf to read kernel RAM" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=lockdown permissive=0 Mar 17 18:45:56.324000 audit[3470]: SYSCALL arch=c000003e syscall=321 success=no exit=-22 a0=5 a1=7fff9a628590 a2=94 a3=83 items=0 ppid=3365 pid=3470 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:45:56.324000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Mar 17 18:45:56.324000 audit[3470]: AVC avc: denied { bpf } for pid=3470 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:56.324000 audit[3470]: AVC avc: denied { bpf } for pid=3470 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:56.324000 audit[3470]: AVC avc: denied { perfmon } for pid=3470 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:56.324000 audit[3470]: AVC avc: denied { bpf } for pid=3470 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:56.324000 audit[3470]: AVC avc: denied { perfmon } for pid=3470 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:56.324000 audit[3470]: AVC avc: denied { perfmon } for pid=3470 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:56.324000 audit[3470]: AVC avc: denied { perfmon } for pid=3470 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:56.324000 audit[3470]: AVC avc: denied { perfmon } for pid=3470 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:56.324000 audit[3470]: AVC avc: denied { perfmon } for pid=3470 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:56.324000 audit[3470]: AVC avc: denied { bpf } for pid=3470 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:56.324000 audit[3470]: AVC avc: denied { confidentiality } for pid=3470 comm="bpftool" lockdown_reason="use of bpf to read kernel RAM" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=lockdown permissive=0 Mar 17 18:45:56.324000 audit[3470]: SYSCALL arch=c000003e syscall=321 success=no exit=-22 a0=5 a1=7fff9a628590 a2=94 a3=83 items=0 ppid=3365 pid=3470 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:45:56.324000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Mar 17 18:45:56.331000 audit[3489]: AVC avc: denied { bpf } for pid=3489 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:56.331000 audit[3489]: AVC avc: denied { bpf } for pid=3489 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:56.331000 audit[3489]: AVC avc: denied { perfmon } for pid=3489 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:56.331000 audit[3489]: AVC avc: denied { perfmon } for pid=3489 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:56.331000 audit[3489]: AVC avc: denied { perfmon } for pid=3489 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:56.331000 audit[3489]: AVC avc: denied { perfmon } for pid=3489 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:56.331000 audit[3489]: AVC avc: denied { perfmon } for pid=3489 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:56.331000 audit[3489]: AVC avc: denied { bpf } for pid=3489 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:56.331000 audit[3489]: AVC avc: denied { bpf } for pid=3489 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:56.331000 audit: BPF prog-id=147 op=LOAD Mar 17 18:45:56.331000 audit[3489]: SYSCALL arch=c000003e syscall=321 success=yes exit=3 a0=5 a1=7fffd6bf4020 a2=98 a3=1999999999999999 items=0 ppid=3365 pid=3489 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:45:56.331000 audit: PROCTITLE proctitle=627066746F6F6C006D617000637265617465002F7379732F66732F6270662F63616C69636F2F63616C69636F5F6661696C736166655F706F7274735F763100747970650068617368006B657900340076616C7565003100656E7472696573003635353335006E616D650063616C69636F5F6661696C736166655F706F7274735F Mar 17 18:45:56.331000 audit: BPF prog-id=147 op=UNLOAD Mar 17 18:45:56.331000 audit[3489]: AVC avc: denied { bpf } for pid=3489 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:56.331000 audit[3489]: AVC avc: denied { bpf } for pid=3489 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:56.331000 audit[3489]: AVC avc: denied { perfmon } for pid=3489 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:56.331000 audit[3489]: AVC avc: denied { perfmon } for pid=3489 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:56.331000 audit[3489]: AVC avc: denied { perfmon } for pid=3489 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:56.331000 audit[3489]: AVC avc: denied { perfmon } for pid=3489 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:56.331000 audit[3489]: AVC avc: denied { perfmon } for pid=3489 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:56.331000 audit[3489]: AVC avc: denied { bpf } for pid=3489 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:56.331000 audit[3489]: AVC avc: denied { bpf } for pid=3489 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:56.331000 audit: BPF prog-id=148 op=LOAD Mar 17 18:45:56.331000 audit[3489]: SYSCALL arch=c000003e syscall=321 success=yes exit=3 a0=5 a1=7fffd6bf3f00 a2=74 a3=ffff items=0 ppid=3365 pid=3489 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:45:56.331000 audit: PROCTITLE proctitle=627066746F6F6C006D617000637265617465002F7379732F66732F6270662F63616C69636F2F63616C69636F5F6661696C736166655F706F7274735F763100747970650068617368006B657900340076616C7565003100656E7472696573003635353335006E616D650063616C69636F5F6661696C736166655F706F7274735F Mar 17 18:45:56.331000 audit: BPF prog-id=148 op=UNLOAD Mar 17 18:45:56.331000 audit[3489]: AVC avc: denied { bpf } for pid=3489 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:56.331000 audit[3489]: AVC avc: denied { bpf } for pid=3489 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:56.331000 audit[3489]: AVC avc: denied { perfmon } for pid=3489 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:56.331000 audit[3489]: AVC avc: denied { perfmon } for pid=3489 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:56.331000 audit[3489]: AVC avc: denied { perfmon } for pid=3489 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:56.331000 audit[3489]: AVC avc: denied { perfmon } for pid=3489 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:56.331000 audit[3489]: AVC avc: denied { perfmon } for pid=3489 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:56.331000 audit[3489]: AVC avc: denied { bpf } for pid=3489 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:56.331000 audit[3489]: AVC avc: denied { bpf } for pid=3489 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:56.331000 audit: BPF prog-id=149 op=LOAD Mar 17 18:45:56.331000 audit[3489]: SYSCALL arch=c000003e syscall=321 success=yes exit=3 a0=5 a1=7fffd6bf3f40 a2=40 a3=7fffd6bf4120 items=0 ppid=3365 pid=3489 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:45:56.331000 audit: PROCTITLE proctitle=627066746F6F6C006D617000637265617465002F7379732F66732F6270662F63616C69636F2F63616C69636F5F6661696C736166655F706F7274735F763100747970650068617368006B657900340076616C7565003100656E7472696573003635353335006E616D650063616C69636F5F6661696C736166655F706F7274735F Mar 17 18:45:56.331000 audit: BPF prog-id=149 op=UNLOAD Mar 17 18:45:56.375712 systemd-networkd[1025]: vxlan.calico: Link UP Mar 17 18:45:56.375722 systemd-networkd[1025]: vxlan.calico: Gained carrier Mar 17 18:45:56.400000 audit[3516]: AVC avc: denied { bpf } for pid=3516 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:56.400000 audit[3516]: AVC avc: denied { bpf } for pid=3516 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:56.400000 audit[3516]: AVC avc: denied { perfmon } for pid=3516 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:56.400000 audit[3516]: AVC avc: denied { perfmon } for pid=3516 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:56.400000 audit[3516]: AVC avc: denied { perfmon } for pid=3516 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:56.400000 audit[3516]: AVC avc: denied { perfmon } for pid=3516 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:56.400000 audit[3516]: AVC avc: denied { perfmon } for pid=3516 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:56.400000 audit[3516]: AVC avc: denied { bpf } for pid=3516 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:56.400000 audit[3516]: AVC avc: denied { bpf } for pid=3516 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:56.400000 audit: BPF prog-id=150 op=LOAD Mar 17 18:45:56.400000 audit[3516]: SYSCALL arch=c000003e syscall=321 success=yes exit=3 a0=5 a1=7ffcae8d5610 a2=98 a3=ffffffff items=0 ppid=3365 pid=3516 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:45:56.400000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Mar 17 18:45:56.400000 audit: BPF prog-id=150 op=UNLOAD Mar 17 18:45:56.400000 audit[3516]: AVC avc: denied { bpf } for pid=3516 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:56.400000 audit[3516]: AVC avc: denied { bpf } for pid=3516 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:56.400000 audit[3516]: AVC avc: denied { perfmon } for pid=3516 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:56.400000 audit[3516]: AVC avc: denied { perfmon } for pid=3516 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:56.400000 audit[3516]: AVC avc: denied { perfmon } for pid=3516 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:56.400000 audit[3516]: AVC avc: denied { perfmon } for pid=3516 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:56.400000 audit[3516]: AVC avc: denied { perfmon } for pid=3516 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:56.400000 audit[3516]: AVC avc: denied { bpf } for pid=3516 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:56.400000 audit[3516]: AVC avc: denied { bpf } for pid=3516 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:56.400000 audit: BPF prog-id=151 op=LOAD Mar 17 18:45:56.400000 audit[3516]: SYSCALL arch=c000003e syscall=321 success=yes exit=3 a0=5 a1=7ffcae8d5420 a2=74 a3=540051 items=0 ppid=3365 pid=3516 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:45:56.400000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Mar 17 18:45:56.400000 audit: BPF prog-id=151 op=UNLOAD Mar 17 18:45:56.400000 audit[3516]: AVC avc: denied { bpf } for pid=3516 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:56.400000 audit[3516]: AVC avc: denied { bpf } for pid=3516 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:56.400000 audit[3516]: AVC avc: denied { perfmon } for pid=3516 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:56.400000 audit[3516]: AVC avc: denied { perfmon } for pid=3516 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:56.400000 audit[3516]: AVC avc: denied { perfmon } for pid=3516 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:56.400000 audit[3516]: AVC avc: denied { perfmon } for pid=3516 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:56.400000 audit[3516]: AVC avc: denied { perfmon } for pid=3516 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:56.400000 audit[3516]: AVC avc: denied { bpf } for pid=3516 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:56.400000 audit[3516]: AVC avc: denied { bpf } for pid=3516 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:56.400000 audit: BPF prog-id=152 op=LOAD Mar 17 18:45:56.400000 audit[3516]: SYSCALL arch=c000003e syscall=321 success=yes exit=3 a0=5 a1=7ffcae8d5450 a2=94 a3=2 items=0 ppid=3365 pid=3516 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:45:56.400000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Mar 17 18:45:56.400000 audit: BPF prog-id=152 op=UNLOAD Mar 17 18:45:56.400000 audit[3516]: AVC avc: denied { bpf } for pid=3516 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:56.400000 audit[3516]: SYSCALL arch=c000003e syscall=321 success=yes exit=3 a0=12 a1=7ffcae8d5320 a2=28 a3=0 items=0 ppid=3365 pid=3516 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:45:56.400000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Mar 17 18:45:56.400000 audit[3516]: AVC avc: denied { bpf } for pid=3516 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:56.400000 audit[3516]: SYSCALL arch=c000003e syscall=321 success=no exit=-22 a0=12 a1=7ffcae8d5350 a2=28 a3=0 items=0 ppid=3365 pid=3516 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:45:56.400000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Mar 17 18:45:56.400000 audit[3516]: AVC avc: denied { bpf } for pid=3516 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:56.400000 audit[3516]: SYSCALL arch=c000003e syscall=321 success=no exit=-22 a0=12 a1=7ffcae8d5260 a2=28 a3=0 items=0 ppid=3365 pid=3516 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:45:56.400000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Mar 17 18:45:56.400000 audit[3516]: AVC avc: denied { bpf } for pid=3516 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:56.400000 audit[3516]: SYSCALL arch=c000003e syscall=321 success=yes exit=3 a0=12 a1=7ffcae8d5370 a2=28 a3=0 items=0 ppid=3365 pid=3516 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:45:56.400000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Mar 17 18:45:56.400000 audit[3516]: AVC avc: denied { bpf } for pid=3516 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:56.400000 audit[3516]: SYSCALL arch=c000003e syscall=321 success=yes exit=3 a0=12 a1=7ffcae8d5350 a2=28 a3=0 items=0 ppid=3365 pid=3516 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:45:56.400000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Mar 17 18:45:56.400000 audit[3516]: AVC avc: denied { bpf } for pid=3516 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:56.400000 audit[3516]: SYSCALL arch=c000003e syscall=321 success=yes exit=3 a0=12 a1=7ffcae8d5340 a2=28 a3=0 items=0 ppid=3365 pid=3516 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:45:56.400000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Mar 17 18:45:56.401000 audit[3516]: AVC avc: denied { bpf } for pid=3516 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:56.401000 audit[3516]: SYSCALL arch=c000003e syscall=321 success=yes exit=3 a0=12 a1=7ffcae8d5370 a2=28 a3=0 items=0 ppid=3365 pid=3516 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:45:56.401000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Mar 17 18:45:56.401000 audit[3516]: AVC avc: denied { bpf } for pid=3516 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:56.401000 audit[3516]: SYSCALL arch=c000003e syscall=321 success=no exit=-22 a0=12 a1=7ffcae8d5350 a2=28 a3=0 items=0 ppid=3365 pid=3516 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:45:56.401000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Mar 17 18:45:56.401000 audit[3516]: AVC avc: denied { bpf } for pid=3516 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:56.401000 audit[3516]: SYSCALL arch=c000003e syscall=321 success=no exit=-22 a0=12 a1=7ffcae8d5370 a2=28 a3=0 items=0 ppid=3365 pid=3516 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:45:56.401000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Mar 17 18:45:56.401000 audit[3516]: AVC avc: denied { bpf } for pid=3516 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:56.401000 audit[3516]: SYSCALL arch=c000003e syscall=321 success=no exit=-22 a0=12 a1=7ffcae8d5340 a2=28 a3=0 items=0 ppid=3365 pid=3516 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:45:56.401000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Mar 17 18:45:56.401000 audit[3516]: AVC avc: denied { bpf } for pid=3516 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:56.401000 audit[3516]: SYSCALL arch=c000003e syscall=321 success=yes exit=3 a0=12 a1=7ffcae8d53b0 a2=28 a3=0 items=0 ppid=3365 pid=3516 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:45:56.401000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Mar 17 18:45:56.401000 audit[3516]: AVC avc: denied { bpf } for pid=3516 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:56.401000 audit[3516]: AVC avc: denied { bpf } for pid=3516 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:56.401000 audit[3516]: AVC avc: denied { perfmon } for pid=3516 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:56.401000 audit[3516]: AVC avc: denied { perfmon } for pid=3516 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:56.401000 audit[3516]: AVC avc: denied { perfmon } for pid=3516 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:56.401000 audit[3516]: AVC avc: denied { perfmon } for pid=3516 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:56.401000 audit[3516]: AVC avc: denied { perfmon } for pid=3516 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:56.401000 audit[3516]: AVC avc: denied { bpf } for pid=3516 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:56.401000 audit[3516]: AVC avc: denied { bpf } for pid=3516 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:56.401000 audit: BPF prog-id=153 op=LOAD Mar 17 18:45:56.401000 audit[3516]: SYSCALL arch=c000003e syscall=321 success=yes exit=6 a0=5 a1=7ffcae8d5220 a2=40 a3=0 items=0 ppid=3365 pid=3516 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:45:56.401000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Mar 17 18:45:56.401000 audit: BPF prog-id=153 op=UNLOAD Mar 17 18:45:56.401000 audit[3516]: AVC avc: denied { bpf } for pid=3516 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:56.401000 audit[3516]: SYSCALL arch=c000003e syscall=321 success=no exit=-22 a0=0 a1=7ffcae8d5210 a2=50 a3=2800 items=0 ppid=3365 pid=3516 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:45:56.401000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Mar 17 18:45:56.401000 audit[3516]: AVC avc: denied { bpf } for pid=3516 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:56.401000 audit[3516]: SYSCALL arch=c000003e syscall=321 success=yes exit=6 a0=0 a1=7ffcae8d5210 a2=50 a3=2800 items=0 ppid=3365 pid=3516 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:45:56.401000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Mar 17 18:45:56.402000 audit[3516]: AVC avc: denied { bpf } for pid=3516 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:56.402000 audit[3516]: AVC avc: denied { bpf } for pid=3516 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:56.402000 audit[3516]: AVC avc: denied { bpf } for pid=3516 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:56.402000 audit[3516]: AVC avc: denied { perfmon } for pid=3516 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:56.402000 audit[3516]: AVC avc: denied { perfmon } for pid=3516 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:56.402000 audit[3516]: AVC avc: denied { perfmon } for pid=3516 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:56.402000 audit[3516]: AVC avc: denied { perfmon } for pid=3516 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:56.402000 audit[3516]: AVC avc: denied { perfmon } for pid=3516 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:56.402000 audit[3516]: AVC avc: denied { bpf } for pid=3516 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:56.402000 audit[3516]: AVC avc: denied { bpf } for pid=3516 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:56.402000 audit: BPF prog-id=154 op=LOAD Mar 17 18:45:56.402000 audit[3516]: SYSCALL arch=c000003e syscall=321 success=yes exit=6 a0=5 a1=7ffcae8d4a30 a2=94 a3=2 items=0 ppid=3365 pid=3516 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:45:56.402000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Mar 17 18:45:56.402000 audit: BPF prog-id=154 op=UNLOAD Mar 17 18:45:56.402000 audit[3516]: AVC avc: denied { bpf } for pid=3516 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:56.402000 audit[3516]: AVC avc: denied { bpf } for pid=3516 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:56.402000 audit[3516]: AVC avc: denied { bpf } for pid=3516 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:56.402000 audit[3516]: AVC avc: denied { perfmon } for pid=3516 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:56.402000 audit[3516]: AVC avc: denied { perfmon } for pid=3516 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:56.402000 audit[3516]: AVC avc: denied { perfmon } for pid=3516 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:56.402000 audit[3516]: AVC avc: denied { perfmon } for pid=3516 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:56.402000 audit[3516]: AVC avc: denied { perfmon } for pid=3516 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:56.402000 audit[3516]: AVC avc: denied { bpf } for pid=3516 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:56.402000 audit[3516]: AVC avc: denied { bpf } for pid=3516 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:56.402000 audit: BPF prog-id=155 op=LOAD Mar 17 18:45:56.402000 audit[3516]: SYSCALL arch=c000003e syscall=321 success=yes exit=6 a0=5 a1=7ffcae8d4b30 a2=94 a3=2d items=0 ppid=3365 pid=3516 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:45:56.402000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Mar 17 18:45:56.405000 audit[3520]: AVC avc: denied { bpf } for pid=3520 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:56.405000 audit[3520]: AVC avc: denied { bpf } for pid=3520 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:56.405000 audit[3520]: AVC avc: denied { perfmon } for pid=3520 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:56.405000 audit[3520]: AVC avc: denied { perfmon } for pid=3520 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:56.405000 audit[3520]: AVC avc: denied { perfmon } for pid=3520 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:56.405000 audit[3520]: AVC avc: denied { perfmon } for pid=3520 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:56.405000 audit[3520]: AVC avc: denied { perfmon } for pid=3520 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:56.405000 audit[3520]: AVC avc: denied { bpf } for pid=3520 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:56.405000 audit[3520]: AVC avc: denied { bpf } for pid=3520 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:56.405000 audit: BPF prog-id=156 op=LOAD Mar 17 18:45:56.405000 audit[3520]: SYSCALL arch=c000003e syscall=321 success=yes exit=3 a0=5 a1=7fff29ddeaf0 a2=98 a3=0 items=0 ppid=3365 pid=3520 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:45:56.405000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Mar 17 18:45:56.405000 audit: BPF prog-id=156 op=UNLOAD Mar 17 18:45:56.405000 audit[3520]: AVC avc: denied { bpf } for pid=3520 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:56.405000 audit[3520]: AVC avc: denied { bpf } for pid=3520 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:56.405000 audit[3520]: AVC avc: denied { perfmon } for pid=3520 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:56.405000 audit[3520]: AVC avc: denied { perfmon } for pid=3520 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:56.405000 audit[3520]: AVC avc: denied { perfmon } for pid=3520 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:56.405000 audit[3520]: AVC avc: denied { perfmon } for pid=3520 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:56.405000 audit[3520]: AVC avc: denied { perfmon } for pid=3520 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:56.405000 audit[3520]: AVC avc: denied { bpf } for pid=3520 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:56.405000 audit[3520]: AVC avc: denied { bpf } for pid=3520 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:56.405000 audit: BPF prog-id=157 op=LOAD Mar 17 18:45:56.405000 audit[3520]: SYSCALL arch=c000003e syscall=321 success=yes exit=4 a0=5 a1=7fff29dde8d0 a2=74 a3=540051 items=0 ppid=3365 pid=3520 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:45:56.405000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Mar 17 18:45:56.405000 audit: BPF prog-id=157 op=UNLOAD Mar 17 18:45:56.405000 audit[3520]: AVC avc: denied { bpf } for pid=3520 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:56.405000 audit[3520]: AVC avc: denied { bpf } for pid=3520 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:56.405000 audit[3520]: AVC avc: denied { perfmon } for pid=3520 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:56.405000 audit[3520]: AVC avc: denied { perfmon } for pid=3520 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:56.405000 audit[3520]: AVC avc: denied { perfmon } for pid=3520 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:56.405000 audit[3520]: AVC avc: denied { perfmon } for pid=3520 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:56.405000 audit[3520]: AVC avc: denied { perfmon } for pid=3520 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:56.405000 audit[3520]: AVC avc: denied { bpf } for pid=3520 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:56.405000 audit[3520]: AVC avc: denied { bpf } for pid=3520 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:56.405000 audit: BPF prog-id=158 op=LOAD Mar 17 18:45:56.405000 audit[3520]: SYSCALL arch=c000003e syscall=321 success=yes exit=4 a0=5 a1=7fff29dde900 a2=94 a3=2 items=0 ppid=3365 pid=3520 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:45:56.405000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Mar 17 18:45:56.405000 audit: BPF prog-id=158 op=UNLOAD Mar 17 18:45:56.536000 audit[3520]: AVC avc: denied { bpf } for pid=3520 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:56.536000 audit[3520]: AVC avc: denied { bpf } for pid=3520 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:56.536000 audit[3520]: AVC avc: denied { perfmon } for pid=3520 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:56.536000 audit[3520]: AVC avc: denied { perfmon } for pid=3520 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:56.536000 audit[3520]: AVC avc: denied { perfmon } for pid=3520 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:56.536000 audit[3520]: AVC avc: denied { perfmon } for pid=3520 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:56.536000 audit[3520]: AVC avc: denied { perfmon } for pid=3520 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:56.536000 audit[3520]: AVC avc: denied { bpf } for pid=3520 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:56.536000 audit[3520]: AVC avc: denied { bpf } for pid=3520 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:56.536000 audit: BPF prog-id=159 op=LOAD Mar 17 18:45:56.536000 audit[3520]: SYSCALL arch=c000003e syscall=321 success=yes exit=4 a0=5 a1=7fff29dde7c0 a2=40 a3=1 items=0 ppid=3365 pid=3520 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:45:56.536000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Mar 17 18:45:56.537000 audit: BPF prog-id=159 op=UNLOAD Mar 17 18:45:56.537000 audit[3520]: AVC avc: denied { perfmon } for pid=3520 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:56.537000 audit[3520]: SYSCALL arch=c000003e syscall=321 success=yes exit=4 a0=0 a1=7fff29dde890 a2=50 a3=7fff29dde970 items=0 ppid=3365 pid=3520 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:45:56.537000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Mar 17 18:45:56.544000 audit[3520]: AVC avc: denied { bpf } for pid=3520 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:56.544000 audit[3520]: SYSCALL arch=c000003e syscall=321 success=yes exit=4 a0=12 a1=7fff29dde7d0 a2=28 a3=0 items=0 ppid=3365 pid=3520 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:45:56.544000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Mar 17 18:45:56.544000 audit[3520]: AVC avc: denied { bpf } for pid=3520 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:56.544000 audit[3520]: SYSCALL arch=c000003e syscall=321 success=no exit=-22 a0=12 a1=7fff29dde800 a2=28 a3=0 items=0 ppid=3365 pid=3520 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:45:56.544000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Mar 17 18:45:56.544000 audit[3520]: AVC avc: denied { bpf } for pid=3520 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:56.544000 audit[3520]: SYSCALL arch=c000003e syscall=321 success=no exit=-22 a0=12 a1=7fff29dde710 a2=28 a3=0 items=0 ppid=3365 pid=3520 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:45:56.544000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Mar 17 18:45:56.544000 audit[3520]: AVC avc: denied { bpf } for pid=3520 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:56.544000 audit[3520]: SYSCALL arch=c000003e syscall=321 success=yes exit=4 a0=12 a1=7fff29dde820 a2=28 a3=0 items=0 ppid=3365 pid=3520 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:45:56.544000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Mar 17 18:45:56.544000 audit[3520]: AVC avc: denied { bpf } for pid=3520 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:56.544000 audit[3520]: SYSCALL arch=c000003e syscall=321 success=yes exit=4 a0=12 a1=7fff29dde800 a2=28 a3=0 items=0 ppid=3365 pid=3520 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:45:56.544000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Mar 17 18:45:56.544000 audit[3520]: AVC avc: denied { bpf } for pid=3520 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:56.544000 audit[3520]: SYSCALL arch=c000003e syscall=321 success=yes exit=4 a0=12 a1=7fff29dde7f0 a2=28 a3=0 items=0 ppid=3365 pid=3520 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:45:56.544000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Mar 17 18:45:56.544000 audit[3520]: AVC avc: denied { bpf } for pid=3520 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:56.544000 audit[3520]: SYSCALL arch=c000003e syscall=321 success=yes exit=4 a0=12 a1=7fff29dde820 a2=28 a3=0 items=0 ppid=3365 pid=3520 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:45:56.544000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Mar 17 18:45:56.544000 audit[3520]: AVC avc: denied { bpf } for pid=3520 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:56.544000 audit[3520]: SYSCALL arch=c000003e syscall=321 success=no exit=-22 a0=12 a1=7fff29dde800 a2=28 a3=0 items=0 ppid=3365 pid=3520 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:45:56.544000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Mar 17 18:45:56.544000 audit[3520]: AVC avc: denied { bpf } for pid=3520 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:56.544000 audit[3520]: SYSCALL arch=c000003e syscall=321 success=no exit=-22 a0=12 a1=7fff29dde820 a2=28 a3=0 items=0 ppid=3365 pid=3520 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:45:56.544000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Mar 17 18:45:56.545000 audit[3520]: AVC avc: denied { bpf } for pid=3520 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:56.545000 audit[3520]: SYSCALL arch=c000003e syscall=321 success=no exit=-22 a0=12 a1=7fff29dde7f0 a2=28 a3=0 items=0 ppid=3365 pid=3520 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:45:56.545000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Mar 17 18:45:56.545000 audit[3520]: AVC avc: denied { bpf } for pid=3520 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:56.545000 audit[3520]: SYSCALL arch=c000003e syscall=321 success=yes exit=4 a0=12 a1=7fff29dde860 a2=28 a3=0 items=0 ppid=3365 pid=3520 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:45:56.545000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Mar 17 18:45:56.545000 audit[3520]: AVC avc: denied { perfmon } for pid=3520 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:56.545000 audit[3520]: SYSCALL arch=c000003e syscall=321 success=yes exit=5 a0=0 a1=7fff29dde610 a2=50 a3=1 items=0 ppid=3365 pid=3520 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:45:56.545000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Mar 17 18:45:56.545000 audit[3520]: AVC avc: denied { bpf } for pid=3520 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:56.545000 audit[3520]: AVC avc: denied { bpf } for pid=3520 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:56.545000 audit[3520]: AVC avc: denied { perfmon } for pid=3520 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:56.545000 audit[3520]: AVC avc: denied { perfmon } for pid=3520 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:56.545000 audit[3520]: AVC avc: denied { perfmon } for pid=3520 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:56.545000 audit[3520]: AVC avc: denied { perfmon } for pid=3520 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:56.545000 audit[3520]: AVC avc: denied { perfmon } for pid=3520 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:56.545000 audit[3520]: AVC avc: denied { bpf } for pid=3520 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:56.545000 audit[3520]: AVC avc: denied { bpf } for pid=3520 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:56.545000 audit: BPF prog-id=160 op=LOAD Mar 17 18:45:56.545000 audit[3520]: SYSCALL arch=c000003e syscall=321 success=yes exit=6 a0=5 a1=7fff29dde610 a2=94 a3=5 items=0 ppid=3365 pid=3520 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:45:56.545000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Mar 17 18:45:56.545000 audit: BPF prog-id=160 op=UNLOAD Mar 17 18:45:56.545000 audit[3520]: AVC avc: denied { perfmon } for pid=3520 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:56.545000 audit[3520]: SYSCALL arch=c000003e syscall=321 success=yes exit=5 a0=0 a1=7fff29dde6c0 a2=50 a3=1 items=0 ppid=3365 pid=3520 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:45:56.545000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Mar 17 18:45:56.545000 audit[3520]: AVC avc: denied { bpf } for pid=3520 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:56.545000 audit[3520]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=16 a1=7fff29dde7e0 a2=4 a3=38 items=0 ppid=3365 pid=3520 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:45:56.545000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Mar 17 18:45:56.545000 audit[3520]: AVC avc: denied { bpf } for pid=3520 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:56.545000 audit[3520]: AVC avc: denied { bpf } for pid=3520 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:56.545000 audit[3520]: AVC avc: denied { perfmon } for pid=3520 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:56.545000 audit[3520]: AVC avc: denied { bpf } for pid=3520 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:56.545000 audit[3520]: AVC avc: denied { perfmon } for pid=3520 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:56.545000 audit[3520]: AVC avc: denied { perfmon } for pid=3520 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:56.545000 audit[3520]: AVC avc: denied { perfmon } for pid=3520 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:56.545000 audit[3520]: AVC avc: denied { perfmon } for pid=3520 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:56.545000 audit[3520]: AVC avc: denied { perfmon } for pid=3520 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:56.545000 audit[3520]: AVC avc: denied { bpf } for pid=3520 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:56.545000 audit[3520]: AVC avc: denied { confidentiality } for pid=3520 comm="bpftool" lockdown_reason="use of bpf to read kernel RAM" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=lockdown permissive=0 Mar 17 18:45:56.545000 audit[3520]: SYSCALL arch=c000003e syscall=321 success=no exit=-22 a0=5 a1=7fff29dde830 a2=94 a3=6 items=0 ppid=3365 pid=3520 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:45:56.545000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Mar 17 18:45:56.545000 audit[3520]: AVC avc: denied { bpf } for pid=3520 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:56.545000 audit[3520]: AVC avc: denied { bpf } for pid=3520 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:56.545000 audit[3520]: AVC avc: denied { perfmon } for pid=3520 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:56.545000 audit[3520]: AVC avc: denied { bpf } for pid=3520 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:56.545000 audit[3520]: AVC avc: denied { perfmon } for pid=3520 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:56.545000 audit[3520]: AVC avc: denied { perfmon } for pid=3520 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:56.545000 audit[3520]: AVC avc: denied { perfmon } for pid=3520 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:56.545000 audit[3520]: AVC avc: denied { perfmon } for pid=3520 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:56.545000 audit[3520]: AVC avc: denied { perfmon } for pid=3520 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:56.545000 audit[3520]: AVC avc: denied { bpf } for pid=3520 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:56.545000 audit[3520]: AVC avc: denied { confidentiality } for pid=3520 comm="bpftool" lockdown_reason="use of bpf to read kernel RAM" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=lockdown permissive=0 Mar 17 18:45:56.545000 audit[3520]: SYSCALL arch=c000003e syscall=321 success=no exit=-22 a0=5 a1=7fff29dddfe0 a2=94 a3=83 items=0 ppid=3365 pid=3520 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:45:56.545000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Mar 17 18:45:56.545000 audit[3520]: AVC avc: denied { bpf } for pid=3520 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:56.545000 audit[3520]: AVC avc: denied { bpf } for pid=3520 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:56.545000 audit[3520]: AVC avc: denied { perfmon } for pid=3520 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:56.545000 audit[3520]: AVC avc: denied { bpf } for pid=3520 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:56.545000 audit[3520]: AVC avc: denied { perfmon } for pid=3520 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:56.545000 audit[3520]: AVC avc: denied { perfmon } for pid=3520 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:56.545000 audit[3520]: AVC avc: denied { perfmon } for pid=3520 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:56.545000 audit[3520]: AVC avc: denied { perfmon } for pid=3520 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:56.545000 audit[3520]: AVC avc: denied { perfmon } for pid=3520 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:56.545000 audit[3520]: AVC avc: denied { bpf } for pid=3520 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:56.545000 audit[3520]: AVC avc: denied { confidentiality } for pid=3520 comm="bpftool" lockdown_reason="use of bpf to read kernel RAM" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=lockdown permissive=0 Mar 17 18:45:56.545000 audit[3520]: SYSCALL arch=c000003e syscall=321 success=no exit=-22 a0=5 a1=7fff29dddfe0 a2=94 a3=83 items=0 ppid=3365 pid=3520 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:45:56.545000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Mar 17 18:45:56.546000 audit[3520]: AVC avc: denied { bpf } for pid=3520 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:56.546000 audit[3520]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=7fff29ddfa20 a2=10 a3=208 items=0 ppid=3365 pid=3520 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:45:56.546000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Mar 17 18:45:56.546000 audit[3520]: AVC avc: denied { bpf } for pid=3520 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:56.546000 audit[3520]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=7fff29ddf8c0 a2=10 a3=3 items=0 ppid=3365 pid=3520 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:45:56.546000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Mar 17 18:45:56.546000 audit[3520]: AVC avc: denied { bpf } for pid=3520 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:56.546000 audit[3520]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=7fff29ddf860 a2=10 a3=3 items=0 ppid=3365 pid=3520 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:45:56.546000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Mar 17 18:45:56.546000 audit[3520]: AVC avc: denied { bpf } for pid=3520 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:56.546000 audit[3520]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=7fff29ddf860 a2=10 a3=7 items=0 ppid=3365 pid=3520 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:45:56.546000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Mar 17 18:45:56.553000 audit: BPF prog-id=155 op=UNLOAD Mar 17 18:45:56.596336 env[1203]: time="2025-03-17T18:45:56.596231466Z" level=info msg="StopPodSandbox for \"12ea64e1ecca836003d8982cef0c985a3af86570749a59d72b02c70cfe7f14f8\"" Mar 17 18:45:56.596336 env[1203]: time="2025-03-17T18:45:56.596236927Z" level=info msg="StopPodSandbox for \"a251bdfeb83e381893a6957f1a65c91859b0e72c5f92adb95520539a022b1e90\"" Mar 17 18:45:56.635000 audit[3594]: NETFILTER_CFG table=mangle:97 family=2 entries=16 op=nft_register_chain pid=3594 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Mar 17 18:45:56.635000 audit[3594]: SYSCALL arch=c000003e syscall=46 success=yes exit=6868 a0=3 a1=7fffa6270c60 a2=0 a3=7fffa6270c4c items=0 ppid=3365 pid=3594 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:45:56.635000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Mar 17 18:45:56.660000 audit[3593]: NETFILTER_CFG table=nat:98 family=2 entries=15 op=nft_register_chain pid=3593 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Mar 17 18:45:56.660000 audit[3593]: SYSCALL arch=c000003e syscall=46 success=yes exit=5084 a0=3 a1=7ffdc92a9da0 a2=0 a3=7ffdc92a9d8c items=0 ppid=3365 pid=3593 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:45:56.660000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Mar 17 18:45:56.663000 audit[3598]: NETFILTER_CFG table=filter:99 family=2 entries=39 op=nft_register_chain pid=3598 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Mar 17 18:45:56.663000 audit[3598]: SYSCALL arch=c000003e syscall=46 success=yes exit=18968 a0=3 a1=7ffe7ede7820 a2=0 a3=7ffe7ede780c items=0 ppid=3365 pid=3598 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:45:56.663000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Mar 17 18:45:56.667000 audit[3592]: NETFILTER_CFG table=raw:100 family=2 entries=21 op=nft_register_chain pid=3592 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Mar 17 18:45:56.667000 audit[3592]: SYSCALL arch=c000003e syscall=46 success=yes exit=8452 a0=3 a1=7ffec8d278c0 a2=0 a3=7ffec8d278ac items=0 ppid=3365 pid=3592 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:45:56.667000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Mar 17 18:45:56.792534 env[1203]: 2025-03-17 18:45:56.693 [INFO][3570] cni-plugin/k8s.go 608: Cleaning up netns ContainerID="a251bdfeb83e381893a6957f1a65c91859b0e72c5f92adb95520539a022b1e90" Mar 17 18:45:56.792534 env[1203]: 2025-03-17 18:45:56.729 [INFO][3570] cni-plugin/dataplane_linux.go 559: Deleting workload's device in netns. ContainerID="a251bdfeb83e381893a6957f1a65c91859b0e72c5f92adb95520539a022b1e90" iface="eth0" netns="/var/run/netns/cni-a0d5c1f7-b1b9-ed5b-90e0-ffa6c4d52d21" Mar 17 18:45:56.792534 env[1203]: 2025-03-17 18:45:56.730 [INFO][3570] cni-plugin/dataplane_linux.go 570: Entered netns, deleting veth. ContainerID="a251bdfeb83e381893a6957f1a65c91859b0e72c5f92adb95520539a022b1e90" iface="eth0" netns="/var/run/netns/cni-a0d5c1f7-b1b9-ed5b-90e0-ffa6c4d52d21" Mar 17 18:45:56.792534 env[1203]: 2025-03-17 18:45:56.730 [INFO][3570] cni-plugin/dataplane_linux.go 597: Workload's veth was already gone. Nothing to do. ContainerID="a251bdfeb83e381893a6957f1a65c91859b0e72c5f92adb95520539a022b1e90" iface="eth0" netns="/var/run/netns/cni-a0d5c1f7-b1b9-ed5b-90e0-ffa6c4d52d21" Mar 17 18:45:56.792534 env[1203]: 2025-03-17 18:45:56.730 [INFO][3570] cni-plugin/k8s.go 615: Releasing IP address(es) ContainerID="a251bdfeb83e381893a6957f1a65c91859b0e72c5f92adb95520539a022b1e90" Mar 17 18:45:56.792534 env[1203]: 2025-03-17 18:45:56.730 [INFO][3570] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="a251bdfeb83e381893a6957f1a65c91859b0e72c5f92adb95520539a022b1e90" Mar 17 18:45:56.792534 env[1203]: 2025-03-17 18:45:56.749 [INFO][3603] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="a251bdfeb83e381893a6957f1a65c91859b0e72c5f92adb95520539a022b1e90" HandleID="k8s-pod-network.a251bdfeb83e381893a6957f1a65c91859b0e72c5f92adb95520539a022b1e90" Workload="localhost-k8s-calico--apiserver--5c5c847997--cn65r-eth0" Mar 17 18:45:56.792534 env[1203]: 2025-03-17 18:45:56.750 [INFO][3603] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Mar 17 18:45:56.792534 env[1203]: 2025-03-17 18:45:56.750 [INFO][3603] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Mar 17 18:45:56.792534 env[1203]: 2025-03-17 18:45:56.785 [WARNING][3603] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="a251bdfeb83e381893a6957f1a65c91859b0e72c5f92adb95520539a022b1e90" HandleID="k8s-pod-network.a251bdfeb83e381893a6957f1a65c91859b0e72c5f92adb95520539a022b1e90" Workload="localhost-k8s-calico--apiserver--5c5c847997--cn65r-eth0" Mar 17 18:45:56.792534 env[1203]: 2025-03-17 18:45:56.785 [INFO][3603] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="a251bdfeb83e381893a6957f1a65c91859b0e72c5f92adb95520539a022b1e90" HandleID="k8s-pod-network.a251bdfeb83e381893a6957f1a65c91859b0e72c5f92adb95520539a022b1e90" Workload="localhost-k8s-calico--apiserver--5c5c847997--cn65r-eth0" Mar 17 18:45:56.792534 env[1203]: 2025-03-17 18:45:56.787 [INFO][3603] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Mar 17 18:45:56.792534 env[1203]: 2025-03-17 18:45:56.790 [INFO][3570] cni-plugin/k8s.go 621: Teardown processing complete. ContainerID="a251bdfeb83e381893a6957f1a65c91859b0e72c5f92adb95520539a022b1e90" Mar 17 18:45:56.793352 env[1203]: time="2025-03-17T18:45:56.792617586Z" level=info msg="TearDown network for sandbox \"a251bdfeb83e381893a6957f1a65c91859b0e72c5f92adb95520539a022b1e90\" successfully" Mar 17 18:45:56.793352 env[1203]: time="2025-03-17T18:45:56.792681996Z" level=info msg="StopPodSandbox for \"a251bdfeb83e381893a6957f1a65c91859b0e72c5f92adb95520539a022b1e90\" returns successfully" Mar 17 18:45:56.793352 env[1203]: time="2025-03-17T18:45:56.793339460Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-apiserver-5c5c847997-cn65r,Uid:7f41b2cd-adad-4fdd-914e-25770b9dbb49,Namespace:calico-apiserver,Attempt:1,}" Mar 17 18:45:56.795190 systemd[1]: run-netns-cni\x2da0d5c1f7\x2db1b9\x2ded5b\x2d90e0\x2dffa6c4d52d21.mount: Deactivated successfully. Mar 17 18:45:56.818137 env[1203]: 2025-03-17 18:45:56.785 [INFO][3571] cni-plugin/k8s.go 608: Cleaning up netns ContainerID="12ea64e1ecca836003d8982cef0c985a3af86570749a59d72b02c70cfe7f14f8" Mar 17 18:45:56.818137 env[1203]: 2025-03-17 18:45:56.785 [INFO][3571] cni-plugin/dataplane_linux.go 559: Deleting workload's device in netns. ContainerID="12ea64e1ecca836003d8982cef0c985a3af86570749a59d72b02c70cfe7f14f8" iface="eth0" netns="/var/run/netns/cni-480b178d-bf5a-24a4-30bb-24caaff771a0" Mar 17 18:45:56.818137 env[1203]: 2025-03-17 18:45:56.786 [INFO][3571] cni-plugin/dataplane_linux.go 570: Entered netns, deleting veth. ContainerID="12ea64e1ecca836003d8982cef0c985a3af86570749a59d72b02c70cfe7f14f8" iface="eth0" netns="/var/run/netns/cni-480b178d-bf5a-24a4-30bb-24caaff771a0" Mar 17 18:45:56.818137 env[1203]: 2025-03-17 18:45:56.786 [INFO][3571] cni-plugin/dataplane_linux.go 597: Workload's veth was already gone. Nothing to do. ContainerID="12ea64e1ecca836003d8982cef0c985a3af86570749a59d72b02c70cfe7f14f8" iface="eth0" netns="/var/run/netns/cni-480b178d-bf5a-24a4-30bb-24caaff771a0" Mar 17 18:45:56.818137 env[1203]: 2025-03-17 18:45:56.786 [INFO][3571] cni-plugin/k8s.go 615: Releasing IP address(es) ContainerID="12ea64e1ecca836003d8982cef0c985a3af86570749a59d72b02c70cfe7f14f8" Mar 17 18:45:56.818137 env[1203]: 2025-03-17 18:45:56.786 [INFO][3571] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="12ea64e1ecca836003d8982cef0c985a3af86570749a59d72b02c70cfe7f14f8" Mar 17 18:45:56.818137 env[1203]: 2025-03-17 18:45:56.807 [INFO][3611] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="12ea64e1ecca836003d8982cef0c985a3af86570749a59d72b02c70cfe7f14f8" HandleID="k8s-pod-network.12ea64e1ecca836003d8982cef0c985a3af86570749a59d72b02c70cfe7f14f8" Workload="localhost-k8s-coredns--7db6d8ff4d--gdwxp-eth0" Mar 17 18:45:56.818137 env[1203]: 2025-03-17 18:45:56.807 [INFO][3611] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Mar 17 18:45:56.818137 env[1203]: 2025-03-17 18:45:56.807 [INFO][3611] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Mar 17 18:45:56.818137 env[1203]: 2025-03-17 18:45:56.813 [WARNING][3611] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="12ea64e1ecca836003d8982cef0c985a3af86570749a59d72b02c70cfe7f14f8" HandleID="k8s-pod-network.12ea64e1ecca836003d8982cef0c985a3af86570749a59d72b02c70cfe7f14f8" Workload="localhost-k8s-coredns--7db6d8ff4d--gdwxp-eth0" Mar 17 18:45:56.818137 env[1203]: 2025-03-17 18:45:56.813 [INFO][3611] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="12ea64e1ecca836003d8982cef0c985a3af86570749a59d72b02c70cfe7f14f8" HandleID="k8s-pod-network.12ea64e1ecca836003d8982cef0c985a3af86570749a59d72b02c70cfe7f14f8" Workload="localhost-k8s-coredns--7db6d8ff4d--gdwxp-eth0" Mar 17 18:45:56.818137 env[1203]: 2025-03-17 18:45:56.814 [INFO][3611] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Mar 17 18:45:56.818137 env[1203]: 2025-03-17 18:45:56.816 [INFO][3571] cni-plugin/k8s.go 621: Teardown processing complete. ContainerID="12ea64e1ecca836003d8982cef0c985a3af86570749a59d72b02c70cfe7f14f8" Mar 17 18:45:56.818578 env[1203]: time="2025-03-17T18:45:56.818306723Z" level=info msg="TearDown network for sandbox \"12ea64e1ecca836003d8982cef0c985a3af86570749a59d72b02c70cfe7f14f8\" successfully" Mar 17 18:45:56.818578 env[1203]: time="2025-03-17T18:45:56.818343191Z" level=info msg="StopPodSandbox for \"12ea64e1ecca836003d8982cef0c985a3af86570749a59d72b02c70cfe7f14f8\" returns successfully" Mar 17 18:45:56.818695 kubelet[2045]: E0317 18:45:56.818668 2045 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Mar 17 18:45:56.819462 env[1203]: time="2025-03-17T18:45:56.819384435Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:coredns-7db6d8ff4d-gdwxp,Uid:7ea517d3-7ca7-4ac4-b0a9-aa4ec5ae36b5,Namespace:kube-system,Attempt:1,}" Mar 17 18:45:56.820708 systemd[1]: run-netns-cni\x2d480b178d\x2dbf5a\x2d24a4\x2d30bb\x2d24caaff771a0.mount: Deactivated successfully. Mar 17 18:45:57.141226 systemd-networkd[1025]: cali3fa9120f0d0: Link UP Mar 17 18:45:57.142218 systemd-networkd[1025]: cali3fa9120f0d0: Gained carrier Mar 17 18:45:57.142831 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): cali3fa9120f0d0: link becomes ready Mar 17 18:45:57.185525 env[1203]: 2025-03-17 18:45:57.061 [INFO][3621] cni-plugin/plugin.go 325: Calico CNI found existing endpoint: &{{WorkloadEndpoint projectcalico.org/v3} {localhost-k8s-calico--apiserver--5c5c847997--j7phz-eth0 calico-apiserver-5c5c847997- calico-apiserver f76afdc5-ade3-4599-9191-81e2b3c52eb2 930 0 2025-03-17 18:45:29 +0000 UTC map[apiserver:true app.kubernetes.io/name:calico-apiserver k8s-app:calico-apiserver pod-template-hash:5c5c847997 projectcalico.org/namespace:calico-apiserver projectcalico.org/orchestrator:k8s projectcalico.org/serviceaccount:calico-apiserver] map[] [] [] []} {k8s localhost calico-apiserver-5c5c847997-j7phz eth0 calico-apiserver [] [] [kns.calico-apiserver ksa.calico-apiserver.calico-apiserver] cali3fa9120f0d0 [] []}} ContainerID="79a827f67e332d210b35700b62741cbcbb9e6988df7934ba508f9a121c0cc80d" Namespace="calico-apiserver" Pod="calico-apiserver-5c5c847997-j7phz" WorkloadEndpoint="localhost-k8s-calico--apiserver--5c5c847997--j7phz-" Mar 17 18:45:57.185525 env[1203]: 2025-03-17 18:45:57.062 [INFO][3621] cni-plugin/k8s.go 77: Extracted identifiers for CmdAddK8s ContainerID="79a827f67e332d210b35700b62741cbcbb9e6988df7934ba508f9a121c0cc80d" Namespace="calico-apiserver" Pod="calico-apiserver-5c5c847997-j7phz" WorkloadEndpoint="localhost-k8s-calico--apiserver--5c5c847997--j7phz-eth0" Mar 17 18:45:57.185525 env[1203]: 2025-03-17 18:45:57.097 [INFO][3646] ipam/ipam_plugin.go 225: Calico CNI IPAM request count IPv4=1 IPv6=0 ContainerID="79a827f67e332d210b35700b62741cbcbb9e6988df7934ba508f9a121c0cc80d" HandleID="k8s-pod-network.79a827f67e332d210b35700b62741cbcbb9e6988df7934ba508f9a121c0cc80d" Workload="localhost-k8s-calico--apiserver--5c5c847997--j7phz-eth0" Mar 17 18:45:57.185525 env[1203]: 2025-03-17 18:45:57.107 [INFO][3646] ipam/ipam_plugin.go 265: Auto assigning IP ContainerID="79a827f67e332d210b35700b62741cbcbb9e6988df7934ba508f9a121c0cc80d" HandleID="k8s-pod-network.79a827f67e332d210b35700b62741cbcbb9e6988df7934ba508f9a121c0cc80d" Workload="localhost-k8s-calico--apiserver--5c5c847997--j7phz-eth0" assignArgs=ipam.AutoAssignArgs{Num4:1, Num6:0, HandleID:(*string)(0xc0002de960), Attrs:map[string]string{"namespace":"calico-apiserver", "node":"localhost", "pod":"calico-apiserver-5c5c847997-j7phz", "timestamp":"2025-03-17 18:45:57.097398446 +0000 UTC"}, Hostname:"localhost", IPv4Pools:[]net.IPNet{}, IPv6Pools:[]net.IPNet{}, MaxBlocksPerHost:0, HostReservedAttrIPv4s:(*ipam.HostReservedAttr)(nil), HostReservedAttrIPv6s:(*ipam.HostReservedAttr)(nil), IntendedUse:"Workload"} Mar 17 18:45:57.185525 env[1203]: 2025-03-17 18:45:57.107 [INFO][3646] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Mar 17 18:45:57.185525 env[1203]: 2025-03-17 18:45:57.107 [INFO][3646] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Mar 17 18:45:57.185525 env[1203]: 2025-03-17 18:45:57.108 [INFO][3646] ipam/ipam.go 107: Auto-assign 1 ipv4, 0 ipv6 addrs for host 'localhost' Mar 17 18:45:57.185525 env[1203]: 2025-03-17 18:45:57.109 [INFO][3646] ipam/ipam.go 660: Looking up existing affinities for host handle="k8s-pod-network.79a827f67e332d210b35700b62741cbcbb9e6988df7934ba508f9a121c0cc80d" host="localhost" Mar 17 18:45:57.185525 env[1203]: 2025-03-17 18:45:57.114 [INFO][3646] ipam/ipam.go 372: Looking up existing affinities for host host="localhost" Mar 17 18:45:57.185525 env[1203]: 2025-03-17 18:45:57.118 [INFO][3646] ipam/ipam.go 489: Trying affinity for 192.168.88.128/26 host="localhost" Mar 17 18:45:57.185525 env[1203]: 2025-03-17 18:45:57.120 [INFO][3646] ipam/ipam.go 155: Attempting to load block cidr=192.168.88.128/26 host="localhost" Mar 17 18:45:57.185525 env[1203]: 2025-03-17 18:45:57.122 [INFO][3646] ipam/ipam.go 232: Affinity is confirmed and block has been loaded cidr=192.168.88.128/26 host="localhost" Mar 17 18:45:57.185525 env[1203]: 2025-03-17 18:45:57.122 [INFO][3646] ipam/ipam.go 1180: Attempting to assign 1 addresses from block block=192.168.88.128/26 handle="k8s-pod-network.79a827f67e332d210b35700b62741cbcbb9e6988df7934ba508f9a121c0cc80d" host="localhost" Mar 17 18:45:57.185525 env[1203]: 2025-03-17 18:45:57.123 [INFO][3646] ipam/ipam.go 1685: Creating new handle: k8s-pod-network.79a827f67e332d210b35700b62741cbcbb9e6988df7934ba508f9a121c0cc80d Mar 17 18:45:57.185525 env[1203]: 2025-03-17 18:45:57.127 [INFO][3646] ipam/ipam.go 1203: Writing block in order to claim IPs block=192.168.88.128/26 handle="k8s-pod-network.79a827f67e332d210b35700b62741cbcbb9e6988df7934ba508f9a121c0cc80d" host="localhost" Mar 17 18:45:57.185525 env[1203]: 2025-03-17 18:45:57.137 [INFO][3646] ipam/ipam.go 1216: Successfully claimed IPs: [192.168.88.129/26] block=192.168.88.128/26 handle="k8s-pod-network.79a827f67e332d210b35700b62741cbcbb9e6988df7934ba508f9a121c0cc80d" host="localhost" Mar 17 18:45:57.185525 env[1203]: 2025-03-17 18:45:57.137 [INFO][3646] ipam/ipam.go 847: Auto-assigned 1 out of 1 IPv4s: [192.168.88.129/26] handle="k8s-pod-network.79a827f67e332d210b35700b62741cbcbb9e6988df7934ba508f9a121c0cc80d" host="localhost" Mar 17 18:45:57.185525 env[1203]: 2025-03-17 18:45:57.137 [INFO][3646] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Mar 17 18:45:57.185525 env[1203]: 2025-03-17 18:45:57.137 [INFO][3646] ipam/ipam_plugin.go 283: Calico CNI IPAM assigned addresses IPv4=[192.168.88.129/26] IPv6=[] ContainerID="79a827f67e332d210b35700b62741cbcbb9e6988df7934ba508f9a121c0cc80d" HandleID="k8s-pod-network.79a827f67e332d210b35700b62741cbcbb9e6988df7934ba508f9a121c0cc80d" Workload="localhost-k8s-calico--apiserver--5c5c847997--j7phz-eth0" Mar 17 18:45:57.186358 env[1203]: 2025-03-17 18:45:57.139 [INFO][3621] cni-plugin/k8s.go 386: Populated endpoint ContainerID="79a827f67e332d210b35700b62741cbcbb9e6988df7934ba508f9a121c0cc80d" Namespace="calico-apiserver" Pod="calico-apiserver-5c5c847997-j7phz" WorkloadEndpoint="localhost-k8s-calico--apiserver--5c5c847997--j7phz-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-calico--apiserver--5c5c847997--j7phz-eth0", GenerateName:"calico-apiserver-5c5c847997-", Namespace:"calico-apiserver", SelfLink:"", UID:"f76afdc5-ade3-4599-9191-81e2b3c52eb2", ResourceVersion:"930", Generation:0, CreationTimestamp:time.Date(2025, time.March, 17, 18, 45, 29, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"apiserver":"true", "app.kubernetes.io/name":"calico-apiserver", "k8s-app":"calico-apiserver", "pod-template-hash":"5c5c847997", "projectcalico.org/namespace":"calico-apiserver", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-apiserver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"", Pod:"calico-apiserver-5c5c847997-j7phz", Endpoint:"eth0", ServiceAccountName:"calico-apiserver", IPNetworks:[]string{"192.168.88.129/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-apiserver", "ksa.calico-apiserver.calico-apiserver"}, InterfaceName:"cali3fa9120f0d0", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil)}} Mar 17 18:45:57.186358 env[1203]: 2025-03-17 18:45:57.139 [INFO][3621] cni-plugin/k8s.go 387: Calico CNI using IPs: [192.168.88.129/32] ContainerID="79a827f67e332d210b35700b62741cbcbb9e6988df7934ba508f9a121c0cc80d" Namespace="calico-apiserver" Pod="calico-apiserver-5c5c847997-j7phz" WorkloadEndpoint="localhost-k8s-calico--apiserver--5c5c847997--j7phz-eth0" Mar 17 18:45:57.186358 env[1203]: 2025-03-17 18:45:57.139 [INFO][3621] cni-plugin/dataplane_linux.go 69: Setting the host side veth name to cali3fa9120f0d0 ContainerID="79a827f67e332d210b35700b62741cbcbb9e6988df7934ba508f9a121c0cc80d" Namespace="calico-apiserver" Pod="calico-apiserver-5c5c847997-j7phz" WorkloadEndpoint="localhost-k8s-calico--apiserver--5c5c847997--j7phz-eth0" Mar 17 18:45:57.186358 env[1203]: 2025-03-17 18:45:57.142 [INFO][3621] cni-plugin/dataplane_linux.go 508: Disabling IPv4 forwarding ContainerID="79a827f67e332d210b35700b62741cbcbb9e6988df7934ba508f9a121c0cc80d" Namespace="calico-apiserver" Pod="calico-apiserver-5c5c847997-j7phz" WorkloadEndpoint="localhost-k8s-calico--apiserver--5c5c847997--j7phz-eth0" Mar 17 18:45:57.186358 env[1203]: 2025-03-17 18:45:57.143 [INFO][3621] cni-plugin/k8s.go 414: Added Mac, interface name, and active container ID to endpoint ContainerID="79a827f67e332d210b35700b62741cbcbb9e6988df7934ba508f9a121c0cc80d" Namespace="calico-apiserver" Pod="calico-apiserver-5c5c847997-j7phz" WorkloadEndpoint="localhost-k8s-calico--apiserver--5c5c847997--j7phz-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-calico--apiserver--5c5c847997--j7phz-eth0", GenerateName:"calico-apiserver-5c5c847997-", Namespace:"calico-apiserver", SelfLink:"", UID:"f76afdc5-ade3-4599-9191-81e2b3c52eb2", ResourceVersion:"930", Generation:0, CreationTimestamp:time.Date(2025, time.March, 17, 18, 45, 29, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"apiserver":"true", "app.kubernetes.io/name":"calico-apiserver", "k8s-app":"calico-apiserver", "pod-template-hash":"5c5c847997", "projectcalico.org/namespace":"calico-apiserver", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-apiserver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"79a827f67e332d210b35700b62741cbcbb9e6988df7934ba508f9a121c0cc80d", Pod:"calico-apiserver-5c5c847997-j7phz", Endpoint:"eth0", ServiceAccountName:"calico-apiserver", IPNetworks:[]string{"192.168.88.129/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-apiserver", "ksa.calico-apiserver.calico-apiserver"}, InterfaceName:"cali3fa9120f0d0", MAC:"06:dc:d7:06:91:d7", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil)}} Mar 17 18:45:57.186358 env[1203]: 2025-03-17 18:45:57.183 [INFO][3621] cni-plugin/k8s.go 500: Wrote updated endpoint to datastore ContainerID="79a827f67e332d210b35700b62741cbcbb9e6988df7934ba508f9a121c0cc80d" Namespace="calico-apiserver" Pod="calico-apiserver-5c5c847997-j7phz" WorkloadEndpoint="localhost-k8s-calico--apiserver--5c5c847997--j7phz-eth0" Mar 17 18:45:57.198563 kernel: kauditd_printk_skb: 581 callbacks suppressed Mar 17 18:45:57.198709 kernel: audit: type=1325 audit(1742237157.193:1158): table=filter:101 family=2 entries=40 op=nft_register_chain pid=3696 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Mar 17 18:45:57.198732 kernel: audit: type=1300 audit(1742237157.193:1158): arch=c000003e syscall=46 success=yes exit=23492 a0=3 a1=7ffea6bf4170 a2=0 a3=7ffea6bf415c items=0 ppid=3365 pid=3696 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:45:57.193000 audit[3696]: NETFILTER_CFG table=filter:101 family=2 entries=40 op=nft_register_chain pid=3696 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Mar 17 18:45:57.193000 audit[3696]: SYSCALL arch=c000003e syscall=46 success=yes exit=23492 a0=3 a1=7ffea6bf4170 a2=0 a3=7ffea6bf415c items=0 ppid=3365 pid=3696 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:45:57.193000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Mar 17 18:45:57.207657 kernel: audit: type=1327 audit(1742237157.193:1158): proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Mar 17 18:45:57.226694 systemd-networkd[1025]: cali155111bf732: Link UP Mar 17 18:45:57.228864 systemd-networkd[1025]: cali155111bf732: Gained carrier Mar 17 18:45:57.229673 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): cali155111bf732: link becomes ready Mar 17 18:45:57.233719 env[1203]: time="2025-03-17T18:45:57.233638306Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Mar 17 18:45:57.233917 env[1203]: time="2025-03-17T18:45:57.233876673Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Mar 17 18:45:57.234037 env[1203]: time="2025-03-17T18:45:57.234009843Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Mar 17 18:45:57.234404 env[1203]: time="2025-03-17T18:45:57.234359609Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/79a827f67e332d210b35700b62741cbcbb9e6988df7934ba508f9a121c0cc80d pid=3710 runtime=io.containerd.runc.v2 Mar 17 18:45:57.248997 systemd[1]: Started cri-containerd-79a827f67e332d210b35700b62741cbcbb9e6988df7934ba508f9a121c0cc80d.scope. Mar 17 18:45:57.252476 env[1203]: 2025-03-17 18:45:57.099 [INFO][3634] cni-plugin/plugin.go 325: Calico CNI found existing endpoint: &{{WorkloadEndpoint projectcalico.org/v3} {localhost-k8s-calico--apiserver--5c5c847997--cn65r-eth0 calico-apiserver-5c5c847997- calico-apiserver 7f41b2cd-adad-4fdd-914e-25770b9dbb49 938 0 2025-03-17 18:45:29 +0000 UTC map[apiserver:true app.kubernetes.io/name:calico-apiserver k8s-app:calico-apiserver pod-template-hash:5c5c847997 projectcalico.org/namespace:calico-apiserver projectcalico.org/orchestrator:k8s projectcalico.org/serviceaccount:calico-apiserver] map[] [] [] []} {k8s localhost calico-apiserver-5c5c847997-cn65r eth0 calico-apiserver [] [] [kns.calico-apiserver ksa.calico-apiserver.calico-apiserver] cali155111bf732 [] []}} ContainerID="45ebe75264aeedd3c0f48890f01b5eac4a8f15cf5a4ad8b8e3409da1303c153a" Namespace="calico-apiserver" Pod="calico-apiserver-5c5c847997-cn65r" WorkloadEndpoint="localhost-k8s-calico--apiserver--5c5c847997--cn65r-" Mar 17 18:45:57.252476 env[1203]: 2025-03-17 18:45:57.100 [INFO][3634] cni-plugin/k8s.go 77: Extracted identifiers for CmdAddK8s ContainerID="45ebe75264aeedd3c0f48890f01b5eac4a8f15cf5a4ad8b8e3409da1303c153a" Namespace="calico-apiserver" Pod="calico-apiserver-5c5c847997-cn65r" WorkloadEndpoint="localhost-k8s-calico--apiserver--5c5c847997--cn65r-eth0" Mar 17 18:45:57.252476 env[1203]: 2025-03-17 18:45:57.138 [INFO][3669] ipam/ipam_plugin.go 225: Calico CNI IPAM request count IPv4=1 IPv6=0 ContainerID="45ebe75264aeedd3c0f48890f01b5eac4a8f15cf5a4ad8b8e3409da1303c153a" HandleID="k8s-pod-network.45ebe75264aeedd3c0f48890f01b5eac4a8f15cf5a4ad8b8e3409da1303c153a" Workload="localhost-k8s-calico--apiserver--5c5c847997--cn65r-eth0" Mar 17 18:45:57.252476 env[1203]: 2025-03-17 18:45:57.178 [INFO][3669] ipam/ipam_plugin.go 265: Auto assigning IP ContainerID="45ebe75264aeedd3c0f48890f01b5eac4a8f15cf5a4ad8b8e3409da1303c153a" HandleID="k8s-pod-network.45ebe75264aeedd3c0f48890f01b5eac4a8f15cf5a4ad8b8e3409da1303c153a" Workload="localhost-k8s-calico--apiserver--5c5c847997--cn65r-eth0" assignArgs=ipam.AutoAssignArgs{Num4:1, Num6:0, HandleID:(*string)(0xc0002dc7e0), Attrs:map[string]string{"namespace":"calico-apiserver", "node":"localhost", "pod":"calico-apiserver-5c5c847997-cn65r", "timestamp":"2025-03-17 18:45:57.138788007 +0000 UTC"}, Hostname:"localhost", IPv4Pools:[]net.IPNet{}, IPv6Pools:[]net.IPNet{}, MaxBlocksPerHost:0, HostReservedAttrIPv4s:(*ipam.HostReservedAttr)(nil), HostReservedAttrIPv6s:(*ipam.HostReservedAttr)(nil), IntendedUse:"Workload"} Mar 17 18:45:57.252476 env[1203]: 2025-03-17 18:45:57.178 [INFO][3669] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Mar 17 18:45:57.252476 env[1203]: 2025-03-17 18:45:57.178 [INFO][3669] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Mar 17 18:45:57.252476 env[1203]: 2025-03-17 18:45:57.178 [INFO][3669] ipam/ipam.go 107: Auto-assign 1 ipv4, 0 ipv6 addrs for host 'localhost' Mar 17 18:45:57.252476 env[1203]: 2025-03-17 18:45:57.181 [INFO][3669] ipam/ipam.go 660: Looking up existing affinities for host handle="k8s-pod-network.45ebe75264aeedd3c0f48890f01b5eac4a8f15cf5a4ad8b8e3409da1303c153a" host="localhost" Mar 17 18:45:57.252476 env[1203]: 2025-03-17 18:45:57.187 [INFO][3669] ipam/ipam.go 372: Looking up existing affinities for host host="localhost" Mar 17 18:45:57.252476 env[1203]: 2025-03-17 18:45:57.198 [INFO][3669] ipam/ipam.go 489: Trying affinity for 192.168.88.128/26 host="localhost" Mar 17 18:45:57.252476 env[1203]: 2025-03-17 18:45:57.200 [INFO][3669] ipam/ipam.go 155: Attempting to load block cidr=192.168.88.128/26 host="localhost" Mar 17 18:45:57.252476 env[1203]: 2025-03-17 18:45:57.201 [INFO][3669] ipam/ipam.go 232: Affinity is confirmed and block has been loaded cidr=192.168.88.128/26 host="localhost" Mar 17 18:45:57.252476 env[1203]: 2025-03-17 18:45:57.201 [INFO][3669] ipam/ipam.go 1180: Attempting to assign 1 addresses from block block=192.168.88.128/26 handle="k8s-pod-network.45ebe75264aeedd3c0f48890f01b5eac4a8f15cf5a4ad8b8e3409da1303c153a" host="localhost" Mar 17 18:45:57.252476 env[1203]: 2025-03-17 18:45:57.203 [INFO][3669] ipam/ipam.go 1685: Creating new handle: k8s-pod-network.45ebe75264aeedd3c0f48890f01b5eac4a8f15cf5a4ad8b8e3409da1303c153a Mar 17 18:45:57.252476 env[1203]: 2025-03-17 18:45:57.206 [INFO][3669] ipam/ipam.go 1203: Writing block in order to claim IPs block=192.168.88.128/26 handle="k8s-pod-network.45ebe75264aeedd3c0f48890f01b5eac4a8f15cf5a4ad8b8e3409da1303c153a" host="localhost" Mar 17 18:45:57.252476 env[1203]: 2025-03-17 18:45:57.216 [INFO][3669] ipam/ipam.go 1216: Successfully claimed IPs: [192.168.88.130/26] block=192.168.88.128/26 handle="k8s-pod-network.45ebe75264aeedd3c0f48890f01b5eac4a8f15cf5a4ad8b8e3409da1303c153a" host="localhost" Mar 17 18:45:57.252476 env[1203]: 2025-03-17 18:45:57.217 [INFO][3669] ipam/ipam.go 847: Auto-assigned 1 out of 1 IPv4s: [192.168.88.130/26] handle="k8s-pod-network.45ebe75264aeedd3c0f48890f01b5eac4a8f15cf5a4ad8b8e3409da1303c153a" host="localhost" Mar 17 18:45:57.252476 env[1203]: 2025-03-17 18:45:57.217 [INFO][3669] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Mar 17 18:45:57.252476 env[1203]: 2025-03-17 18:45:57.217 [INFO][3669] ipam/ipam_plugin.go 283: Calico CNI IPAM assigned addresses IPv4=[192.168.88.130/26] IPv6=[] ContainerID="45ebe75264aeedd3c0f48890f01b5eac4a8f15cf5a4ad8b8e3409da1303c153a" HandleID="k8s-pod-network.45ebe75264aeedd3c0f48890f01b5eac4a8f15cf5a4ad8b8e3409da1303c153a" Workload="localhost-k8s-calico--apiserver--5c5c847997--cn65r-eth0" Mar 17 18:45:57.253362 env[1203]: 2025-03-17 18:45:57.221 [INFO][3634] cni-plugin/k8s.go 386: Populated endpoint ContainerID="45ebe75264aeedd3c0f48890f01b5eac4a8f15cf5a4ad8b8e3409da1303c153a" Namespace="calico-apiserver" Pod="calico-apiserver-5c5c847997-cn65r" WorkloadEndpoint="localhost-k8s-calico--apiserver--5c5c847997--cn65r-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-calico--apiserver--5c5c847997--cn65r-eth0", GenerateName:"calico-apiserver-5c5c847997-", Namespace:"calico-apiserver", SelfLink:"", UID:"7f41b2cd-adad-4fdd-914e-25770b9dbb49", ResourceVersion:"938", Generation:0, CreationTimestamp:time.Date(2025, time.March, 17, 18, 45, 29, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"apiserver":"true", "app.kubernetes.io/name":"calico-apiserver", "k8s-app":"calico-apiserver", "pod-template-hash":"5c5c847997", "projectcalico.org/namespace":"calico-apiserver", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-apiserver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"", Pod:"calico-apiserver-5c5c847997-cn65r", Endpoint:"eth0", ServiceAccountName:"calico-apiserver", IPNetworks:[]string{"192.168.88.130/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-apiserver", "ksa.calico-apiserver.calico-apiserver"}, InterfaceName:"cali155111bf732", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil)}} Mar 17 18:45:57.253362 env[1203]: 2025-03-17 18:45:57.222 [INFO][3634] cni-plugin/k8s.go 387: Calico CNI using IPs: [192.168.88.130/32] ContainerID="45ebe75264aeedd3c0f48890f01b5eac4a8f15cf5a4ad8b8e3409da1303c153a" Namespace="calico-apiserver" Pod="calico-apiserver-5c5c847997-cn65r" WorkloadEndpoint="localhost-k8s-calico--apiserver--5c5c847997--cn65r-eth0" Mar 17 18:45:57.253362 env[1203]: 2025-03-17 18:45:57.223 [INFO][3634] cni-plugin/dataplane_linux.go 69: Setting the host side veth name to cali155111bf732 ContainerID="45ebe75264aeedd3c0f48890f01b5eac4a8f15cf5a4ad8b8e3409da1303c153a" Namespace="calico-apiserver" Pod="calico-apiserver-5c5c847997-cn65r" WorkloadEndpoint="localhost-k8s-calico--apiserver--5c5c847997--cn65r-eth0" Mar 17 18:45:57.253362 env[1203]: 2025-03-17 18:45:57.230 [INFO][3634] cni-plugin/dataplane_linux.go 508: Disabling IPv4 forwarding ContainerID="45ebe75264aeedd3c0f48890f01b5eac4a8f15cf5a4ad8b8e3409da1303c153a" Namespace="calico-apiserver" Pod="calico-apiserver-5c5c847997-cn65r" WorkloadEndpoint="localhost-k8s-calico--apiserver--5c5c847997--cn65r-eth0" Mar 17 18:45:57.253362 env[1203]: 2025-03-17 18:45:57.230 [INFO][3634] cni-plugin/k8s.go 414: Added Mac, interface name, and active container ID to endpoint ContainerID="45ebe75264aeedd3c0f48890f01b5eac4a8f15cf5a4ad8b8e3409da1303c153a" Namespace="calico-apiserver" Pod="calico-apiserver-5c5c847997-cn65r" WorkloadEndpoint="localhost-k8s-calico--apiserver--5c5c847997--cn65r-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-calico--apiserver--5c5c847997--cn65r-eth0", GenerateName:"calico-apiserver-5c5c847997-", Namespace:"calico-apiserver", SelfLink:"", UID:"7f41b2cd-adad-4fdd-914e-25770b9dbb49", ResourceVersion:"938", Generation:0, CreationTimestamp:time.Date(2025, time.March, 17, 18, 45, 29, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"apiserver":"true", "app.kubernetes.io/name":"calico-apiserver", "k8s-app":"calico-apiserver", "pod-template-hash":"5c5c847997", "projectcalico.org/namespace":"calico-apiserver", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-apiserver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"45ebe75264aeedd3c0f48890f01b5eac4a8f15cf5a4ad8b8e3409da1303c153a", Pod:"calico-apiserver-5c5c847997-cn65r", Endpoint:"eth0", ServiceAccountName:"calico-apiserver", IPNetworks:[]string{"192.168.88.130/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-apiserver", "ksa.calico-apiserver.calico-apiserver"}, InterfaceName:"cali155111bf732", MAC:"7e:54:bd:b8:91:fb", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil)}} Mar 17 18:45:57.253362 env[1203]: 2025-03-17 18:45:57.239 [INFO][3634] cni-plugin/k8s.go 500: Wrote updated endpoint to datastore ContainerID="45ebe75264aeedd3c0f48890f01b5eac4a8f15cf5a4ad8b8e3409da1303c153a" Namespace="calico-apiserver" Pod="calico-apiserver-5c5c847997-cn65r" WorkloadEndpoint="localhost-k8s-calico--apiserver--5c5c847997--cn65r-eth0" Mar 17 18:45:57.258000 audit[3752]: NETFILTER_CFG table=filter:102 family=2 entries=34 op=nft_register_chain pid=3752 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Mar 17 18:45:57.258000 audit[3752]: SYSCALL arch=c000003e syscall=46 success=yes exit=20328 a0=3 a1=7ffc58a3d0a0 a2=0 a3=7ffc58a3d08c items=0 ppid=3365 pid=3752 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:45:57.268277 kernel: audit: type=1325 audit(1742237157.258:1159): table=filter:102 family=2 entries=34 op=nft_register_chain pid=3752 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Mar 17 18:45:57.268326 kernel: audit: type=1300 audit(1742237157.258:1159): arch=c000003e syscall=46 success=yes exit=20328 a0=3 a1=7ffc58a3d0a0 a2=0 a3=7ffc58a3d08c items=0 ppid=3365 pid=3752 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:45:57.258000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Mar 17 18:45:57.275100 kernel: audit: type=1327 audit(1742237157.258:1159): proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Mar 17 18:45:57.275179 kernel: audit: type=1400 audit(1742237157.269:1160): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:57.269000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:57.275273 env[1203]: time="2025-03-17T18:45:57.274505557Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Mar 17 18:45:57.275273 env[1203]: time="2025-03-17T18:45:57.274586319Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Mar 17 18:45:57.275273 env[1203]: time="2025-03-17T18:45:57.274618339Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Mar 17 18:45:57.275273 env[1203]: time="2025-03-17T18:45:57.274870442Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/45ebe75264aeedd3c0f48890f01b5eac4a8f15cf5a4ad8b8e3409da1303c153a pid=3760 runtime=io.containerd.runc.v2 Mar 17 18:45:57.278574 kernel: audit: type=1400 audit(1742237157.269:1161): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:57.269000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:57.269000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:57.269000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:57.285955 kernel: audit: type=1400 audit(1742237157.269:1162): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:57.286006 kernel: audit: type=1400 audit(1742237157.269:1163): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:57.269000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:57.269000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:57.269000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:57.269000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:57.269000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:57.271000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:57.271000 audit: BPF prog-id=161 op=LOAD Mar 17 18:45:57.271000 audit[3721]: AVC avc: denied { bpf } for pid=3721 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:57.271000 audit[3721]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000197c48 a2=10 a3=1c items=0 ppid=3710 pid=3721 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:45:57.271000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3739613832376636376533333264323130623335373030623632373431 Mar 17 18:45:57.271000 audit[3721]: AVC avc: denied { perfmon } for pid=3721 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:57.271000 audit[3721]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001976b0 a2=3c a3=c items=0 ppid=3710 pid=3721 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:45:57.271000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3739613832376636376533333264323130623335373030623632373431 Mar 17 18:45:57.271000 audit[3721]: AVC avc: denied { bpf } for pid=3721 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:57.271000 audit[3721]: AVC avc: denied { bpf } for pid=3721 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:57.271000 audit[3721]: AVC avc: denied { bpf } for pid=3721 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:57.271000 audit[3721]: AVC avc: denied { perfmon } for pid=3721 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:57.271000 audit[3721]: AVC avc: denied { perfmon } for pid=3721 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:57.271000 audit[3721]: AVC avc: denied { perfmon } for pid=3721 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:57.271000 audit[3721]: AVC avc: denied { perfmon } for pid=3721 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:57.271000 audit[3721]: AVC avc: denied { perfmon } for pid=3721 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:57.271000 audit[3721]: AVC avc: denied { bpf } for pid=3721 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:57.271000 audit[3721]: AVC avc: denied { bpf } for pid=3721 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:57.271000 audit: BPF prog-id=162 op=LOAD Mar 17 18:45:57.271000 audit[3721]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001979d8 a2=78 a3=c000220350 items=0 ppid=3710 pid=3721 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:45:57.271000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3739613832376636376533333264323130623335373030623632373431 Mar 17 18:45:57.274000 audit[3721]: AVC avc: denied { bpf } for pid=3721 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:57.274000 audit[3721]: AVC avc: denied { bpf } for pid=3721 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:57.274000 audit[3721]: AVC avc: denied { perfmon } for pid=3721 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:57.274000 audit[3721]: AVC avc: denied { perfmon } for pid=3721 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:57.274000 audit[3721]: AVC avc: denied { perfmon } for pid=3721 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:57.274000 audit[3721]: AVC avc: denied { perfmon } for pid=3721 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:57.274000 audit[3721]: AVC avc: denied { perfmon } for pid=3721 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:57.274000 audit[3721]: AVC avc: denied { bpf } for pid=3721 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:57.274000 audit[3721]: AVC avc: denied { bpf } for pid=3721 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:57.274000 audit: BPF prog-id=163 op=LOAD Mar 17 18:45:57.274000 audit[3721]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000197770 a2=78 a3=c000220398 items=0 ppid=3710 pid=3721 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:45:57.274000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3739613832376636376533333264323130623335373030623632373431 Mar 17 18:45:57.274000 audit: BPF prog-id=163 op=UNLOAD Mar 17 18:45:57.274000 audit: BPF prog-id=162 op=UNLOAD Mar 17 18:45:57.274000 audit[3721]: AVC avc: denied { bpf } for pid=3721 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:57.274000 audit[3721]: AVC avc: denied { bpf } for pid=3721 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:57.274000 audit[3721]: AVC avc: denied { bpf } for pid=3721 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:57.274000 audit[3721]: AVC avc: denied { perfmon } for pid=3721 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:57.274000 audit[3721]: AVC avc: denied { perfmon } for pid=3721 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:57.274000 audit[3721]: AVC avc: denied { perfmon } for pid=3721 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:57.274000 audit[3721]: AVC avc: denied { perfmon } for pid=3721 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:57.274000 audit[3721]: AVC avc: denied { perfmon } for pid=3721 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:57.274000 audit[3721]: AVC avc: denied { bpf } for pid=3721 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:57.274000 audit[3721]: AVC avc: denied { bpf } for pid=3721 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:57.274000 audit: BPF prog-id=164 op=LOAD Mar 17 18:45:57.274000 audit[3721]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000197c30 a2=78 a3=c0002207a8 items=0 ppid=3710 pid=3721 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:45:57.274000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3739613832376636376533333264323130623335373030623632373431 Mar 17 18:45:57.286392 systemd-resolved[1143]: Failed to determine the local hostname and LLMNR/mDNS names, ignoring: No such device or address Mar 17 18:45:57.289718 systemd[1]: Started cri-containerd-45ebe75264aeedd3c0f48890f01b5eac4a8f15cf5a4ad8b8e3409da1303c153a.scope. Mar 17 18:45:57.293805 systemd-networkd[1025]: cali2cc750daea4: Link UP Mar 17 18:45:57.295653 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): cali2cc750daea4: link becomes ready Mar 17 18:45:57.295743 systemd-networkd[1025]: cali2cc750daea4: Gained carrier Mar 17 18:45:57.314000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:57.314000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:57.314000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:57.314000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:57.314000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:57.314000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:57.314000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:57.314000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:57.314000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:57.315000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:57.315000 audit: BPF prog-id=165 op=LOAD Mar 17 18:45:57.316000 audit[3771]: AVC avc: denied { bpf } for pid=3771 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:57.316000 audit[3771]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c0001c5c48 a2=10 a3=1c items=0 ppid=3760 pid=3771 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:45:57.316000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3435656265373532363461656564643363306634383839306630316235 Mar 17 18:45:57.317349 env[1203]: 2025-03-17 18:45:57.178 [INFO][3648] cni-plugin/plugin.go 325: Calico CNI found existing endpoint: &{{WorkloadEndpoint projectcalico.org/v3} {localhost-k8s-coredns--7db6d8ff4d--gdwxp-eth0 coredns-7db6d8ff4d- kube-system 7ea517d3-7ca7-4ac4-b0a9-aa4ec5ae36b5 940 0 2025-03-17 18:45:23 +0000 UTC map[k8s-app:kube-dns pod-template-hash:7db6d8ff4d projectcalico.org/namespace:kube-system projectcalico.org/orchestrator:k8s projectcalico.org/serviceaccount:coredns] map[] [] [] []} {k8s localhost coredns-7db6d8ff4d-gdwxp eth0 coredns [] [] [kns.kube-system ksa.kube-system.coredns] cali2cc750daea4 [{dns UDP 53 0 } {dns-tcp TCP 53 0 } {metrics TCP 9153 0 }] []}} ContainerID="d5a273f4afa9fc49b12c044409515521503584e0cd1ed1d3fd379b09ffcb933e" Namespace="kube-system" Pod="coredns-7db6d8ff4d-gdwxp" WorkloadEndpoint="localhost-k8s-coredns--7db6d8ff4d--gdwxp-" Mar 17 18:45:57.317349 env[1203]: 2025-03-17 18:45:57.178 [INFO][3648] cni-plugin/k8s.go 77: Extracted identifiers for CmdAddK8s ContainerID="d5a273f4afa9fc49b12c044409515521503584e0cd1ed1d3fd379b09ffcb933e" Namespace="kube-system" Pod="coredns-7db6d8ff4d-gdwxp" WorkloadEndpoint="localhost-k8s-coredns--7db6d8ff4d--gdwxp-eth0" Mar 17 18:45:57.317349 env[1203]: 2025-03-17 18:45:57.209 [INFO][3684] ipam/ipam_plugin.go 225: Calico CNI IPAM request count IPv4=1 IPv6=0 ContainerID="d5a273f4afa9fc49b12c044409515521503584e0cd1ed1d3fd379b09ffcb933e" HandleID="k8s-pod-network.d5a273f4afa9fc49b12c044409515521503584e0cd1ed1d3fd379b09ffcb933e" Workload="localhost-k8s-coredns--7db6d8ff4d--gdwxp-eth0" Mar 17 18:45:57.317349 env[1203]: 2025-03-17 18:45:57.218 [INFO][3684] ipam/ipam_plugin.go 265: Auto assigning IP ContainerID="d5a273f4afa9fc49b12c044409515521503584e0cd1ed1d3fd379b09ffcb933e" HandleID="k8s-pod-network.d5a273f4afa9fc49b12c044409515521503584e0cd1ed1d3fd379b09ffcb933e" Workload="localhost-k8s-coredns--7db6d8ff4d--gdwxp-eth0" assignArgs=ipam.AutoAssignArgs{Num4:1, Num6:0, HandleID:(*string)(0xc0003387c0), Attrs:map[string]string{"namespace":"kube-system", "node":"localhost", "pod":"coredns-7db6d8ff4d-gdwxp", "timestamp":"2025-03-17 18:45:57.209011255 +0000 UTC"}, Hostname:"localhost", IPv4Pools:[]net.IPNet{}, IPv6Pools:[]net.IPNet{}, MaxBlocksPerHost:0, HostReservedAttrIPv4s:(*ipam.HostReservedAttr)(nil), HostReservedAttrIPv6s:(*ipam.HostReservedAttr)(nil), IntendedUse:"Workload"} Mar 17 18:45:57.317349 env[1203]: 2025-03-17 18:45:57.218 [INFO][3684] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Mar 17 18:45:57.317349 env[1203]: 2025-03-17 18:45:57.218 [INFO][3684] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Mar 17 18:45:57.317349 env[1203]: 2025-03-17 18:45:57.218 [INFO][3684] ipam/ipam.go 107: Auto-assign 1 ipv4, 0 ipv6 addrs for host 'localhost' Mar 17 18:45:57.317349 env[1203]: 2025-03-17 18:45:57.222 [INFO][3684] ipam/ipam.go 660: Looking up existing affinities for host handle="k8s-pod-network.d5a273f4afa9fc49b12c044409515521503584e0cd1ed1d3fd379b09ffcb933e" host="localhost" Mar 17 18:45:57.317349 env[1203]: 2025-03-17 18:45:57.229 [INFO][3684] ipam/ipam.go 372: Looking up existing affinities for host host="localhost" Mar 17 18:45:57.317349 env[1203]: 2025-03-17 18:45:57.259 [INFO][3684] ipam/ipam.go 489: Trying affinity for 192.168.88.128/26 host="localhost" Mar 17 18:45:57.317349 env[1203]: 2025-03-17 18:45:57.268 [INFO][3684] ipam/ipam.go 155: Attempting to load block cidr=192.168.88.128/26 host="localhost" Mar 17 18:45:57.317349 env[1203]: 2025-03-17 18:45:57.279 [INFO][3684] ipam/ipam.go 232: Affinity is confirmed and block has been loaded cidr=192.168.88.128/26 host="localhost" Mar 17 18:45:57.317349 env[1203]: 2025-03-17 18:45:57.279 [INFO][3684] ipam/ipam.go 1180: Attempting to assign 1 addresses from block block=192.168.88.128/26 handle="k8s-pod-network.d5a273f4afa9fc49b12c044409515521503584e0cd1ed1d3fd379b09ffcb933e" host="localhost" Mar 17 18:45:57.317349 env[1203]: 2025-03-17 18:45:57.280 [INFO][3684] ipam/ipam.go 1685: Creating new handle: k8s-pod-network.d5a273f4afa9fc49b12c044409515521503584e0cd1ed1d3fd379b09ffcb933e Mar 17 18:45:57.317349 env[1203]: 2025-03-17 18:45:57.284 [INFO][3684] ipam/ipam.go 1203: Writing block in order to claim IPs block=192.168.88.128/26 handle="k8s-pod-network.d5a273f4afa9fc49b12c044409515521503584e0cd1ed1d3fd379b09ffcb933e" host="localhost" Mar 17 18:45:57.317349 env[1203]: 2025-03-17 18:45:57.290 [INFO][3684] ipam/ipam.go 1216: Successfully claimed IPs: [192.168.88.131/26] block=192.168.88.128/26 handle="k8s-pod-network.d5a273f4afa9fc49b12c044409515521503584e0cd1ed1d3fd379b09ffcb933e" host="localhost" Mar 17 18:45:57.317349 env[1203]: 2025-03-17 18:45:57.290 [INFO][3684] ipam/ipam.go 847: Auto-assigned 1 out of 1 IPv4s: [192.168.88.131/26] handle="k8s-pod-network.d5a273f4afa9fc49b12c044409515521503584e0cd1ed1d3fd379b09ffcb933e" host="localhost" Mar 17 18:45:57.317349 env[1203]: 2025-03-17 18:45:57.290 [INFO][3684] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Mar 17 18:45:57.317349 env[1203]: 2025-03-17 18:45:57.290 [INFO][3684] ipam/ipam_plugin.go 283: Calico CNI IPAM assigned addresses IPv4=[192.168.88.131/26] IPv6=[] ContainerID="d5a273f4afa9fc49b12c044409515521503584e0cd1ed1d3fd379b09ffcb933e" HandleID="k8s-pod-network.d5a273f4afa9fc49b12c044409515521503584e0cd1ed1d3fd379b09ffcb933e" Workload="localhost-k8s-coredns--7db6d8ff4d--gdwxp-eth0" Mar 17 18:45:57.318201 env[1203]: 2025-03-17 18:45:57.292 [INFO][3648] cni-plugin/k8s.go 386: Populated endpoint ContainerID="d5a273f4afa9fc49b12c044409515521503584e0cd1ed1d3fd379b09ffcb933e" Namespace="kube-system" Pod="coredns-7db6d8ff4d-gdwxp" WorkloadEndpoint="localhost-k8s-coredns--7db6d8ff4d--gdwxp-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-coredns--7db6d8ff4d--gdwxp-eth0", GenerateName:"coredns-7db6d8ff4d-", Namespace:"kube-system", SelfLink:"", UID:"7ea517d3-7ca7-4ac4-b0a9-aa4ec5ae36b5", ResourceVersion:"940", Generation:0, CreationTimestamp:time.Date(2025, time.March, 17, 18, 45, 23, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"k8s-app":"kube-dns", "pod-template-hash":"7db6d8ff4d", "projectcalico.org/namespace":"kube-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"coredns"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"", Pod:"coredns-7db6d8ff4d-gdwxp", Endpoint:"eth0", ServiceAccountName:"coredns", IPNetworks:[]string{"192.168.88.131/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.kube-system", "ksa.kube-system.coredns"}, InterfaceName:"cali2cc750daea4", MAC:"", Ports:[]v3.WorkloadEndpointPort{v3.WorkloadEndpointPort{Name:"dns", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"UDP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"dns-tcp", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"metrics", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x23c1, HostPort:0x0, HostIP:""}}, AllowSpoofedSourcePrefixes:[]string(nil)}} Mar 17 18:45:57.318201 env[1203]: 2025-03-17 18:45:57.292 [INFO][3648] cni-plugin/k8s.go 387: Calico CNI using IPs: [192.168.88.131/32] ContainerID="d5a273f4afa9fc49b12c044409515521503584e0cd1ed1d3fd379b09ffcb933e" Namespace="kube-system" Pod="coredns-7db6d8ff4d-gdwxp" WorkloadEndpoint="localhost-k8s-coredns--7db6d8ff4d--gdwxp-eth0" Mar 17 18:45:57.318201 env[1203]: 2025-03-17 18:45:57.292 [INFO][3648] cni-plugin/dataplane_linux.go 69: Setting the host side veth name to cali2cc750daea4 ContainerID="d5a273f4afa9fc49b12c044409515521503584e0cd1ed1d3fd379b09ffcb933e" Namespace="kube-system" Pod="coredns-7db6d8ff4d-gdwxp" WorkloadEndpoint="localhost-k8s-coredns--7db6d8ff4d--gdwxp-eth0" Mar 17 18:45:57.318201 env[1203]: 2025-03-17 18:45:57.296 [INFO][3648] cni-plugin/dataplane_linux.go 508: Disabling IPv4 forwarding ContainerID="d5a273f4afa9fc49b12c044409515521503584e0cd1ed1d3fd379b09ffcb933e" Namespace="kube-system" Pod="coredns-7db6d8ff4d-gdwxp" WorkloadEndpoint="localhost-k8s-coredns--7db6d8ff4d--gdwxp-eth0" Mar 17 18:45:57.318201 env[1203]: 2025-03-17 18:45:57.296 [INFO][3648] cni-plugin/k8s.go 414: Added Mac, interface name, and active container ID to endpoint ContainerID="d5a273f4afa9fc49b12c044409515521503584e0cd1ed1d3fd379b09ffcb933e" Namespace="kube-system" Pod="coredns-7db6d8ff4d-gdwxp" WorkloadEndpoint="localhost-k8s-coredns--7db6d8ff4d--gdwxp-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-coredns--7db6d8ff4d--gdwxp-eth0", GenerateName:"coredns-7db6d8ff4d-", Namespace:"kube-system", SelfLink:"", UID:"7ea517d3-7ca7-4ac4-b0a9-aa4ec5ae36b5", ResourceVersion:"940", Generation:0, CreationTimestamp:time.Date(2025, time.March, 17, 18, 45, 23, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"k8s-app":"kube-dns", "pod-template-hash":"7db6d8ff4d", "projectcalico.org/namespace":"kube-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"coredns"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"d5a273f4afa9fc49b12c044409515521503584e0cd1ed1d3fd379b09ffcb933e", Pod:"coredns-7db6d8ff4d-gdwxp", Endpoint:"eth0", ServiceAccountName:"coredns", IPNetworks:[]string{"192.168.88.131/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.kube-system", "ksa.kube-system.coredns"}, InterfaceName:"cali2cc750daea4", MAC:"46:22:2f:c5:3b:3b", Ports:[]v3.WorkloadEndpointPort{v3.WorkloadEndpointPort{Name:"dns", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"UDP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"dns-tcp", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"metrics", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x23c1, HostPort:0x0, HostIP:""}}, AllowSpoofedSourcePrefixes:[]string(nil)}} Mar 17 18:45:57.318201 env[1203]: 2025-03-17 18:45:57.311 [INFO][3648] cni-plugin/k8s.go 500: Wrote updated endpoint to datastore ContainerID="d5a273f4afa9fc49b12c044409515521503584e0cd1ed1d3fd379b09ffcb933e" Namespace="kube-system" Pod="coredns-7db6d8ff4d-gdwxp" WorkloadEndpoint="localhost-k8s-coredns--7db6d8ff4d--gdwxp-eth0" Mar 17 18:45:57.318000 audit[3771]: AVC avc: denied { perfmon } for pid=3771 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:57.318000 audit[3771]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001c56b0 a2=3c a3=c items=0 ppid=3760 pid=3771 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:45:57.318000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3435656265373532363461656564643363306634383839306630316235 Mar 17 18:45:57.318000 audit[3771]: AVC avc: denied { bpf } for pid=3771 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:57.318000 audit[3771]: AVC avc: denied { bpf } for pid=3771 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:57.318000 audit[3771]: AVC avc: denied { bpf } for pid=3771 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:57.318000 audit[3771]: AVC avc: denied { perfmon } for pid=3771 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:57.318000 audit[3771]: AVC avc: denied { perfmon } for pid=3771 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:57.318000 audit[3771]: AVC avc: denied { perfmon } for pid=3771 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:57.318000 audit[3771]: AVC avc: denied { perfmon } for pid=3771 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:57.318000 audit[3771]: AVC avc: denied { perfmon } for pid=3771 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:57.318000 audit[3771]: AVC avc: denied { bpf } for pid=3771 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:57.318000 audit[3771]: AVC avc: denied { bpf } for pid=3771 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:57.318000 audit: BPF prog-id=166 op=LOAD Mar 17 18:45:57.318000 audit[3771]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001c59d8 a2=78 a3=c00026a410 items=0 ppid=3760 pid=3771 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:45:57.318000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3435656265373532363461656564643363306634383839306630316235 Mar 17 18:45:57.319000 audit[3771]: AVC avc: denied { bpf } for pid=3771 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:57.319000 audit[3771]: AVC avc: denied { bpf } for pid=3771 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:57.319000 audit[3771]: AVC avc: denied { perfmon } for pid=3771 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:57.319000 audit[3771]: AVC avc: denied { perfmon } for pid=3771 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:57.319000 audit[3771]: AVC avc: denied { perfmon } for pid=3771 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:57.319000 audit[3771]: AVC avc: denied { perfmon } for pid=3771 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:57.319000 audit[3771]: AVC avc: denied { perfmon } for pid=3771 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:57.319000 audit[3771]: AVC avc: denied { bpf } for pid=3771 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:57.319000 audit[3771]: AVC avc: denied { bpf } for pid=3771 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:57.319000 audit: BPF prog-id=167 op=LOAD Mar 17 18:45:57.319000 audit[3771]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c0001c5770 a2=78 a3=c00026a458 items=0 ppid=3760 pid=3771 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:45:57.319000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3435656265373532363461656564643363306634383839306630316235 Mar 17 18:45:57.320000 audit: BPF prog-id=167 op=UNLOAD Mar 17 18:45:57.320000 audit: BPF prog-id=166 op=UNLOAD Mar 17 18:45:57.320000 audit[3771]: AVC avc: denied { bpf } for pid=3771 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:57.320000 audit[3771]: AVC avc: denied { bpf } for pid=3771 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:57.320000 audit[3771]: AVC avc: denied { bpf } for pid=3771 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:57.320000 audit[3771]: AVC avc: denied { perfmon } for pid=3771 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:57.320000 audit[3771]: AVC avc: denied { perfmon } for pid=3771 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:57.320000 audit[3771]: AVC avc: denied { perfmon } for pid=3771 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:57.320000 audit[3771]: AVC avc: denied { perfmon } for pid=3771 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:57.320000 audit[3771]: AVC avc: denied { perfmon } for pid=3771 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:57.320000 audit[3771]: AVC avc: denied { bpf } for pid=3771 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:57.320000 audit[3771]: AVC avc: denied { bpf } for pid=3771 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:57.320000 audit: BPF prog-id=168 op=LOAD Mar 17 18:45:57.320000 audit[3771]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001c5c30 a2=78 a3=c00026a868 items=0 ppid=3760 pid=3771 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:45:57.320000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3435656265373532363461656564643363306634383839306630316235 Mar 17 18:45:57.325548 systemd-resolved[1143]: Failed to determine the local hostname and LLMNR/mDNS names, ignoring: No such device or address Mar 17 18:45:57.328000 audit[3797]: NETFILTER_CFG table=filter:103 family=2 entries=42 op=nft_register_chain pid=3797 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Mar 17 18:45:57.328000 audit[3797]: SYSCALL arch=c000003e syscall=46 success=yes exit=21524 a0=3 a1=7ffcd9d99e20 a2=0 a3=7ffcd9d99e0c items=0 ppid=3365 pid=3797 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:45:57.328000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Mar 17 18:45:57.342329 env[1203]: time="2025-03-17T18:45:57.342292292Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-apiserver-5c5c847997-j7phz,Uid:f76afdc5-ade3-4599-9191-81e2b3c52eb2,Namespace:calico-apiserver,Attempt:1,} returns sandbox id \"79a827f67e332d210b35700b62741cbcbb9e6988df7934ba508f9a121c0cc80d\"" Mar 17 18:45:57.344275 env[1203]: time="2025-03-17T18:45:57.344245388Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/apiserver:v3.29.1\"" Mar 17 18:45:57.361221 env[1203]: time="2025-03-17T18:45:57.361167778Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Mar 17 18:45:57.361369 env[1203]: time="2025-03-17T18:45:57.361331836Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Mar 17 18:45:57.361507 env[1203]: time="2025-03-17T18:45:57.361469184Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Mar 17 18:45:57.361779 env[1203]: time="2025-03-17T18:45:57.361730304Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/d5a273f4afa9fc49b12c044409515521503584e0cd1ed1d3fd379b09ffcb933e pid=3818 runtime=io.containerd.runc.v2 Mar 17 18:45:57.376459 systemd[1]: Started cri-containerd-d5a273f4afa9fc49b12c044409515521503584e0cd1ed1d3fd379b09ffcb933e.scope. Mar 17 18:45:57.387333 env[1203]: time="2025-03-17T18:45:57.387282120Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-apiserver-5c5c847997-cn65r,Uid:7f41b2cd-adad-4fdd-914e-25770b9dbb49,Namespace:calico-apiserver,Attempt:1,} returns sandbox id \"45ebe75264aeedd3c0f48890f01b5eac4a8f15cf5a4ad8b8e3409da1303c153a\"" Mar 17 18:45:57.395000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@13-10.0.0.110:22-10.0.0.1:37556 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:45:57.396467 systemd[1]: Started sshd@13-10.0.0.110:22-10.0.0.1:37556.service. Mar 17 18:45:57.406000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:57.406000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:57.406000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:57.406000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:57.406000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:57.406000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:57.406000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:57.406000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:57.406000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:57.407000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:57.407000 audit: BPF prog-id=169 op=LOAD Mar 17 18:45:57.407000 audit[3827]: AVC avc: denied { bpf } for pid=3827 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:57.407000 audit[3827]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c0001c5c48 a2=10 a3=1c items=0 ppid=3818 pid=3827 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:45:57.407000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6435613237336634616661396663343962313263303434343039353135 Mar 17 18:45:57.407000 audit[3827]: AVC avc: denied { perfmon } for pid=3827 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:57.407000 audit[3827]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001c56b0 a2=3c a3=c items=0 ppid=3818 pid=3827 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:45:57.407000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6435613237336634616661396663343962313263303434343039353135 Mar 17 18:45:57.407000 audit[3827]: AVC avc: denied { bpf } for pid=3827 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:57.407000 audit[3827]: AVC avc: denied { bpf } for pid=3827 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:57.407000 audit[3827]: AVC avc: denied { bpf } for pid=3827 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:57.407000 audit[3827]: AVC avc: denied { perfmon } for pid=3827 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:57.407000 audit[3827]: AVC avc: denied { perfmon } for pid=3827 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:57.407000 audit[3827]: AVC avc: denied { perfmon } for pid=3827 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:57.407000 audit[3827]: AVC avc: denied { perfmon } for pid=3827 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:57.407000 audit[3827]: AVC avc: denied { perfmon } for pid=3827 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:57.407000 audit[3827]: AVC avc: denied { bpf } for pid=3827 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:57.407000 audit[3827]: AVC avc: denied { bpf } for pid=3827 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:57.407000 audit: BPF prog-id=170 op=LOAD Mar 17 18:45:57.407000 audit[3827]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001c59d8 a2=78 a3=c00011b120 items=0 ppid=3818 pid=3827 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:45:57.407000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6435613237336634616661396663343962313263303434343039353135 Mar 17 18:45:57.407000 audit[3827]: AVC avc: denied { bpf } for pid=3827 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:57.407000 audit[3827]: AVC avc: denied { bpf } for pid=3827 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:57.407000 audit[3827]: AVC avc: denied { perfmon } for pid=3827 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:57.407000 audit[3827]: AVC avc: denied { perfmon } for pid=3827 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:57.407000 audit[3827]: AVC avc: denied { perfmon } for pid=3827 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:57.407000 audit[3827]: AVC avc: denied { perfmon } for pid=3827 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:57.407000 audit[3827]: AVC avc: denied { perfmon } for pid=3827 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:57.407000 audit[3827]: AVC avc: denied { bpf } for pid=3827 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:57.407000 audit[3827]: AVC avc: denied { bpf } for pid=3827 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:57.407000 audit: BPF prog-id=171 op=LOAD Mar 17 18:45:57.407000 audit[3827]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c0001c5770 a2=78 a3=c00011b168 items=0 ppid=3818 pid=3827 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:45:57.407000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6435613237336634616661396663343962313263303434343039353135 Mar 17 18:45:57.407000 audit: BPF prog-id=171 op=UNLOAD Mar 17 18:45:57.407000 audit: BPF prog-id=170 op=UNLOAD Mar 17 18:45:57.407000 audit[3827]: AVC avc: denied { bpf } for pid=3827 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:57.407000 audit[3827]: AVC avc: denied { bpf } for pid=3827 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:57.407000 audit[3827]: AVC avc: denied { bpf } for pid=3827 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:57.407000 audit[3827]: AVC avc: denied { perfmon } for pid=3827 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:57.407000 audit[3827]: AVC avc: denied { perfmon } for pid=3827 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:57.407000 audit[3827]: AVC avc: denied { perfmon } for pid=3827 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:57.407000 audit[3827]: AVC avc: denied { perfmon } for pid=3827 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:57.407000 audit[3827]: AVC avc: denied { perfmon } for pid=3827 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:57.407000 audit[3827]: AVC avc: denied { bpf } for pid=3827 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:57.407000 audit[3827]: AVC avc: denied { bpf } for pid=3827 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:57.407000 audit: BPF prog-id=172 op=LOAD Mar 17 18:45:57.407000 audit[3827]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001c5c30 a2=78 a3=c00011b578 items=0 ppid=3818 pid=3827 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:45:57.407000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6435613237336634616661396663343962313263303434343039353135 Mar 17 18:45:57.408858 systemd-resolved[1143]: Failed to determine the local hostname and LLMNR/mDNS names, ignoring: No such device or address Mar 17 18:45:57.433678 env[1203]: time="2025-03-17T18:45:57.433014834Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:coredns-7db6d8ff4d-gdwxp,Uid:7ea517d3-7ca7-4ac4-b0a9-aa4ec5ae36b5,Namespace:kube-system,Attempt:1,} returns sandbox id \"d5a273f4afa9fc49b12c044409515521503584e0cd1ed1d3fd379b09ffcb933e\"" Mar 17 18:45:57.433814 kubelet[2045]: E0317 18:45:57.433640 2045 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Mar 17 18:45:57.436554 env[1203]: time="2025-03-17T18:45:57.436498071Z" level=info msg="CreateContainer within sandbox \"d5a273f4afa9fc49b12c044409515521503584e0cd1ed1d3fd379b09ffcb933e\" for container &ContainerMetadata{Name:coredns,Attempt:0,}" Mar 17 18:45:57.441000 audit[3851]: USER_ACCT pid=3851 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Mar 17 18:45:57.442100 sshd[3851]: Accepted publickey for core from 10.0.0.1 port 37556 ssh2: RSA SHA256:EcJpbXadXymLrINQtrmLSqTXC2wy0UoSwO9MmZb5CTo Mar 17 18:45:57.442000 audit[3851]: CRED_ACQ pid=3851 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Mar 17 18:45:57.442000 audit[3851]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffce19ad310 a2=3 a3=0 items=0 ppid=1 pid=3851 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=14 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:45:57.442000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Mar 17 18:45:57.443593 sshd[3851]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Mar 17 18:45:57.447896 systemd[1]: Started session-14.scope. Mar 17 18:45:57.447905 systemd-logind[1188]: New session 14 of user core. Mar 17 18:45:57.451466 env[1203]: time="2025-03-17T18:45:57.451380302Z" level=info msg="CreateContainer within sandbox \"d5a273f4afa9fc49b12c044409515521503584e0cd1ed1d3fd379b09ffcb933e\" for &ContainerMetadata{Name:coredns,Attempt:0,} returns container id \"c7571fd55d6674dc03482e23e6b7116c9e78af2ce1572fb48dce60bd4f67a5cf\"" Mar 17 18:45:57.451000 audit[3851]: USER_START pid=3851 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Mar 17 18:45:57.453094 env[1203]: time="2025-03-17T18:45:57.451898625Z" level=info msg="StartContainer for \"c7571fd55d6674dc03482e23e6b7116c9e78af2ce1572fb48dce60bd4f67a5cf\"" Mar 17 18:45:57.452000 audit[3862]: CRED_ACQ pid=3862 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Mar 17 18:45:57.465412 systemd[1]: Started cri-containerd-c7571fd55d6674dc03482e23e6b7116c9e78af2ce1572fb48dce60bd4f67a5cf.scope. Mar 17 18:45:57.475000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:57.475000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:57.475000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:57.475000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:57.475000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:57.475000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:57.475000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:57.475000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:57.475000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:57.475000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:57.475000 audit: BPF prog-id=173 op=LOAD Mar 17 18:45:57.475000 audit[3869]: AVC avc: denied { bpf } for pid=3869 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:57.475000 audit[3869]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000197c48 a2=10 a3=1c items=0 ppid=3818 pid=3869 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:45:57.475000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6337353731666435356436363734646330333438326532336536623731 Mar 17 18:45:57.476000 audit[3869]: AVC avc: denied { perfmon } for pid=3869 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:57.476000 audit[3869]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001976b0 a2=3c a3=8 items=0 ppid=3818 pid=3869 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:45:57.476000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6337353731666435356436363734646330333438326532336536623731 Mar 17 18:45:57.476000 audit[3869]: AVC avc: denied { bpf } for pid=3869 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:57.476000 audit[3869]: AVC avc: denied { bpf } for pid=3869 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:57.476000 audit[3869]: AVC avc: denied { bpf } for pid=3869 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:57.476000 audit[3869]: AVC avc: denied { perfmon } for pid=3869 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:57.476000 audit[3869]: AVC avc: denied { perfmon } for pid=3869 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:57.476000 audit[3869]: AVC avc: denied { perfmon } for pid=3869 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:57.476000 audit[3869]: AVC avc: denied { perfmon } for pid=3869 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:57.476000 audit[3869]: AVC avc: denied { perfmon } for pid=3869 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:57.476000 audit[3869]: AVC avc: denied { bpf } for pid=3869 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:57.476000 audit[3869]: AVC avc: denied { bpf } for pid=3869 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:57.476000 audit: BPF prog-id=174 op=LOAD Mar 17 18:45:57.476000 audit[3869]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001979d8 a2=78 a3=c00032cb20 items=0 ppid=3818 pid=3869 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:45:57.476000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6337353731666435356436363734646330333438326532336536623731 Mar 17 18:45:57.476000 audit[3869]: AVC avc: denied { bpf } for pid=3869 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:57.476000 audit[3869]: AVC avc: denied { bpf } for pid=3869 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:57.476000 audit[3869]: AVC avc: denied { perfmon } for pid=3869 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:57.476000 audit[3869]: AVC avc: denied { perfmon } for pid=3869 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:57.476000 audit[3869]: AVC avc: denied { perfmon } for pid=3869 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:57.476000 audit[3869]: AVC avc: denied { perfmon } for pid=3869 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:57.476000 audit[3869]: AVC avc: denied { perfmon } for pid=3869 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:57.476000 audit[3869]: AVC avc: denied { bpf } for pid=3869 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:57.476000 audit[3869]: AVC avc: denied { bpf } for pid=3869 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:57.476000 audit: BPF prog-id=175 op=LOAD Mar 17 18:45:57.476000 audit[3869]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000197770 a2=78 a3=c00032cb68 items=0 ppid=3818 pid=3869 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:45:57.476000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6337353731666435356436363734646330333438326532336536623731 Mar 17 18:45:57.476000 audit: BPF prog-id=175 op=UNLOAD Mar 17 18:45:57.476000 audit: BPF prog-id=174 op=UNLOAD Mar 17 18:45:57.476000 audit[3869]: AVC avc: denied { bpf } for pid=3869 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:57.476000 audit[3869]: AVC avc: denied { bpf } for pid=3869 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:57.476000 audit[3869]: AVC avc: denied { bpf } for pid=3869 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:57.476000 audit[3869]: AVC avc: denied { perfmon } for pid=3869 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:57.476000 audit[3869]: AVC avc: denied { perfmon } for pid=3869 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:57.476000 audit[3869]: AVC avc: denied { perfmon } for pid=3869 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:57.476000 audit[3869]: AVC avc: denied { perfmon } for pid=3869 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:57.476000 audit[3869]: AVC avc: denied { perfmon } for pid=3869 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:57.476000 audit[3869]: AVC avc: denied { bpf } for pid=3869 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:57.476000 audit[3869]: AVC avc: denied { bpf } for pid=3869 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:57.476000 audit: BPF prog-id=176 op=LOAD Mar 17 18:45:57.476000 audit[3869]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000197c30 a2=78 a3=c00032cf78 items=0 ppid=3818 pid=3869 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:45:57.476000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6337353731666435356436363734646330333438326532336536623731 Mar 17 18:45:57.487702 env[1203]: time="2025-03-17T18:45:57.487664843Z" level=info msg="StartContainer for \"c7571fd55d6674dc03482e23e6b7116c9e78af2ce1572fb48dce60bd4f67a5cf\" returns successfully" Mar 17 18:45:57.573245 sshd[3851]: pam_unix(sshd:session): session closed for user core Mar 17 18:45:57.573000 audit[3851]: USER_END pid=3851 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Mar 17 18:45:57.573000 audit[3851]: CRED_DISP pid=3851 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Mar 17 18:45:57.575683 systemd[1]: sshd@13-10.0.0.110:22-10.0.0.1:37556.service: Deactivated successfully. Mar 17 18:45:57.575000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@13-10.0.0.110:22-10.0.0.1:37556 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:45:57.576484 systemd[1]: session-14.scope: Deactivated successfully. Mar 17 18:45:57.577105 systemd-logind[1188]: Session 14 logged out. Waiting for processes to exit. Mar 17 18:45:57.577844 systemd-logind[1188]: Removed session 14. Mar 17 18:45:57.956893 systemd-networkd[1025]: vxlan.calico: Gained IPv6LL Mar 17 18:45:58.129475 kubelet[2045]: E0317 18:45:58.129444 2045 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Mar 17 18:45:58.142649 kubelet[2045]: I0317 18:45:58.142466 2045 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="kube-system/coredns-7db6d8ff4d-gdwxp" podStartSLOduration=35.142443873 podStartE2EDuration="35.142443873s" podCreationTimestamp="2025-03-17 18:45:23 +0000 UTC" firstStartedPulling="0001-01-01 00:00:00 +0000 UTC" lastFinishedPulling="0001-01-01 00:00:00 +0000 UTC" observedRunningTime="2025-03-17 18:45:58.142348374 +0000 UTC m=+50.630349222" watchObservedRunningTime="2025-03-17 18:45:58.142443873 +0000 UTC m=+50.630444711" Mar 17 18:45:58.199000 audit[3917]: NETFILTER_CFG table=filter:104 family=2 entries=16 op=nft_register_rule pid=3917 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Mar 17 18:45:58.199000 audit[3917]: SYSCALL arch=c000003e syscall=46 success=yes exit=5908 a0=3 a1=7ffde54d7b60 a2=0 a3=7ffde54d7b4c items=0 ppid=2248 pid=3917 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:45:58.199000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Mar 17 18:45:58.208000 audit[3917]: NETFILTER_CFG table=nat:105 family=2 entries=14 op=nft_register_rule pid=3917 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Mar 17 18:45:58.208000 audit[3917]: SYSCALL arch=c000003e syscall=46 success=yes exit=3468 a0=3 a1=7ffde54d7b60 a2=0 a3=0 items=0 ppid=2248 pid=3917 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:45:58.208000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Mar 17 18:45:58.219000 audit[3919]: NETFILTER_CFG table=filter:106 family=2 entries=13 op=nft_register_rule pid=3919 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Mar 17 18:45:58.219000 audit[3919]: SYSCALL arch=c000003e syscall=46 success=yes exit=3676 a0=3 a1=7ffc32929680 a2=0 a3=7ffc3292966c items=0 ppid=2248 pid=3919 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:45:58.219000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Mar 17 18:45:58.224000 audit[3919]: NETFILTER_CFG table=nat:107 family=2 entries=35 op=nft_register_chain pid=3919 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Mar 17 18:45:58.224000 audit[3919]: SYSCALL arch=c000003e syscall=46 success=yes exit=14196 a0=3 a1=7ffc32929680 a2=0 a3=7ffc3292966c items=0 ppid=2248 pid=3919 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:45:58.224000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Mar 17 18:45:58.469943 systemd-networkd[1025]: cali155111bf732: Gained IPv6LL Mar 17 18:45:58.852862 systemd-networkd[1025]: cali2cc750daea4: Gained IPv6LL Mar 17 18:45:59.112143 systemd-networkd[1025]: cali3fa9120f0d0: Gained IPv6LL Mar 17 18:45:59.131901 kubelet[2045]: E0317 18:45:59.131265 2045 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Mar 17 18:45:59.599640 env[1203]: time="2025-03-17T18:45:59.599568160Z" level=info msg="StopPodSandbox for \"49bc01f8fe1fd25dbc58e081e145237ea5c49d14446d8dec1e5dc2e238eef4b6\"" Mar 17 18:45:59.663612 env[1203]: 2025-03-17 18:45:59.635 [INFO][3938] cni-plugin/k8s.go 608: Cleaning up netns ContainerID="49bc01f8fe1fd25dbc58e081e145237ea5c49d14446d8dec1e5dc2e238eef4b6" Mar 17 18:45:59.663612 env[1203]: 2025-03-17 18:45:59.635 [INFO][3938] cni-plugin/dataplane_linux.go 559: Deleting workload's device in netns. ContainerID="49bc01f8fe1fd25dbc58e081e145237ea5c49d14446d8dec1e5dc2e238eef4b6" iface="eth0" netns="/var/run/netns/cni-85452311-1607-6d21-cf84-ee2926ac8257" Mar 17 18:45:59.663612 env[1203]: 2025-03-17 18:45:59.635 [INFO][3938] cni-plugin/dataplane_linux.go 570: Entered netns, deleting veth. ContainerID="49bc01f8fe1fd25dbc58e081e145237ea5c49d14446d8dec1e5dc2e238eef4b6" iface="eth0" netns="/var/run/netns/cni-85452311-1607-6d21-cf84-ee2926ac8257" Mar 17 18:45:59.663612 env[1203]: 2025-03-17 18:45:59.635 [INFO][3938] cni-plugin/dataplane_linux.go 597: Workload's veth was already gone. Nothing to do. ContainerID="49bc01f8fe1fd25dbc58e081e145237ea5c49d14446d8dec1e5dc2e238eef4b6" iface="eth0" netns="/var/run/netns/cni-85452311-1607-6d21-cf84-ee2926ac8257" Mar 17 18:45:59.663612 env[1203]: 2025-03-17 18:45:59.635 [INFO][3938] cni-plugin/k8s.go 615: Releasing IP address(es) ContainerID="49bc01f8fe1fd25dbc58e081e145237ea5c49d14446d8dec1e5dc2e238eef4b6" Mar 17 18:45:59.663612 env[1203]: 2025-03-17 18:45:59.635 [INFO][3938] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="49bc01f8fe1fd25dbc58e081e145237ea5c49d14446d8dec1e5dc2e238eef4b6" Mar 17 18:45:59.663612 env[1203]: 2025-03-17 18:45:59.654 [INFO][3947] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="49bc01f8fe1fd25dbc58e081e145237ea5c49d14446d8dec1e5dc2e238eef4b6" HandleID="k8s-pod-network.49bc01f8fe1fd25dbc58e081e145237ea5c49d14446d8dec1e5dc2e238eef4b6" Workload="localhost-k8s-calico--kube--controllers--56d6765747--9mr6w-eth0" Mar 17 18:45:59.663612 env[1203]: 2025-03-17 18:45:59.654 [INFO][3947] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Mar 17 18:45:59.663612 env[1203]: 2025-03-17 18:45:59.654 [INFO][3947] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Mar 17 18:45:59.663612 env[1203]: 2025-03-17 18:45:59.659 [WARNING][3947] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="49bc01f8fe1fd25dbc58e081e145237ea5c49d14446d8dec1e5dc2e238eef4b6" HandleID="k8s-pod-network.49bc01f8fe1fd25dbc58e081e145237ea5c49d14446d8dec1e5dc2e238eef4b6" Workload="localhost-k8s-calico--kube--controllers--56d6765747--9mr6w-eth0" Mar 17 18:45:59.663612 env[1203]: 2025-03-17 18:45:59.659 [INFO][3947] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="49bc01f8fe1fd25dbc58e081e145237ea5c49d14446d8dec1e5dc2e238eef4b6" HandleID="k8s-pod-network.49bc01f8fe1fd25dbc58e081e145237ea5c49d14446d8dec1e5dc2e238eef4b6" Workload="localhost-k8s-calico--kube--controllers--56d6765747--9mr6w-eth0" Mar 17 18:45:59.663612 env[1203]: 2025-03-17 18:45:59.661 [INFO][3947] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Mar 17 18:45:59.663612 env[1203]: 2025-03-17 18:45:59.662 [INFO][3938] cni-plugin/k8s.go 621: Teardown processing complete. ContainerID="49bc01f8fe1fd25dbc58e081e145237ea5c49d14446d8dec1e5dc2e238eef4b6" Mar 17 18:45:59.665911 systemd[1]: run-netns-cni\x2d85452311\x2d1607\x2d6d21\x2dcf84\x2dee2926ac8257.mount: Deactivated successfully. Mar 17 18:45:59.667539 env[1203]: time="2025-03-17T18:45:59.667495884Z" level=info msg="TearDown network for sandbox \"49bc01f8fe1fd25dbc58e081e145237ea5c49d14446d8dec1e5dc2e238eef4b6\" successfully" Mar 17 18:45:59.667607 env[1203]: time="2025-03-17T18:45:59.667540538Z" level=info msg="StopPodSandbox for \"49bc01f8fe1fd25dbc58e081e145237ea5c49d14446d8dec1e5dc2e238eef4b6\" returns successfully" Mar 17 18:45:59.668270 env[1203]: time="2025-03-17T18:45:59.668241573Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-kube-controllers-56d6765747-9mr6w,Uid:ca492086-56f8-43e1-83c0-78cd15fb38dd,Namespace:calico-system,Attempt:1,}" Mar 17 18:45:59.874503 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): eth0: link becomes ready Mar 17 18:45:59.874666 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): calic9708628f7a: link becomes ready Mar 17 18:45:59.869234 systemd-networkd[1025]: calic9708628f7a: Link UP Mar 17 18:45:59.873718 systemd-networkd[1025]: calic9708628f7a: Gained carrier Mar 17 18:45:59.886720 env[1203]: 2025-03-17 18:45:59.776 [INFO][3955] cni-plugin/plugin.go 325: Calico CNI found existing endpoint: &{{WorkloadEndpoint projectcalico.org/v3} {localhost-k8s-calico--kube--controllers--56d6765747--9mr6w-eth0 calico-kube-controllers-56d6765747- calico-system ca492086-56f8-43e1-83c0-78cd15fb38dd 990 0 2025-03-17 18:45:29 +0000 UTC map[app.kubernetes.io/name:calico-kube-controllers k8s-app:calico-kube-controllers pod-template-hash:56d6765747 projectcalico.org/namespace:calico-system projectcalico.org/orchestrator:k8s projectcalico.org/serviceaccount:calico-kube-controllers] map[] [] [] []} {k8s localhost calico-kube-controllers-56d6765747-9mr6w eth0 calico-kube-controllers [] [] [kns.calico-system ksa.calico-system.calico-kube-controllers] calic9708628f7a [] []}} ContainerID="0fd655df7396e878196a10af95b0ab038595338d335b8e10e99d9356062067dd" Namespace="calico-system" Pod="calico-kube-controllers-56d6765747-9mr6w" WorkloadEndpoint="localhost-k8s-calico--kube--controllers--56d6765747--9mr6w-" Mar 17 18:45:59.886720 env[1203]: 2025-03-17 18:45:59.776 [INFO][3955] cni-plugin/k8s.go 77: Extracted identifiers for CmdAddK8s ContainerID="0fd655df7396e878196a10af95b0ab038595338d335b8e10e99d9356062067dd" Namespace="calico-system" Pod="calico-kube-controllers-56d6765747-9mr6w" WorkloadEndpoint="localhost-k8s-calico--kube--controllers--56d6765747--9mr6w-eth0" Mar 17 18:45:59.886720 env[1203]: 2025-03-17 18:45:59.812 [INFO][3967] ipam/ipam_plugin.go 225: Calico CNI IPAM request count IPv4=1 IPv6=0 ContainerID="0fd655df7396e878196a10af95b0ab038595338d335b8e10e99d9356062067dd" HandleID="k8s-pod-network.0fd655df7396e878196a10af95b0ab038595338d335b8e10e99d9356062067dd" Workload="localhost-k8s-calico--kube--controllers--56d6765747--9mr6w-eth0" Mar 17 18:45:59.886720 env[1203]: 2025-03-17 18:45:59.823 [INFO][3967] ipam/ipam_plugin.go 265: Auto assigning IP ContainerID="0fd655df7396e878196a10af95b0ab038595338d335b8e10e99d9356062067dd" HandleID="k8s-pod-network.0fd655df7396e878196a10af95b0ab038595338d335b8e10e99d9356062067dd" Workload="localhost-k8s-calico--kube--controllers--56d6765747--9mr6w-eth0" assignArgs=ipam.AutoAssignArgs{Num4:1, Num6:0, HandleID:(*string)(0xc000051c90), Attrs:map[string]string{"namespace":"calico-system", "node":"localhost", "pod":"calico-kube-controllers-56d6765747-9mr6w", "timestamp":"2025-03-17 18:45:59.812398151 +0000 UTC"}, Hostname:"localhost", IPv4Pools:[]net.IPNet{}, IPv6Pools:[]net.IPNet{}, MaxBlocksPerHost:0, HostReservedAttrIPv4s:(*ipam.HostReservedAttr)(nil), HostReservedAttrIPv6s:(*ipam.HostReservedAttr)(nil), IntendedUse:"Workload"} Mar 17 18:45:59.886720 env[1203]: 2025-03-17 18:45:59.823 [INFO][3967] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Mar 17 18:45:59.886720 env[1203]: 2025-03-17 18:45:59.823 [INFO][3967] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Mar 17 18:45:59.886720 env[1203]: 2025-03-17 18:45:59.823 [INFO][3967] ipam/ipam.go 107: Auto-assign 1 ipv4, 0 ipv6 addrs for host 'localhost' Mar 17 18:45:59.886720 env[1203]: 2025-03-17 18:45:59.830 [INFO][3967] ipam/ipam.go 660: Looking up existing affinities for host handle="k8s-pod-network.0fd655df7396e878196a10af95b0ab038595338d335b8e10e99d9356062067dd" host="localhost" Mar 17 18:45:59.886720 env[1203]: 2025-03-17 18:45:59.840 [INFO][3967] ipam/ipam.go 372: Looking up existing affinities for host host="localhost" Mar 17 18:45:59.886720 env[1203]: 2025-03-17 18:45:59.846 [INFO][3967] ipam/ipam.go 489: Trying affinity for 192.168.88.128/26 host="localhost" Mar 17 18:45:59.886720 env[1203]: 2025-03-17 18:45:59.848 [INFO][3967] ipam/ipam.go 155: Attempting to load block cidr=192.168.88.128/26 host="localhost" Mar 17 18:45:59.886720 env[1203]: 2025-03-17 18:45:59.850 [INFO][3967] ipam/ipam.go 232: Affinity is confirmed and block has been loaded cidr=192.168.88.128/26 host="localhost" Mar 17 18:45:59.886720 env[1203]: 2025-03-17 18:45:59.850 [INFO][3967] ipam/ipam.go 1180: Attempting to assign 1 addresses from block block=192.168.88.128/26 handle="k8s-pod-network.0fd655df7396e878196a10af95b0ab038595338d335b8e10e99d9356062067dd" host="localhost" Mar 17 18:45:59.886720 env[1203]: 2025-03-17 18:45:59.852 [INFO][3967] ipam/ipam.go 1685: Creating new handle: k8s-pod-network.0fd655df7396e878196a10af95b0ab038595338d335b8e10e99d9356062067dd Mar 17 18:45:59.886720 env[1203]: 2025-03-17 18:45:59.857 [INFO][3967] ipam/ipam.go 1203: Writing block in order to claim IPs block=192.168.88.128/26 handle="k8s-pod-network.0fd655df7396e878196a10af95b0ab038595338d335b8e10e99d9356062067dd" host="localhost" Mar 17 18:45:59.886720 env[1203]: 2025-03-17 18:45:59.864 [INFO][3967] ipam/ipam.go 1216: Successfully claimed IPs: [192.168.88.132/26] block=192.168.88.128/26 handle="k8s-pod-network.0fd655df7396e878196a10af95b0ab038595338d335b8e10e99d9356062067dd" host="localhost" Mar 17 18:45:59.886720 env[1203]: 2025-03-17 18:45:59.864 [INFO][3967] ipam/ipam.go 847: Auto-assigned 1 out of 1 IPv4s: [192.168.88.132/26] handle="k8s-pod-network.0fd655df7396e878196a10af95b0ab038595338d335b8e10e99d9356062067dd" host="localhost" Mar 17 18:45:59.886720 env[1203]: 2025-03-17 18:45:59.864 [INFO][3967] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Mar 17 18:45:59.886720 env[1203]: 2025-03-17 18:45:59.864 [INFO][3967] ipam/ipam_plugin.go 283: Calico CNI IPAM assigned addresses IPv4=[192.168.88.132/26] IPv6=[] ContainerID="0fd655df7396e878196a10af95b0ab038595338d335b8e10e99d9356062067dd" HandleID="k8s-pod-network.0fd655df7396e878196a10af95b0ab038595338d335b8e10e99d9356062067dd" Workload="localhost-k8s-calico--kube--controllers--56d6765747--9mr6w-eth0" Mar 17 18:45:59.887683 env[1203]: 2025-03-17 18:45:59.866 [INFO][3955] cni-plugin/k8s.go 386: Populated endpoint ContainerID="0fd655df7396e878196a10af95b0ab038595338d335b8e10e99d9356062067dd" Namespace="calico-system" Pod="calico-kube-controllers-56d6765747-9mr6w" WorkloadEndpoint="localhost-k8s-calico--kube--controllers--56d6765747--9mr6w-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-calico--kube--controllers--56d6765747--9mr6w-eth0", GenerateName:"calico-kube-controllers-56d6765747-", Namespace:"calico-system", SelfLink:"", UID:"ca492086-56f8-43e1-83c0-78cd15fb38dd", ResourceVersion:"990", Generation:0, CreationTimestamp:time.Date(2025, time.March, 17, 18, 45, 29, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"calico-kube-controllers", "k8s-app":"calico-kube-controllers", "pod-template-hash":"56d6765747", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-kube-controllers"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"", Pod:"calico-kube-controllers-56d6765747-9mr6w", Endpoint:"eth0", ServiceAccountName:"calico-kube-controllers", IPNetworks:[]string{"192.168.88.132/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.calico-kube-controllers"}, InterfaceName:"calic9708628f7a", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil)}} Mar 17 18:45:59.887683 env[1203]: 2025-03-17 18:45:59.866 [INFO][3955] cni-plugin/k8s.go 387: Calico CNI using IPs: [192.168.88.132/32] ContainerID="0fd655df7396e878196a10af95b0ab038595338d335b8e10e99d9356062067dd" Namespace="calico-system" Pod="calico-kube-controllers-56d6765747-9mr6w" WorkloadEndpoint="localhost-k8s-calico--kube--controllers--56d6765747--9mr6w-eth0" Mar 17 18:45:59.887683 env[1203]: 2025-03-17 18:45:59.867 [INFO][3955] cni-plugin/dataplane_linux.go 69: Setting the host side veth name to calic9708628f7a ContainerID="0fd655df7396e878196a10af95b0ab038595338d335b8e10e99d9356062067dd" Namespace="calico-system" Pod="calico-kube-controllers-56d6765747-9mr6w" WorkloadEndpoint="localhost-k8s-calico--kube--controllers--56d6765747--9mr6w-eth0" Mar 17 18:45:59.887683 env[1203]: 2025-03-17 18:45:59.869 [INFO][3955] cni-plugin/dataplane_linux.go 508: Disabling IPv4 forwarding ContainerID="0fd655df7396e878196a10af95b0ab038595338d335b8e10e99d9356062067dd" Namespace="calico-system" Pod="calico-kube-controllers-56d6765747-9mr6w" WorkloadEndpoint="localhost-k8s-calico--kube--controllers--56d6765747--9mr6w-eth0" Mar 17 18:45:59.887683 env[1203]: 2025-03-17 18:45:59.870 [INFO][3955] cni-plugin/k8s.go 414: Added Mac, interface name, and active container ID to endpoint ContainerID="0fd655df7396e878196a10af95b0ab038595338d335b8e10e99d9356062067dd" Namespace="calico-system" Pod="calico-kube-controllers-56d6765747-9mr6w" WorkloadEndpoint="localhost-k8s-calico--kube--controllers--56d6765747--9mr6w-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-calico--kube--controllers--56d6765747--9mr6w-eth0", GenerateName:"calico-kube-controllers-56d6765747-", Namespace:"calico-system", SelfLink:"", UID:"ca492086-56f8-43e1-83c0-78cd15fb38dd", ResourceVersion:"990", Generation:0, CreationTimestamp:time.Date(2025, time.March, 17, 18, 45, 29, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"calico-kube-controllers", "k8s-app":"calico-kube-controllers", "pod-template-hash":"56d6765747", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-kube-controllers"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"0fd655df7396e878196a10af95b0ab038595338d335b8e10e99d9356062067dd", Pod:"calico-kube-controllers-56d6765747-9mr6w", Endpoint:"eth0", ServiceAccountName:"calico-kube-controllers", IPNetworks:[]string{"192.168.88.132/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.calico-kube-controllers"}, InterfaceName:"calic9708628f7a", MAC:"d6:91:17:92:55:bd", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil)}} Mar 17 18:45:59.887683 env[1203]: 2025-03-17 18:45:59.881 [INFO][3955] cni-plugin/k8s.go 500: Wrote updated endpoint to datastore ContainerID="0fd655df7396e878196a10af95b0ab038595338d335b8e10e99d9356062067dd" Namespace="calico-system" Pod="calico-kube-controllers-56d6765747-9mr6w" WorkloadEndpoint="localhost-k8s-calico--kube--controllers--56d6765747--9mr6w-eth0" Mar 17 18:45:59.895000 audit[3981]: NETFILTER_CFG table=filter:108 family=2 entries=46 op=nft_register_chain pid=3981 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Mar 17 18:45:59.895000 audit[3981]: SYSCALL arch=c000003e syscall=46 success=yes exit=22712 a0=3 a1=7ffe8b75f500 a2=0 a3=7ffe8b75f4ec items=0 ppid=3365 pid=3981 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:45:59.895000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Mar 17 18:45:59.906879 env[1203]: time="2025-03-17T18:45:59.906803714Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Mar 17 18:45:59.907088 env[1203]: time="2025-03-17T18:45:59.906861181Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Mar 17 18:45:59.907088 env[1203]: time="2025-03-17T18:45:59.906876119Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Mar 17 18:45:59.907286 env[1203]: time="2025-03-17T18:45:59.907061767Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/0fd655df7396e878196a10af95b0ab038595338d335b8e10e99d9356062067dd pid=3995 runtime=io.containerd.runc.v2 Mar 17 18:45:59.926670 systemd[1]: Started cri-containerd-0fd655df7396e878196a10af95b0ab038595338d335b8e10e99d9356062067dd.scope. Mar 17 18:45:59.947000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:59.948000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:59.948000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:59.948000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:59.948000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:59.948000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:59.948000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:59.948000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:59.948000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:59.948000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:59.948000 audit: BPF prog-id=177 op=LOAD Mar 17 18:45:59.948000 audit[4005]: AVC avc: denied { bpf } for pid=4005 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:59.948000 audit[4005]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000197c48 a2=10 a3=1c items=0 ppid=3995 pid=4005 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:45:59.948000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3066643635356466373339366538373831393661313061663935623061 Mar 17 18:45:59.948000 audit[4005]: AVC avc: denied { perfmon } for pid=4005 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:59.948000 audit[4005]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001976b0 a2=3c a3=c items=0 ppid=3995 pid=4005 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:45:59.948000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3066643635356466373339366538373831393661313061663935623061 Mar 17 18:45:59.948000 audit[4005]: AVC avc: denied { bpf } for pid=4005 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:59.948000 audit[4005]: AVC avc: denied { bpf } for pid=4005 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:59.948000 audit[4005]: AVC avc: denied { bpf } for pid=4005 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:59.948000 audit[4005]: AVC avc: denied { perfmon } for pid=4005 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:59.948000 audit[4005]: AVC avc: denied { perfmon } for pid=4005 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:59.948000 audit[4005]: AVC avc: denied { perfmon } for pid=4005 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:59.948000 audit[4005]: AVC avc: denied { perfmon } for pid=4005 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:59.948000 audit[4005]: AVC avc: denied { perfmon } for pid=4005 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:59.948000 audit[4005]: AVC avc: denied { bpf } for pid=4005 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:59.948000 audit[4005]: AVC avc: denied { bpf } for pid=4005 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:59.948000 audit: BPF prog-id=178 op=LOAD Mar 17 18:45:59.948000 audit[4005]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001979d8 a2=78 a3=c000098530 items=0 ppid=3995 pid=4005 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:45:59.948000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3066643635356466373339366538373831393661313061663935623061 Mar 17 18:45:59.949000 audit[4005]: AVC avc: denied { bpf } for pid=4005 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:59.949000 audit[4005]: AVC avc: denied { bpf } for pid=4005 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:59.949000 audit[4005]: AVC avc: denied { perfmon } for pid=4005 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:59.949000 audit[4005]: AVC avc: denied { perfmon } for pid=4005 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:59.949000 audit[4005]: AVC avc: denied { perfmon } for pid=4005 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:59.949000 audit[4005]: AVC avc: denied { perfmon } for pid=4005 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:59.949000 audit[4005]: AVC avc: denied { perfmon } for pid=4005 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:59.949000 audit[4005]: AVC avc: denied { bpf } for pid=4005 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:59.949000 audit[4005]: AVC avc: denied { bpf } for pid=4005 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:59.949000 audit: BPF prog-id=179 op=LOAD Mar 17 18:45:59.949000 audit[4005]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000197770 a2=78 a3=c000098578 items=0 ppid=3995 pid=4005 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:45:59.949000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3066643635356466373339366538373831393661313061663935623061 Mar 17 18:45:59.949000 audit: BPF prog-id=179 op=UNLOAD Mar 17 18:45:59.949000 audit: BPF prog-id=178 op=UNLOAD Mar 17 18:45:59.949000 audit[4005]: AVC avc: denied { bpf } for pid=4005 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:59.949000 audit[4005]: AVC avc: denied { bpf } for pid=4005 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:59.949000 audit[4005]: AVC avc: denied { bpf } for pid=4005 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:59.949000 audit[4005]: AVC avc: denied { perfmon } for pid=4005 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:59.949000 audit[4005]: AVC avc: denied { perfmon } for pid=4005 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:59.949000 audit[4005]: AVC avc: denied { perfmon } for pid=4005 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:59.949000 audit[4005]: AVC avc: denied { perfmon } for pid=4005 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:59.949000 audit[4005]: AVC avc: denied { perfmon } for pid=4005 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:59.949000 audit[4005]: AVC avc: denied { bpf } for pid=4005 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:59.949000 audit[4005]: AVC avc: denied { bpf } for pid=4005 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:45:59.949000 audit: BPF prog-id=180 op=LOAD Mar 17 18:45:59.949000 audit[4005]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000197c30 a2=78 a3=c000098988 items=0 ppid=3995 pid=4005 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:45:59.949000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3066643635356466373339366538373831393661313061663935623061 Mar 17 18:45:59.950843 systemd-resolved[1143]: Failed to determine the local hostname and LLMNR/mDNS names, ignoring: No such device or address Mar 17 18:46:00.004216 env[1203]: time="2025-03-17T18:46:00.004157699Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-kube-controllers-56d6765747-9mr6w,Uid:ca492086-56f8-43e1-83c0-78cd15fb38dd,Namespace:calico-system,Attempt:1,} returns sandbox id \"0fd655df7396e878196a10af95b0ab038595338d335b8e10e99d9356062067dd\"" Mar 17 18:46:00.135048 kubelet[2045]: E0317 18:46:00.134936 2045 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Mar 17 18:46:00.532346 env[1203]: time="2025-03-17T18:46:00.532302501Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/apiserver:v3.29.1,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Mar 17 18:46:00.534299 env[1203]: time="2025-03-17T18:46:00.534263330Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:421726ace5ed13894f7edf594dd3a462947aedc13d0f69d08525d7369477fb70,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Mar 17 18:46:00.536024 env[1203]: time="2025-03-17T18:46:00.535993207Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/apiserver:v3.29.1,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Mar 17 18:46:00.537576 env[1203]: time="2025-03-17T18:46:00.537543506Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/apiserver@sha256:b8c43e264fe52e0c327b0bf3ac882a0224b33bdd7f4ff58a74242da7d9b00486,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Mar 17 18:46:00.537865 env[1203]: time="2025-03-17T18:46:00.537834992Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/apiserver:v3.29.1\" returns image reference \"sha256:421726ace5ed13894f7edf594dd3a462947aedc13d0f69d08525d7369477fb70\"" Mar 17 18:46:00.540431 env[1203]: time="2025-03-17T18:46:00.540380599Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/apiserver:v3.29.1\"" Mar 17 18:46:00.541300 env[1203]: time="2025-03-17T18:46:00.541264068Z" level=info msg="CreateContainer within sandbox \"79a827f67e332d210b35700b62741cbcbb9e6988df7934ba508f9a121c0cc80d\" for container &ContainerMetadata{Name:calico-apiserver,Attempt:0,}" Mar 17 18:46:00.556424 env[1203]: time="2025-03-17T18:46:00.556353723Z" level=info msg="CreateContainer within sandbox \"79a827f67e332d210b35700b62741cbcbb9e6988df7934ba508f9a121c0cc80d\" for &ContainerMetadata{Name:calico-apiserver,Attempt:0,} returns container id \"09941aadc1146aad27af48d73bf4a720f9ce9b4aa6f24b1bf56408eae789c07b\"" Mar 17 18:46:00.557107 env[1203]: time="2025-03-17T18:46:00.557067363Z" level=info msg="StartContainer for \"09941aadc1146aad27af48d73bf4a720f9ce9b4aa6f24b1bf56408eae789c07b\"" Mar 17 18:46:00.574993 systemd[1]: Started cri-containerd-09941aadc1146aad27af48d73bf4a720f9ce9b4aa6f24b1bf56408eae789c07b.scope. Mar 17 18:46:00.586000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:46:00.586000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:46:00.586000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:46:00.586000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:46:00.586000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:46:00.586000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:46:00.586000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:46:00.586000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:46:00.586000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:46:00.586000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:46:00.586000 audit: BPF prog-id=181 op=LOAD Mar 17 18:46:00.587000 audit[4034]: AVC avc: denied { bpf } for pid=4034 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:46:00.587000 audit[4034]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000197c48 a2=10 a3=1c items=0 ppid=3710 pid=4034 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:46:00.587000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3039393431616164633131343661616432376166343864373362663461 Mar 17 18:46:00.587000 audit[4034]: AVC avc: denied { perfmon } for pid=4034 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:46:00.587000 audit[4034]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001976b0 a2=3c a3=8 items=0 ppid=3710 pid=4034 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:46:00.587000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3039393431616164633131343661616432376166343864373362663461 Mar 17 18:46:00.587000 audit[4034]: AVC avc: denied { bpf } for pid=4034 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:46:00.587000 audit[4034]: AVC avc: denied { bpf } for pid=4034 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:46:00.587000 audit[4034]: AVC avc: denied { bpf } for pid=4034 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:46:00.587000 audit[4034]: AVC avc: denied { perfmon } for pid=4034 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:46:00.587000 audit[4034]: AVC avc: denied { perfmon } for pid=4034 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:46:00.587000 audit[4034]: AVC avc: denied { perfmon } for pid=4034 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:46:00.587000 audit[4034]: AVC avc: denied { perfmon } for pid=4034 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:46:00.587000 audit[4034]: AVC avc: denied { perfmon } for pid=4034 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:46:00.587000 audit[4034]: AVC avc: denied { bpf } for pid=4034 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:46:00.587000 audit[4034]: AVC avc: denied { bpf } for pid=4034 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:46:00.587000 audit: BPF prog-id=182 op=LOAD Mar 17 18:46:00.587000 audit[4034]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001979d8 a2=78 a3=c000306550 items=0 ppid=3710 pid=4034 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:46:00.587000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3039393431616164633131343661616432376166343864373362663461 Mar 17 18:46:00.587000 audit[4034]: AVC avc: denied { bpf } for pid=4034 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:46:00.587000 audit[4034]: AVC avc: denied { bpf } for pid=4034 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:46:00.587000 audit[4034]: AVC avc: denied { perfmon } for pid=4034 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:46:00.587000 audit[4034]: AVC avc: denied { perfmon } for pid=4034 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:46:00.587000 audit[4034]: AVC avc: denied { perfmon } for pid=4034 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:46:00.587000 audit[4034]: AVC avc: denied { perfmon } for pid=4034 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:46:00.587000 audit[4034]: AVC avc: denied { perfmon } for pid=4034 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:46:00.587000 audit[4034]: AVC avc: denied { bpf } for pid=4034 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:46:00.587000 audit[4034]: AVC avc: denied { bpf } for pid=4034 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:46:00.587000 audit: BPF prog-id=183 op=LOAD Mar 17 18:46:00.587000 audit[4034]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000197770 a2=78 a3=c000306598 items=0 ppid=3710 pid=4034 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:46:00.587000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3039393431616164633131343661616432376166343864373362663461 Mar 17 18:46:00.587000 audit: BPF prog-id=183 op=UNLOAD Mar 17 18:46:00.587000 audit: BPF prog-id=182 op=UNLOAD Mar 17 18:46:00.587000 audit[4034]: AVC avc: denied { bpf } for pid=4034 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:46:00.587000 audit[4034]: AVC avc: denied { bpf } for pid=4034 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:46:00.587000 audit[4034]: AVC avc: denied { bpf } for pid=4034 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:46:00.587000 audit[4034]: AVC avc: denied { perfmon } for pid=4034 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:46:00.587000 audit[4034]: AVC avc: denied { perfmon } for pid=4034 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:46:00.587000 audit[4034]: AVC avc: denied { perfmon } for pid=4034 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:46:00.587000 audit[4034]: AVC avc: denied { perfmon } for pid=4034 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:46:00.587000 audit[4034]: AVC avc: denied { perfmon } for pid=4034 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:46:00.587000 audit[4034]: AVC avc: denied { bpf } for pid=4034 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:46:00.587000 audit[4034]: AVC avc: denied { bpf } for pid=4034 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:46:00.587000 audit: BPF prog-id=184 op=LOAD Mar 17 18:46:00.587000 audit[4034]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000197c30 a2=78 a3=c0003069a8 items=0 ppid=3710 pid=4034 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:46:00.587000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3039393431616164633131343661616432376166343864373362663461 Mar 17 18:46:00.596404 env[1203]: time="2025-03-17T18:46:00.596029025Z" level=info msg="StopPodSandbox for \"e89558f593d7e9c08a181ae183ab0a8320dd5ad3ce1575d1502e0a0d6fe4025b\"" Mar 17 18:46:00.637363 env[1203]: time="2025-03-17T18:46:00.637093994Z" level=info msg="StartContainer for \"09941aadc1146aad27af48d73bf4a720f9ce9b4aa6f24b1bf56408eae789c07b\" returns successfully" Mar 17 18:46:00.694976 env[1203]: 2025-03-17 18:46:00.652 [INFO][4066] cni-plugin/k8s.go 608: Cleaning up netns ContainerID="e89558f593d7e9c08a181ae183ab0a8320dd5ad3ce1575d1502e0a0d6fe4025b" Mar 17 18:46:00.694976 env[1203]: 2025-03-17 18:46:00.652 [INFO][4066] cni-plugin/dataplane_linux.go 559: Deleting workload's device in netns. ContainerID="e89558f593d7e9c08a181ae183ab0a8320dd5ad3ce1575d1502e0a0d6fe4025b" iface="eth0" netns="/var/run/netns/cni-4f26c9bb-175d-2e6c-bc8c-2459f3834b2f" Mar 17 18:46:00.694976 env[1203]: 2025-03-17 18:46:00.652 [INFO][4066] cni-plugin/dataplane_linux.go 570: Entered netns, deleting veth. ContainerID="e89558f593d7e9c08a181ae183ab0a8320dd5ad3ce1575d1502e0a0d6fe4025b" iface="eth0" netns="/var/run/netns/cni-4f26c9bb-175d-2e6c-bc8c-2459f3834b2f" Mar 17 18:46:00.694976 env[1203]: 2025-03-17 18:46:00.652 [INFO][4066] cni-plugin/dataplane_linux.go 597: Workload's veth was already gone. Nothing to do. ContainerID="e89558f593d7e9c08a181ae183ab0a8320dd5ad3ce1575d1502e0a0d6fe4025b" iface="eth0" netns="/var/run/netns/cni-4f26c9bb-175d-2e6c-bc8c-2459f3834b2f" Mar 17 18:46:00.694976 env[1203]: 2025-03-17 18:46:00.652 [INFO][4066] cni-plugin/k8s.go 615: Releasing IP address(es) ContainerID="e89558f593d7e9c08a181ae183ab0a8320dd5ad3ce1575d1502e0a0d6fe4025b" Mar 17 18:46:00.694976 env[1203]: 2025-03-17 18:46:00.652 [INFO][4066] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="e89558f593d7e9c08a181ae183ab0a8320dd5ad3ce1575d1502e0a0d6fe4025b" Mar 17 18:46:00.694976 env[1203]: 2025-03-17 18:46:00.684 [INFO][4087] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="e89558f593d7e9c08a181ae183ab0a8320dd5ad3ce1575d1502e0a0d6fe4025b" HandleID="k8s-pod-network.e89558f593d7e9c08a181ae183ab0a8320dd5ad3ce1575d1502e0a0d6fe4025b" Workload="localhost-k8s-coredns--7db6d8ff4d--nq4kb-eth0" Mar 17 18:46:00.694976 env[1203]: 2025-03-17 18:46:00.684 [INFO][4087] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Mar 17 18:46:00.694976 env[1203]: 2025-03-17 18:46:00.684 [INFO][4087] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Mar 17 18:46:00.694976 env[1203]: 2025-03-17 18:46:00.689 [WARNING][4087] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="e89558f593d7e9c08a181ae183ab0a8320dd5ad3ce1575d1502e0a0d6fe4025b" HandleID="k8s-pod-network.e89558f593d7e9c08a181ae183ab0a8320dd5ad3ce1575d1502e0a0d6fe4025b" Workload="localhost-k8s-coredns--7db6d8ff4d--nq4kb-eth0" Mar 17 18:46:00.694976 env[1203]: 2025-03-17 18:46:00.690 [INFO][4087] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="e89558f593d7e9c08a181ae183ab0a8320dd5ad3ce1575d1502e0a0d6fe4025b" HandleID="k8s-pod-network.e89558f593d7e9c08a181ae183ab0a8320dd5ad3ce1575d1502e0a0d6fe4025b" Workload="localhost-k8s-coredns--7db6d8ff4d--nq4kb-eth0" Mar 17 18:46:00.694976 env[1203]: 2025-03-17 18:46:00.691 [INFO][4087] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Mar 17 18:46:00.694976 env[1203]: 2025-03-17 18:46:00.693 [INFO][4066] cni-plugin/k8s.go 621: Teardown processing complete. ContainerID="e89558f593d7e9c08a181ae183ab0a8320dd5ad3ce1575d1502e0a0d6fe4025b" Mar 17 18:46:00.695452 env[1203]: time="2025-03-17T18:46:00.695144787Z" level=info msg="TearDown network for sandbox \"e89558f593d7e9c08a181ae183ab0a8320dd5ad3ce1575d1502e0a0d6fe4025b\" successfully" Mar 17 18:46:00.695452 env[1203]: time="2025-03-17T18:46:00.695188529Z" level=info msg="StopPodSandbox for \"e89558f593d7e9c08a181ae183ab0a8320dd5ad3ce1575d1502e0a0d6fe4025b\" returns successfully" Mar 17 18:46:00.695513 kubelet[2045]: E0317 18:46:00.695469 2045 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Mar 17 18:46:00.695931 env[1203]: time="2025-03-17T18:46:00.695903741Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:coredns-7db6d8ff4d-nq4kb,Uid:effac710-cde3-45ed-8e3f-90230de9316c,Namespace:kube-system,Attempt:1,}" Mar 17 18:46:00.701029 systemd[1]: run-netns-cni\x2d4f26c9bb\x2d175d\x2d2e6c\x2dbc8c\x2d2459f3834b2f.mount: Deactivated successfully. Mar 17 18:46:00.823705 systemd-networkd[1025]: calife88be78495: Link UP Mar 17 18:46:00.826757 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): calife88be78495: link becomes ready Mar 17 18:46:00.827176 systemd-networkd[1025]: calife88be78495: Gained carrier Mar 17 18:46:00.845027 env[1203]: 2025-03-17 18:46:00.749 [INFO][4101] cni-plugin/plugin.go 325: Calico CNI found existing endpoint: &{{WorkloadEndpoint projectcalico.org/v3} {localhost-k8s-coredns--7db6d8ff4d--nq4kb-eth0 coredns-7db6d8ff4d- kube-system effac710-cde3-45ed-8e3f-90230de9316c 1000 0 2025-03-17 18:45:23 +0000 UTC map[k8s-app:kube-dns pod-template-hash:7db6d8ff4d projectcalico.org/namespace:kube-system projectcalico.org/orchestrator:k8s projectcalico.org/serviceaccount:coredns] map[] [] [] []} {k8s localhost coredns-7db6d8ff4d-nq4kb eth0 coredns [] [] [kns.kube-system ksa.kube-system.coredns] calife88be78495 [{dns UDP 53 0 } {dns-tcp TCP 53 0 } {metrics TCP 9153 0 }] []}} ContainerID="eaa37ce96dbf7840a56065c16d8daaaa3ab02fc8f8c3afcde7beac9666f99957" Namespace="kube-system" Pod="coredns-7db6d8ff4d-nq4kb" WorkloadEndpoint="localhost-k8s-coredns--7db6d8ff4d--nq4kb-" Mar 17 18:46:00.845027 env[1203]: 2025-03-17 18:46:00.749 [INFO][4101] cni-plugin/k8s.go 77: Extracted identifiers for CmdAddK8s ContainerID="eaa37ce96dbf7840a56065c16d8daaaa3ab02fc8f8c3afcde7beac9666f99957" Namespace="kube-system" Pod="coredns-7db6d8ff4d-nq4kb" WorkloadEndpoint="localhost-k8s-coredns--7db6d8ff4d--nq4kb-eth0" Mar 17 18:46:00.845027 env[1203]: 2025-03-17 18:46:00.775 [INFO][4110] ipam/ipam_plugin.go 225: Calico CNI IPAM request count IPv4=1 IPv6=0 ContainerID="eaa37ce96dbf7840a56065c16d8daaaa3ab02fc8f8c3afcde7beac9666f99957" HandleID="k8s-pod-network.eaa37ce96dbf7840a56065c16d8daaaa3ab02fc8f8c3afcde7beac9666f99957" Workload="localhost-k8s-coredns--7db6d8ff4d--nq4kb-eth0" Mar 17 18:46:00.845027 env[1203]: 2025-03-17 18:46:00.783 [INFO][4110] ipam/ipam_plugin.go 265: Auto assigning IP ContainerID="eaa37ce96dbf7840a56065c16d8daaaa3ab02fc8f8c3afcde7beac9666f99957" HandleID="k8s-pod-network.eaa37ce96dbf7840a56065c16d8daaaa3ab02fc8f8c3afcde7beac9666f99957" Workload="localhost-k8s-coredns--7db6d8ff4d--nq4kb-eth0" assignArgs=ipam.AutoAssignArgs{Num4:1, Num6:0, HandleID:(*string)(0xc0005ba7b0), Attrs:map[string]string{"namespace":"kube-system", "node":"localhost", "pod":"coredns-7db6d8ff4d-nq4kb", "timestamp":"2025-03-17 18:46:00.775766425 +0000 UTC"}, Hostname:"localhost", IPv4Pools:[]net.IPNet{}, IPv6Pools:[]net.IPNet{}, MaxBlocksPerHost:0, HostReservedAttrIPv4s:(*ipam.HostReservedAttr)(nil), HostReservedAttrIPv6s:(*ipam.HostReservedAttr)(nil), IntendedUse:"Workload"} Mar 17 18:46:00.845027 env[1203]: 2025-03-17 18:46:00.783 [INFO][4110] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Mar 17 18:46:00.845027 env[1203]: 2025-03-17 18:46:00.784 [INFO][4110] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Mar 17 18:46:00.845027 env[1203]: 2025-03-17 18:46:00.784 [INFO][4110] ipam/ipam.go 107: Auto-assign 1 ipv4, 0 ipv6 addrs for host 'localhost' Mar 17 18:46:00.845027 env[1203]: 2025-03-17 18:46:00.786 [INFO][4110] ipam/ipam.go 660: Looking up existing affinities for host handle="k8s-pod-network.eaa37ce96dbf7840a56065c16d8daaaa3ab02fc8f8c3afcde7beac9666f99957" host="localhost" Mar 17 18:46:00.845027 env[1203]: 2025-03-17 18:46:00.790 [INFO][4110] ipam/ipam.go 372: Looking up existing affinities for host host="localhost" Mar 17 18:46:00.845027 env[1203]: 2025-03-17 18:46:00.794 [INFO][4110] ipam/ipam.go 489: Trying affinity for 192.168.88.128/26 host="localhost" Mar 17 18:46:00.845027 env[1203]: 2025-03-17 18:46:00.796 [INFO][4110] ipam/ipam.go 155: Attempting to load block cidr=192.168.88.128/26 host="localhost" Mar 17 18:46:00.845027 env[1203]: 2025-03-17 18:46:00.798 [INFO][4110] ipam/ipam.go 232: Affinity is confirmed and block has been loaded cidr=192.168.88.128/26 host="localhost" Mar 17 18:46:00.845027 env[1203]: 2025-03-17 18:46:00.798 [INFO][4110] ipam/ipam.go 1180: Attempting to assign 1 addresses from block block=192.168.88.128/26 handle="k8s-pod-network.eaa37ce96dbf7840a56065c16d8daaaa3ab02fc8f8c3afcde7beac9666f99957" host="localhost" Mar 17 18:46:00.845027 env[1203]: 2025-03-17 18:46:00.799 [INFO][4110] ipam/ipam.go 1685: Creating new handle: k8s-pod-network.eaa37ce96dbf7840a56065c16d8daaaa3ab02fc8f8c3afcde7beac9666f99957 Mar 17 18:46:00.845027 env[1203]: 2025-03-17 18:46:00.804 [INFO][4110] ipam/ipam.go 1203: Writing block in order to claim IPs block=192.168.88.128/26 handle="k8s-pod-network.eaa37ce96dbf7840a56065c16d8daaaa3ab02fc8f8c3afcde7beac9666f99957" host="localhost" Mar 17 18:46:00.845027 env[1203]: 2025-03-17 18:46:00.818 [INFO][4110] ipam/ipam.go 1216: Successfully claimed IPs: [192.168.88.133/26] block=192.168.88.128/26 handle="k8s-pod-network.eaa37ce96dbf7840a56065c16d8daaaa3ab02fc8f8c3afcde7beac9666f99957" host="localhost" Mar 17 18:46:00.845027 env[1203]: 2025-03-17 18:46:00.818 [INFO][4110] ipam/ipam.go 847: Auto-assigned 1 out of 1 IPv4s: [192.168.88.133/26] handle="k8s-pod-network.eaa37ce96dbf7840a56065c16d8daaaa3ab02fc8f8c3afcde7beac9666f99957" host="localhost" Mar 17 18:46:00.845027 env[1203]: 2025-03-17 18:46:00.818 [INFO][4110] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Mar 17 18:46:00.845027 env[1203]: 2025-03-17 18:46:00.818 [INFO][4110] ipam/ipam_plugin.go 283: Calico CNI IPAM assigned addresses IPv4=[192.168.88.133/26] IPv6=[] ContainerID="eaa37ce96dbf7840a56065c16d8daaaa3ab02fc8f8c3afcde7beac9666f99957" HandleID="k8s-pod-network.eaa37ce96dbf7840a56065c16d8daaaa3ab02fc8f8c3afcde7beac9666f99957" Workload="localhost-k8s-coredns--7db6d8ff4d--nq4kb-eth0" Mar 17 18:46:00.845847 env[1203]: 2025-03-17 18:46:00.820 [INFO][4101] cni-plugin/k8s.go 386: Populated endpoint ContainerID="eaa37ce96dbf7840a56065c16d8daaaa3ab02fc8f8c3afcde7beac9666f99957" Namespace="kube-system" Pod="coredns-7db6d8ff4d-nq4kb" WorkloadEndpoint="localhost-k8s-coredns--7db6d8ff4d--nq4kb-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-coredns--7db6d8ff4d--nq4kb-eth0", GenerateName:"coredns-7db6d8ff4d-", Namespace:"kube-system", SelfLink:"", UID:"effac710-cde3-45ed-8e3f-90230de9316c", ResourceVersion:"1000", Generation:0, CreationTimestamp:time.Date(2025, time.March, 17, 18, 45, 23, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"k8s-app":"kube-dns", "pod-template-hash":"7db6d8ff4d", "projectcalico.org/namespace":"kube-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"coredns"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"", Pod:"coredns-7db6d8ff4d-nq4kb", Endpoint:"eth0", ServiceAccountName:"coredns", IPNetworks:[]string{"192.168.88.133/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.kube-system", "ksa.kube-system.coredns"}, InterfaceName:"calife88be78495", MAC:"", Ports:[]v3.WorkloadEndpointPort{v3.WorkloadEndpointPort{Name:"dns", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"UDP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"dns-tcp", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"metrics", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x23c1, HostPort:0x0, HostIP:""}}, AllowSpoofedSourcePrefixes:[]string(nil)}} Mar 17 18:46:00.845847 env[1203]: 2025-03-17 18:46:00.820 [INFO][4101] cni-plugin/k8s.go 387: Calico CNI using IPs: [192.168.88.133/32] ContainerID="eaa37ce96dbf7840a56065c16d8daaaa3ab02fc8f8c3afcde7beac9666f99957" Namespace="kube-system" Pod="coredns-7db6d8ff4d-nq4kb" WorkloadEndpoint="localhost-k8s-coredns--7db6d8ff4d--nq4kb-eth0" Mar 17 18:46:00.845847 env[1203]: 2025-03-17 18:46:00.820 [INFO][4101] cni-plugin/dataplane_linux.go 69: Setting the host side veth name to calife88be78495 ContainerID="eaa37ce96dbf7840a56065c16d8daaaa3ab02fc8f8c3afcde7beac9666f99957" Namespace="kube-system" Pod="coredns-7db6d8ff4d-nq4kb" WorkloadEndpoint="localhost-k8s-coredns--7db6d8ff4d--nq4kb-eth0" Mar 17 18:46:00.845847 env[1203]: 2025-03-17 18:46:00.831 [INFO][4101] cni-plugin/dataplane_linux.go 508: Disabling IPv4 forwarding ContainerID="eaa37ce96dbf7840a56065c16d8daaaa3ab02fc8f8c3afcde7beac9666f99957" Namespace="kube-system" Pod="coredns-7db6d8ff4d-nq4kb" WorkloadEndpoint="localhost-k8s-coredns--7db6d8ff4d--nq4kb-eth0" Mar 17 18:46:00.845847 env[1203]: 2025-03-17 18:46:00.831 [INFO][4101] cni-plugin/k8s.go 414: Added Mac, interface name, and active container ID to endpoint ContainerID="eaa37ce96dbf7840a56065c16d8daaaa3ab02fc8f8c3afcde7beac9666f99957" Namespace="kube-system" Pod="coredns-7db6d8ff4d-nq4kb" WorkloadEndpoint="localhost-k8s-coredns--7db6d8ff4d--nq4kb-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-coredns--7db6d8ff4d--nq4kb-eth0", GenerateName:"coredns-7db6d8ff4d-", Namespace:"kube-system", SelfLink:"", UID:"effac710-cde3-45ed-8e3f-90230de9316c", ResourceVersion:"1000", Generation:0, CreationTimestamp:time.Date(2025, time.March, 17, 18, 45, 23, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"k8s-app":"kube-dns", "pod-template-hash":"7db6d8ff4d", "projectcalico.org/namespace":"kube-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"coredns"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"eaa37ce96dbf7840a56065c16d8daaaa3ab02fc8f8c3afcde7beac9666f99957", Pod:"coredns-7db6d8ff4d-nq4kb", Endpoint:"eth0", ServiceAccountName:"coredns", IPNetworks:[]string{"192.168.88.133/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.kube-system", "ksa.kube-system.coredns"}, InterfaceName:"calife88be78495", MAC:"fa:8a:73:88:4f:25", Ports:[]v3.WorkloadEndpointPort{v3.WorkloadEndpointPort{Name:"dns", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"UDP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"dns-tcp", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"metrics", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x23c1, HostPort:0x0, HostIP:""}}, AllowSpoofedSourcePrefixes:[]string(nil)}} Mar 17 18:46:00.845847 env[1203]: 2025-03-17 18:46:00.843 [INFO][4101] cni-plugin/k8s.go 500: Wrote updated endpoint to datastore ContainerID="eaa37ce96dbf7840a56065c16d8daaaa3ab02fc8f8c3afcde7beac9666f99957" Namespace="kube-system" Pod="coredns-7db6d8ff4d-nq4kb" WorkloadEndpoint="localhost-k8s-coredns--7db6d8ff4d--nq4kb-eth0" Mar 17 18:46:00.854000 audit[4131]: NETFILTER_CFG table=filter:109 family=2 entries=42 op=nft_register_chain pid=4131 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Mar 17 18:46:00.854000 audit[4131]: SYSCALL arch=c000003e syscall=46 success=yes exit=20596 a0=3 a1=7ffdfc208760 a2=0 a3=7ffdfc20874c items=0 ppid=3365 pid=4131 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:46:00.854000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Mar 17 18:46:00.860779 env[1203]: time="2025-03-17T18:46:00.860681710Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Mar 17 18:46:00.860912 env[1203]: time="2025-03-17T18:46:00.860792568Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Mar 17 18:46:00.860912 env[1203]: time="2025-03-17T18:46:00.860827884Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Mar 17 18:46:00.861119 env[1203]: time="2025-03-17T18:46:00.861064007Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/eaa37ce96dbf7840a56065c16d8daaaa3ab02fc8f8c3afcde7beac9666f99957 pid=4138 runtime=io.containerd.runc.v2 Mar 17 18:46:00.876873 systemd[1]: Started cri-containerd-eaa37ce96dbf7840a56065c16d8daaaa3ab02fc8f8c3afcde7beac9666f99957.scope. Mar 17 18:46:00.888000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:46:00.888000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:46:00.888000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:46:00.888000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:46:00.888000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:46:00.888000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:46:00.888000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:46:00.888000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:46:00.888000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:46:00.889000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:46:00.889000 audit: BPF prog-id=185 op=LOAD Mar 17 18:46:00.889000 audit[4147]: AVC avc: denied { bpf } for pid=4147 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:46:00.889000 audit[4147]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000117c48 a2=10 a3=1c items=0 ppid=4138 pid=4147 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:46:00.889000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6561613337636539366462663738343061353630363563313664386461 Mar 17 18:46:00.889000 audit[4147]: AVC avc: denied { perfmon } for pid=4147 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:46:00.889000 audit[4147]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001176b0 a2=3c a3=c items=0 ppid=4138 pid=4147 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:46:00.889000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6561613337636539366462663738343061353630363563313664386461 Mar 17 18:46:00.889000 audit[4147]: AVC avc: denied { bpf } for pid=4147 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:46:00.889000 audit[4147]: AVC avc: denied { bpf } for pid=4147 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:46:00.889000 audit[4147]: AVC avc: denied { bpf } for pid=4147 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:46:00.889000 audit[4147]: AVC avc: denied { perfmon } for pid=4147 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:46:00.889000 audit[4147]: AVC avc: denied { perfmon } for pid=4147 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:46:00.889000 audit[4147]: AVC avc: denied { perfmon } for pid=4147 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:46:00.889000 audit[4147]: AVC avc: denied { perfmon } for pid=4147 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:46:00.889000 audit[4147]: AVC avc: denied { perfmon } for pid=4147 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:46:00.889000 audit[4147]: AVC avc: denied { bpf } for pid=4147 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:46:00.889000 audit[4147]: AVC avc: denied { bpf } for pid=4147 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:46:00.889000 audit: BPF prog-id=186 op=LOAD Mar 17 18:46:00.889000 audit[4147]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001179d8 a2=78 a3=c0001804b0 items=0 ppid=4138 pid=4147 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:46:00.889000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6561613337636539366462663738343061353630363563313664386461 Mar 17 18:46:00.889000 audit[4147]: AVC avc: denied { bpf } for pid=4147 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:46:00.889000 audit[4147]: AVC avc: denied { bpf } for pid=4147 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:46:00.889000 audit[4147]: AVC avc: denied { perfmon } for pid=4147 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:46:00.889000 audit[4147]: AVC avc: denied { perfmon } for pid=4147 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:46:00.889000 audit[4147]: AVC avc: denied { perfmon } for pid=4147 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:46:00.889000 audit[4147]: AVC avc: denied { perfmon } for pid=4147 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:46:00.889000 audit[4147]: AVC avc: denied { perfmon } for pid=4147 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:46:00.889000 audit[4147]: AVC avc: denied { bpf } for pid=4147 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:46:00.889000 audit[4147]: AVC avc: denied { bpf } for pid=4147 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:46:00.889000 audit: BPF prog-id=187 op=LOAD Mar 17 18:46:00.889000 audit[4147]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000117770 a2=78 a3=c0001804f8 items=0 ppid=4138 pid=4147 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:46:00.889000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6561613337636539366462663738343061353630363563313664386461 Mar 17 18:46:00.889000 audit: BPF prog-id=187 op=UNLOAD Mar 17 18:46:00.889000 audit: BPF prog-id=186 op=UNLOAD Mar 17 18:46:00.889000 audit[4147]: AVC avc: denied { bpf } for pid=4147 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:46:00.889000 audit[4147]: AVC avc: denied { bpf } for pid=4147 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:46:00.889000 audit[4147]: AVC avc: denied { bpf } for pid=4147 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:46:00.889000 audit[4147]: AVC avc: denied { perfmon } for pid=4147 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:46:00.889000 audit[4147]: AVC avc: denied { perfmon } for pid=4147 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:46:00.889000 audit[4147]: AVC avc: denied { perfmon } for pid=4147 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:46:00.889000 audit[4147]: AVC avc: denied { perfmon } for pid=4147 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:46:00.889000 audit[4147]: AVC avc: denied { perfmon } for pid=4147 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:46:00.889000 audit[4147]: AVC avc: denied { bpf } for pid=4147 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:46:00.889000 audit[4147]: AVC avc: denied { bpf } for pid=4147 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:46:00.889000 audit: BPF prog-id=188 op=LOAD Mar 17 18:46:00.889000 audit[4147]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000117c30 a2=78 a3=c000180908 items=0 ppid=4138 pid=4147 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:46:00.889000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6561613337636539366462663738343061353630363563313664386461 Mar 17 18:46:00.892310 systemd-resolved[1143]: Failed to determine the local hostname and LLMNR/mDNS names, ignoring: No such device or address Mar 17 18:46:00.920713 env[1203]: time="2025-03-17T18:46:00.920658367Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:coredns-7db6d8ff4d-nq4kb,Uid:effac710-cde3-45ed-8e3f-90230de9316c,Namespace:kube-system,Attempt:1,} returns sandbox id \"eaa37ce96dbf7840a56065c16d8daaaa3ab02fc8f8c3afcde7beac9666f99957\"" Mar 17 18:46:00.921546 kubelet[2045]: E0317 18:46:00.921520 2045 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Mar 17 18:46:00.924511 env[1203]: time="2025-03-17T18:46:00.924481812Z" level=info msg="CreateContainer within sandbox \"eaa37ce96dbf7840a56065c16d8daaaa3ab02fc8f8c3afcde7beac9666f99957\" for container &ContainerMetadata{Name:coredns,Attempt:0,}" Mar 17 18:46:00.939785 env[1203]: time="2025-03-17T18:46:00.939741928Z" level=info msg="CreateContainer within sandbox \"eaa37ce96dbf7840a56065c16d8daaaa3ab02fc8f8c3afcde7beac9666f99957\" for &ContainerMetadata{Name:coredns,Attempt:0,} returns container id \"b393755d89b08e0845893d6897f94da8e86c74ccca205eb91f08d18579746c0a\"" Mar 17 18:46:00.941765 env[1203]: time="2025-03-17T18:46:00.941724838Z" level=info msg="StartContainer for \"b393755d89b08e0845893d6897f94da8e86c74ccca205eb91f08d18579746c0a\"" Mar 17 18:46:00.961314 systemd[1]: Started cri-containerd-b393755d89b08e0845893d6897f94da8e86c74ccca205eb91f08d18579746c0a.scope. Mar 17 18:46:00.972000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:46:00.972000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:46:00.972000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:46:00.972000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:46:00.972000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:46:00.972000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:46:00.972000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:46:00.972000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:46:00.972000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:46:00.975000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:46:00.975000 audit: BPF prog-id=189 op=LOAD Mar 17 18:46:00.976000 audit[4181]: AVC avc: denied { bpf } for pid=4181 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:46:00.976000 audit[4181]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000147c48 a2=10 a3=1c items=0 ppid=4138 pid=4181 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:46:00.976000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6233393337353564383962303865303834353839336436383937663934 Mar 17 18:46:00.976000 audit[4181]: AVC avc: denied { perfmon } for pid=4181 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:46:00.976000 audit[4181]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001476b0 a2=3c a3=8 items=0 ppid=4138 pid=4181 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:46:00.976000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6233393337353564383962303865303834353839336436383937663934 Mar 17 18:46:00.976000 audit[4181]: AVC avc: denied { bpf } for pid=4181 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:46:00.976000 audit[4181]: AVC avc: denied { bpf } for pid=4181 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:46:00.976000 audit[4181]: AVC avc: denied { bpf } for pid=4181 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:46:00.976000 audit[4181]: AVC avc: denied { perfmon } for pid=4181 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:46:00.976000 audit[4181]: AVC avc: denied { perfmon } for pid=4181 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:46:00.976000 audit[4181]: AVC avc: denied { perfmon } for pid=4181 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:46:00.976000 audit[4181]: AVC avc: denied { perfmon } for pid=4181 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:46:00.976000 audit[4181]: AVC avc: denied { perfmon } for pid=4181 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:46:00.976000 audit[4181]: AVC avc: denied { bpf } for pid=4181 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:46:00.976000 audit[4181]: AVC avc: denied { bpf } for pid=4181 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:46:00.976000 audit: BPF prog-id=190 op=LOAD Mar 17 18:46:00.976000 audit[4181]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001479d8 a2=78 a3=c000024c80 items=0 ppid=4138 pid=4181 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:46:00.976000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6233393337353564383962303865303834353839336436383937663934 Mar 17 18:46:00.977000 audit[4181]: AVC avc: denied { bpf } for pid=4181 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:46:00.977000 audit[4181]: AVC avc: denied { bpf } for pid=4181 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:46:00.977000 audit[4181]: AVC avc: denied { perfmon } for pid=4181 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:46:00.977000 audit[4181]: AVC avc: denied { perfmon } for pid=4181 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:46:00.977000 audit[4181]: AVC avc: denied { perfmon } for pid=4181 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:46:00.977000 audit[4181]: AVC avc: denied { perfmon } for pid=4181 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:46:00.977000 audit[4181]: AVC avc: denied { perfmon } for pid=4181 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:46:00.977000 audit[4181]: AVC avc: denied { bpf } for pid=4181 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:46:00.977000 audit[4181]: AVC avc: denied { bpf } for pid=4181 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:46:00.977000 audit: BPF prog-id=191 op=LOAD Mar 17 18:46:00.977000 audit[4181]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000147770 a2=78 a3=c000024cc8 items=0 ppid=4138 pid=4181 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:46:00.977000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6233393337353564383962303865303834353839336436383937663934 Mar 17 18:46:00.977000 audit: BPF prog-id=191 op=UNLOAD Mar 17 18:46:00.977000 audit: BPF prog-id=190 op=UNLOAD Mar 17 18:46:00.977000 audit[4181]: AVC avc: denied { bpf } for pid=4181 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:46:00.977000 audit[4181]: AVC avc: denied { bpf } for pid=4181 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:46:00.977000 audit[4181]: AVC avc: denied { bpf } for pid=4181 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:46:00.977000 audit[4181]: AVC avc: denied { perfmon } for pid=4181 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:46:00.977000 audit[4181]: AVC avc: denied { perfmon } for pid=4181 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:46:00.977000 audit[4181]: AVC avc: denied { perfmon } for pid=4181 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:46:00.977000 audit[4181]: AVC avc: denied { perfmon } for pid=4181 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:46:00.977000 audit[4181]: AVC avc: denied { perfmon } for pid=4181 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:46:00.977000 audit[4181]: AVC avc: denied { bpf } for pid=4181 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:46:00.977000 audit[4181]: AVC avc: denied { bpf } for pid=4181 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:46:00.977000 audit: BPF prog-id=192 op=LOAD Mar 17 18:46:00.977000 audit[4181]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000147c30 a2=78 a3=c0000250d8 items=0 ppid=4138 pid=4181 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:46:00.977000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6233393337353564383962303865303834353839336436383937663934 Mar 17 18:46:00.989799 env[1203]: time="2025-03-17T18:46:00.989752022Z" level=info msg="StartContainer for \"b393755d89b08e0845893d6897f94da8e86c74ccca205eb91f08d18579746c0a\" returns successfully" Mar 17 18:46:00.995393 env[1203]: time="2025-03-17T18:46:00.995363672Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/apiserver:v3.29.1,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Mar 17 18:46:00.998720 env[1203]: time="2025-03-17T18:46:00.998675567Z" level=info msg="ImageUpdate event &ImageUpdate{Name:sha256:421726ace5ed13894f7edf594dd3a462947aedc13d0f69d08525d7369477fb70,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Mar 17 18:46:01.000970 env[1203]: time="2025-03-17T18:46:01.000932974Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/apiserver:v3.29.1,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Mar 17 18:46:01.003261 env[1203]: time="2025-03-17T18:46:01.003235183Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/apiserver@sha256:b8c43e264fe52e0c327b0bf3ac882a0224b33bdd7f4ff58a74242da7d9b00486,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Mar 17 18:46:01.003623 env[1203]: time="2025-03-17T18:46:01.003584780Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/apiserver:v3.29.1\" returns image reference \"sha256:421726ace5ed13894f7edf594dd3a462947aedc13d0f69d08525d7369477fb70\"" Mar 17 18:46:01.005272 env[1203]: time="2025-03-17T18:46:01.005245736Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/kube-controllers:v3.29.1\"" Mar 17 18:46:01.006036 env[1203]: time="2025-03-17T18:46:01.006008086Z" level=info msg="CreateContainer within sandbox \"45ebe75264aeedd3c0f48890f01b5eac4a8f15cf5a4ad8b8e3409da1303c153a\" for container &ContainerMetadata{Name:calico-apiserver,Attempt:0,}" Mar 17 18:46:01.024129 env[1203]: time="2025-03-17T18:46:01.024067504Z" level=info msg="CreateContainer within sandbox \"45ebe75264aeedd3c0f48890f01b5eac4a8f15cf5a4ad8b8e3409da1303c153a\" for &ContainerMetadata{Name:calico-apiserver,Attempt:0,} returns container id \"a799eba9170ecf279f332393c30aaab7fe2229a6757c89bb9f41cfd2fb907c37\"" Mar 17 18:46:01.025072 env[1203]: time="2025-03-17T18:46:01.025031823Z" level=info msg="StartContainer for \"a799eba9170ecf279f332393c30aaab7fe2229a6757c89bb9f41cfd2fb907c37\"" Mar 17 18:46:01.040588 systemd[1]: Started cri-containerd-a799eba9170ecf279f332393c30aaab7fe2229a6757c89bb9f41cfd2fb907c37.scope. Mar 17 18:46:01.052000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:46:01.052000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:46:01.052000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:46:01.052000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:46:01.052000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:46:01.052000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:46:01.052000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:46:01.052000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:46:01.052000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:46:01.052000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:46:01.052000 audit: BPF prog-id=193 op=LOAD Mar 17 18:46:01.053000 audit[4218]: AVC avc: denied { bpf } for pid=4218 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:46:01.053000 audit[4218]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c00014dc48 a2=10 a3=1c items=0 ppid=3760 pid=4218 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:46:01.053000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6137393965626139313730656366323739663333323339336333306161 Mar 17 18:46:01.053000 audit[4218]: AVC avc: denied { perfmon } for pid=4218 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:46:01.053000 audit[4218]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c00014d6b0 a2=3c a3=8 items=0 ppid=3760 pid=4218 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:46:01.053000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6137393965626139313730656366323739663333323339336333306161 Mar 17 18:46:01.053000 audit[4218]: AVC avc: denied { bpf } for pid=4218 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:46:01.053000 audit[4218]: AVC avc: denied { bpf } for pid=4218 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:46:01.053000 audit[4218]: AVC avc: denied { bpf } for pid=4218 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:46:01.053000 audit[4218]: AVC avc: denied { perfmon } for pid=4218 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:46:01.053000 audit[4218]: AVC avc: denied { perfmon } for pid=4218 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:46:01.053000 audit[4218]: AVC avc: denied { perfmon } for pid=4218 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:46:01.053000 audit[4218]: AVC avc: denied { perfmon } for pid=4218 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:46:01.053000 audit[4218]: AVC avc: denied { perfmon } for pid=4218 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:46:01.053000 audit[4218]: AVC avc: denied { bpf } for pid=4218 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:46:01.053000 audit[4218]: AVC avc: denied { bpf } for pid=4218 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:46:01.053000 audit: BPF prog-id=194 op=LOAD Mar 17 18:46:01.053000 audit[4218]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c00014d9d8 a2=78 a3=c0002b24e0 items=0 ppid=3760 pid=4218 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:46:01.053000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6137393965626139313730656366323739663333323339336333306161 Mar 17 18:46:01.053000 audit[4218]: AVC avc: denied { bpf } for pid=4218 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:46:01.053000 audit[4218]: AVC avc: denied { bpf } for pid=4218 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:46:01.053000 audit[4218]: AVC avc: denied { perfmon } for pid=4218 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:46:01.053000 audit[4218]: AVC avc: denied { perfmon } for pid=4218 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:46:01.053000 audit[4218]: AVC avc: denied { perfmon } for pid=4218 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:46:01.053000 audit[4218]: AVC avc: denied { perfmon } for pid=4218 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:46:01.053000 audit[4218]: AVC avc: denied { perfmon } for pid=4218 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:46:01.053000 audit[4218]: AVC avc: denied { bpf } for pid=4218 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:46:01.053000 audit[4218]: AVC avc: denied { bpf } for pid=4218 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:46:01.053000 audit: BPF prog-id=195 op=LOAD Mar 17 18:46:01.053000 audit[4218]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c00014d770 a2=78 a3=c0002b2528 items=0 ppid=3760 pid=4218 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:46:01.053000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6137393965626139313730656366323739663333323339336333306161 Mar 17 18:46:01.053000 audit: BPF prog-id=195 op=UNLOAD Mar 17 18:46:01.053000 audit: BPF prog-id=194 op=UNLOAD Mar 17 18:46:01.053000 audit[4218]: AVC avc: denied { bpf } for pid=4218 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:46:01.053000 audit[4218]: AVC avc: denied { bpf } for pid=4218 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:46:01.053000 audit[4218]: AVC avc: denied { bpf } for pid=4218 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:46:01.053000 audit[4218]: AVC avc: denied { perfmon } for pid=4218 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:46:01.053000 audit[4218]: AVC avc: denied { perfmon } for pid=4218 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:46:01.053000 audit[4218]: AVC avc: denied { perfmon } for pid=4218 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:46:01.053000 audit[4218]: AVC avc: denied { perfmon } for pid=4218 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:46:01.053000 audit[4218]: AVC avc: denied { perfmon } for pid=4218 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:46:01.053000 audit[4218]: AVC avc: denied { bpf } for pid=4218 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:46:01.053000 audit[4218]: AVC avc: denied { bpf } for pid=4218 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:46:01.053000 audit: BPF prog-id=196 op=LOAD Mar 17 18:46:01.053000 audit[4218]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c00014dc30 a2=78 a3=c0002b2938 items=0 ppid=3760 pid=4218 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:46:01.053000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6137393965626139313730656366323739663333323339336333306161 Mar 17 18:46:01.083498 env[1203]: time="2025-03-17T18:46:01.083374658Z" level=info msg="StartContainer for \"a799eba9170ecf279f332393c30aaab7fe2229a6757c89bb9f41cfd2fb907c37\" returns successfully" Mar 17 18:46:01.138972 kubelet[2045]: E0317 18:46:01.138278 2045 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Mar 17 18:46:01.153014 kubelet[2045]: I0317 18:46:01.152959 2045 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="kube-system/coredns-7db6d8ff4d-nq4kb" podStartSLOduration=38.152943599 podStartE2EDuration="38.152943599s" podCreationTimestamp="2025-03-17 18:45:23 +0000 UTC" firstStartedPulling="0001-01-01 00:00:00 +0000 UTC" lastFinishedPulling="0001-01-01 00:00:00 +0000 UTC" observedRunningTime="2025-03-17 18:46:01.15200624 +0000 UTC m=+53.640007079" watchObservedRunningTime="2025-03-17 18:46:01.152943599 +0000 UTC m=+53.640944437" Mar 17 18:46:01.164000 audit[4252]: NETFILTER_CFG table=filter:110 family=2 entries=10 op=nft_register_rule pid=4252 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Mar 17 18:46:01.164000 audit[4252]: SYSCALL arch=c000003e syscall=46 success=yes exit=3676 a0=3 a1=7ffed6ddf3b0 a2=0 a3=7ffed6ddf39c items=0 ppid=2248 pid=4252 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:46:01.164000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Mar 17 18:46:01.169000 audit[4252]: NETFILTER_CFG table=nat:111 family=2 entries=44 op=nft_register_rule pid=4252 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Mar 17 18:46:01.169000 audit[4252]: SYSCALL arch=c000003e syscall=46 success=yes exit=14196 a0=3 a1=7ffed6ddf3b0 a2=0 a3=7ffed6ddf39c items=0 ppid=2248 pid=4252 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:46:01.169000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Mar 17 18:46:01.181007 kubelet[2045]: I0317 18:46:01.180943 2045 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="calico-apiserver/calico-apiserver-5c5c847997-j7phz" podStartSLOduration=28.985749002 podStartE2EDuration="32.180921858s" podCreationTimestamp="2025-03-17 18:45:29 +0000 UTC" firstStartedPulling="2025-03-17 18:45:57.343834226 +0000 UTC m=+49.831835064" lastFinishedPulling="2025-03-17 18:46:00.539007082 +0000 UTC m=+53.027007920" observedRunningTime="2025-03-17 18:46:01.169737782 +0000 UTC m=+53.657738630" watchObservedRunningTime="2025-03-17 18:46:01.180921858 +0000 UTC m=+53.668922686" Mar 17 18:46:01.183000 audit[4254]: NETFILTER_CFG table=filter:112 family=2 entries=10 op=nft_register_rule pid=4254 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Mar 17 18:46:01.183000 audit[4254]: SYSCALL arch=c000003e syscall=46 success=yes exit=3676 a0=3 a1=7ffd4adb1880 a2=0 a3=7ffd4adb186c items=0 ppid=2248 pid=4254 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:46:01.183000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Mar 17 18:46:01.190000 audit[4254]: NETFILTER_CFG table=nat:113 family=2 entries=20 op=nft_register_rule pid=4254 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Mar 17 18:46:01.190000 audit[4254]: SYSCALL arch=c000003e syscall=46 success=yes exit=5772 a0=3 a1=7ffd4adb1880 a2=0 a3=7ffd4adb186c items=0 ppid=2248 pid=4254 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:46:01.190000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Mar 17 18:46:01.314000 audit[4044]: AVC avc: denied { watch } for pid=4044 comm="apiserver" path="/calico-apiserver-certs/..2025_03_17_18_45_44.2054572630/tls.crt" dev="tmpfs" ino=4 scontext=system_u:system_r:svirt_lxc_net_t:s0:c388,c465 tcontext=system_u:object_r:svirt_lxc_file_t:s0:c388,c465 tclass=file permissive=0 Mar 17 18:46:01.314000 audit[4044]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=7 a1=c000b66020 a2=fc6 a3=0 items=0 ppid=3710 pid=4044 auid=4294967295 uid=10001 gid=10001 euid=10001 suid=10001 fsuid=10001 egid=10001 sgid=10001 fsgid=10001 tty=(none) ses=4294967295 comm="apiserver" exe="/code/apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c388,c465 key=(null) Mar 17 18:46:01.314000 audit: PROCTITLE proctitle=2F636F64652F617069736572766572002D2D7365637572652D706F72743D35343433002D2D746C732D707269766174652D6B65792D66696C653D2F63616C69636F2D6170697365727665722D63657274732F746C732E6B6579002D2D746C732D636572742D66696C653D2F63616C69636F2D6170697365727665722D63657274 Mar 17 18:46:01.595587 env[1203]: time="2025-03-17T18:46:01.595532993Z" level=info msg="StopPodSandbox for \"5433c4137b534da4025b730d9c8ec78362c5370579e68f684283036a36a9b595\"" Mar 17 18:46:01.648722 kubelet[2045]: I0317 18:46:01.648468 2045 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="calico-apiserver/calico-apiserver-5c5c847997-cn65r" podStartSLOduration=29.032314463 podStartE2EDuration="32.648447754s" podCreationTimestamp="2025-03-17 18:45:29 +0000 UTC" firstStartedPulling="2025-03-17 18:45:57.388330528 +0000 UTC m=+49.876331366" lastFinishedPulling="2025-03-17 18:46:01.004463819 +0000 UTC m=+53.492464657" observedRunningTime="2025-03-17 18:46:01.195779307 +0000 UTC m=+53.683780165" watchObservedRunningTime="2025-03-17 18:46:01.648447754 +0000 UTC m=+54.136448592" Mar 17 18:46:01.684475 env[1203]: 2025-03-17 18:46:01.650 [INFO][4271] cni-plugin/k8s.go 608: Cleaning up netns ContainerID="5433c4137b534da4025b730d9c8ec78362c5370579e68f684283036a36a9b595" Mar 17 18:46:01.684475 env[1203]: 2025-03-17 18:46:01.650 [INFO][4271] cni-plugin/dataplane_linux.go 559: Deleting workload's device in netns. ContainerID="5433c4137b534da4025b730d9c8ec78362c5370579e68f684283036a36a9b595" iface="eth0" netns="/var/run/netns/cni-52f39ba0-bfb6-7b6a-febb-faf71752c8e8" Mar 17 18:46:01.684475 env[1203]: 2025-03-17 18:46:01.650 [INFO][4271] cni-plugin/dataplane_linux.go 570: Entered netns, deleting veth. ContainerID="5433c4137b534da4025b730d9c8ec78362c5370579e68f684283036a36a9b595" iface="eth0" netns="/var/run/netns/cni-52f39ba0-bfb6-7b6a-febb-faf71752c8e8" Mar 17 18:46:01.684475 env[1203]: 2025-03-17 18:46:01.650 [INFO][4271] cni-plugin/dataplane_linux.go 597: Workload's veth was already gone. Nothing to do. ContainerID="5433c4137b534da4025b730d9c8ec78362c5370579e68f684283036a36a9b595" iface="eth0" netns="/var/run/netns/cni-52f39ba0-bfb6-7b6a-febb-faf71752c8e8" Mar 17 18:46:01.684475 env[1203]: 2025-03-17 18:46:01.651 [INFO][4271] cni-plugin/k8s.go 615: Releasing IP address(es) ContainerID="5433c4137b534da4025b730d9c8ec78362c5370579e68f684283036a36a9b595" Mar 17 18:46:01.684475 env[1203]: 2025-03-17 18:46:01.651 [INFO][4271] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="5433c4137b534da4025b730d9c8ec78362c5370579e68f684283036a36a9b595" Mar 17 18:46:01.684475 env[1203]: 2025-03-17 18:46:01.672 [INFO][4281] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="5433c4137b534da4025b730d9c8ec78362c5370579e68f684283036a36a9b595" HandleID="k8s-pod-network.5433c4137b534da4025b730d9c8ec78362c5370579e68f684283036a36a9b595" Workload="localhost-k8s-csi--node--driver--6vr94-eth0" Mar 17 18:46:01.684475 env[1203]: 2025-03-17 18:46:01.672 [INFO][4281] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Mar 17 18:46:01.684475 env[1203]: 2025-03-17 18:46:01.672 [INFO][4281] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Mar 17 18:46:01.684475 env[1203]: 2025-03-17 18:46:01.677 [WARNING][4281] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="5433c4137b534da4025b730d9c8ec78362c5370579e68f684283036a36a9b595" HandleID="k8s-pod-network.5433c4137b534da4025b730d9c8ec78362c5370579e68f684283036a36a9b595" Workload="localhost-k8s-csi--node--driver--6vr94-eth0" Mar 17 18:46:01.684475 env[1203]: 2025-03-17 18:46:01.677 [INFO][4281] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="5433c4137b534da4025b730d9c8ec78362c5370579e68f684283036a36a9b595" HandleID="k8s-pod-network.5433c4137b534da4025b730d9c8ec78362c5370579e68f684283036a36a9b595" Workload="localhost-k8s-csi--node--driver--6vr94-eth0" Mar 17 18:46:01.684475 env[1203]: 2025-03-17 18:46:01.680 [INFO][4281] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Mar 17 18:46:01.684475 env[1203]: 2025-03-17 18:46:01.682 [INFO][4271] cni-plugin/k8s.go 621: Teardown processing complete. ContainerID="5433c4137b534da4025b730d9c8ec78362c5370579e68f684283036a36a9b595" Mar 17 18:46:01.689440 systemd[1]: run-netns-cni\x2d52f39ba0\x2dbfb6\x2d7b6a\x2dfebb\x2dfaf71752c8e8.mount: Deactivated successfully. Mar 17 18:46:01.690306 env[1203]: time="2025-03-17T18:46:01.690250543Z" level=info msg="TearDown network for sandbox \"5433c4137b534da4025b730d9c8ec78362c5370579e68f684283036a36a9b595\" successfully" Mar 17 18:46:01.690533 env[1203]: time="2025-03-17T18:46:01.690507977Z" level=info msg="StopPodSandbox for \"5433c4137b534da4025b730d9c8ec78362c5370579e68f684283036a36a9b595\" returns successfully" Mar 17 18:46:01.691410 env[1203]: time="2025-03-17T18:46:01.691366006Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:csi-node-driver-6vr94,Uid:42df0b30-e0d7-4f61-83fe-313c16a7f709,Namespace:calico-system,Attempt:1,}" Mar 17 18:46:01.797772 systemd-networkd[1025]: calic9708628f7a: Gained IPv6LL Mar 17 18:46:01.808318 systemd-networkd[1025]: calia9697730678: Link UP Mar 17 18:46:01.811723 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): eth0: link becomes ready Mar 17 18:46:01.811813 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): calia9697730678: link becomes ready Mar 17 18:46:01.809448 systemd-networkd[1025]: calia9697730678: Gained carrier Mar 17 18:46:01.820533 env[1203]: 2025-03-17 18:46:01.739 [INFO][4292] cni-plugin/plugin.go 325: Calico CNI found existing endpoint: &{{WorkloadEndpoint projectcalico.org/v3} {localhost-k8s-csi--node--driver--6vr94-eth0 csi-node-driver- calico-system 42df0b30-e0d7-4f61-83fe-313c16a7f709 1033 0 2025-03-17 18:45:29 +0000 UTC map[app.kubernetes.io/name:csi-node-driver controller-revision-hash:65bf684474 k8s-app:csi-node-driver name:csi-node-driver pod-template-generation:1 projectcalico.org/namespace:calico-system projectcalico.org/orchestrator:k8s projectcalico.org/serviceaccount:csi-node-driver] map[] [] [] []} {k8s localhost csi-node-driver-6vr94 eth0 csi-node-driver [] [] [kns.calico-system ksa.calico-system.csi-node-driver] calia9697730678 [] []}} ContainerID="f153fb114ab1867d15dae847e9b1dc0197826f5bd0132c9807231f3748906926" Namespace="calico-system" Pod="csi-node-driver-6vr94" WorkloadEndpoint="localhost-k8s-csi--node--driver--6vr94-" Mar 17 18:46:01.820533 env[1203]: 2025-03-17 18:46:01.739 [INFO][4292] cni-plugin/k8s.go 77: Extracted identifiers for CmdAddK8s ContainerID="f153fb114ab1867d15dae847e9b1dc0197826f5bd0132c9807231f3748906926" Namespace="calico-system" Pod="csi-node-driver-6vr94" WorkloadEndpoint="localhost-k8s-csi--node--driver--6vr94-eth0" Mar 17 18:46:01.820533 env[1203]: 2025-03-17 18:46:01.769 [INFO][4306] ipam/ipam_plugin.go 225: Calico CNI IPAM request count IPv4=1 IPv6=0 ContainerID="f153fb114ab1867d15dae847e9b1dc0197826f5bd0132c9807231f3748906926" HandleID="k8s-pod-network.f153fb114ab1867d15dae847e9b1dc0197826f5bd0132c9807231f3748906926" Workload="localhost-k8s-csi--node--driver--6vr94-eth0" Mar 17 18:46:01.820533 env[1203]: 2025-03-17 18:46:01.779 [INFO][4306] ipam/ipam_plugin.go 265: Auto assigning IP ContainerID="f153fb114ab1867d15dae847e9b1dc0197826f5bd0132c9807231f3748906926" HandleID="k8s-pod-network.f153fb114ab1867d15dae847e9b1dc0197826f5bd0132c9807231f3748906926" Workload="localhost-k8s-csi--node--driver--6vr94-eth0" assignArgs=ipam.AutoAssignArgs{Num4:1, Num6:0, HandleID:(*string)(0xc0002dcd70), Attrs:map[string]string{"namespace":"calico-system", "node":"localhost", "pod":"csi-node-driver-6vr94", "timestamp":"2025-03-17 18:46:01.769930086 +0000 UTC"}, Hostname:"localhost", IPv4Pools:[]net.IPNet{}, IPv6Pools:[]net.IPNet{}, MaxBlocksPerHost:0, HostReservedAttrIPv4s:(*ipam.HostReservedAttr)(nil), HostReservedAttrIPv6s:(*ipam.HostReservedAttr)(nil), IntendedUse:"Workload"} Mar 17 18:46:01.820533 env[1203]: 2025-03-17 18:46:01.779 [INFO][4306] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Mar 17 18:46:01.820533 env[1203]: 2025-03-17 18:46:01.779 [INFO][4306] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Mar 17 18:46:01.820533 env[1203]: 2025-03-17 18:46:01.779 [INFO][4306] ipam/ipam.go 107: Auto-assign 1 ipv4, 0 ipv6 addrs for host 'localhost' Mar 17 18:46:01.820533 env[1203]: 2025-03-17 18:46:01.781 [INFO][4306] ipam/ipam.go 660: Looking up existing affinities for host handle="k8s-pod-network.f153fb114ab1867d15dae847e9b1dc0197826f5bd0132c9807231f3748906926" host="localhost" Mar 17 18:46:01.820533 env[1203]: 2025-03-17 18:46:01.785 [INFO][4306] ipam/ipam.go 372: Looking up existing affinities for host host="localhost" Mar 17 18:46:01.820533 env[1203]: 2025-03-17 18:46:01.788 [INFO][4306] ipam/ipam.go 489: Trying affinity for 192.168.88.128/26 host="localhost" Mar 17 18:46:01.820533 env[1203]: 2025-03-17 18:46:01.790 [INFO][4306] ipam/ipam.go 155: Attempting to load block cidr=192.168.88.128/26 host="localhost" Mar 17 18:46:01.820533 env[1203]: 2025-03-17 18:46:01.792 [INFO][4306] ipam/ipam.go 232: Affinity is confirmed and block has been loaded cidr=192.168.88.128/26 host="localhost" Mar 17 18:46:01.820533 env[1203]: 2025-03-17 18:46:01.792 [INFO][4306] ipam/ipam.go 1180: Attempting to assign 1 addresses from block block=192.168.88.128/26 handle="k8s-pod-network.f153fb114ab1867d15dae847e9b1dc0197826f5bd0132c9807231f3748906926" host="localhost" Mar 17 18:46:01.820533 env[1203]: 2025-03-17 18:46:01.794 [INFO][4306] ipam/ipam.go 1685: Creating new handle: k8s-pod-network.f153fb114ab1867d15dae847e9b1dc0197826f5bd0132c9807231f3748906926 Mar 17 18:46:01.820533 env[1203]: 2025-03-17 18:46:01.797 [INFO][4306] ipam/ipam.go 1203: Writing block in order to claim IPs block=192.168.88.128/26 handle="k8s-pod-network.f153fb114ab1867d15dae847e9b1dc0197826f5bd0132c9807231f3748906926" host="localhost" Mar 17 18:46:01.820533 env[1203]: 2025-03-17 18:46:01.801 [INFO][4306] ipam/ipam.go 1216: Successfully claimed IPs: [192.168.88.134/26] block=192.168.88.128/26 handle="k8s-pod-network.f153fb114ab1867d15dae847e9b1dc0197826f5bd0132c9807231f3748906926" host="localhost" Mar 17 18:46:01.820533 env[1203]: 2025-03-17 18:46:01.801 [INFO][4306] ipam/ipam.go 847: Auto-assigned 1 out of 1 IPv4s: [192.168.88.134/26] handle="k8s-pod-network.f153fb114ab1867d15dae847e9b1dc0197826f5bd0132c9807231f3748906926" host="localhost" Mar 17 18:46:01.820533 env[1203]: 2025-03-17 18:46:01.801 [INFO][4306] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Mar 17 18:46:01.820533 env[1203]: 2025-03-17 18:46:01.801 [INFO][4306] ipam/ipam_plugin.go 283: Calico CNI IPAM assigned addresses IPv4=[192.168.88.134/26] IPv6=[] ContainerID="f153fb114ab1867d15dae847e9b1dc0197826f5bd0132c9807231f3748906926" HandleID="k8s-pod-network.f153fb114ab1867d15dae847e9b1dc0197826f5bd0132c9807231f3748906926" Workload="localhost-k8s-csi--node--driver--6vr94-eth0" Mar 17 18:46:01.821309 env[1203]: 2025-03-17 18:46:01.804 [INFO][4292] cni-plugin/k8s.go 386: Populated endpoint ContainerID="f153fb114ab1867d15dae847e9b1dc0197826f5bd0132c9807231f3748906926" Namespace="calico-system" Pod="csi-node-driver-6vr94" WorkloadEndpoint="localhost-k8s-csi--node--driver--6vr94-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-csi--node--driver--6vr94-eth0", GenerateName:"csi-node-driver-", Namespace:"calico-system", SelfLink:"", UID:"42df0b30-e0d7-4f61-83fe-313c16a7f709", ResourceVersion:"1033", Generation:0, CreationTimestamp:time.Date(2025, time.March, 17, 18, 45, 29, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"csi-node-driver", "controller-revision-hash":"65bf684474", "k8s-app":"csi-node-driver", "name":"csi-node-driver", "pod-template-generation":"1", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"csi-node-driver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"", Pod:"csi-node-driver-6vr94", Endpoint:"eth0", ServiceAccountName:"csi-node-driver", IPNetworks:[]string{"192.168.88.134/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.csi-node-driver"}, InterfaceName:"calia9697730678", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil)}} Mar 17 18:46:01.821309 env[1203]: 2025-03-17 18:46:01.804 [INFO][4292] cni-plugin/k8s.go 387: Calico CNI using IPs: [192.168.88.134/32] ContainerID="f153fb114ab1867d15dae847e9b1dc0197826f5bd0132c9807231f3748906926" Namespace="calico-system" Pod="csi-node-driver-6vr94" WorkloadEndpoint="localhost-k8s-csi--node--driver--6vr94-eth0" Mar 17 18:46:01.821309 env[1203]: 2025-03-17 18:46:01.804 [INFO][4292] cni-plugin/dataplane_linux.go 69: Setting the host side veth name to calia9697730678 ContainerID="f153fb114ab1867d15dae847e9b1dc0197826f5bd0132c9807231f3748906926" Namespace="calico-system" Pod="csi-node-driver-6vr94" WorkloadEndpoint="localhost-k8s-csi--node--driver--6vr94-eth0" Mar 17 18:46:01.821309 env[1203]: 2025-03-17 18:46:01.807 [INFO][4292] cni-plugin/dataplane_linux.go 508: Disabling IPv4 forwarding ContainerID="f153fb114ab1867d15dae847e9b1dc0197826f5bd0132c9807231f3748906926" Namespace="calico-system" Pod="csi-node-driver-6vr94" WorkloadEndpoint="localhost-k8s-csi--node--driver--6vr94-eth0" Mar 17 18:46:01.821309 env[1203]: 2025-03-17 18:46:01.807 [INFO][4292] cni-plugin/k8s.go 414: Added Mac, interface name, and active container ID to endpoint ContainerID="f153fb114ab1867d15dae847e9b1dc0197826f5bd0132c9807231f3748906926" Namespace="calico-system" Pod="csi-node-driver-6vr94" WorkloadEndpoint="localhost-k8s-csi--node--driver--6vr94-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-csi--node--driver--6vr94-eth0", GenerateName:"csi-node-driver-", Namespace:"calico-system", SelfLink:"", UID:"42df0b30-e0d7-4f61-83fe-313c16a7f709", ResourceVersion:"1033", Generation:0, CreationTimestamp:time.Date(2025, time.March, 17, 18, 45, 29, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"csi-node-driver", "controller-revision-hash":"65bf684474", "k8s-app":"csi-node-driver", "name":"csi-node-driver", "pod-template-generation":"1", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"csi-node-driver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"f153fb114ab1867d15dae847e9b1dc0197826f5bd0132c9807231f3748906926", Pod:"csi-node-driver-6vr94", Endpoint:"eth0", ServiceAccountName:"csi-node-driver", IPNetworks:[]string{"192.168.88.134/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.csi-node-driver"}, InterfaceName:"calia9697730678", MAC:"2e:b1:e8:ba:6b:ba", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil)}} Mar 17 18:46:01.821309 env[1203]: 2025-03-17 18:46:01.818 [INFO][4292] cni-plugin/k8s.go 500: Wrote updated endpoint to datastore ContainerID="f153fb114ab1867d15dae847e9b1dc0197826f5bd0132c9807231f3748906926" Namespace="calico-system" Pod="csi-node-driver-6vr94" WorkloadEndpoint="localhost-k8s-csi--node--driver--6vr94-eth0" Mar 17 18:46:01.835000 audit[4332]: NETFILTER_CFG table=filter:114 family=2 entries=50 op=nft_register_chain pid=4332 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Mar 17 18:46:01.835000 audit[4332]: SYSCALL arch=c000003e syscall=46 success=yes exit=23392 a0=3 a1=7ffda9405f30 a2=0 a3=7ffda9405f1c items=0 ppid=3365 pid=4332 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:46:01.835000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Mar 17 18:46:01.836897 env[1203]: time="2025-03-17T18:46:01.836822965Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Mar 17 18:46:01.836982 env[1203]: time="2025-03-17T18:46:01.836889820Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Mar 17 18:46:01.836982 env[1203]: time="2025-03-17T18:46:01.836913044Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Mar 17 18:46:01.837072 env[1203]: time="2025-03-17T18:46:01.837045682Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/f153fb114ab1867d15dae847e9b1dc0197826f5bd0132c9807231f3748906926 pid=4335 runtime=io.containerd.runc.v2 Mar 17 18:46:01.851815 systemd[1]: Started cri-containerd-f153fb114ab1867d15dae847e9b1dc0197826f5bd0132c9807231f3748906926.scope. Mar 17 18:46:01.872000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:46:01.872000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:46:01.872000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:46:01.872000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:46:01.872000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:46:01.872000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:46:01.872000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:46:01.872000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:46:01.872000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:46:01.872000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:46:01.872000 audit: BPF prog-id=197 op=LOAD Mar 17 18:46:01.873000 audit[4347]: AVC avc: denied { bpf } for pid=4347 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:46:01.873000 audit[4347]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c0001bdc48 a2=10 a3=1c items=0 ppid=4335 pid=4347 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:46:01.873000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6631353366623131346162313836376431356461653834376539623164 Mar 17 18:46:01.873000 audit[4347]: AVC avc: denied { perfmon } for pid=4347 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:46:01.873000 audit[4347]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001bd6b0 a2=3c a3=c items=0 ppid=4335 pid=4347 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:46:01.873000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6631353366623131346162313836376431356461653834376539623164 Mar 17 18:46:01.873000 audit[4347]: AVC avc: denied { bpf } for pid=4347 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:46:01.873000 audit[4347]: AVC avc: denied { bpf } for pid=4347 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:46:01.873000 audit[4347]: AVC avc: denied { bpf } for pid=4347 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:46:01.873000 audit[4347]: AVC avc: denied { perfmon } for pid=4347 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:46:01.873000 audit[4347]: AVC avc: denied { perfmon } for pid=4347 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:46:01.873000 audit[4347]: AVC avc: denied { perfmon } for pid=4347 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:46:01.873000 audit[4347]: AVC avc: denied { perfmon } for pid=4347 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:46:01.873000 audit[4347]: AVC avc: denied { perfmon } for pid=4347 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:46:01.873000 audit[4347]: AVC avc: denied { bpf } for pid=4347 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:46:01.873000 audit[4347]: AVC avc: denied { bpf } for pid=4347 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:46:01.873000 audit: BPF prog-id=198 op=LOAD Mar 17 18:46:01.873000 audit[4347]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001bd9d8 a2=78 a3=c0002405a0 items=0 ppid=4335 pid=4347 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:46:01.873000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6631353366623131346162313836376431356461653834376539623164 Mar 17 18:46:01.873000 audit[4347]: AVC avc: denied { bpf } for pid=4347 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:46:01.873000 audit[4347]: AVC avc: denied { bpf } for pid=4347 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:46:01.873000 audit[4347]: AVC avc: denied { perfmon } for pid=4347 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:46:01.873000 audit[4347]: AVC avc: denied { perfmon } for pid=4347 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:46:01.873000 audit[4347]: AVC avc: denied { perfmon } for pid=4347 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:46:01.873000 audit[4347]: AVC avc: denied { perfmon } for pid=4347 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:46:01.873000 audit[4347]: AVC avc: denied { perfmon } for pid=4347 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:46:01.873000 audit[4347]: AVC avc: denied { bpf } for pid=4347 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:46:01.873000 audit[4347]: AVC avc: denied { bpf } for pid=4347 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:46:01.873000 audit: BPF prog-id=199 op=LOAD Mar 17 18:46:01.873000 audit[4347]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c0001bd770 a2=78 a3=c0002405e8 items=0 ppid=4335 pid=4347 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:46:01.873000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6631353366623131346162313836376431356461653834376539623164 Mar 17 18:46:01.873000 audit: BPF prog-id=199 op=UNLOAD Mar 17 18:46:01.873000 audit: BPF prog-id=198 op=UNLOAD Mar 17 18:46:01.873000 audit[4347]: AVC avc: denied { bpf } for pid=4347 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:46:01.873000 audit[4347]: AVC avc: denied { bpf } for pid=4347 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:46:01.873000 audit[4347]: AVC avc: denied { bpf } for pid=4347 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:46:01.873000 audit[4347]: AVC avc: denied { perfmon } for pid=4347 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:46:01.873000 audit[4347]: AVC avc: denied { perfmon } for pid=4347 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:46:01.873000 audit[4347]: AVC avc: denied { perfmon } for pid=4347 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:46:01.873000 audit[4347]: AVC avc: denied { perfmon } for pid=4347 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:46:01.873000 audit[4347]: AVC avc: denied { perfmon } for pid=4347 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:46:01.873000 audit[4347]: AVC avc: denied { bpf } for pid=4347 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:46:01.873000 audit[4347]: AVC avc: denied { bpf } for pid=4347 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:46:01.873000 audit: BPF prog-id=200 op=LOAD Mar 17 18:46:01.873000 audit[4347]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001bdc30 a2=78 a3=c0002409f8 items=0 ppid=4335 pid=4347 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:46:01.873000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6631353366623131346162313836376431356461653834376539623164 Mar 17 18:46:01.874843 systemd-resolved[1143]: Failed to determine the local hostname and LLMNR/mDNS names, ignoring: No such device or address Mar 17 18:46:01.886894 env[1203]: time="2025-03-17T18:46:01.886836461Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:csi-node-driver-6vr94,Uid:42df0b30-e0d7-4f61-83fe-313c16a7f709,Namespace:calico-system,Attempt:1,} returns sandbox id \"f153fb114ab1867d15dae847e9b1dc0197826f5bd0132c9807231f3748906926\"" Mar 17 18:46:02.051000 audit[4229]: AVC avc: denied { watch } for pid=4229 comm="apiserver" path="/calico-apiserver-certs/..2025_03_17_18_45_44.1107669901/tls.crt" dev="tmpfs" ino=4 scontext=system_u:system_r:svirt_lxc_net_t:s0:c188,c321 tcontext=system_u:object_r:svirt_lxc_file_t:s0:c188,c321 tclass=file permissive=0 Mar 17 18:46:02.051000 audit[4229]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=7 a1=c0004f7f80 a2=fc6 a3=0 items=0 ppid=3760 pid=4229 auid=4294967295 uid=10001 gid=10001 euid=10001 suid=10001 fsuid=10001 egid=10001 sgid=10001 fsgid=10001 tty=(none) ses=4294967295 comm="apiserver" exe="/code/apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c188,c321 key=(null) Mar 17 18:46:02.051000 audit: PROCTITLE proctitle=2F636F64652F617069736572766572002D2D7365637572652D706F72743D35343433002D2D746C732D707269766174652D6B65792D66696C653D2F63616C69636F2D6170697365727665722D63657274732F746C732E6B6579002D2D746C732D636572742D66696C653D2F63616C69636F2D6170697365727665722D63657274 Mar 17 18:46:02.145548 kubelet[2045]: I0317 18:46:02.145410 2045 prober_manager.go:312] "Failed to trigger a manual run" probe="Readiness" Mar 17 18:46:02.145548 kubelet[2045]: I0317 18:46:02.145427 2045 prober_manager.go:312] "Failed to trigger a manual run" probe="Readiness" Mar 17 18:46:02.145976 kubelet[2045]: E0317 18:46:02.145936 2045 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Mar 17 18:46:02.203000 audit[4371]: NETFILTER_CFG table=filter:115 family=2 entries=10 op=nft_register_rule pid=4371 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Mar 17 18:46:02.205258 kernel: kauditd_printk_skb: 619 callbacks suppressed Mar 17 18:46:02.205313 kernel: audit: type=1325 audit(1742237162.203:1363): table=filter:115 family=2 entries=10 op=nft_register_rule pid=4371 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Mar 17 18:46:02.203000 audit[4371]: SYSCALL arch=c000003e syscall=46 success=yes exit=3676 a0=3 a1=7ffcb07bf1a0 a2=0 a3=7ffcb07bf18c items=0 ppid=2248 pid=4371 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:46:02.214400 kernel: audit: type=1300 audit(1742237162.203:1363): arch=c000003e syscall=46 success=yes exit=3676 a0=3 a1=7ffcb07bf1a0 a2=0 a3=7ffcb07bf18c items=0 ppid=2248 pid=4371 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:46:02.203000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Mar 17 18:46:02.217598 kernel: audit: type=1327 audit(1742237162.203:1363): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Mar 17 18:46:02.224000 audit[4371]: NETFILTER_CFG table=nat:116 family=2 entries=56 op=nft_register_chain pid=4371 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Mar 17 18:46:02.224000 audit[4371]: SYSCALL arch=c000003e syscall=46 success=yes exit=19860 a0=3 a1=7ffcb07bf1a0 a2=0 a3=7ffcb07bf18c items=0 ppid=2248 pid=4371 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:46:02.234649 kernel: audit: type=1325 audit(1742237162.224:1364): table=nat:116 family=2 entries=56 op=nft_register_chain pid=4371 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Mar 17 18:46:02.234696 kernel: audit: type=1300 audit(1742237162.224:1364): arch=c000003e syscall=46 success=yes exit=19860 a0=3 a1=7ffcb07bf1a0 a2=0 a3=7ffcb07bf18c items=0 ppid=2248 pid=4371 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:46:02.234713 kernel: audit: type=1327 audit(1742237162.224:1364): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Mar 17 18:46:02.224000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Mar 17 18:46:02.577000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@14-10.0.0.110:22-10.0.0.1:37568 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:46:02.578090 systemd[1]: Started sshd@14-10.0.0.110:22-10.0.0.1:37568.service. Mar 17 18:46:02.583667 kernel: audit: type=1130 audit(1742237162.577:1365): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@14-10.0.0.110:22-10.0.0.1:37568 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:46:02.615000 audit[4374]: USER_ACCT pid=4374 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Mar 17 18:46:02.616106 sshd[4374]: Accepted publickey for core from 10.0.0.1 port 37568 ssh2: RSA SHA256:EcJpbXadXymLrINQtrmLSqTXC2wy0UoSwO9MmZb5CTo Mar 17 18:46:02.621318 sshd[4374]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Mar 17 18:46:02.620000 audit[4374]: CRED_ACQ pid=4374 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Mar 17 18:46:02.625994 systemd-logind[1188]: New session 15 of user core. Mar 17 18:46:02.626659 kernel: audit: type=1101 audit(1742237162.615:1366): pid=4374 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Mar 17 18:46:02.626718 kernel: audit: type=1103 audit(1742237162.620:1367): pid=4374 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Mar 17 18:46:02.626993 systemd[1]: Started session-15.scope. Mar 17 18:46:02.629768 systemd-networkd[1025]: calife88be78495: Gained IPv6LL Mar 17 18:46:02.630769 kernel: audit: type=1006 audit(1742237162.620:1368): pid=4374 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=15 res=1 Mar 17 18:46:02.620000 audit[4374]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7fff25120e90 a2=3 a3=0 items=0 ppid=1 pid=4374 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=15 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:46:02.620000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Mar 17 18:46:02.634000 audit[4374]: USER_START pid=4374 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Mar 17 18:46:02.634000 audit[4376]: CRED_ACQ pid=4376 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Mar 17 18:46:02.757704 sshd[4374]: pam_unix(sshd:session): session closed for user core Mar 17 18:46:02.758000 audit[4374]: USER_END pid=4374 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Mar 17 18:46:02.758000 audit[4374]: CRED_DISP pid=4374 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Mar 17 18:46:02.760010 systemd[1]: sshd@14-10.0.0.110:22-10.0.0.1:37568.service: Deactivated successfully. Mar 17 18:46:02.759000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@14-10.0.0.110:22-10.0.0.1:37568 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:46:02.760731 systemd[1]: session-15.scope: Deactivated successfully. Mar 17 18:46:02.761220 systemd-logind[1188]: Session 15 logged out. Waiting for processes to exit. Mar 17 18:46:02.761931 systemd-logind[1188]: Removed session 15. Mar 17 18:46:03.147150 kubelet[2045]: E0317 18:46:03.147116 2045 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Mar 17 18:46:03.652774 systemd-networkd[1025]: calia9697730678: Gained IPv6LL Mar 17 18:46:03.720640 env[1203]: time="2025-03-17T18:46:03.720579483Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/kube-controllers:v3.29.1,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Mar 17 18:46:03.723073 env[1203]: time="2025-03-17T18:46:03.723028238Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:6331715a2ae96b18a770a395cac108321d108e445e08b616e5bc9fbd1f9c21da,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Mar 17 18:46:03.724832 env[1203]: time="2025-03-17T18:46:03.724795674Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/kube-controllers:v3.29.1,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Mar 17 18:46:03.726163 env[1203]: time="2025-03-17T18:46:03.726130669Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/kube-controllers@sha256:1072d6a98167a14ca361e9ce757733f9bae36d1f1c6a9621ea10934b6b1e10d9,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Mar 17 18:46:03.726689 env[1203]: time="2025-03-17T18:46:03.726622591Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/kube-controllers:v3.29.1\" returns image reference \"sha256:6331715a2ae96b18a770a395cac108321d108e445e08b616e5bc9fbd1f9c21da\"" Mar 17 18:46:03.727873 env[1203]: time="2025-03-17T18:46:03.727759725Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/csi:v3.29.1\"" Mar 17 18:46:03.738352 env[1203]: time="2025-03-17T18:46:03.738308357Z" level=info msg="CreateContainer within sandbox \"0fd655df7396e878196a10af95b0ab038595338d335b8e10e99d9356062067dd\" for container &ContainerMetadata{Name:calico-kube-controllers,Attempt:0,}" Mar 17 18:46:03.751964 env[1203]: time="2025-03-17T18:46:03.751906490Z" level=info msg="CreateContainer within sandbox \"0fd655df7396e878196a10af95b0ab038595338d335b8e10e99d9356062067dd\" for &ContainerMetadata{Name:calico-kube-controllers,Attempt:0,} returns container id \"56dd5c0a8abe78dd01b46f2a6a096ef4ad0c129f7cb83d78a7595367515c0a95\"" Mar 17 18:46:03.752690 env[1203]: time="2025-03-17T18:46:03.752620330Z" level=info msg="StartContainer for \"56dd5c0a8abe78dd01b46f2a6a096ef4ad0c129f7cb83d78a7595367515c0a95\"" Mar 17 18:46:03.775321 systemd[1]: Started cri-containerd-56dd5c0a8abe78dd01b46f2a6a096ef4ad0c129f7cb83d78a7595367515c0a95.scope. Mar 17 18:46:03.791000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:46:03.791000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:46:03.791000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:46:03.791000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:46:03.791000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:46:03.791000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:46:03.791000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:46:03.791000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:46:03.791000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:46:03.791000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:46:03.791000 audit: BPF prog-id=201 op=LOAD Mar 17 18:46:03.792000 audit[4396]: AVC avc: denied { bpf } for pid=4396 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:46:03.792000 audit[4396]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c0001bdc48 a2=10 a3=1c items=0 ppid=3995 pid=4396 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:46:03.792000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3536646435633061386162653738646430316234366632613661303936 Mar 17 18:46:03.792000 audit[4396]: AVC avc: denied { perfmon } for pid=4396 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:46:03.792000 audit[4396]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001bd6b0 a2=3c a3=8 items=0 ppid=3995 pid=4396 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:46:03.792000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3536646435633061386162653738646430316234366632613661303936 Mar 17 18:46:03.792000 audit[4396]: AVC avc: denied { bpf } for pid=4396 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:46:03.792000 audit[4396]: AVC avc: denied { bpf } for pid=4396 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:46:03.792000 audit[4396]: AVC avc: denied { bpf } for pid=4396 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:46:03.792000 audit[4396]: AVC avc: denied { perfmon } for pid=4396 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:46:03.792000 audit[4396]: AVC avc: denied { perfmon } for pid=4396 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:46:03.792000 audit[4396]: AVC avc: denied { perfmon } for pid=4396 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:46:03.792000 audit[4396]: AVC avc: denied { perfmon } for pid=4396 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:46:03.792000 audit[4396]: AVC avc: denied { perfmon } for pid=4396 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:46:03.792000 audit[4396]: AVC avc: denied { bpf } for pid=4396 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:46:03.792000 audit[4396]: AVC avc: denied { bpf } for pid=4396 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:46:03.792000 audit: BPF prog-id=202 op=LOAD Mar 17 18:46:03.792000 audit[4396]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001bd9d8 a2=78 a3=c0003565f0 items=0 ppid=3995 pid=4396 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:46:03.792000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3536646435633061386162653738646430316234366632613661303936 Mar 17 18:46:03.792000 audit[4396]: AVC avc: denied { bpf } for pid=4396 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:46:03.792000 audit[4396]: AVC avc: denied { bpf } for pid=4396 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:46:03.792000 audit[4396]: AVC avc: denied { perfmon } for pid=4396 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:46:03.792000 audit[4396]: AVC avc: denied { perfmon } for pid=4396 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:46:03.792000 audit[4396]: AVC avc: denied { perfmon } for pid=4396 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:46:03.792000 audit[4396]: AVC avc: denied { perfmon } for pid=4396 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:46:03.792000 audit[4396]: AVC avc: denied { perfmon } for pid=4396 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:46:03.792000 audit[4396]: AVC avc: denied { bpf } for pid=4396 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:46:03.792000 audit[4396]: AVC avc: denied { bpf } for pid=4396 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:46:03.792000 audit: BPF prog-id=203 op=LOAD Mar 17 18:46:03.792000 audit[4396]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c0001bd770 a2=78 a3=c000356638 items=0 ppid=3995 pid=4396 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:46:03.792000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3536646435633061386162653738646430316234366632613661303936 Mar 17 18:46:03.792000 audit: BPF prog-id=203 op=UNLOAD Mar 17 18:46:03.792000 audit: BPF prog-id=202 op=UNLOAD Mar 17 18:46:03.792000 audit[4396]: AVC avc: denied { bpf } for pid=4396 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:46:03.792000 audit[4396]: AVC avc: denied { bpf } for pid=4396 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:46:03.792000 audit[4396]: AVC avc: denied { bpf } for pid=4396 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:46:03.792000 audit[4396]: AVC avc: denied { perfmon } for pid=4396 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:46:03.792000 audit[4396]: AVC avc: denied { perfmon } for pid=4396 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:46:03.792000 audit[4396]: AVC avc: denied { perfmon } for pid=4396 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:46:03.792000 audit[4396]: AVC avc: denied { perfmon } for pid=4396 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:46:03.792000 audit[4396]: AVC avc: denied { perfmon } for pid=4396 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:46:03.792000 audit[4396]: AVC avc: denied { bpf } for pid=4396 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:46:03.792000 audit[4396]: AVC avc: denied { bpf } for pid=4396 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:46:03.792000 audit: BPF prog-id=204 op=LOAD Mar 17 18:46:03.792000 audit[4396]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001bdc30 a2=78 a3=c000356a48 items=0 ppid=3995 pid=4396 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:46:03.792000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3536646435633061386162653738646430316234366632613661303936 Mar 17 18:46:03.820849 env[1203]: time="2025-03-17T18:46:03.820799611Z" level=info msg="StartContainer for \"56dd5c0a8abe78dd01b46f2a6a096ef4ad0c129f7cb83d78a7595367515c0a95\" returns successfully" Mar 17 18:46:04.159501 kubelet[2045]: I0317 18:46:04.158332 2045 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="calico-system/calico-kube-controllers-56d6765747-9mr6w" podStartSLOduration=31.43639934 podStartE2EDuration="35.158316995s" podCreationTimestamp="2025-03-17 18:45:29 +0000 UTC" firstStartedPulling="2025-03-17 18:46:00.005609643 +0000 UTC m=+52.493610481" lastFinishedPulling="2025-03-17 18:46:03.727527288 +0000 UTC m=+56.215528136" observedRunningTime="2025-03-17 18:46:04.158111981 +0000 UTC m=+56.646112819" watchObservedRunningTime="2025-03-17 18:46:04.158316995 +0000 UTC m=+56.646317833" Mar 17 18:46:04.733961 systemd[1]: run-containerd-runc-k8s.io-56dd5c0a8abe78dd01b46f2a6a096ef4ad0c129f7cb83d78a7595367515c0a95-runc.h9EPDJ.mount: Deactivated successfully. Mar 17 18:46:05.092000 audit[1905]: AVC avc: denied { watch } for pid=1905 comm="kube-apiserver" path="/etc/kubernetes/pki/apiserver.crt" dev="vda9" ino=8232 scontext=system_u:system_r:svirt_lxc_net_t:s0:c311,c316 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Mar 17 18:46:05.092000 audit[1905]: AVC avc: denied { watch } for pid=1905 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="vda9" ino=8236 scontext=system_u:system_r:svirt_lxc_net_t:s0:c311,c316 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Mar 17 18:46:05.092000 audit[1905]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=76 a1=c009e083c0 a2=fc6 a3=0 items=0 ppid=1777 pid=1905 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c311,c316 key=(null) Mar 17 18:46:05.092000 audit[1905]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=77 a1=c0095d0d50 a2=fc6 a3=0 items=0 ppid=1777 pid=1905 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c311,c316 key=(null) Mar 17 18:46:05.092000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E313130002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75626572 Mar 17 18:46:05.092000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E313130002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75626572 Mar 17 18:46:05.092000 audit[1905]: AVC avc: denied { watch } for pid=1905 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=8230 scontext=system_u:system_r:svirt_lxc_net_t:s0:c311,c316 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Mar 17 18:46:05.092000 audit[1905]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=78 a1=c00d7878e0 a2=fc6 a3=0 items=0 ppid=1777 pid=1905 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c311,c316 key=(null) Mar 17 18:46:05.092000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E313130002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75626572 Mar 17 18:46:05.097000 audit[1905]: AVC avc: denied { watch } for pid=1905 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-client.crt" dev="vda9" ino=8238 scontext=system_u:system_r:svirt_lxc_net_t:s0:c311,c316 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Mar 17 18:46:05.097000 audit[1905]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=75 a1=c0095d0db0 a2=fc6 a3=0 items=0 ppid=1777 pid=1905 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c311,c316 key=(null) Mar 17 18:46:05.097000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E313130002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75626572 Mar 17 18:46:05.099000 audit[1905]: AVC avc: denied { watch } for pid=1905 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=8230 scontext=system_u:system_r:svirt_lxc_net_t:s0:c311,c316 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Mar 17 18:46:05.099000 audit[1905]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=75 a1=c007234a20 a2=fc6 a3=0 items=0 ppid=1777 pid=1905 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c311,c316 key=(null) Mar 17 18:46:05.099000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E313130002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75626572 Mar 17 18:46:05.105000 audit[1905]: AVC avc: denied { watch } for pid=1905 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="vda9" ino=8236 scontext=system_u:system_r:svirt_lxc_net_t:s0:c311,c316 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Mar 17 18:46:05.105000 audit[1905]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=75 a1=c0095d0e10 a2=fc6 a3=0 items=0 ppid=1777 pid=1905 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c311,c316 key=(null) Mar 17 18:46:05.105000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E313130002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75626572 Mar 17 18:46:05.279577 env[1203]: time="2025-03-17T18:46:05.279521436Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/csi:v3.29.1,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Mar 17 18:46:05.281497 env[1203]: time="2025-03-17T18:46:05.281466214Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:bda8c42e04758c4f061339e213f50ccdc7502c4176fbf631aa12357e62b63540,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Mar 17 18:46:05.283119 env[1203]: time="2025-03-17T18:46:05.283073149Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/csi:v3.29.1,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Mar 17 18:46:05.284695 env[1203]: time="2025-03-17T18:46:05.284648936Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/csi@sha256:eaa7e01fb16b603c155a67b81f16992281db7f831684c7b2081d3434587a7ff3,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Mar 17 18:46:05.285159 env[1203]: time="2025-03-17T18:46:05.285121862Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/csi:v3.29.1\" returns image reference \"sha256:bda8c42e04758c4f061339e213f50ccdc7502c4176fbf631aa12357e62b63540\"" Mar 17 18:46:05.287343 env[1203]: time="2025-03-17T18:46:05.287306211Z" level=info msg="CreateContainer within sandbox \"f153fb114ab1867d15dae847e9b1dc0197826f5bd0132c9807231f3748906926\" for container &ContainerMetadata{Name:calico-csi,Attempt:0,}" Mar 17 18:46:05.305025 env[1203]: time="2025-03-17T18:46:05.304969699Z" level=info msg="CreateContainer within sandbox \"f153fb114ab1867d15dae847e9b1dc0197826f5bd0132c9807231f3748906926\" for &ContainerMetadata{Name:calico-csi,Attempt:0,} returns container id \"f8b738d5844622ca4e92e77c03c5f4b62b65d98874e20255b9f26a9843e5b637\"" Mar 17 18:46:05.305709 env[1203]: time="2025-03-17T18:46:05.305493081Z" level=info msg="StartContainer for \"f8b738d5844622ca4e92e77c03c5f4b62b65d98874e20255b9f26a9843e5b637\"" Mar 17 18:46:05.331159 systemd[1]: Started cri-containerd-f8b738d5844622ca4e92e77c03c5f4b62b65d98874e20255b9f26a9843e5b637.scope. Mar 17 18:46:05.343000 audit[4455]: AVC avc: denied { perfmon } for pid=4455 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:46:05.343000 audit[4455]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=0 a1=c0001456b0 a2=3c a3=7f2b95c936d8 items=0 ppid=4335 pid=4455 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:46:05.343000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6638623733386435383434363232636134653932653737633033633566 Mar 17 18:46:05.343000 audit[4455]: AVC avc: denied { bpf } for pid=4455 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:46:05.343000 audit[4455]: AVC avc: denied { bpf } for pid=4455 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:46:05.343000 audit[4455]: AVC avc: denied { bpf } for pid=4455 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:46:05.343000 audit[4455]: AVC avc: denied { perfmon } for pid=4455 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:46:05.343000 audit[4455]: AVC avc: denied { perfmon } for pid=4455 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:46:05.343000 audit[4455]: AVC avc: denied { perfmon } for pid=4455 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:46:05.343000 audit[4455]: AVC avc: denied { perfmon } for pid=4455 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:46:05.343000 audit[4455]: AVC avc: denied { perfmon } for pid=4455 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:46:05.343000 audit[4455]: AVC avc: denied { bpf } for pid=4455 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:46:05.343000 audit[4455]: AVC avc: denied { bpf } for pid=4455 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:46:05.343000 audit: BPF prog-id=205 op=LOAD Mar 17 18:46:05.343000 audit[4455]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c0001459d8 a2=78 a3=c0002e1ea8 items=0 ppid=4335 pid=4455 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:46:05.343000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6638623733386435383434363232636134653932653737633033633566 Mar 17 18:46:05.343000 audit[4455]: AVC avc: denied { bpf } for pid=4455 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:46:05.343000 audit[4455]: AVC avc: denied { bpf } for pid=4455 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:46:05.343000 audit[4455]: AVC avc: denied { perfmon } for pid=4455 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:46:05.343000 audit[4455]: AVC avc: denied { perfmon } for pid=4455 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:46:05.343000 audit[4455]: AVC avc: denied { perfmon } for pid=4455 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:46:05.343000 audit[4455]: AVC avc: denied { perfmon } for pid=4455 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:46:05.343000 audit[4455]: AVC avc: denied { perfmon } for pid=4455 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:46:05.343000 audit[4455]: AVC avc: denied { bpf } for pid=4455 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:46:05.343000 audit[4455]: AVC avc: denied { bpf } for pid=4455 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:46:05.343000 audit: BPF prog-id=206 op=LOAD Mar 17 18:46:05.343000 audit[4455]: SYSCALL arch=c000003e syscall=321 success=yes exit=17 a0=5 a1=c000145770 a2=78 a3=c0002e1ef8 items=0 ppid=4335 pid=4455 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:46:05.343000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6638623733386435383434363232636134653932653737633033633566 Mar 17 18:46:05.344000 audit: BPF prog-id=206 op=UNLOAD Mar 17 18:46:05.344000 audit: BPF prog-id=205 op=UNLOAD Mar 17 18:46:05.344000 audit[4455]: AVC avc: denied { bpf } for pid=4455 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:46:05.344000 audit[4455]: AVC avc: denied { bpf } for pid=4455 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:46:05.344000 audit[4455]: AVC avc: denied { bpf } for pid=4455 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:46:05.344000 audit[4455]: AVC avc: denied { perfmon } for pid=4455 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:46:05.344000 audit[4455]: AVC avc: denied { perfmon } for pid=4455 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:46:05.344000 audit[4455]: AVC avc: denied { perfmon } for pid=4455 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:46:05.344000 audit[4455]: AVC avc: denied { perfmon } for pid=4455 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:46:05.344000 audit[4455]: AVC avc: denied { perfmon } for pid=4455 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:46:05.344000 audit[4455]: AVC avc: denied { bpf } for pid=4455 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:46:05.344000 audit[4455]: AVC avc: denied { bpf } for pid=4455 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:46:05.344000 audit: BPF prog-id=207 op=LOAD Mar 17 18:46:05.344000 audit[4455]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c000145c30 a2=78 a3=c0002e1f88 items=0 ppid=4335 pid=4455 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:46:05.344000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6638623733386435383434363232636134653932653737633033633566 Mar 17 18:46:05.359421 env[1203]: time="2025-03-17T18:46:05.359375169Z" level=info msg="StartContainer for \"f8b738d5844622ca4e92e77c03c5f4b62b65d98874e20255b9f26a9843e5b637\" returns successfully" Mar 17 18:46:05.361785 env[1203]: time="2025-03-17T18:46:05.361755334Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/node-driver-registrar:v3.29.1\"" Mar 17 18:46:05.459000 audit[1881]: AVC avc: denied { watch } for pid=1881 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=8230 scontext=system_u:system_r:svirt_lxc_net_t:s0:c117,c888 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Mar 17 18:46:05.459000 audit[1881]: AVC avc: denied { watch } for pid=1881 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="vda9" ino=8236 scontext=system_u:system_r:svirt_lxc_net_t:s0:c117,c888 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Mar 17 18:46:05.459000 audit[1881]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=9 a1=c00322a020 a2=fc6 a3=0 items=0 ppid=1739 pid=1881 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c117,c888 key=(null) Mar 17 18:46:05.459000 audit[1881]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c003022000 a2=fc6 a3=0 items=0 ppid=1739 pid=1881 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c117,c888 key=(null) Mar 17 18:46:05.459000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Mar 17 18:46:05.459000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Mar 17 18:46:07.359552 env[1203]: time="2025-03-17T18:46:07.359509800Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/node-driver-registrar:v3.29.1,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Mar 17 18:46:07.362011 env[1203]: time="2025-03-17T18:46:07.361979032Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:8b7d18f262d5cf6a6343578ad0db68a140c4c9989d9e02c58c27cb5d2c70320f,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Mar 17 18:46:07.363756 env[1203]: time="2025-03-17T18:46:07.363725028Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/node-driver-registrar:v3.29.1,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Mar 17 18:46:07.365168 env[1203]: time="2025-03-17T18:46:07.365142997Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/node-driver-registrar@sha256:a338da9488cbaa83c78457c3d7354d84149969c0480e88dd768e036632ff5b76,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Mar 17 18:46:07.365683 env[1203]: time="2025-03-17T18:46:07.365644869Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/node-driver-registrar:v3.29.1\" returns image reference \"sha256:8b7d18f262d5cf6a6343578ad0db68a140c4c9989d9e02c58c27cb5d2c70320f\"" Mar 17 18:46:07.367750 env[1203]: time="2025-03-17T18:46:07.367719030Z" level=info msg="CreateContainer within sandbox \"f153fb114ab1867d15dae847e9b1dc0197826f5bd0132c9807231f3748906926\" for container &ContainerMetadata{Name:csi-node-driver-registrar,Attempt:0,}" Mar 17 18:46:07.384699 env[1203]: time="2025-03-17T18:46:07.384608324Z" level=info msg="CreateContainer within sandbox \"f153fb114ab1867d15dae847e9b1dc0197826f5bd0132c9807231f3748906926\" for &ContainerMetadata{Name:csi-node-driver-registrar,Attempt:0,} returns container id \"d2536285e1fa9fe0701e8335037c3a7e52f1b3205dc4f4e602eab2fc925babd5\"" Mar 17 18:46:07.385479 env[1203]: time="2025-03-17T18:46:07.385418263Z" level=info msg="StartContainer for \"d2536285e1fa9fe0701e8335037c3a7e52f1b3205dc4f4e602eab2fc925babd5\"" Mar 17 18:46:07.408975 systemd[1]: Started cri-containerd-d2536285e1fa9fe0701e8335037c3a7e52f1b3205dc4f4e602eab2fc925babd5.scope. Mar 17 18:46:07.419000 audit[4495]: AVC avc: denied { perfmon } for pid=4495 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:46:07.421111 kernel: kauditd_printk_skb: 131 callbacks suppressed Mar 17 18:46:07.421190 kernel: audit: type=1400 audit(1742237167.419:1406): avc: denied { perfmon } for pid=4495 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:46:07.419000 audit[4495]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=0 a1=c0001976b0 a2=3c a3=7f86159b4968 items=0 ppid=4335 pid=4495 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:46:07.428671 kernel: audit: type=1300 audit(1742237167.419:1406): arch=c000003e syscall=321 success=yes exit=15 a0=0 a1=c0001976b0 a2=3c a3=7f86159b4968 items=0 ppid=4335 pid=4495 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:46:07.428807 kernel: audit: type=1327 audit(1742237167.419:1406): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6432353336323835653166613966653037303165383333353033376333 Mar 17 18:46:07.419000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6432353336323835653166613966653037303165383333353033376333 Mar 17 18:46:07.419000 audit[4495]: AVC avc: denied { bpf } for pid=4495 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:46:07.435790 kernel: audit: type=1400 audit(1742237167.419:1407): avc: denied { bpf } for pid=4495 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:46:07.435846 kernel: audit: type=1400 audit(1742237167.419:1407): avc: denied { bpf } for pid=4495 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:46:07.419000 audit[4495]: AVC avc: denied { bpf } for pid=4495 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:46:07.419000 audit[4495]: AVC avc: denied { bpf } for pid=4495 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:46:07.441945 kernel: audit: type=1400 audit(1742237167.419:1407): avc: denied { bpf } for pid=4495 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:46:07.419000 audit[4495]: AVC avc: denied { perfmon } for pid=4495 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:46:07.445173 kernel: audit: type=1400 audit(1742237167.419:1407): avc: denied { perfmon } for pid=4495 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:46:07.445232 kernel: audit: type=1400 audit(1742237167.419:1407): avc: denied { perfmon } for pid=4495 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:46:07.419000 audit[4495]: AVC avc: denied { perfmon } for pid=4495 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:46:07.419000 audit[4495]: AVC avc: denied { perfmon } for pid=4495 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:46:07.449647 env[1203]: time="2025-03-17T18:46:07.449600517Z" level=info msg="StartContainer for \"d2536285e1fa9fe0701e8335037c3a7e52f1b3205dc4f4e602eab2fc925babd5\" returns successfully" Mar 17 18:46:07.451475 kernel: audit: type=1400 audit(1742237167.419:1407): avc: denied { perfmon } for pid=4495 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:46:07.451546 kernel: audit: type=1400 audit(1742237167.419:1407): avc: denied { perfmon } for pid=4495 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:46:07.419000 audit[4495]: AVC avc: denied { perfmon } for pid=4495 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:46:07.419000 audit[4495]: AVC avc: denied { perfmon } for pid=4495 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:46:07.419000 audit[4495]: AVC avc: denied { bpf } for pid=4495 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:46:07.419000 audit[4495]: AVC avc: denied { bpf } for pid=4495 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:46:07.419000 audit: BPF prog-id=208 op=LOAD Mar 17 18:46:07.419000 audit[4495]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c0001979d8 a2=78 a3=c0002ccbb8 items=0 ppid=4335 pid=4495 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:46:07.419000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6432353336323835653166613966653037303165383333353033376333 Mar 17 18:46:07.423000 audit[4495]: AVC avc: denied { bpf } for pid=4495 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:46:07.423000 audit[4495]: AVC avc: denied { bpf } for pid=4495 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:46:07.423000 audit[4495]: AVC avc: denied { perfmon } for pid=4495 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:46:07.423000 audit[4495]: AVC avc: denied { perfmon } for pid=4495 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:46:07.423000 audit[4495]: AVC avc: denied { perfmon } for pid=4495 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:46:07.423000 audit[4495]: AVC avc: denied { perfmon } for pid=4495 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:46:07.423000 audit[4495]: AVC avc: denied { perfmon } for pid=4495 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:46:07.423000 audit[4495]: AVC avc: denied { bpf } for pid=4495 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:46:07.423000 audit[4495]: AVC avc: denied { bpf } for pid=4495 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:46:07.423000 audit: BPF prog-id=209 op=LOAD Mar 17 18:46:07.423000 audit[4495]: SYSCALL arch=c000003e syscall=321 success=yes exit=17 a0=5 a1=c000197770 a2=78 a3=c0002ccc08 items=0 ppid=4335 pid=4495 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:46:07.423000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6432353336323835653166613966653037303165383333353033376333 Mar 17 18:46:07.428000 audit: BPF prog-id=209 op=UNLOAD Mar 17 18:46:07.428000 audit: BPF prog-id=208 op=UNLOAD Mar 17 18:46:07.428000 audit[4495]: AVC avc: denied { bpf } for pid=4495 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:46:07.428000 audit[4495]: AVC avc: denied { bpf } for pid=4495 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:46:07.428000 audit[4495]: AVC avc: denied { bpf } for pid=4495 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:46:07.428000 audit[4495]: AVC avc: denied { perfmon } for pid=4495 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:46:07.428000 audit[4495]: AVC avc: denied { perfmon } for pid=4495 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:46:07.428000 audit[4495]: AVC avc: denied { perfmon } for pid=4495 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:46:07.428000 audit[4495]: AVC avc: denied { perfmon } for pid=4495 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:46:07.428000 audit[4495]: AVC avc: denied { perfmon } for pid=4495 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:46:07.428000 audit[4495]: AVC avc: denied { bpf } for pid=4495 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:46:07.428000 audit[4495]: AVC avc: denied { bpf } for pid=4495 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:46:07.428000 audit: BPF prog-id=210 op=LOAD Mar 17 18:46:07.428000 audit[4495]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c000197c30 a2=78 a3=c0002ccc98 items=0 ppid=4335 pid=4495 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:46:07.428000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6432353336323835653166613966653037303165383333353033376333 Mar 17 18:46:07.594822 env[1203]: time="2025-03-17T18:46:07.594759440Z" level=info msg="StopPodSandbox for \"5433c4137b534da4025b730d9c8ec78362c5370579e68f684283036a36a9b595\"" Mar 17 18:46:07.654350 kubelet[2045]: I0317 18:46:07.653135 2045 csi_plugin.go:100] kubernetes.io/csi: Trying to validate a new CSI Driver with name: csi.tigera.io endpoint: /var/lib/kubelet/plugins/csi.tigera.io/csi.sock versions: 1.0.0 Mar 17 18:46:07.654350 kubelet[2045]: I0317 18:46:07.653182 2045 csi_plugin.go:113] kubernetes.io/csi: Register new plugin with name: csi.tigera.io at endpoint: /var/lib/kubelet/plugins/csi.tigera.io/csi.sock Mar 17 18:46:07.679750 env[1203]: 2025-03-17 18:46:07.633 [WARNING][4542] cni-plugin/k8s.go 572: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="5433c4137b534da4025b730d9c8ec78362c5370579e68f684283036a36a9b595" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-csi--node--driver--6vr94-eth0", GenerateName:"csi-node-driver-", Namespace:"calico-system", SelfLink:"", UID:"42df0b30-e0d7-4f61-83fe-313c16a7f709", ResourceVersion:"1040", Generation:0, CreationTimestamp:time.Date(2025, time.March, 17, 18, 45, 29, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"csi-node-driver", "controller-revision-hash":"65bf684474", "k8s-app":"csi-node-driver", "name":"csi-node-driver", "pod-template-generation":"1", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"csi-node-driver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"f153fb114ab1867d15dae847e9b1dc0197826f5bd0132c9807231f3748906926", Pod:"csi-node-driver-6vr94", Endpoint:"eth0", ServiceAccountName:"csi-node-driver", IPNetworks:[]string{"192.168.88.134/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.csi-node-driver"}, InterfaceName:"calia9697730678", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil)}} Mar 17 18:46:07.679750 env[1203]: 2025-03-17 18:46:07.633 [INFO][4542] cni-plugin/k8s.go 608: Cleaning up netns ContainerID="5433c4137b534da4025b730d9c8ec78362c5370579e68f684283036a36a9b595" Mar 17 18:46:07.679750 env[1203]: 2025-03-17 18:46:07.633 [INFO][4542] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="5433c4137b534da4025b730d9c8ec78362c5370579e68f684283036a36a9b595" iface="eth0" netns="" Mar 17 18:46:07.679750 env[1203]: 2025-03-17 18:46:07.633 [INFO][4542] cni-plugin/k8s.go 615: Releasing IP address(es) ContainerID="5433c4137b534da4025b730d9c8ec78362c5370579e68f684283036a36a9b595" Mar 17 18:46:07.679750 env[1203]: 2025-03-17 18:46:07.633 [INFO][4542] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="5433c4137b534da4025b730d9c8ec78362c5370579e68f684283036a36a9b595" Mar 17 18:46:07.679750 env[1203]: 2025-03-17 18:46:07.657 [INFO][4551] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="5433c4137b534da4025b730d9c8ec78362c5370579e68f684283036a36a9b595" HandleID="k8s-pod-network.5433c4137b534da4025b730d9c8ec78362c5370579e68f684283036a36a9b595" Workload="localhost-k8s-csi--node--driver--6vr94-eth0" Mar 17 18:46:07.679750 env[1203]: 2025-03-17 18:46:07.657 [INFO][4551] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Mar 17 18:46:07.679750 env[1203]: 2025-03-17 18:46:07.657 [INFO][4551] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Mar 17 18:46:07.679750 env[1203]: 2025-03-17 18:46:07.669 [WARNING][4551] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="5433c4137b534da4025b730d9c8ec78362c5370579e68f684283036a36a9b595" HandleID="k8s-pod-network.5433c4137b534da4025b730d9c8ec78362c5370579e68f684283036a36a9b595" Workload="localhost-k8s-csi--node--driver--6vr94-eth0" Mar 17 18:46:07.679750 env[1203]: 2025-03-17 18:46:07.669 [INFO][4551] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="5433c4137b534da4025b730d9c8ec78362c5370579e68f684283036a36a9b595" HandleID="k8s-pod-network.5433c4137b534da4025b730d9c8ec78362c5370579e68f684283036a36a9b595" Workload="localhost-k8s-csi--node--driver--6vr94-eth0" Mar 17 18:46:07.679750 env[1203]: 2025-03-17 18:46:07.675 [INFO][4551] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Mar 17 18:46:07.679750 env[1203]: 2025-03-17 18:46:07.677 [INFO][4542] cni-plugin/k8s.go 621: Teardown processing complete. ContainerID="5433c4137b534da4025b730d9c8ec78362c5370579e68f684283036a36a9b595" Mar 17 18:46:07.680467 env[1203]: time="2025-03-17T18:46:07.679760609Z" level=info msg="TearDown network for sandbox \"5433c4137b534da4025b730d9c8ec78362c5370579e68f684283036a36a9b595\" successfully" Mar 17 18:46:07.680467 env[1203]: time="2025-03-17T18:46:07.679795444Z" level=info msg="StopPodSandbox for \"5433c4137b534da4025b730d9c8ec78362c5370579e68f684283036a36a9b595\" returns successfully" Mar 17 18:46:07.680781 env[1203]: time="2025-03-17T18:46:07.680738233Z" level=info msg="RemovePodSandbox for \"5433c4137b534da4025b730d9c8ec78362c5370579e68f684283036a36a9b595\"" Mar 17 18:46:07.680844 env[1203]: time="2025-03-17T18:46:07.680790240Z" level=info msg="Forcibly stopping sandbox \"5433c4137b534da4025b730d9c8ec78362c5370579e68f684283036a36a9b595\"" Mar 17 18:46:07.752717 env[1203]: 2025-03-17 18:46:07.717 [WARNING][4574] cni-plugin/k8s.go 572: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="5433c4137b534da4025b730d9c8ec78362c5370579e68f684283036a36a9b595" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-csi--node--driver--6vr94-eth0", GenerateName:"csi-node-driver-", Namespace:"calico-system", SelfLink:"", UID:"42df0b30-e0d7-4f61-83fe-313c16a7f709", ResourceVersion:"1040", Generation:0, CreationTimestamp:time.Date(2025, time.March, 17, 18, 45, 29, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"csi-node-driver", "controller-revision-hash":"65bf684474", "k8s-app":"csi-node-driver", "name":"csi-node-driver", "pod-template-generation":"1", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"csi-node-driver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"f153fb114ab1867d15dae847e9b1dc0197826f5bd0132c9807231f3748906926", Pod:"csi-node-driver-6vr94", Endpoint:"eth0", ServiceAccountName:"csi-node-driver", IPNetworks:[]string{"192.168.88.134/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.csi-node-driver"}, InterfaceName:"calia9697730678", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil)}} Mar 17 18:46:07.752717 env[1203]: 2025-03-17 18:46:07.717 [INFO][4574] cni-plugin/k8s.go 608: Cleaning up netns ContainerID="5433c4137b534da4025b730d9c8ec78362c5370579e68f684283036a36a9b595" Mar 17 18:46:07.752717 env[1203]: 2025-03-17 18:46:07.717 [INFO][4574] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="5433c4137b534da4025b730d9c8ec78362c5370579e68f684283036a36a9b595" iface="eth0" netns="" Mar 17 18:46:07.752717 env[1203]: 2025-03-17 18:46:07.717 [INFO][4574] cni-plugin/k8s.go 615: Releasing IP address(es) ContainerID="5433c4137b534da4025b730d9c8ec78362c5370579e68f684283036a36a9b595" Mar 17 18:46:07.752717 env[1203]: 2025-03-17 18:46:07.717 [INFO][4574] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="5433c4137b534da4025b730d9c8ec78362c5370579e68f684283036a36a9b595" Mar 17 18:46:07.752717 env[1203]: 2025-03-17 18:46:07.742 [INFO][4581] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="5433c4137b534da4025b730d9c8ec78362c5370579e68f684283036a36a9b595" HandleID="k8s-pod-network.5433c4137b534da4025b730d9c8ec78362c5370579e68f684283036a36a9b595" Workload="localhost-k8s-csi--node--driver--6vr94-eth0" Mar 17 18:46:07.752717 env[1203]: 2025-03-17 18:46:07.743 [INFO][4581] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Mar 17 18:46:07.752717 env[1203]: 2025-03-17 18:46:07.743 [INFO][4581] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Mar 17 18:46:07.752717 env[1203]: 2025-03-17 18:46:07.748 [WARNING][4581] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="5433c4137b534da4025b730d9c8ec78362c5370579e68f684283036a36a9b595" HandleID="k8s-pod-network.5433c4137b534da4025b730d9c8ec78362c5370579e68f684283036a36a9b595" Workload="localhost-k8s-csi--node--driver--6vr94-eth0" Mar 17 18:46:07.752717 env[1203]: 2025-03-17 18:46:07.748 [INFO][4581] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="5433c4137b534da4025b730d9c8ec78362c5370579e68f684283036a36a9b595" HandleID="k8s-pod-network.5433c4137b534da4025b730d9c8ec78362c5370579e68f684283036a36a9b595" Workload="localhost-k8s-csi--node--driver--6vr94-eth0" Mar 17 18:46:07.752717 env[1203]: 2025-03-17 18:46:07.749 [INFO][4581] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Mar 17 18:46:07.752717 env[1203]: 2025-03-17 18:46:07.751 [INFO][4574] cni-plugin/k8s.go 621: Teardown processing complete. ContainerID="5433c4137b534da4025b730d9c8ec78362c5370579e68f684283036a36a9b595" Mar 17 18:46:07.753219 env[1203]: time="2025-03-17T18:46:07.752742370Z" level=info msg="TearDown network for sandbox \"5433c4137b534da4025b730d9c8ec78362c5370579e68f684283036a36a9b595\" successfully" Mar 17 18:46:07.762422 systemd[1]: Started sshd@15-10.0.0.110:22-10.0.0.1:55998.service. Mar 17 18:46:07.761000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@15-10.0.0.110:22-10.0.0.1:55998 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:46:07.949905 env[1203]: time="2025-03-17T18:46:07.949717408Z" level=info msg="RemovePodSandbox \"5433c4137b534da4025b730d9c8ec78362c5370579e68f684283036a36a9b595\" returns successfully" Mar 17 18:46:07.950321 env[1203]: time="2025-03-17T18:46:07.950273502Z" level=info msg="StopPodSandbox for \"12ea64e1ecca836003d8982cef0c985a3af86570749a59d72b02c70cfe7f14f8\"" Mar 17 18:46:07.993000 audit[4590]: USER_ACCT pid=4590 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Mar 17 18:46:07.995660 sshd[4590]: Accepted publickey for core from 10.0.0.1 port 55998 ssh2: RSA SHA256:EcJpbXadXymLrINQtrmLSqTXC2wy0UoSwO9MmZb5CTo Mar 17 18:46:07.995000 audit[4590]: CRED_ACQ pid=4590 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Mar 17 18:46:07.995000 audit[4590]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffe2952a7f0 a2=3 a3=0 items=0 ppid=1 pid=4590 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=16 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:46:07.995000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Mar 17 18:46:07.996505 sshd[4590]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Mar 17 18:46:08.000210 systemd-logind[1188]: New session 16 of user core. Mar 17 18:46:08.000952 systemd[1]: Started session-16.scope. Mar 17 18:46:08.003000 audit[4590]: USER_START pid=4590 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Mar 17 18:46:08.005000 audit[4621]: CRED_ACQ pid=4621 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Mar 17 18:46:08.019552 env[1203]: 2025-03-17 18:46:07.989 [WARNING][4606] cni-plugin/k8s.go 572: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="12ea64e1ecca836003d8982cef0c985a3af86570749a59d72b02c70cfe7f14f8" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-coredns--7db6d8ff4d--gdwxp-eth0", GenerateName:"coredns-7db6d8ff4d-", Namespace:"kube-system", SelfLink:"", UID:"7ea517d3-7ca7-4ac4-b0a9-aa4ec5ae36b5", ResourceVersion:"977", Generation:0, CreationTimestamp:time.Date(2025, time.March, 17, 18, 45, 23, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"k8s-app":"kube-dns", "pod-template-hash":"7db6d8ff4d", "projectcalico.org/namespace":"kube-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"coredns"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"d5a273f4afa9fc49b12c044409515521503584e0cd1ed1d3fd379b09ffcb933e", Pod:"coredns-7db6d8ff4d-gdwxp", Endpoint:"eth0", ServiceAccountName:"coredns", IPNetworks:[]string{"192.168.88.131/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.kube-system", "ksa.kube-system.coredns"}, InterfaceName:"cali2cc750daea4", MAC:"", Ports:[]v3.WorkloadEndpointPort{v3.WorkloadEndpointPort{Name:"dns", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"UDP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"dns-tcp", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"metrics", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x23c1, HostPort:0x0, HostIP:""}}, AllowSpoofedSourcePrefixes:[]string(nil)}} Mar 17 18:46:08.019552 env[1203]: 2025-03-17 18:46:07.989 [INFO][4606] cni-plugin/k8s.go 608: Cleaning up netns ContainerID="12ea64e1ecca836003d8982cef0c985a3af86570749a59d72b02c70cfe7f14f8" Mar 17 18:46:08.019552 env[1203]: 2025-03-17 18:46:07.989 [INFO][4606] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="12ea64e1ecca836003d8982cef0c985a3af86570749a59d72b02c70cfe7f14f8" iface="eth0" netns="" Mar 17 18:46:08.019552 env[1203]: 2025-03-17 18:46:07.989 [INFO][4606] cni-plugin/k8s.go 615: Releasing IP address(es) ContainerID="12ea64e1ecca836003d8982cef0c985a3af86570749a59d72b02c70cfe7f14f8" Mar 17 18:46:08.019552 env[1203]: 2025-03-17 18:46:07.989 [INFO][4606] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="12ea64e1ecca836003d8982cef0c985a3af86570749a59d72b02c70cfe7f14f8" Mar 17 18:46:08.019552 env[1203]: 2025-03-17 18:46:08.010 [INFO][4615] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="12ea64e1ecca836003d8982cef0c985a3af86570749a59d72b02c70cfe7f14f8" HandleID="k8s-pod-network.12ea64e1ecca836003d8982cef0c985a3af86570749a59d72b02c70cfe7f14f8" Workload="localhost-k8s-coredns--7db6d8ff4d--gdwxp-eth0" Mar 17 18:46:08.019552 env[1203]: 2025-03-17 18:46:08.010 [INFO][4615] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Mar 17 18:46:08.019552 env[1203]: 2025-03-17 18:46:08.011 [INFO][4615] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Mar 17 18:46:08.019552 env[1203]: 2025-03-17 18:46:08.015 [WARNING][4615] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="12ea64e1ecca836003d8982cef0c985a3af86570749a59d72b02c70cfe7f14f8" HandleID="k8s-pod-network.12ea64e1ecca836003d8982cef0c985a3af86570749a59d72b02c70cfe7f14f8" Workload="localhost-k8s-coredns--7db6d8ff4d--gdwxp-eth0" Mar 17 18:46:08.019552 env[1203]: 2025-03-17 18:46:08.015 [INFO][4615] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="12ea64e1ecca836003d8982cef0c985a3af86570749a59d72b02c70cfe7f14f8" HandleID="k8s-pod-network.12ea64e1ecca836003d8982cef0c985a3af86570749a59d72b02c70cfe7f14f8" Workload="localhost-k8s-coredns--7db6d8ff4d--gdwxp-eth0" Mar 17 18:46:08.019552 env[1203]: 2025-03-17 18:46:08.016 [INFO][4615] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Mar 17 18:46:08.019552 env[1203]: 2025-03-17 18:46:08.018 [INFO][4606] cni-plugin/k8s.go 621: Teardown processing complete. ContainerID="12ea64e1ecca836003d8982cef0c985a3af86570749a59d72b02c70cfe7f14f8" Mar 17 18:46:08.020289 env[1203]: time="2025-03-17T18:46:08.019594565Z" level=info msg="TearDown network for sandbox \"12ea64e1ecca836003d8982cef0c985a3af86570749a59d72b02c70cfe7f14f8\" successfully" Mar 17 18:46:08.020289 env[1203]: time="2025-03-17T18:46:08.019638337Z" level=info msg="StopPodSandbox for \"12ea64e1ecca836003d8982cef0c985a3af86570749a59d72b02c70cfe7f14f8\" returns successfully" Mar 17 18:46:08.020289 env[1203]: time="2025-03-17T18:46:08.020130459Z" level=info msg="RemovePodSandbox for \"12ea64e1ecca836003d8982cef0c985a3af86570749a59d72b02c70cfe7f14f8\"" Mar 17 18:46:08.020289 env[1203]: time="2025-03-17T18:46:08.020158191Z" level=info msg="Forcibly stopping sandbox \"12ea64e1ecca836003d8982cef0c985a3af86570749a59d72b02c70cfe7f14f8\"" Mar 17 18:46:08.078515 env[1203]: 2025-03-17 18:46:08.046 [WARNING][4640] cni-plugin/k8s.go 572: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="12ea64e1ecca836003d8982cef0c985a3af86570749a59d72b02c70cfe7f14f8" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-coredns--7db6d8ff4d--gdwxp-eth0", GenerateName:"coredns-7db6d8ff4d-", Namespace:"kube-system", SelfLink:"", UID:"7ea517d3-7ca7-4ac4-b0a9-aa4ec5ae36b5", ResourceVersion:"977", Generation:0, CreationTimestamp:time.Date(2025, time.March, 17, 18, 45, 23, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"k8s-app":"kube-dns", "pod-template-hash":"7db6d8ff4d", "projectcalico.org/namespace":"kube-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"coredns"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"d5a273f4afa9fc49b12c044409515521503584e0cd1ed1d3fd379b09ffcb933e", Pod:"coredns-7db6d8ff4d-gdwxp", Endpoint:"eth0", ServiceAccountName:"coredns", IPNetworks:[]string{"192.168.88.131/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.kube-system", "ksa.kube-system.coredns"}, InterfaceName:"cali2cc750daea4", MAC:"", Ports:[]v3.WorkloadEndpointPort{v3.WorkloadEndpointPort{Name:"dns", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"UDP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"dns-tcp", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"metrics", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x23c1, HostPort:0x0, HostIP:""}}, AllowSpoofedSourcePrefixes:[]string(nil)}} Mar 17 18:46:08.078515 env[1203]: 2025-03-17 18:46:08.046 [INFO][4640] cni-plugin/k8s.go 608: Cleaning up netns ContainerID="12ea64e1ecca836003d8982cef0c985a3af86570749a59d72b02c70cfe7f14f8" Mar 17 18:46:08.078515 env[1203]: 2025-03-17 18:46:08.046 [INFO][4640] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="12ea64e1ecca836003d8982cef0c985a3af86570749a59d72b02c70cfe7f14f8" iface="eth0" netns="" Mar 17 18:46:08.078515 env[1203]: 2025-03-17 18:46:08.046 [INFO][4640] cni-plugin/k8s.go 615: Releasing IP address(es) ContainerID="12ea64e1ecca836003d8982cef0c985a3af86570749a59d72b02c70cfe7f14f8" Mar 17 18:46:08.078515 env[1203]: 2025-03-17 18:46:08.046 [INFO][4640] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="12ea64e1ecca836003d8982cef0c985a3af86570749a59d72b02c70cfe7f14f8" Mar 17 18:46:08.078515 env[1203]: 2025-03-17 18:46:08.068 [INFO][4647] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="12ea64e1ecca836003d8982cef0c985a3af86570749a59d72b02c70cfe7f14f8" HandleID="k8s-pod-network.12ea64e1ecca836003d8982cef0c985a3af86570749a59d72b02c70cfe7f14f8" Workload="localhost-k8s-coredns--7db6d8ff4d--gdwxp-eth0" Mar 17 18:46:08.078515 env[1203]: 2025-03-17 18:46:08.069 [INFO][4647] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Mar 17 18:46:08.078515 env[1203]: 2025-03-17 18:46:08.069 [INFO][4647] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Mar 17 18:46:08.078515 env[1203]: 2025-03-17 18:46:08.074 [WARNING][4647] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="12ea64e1ecca836003d8982cef0c985a3af86570749a59d72b02c70cfe7f14f8" HandleID="k8s-pod-network.12ea64e1ecca836003d8982cef0c985a3af86570749a59d72b02c70cfe7f14f8" Workload="localhost-k8s-coredns--7db6d8ff4d--gdwxp-eth0" Mar 17 18:46:08.078515 env[1203]: 2025-03-17 18:46:08.074 [INFO][4647] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="12ea64e1ecca836003d8982cef0c985a3af86570749a59d72b02c70cfe7f14f8" HandleID="k8s-pod-network.12ea64e1ecca836003d8982cef0c985a3af86570749a59d72b02c70cfe7f14f8" Workload="localhost-k8s-coredns--7db6d8ff4d--gdwxp-eth0" Mar 17 18:46:08.078515 env[1203]: 2025-03-17 18:46:08.075 [INFO][4647] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Mar 17 18:46:08.078515 env[1203]: 2025-03-17 18:46:08.076 [INFO][4640] cni-plugin/k8s.go 621: Teardown processing complete. ContainerID="12ea64e1ecca836003d8982cef0c985a3af86570749a59d72b02c70cfe7f14f8" Mar 17 18:46:08.079100 env[1203]: time="2025-03-17T18:46:08.078552474Z" level=info msg="TearDown network for sandbox \"12ea64e1ecca836003d8982cef0c985a3af86570749a59d72b02c70cfe7f14f8\" successfully" Mar 17 18:46:08.114644 sshd[4590]: pam_unix(sshd:session): session closed for user core Mar 17 18:46:08.114000 audit[4590]: USER_END pid=4590 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Mar 17 18:46:08.114000 audit[4590]: CRED_DISP pid=4590 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Mar 17 18:46:08.116687 systemd[1]: sshd@15-10.0.0.110:22-10.0.0.1:55998.service: Deactivated successfully. Mar 17 18:46:08.117373 systemd[1]: session-16.scope: Deactivated successfully. Mar 17 18:46:08.116000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@15-10.0.0.110:22-10.0.0.1:55998 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:46:08.117903 systemd-logind[1188]: Session 16 logged out. Waiting for processes to exit. Mar 17 18:46:08.118545 systemd-logind[1188]: Removed session 16. Mar 17 18:46:08.225202 env[1203]: time="2025-03-17T18:46:08.225128236Z" level=info msg="RemovePodSandbox \"12ea64e1ecca836003d8982cef0c985a3af86570749a59d72b02c70cfe7f14f8\" returns successfully" Mar 17 18:46:08.225671 env[1203]: time="2025-03-17T18:46:08.225645115Z" level=info msg="StopPodSandbox for \"49bc01f8fe1fd25dbc58e081e145237ea5c49d14446d8dec1e5dc2e238eef4b6\"" Mar 17 18:46:08.228048 kubelet[2045]: I0317 18:46:08.227981 2045 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="calico-system/csi-node-driver-6vr94" podStartSLOduration=33.749412219999996 podStartE2EDuration="39.227963614s" podCreationTimestamp="2025-03-17 18:45:29 +0000 UTC" firstStartedPulling="2025-03-17 18:46:01.887971191 +0000 UTC m=+54.375972029" lastFinishedPulling="2025-03-17 18:46:07.366522585 +0000 UTC m=+59.854523423" observedRunningTime="2025-03-17 18:46:08.227287036 +0000 UTC m=+60.715287874" watchObservedRunningTime="2025-03-17 18:46:08.227963614 +0000 UTC m=+60.715964472" Mar 17 18:46:08.272000 audit[1881]: AVC avc: denied { watch } for pid=1881 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=8230 scontext=system_u:system_r:svirt_lxc_net_t:s0:c117,c888 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Mar 17 18:46:08.272000 audit[1881]: AVC avc: denied { watch } for pid=1881 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=8230 scontext=system_u:system_r:svirt_lxc_net_t:s0:c117,c888 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Mar 17 18:46:08.272000 audit[1881]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=9 a1=c00322a080 a2=fc6 a3=0 items=0 ppid=1739 pid=1881 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c117,c888 key=(null) Mar 17 18:46:08.272000 audit[1881]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c002e6c920 a2=fc6 a3=0 items=0 ppid=1739 pid=1881 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c117,c888 key=(null) Mar 17 18:46:08.272000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Mar 17 18:46:08.272000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Mar 17 18:46:08.272000 audit[1881]: AVC avc: denied { watch } for pid=1881 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=8230 scontext=system_u:system_r:svirt_lxc_net_t:s0:c117,c888 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Mar 17 18:46:08.272000 audit[1881]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=b a1=c002e6c940 a2=fc6 a3=0 items=0 ppid=1739 pid=1881 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c117,c888 key=(null) Mar 17 18:46:08.272000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Mar 17 18:46:08.272000 audit[1881]: AVC avc: denied { watch } for pid=1881 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=8230 scontext=system_u:system_r:svirt_lxc_net_t:s0:c117,c888 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Mar 17 18:46:08.272000 audit[1881]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=9 a1=c00322a0a0 a2=fc6 a3=0 items=0 ppid=1739 pid=1881 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c117,c888 key=(null) Mar 17 18:46:08.272000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Mar 17 18:46:08.434026 env[1203]: 2025-03-17 18:46:08.402 [WARNING][4679] cni-plugin/k8s.go 572: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="49bc01f8fe1fd25dbc58e081e145237ea5c49d14446d8dec1e5dc2e238eef4b6" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-calico--kube--controllers--56d6765747--9mr6w-eth0", GenerateName:"calico-kube-controllers-56d6765747-", Namespace:"calico-system", SelfLink:"", UID:"ca492086-56f8-43e1-83c0-78cd15fb38dd", ResourceVersion:"1058", Generation:0, CreationTimestamp:time.Date(2025, time.March, 17, 18, 45, 29, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"calico-kube-controllers", "k8s-app":"calico-kube-controllers", "pod-template-hash":"56d6765747", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-kube-controllers"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"0fd655df7396e878196a10af95b0ab038595338d335b8e10e99d9356062067dd", Pod:"calico-kube-controllers-56d6765747-9mr6w", Endpoint:"eth0", ServiceAccountName:"calico-kube-controllers", IPNetworks:[]string{"192.168.88.132/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.calico-kube-controllers"}, InterfaceName:"calic9708628f7a", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil)}} Mar 17 18:46:08.434026 env[1203]: 2025-03-17 18:46:08.402 [INFO][4679] cni-plugin/k8s.go 608: Cleaning up netns ContainerID="49bc01f8fe1fd25dbc58e081e145237ea5c49d14446d8dec1e5dc2e238eef4b6" Mar 17 18:46:08.434026 env[1203]: 2025-03-17 18:46:08.402 [INFO][4679] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="49bc01f8fe1fd25dbc58e081e145237ea5c49d14446d8dec1e5dc2e238eef4b6" iface="eth0" netns="" Mar 17 18:46:08.434026 env[1203]: 2025-03-17 18:46:08.402 [INFO][4679] cni-plugin/k8s.go 615: Releasing IP address(es) ContainerID="49bc01f8fe1fd25dbc58e081e145237ea5c49d14446d8dec1e5dc2e238eef4b6" Mar 17 18:46:08.434026 env[1203]: 2025-03-17 18:46:08.402 [INFO][4679] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="49bc01f8fe1fd25dbc58e081e145237ea5c49d14446d8dec1e5dc2e238eef4b6" Mar 17 18:46:08.434026 env[1203]: 2025-03-17 18:46:08.424 [INFO][4687] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="49bc01f8fe1fd25dbc58e081e145237ea5c49d14446d8dec1e5dc2e238eef4b6" HandleID="k8s-pod-network.49bc01f8fe1fd25dbc58e081e145237ea5c49d14446d8dec1e5dc2e238eef4b6" Workload="localhost-k8s-calico--kube--controllers--56d6765747--9mr6w-eth0" Mar 17 18:46:08.434026 env[1203]: 2025-03-17 18:46:08.424 [INFO][4687] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Mar 17 18:46:08.434026 env[1203]: 2025-03-17 18:46:08.424 [INFO][4687] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Mar 17 18:46:08.434026 env[1203]: 2025-03-17 18:46:08.430 [WARNING][4687] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="49bc01f8fe1fd25dbc58e081e145237ea5c49d14446d8dec1e5dc2e238eef4b6" HandleID="k8s-pod-network.49bc01f8fe1fd25dbc58e081e145237ea5c49d14446d8dec1e5dc2e238eef4b6" Workload="localhost-k8s-calico--kube--controllers--56d6765747--9mr6w-eth0" Mar 17 18:46:08.434026 env[1203]: 2025-03-17 18:46:08.430 [INFO][4687] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="49bc01f8fe1fd25dbc58e081e145237ea5c49d14446d8dec1e5dc2e238eef4b6" HandleID="k8s-pod-network.49bc01f8fe1fd25dbc58e081e145237ea5c49d14446d8dec1e5dc2e238eef4b6" Workload="localhost-k8s-calico--kube--controllers--56d6765747--9mr6w-eth0" Mar 17 18:46:08.434026 env[1203]: 2025-03-17 18:46:08.431 [INFO][4687] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Mar 17 18:46:08.434026 env[1203]: 2025-03-17 18:46:08.432 [INFO][4679] cni-plugin/k8s.go 621: Teardown processing complete. ContainerID="49bc01f8fe1fd25dbc58e081e145237ea5c49d14446d8dec1e5dc2e238eef4b6" Mar 17 18:46:08.434859 env[1203]: time="2025-03-17T18:46:08.434063558Z" level=info msg="TearDown network for sandbox \"49bc01f8fe1fd25dbc58e081e145237ea5c49d14446d8dec1e5dc2e238eef4b6\" successfully" Mar 17 18:46:08.434859 env[1203]: time="2025-03-17T18:46:08.434099606Z" level=info msg="StopPodSandbox for \"49bc01f8fe1fd25dbc58e081e145237ea5c49d14446d8dec1e5dc2e238eef4b6\" returns successfully" Mar 17 18:46:08.434859 env[1203]: time="2025-03-17T18:46:08.434615383Z" level=info msg="RemovePodSandbox for \"49bc01f8fe1fd25dbc58e081e145237ea5c49d14446d8dec1e5dc2e238eef4b6\"" Mar 17 18:46:08.434859 env[1203]: time="2025-03-17T18:46:08.434670306Z" level=info msg="Forcibly stopping sandbox \"49bc01f8fe1fd25dbc58e081e145237ea5c49d14446d8dec1e5dc2e238eef4b6\"" Mar 17 18:46:08.611259 env[1203]: 2025-03-17 18:46:08.466 [WARNING][4710] cni-plugin/k8s.go 572: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="49bc01f8fe1fd25dbc58e081e145237ea5c49d14446d8dec1e5dc2e238eef4b6" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-calico--kube--controllers--56d6765747--9mr6w-eth0", GenerateName:"calico-kube-controllers-56d6765747-", Namespace:"calico-system", SelfLink:"", UID:"ca492086-56f8-43e1-83c0-78cd15fb38dd", ResourceVersion:"1058", Generation:0, CreationTimestamp:time.Date(2025, time.March, 17, 18, 45, 29, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"calico-kube-controllers", "k8s-app":"calico-kube-controllers", "pod-template-hash":"56d6765747", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-kube-controllers"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"0fd655df7396e878196a10af95b0ab038595338d335b8e10e99d9356062067dd", Pod:"calico-kube-controllers-56d6765747-9mr6w", Endpoint:"eth0", ServiceAccountName:"calico-kube-controllers", IPNetworks:[]string{"192.168.88.132/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.calico-kube-controllers"}, InterfaceName:"calic9708628f7a", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil)}} Mar 17 18:46:08.611259 env[1203]: 2025-03-17 18:46:08.467 [INFO][4710] cni-plugin/k8s.go 608: Cleaning up netns ContainerID="49bc01f8fe1fd25dbc58e081e145237ea5c49d14446d8dec1e5dc2e238eef4b6" Mar 17 18:46:08.611259 env[1203]: 2025-03-17 18:46:08.467 [INFO][4710] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="49bc01f8fe1fd25dbc58e081e145237ea5c49d14446d8dec1e5dc2e238eef4b6" iface="eth0" netns="" Mar 17 18:46:08.611259 env[1203]: 2025-03-17 18:46:08.467 [INFO][4710] cni-plugin/k8s.go 615: Releasing IP address(es) ContainerID="49bc01f8fe1fd25dbc58e081e145237ea5c49d14446d8dec1e5dc2e238eef4b6" Mar 17 18:46:08.611259 env[1203]: 2025-03-17 18:46:08.467 [INFO][4710] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="49bc01f8fe1fd25dbc58e081e145237ea5c49d14446d8dec1e5dc2e238eef4b6" Mar 17 18:46:08.611259 env[1203]: 2025-03-17 18:46:08.491 [INFO][4718] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="49bc01f8fe1fd25dbc58e081e145237ea5c49d14446d8dec1e5dc2e238eef4b6" HandleID="k8s-pod-network.49bc01f8fe1fd25dbc58e081e145237ea5c49d14446d8dec1e5dc2e238eef4b6" Workload="localhost-k8s-calico--kube--controllers--56d6765747--9mr6w-eth0" Mar 17 18:46:08.611259 env[1203]: 2025-03-17 18:46:08.491 [INFO][4718] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Mar 17 18:46:08.611259 env[1203]: 2025-03-17 18:46:08.491 [INFO][4718] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Mar 17 18:46:08.611259 env[1203]: 2025-03-17 18:46:08.574 [WARNING][4718] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="49bc01f8fe1fd25dbc58e081e145237ea5c49d14446d8dec1e5dc2e238eef4b6" HandleID="k8s-pod-network.49bc01f8fe1fd25dbc58e081e145237ea5c49d14446d8dec1e5dc2e238eef4b6" Workload="localhost-k8s-calico--kube--controllers--56d6765747--9mr6w-eth0" Mar 17 18:46:08.611259 env[1203]: 2025-03-17 18:46:08.575 [INFO][4718] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="49bc01f8fe1fd25dbc58e081e145237ea5c49d14446d8dec1e5dc2e238eef4b6" HandleID="k8s-pod-network.49bc01f8fe1fd25dbc58e081e145237ea5c49d14446d8dec1e5dc2e238eef4b6" Workload="localhost-k8s-calico--kube--controllers--56d6765747--9mr6w-eth0" Mar 17 18:46:08.611259 env[1203]: 2025-03-17 18:46:08.607 [INFO][4718] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Mar 17 18:46:08.611259 env[1203]: 2025-03-17 18:46:08.609 [INFO][4710] cni-plugin/k8s.go 621: Teardown processing complete. ContainerID="49bc01f8fe1fd25dbc58e081e145237ea5c49d14446d8dec1e5dc2e238eef4b6" Mar 17 18:46:08.611984 env[1203]: time="2025-03-17T18:46:08.611942787Z" level=info msg="TearDown network for sandbox \"49bc01f8fe1fd25dbc58e081e145237ea5c49d14446d8dec1e5dc2e238eef4b6\" successfully" Mar 17 18:46:08.651347 env[1203]: time="2025-03-17T18:46:08.651299565Z" level=info msg="RemovePodSandbox \"49bc01f8fe1fd25dbc58e081e145237ea5c49d14446d8dec1e5dc2e238eef4b6\" returns successfully" Mar 17 18:46:08.651843 env[1203]: time="2025-03-17T18:46:08.651794848Z" level=info msg="StopPodSandbox for \"e89558f593d7e9c08a181ae183ab0a8320dd5ad3ce1575d1502e0a0d6fe4025b\"" Mar 17 18:46:08.720181 env[1203]: 2025-03-17 18:46:08.689 [WARNING][4740] cni-plugin/k8s.go 572: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="e89558f593d7e9c08a181ae183ab0a8320dd5ad3ce1575d1502e0a0d6fe4025b" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-coredns--7db6d8ff4d--nq4kb-eth0", GenerateName:"coredns-7db6d8ff4d-", Namespace:"kube-system", SelfLink:"", UID:"effac710-cde3-45ed-8e3f-90230de9316c", ResourceVersion:"1021", Generation:0, CreationTimestamp:time.Date(2025, time.March, 17, 18, 45, 23, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"k8s-app":"kube-dns", "pod-template-hash":"7db6d8ff4d", "projectcalico.org/namespace":"kube-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"coredns"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"eaa37ce96dbf7840a56065c16d8daaaa3ab02fc8f8c3afcde7beac9666f99957", Pod:"coredns-7db6d8ff4d-nq4kb", Endpoint:"eth0", ServiceAccountName:"coredns", IPNetworks:[]string{"192.168.88.133/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.kube-system", "ksa.kube-system.coredns"}, InterfaceName:"calife88be78495", MAC:"", Ports:[]v3.WorkloadEndpointPort{v3.WorkloadEndpointPort{Name:"dns", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"UDP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"dns-tcp", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"metrics", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x23c1, HostPort:0x0, HostIP:""}}, AllowSpoofedSourcePrefixes:[]string(nil)}} Mar 17 18:46:08.720181 env[1203]: 2025-03-17 18:46:08.689 [INFO][4740] cni-plugin/k8s.go 608: Cleaning up netns ContainerID="e89558f593d7e9c08a181ae183ab0a8320dd5ad3ce1575d1502e0a0d6fe4025b" Mar 17 18:46:08.720181 env[1203]: 2025-03-17 18:46:08.689 [INFO][4740] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="e89558f593d7e9c08a181ae183ab0a8320dd5ad3ce1575d1502e0a0d6fe4025b" iface="eth0" netns="" Mar 17 18:46:08.720181 env[1203]: 2025-03-17 18:46:08.689 [INFO][4740] cni-plugin/k8s.go 615: Releasing IP address(es) ContainerID="e89558f593d7e9c08a181ae183ab0a8320dd5ad3ce1575d1502e0a0d6fe4025b" Mar 17 18:46:08.720181 env[1203]: 2025-03-17 18:46:08.689 [INFO][4740] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="e89558f593d7e9c08a181ae183ab0a8320dd5ad3ce1575d1502e0a0d6fe4025b" Mar 17 18:46:08.720181 env[1203]: 2025-03-17 18:46:08.709 [INFO][4747] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="e89558f593d7e9c08a181ae183ab0a8320dd5ad3ce1575d1502e0a0d6fe4025b" HandleID="k8s-pod-network.e89558f593d7e9c08a181ae183ab0a8320dd5ad3ce1575d1502e0a0d6fe4025b" Workload="localhost-k8s-coredns--7db6d8ff4d--nq4kb-eth0" Mar 17 18:46:08.720181 env[1203]: 2025-03-17 18:46:08.709 [INFO][4747] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Mar 17 18:46:08.720181 env[1203]: 2025-03-17 18:46:08.709 [INFO][4747] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Mar 17 18:46:08.720181 env[1203]: 2025-03-17 18:46:08.715 [WARNING][4747] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="e89558f593d7e9c08a181ae183ab0a8320dd5ad3ce1575d1502e0a0d6fe4025b" HandleID="k8s-pod-network.e89558f593d7e9c08a181ae183ab0a8320dd5ad3ce1575d1502e0a0d6fe4025b" Workload="localhost-k8s-coredns--7db6d8ff4d--nq4kb-eth0" Mar 17 18:46:08.720181 env[1203]: 2025-03-17 18:46:08.715 [INFO][4747] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="e89558f593d7e9c08a181ae183ab0a8320dd5ad3ce1575d1502e0a0d6fe4025b" HandleID="k8s-pod-network.e89558f593d7e9c08a181ae183ab0a8320dd5ad3ce1575d1502e0a0d6fe4025b" Workload="localhost-k8s-coredns--7db6d8ff4d--nq4kb-eth0" Mar 17 18:46:08.720181 env[1203]: 2025-03-17 18:46:08.717 [INFO][4747] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Mar 17 18:46:08.720181 env[1203]: 2025-03-17 18:46:08.718 [INFO][4740] cni-plugin/k8s.go 621: Teardown processing complete. ContainerID="e89558f593d7e9c08a181ae183ab0a8320dd5ad3ce1575d1502e0a0d6fe4025b" Mar 17 18:46:08.720885 env[1203]: time="2025-03-17T18:46:08.720224038Z" level=info msg="TearDown network for sandbox \"e89558f593d7e9c08a181ae183ab0a8320dd5ad3ce1575d1502e0a0d6fe4025b\" successfully" Mar 17 18:46:08.720885 env[1203]: time="2025-03-17T18:46:08.720261449Z" level=info msg="StopPodSandbox for \"e89558f593d7e9c08a181ae183ab0a8320dd5ad3ce1575d1502e0a0d6fe4025b\" returns successfully" Mar 17 18:46:08.720885 env[1203]: time="2025-03-17T18:46:08.720839036Z" level=info msg="RemovePodSandbox for \"e89558f593d7e9c08a181ae183ab0a8320dd5ad3ce1575d1502e0a0d6fe4025b\"" Mar 17 18:46:08.721196 env[1203]: time="2025-03-17T18:46:08.720868150Z" level=info msg="Forcibly stopping sandbox \"e89558f593d7e9c08a181ae183ab0a8320dd5ad3ce1575d1502e0a0d6fe4025b\"" Mar 17 18:46:08.794014 env[1203]: 2025-03-17 18:46:08.752 [WARNING][4769] cni-plugin/k8s.go 572: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="e89558f593d7e9c08a181ae183ab0a8320dd5ad3ce1575d1502e0a0d6fe4025b" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-coredns--7db6d8ff4d--nq4kb-eth0", GenerateName:"coredns-7db6d8ff4d-", Namespace:"kube-system", SelfLink:"", UID:"effac710-cde3-45ed-8e3f-90230de9316c", ResourceVersion:"1021", Generation:0, CreationTimestamp:time.Date(2025, time.March, 17, 18, 45, 23, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"k8s-app":"kube-dns", "pod-template-hash":"7db6d8ff4d", "projectcalico.org/namespace":"kube-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"coredns"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"eaa37ce96dbf7840a56065c16d8daaaa3ab02fc8f8c3afcde7beac9666f99957", Pod:"coredns-7db6d8ff4d-nq4kb", Endpoint:"eth0", ServiceAccountName:"coredns", IPNetworks:[]string{"192.168.88.133/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.kube-system", "ksa.kube-system.coredns"}, InterfaceName:"calife88be78495", MAC:"", Ports:[]v3.WorkloadEndpointPort{v3.WorkloadEndpointPort{Name:"dns", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"UDP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"dns-tcp", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"metrics", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x23c1, HostPort:0x0, HostIP:""}}, AllowSpoofedSourcePrefixes:[]string(nil)}} Mar 17 18:46:08.794014 env[1203]: 2025-03-17 18:46:08.755 [INFO][4769] cni-plugin/k8s.go 608: Cleaning up netns ContainerID="e89558f593d7e9c08a181ae183ab0a8320dd5ad3ce1575d1502e0a0d6fe4025b" Mar 17 18:46:08.794014 env[1203]: 2025-03-17 18:46:08.755 [INFO][4769] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="e89558f593d7e9c08a181ae183ab0a8320dd5ad3ce1575d1502e0a0d6fe4025b" iface="eth0" netns="" Mar 17 18:46:08.794014 env[1203]: 2025-03-17 18:46:08.756 [INFO][4769] cni-plugin/k8s.go 615: Releasing IP address(es) ContainerID="e89558f593d7e9c08a181ae183ab0a8320dd5ad3ce1575d1502e0a0d6fe4025b" Mar 17 18:46:08.794014 env[1203]: 2025-03-17 18:46:08.756 [INFO][4769] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="e89558f593d7e9c08a181ae183ab0a8320dd5ad3ce1575d1502e0a0d6fe4025b" Mar 17 18:46:08.794014 env[1203]: 2025-03-17 18:46:08.781 [INFO][4778] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="e89558f593d7e9c08a181ae183ab0a8320dd5ad3ce1575d1502e0a0d6fe4025b" HandleID="k8s-pod-network.e89558f593d7e9c08a181ae183ab0a8320dd5ad3ce1575d1502e0a0d6fe4025b" Workload="localhost-k8s-coredns--7db6d8ff4d--nq4kb-eth0" Mar 17 18:46:08.794014 env[1203]: 2025-03-17 18:46:08.781 [INFO][4778] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Mar 17 18:46:08.794014 env[1203]: 2025-03-17 18:46:08.781 [INFO][4778] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Mar 17 18:46:08.794014 env[1203]: 2025-03-17 18:46:08.788 [WARNING][4778] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="e89558f593d7e9c08a181ae183ab0a8320dd5ad3ce1575d1502e0a0d6fe4025b" HandleID="k8s-pod-network.e89558f593d7e9c08a181ae183ab0a8320dd5ad3ce1575d1502e0a0d6fe4025b" Workload="localhost-k8s-coredns--7db6d8ff4d--nq4kb-eth0" Mar 17 18:46:08.794014 env[1203]: 2025-03-17 18:46:08.788 [INFO][4778] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="e89558f593d7e9c08a181ae183ab0a8320dd5ad3ce1575d1502e0a0d6fe4025b" HandleID="k8s-pod-network.e89558f593d7e9c08a181ae183ab0a8320dd5ad3ce1575d1502e0a0d6fe4025b" Workload="localhost-k8s-coredns--7db6d8ff4d--nq4kb-eth0" Mar 17 18:46:08.794014 env[1203]: 2025-03-17 18:46:08.790 [INFO][4778] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Mar 17 18:46:08.794014 env[1203]: 2025-03-17 18:46:08.792 [INFO][4769] cni-plugin/k8s.go 621: Teardown processing complete. ContainerID="e89558f593d7e9c08a181ae183ab0a8320dd5ad3ce1575d1502e0a0d6fe4025b" Mar 17 18:46:08.794621 env[1203]: time="2025-03-17T18:46:08.794031542Z" level=info msg="TearDown network for sandbox \"e89558f593d7e9c08a181ae183ab0a8320dd5ad3ce1575d1502e0a0d6fe4025b\" successfully" Mar 17 18:46:08.801649 env[1203]: time="2025-03-17T18:46:08.801559651Z" level=info msg="RemovePodSandbox \"e89558f593d7e9c08a181ae183ab0a8320dd5ad3ce1575d1502e0a0d6fe4025b\" returns successfully" Mar 17 18:46:08.802159 env[1203]: time="2025-03-17T18:46:08.802135725Z" level=info msg="StopPodSandbox for \"20559b123871c3bfa8c867ee93a3db1b0ec66ee15b3c5438f5405ba0069b7e18\"" Mar 17 18:46:08.867880 env[1203]: 2025-03-17 18:46:08.837 [WARNING][4800] cni-plugin/k8s.go 572: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="20559b123871c3bfa8c867ee93a3db1b0ec66ee15b3c5438f5405ba0069b7e18" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-calico--apiserver--5c5c847997--j7phz-eth0", GenerateName:"calico-apiserver-5c5c847997-", Namespace:"calico-apiserver", SelfLink:"", UID:"f76afdc5-ade3-4599-9191-81e2b3c52eb2", ResourceVersion:"1018", Generation:0, CreationTimestamp:time.Date(2025, time.March, 17, 18, 45, 29, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"apiserver":"true", "app.kubernetes.io/name":"calico-apiserver", "k8s-app":"calico-apiserver", "pod-template-hash":"5c5c847997", "projectcalico.org/namespace":"calico-apiserver", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-apiserver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"79a827f67e332d210b35700b62741cbcbb9e6988df7934ba508f9a121c0cc80d", Pod:"calico-apiserver-5c5c847997-j7phz", Endpoint:"eth0", ServiceAccountName:"calico-apiserver", IPNetworks:[]string{"192.168.88.129/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-apiserver", "ksa.calico-apiserver.calico-apiserver"}, InterfaceName:"cali3fa9120f0d0", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil)}} Mar 17 18:46:08.867880 env[1203]: 2025-03-17 18:46:08.837 [INFO][4800] cni-plugin/k8s.go 608: Cleaning up netns ContainerID="20559b123871c3bfa8c867ee93a3db1b0ec66ee15b3c5438f5405ba0069b7e18" Mar 17 18:46:08.867880 env[1203]: 2025-03-17 18:46:08.837 [INFO][4800] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="20559b123871c3bfa8c867ee93a3db1b0ec66ee15b3c5438f5405ba0069b7e18" iface="eth0" netns="" Mar 17 18:46:08.867880 env[1203]: 2025-03-17 18:46:08.837 [INFO][4800] cni-plugin/k8s.go 615: Releasing IP address(es) ContainerID="20559b123871c3bfa8c867ee93a3db1b0ec66ee15b3c5438f5405ba0069b7e18" Mar 17 18:46:08.867880 env[1203]: 2025-03-17 18:46:08.837 [INFO][4800] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="20559b123871c3bfa8c867ee93a3db1b0ec66ee15b3c5438f5405ba0069b7e18" Mar 17 18:46:08.867880 env[1203]: 2025-03-17 18:46:08.857 [INFO][4807] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="20559b123871c3bfa8c867ee93a3db1b0ec66ee15b3c5438f5405ba0069b7e18" HandleID="k8s-pod-network.20559b123871c3bfa8c867ee93a3db1b0ec66ee15b3c5438f5405ba0069b7e18" Workload="localhost-k8s-calico--apiserver--5c5c847997--j7phz-eth0" Mar 17 18:46:08.867880 env[1203]: 2025-03-17 18:46:08.857 [INFO][4807] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Mar 17 18:46:08.867880 env[1203]: 2025-03-17 18:46:08.857 [INFO][4807] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Mar 17 18:46:08.867880 env[1203]: 2025-03-17 18:46:08.863 [WARNING][4807] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="20559b123871c3bfa8c867ee93a3db1b0ec66ee15b3c5438f5405ba0069b7e18" HandleID="k8s-pod-network.20559b123871c3bfa8c867ee93a3db1b0ec66ee15b3c5438f5405ba0069b7e18" Workload="localhost-k8s-calico--apiserver--5c5c847997--j7phz-eth0" Mar 17 18:46:08.867880 env[1203]: 2025-03-17 18:46:08.863 [INFO][4807] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="20559b123871c3bfa8c867ee93a3db1b0ec66ee15b3c5438f5405ba0069b7e18" HandleID="k8s-pod-network.20559b123871c3bfa8c867ee93a3db1b0ec66ee15b3c5438f5405ba0069b7e18" Workload="localhost-k8s-calico--apiserver--5c5c847997--j7phz-eth0" Mar 17 18:46:08.867880 env[1203]: 2025-03-17 18:46:08.865 [INFO][4807] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Mar 17 18:46:08.867880 env[1203]: 2025-03-17 18:46:08.866 [INFO][4800] cni-plugin/k8s.go 621: Teardown processing complete. ContainerID="20559b123871c3bfa8c867ee93a3db1b0ec66ee15b3c5438f5405ba0069b7e18" Mar 17 18:46:08.867880 env[1203]: time="2025-03-17T18:46:08.867830038Z" level=info msg="TearDown network for sandbox \"20559b123871c3bfa8c867ee93a3db1b0ec66ee15b3c5438f5405ba0069b7e18\" successfully" Mar 17 18:46:08.869128 env[1203]: time="2025-03-17T18:46:08.868660761Z" level=info msg="StopPodSandbox for \"20559b123871c3bfa8c867ee93a3db1b0ec66ee15b3c5438f5405ba0069b7e18\" returns successfully" Mar 17 18:46:08.869429 env[1203]: time="2025-03-17T18:46:08.869184527Z" level=info msg="RemovePodSandbox for \"20559b123871c3bfa8c867ee93a3db1b0ec66ee15b3c5438f5405ba0069b7e18\"" Mar 17 18:46:08.869429 env[1203]: time="2025-03-17T18:46:08.869227067Z" level=info msg="Forcibly stopping sandbox \"20559b123871c3bfa8c867ee93a3db1b0ec66ee15b3c5438f5405ba0069b7e18\"" Mar 17 18:46:08.930214 env[1203]: 2025-03-17 18:46:08.902 [WARNING][4829] cni-plugin/k8s.go 572: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="20559b123871c3bfa8c867ee93a3db1b0ec66ee15b3c5438f5405ba0069b7e18" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-calico--apiserver--5c5c847997--j7phz-eth0", GenerateName:"calico-apiserver-5c5c847997-", Namespace:"calico-apiserver", SelfLink:"", UID:"f76afdc5-ade3-4599-9191-81e2b3c52eb2", ResourceVersion:"1018", Generation:0, CreationTimestamp:time.Date(2025, time.March, 17, 18, 45, 29, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"apiserver":"true", "app.kubernetes.io/name":"calico-apiserver", "k8s-app":"calico-apiserver", "pod-template-hash":"5c5c847997", "projectcalico.org/namespace":"calico-apiserver", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-apiserver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"79a827f67e332d210b35700b62741cbcbb9e6988df7934ba508f9a121c0cc80d", Pod:"calico-apiserver-5c5c847997-j7phz", Endpoint:"eth0", ServiceAccountName:"calico-apiserver", IPNetworks:[]string{"192.168.88.129/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-apiserver", "ksa.calico-apiserver.calico-apiserver"}, InterfaceName:"cali3fa9120f0d0", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil)}} Mar 17 18:46:08.930214 env[1203]: 2025-03-17 18:46:08.902 [INFO][4829] cni-plugin/k8s.go 608: Cleaning up netns ContainerID="20559b123871c3bfa8c867ee93a3db1b0ec66ee15b3c5438f5405ba0069b7e18" Mar 17 18:46:08.930214 env[1203]: 2025-03-17 18:46:08.902 [INFO][4829] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="20559b123871c3bfa8c867ee93a3db1b0ec66ee15b3c5438f5405ba0069b7e18" iface="eth0" netns="" Mar 17 18:46:08.930214 env[1203]: 2025-03-17 18:46:08.902 [INFO][4829] cni-plugin/k8s.go 615: Releasing IP address(es) ContainerID="20559b123871c3bfa8c867ee93a3db1b0ec66ee15b3c5438f5405ba0069b7e18" Mar 17 18:46:08.930214 env[1203]: 2025-03-17 18:46:08.902 [INFO][4829] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="20559b123871c3bfa8c867ee93a3db1b0ec66ee15b3c5438f5405ba0069b7e18" Mar 17 18:46:08.930214 env[1203]: 2025-03-17 18:46:08.921 [INFO][4836] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="20559b123871c3bfa8c867ee93a3db1b0ec66ee15b3c5438f5405ba0069b7e18" HandleID="k8s-pod-network.20559b123871c3bfa8c867ee93a3db1b0ec66ee15b3c5438f5405ba0069b7e18" Workload="localhost-k8s-calico--apiserver--5c5c847997--j7phz-eth0" Mar 17 18:46:08.930214 env[1203]: 2025-03-17 18:46:08.921 [INFO][4836] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Mar 17 18:46:08.930214 env[1203]: 2025-03-17 18:46:08.921 [INFO][4836] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Mar 17 18:46:08.930214 env[1203]: 2025-03-17 18:46:08.926 [WARNING][4836] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="20559b123871c3bfa8c867ee93a3db1b0ec66ee15b3c5438f5405ba0069b7e18" HandleID="k8s-pod-network.20559b123871c3bfa8c867ee93a3db1b0ec66ee15b3c5438f5405ba0069b7e18" Workload="localhost-k8s-calico--apiserver--5c5c847997--j7phz-eth0" Mar 17 18:46:08.930214 env[1203]: 2025-03-17 18:46:08.926 [INFO][4836] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="20559b123871c3bfa8c867ee93a3db1b0ec66ee15b3c5438f5405ba0069b7e18" HandleID="k8s-pod-network.20559b123871c3bfa8c867ee93a3db1b0ec66ee15b3c5438f5405ba0069b7e18" Workload="localhost-k8s-calico--apiserver--5c5c847997--j7phz-eth0" Mar 17 18:46:08.930214 env[1203]: 2025-03-17 18:46:08.927 [INFO][4836] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Mar 17 18:46:08.930214 env[1203]: 2025-03-17 18:46:08.928 [INFO][4829] cni-plugin/k8s.go 621: Teardown processing complete. ContainerID="20559b123871c3bfa8c867ee93a3db1b0ec66ee15b3c5438f5405ba0069b7e18" Mar 17 18:46:08.930755 env[1203]: time="2025-03-17T18:46:08.930706356Z" level=info msg="TearDown network for sandbox \"20559b123871c3bfa8c867ee93a3db1b0ec66ee15b3c5438f5405ba0069b7e18\" successfully" Mar 17 18:46:08.934575 env[1203]: time="2025-03-17T18:46:08.934542406Z" level=info msg="RemovePodSandbox \"20559b123871c3bfa8c867ee93a3db1b0ec66ee15b3c5438f5405ba0069b7e18\" returns successfully" Mar 17 18:46:08.935090 env[1203]: time="2025-03-17T18:46:08.935055352Z" level=info msg="StopPodSandbox for \"a251bdfeb83e381893a6957f1a65c91859b0e72c5f92adb95520539a022b1e90\"" Mar 17 18:46:09.010978 env[1203]: 2025-03-17 18:46:08.974 [WARNING][4859] cni-plugin/k8s.go 572: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="a251bdfeb83e381893a6957f1a65c91859b0e72c5f92adb95520539a022b1e90" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-calico--apiserver--5c5c847997--cn65r-eth0", GenerateName:"calico-apiserver-5c5c847997-", Namespace:"calico-apiserver", SelfLink:"", UID:"7f41b2cd-adad-4fdd-914e-25770b9dbb49", ResourceVersion:"1025", Generation:0, CreationTimestamp:time.Date(2025, time.March, 17, 18, 45, 29, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"apiserver":"true", "app.kubernetes.io/name":"calico-apiserver", "k8s-app":"calico-apiserver", "pod-template-hash":"5c5c847997", "projectcalico.org/namespace":"calico-apiserver", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-apiserver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"45ebe75264aeedd3c0f48890f01b5eac4a8f15cf5a4ad8b8e3409da1303c153a", Pod:"calico-apiserver-5c5c847997-cn65r", Endpoint:"eth0", ServiceAccountName:"calico-apiserver", IPNetworks:[]string{"192.168.88.130/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-apiserver", "ksa.calico-apiserver.calico-apiserver"}, InterfaceName:"cali155111bf732", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil)}} Mar 17 18:46:09.010978 env[1203]: 2025-03-17 18:46:08.974 [INFO][4859] cni-plugin/k8s.go 608: Cleaning up netns ContainerID="a251bdfeb83e381893a6957f1a65c91859b0e72c5f92adb95520539a022b1e90" Mar 17 18:46:09.010978 env[1203]: 2025-03-17 18:46:08.974 [INFO][4859] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="a251bdfeb83e381893a6957f1a65c91859b0e72c5f92adb95520539a022b1e90" iface="eth0" netns="" Mar 17 18:46:09.010978 env[1203]: 2025-03-17 18:46:08.974 [INFO][4859] cni-plugin/k8s.go 615: Releasing IP address(es) ContainerID="a251bdfeb83e381893a6957f1a65c91859b0e72c5f92adb95520539a022b1e90" Mar 17 18:46:09.010978 env[1203]: 2025-03-17 18:46:08.974 [INFO][4859] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="a251bdfeb83e381893a6957f1a65c91859b0e72c5f92adb95520539a022b1e90" Mar 17 18:46:09.010978 env[1203]: 2025-03-17 18:46:08.996 [INFO][4866] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="a251bdfeb83e381893a6957f1a65c91859b0e72c5f92adb95520539a022b1e90" HandleID="k8s-pod-network.a251bdfeb83e381893a6957f1a65c91859b0e72c5f92adb95520539a022b1e90" Workload="localhost-k8s-calico--apiserver--5c5c847997--cn65r-eth0" Mar 17 18:46:09.010978 env[1203]: 2025-03-17 18:46:08.996 [INFO][4866] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Mar 17 18:46:09.010978 env[1203]: 2025-03-17 18:46:08.996 [INFO][4866] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Mar 17 18:46:09.010978 env[1203]: 2025-03-17 18:46:09.003 [WARNING][4866] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="a251bdfeb83e381893a6957f1a65c91859b0e72c5f92adb95520539a022b1e90" HandleID="k8s-pod-network.a251bdfeb83e381893a6957f1a65c91859b0e72c5f92adb95520539a022b1e90" Workload="localhost-k8s-calico--apiserver--5c5c847997--cn65r-eth0" Mar 17 18:46:09.010978 env[1203]: 2025-03-17 18:46:09.003 [INFO][4866] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="a251bdfeb83e381893a6957f1a65c91859b0e72c5f92adb95520539a022b1e90" HandleID="k8s-pod-network.a251bdfeb83e381893a6957f1a65c91859b0e72c5f92adb95520539a022b1e90" Workload="localhost-k8s-calico--apiserver--5c5c847997--cn65r-eth0" Mar 17 18:46:09.010978 env[1203]: 2025-03-17 18:46:09.005 [INFO][4866] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Mar 17 18:46:09.010978 env[1203]: 2025-03-17 18:46:09.008 [INFO][4859] cni-plugin/k8s.go 621: Teardown processing complete. ContainerID="a251bdfeb83e381893a6957f1a65c91859b0e72c5f92adb95520539a022b1e90" Mar 17 18:46:09.011472 env[1203]: time="2025-03-17T18:46:09.011018048Z" level=info msg="TearDown network for sandbox \"a251bdfeb83e381893a6957f1a65c91859b0e72c5f92adb95520539a022b1e90\" successfully" Mar 17 18:46:09.011472 env[1203]: time="2025-03-17T18:46:09.011057354Z" level=info msg="StopPodSandbox for \"a251bdfeb83e381893a6957f1a65c91859b0e72c5f92adb95520539a022b1e90\" returns successfully" Mar 17 18:46:09.011740 env[1203]: time="2025-03-17T18:46:09.011712550Z" level=info msg="RemovePodSandbox for \"a251bdfeb83e381893a6957f1a65c91859b0e72c5f92adb95520539a022b1e90\"" Mar 17 18:46:09.011809 env[1203]: time="2025-03-17T18:46:09.011747167Z" level=info msg="Forcibly stopping sandbox \"a251bdfeb83e381893a6957f1a65c91859b0e72c5f92adb95520539a022b1e90\"" Mar 17 18:46:09.073112 env[1203]: 2025-03-17 18:46:09.047 [WARNING][4888] cni-plugin/k8s.go 572: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="a251bdfeb83e381893a6957f1a65c91859b0e72c5f92adb95520539a022b1e90" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-calico--apiserver--5c5c847997--cn65r-eth0", GenerateName:"calico-apiserver-5c5c847997-", Namespace:"calico-apiserver", SelfLink:"", UID:"7f41b2cd-adad-4fdd-914e-25770b9dbb49", ResourceVersion:"1025", Generation:0, CreationTimestamp:time.Date(2025, time.March, 17, 18, 45, 29, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"apiserver":"true", "app.kubernetes.io/name":"calico-apiserver", "k8s-app":"calico-apiserver", "pod-template-hash":"5c5c847997", "projectcalico.org/namespace":"calico-apiserver", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-apiserver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"45ebe75264aeedd3c0f48890f01b5eac4a8f15cf5a4ad8b8e3409da1303c153a", Pod:"calico-apiserver-5c5c847997-cn65r", Endpoint:"eth0", ServiceAccountName:"calico-apiserver", IPNetworks:[]string{"192.168.88.130/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-apiserver", "ksa.calico-apiserver.calico-apiserver"}, InterfaceName:"cali155111bf732", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil)}} Mar 17 18:46:09.073112 env[1203]: 2025-03-17 18:46:09.047 [INFO][4888] cni-plugin/k8s.go 608: Cleaning up netns ContainerID="a251bdfeb83e381893a6957f1a65c91859b0e72c5f92adb95520539a022b1e90" Mar 17 18:46:09.073112 env[1203]: 2025-03-17 18:46:09.047 [INFO][4888] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="a251bdfeb83e381893a6957f1a65c91859b0e72c5f92adb95520539a022b1e90" iface="eth0" netns="" Mar 17 18:46:09.073112 env[1203]: 2025-03-17 18:46:09.047 [INFO][4888] cni-plugin/k8s.go 615: Releasing IP address(es) ContainerID="a251bdfeb83e381893a6957f1a65c91859b0e72c5f92adb95520539a022b1e90" Mar 17 18:46:09.073112 env[1203]: 2025-03-17 18:46:09.047 [INFO][4888] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="a251bdfeb83e381893a6957f1a65c91859b0e72c5f92adb95520539a022b1e90" Mar 17 18:46:09.073112 env[1203]: 2025-03-17 18:46:09.064 [INFO][4895] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="a251bdfeb83e381893a6957f1a65c91859b0e72c5f92adb95520539a022b1e90" HandleID="k8s-pod-network.a251bdfeb83e381893a6957f1a65c91859b0e72c5f92adb95520539a022b1e90" Workload="localhost-k8s-calico--apiserver--5c5c847997--cn65r-eth0" Mar 17 18:46:09.073112 env[1203]: 2025-03-17 18:46:09.064 [INFO][4895] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Mar 17 18:46:09.073112 env[1203]: 2025-03-17 18:46:09.065 [INFO][4895] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Mar 17 18:46:09.073112 env[1203]: 2025-03-17 18:46:09.069 [WARNING][4895] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="a251bdfeb83e381893a6957f1a65c91859b0e72c5f92adb95520539a022b1e90" HandleID="k8s-pod-network.a251bdfeb83e381893a6957f1a65c91859b0e72c5f92adb95520539a022b1e90" Workload="localhost-k8s-calico--apiserver--5c5c847997--cn65r-eth0" Mar 17 18:46:09.073112 env[1203]: 2025-03-17 18:46:09.069 [INFO][4895] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="a251bdfeb83e381893a6957f1a65c91859b0e72c5f92adb95520539a022b1e90" HandleID="k8s-pod-network.a251bdfeb83e381893a6957f1a65c91859b0e72c5f92adb95520539a022b1e90" Workload="localhost-k8s-calico--apiserver--5c5c847997--cn65r-eth0" Mar 17 18:46:09.073112 env[1203]: 2025-03-17 18:46:09.070 [INFO][4895] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Mar 17 18:46:09.073112 env[1203]: 2025-03-17 18:46:09.071 [INFO][4888] cni-plugin/k8s.go 621: Teardown processing complete. ContainerID="a251bdfeb83e381893a6957f1a65c91859b0e72c5f92adb95520539a022b1e90" Mar 17 18:46:09.073578 env[1203]: time="2025-03-17T18:46:09.073143867Z" level=info msg="TearDown network for sandbox \"a251bdfeb83e381893a6957f1a65c91859b0e72c5f92adb95520539a022b1e90\" successfully" Mar 17 18:46:09.156961 env[1203]: time="2025-03-17T18:46:09.156833706Z" level=info msg="RemovePodSandbox \"a251bdfeb83e381893a6957f1a65c91859b0e72c5f92adb95520539a022b1e90\" returns successfully" Mar 17 18:46:12.271029 kubelet[2045]: I0317 18:46:12.270974 2045 prober_manager.go:312] "Failed to trigger a manual run" probe="Readiness" Mar 17 18:46:12.298000 audit[4906]: NETFILTER_CFG table=filter:117 family=2 entries=9 op=nft_register_rule pid=4906 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Mar 17 18:46:12.298000 audit[4906]: SYSCALL arch=c000003e syscall=46 success=yes exit=2932 a0=3 a1=7ffe2ada4430 a2=0 a3=7ffe2ada441c items=0 ppid=2248 pid=4906 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:46:12.298000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Mar 17 18:46:12.303000 audit[4906]: NETFILTER_CFG table=nat:118 family=2 entries=27 op=nft_register_chain pid=4906 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Mar 17 18:46:12.303000 audit[4906]: SYSCALL arch=c000003e syscall=46 success=yes exit=9348 a0=3 a1=7ffe2ada4430 a2=0 a3=7ffe2ada441c items=0 ppid=2248 pid=4906 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:46:12.303000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Mar 17 18:46:13.118780 systemd[1]: Started sshd@16-10.0.0.110:22-10.0.0.1:56014.service. Mar 17 18:46:13.118000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@16-10.0.0.110:22-10.0.0.1:56014 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:46:13.120144 kernel: kauditd_printk_skb: 62 callbacks suppressed Mar 17 18:46:13.120210 kernel: audit: type=1130 audit(1742237173.118:1427): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@16-10.0.0.110:22-10.0.0.1:56014 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:46:13.152000 audit[4908]: USER_ACCT pid=4908 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Mar 17 18:46:13.153723 sshd[4908]: Accepted publickey for core from 10.0.0.1 port 56014 ssh2: RSA SHA256:EcJpbXadXymLrINQtrmLSqTXC2wy0UoSwO9MmZb5CTo Mar 17 18:46:13.157000 audit[4908]: CRED_ACQ pid=4908 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Mar 17 18:46:13.157877 sshd[4908]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Mar 17 18:46:13.161068 kernel: audit: type=1101 audit(1742237173.152:1428): pid=4908 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Mar 17 18:46:13.161183 kernel: audit: type=1103 audit(1742237173.157:1429): pid=4908 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Mar 17 18:46:13.161205 kernel: audit: type=1006 audit(1742237173.157:1430): pid=4908 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=17 res=1 Mar 17 18:46:13.161814 systemd-logind[1188]: New session 17 of user core. Mar 17 18:46:13.162293 systemd[1]: Started session-17.scope. Mar 17 18:46:13.163400 kernel: audit: type=1300 audit(1742237173.157:1430): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffc052c9f20 a2=3 a3=0 items=0 ppid=1 pid=4908 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=17 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:46:13.157000 audit[4908]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffc052c9f20 a2=3 a3=0 items=0 ppid=1 pid=4908 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=17 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:46:13.157000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Mar 17 18:46:13.168600 kernel: audit: type=1327 audit(1742237173.157:1430): proctitle=737368643A20636F7265205B707269765D Mar 17 18:46:13.168687 kernel: audit: type=1105 audit(1742237173.162:1431): pid=4908 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Mar 17 18:46:13.162000 audit[4908]: USER_START pid=4908 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Mar 17 18:46:13.172732 kernel: audit: type=1103 audit(1742237173.166:1432): pid=4910 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Mar 17 18:46:13.166000 audit[4910]: CRED_ACQ pid=4910 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Mar 17 18:46:13.268886 sshd[4908]: pam_unix(sshd:session): session closed for user core Mar 17 18:46:13.269000 audit[4908]: USER_END pid=4908 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Mar 17 18:46:13.269000 audit[4908]: CRED_DISP pid=4908 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Mar 17 18:46:13.271806 systemd[1]: sshd@16-10.0.0.110:22-10.0.0.1:56014.service: Deactivated successfully. Mar 17 18:46:13.272313 systemd[1]: session-17.scope: Deactivated successfully. Mar 17 18:46:13.273548 systemd[1]: Started sshd@17-10.0.0.110:22-10.0.0.1:56018.service. Mar 17 18:46:13.275835 systemd-logind[1188]: Session 17 logged out. Waiting for processes to exit. Mar 17 18:46:13.276709 systemd-logind[1188]: Removed session 17. Mar 17 18:46:13.278542 kernel: audit: type=1106 audit(1742237173.269:1433): pid=4908 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Mar 17 18:46:13.278590 kernel: audit: type=1104 audit(1742237173.269:1434): pid=4908 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Mar 17 18:46:13.271000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@16-10.0.0.110:22-10.0.0.1:56014 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:46:13.273000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@17-10.0.0.110:22-10.0.0.1:56018 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:46:13.306000 audit[4921]: USER_ACCT pid=4921 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Mar 17 18:46:13.307027 sshd[4921]: Accepted publickey for core from 10.0.0.1 port 56018 ssh2: RSA SHA256:EcJpbXadXymLrINQtrmLSqTXC2wy0UoSwO9MmZb5CTo Mar 17 18:46:13.307000 audit[4921]: CRED_ACQ pid=4921 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Mar 17 18:46:13.307000 audit[4921]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7fffee787310 a2=3 a3=0 items=0 ppid=1 pid=4921 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=18 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:46:13.307000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Mar 17 18:46:13.308226 sshd[4921]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Mar 17 18:46:13.311853 systemd-logind[1188]: New session 18 of user core. Mar 17 18:46:13.312584 systemd[1]: Started session-18.scope. Mar 17 18:46:13.316000 audit[4921]: USER_START pid=4921 uid=0 auid=500 ses=18 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Mar 17 18:46:13.317000 audit[4923]: CRED_ACQ pid=4923 uid=0 auid=500 ses=18 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Mar 17 18:46:13.481097 sshd[4921]: pam_unix(sshd:session): session closed for user core Mar 17 18:46:13.481000 audit[4921]: USER_END pid=4921 uid=0 auid=500 ses=18 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Mar 17 18:46:13.481000 audit[4921]: CRED_DISP pid=4921 uid=0 auid=500 ses=18 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Mar 17 18:46:13.483785 systemd[1]: sshd@17-10.0.0.110:22-10.0.0.1:56018.service: Deactivated successfully. Mar 17 18:46:13.483000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@17-10.0.0.110:22-10.0.0.1:56018 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:46:13.484440 systemd[1]: session-18.scope: Deactivated successfully. Mar 17 18:46:13.484993 systemd-logind[1188]: Session 18 logged out. Waiting for processes to exit. Mar 17 18:46:13.486117 systemd[1]: Started sshd@18-10.0.0.110:22-10.0.0.1:56022.service. Mar 17 18:46:13.485000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@18-10.0.0.110:22-10.0.0.1:56022 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:46:13.486965 systemd-logind[1188]: Removed session 18. Mar 17 18:46:13.521000 audit[4932]: USER_ACCT pid=4932 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Mar 17 18:46:13.522000 audit[4932]: CRED_ACQ pid=4932 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Mar 17 18:46:13.522000 audit[4932]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffc785fdf70 a2=3 a3=0 items=0 ppid=1 pid=4932 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=19 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:46:13.522000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Mar 17 18:46:13.523105 sshd[4932]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Mar 17 18:46:13.524338 sshd[4932]: Accepted publickey for core from 10.0.0.1 port 56022 ssh2: RSA SHA256:EcJpbXadXymLrINQtrmLSqTXC2wy0UoSwO9MmZb5CTo Mar 17 18:46:13.531264 systemd-logind[1188]: New session 19 of user core. Mar 17 18:46:13.532334 systemd[1]: Started session-19.scope. Mar 17 18:46:13.538000 audit[4932]: USER_START pid=4932 uid=0 auid=500 ses=19 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Mar 17 18:46:13.539000 audit[4934]: CRED_ACQ pid=4934 uid=0 auid=500 ses=19 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Mar 17 18:46:15.051000 audit[4966]: NETFILTER_CFG table=filter:119 family=2 entries=20 op=nft_register_rule pid=4966 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Mar 17 18:46:15.051000 audit[4966]: SYSCALL arch=c000003e syscall=46 success=yes exit=11860 a0=3 a1=7ffeebfbdae0 a2=0 a3=7ffeebfbdacc items=0 ppid=2248 pid=4966 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:46:15.051000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Mar 17 18:46:15.058000 audit[4966]: NETFILTER_CFG table=nat:120 family=2 entries=22 op=nft_register_rule pid=4966 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Mar 17 18:46:15.058000 audit[4966]: SYSCALL arch=c000003e syscall=46 success=yes exit=6540 a0=3 a1=7ffeebfbdae0 a2=0 a3=0 items=0 ppid=2248 pid=4966 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:46:15.058000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Mar 17 18:46:15.063000 audit[4932]: USER_END pid=4932 uid=0 auid=500 ses=19 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Mar 17 18:46:15.063000 audit[4932]: CRED_DISP pid=4932 uid=0 auid=500 ses=19 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Mar 17 18:46:15.063184 sshd[4932]: pam_unix(sshd:session): session closed for user core Mar 17 18:46:15.068123 systemd[1]: Started sshd@19-10.0.0.110:22-10.0.0.1:56038.service. Mar 17 18:46:15.067000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@19-10.0.0.110:22-10.0.0.1:56038 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:46:15.068760 systemd[1]: sshd@18-10.0.0.110:22-10.0.0.1:56022.service: Deactivated successfully. Mar 17 18:46:15.069000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@18-10.0.0.110:22-10.0.0.1:56022 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:46:15.070269 systemd[1]: session-19.scope: Deactivated successfully. Mar 17 18:46:15.071093 systemd-logind[1188]: Session 19 logged out. Waiting for processes to exit. Mar 17 18:46:15.072612 systemd-logind[1188]: Removed session 19. Mar 17 18:46:15.074000 audit[4971]: NETFILTER_CFG table=filter:121 family=2 entries=32 op=nft_register_rule pid=4971 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Mar 17 18:46:15.074000 audit[4971]: SYSCALL arch=c000003e syscall=46 success=yes exit=11860 a0=3 a1=7ffe12673260 a2=0 a3=7ffe1267324c items=0 ppid=2248 pid=4971 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:46:15.074000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Mar 17 18:46:15.082000 audit[4971]: NETFILTER_CFG table=nat:122 family=2 entries=22 op=nft_register_rule pid=4971 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Mar 17 18:46:15.082000 audit[4971]: SYSCALL arch=c000003e syscall=46 success=yes exit=6540 a0=3 a1=7ffe12673260 a2=0 a3=0 items=0 ppid=2248 pid=4971 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:46:15.082000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Mar 17 18:46:15.102000 audit[4969]: USER_ACCT pid=4969 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Mar 17 18:46:15.103848 sshd[4969]: Accepted publickey for core from 10.0.0.1 port 56038 ssh2: RSA SHA256:EcJpbXadXymLrINQtrmLSqTXC2wy0UoSwO9MmZb5CTo Mar 17 18:46:15.103000 audit[4969]: CRED_ACQ pid=4969 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Mar 17 18:46:15.103000 audit[4969]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7fff2b25f780 a2=3 a3=0 items=0 ppid=1 pid=4969 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=20 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:46:15.103000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Mar 17 18:46:15.104857 sshd[4969]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Mar 17 18:46:15.108234 systemd-logind[1188]: New session 20 of user core. Mar 17 18:46:15.109008 systemd[1]: Started session-20.scope. Mar 17 18:46:15.112000 audit[4969]: USER_START pid=4969 uid=0 auid=500 ses=20 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Mar 17 18:46:15.113000 audit[4973]: CRED_ACQ pid=4973 uid=0 auid=500 ses=20 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Mar 17 18:46:15.327401 sshd[4969]: pam_unix(sshd:session): session closed for user core Mar 17 18:46:15.329000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@20-10.0.0.110:22-10.0.0.1:56040 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:46:15.330496 systemd[1]: Started sshd@20-10.0.0.110:22-10.0.0.1:56040.service. Mar 17 18:46:15.330000 audit[4969]: USER_END pid=4969 uid=0 auid=500 ses=20 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Mar 17 18:46:15.331000 audit[4969]: CRED_DISP pid=4969 uid=0 auid=500 ses=20 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Mar 17 18:46:15.332000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@19-10.0.0.110:22-10.0.0.1:56038 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:46:15.333073 systemd[1]: sshd@19-10.0.0.110:22-10.0.0.1:56038.service: Deactivated successfully. Mar 17 18:46:15.333937 systemd[1]: session-20.scope: Deactivated successfully. Mar 17 18:46:15.334571 systemd-logind[1188]: Session 20 logged out. Waiting for processes to exit. Mar 17 18:46:15.335467 systemd-logind[1188]: Removed session 20. Mar 17 18:46:15.360000 audit[4981]: USER_ACCT pid=4981 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Mar 17 18:46:15.361945 sshd[4981]: Accepted publickey for core from 10.0.0.1 port 56040 ssh2: RSA SHA256:EcJpbXadXymLrINQtrmLSqTXC2wy0UoSwO9MmZb5CTo Mar 17 18:46:15.362000 audit[4981]: CRED_ACQ pid=4981 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Mar 17 18:46:15.362000 audit[4981]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffc37cd5430 a2=3 a3=0 items=0 ppid=1 pid=4981 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=21 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:46:15.362000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Mar 17 18:46:15.363071 sshd[4981]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Mar 17 18:46:15.366687 systemd-logind[1188]: New session 21 of user core. Mar 17 18:46:15.367461 systemd[1]: Started session-21.scope. Mar 17 18:46:15.370000 audit[4981]: USER_START pid=4981 uid=0 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Mar 17 18:46:15.371000 audit[4984]: CRED_ACQ pid=4984 uid=0 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Mar 17 18:46:15.471449 sshd[4981]: pam_unix(sshd:session): session closed for user core Mar 17 18:46:15.472000 audit[4981]: USER_END pid=4981 uid=0 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Mar 17 18:46:15.472000 audit[4981]: CRED_DISP pid=4981 uid=0 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Mar 17 18:46:15.474764 systemd[1]: sshd@20-10.0.0.110:22-10.0.0.1:56040.service: Deactivated successfully. Mar 17 18:46:15.475432 systemd[1]: session-21.scope: Deactivated successfully. Mar 17 18:46:15.474000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@20-10.0.0.110:22-10.0.0.1:56040 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:46:15.475957 systemd-logind[1188]: Session 21 logged out. Waiting for processes to exit. Mar 17 18:46:15.476611 systemd-logind[1188]: Removed session 21. Mar 17 18:46:20.475422 kubelet[2045]: E0317 18:46:20.475395 2045 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Mar 17 18:46:20.478780 kernel: kauditd_printk_skb: 57 callbacks suppressed Mar 17 18:46:20.479294 kernel: audit: type=1130 audit(1742237180.475:1476): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@21-10.0.0.110:22-10.0.0.1:56438 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:46:20.475000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@21-10.0.0.110:22-10.0.0.1:56438 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:46:20.476707 systemd[1]: Started sshd@21-10.0.0.110:22-10.0.0.1:56438.service. Mar 17 18:46:20.522000 audit[5025]: USER_ACCT pid=5025 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Mar 17 18:46:20.524617 sshd[5025]: Accepted publickey for core from 10.0.0.1 port 56438 ssh2: RSA SHA256:EcJpbXadXymLrINQtrmLSqTXC2wy0UoSwO9MmZb5CTo Mar 17 18:46:20.526543 sshd[5025]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Mar 17 18:46:20.524000 audit[5025]: CRED_ACQ pid=5025 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Mar 17 18:46:20.530132 systemd-logind[1188]: New session 22 of user core. Mar 17 18:46:20.530868 systemd[1]: Started session-22.scope. Mar 17 18:46:20.531934 kernel: audit: type=1101 audit(1742237180.522:1477): pid=5025 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Mar 17 18:46:20.531998 kernel: audit: type=1103 audit(1742237180.524:1478): pid=5025 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Mar 17 18:46:20.532026 kernel: audit: type=1006 audit(1742237180.524:1479): pid=5025 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=22 res=1 Mar 17 18:46:20.524000 audit[5025]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffcd2821010 a2=3 a3=0 items=0 ppid=1 pid=5025 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=22 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:46:20.538283 kernel: audit: type=1300 audit(1742237180.524:1479): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffcd2821010 a2=3 a3=0 items=0 ppid=1 pid=5025 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=22 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:46:20.524000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Mar 17 18:46:20.539755 kernel: audit: type=1327 audit(1742237180.524:1479): proctitle=737368643A20636F7265205B707269765D Mar 17 18:46:20.539801 kernel: audit: type=1105 audit(1742237180.533:1480): pid=5025 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Mar 17 18:46:20.533000 audit[5025]: USER_START pid=5025 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Mar 17 18:46:20.534000 audit[5027]: CRED_ACQ pid=5027 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Mar 17 18:46:20.547275 kernel: audit: type=1103 audit(1742237180.534:1481): pid=5027 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Mar 17 18:46:20.647618 sshd[5025]: pam_unix(sshd:session): session closed for user core Mar 17 18:46:20.647000 audit[5025]: USER_END pid=5025 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Mar 17 18:46:20.650149 systemd[1]: sshd@21-10.0.0.110:22-10.0.0.1:56438.service: Deactivated successfully. Mar 17 18:46:20.651018 systemd[1]: session-22.scope: Deactivated successfully. Mar 17 18:46:20.652066 systemd-logind[1188]: Session 22 logged out. Waiting for processes to exit. Mar 17 18:46:20.652887 systemd-logind[1188]: Removed session 22. Mar 17 18:46:20.647000 audit[5025]: CRED_DISP pid=5025 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Mar 17 18:46:20.656836 kernel: audit: type=1106 audit(1742237180.647:1482): pid=5025 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Mar 17 18:46:20.656885 kernel: audit: type=1104 audit(1742237180.647:1483): pid=5025 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Mar 17 18:46:20.648000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@21-10.0.0.110:22-10.0.0.1:56438 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:46:21.395000 audit[5038]: NETFILTER_CFG table=filter:123 family=2 entries=20 op=nft_register_rule pid=5038 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Mar 17 18:46:21.395000 audit[5038]: SYSCALL arch=c000003e syscall=46 success=yes exit=2932 a0=3 a1=7ffc504d2ee0 a2=0 a3=7ffc504d2ecc items=0 ppid=2248 pid=5038 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:46:21.395000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Mar 17 18:46:21.412000 audit[5038]: NETFILTER_CFG table=nat:124 family=2 entries=106 op=nft_register_chain pid=5038 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Mar 17 18:46:21.412000 audit[5038]: SYSCALL arch=c000003e syscall=46 success=yes exit=49452 a0=3 a1=7ffc504d2ee0 a2=0 a3=7ffc504d2ecc items=0 ppid=2248 pid=5038 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:46:21.412000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Mar 17 18:46:25.653803 systemd[1]: Started sshd@22-10.0.0.110:22-10.0.0.1:57504.service. Mar 17 18:46:25.652000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@22-10.0.0.110:22-10.0.0.1:57504 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:46:25.660412 kernel: kauditd_printk_skb: 7 callbacks suppressed Mar 17 18:46:25.660581 kernel: audit: type=1130 audit(1742237185.652:1487): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@22-10.0.0.110:22-10.0.0.1:57504 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:46:25.692000 audit[5046]: USER_ACCT pid=5046 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Mar 17 18:46:25.694296 sshd[5046]: Accepted publickey for core from 10.0.0.1 port 57504 ssh2: RSA SHA256:EcJpbXadXymLrINQtrmLSqTXC2wy0UoSwO9MmZb5CTo Mar 17 18:46:25.696657 sshd[5046]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Mar 17 18:46:25.694000 audit[5046]: CRED_ACQ pid=5046 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Mar 17 18:46:25.706301 kernel: audit: type=1101 audit(1742237185.692:1488): pid=5046 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Mar 17 18:46:25.706435 kernel: audit: type=1103 audit(1742237185.694:1489): pid=5046 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Mar 17 18:46:25.706464 kernel: audit: type=1006 audit(1742237185.694:1490): pid=5046 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=23 res=1 Mar 17 18:46:25.706500 kernel: audit: type=1300 audit(1742237185.694:1490): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7fff15d80550 a2=3 a3=0 items=0 ppid=1 pid=5046 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=23 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:46:25.694000 audit[5046]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7fff15d80550 a2=3 a3=0 items=0 ppid=1 pid=5046 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=23 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:46:25.704566 systemd[1]: Started session-23.scope. Mar 17 18:46:25.705709 systemd-logind[1188]: New session 23 of user core. Mar 17 18:46:25.710648 kernel: audit: type=1327 audit(1742237185.694:1490): proctitle=737368643A20636F7265205B707269765D Mar 17 18:46:25.694000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Mar 17 18:46:25.710000 audit[5046]: USER_START pid=5046 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Mar 17 18:46:25.712000 audit[5048]: CRED_ACQ pid=5048 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Mar 17 18:46:25.736831 kernel: audit: type=1105 audit(1742237185.710:1491): pid=5046 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Mar 17 18:46:25.736975 kernel: audit: type=1103 audit(1742237185.712:1492): pid=5048 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Mar 17 18:46:25.888183 sshd[5046]: pam_unix(sshd:session): session closed for user core Mar 17 18:46:25.887000 audit[5046]: USER_END pid=5046 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Mar 17 18:46:25.890716 systemd[1]: sshd@22-10.0.0.110:22-10.0.0.1:57504.service: Deactivated successfully. Mar 17 18:46:25.891403 systemd[1]: session-23.scope: Deactivated successfully. Mar 17 18:46:25.892103 systemd-logind[1188]: Session 23 logged out. Waiting for processes to exit. Mar 17 18:46:25.892902 systemd-logind[1188]: Removed session 23. Mar 17 18:46:25.887000 audit[5046]: CRED_DISP pid=5046 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Mar 17 18:46:25.899389 kernel: audit: type=1106 audit(1742237185.887:1493): pid=5046 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Mar 17 18:46:25.899475 kernel: audit: type=1104 audit(1742237185.887:1494): pid=5046 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Mar 17 18:46:25.889000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@22-10.0.0.110:22-10.0.0.1:57504 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:46:30.903167 systemd[1]: Started sshd@23-10.0.0.110:22-10.0.0.1:57514.service. Mar 17 18:46:30.902000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@23-10.0.0.110:22-10.0.0.1:57514 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:46:30.904367 kernel: kauditd_printk_skb: 1 callbacks suppressed Mar 17 18:46:30.904433 kernel: audit: type=1130 audit(1742237190.902:1496): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@23-10.0.0.110:22-10.0.0.1:57514 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:46:30.958000 audit[5061]: USER_ACCT pid=5061 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Mar 17 18:46:30.959364 sshd[5061]: Accepted publickey for core from 10.0.0.1 port 57514 ssh2: RSA SHA256:EcJpbXadXymLrINQtrmLSqTXC2wy0UoSwO9MmZb5CTo Mar 17 18:46:30.964000 audit[5061]: CRED_ACQ pid=5061 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Mar 17 18:46:30.965914 sshd[5061]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Mar 17 18:46:30.970381 kernel: audit: type=1101 audit(1742237190.958:1497): pid=5061 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Mar 17 18:46:30.970546 kernel: audit: type=1103 audit(1742237190.964:1498): pid=5061 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Mar 17 18:46:30.970589 kernel: audit: type=1006 audit(1742237190.964:1499): pid=5061 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=24 res=1 Mar 17 18:46:30.964000 audit[5061]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7fff6b9974b0 a2=3 a3=0 items=0 ppid=1 pid=5061 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=24 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:46:30.974306 systemd-logind[1188]: New session 24 of user core. Mar 17 18:46:30.975674 systemd[1]: Started session-24.scope. Mar 17 18:46:30.982331 kernel: audit: type=1300 audit(1742237190.964:1499): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7fff6b9974b0 a2=3 a3=0 items=0 ppid=1 pid=5061 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=24 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:46:30.982469 kernel: audit: type=1327 audit(1742237190.964:1499): proctitle=737368643A20636F7265205B707269765D Mar 17 18:46:30.964000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Mar 17 18:46:30.987000 audit[5061]: USER_START pid=5061 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Mar 17 18:46:30.994000 audit[5063]: CRED_ACQ pid=5063 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Mar 17 18:46:31.003794 kernel: audit: type=1105 audit(1742237190.987:1500): pid=5061 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Mar 17 18:46:31.003913 kernel: audit: type=1103 audit(1742237190.994:1501): pid=5063 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Mar 17 18:46:31.117392 sshd[5061]: pam_unix(sshd:session): session closed for user core Mar 17 18:46:31.119000 audit[5061]: USER_END pid=5061 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Mar 17 18:46:31.122033 systemd[1]: sshd@23-10.0.0.110:22-10.0.0.1:57514.service: Deactivated successfully. Mar 17 18:46:31.122704 systemd[1]: session-24.scope: Deactivated successfully. Mar 17 18:46:31.125461 systemd-logind[1188]: Session 24 logged out. Waiting for processes to exit. Mar 17 18:46:31.120000 audit[5061]: CRED_DISP pid=5061 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Mar 17 18:46:31.126300 systemd-logind[1188]: Removed session 24. Mar 17 18:46:31.131334 kernel: audit: type=1106 audit(1742237191.119:1502): pid=5061 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Mar 17 18:46:31.131431 kernel: audit: type=1104 audit(1742237191.120:1503): pid=5061 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Mar 17 18:46:31.121000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@23-10.0.0.110:22-10.0.0.1:57514 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:46:36.121771 systemd[1]: Started sshd@24-10.0.0.110:22-10.0.0.1:32908.service. Mar 17 18:46:36.127395 kernel: kauditd_printk_skb: 1 callbacks suppressed Mar 17 18:46:36.127441 kernel: audit: type=1130 audit(1742237196.121:1505): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@24-10.0.0.110:22-10.0.0.1:32908 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:46:36.121000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@24-10.0.0.110:22-10.0.0.1:32908 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:46:36.154000 audit[5093]: USER_ACCT pid=5093 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Mar 17 18:46:36.155817 sshd[5093]: Accepted publickey for core from 10.0.0.1 port 32908 ssh2: RSA SHA256:EcJpbXadXymLrINQtrmLSqTXC2wy0UoSwO9MmZb5CTo Mar 17 18:46:36.156946 sshd[5093]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Mar 17 18:46:36.155000 audit[5093]: CRED_ACQ pid=5093 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Mar 17 18:46:36.160207 systemd-logind[1188]: New session 25 of user core. Mar 17 18:46:36.161223 systemd[1]: Started session-25.scope. Mar 17 18:46:36.163978 kernel: audit: type=1101 audit(1742237196.154:1506): pid=5093 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Mar 17 18:46:36.164065 kernel: audit: type=1103 audit(1742237196.155:1507): pid=5093 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Mar 17 18:46:36.164300 kernel: audit: type=1006 audit(1742237196.155:1508): pid=5093 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=25 res=1 Mar 17 18:46:36.155000 audit[5093]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffe901d48f0 a2=3 a3=0 items=0 ppid=1 pid=5093 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=25 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:46:36.170419 kernel: audit: type=1300 audit(1742237196.155:1508): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffe901d48f0 a2=3 a3=0 items=0 ppid=1 pid=5093 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=25 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:46:36.170598 kernel: audit: type=1327 audit(1742237196.155:1508): proctitle=737368643A20636F7265205B707269765D Mar 17 18:46:36.155000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Mar 17 18:46:36.164000 audit[5093]: USER_START pid=5093 uid=0 auid=500 ses=25 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Mar 17 18:46:36.175956 kernel: audit: type=1105 audit(1742237196.164:1509): pid=5093 uid=0 auid=500 ses=25 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Mar 17 18:46:36.176047 kernel: audit: type=1103 audit(1742237196.165:1510): pid=5095 uid=0 auid=500 ses=25 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Mar 17 18:46:36.165000 audit[5095]: CRED_ACQ pid=5095 uid=0 auid=500 ses=25 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Mar 17 18:46:36.260040 sshd[5093]: pam_unix(sshd:session): session closed for user core Mar 17 18:46:36.260000 audit[5093]: USER_END pid=5093 uid=0 auid=500 ses=25 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Mar 17 18:46:36.262037 systemd[1]: sshd@24-10.0.0.110:22-10.0.0.1:32908.service: Deactivated successfully. Mar 17 18:46:36.262728 systemd[1]: session-25.scope: Deactivated successfully. Mar 17 18:46:36.263175 systemd-logind[1188]: Session 25 logged out. Waiting for processes to exit. Mar 17 18:46:36.263931 systemd-logind[1188]: Removed session 25. Mar 17 18:46:36.260000 audit[5093]: CRED_DISP pid=5093 uid=0 auid=500 ses=25 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Mar 17 18:46:36.268686 kernel: audit: type=1106 audit(1742237196.260:1511): pid=5093 uid=0 auid=500 ses=25 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Mar 17 18:46:36.268733 kernel: audit: type=1104 audit(1742237196.260:1512): pid=5093 uid=0 auid=500 ses=25 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Mar 17 18:46:36.261000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@24-10.0.0.110:22-10.0.0.1:32908 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'