Mar 17 18:27:05.722384 kernel: Booting Linux on physical CPU 0x0000000000 [0x413fd0c1] Mar 17 18:27:05.722404 kernel: Linux version 5.15.179-flatcar (build@pony-truck.infra.kinvolk.io) (aarch64-cros-linux-gnu-gcc (Gentoo Hardened 11.3.1_p20221209 p3) 11.3.1 20221209, GNU ld (Gentoo 2.39 p5) 2.39.0) #1 SMP PREEMPT Mon Mar 17 17:11:44 -00 2025 Mar 17 18:27:05.722411 kernel: efi: EFI v2.70 by EDK II Mar 17 18:27:05.722417 kernel: efi: SMBIOS 3.0=0xd9260000 ACPI 2.0=0xd9240000 MEMATTR=0xda32b018 RNG=0xd9220018 MEMRESERVE=0xd9521c18 Mar 17 18:27:05.722422 kernel: random: crng init done Mar 17 18:27:05.722427 kernel: ACPI: Early table checksum verification disabled Mar 17 18:27:05.722433 kernel: ACPI: RSDP 0x00000000D9240000 000024 (v02 BOCHS ) Mar 17 18:27:05.722440 kernel: ACPI: XSDT 0x00000000D9230000 000064 (v01 BOCHS BXPC 00000001 01000013) Mar 17 18:27:05.722445 kernel: ACPI: FACP 0x00000000D91E0000 000114 (v06 BOCHS BXPC 00000001 BXPC 00000001) Mar 17 18:27:05.722451 kernel: ACPI: DSDT 0x00000000D91F0000 0014A2 (v02 BOCHS BXPC 00000001 BXPC 00000001) Mar 17 18:27:05.722456 kernel: ACPI: APIC 0x00000000D91D0000 0001A8 (v04 BOCHS BXPC 00000001 BXPC 00000001) Mar 17 18:27:05.722462 kernel: ACPI: PPTT 0x00000000D91C0000 00009C (v02 BOCHS BXPC 00000001 BXPC 00000001) Mar 17 18:27:05.722467 kernel: ACPI: GTDT 0x00000000D91B0000 000060 (v02 BOCHS BXPC 00000001 BXPC 00000001) Mar 17 18:27:05.722472 kernel: ACPI: MCFG 0x00000000D91A0000 00003C (v01 BOCHS BXPC 00000001 BXPC 00000001) Mar 17 18:27:05.722480 kernel: ACPI: SPCR 0x00000000D9190000 000050 (v02 BOCHS BXPC 00000001 BXPC 00000001) Mar 17 18:27:05.722486 kernel: ACPI: DBG2 0x00000000D9180000 000057 (v00 BOCHS BXPC 00000001 BXPC 00000001) Mar 17 18:27:05.722491 kernel: ACPI: IORT 0x00000000D9170000 000080 (v03 BOCHS BXPC 00000001 BXPC 00000001) Mar 17 18:27:05.722497 kernel: ACPI: SPCR: console: pl011,mmio,0x9000000,9600 Mar 17 18:27:05.722503 kernel: NUMA: Failed to initialise from firmware Mar 17 18:27:05.722509 kernel: NUMA: Faking a node at [mem 0x0000000040000000-0x00000000dcffffff] Mar 17 18:27:05.722514 kernel: NUMA: NODE_DATA [mem 0xdcb09900-0xdcb0efff] Mar 17 18:27:05.722520 kernel: Zone ranges: Mar 17 18:27:05.722526 kernel: DMA [mem 0x0000000040000000-0x00000000dcffffff] Mar 17 18:27:05.722532 kernel: DMA32 empty Mar 17 18:27:05.722538 kernel: Normal empty Mar 17 18:27:05.722543 kernel: Movable zone start for each node Mar 17 18:27:05.722549 kernel: Early memory node ranges Mar 17 18:27:05.722555 kernel: node 0: [mem 0x0000000040000000-0x00000000d924ffff] Mar 17 18:27:05.722561 kernel: node 0: [mem 0x00000000d9250000-0x00000000d951ffff] Mar 17 18:27:05.722566 kernel: node 0: [mem 0x00000000d9520000-0x00000000dc7fffff] Mar 17 18:27:05.722572 kernel: node 0: [mem 0x00000000dc800000-0x00000000dc88ffff] Mar 17 18:27:05.722578 kernel: node 0: [mem 0x00000000dc890000-0x00000000dc89ffff] Mar 17 18:27:05.722583 kernel: node 0: [mem 0x00000000dc8a0000-0x00000000dc9bffff] Mar 17 18:27:05.722589 kernel: node 0: [mem 0x00000000dc9c0000-0x00000000dcffffff] Mar 17 18:27:05.722595 kernel: Initmem setup node 0 [mem 0x0000000040000000-0x00000000dcffffff] Mar 17 18:27:05.722601 kernel: On node 0, zone DMA: 12288 pages in unavailable ranges Mar 17 18:27:05.722607 kernel: psci: probing for conduit method from ACPI. Mar 17 18:27:05.722613 kernel: psci: PSCIv1.1 detected in firmware. Mar 17 18:27:05.722618 kernel: psci: Using standard PSCI v0.2 function IDs Mar 17 18:27:05.722624 kernel: psci: Trusted OS migration not required Mar 17 18:27:05.722632 kernel: psci: SMC Calling Convention v1.1 Mar 17 18:27:05.722638 kernel: smccc: KVM: hypervisor services detected (0x00000000 0x00000000 0x00000000 0x00000003) Mar 17 18:27:05.722646 kernel: ACPI: SRAT not present Mar 17 18:27:05.722652 kernel: percpu: Embedded 30 pages/cpu s83032 r8192 d31656 u122880 Mar 17 18:27:05.722658 kernel: pcpu-alloc: s83032 r8192 d31656 u122880 alloc=30*4096 Mar 17 18:27:05.722664 kernel: pcpu-alloc: [0] 0 [0] 1 [0] 2 [0] 3 Mar 17 18:27:05.722670 kernel: Detected PIPT I-cache on CPU0 Mar 17 18:27:05.722676 kernel: CPU features: detected: GIC system register CPU interface Mar 17 18:27:05.722682 kernel: CPU features: detected: Hardware dirty bit management Mar 17 18:27:05.722688 kernel: CPU features: detected: Spectre-v4 Mar 17 18:27:05.722694 kernel: CPU features: detected: Spectre-BHB Mar 17 18:27:05.722701 kernel: CPU features: kernel page table isolation forced ON by KASLR Mar 17 18:27:05.722707 kernel: CPU features: detected: Kernel page table isolation (KPTI) Mar 17 18:27:05.722713 kernel: CPU features: detected: ARM erratum 1418040 Mar 17 18:27:05.722719 kernel: CPU features: detected: SSBS not fully self-synchronizing Mar 17 18:27:05.722725 kernel: Built 1 zonelists, mobility grouping on. Total pages: 633024 Mar 17 18:27:05.722732 kernel: Policy zone: DMA Mar 17 18:27:05.722739 kernel: Kernel command line: BOOT_IMAGE=/flatcar/vmlinuz-a mount.usr=/dev/mapper/usr verity.usr=PARTUUID=7130c94a-213a-4e5a-8e26-6cce9662f132 rootflags=rw mount.usrflags=ro consoleblank=0 root=LABEL=ROOT console=ttyS0,115200 flatcar.first_boot=detected acpi=force verity.usrhash=e034db32d58fe7496a3db6ba3879dd9052cea2cf1597d65edfc7b26afc92530d Mar 17 18:27:05.722745 kernel: Unknown kernel command line parameters "BOOT_IMAGE=/flatcar/vmlinuz-a", will be passed to user space. Mar 17 18:27:05.722752 kernel: Dentry cache hash table entries: 524288 (order: 10, 4194304 bytes, linear) Mar 17 18:27:05.722758 kernel: Inode-cache hash table entries: 262144 (order: 9, 2097152 bytes, linear) Mar 17 18:27:05.722764 kernel: mem auto-init: stack:off, heap alloc:off, heap free:off Mar 17 18:27:05.722771 kernel: Memory: 2457396K/2572288K available (9792K kernel code, 2094K rwdata, 7584K rodata, 36416K init, 777K bss, 114892K reserved, 0K cma-reserved) Mar 17 18:27:05.722778 kernel: SLUB: HWalign=64, Order=0-3, MinObjects=0, CPUs=4, Nodes=1 Mar 17 18:27:05.722783 kernel: trace event string verifier disabled Mar 17 18:27:05.722789 kernel: rcu: Preemptible hierarchical RCU implementation. Mar 17 18:27:05.722796 kernel: rcu: RCU event tracing is enabled. Mar 17 18:27:05.722802 kernel: rcu: RCU restricting CPUs from NR_CPUS=512 to nr_cpu_ids=4. Mar 17 18:27:05.722808 kernel: Trampoline variant of Tasks RCU enabled. Mar 17 18:27:05.722815 kernel: Tracing variant of Tasks RCU enabled. Mar 17 18:27:05.722863 kernel: rcu: RCU calculated value of scheduler-enlistment delay is 100 jiffies. Mar 17 18:27:05.722871 kernel: rcu: Adjusting geometry for rcu_fanout_leaf=16, nr_cpu_ids=4 Mar 17 18:27:05.722877 kernel: NR_IRQS: 64, nr_irqs: 64, preallocated irqs: 0 Mar 17 18:27:05.722885 kernel: GICv3: 256 SPIs implemented Mar 17 18:27:05.722891 kernel: GICv3: 0 Extended SPIs implemented Mar 17 18:27:05.722898 kernel: GICv3: Distributor has no Range Selector support Mar 17 18:27:05.722904 kernel: Root IRQ handler: gic_handle_irq Mar 17 18:27:05.722910 kernel: GICv3: 16 PPIs implemented Mar 17 18:27:05.722916 kernel: GICv3: CPU0: found redistributor 0 region 0:0x00000000080a0000 Mar 17 18:27:05.722922 kernel: ACPI: SRAT not present Mar 17 18:27:05.722928 kernel: ITS [mem 0x08080000-0x0809ffff] Mar 17 18:27:05.722934 kernel: ITS@0x0000000008080000: allocated 8192 Devices @400b0000 (indirect, esz 8, psz 64K, shr 1) Mar 17 18:27:05.722940 kernel: ITS@0x0000000008080000: allocated 8192 Interrupt Collections @400c0000 (flat, esz 8, psz 64K, shr 1) Mar 17 18:27:05.722946 kernel: GICv3: using LPI property table @0x00000000400d0000 Mar 17 18:27:05.722952 kernel: GICv3: CPU0: using allocated LPI pending table @0x00000000400e0000 Mar 17 18:27:05.722959 kernel: arch_timer: Enabling local workaround for ARM erratum 1418040 Mar 17 18:27:05.722965 kernel: arch_timer: cp15 timer(s) running at 25.00MHz (virt). Mar 17 18:27:05.722972 kernel: clocksource: arch_sys_counter: mask: 0xffffffffffffff max_cycles: 0x5c40939b5, max_idle_ns: 440795202646 ns Mar 17 18:27:05.722978 kernel: sched_clock: 56 bits at 25MHz, resolution 40ns, wraps every 4398046511100ns Mar 17 18:27:05.722984 kernel: arm-pv: using stolen time PV Mar 17 18:27:05.722990 kernel: Console: colour dummy device 80x25 Mar 17 18:27:05.722996 kernel: ACPI: Core revision 20210730 Mar 17 18:27:05.723003 kernel: Calibrating delay loop (skipped), value calculated using timer frequency.. 50.00 BogoMIPS (lpj=25000) Mar 17 18:27:05.723009 kernel: pid_max: default: 32768 minimum: 301 Mar 17 18:27:05.723016 kernel: LSM: Security Framework initializing Mar 17 18:27:05.723023 kernel: SELinux: Initializing. Mar 17 18:27:05.723029 kernel: Mount-cache hash table entries: 8192 (order: 4, 65536 bytes, linear) Mar 17 18:27:05.723035 kernel: Mountpoint-cache hash table entries: 8192 (order: 4, 65536 bytes, linear) Mar 17 18:27:05.723041 kernel: rcu: Hierarchical SRCU implementation. Mar 17 18:27:05.723047 kernel: Platform MSI: ITS@0x8080000 domain created Mar 17 18:27:05.723054 kernel: PCI/MSI: ITS@0x8080000 domain created Mar 17 18:27:05.723060 kernel: Remapping and enabling EFI services. Mar 17 18:27:05.723066 kernel: smp: Bringing up secondary CPUs ... Mar 17 18:27:05.723072 kernel: Detected PIPT I-cache on CPU1 Mar 17 18:27:05.723080 kernel: GICv3: CPU1: found redistributor 1 region 0:0x00000000080c0000 Mar 17 18:27:05.723086 kernel: GICv3: CPU1: using allocated LPI pending table @0x00000000400f0000 Mar 17 18:27:05.723092 kernel: arch_timer: Enabling local workaround for ARM erratum 1418040 Mar 17 18:27:05.723099 kernel: CPU1: Booted secondary processor 0x0000000001 [0x413fd0c1] Mar 17 18:27:05.723105 kernel: Detected PIPT I-cache on CPU2 Mar 17 18:27:05.723111 kernel: GICv3: CPU2: found redistributor 2 region 0:0x00000000080e0000 Mar 17 18:27:05.723118 kernel: GICv3: CPU2: using allocated LPI pending table @0x0000000040100000 Mar 17 18:27:05.723124 kernel: arch_timer: Enabling local workaround for ARM erratum 1418040 Mar 17 18:27:05.723130 kernel: CPU2: Booted secondary processor 0x0000000002 [0x413fd0c1] Mar 17 18:27:05.723136 kernel: Detected PIPT I-cache on CPU3 Mar 17 18:27:05.723144 kernel: GICv3: CPU3: found redistributor 3 region 0:0x0000000008100000 Mar 17 18:27:05.723150 kernel: GICv3: CPU3: using allocated LPI pending table @0x0000000040110000 Mar 17 18:27:05.723156 kernel: arch_timer: Enabling local workaround for ARM erratum 1418040 Mar 17 18:27:05.723162 kernel: CPU3: Booted secondary processor 0x0000000003 [0x413fd0c1] Mar 17 18:27:05.723172 kernel: smp: Brought up 1 node, 4 CPUs Mar 17 18:27:05.723180 kernel: SMP: Total of 4 processors activated. Mar 17 18:27:05.723186 kernel: CPU features: detected: 32-bit EL0 Support Mar 17 18:27:05.723193 kernel: CPU features: detected: Data cache clean to the PoU not required for I/D coherence Mar 17 18:27:05.723199 kernel: CPU features: detected: Common not Private translations Mar 17 18:27:05.723206 kernel: CPU features: detected: CRC32 instructions Mar 17 18:27:05.723212 kernel: CPU features: detected: RCpc load-acquire (LDAPR) Mar 17 18:27:05.723219 kernel: CPU features: detected: LSE atomic instructions Mar 17 18:27:05.723227 kernel: CPU features: detected: Privileged Access Never Mar 17 18:27:05.723233 kernel: CPU features: detected: RAS Extension Support Mar 17 18:27:05.723240 kernel: CPU features: detected: Speculative Store Bypassing Safe (SSBS) Mar 17 18:27:05.723246 kernel: CPU: All CPU(s) started at EL1 Mar 17 18:27:05.723252 kernel: alternatives: patching kernel code Mar 17 18:27:05.723260 kernel: devtmpfs: initialized Mar 17 18:27:05.723267 kernel: KASLR enabled Mar 17 18:27:05.723274 kernel: clocksource: jiffies: mask: 0xffffffff max_cycles: 0xffffffff, max_idle_ns: 1911260446275000 ns Mar 17 18:27:05.723280 kernel: futex hash table entries: 1024 (order: 4, 65536 bytes, linear) Mar 17 18:27:05.723287 kernel: pinctrl core: initialized pinctrl subsystem Mar 17 18:27:05.723293 kernel: SMBIOS 3.0.0 present. Mar 17 18:27:05.723300 kernel: DMI: QEMU KVM Virtual Machine, BIOS 0.0.0 02/06/2015 Mar 17 18:27:05.723306 kernel: NET: Registered PF_NETLINK/PF_ROUTE protocol family Mar 17 18:27:05.723313 kernel: DMA: preallocated 512 KiB GFP_KERNEL pool for atomic allocations Mar 17 18:27:05.723321 kernel: DMA: preallocated 512 KiB GFP_KERNEL|GFP_DMA pool for atomic allocations Mar 17 18:27:05.723327 kernel: DMA: preallocated 512 KiB GFP_KERNEL|GFP_DMA32 pool for atomic allocations Mar 17 18:27:05.723334 kernel: audit: initializing netlink subsys (disabled) Mar 17 18:27:05.723340 kernel: audit: type=2000 audit(0.031:1): state=initialized audit_enabled=0 res=1 Mar 17 18:27:05.723347 kernel: thermal_sys: Registered thermal governor 'step_wise' Mar 17 18:27:05.723353 kernel: cpuidle: using governor menu Mar 17 18:27:05.723360 kernel: hw-breakpoint: found 6 breakpoint and 4 watchpoint registers. Mar 17 18:27:05.723366 kernel: ASID allocator initialised with 32768 entries Mar 17 18:27:05.723373 kernel: ACPI: bus type PCI registered Mar 17 18:27:05.723381 kernel: acpiphp: ACPI Hot Plug PCI Controller Driver version: 0.5 Mar 17 18:27:05.723387 kernel: Serial: AMBA PL011 UART driver Mar 17 18:27:05.723393 kernel: HugeTLB registered 1.00 GiB page size, pre-allocated 0 pages Mar 17 18:27:05.723400 kernel: HugeTLB registered 32.0 MiB page size, pre-allocated 0 pages Mar 17 18:27:05.723407 kernel: HugeTLB registered 2.00 MiB page size, pre-allocated 0 pages Mar 17 18:27:05.723413 kernel: HugeTLB registered 64.0 KiB page size, pre-allocated 0 pages Mar 17 18:27:05.723420 kernel: cryptd: max_cpu_qlen set to 1000 Mar 17 18:27:05.723427 kernel: alg: No test for fips(ansi_cprng) (fips_ansi_cprng) Mar 17 18:27:05.723461 kernel: ACPI: Added _OSI(Module Device) Mar 17 18:27:05.723469 kernel: ACPI: Added _OSI(Processor Device) Mar 17 18:27:05.723476 kernel: ACPI: Added _OSI(3.0 _SCP Extensions) Mar 17 18:27:05.723483 kernel: ACPI: Added _OSI(Processor Aggregator Device) Mar 17 18:27:05.723490 kernel: ACPI: Added _OSI(Linux-Dell-Video) Mar 17 18:27:05.723497 kernel: ACPI: Added _OSI(Linux-Lenovo-NV-HDMI-Audio) Mar 17 18:27:05.723503 kernel: ACPI: Added _OSI(Linux-HPI-Hybrid-Graphics) Mar 17 18:27:05.723510 kernel: ACPI: 1 ACPI AML tables successfully acquired and loaded Mar 17 18:27:05.723516 kernel: ACPI: Interpreter enabled Mar 17 18:27:05.723523 kernel: ACPI: Using GIC for interrupt routing Mar 17 18:27:05.723531 kernel: ACPI: MCFG table detected, 1 entries Mar 17 18:27:05.723538 kernel: ARMH0011:00: ttyAMA0 at MMIO 0x9000000 (irq = 12, base_baud = 0) is a SBSA Mar 17 18:27:05.723544 kernel: printk: console [ttyAMA0] enabled Mar 17 18:27:05.723551 kernel: ACPI: PCI Root Bridge [PCI0] (domain 0000 [bus 00-ff]) Mar 17 18:27:05.723670 kernel: acpi PNP0A08:00: _OSC: OS supports [ExtendedConfig ASPM ClockPM Segments MSI HPX-Type3] Mar 17 18:27:05.723732 kernel: acpi PNP0A08:00: _OSC: platform does not support [LTR] Mar 17 18:27:05.723788 kernel: acpi PNP0A08:00: _OSC: OS now controls [PCIeHotplug PME AER PCIeCapability] Mar 17 18:27:05.723867 kernel: acpi PNP0A08:00: ECAM area [mem 0x4010000000-0x401fffffff] reserved by PNP0C02:00 Mar 17 18:27:05.723953 kernel: acpi PNP0A08:00: ECAM at [mem 0x4010000000-0x401fffffff] for [bus 00-ff] Mar 17 18:27:05.723963 kernel: ACPI: Remapped I/O 0x000000003eff0000 to [io 0x0000-0xffff window] Mar 17 18:27:05.723970 kernel: PCI host bridge to bus 0000:00 Mar 17 18:27:05.724037 kernel: pci_bus 0000:00: root bus resource [mem 0x10000000-0x3efeffff window] Mar 17 18:27:05.724089 kernel: pci_bus 0000:00: root bus resource [io 0x0000-0xffff window] Mar 17 18:27:05.724140 kernel: pci_bus 0000:00: root bus resource [mem 0x8000000000-0xffffffffff window] Mar 17 18:27:05.724191 kernel: pci_bus 0000:00: root bus resource [bus 00-ff] Mar 17 18:27:05.724276 kernel: pci 0000:00:00.0: [1b36:0008] type 00 class 0x060000 Mar 17 18:27:05.724350 kernel: pci 0000:00:01.0: [1af4:1005] type 00 class 0x00ff00 Mar 17 18:27:05.724410 kernel: pci 0000:00:01.0: reg 0x10: [io 0x0000-0x001f] Mar 17 18:27:05.724468 kernel: pci 0000:00:01.0: reg 0x14: [mem 0x10000000-0x10000fff] Mar 17 18:27:05.724527 kernel: pci 0000:00:01.0: reg 0x20: [mem 0x8000000000-0x8000003fff 64bit pref] Mar 17 18:27:05.724583 kernel: pci 0000:00:01.0: BAR 4: assigned [mem 0x8000000000-0x8000003fff 64bit pref] Mar 17 18:27:05.724642 kernel: pci 0000:00:01.0: BAR 1: assigned [mem 0x10000000-0x10000fff] Mar 17 18:27:05.724699 kernel: pci 0000:00:01.0: BAR 0: assigned [io 0x1000-0x101f] Mar 17 18:27:05.724750 kernel: pci_bus 0000:00: resource 4 [mem 0x10000000-0x3efeffff window] Mar 17 18:27:05.724801 kernel: pci_bus 0000:00: resource 5 [io 0x0000-0xffff window] Mar 17 18:27:05.724871 kernel: pci_bus 0000:00: resource 6 [mem 0x8000000000-0xffffffffff window] Mar 17 18:27:05.724880 kernel: ACPI: PCI: Interrupt link GSI0 configured for IRQ 35 Mar 17 18:27:05.724901 kernel: ACPI: PCI: Interrupt link GSI1 configured for IRQ 36 Mar 17 18:27:05.724908 kernel: ACPI: PCI: Interrupt link GSI2 configured for IRQ 37 Mar 17 18:27:05.724916 kernel: ACPI: PCI: Interrupt link GSI3 configured for IRQ 38 Mar 17 18:27:05.724923 kernel: iommu: Default domain type: Translated Mar 17 18:27:05.724930 kernel: iommu: DMA domain TLB invalidation policy: strict mode Mar 17 18:27:05.724936 kernel: vgaarb: loaded Mar 17 18:27:05.724943 kernel: pps_core: LinuxPPS API ver. 1 registered Mar 17 18:27:05.724950 kernel: pps_core: Software ver. 5.3.6 - Copyright 2005-2007 Rodolfo Giometti Mar 17 18:27:05.724956 kernel: PTP clock support registered Mar 17 18:27:05.724963 kernel: Registered efivars operations Mar 17 18:27:05.724969 kernel: clocksource: Switched to clocksource arch_sys_counter Mar 17 18:27:05.724977 kernel: VFS: Disk quotas dquot_6.6.0 Mar 17 18:27:05.724984 kernel: VFS: Dquot-cache hash table entries: 512 (order 0, 4096 bytes) Mar 17 18:27:05.724990 kernel: pnp: PnP ACPI init Mar 17 18:27:05.725052 kernel: system 00:00: [mem 0x4010000000-0x401fffffff window] could not be reserved Mar 17 18:27:05.725061 kernel: pnp: PnP ACPI: found 1 devices Mar 17 18:27:05.725068 kernel: NET: Registered PF_INET protocol family Mar 17 18:27:05.725074 kernel: IP idents hash table entries: 65536 (order: 7, 524288 bytes, linear) Mar 17 18:27:05.725081 kernel: tcp_listen_portaddr_hash hash table entries: 2048 (order: 3, 32768 bytes, linear) Mar 17 18:27:05.725089 kernel: Table-perturb hash table entries: 65536 (order: 6, 262144 bytes, linear) Mar 17 18:27:05.725096 kernel: TCP established hash table entries: 32768 (order: 6, 262144 bytes, linear) Mar 17 18:27:05.725103 kernel: TCP bind hash table entries: 32768 (order: 7, 524288 bytes, linear) Mar 17 18:27:05.725110 kernel: TCP: Hash tables configured (established 32768 bind 32768) Mar 17 18:27:05.725117 kernel: UDP hash table entries: 2048 (order: 4, 65536 bytes, linear) Mar 17 18:27:05.725124 kernel: UDP-Lite hash table entries: 2048 (order: 4, 65536 bytes, linear) Mar 17 18:27:05.725130 kernel: NET: Registered PF_UNIX/PF_LOCAL protocol family Mar 17 18:27:05.725136 kernel: PCI: CLS 0 bytes, default 64 Mar 17 18:27:05.725143 kernel: hw perfevents: enabled with armv8_pmuv3_0 PMU driver, 7 counters available Mar 17 18:27:05.725151 kernel: kvm [1]: HYP mode not available Mar 17 18:27:05.725157 kernel: Initialise system trusted keyrings Mar 17 18:27:05.725164 kernel: workingset: timestamp_bits=39 max_order=20 bucket_order=0 Mar 17 18:27:05.725170 kernel: Key type asymmetric registered Mar 17 18:27:05.725177 kernel: Asymmetric key parser 'x509' registered Mar 17 18:27:05.725184 kernel: Block layer SCSI generic (bsg) driver version 0.4 loaded (major 249) Mar 17 18:27:05.725190 kernel: io scheduler mq-deadline registered Mar 17 18:27:05.725196 kernel: io scheduler kyber registered Mar 17 18:27:05.725203 kernel: io scheduler bfq registered Mar 17 18:27:05.725211 kernel: input: Power Button as /devices/LNXSYSTM:00/LNXSYBUS:00/PNP0C0C:00/input/input0 Mar 17 18:27:05.725217 kernel: ACPI: button: Power Button [PWRB] Mar 17 18:27:05.725224 kernel: ACPI: \_SB_.PCI0.GSI1: Enabled at IRQ 36 Mar 17 18:27:05.725281 kernel: virtio-pci 0000:00:01.0: enabling device (0005 -> 0007) Mar 17 18:27:05.725290 kernel: Serial: 8250/16550 driver, 4 ports, IRQ sharing enabled Mar 17 18:27:05.725297 kernel: thunder_xcv, ver 1.0 Mar 17 18:27:05.725303 kernel: thunder_bgx, ver 1.0 Mar 17 18:27:05.725309 kernel: nicpf, ver 1.0 Mar 17 18:27:05.725316 kernel: nicvf, ver 1.0 Mar 17 18:27:05.725380 kernel: rtc-efi rtc-efi.0: registered as rtc0 Mar 17 18:27:05.725434 kernel: rtc-efi rtc-efi.0: setting system clock to 2025-03-17T18:27:05 UTC (1742236025) Mar 17 18:27:05.725442 kernel: hid: raw HID events driver (C) Jiri Kosina Mar 17 18:27:05.725449 kernel: NET: Registered PF_INET6 protocol family Mar 17 18:27:05.725485 kernel: Segment Routing with IPv6 Mar 17 18:27:05.725491 kernel: In-situ OAM (IOAM) with IPv6 Mar 17 18:27:05.725498 kernel: NET: Registered PF_PACKET protocol family Mar 17 18:27:05.725504 kernel: Key type dns_resolver registered Mar 17 18:27:05.725512 kernel: registered taskstats version 1 Mar 17 18:27:05.725518 kernel: Loading compiled-in X.509 certificates Mar 17 18:27:05.725525 kernel: Loaded X.509 cert 'Kinvolk GmbH: Module signing key for 5.15.179-flatcar: c6f3fb83dc6bb7052b07ec5b1ef41d12f9b3f7e4' Mar 17 18:27:05.725532 kernel: Key type .fscrypt registered Mar 17 18:27:05.725538 kernel: Key type fscrypt-provisioning registered Mar 17 18:27:05.725545 kernel: ima: No TPM chip found, activating TPM-bypass! Mar 17 18:27:05.725557 kernel: ima: Allocated hash algorithm: sha1 Mar 17 18:27:05.725563 kernel: ima: No architecture policies found Mar 17 18:27:05.725570 kernel: clk: Disabling unused clocks Mar 17 18:27:05.725577 kernel: Freeing unused kernel memory: 36416K Mar 17 18:27:05.725584 kernel: Run /init as init process Mar 17 18:27:05.725590 kernel: with arguments: Mar 17 18:27:05.725597 kernel: /init Mar 17 18:27:05.725603 kernel: with environment: Mar 17 18:27:05.725609 kernel: HOME=/ Mar 17 18:27:05.725615 kernel: TERM=linux Mar 17 18:27:05.725622 kernel: BOOT_IMAGE=/flatcar/vmlinuz-a Mar 17 18:27:05.725630 systemd[1]: systemd 252 running in system mode (+PAM +AUDIT +SELINUX -APPARMOR +IMA +SMACK +SECCOMP +GCRYPT -GNUTLS +OPENSSL -ACL +BLKID +CURL -ELFUTILS -FIDO2 +IDN2 -IDN +IPTC +KMOD +LIBCRYPTSETUP +LIBFDISK +PCRE2 -PWQUALITY -P11KIT -QRENCODE -TPM2 +BZIP2 +LZ4 +XZ +ZLIB +ZSTD -BPF_FRAMEWORK -XKBCOMMON +UTMP +SYSVINIT default-hierarchy=unified) Mar 17 18:27:05.725639 systemd[1]: Detected virtualization kvm. Mar 17 18:27:05.725647 systemd[1]: Detected architecture arm64. Mar 17 18:27:05.725653 systemd[1]: Running in initrd. Mar 17 18:27:05.725661 systemd[1]: No hostname configured, using default hostname. Mar 17 18:27:05.725668 systemd[1]: Hostname set to . Mar 17 18:27:05.725675 systemd[1]: Initializing machine ID from VM UUID. Mar 17 18:27:05.725682 systemd[1]: Queued start job for default target initrd.target. Mar 17 18:27:05.725690 systemd[1]: Started systemd-ask-password-console.path. Mar 17 18:27:05.725696 systemd[1]: Reached target cryptsetup.target. Mar 17 18:27:05.725703 systemd[1]: Reached target paths.target. Mar 17 18:27:05.725710 systemd[1]: Reached target slices.target. Mar 17 18:27:05.725717 systemd[1]: Reached target swap.target. Mar 17 18:27:05.725723 systemd[1]: Reached target timers.target. Mar 17 18:27:05.725731 systemd[1]: Listening on iscsid.socket. Mar 17 18:27:05.725739 systemd[1]: Listening on iscsiuio.socket. Mar 17 18:27:05.725746 systemd[1]: Listening on systemd-journald-audit.socket. Mar 17 18:27:05.725753 systemd[1]: Listening on systemd-journald-dev-log.socket. Mar 17 18:27:05.725760 systemd[1]: Listening on systemd-journald.socket. Mar 17 18:27:05.725767 systemd[1]: Listening on systemd-networkd.socket. Mar 17 18:27:05.725774 systemd[1]: Listening on systemd-udevd-control.socket. Mar 17 18:27:05.725781 systemd[1]: Listening on systemd-udevd-kernel.socket. Mar 17 18:27:05.725788 systemd[1]: Reached target sockets.target. Mar 17 18:27:05.725794 systemd[1]: Starting kmod-static-nodes.service... Mar 17 18:27:05.725802 systemd[1]: Finished network-cleanup.service. Mar 17 18:27:05.725809 systemd[1]: Starting systemd-fsck-usr.service... Mar 17 18:27:05.725816 systemd[1]: Starting systemd-journald.service... Mar 17 18:27:05.725834 systemd[1]: Starting systemd-modules-load.service... Mar 17 18:27:05.725842 systemd[1]: Starting systemd-resolved.service... Mar 17 18:27:05.725849 systemd[1]: Starting systemd-vconsole-setup.service... Mar 17 18:27:05.725856 systemd[1]: Finished kmod-static-nodes.service. Mar 17 18:27:05.725862 systemd[1]: Finished systemd-fsck-usr.service. Mar 17 18:27:05.725869 systemd[1]: Starting systemd-tmpfiles-setup-dev.service... Mar 17 18:27:05.725878 systemd[1]: Finished systemd-vconsole-setup.service. Mar 17 18:27:05.725885 kernel: audit: type=1130 audit(1742236025.723:2): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-vconsole-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:27:05.725892 systemd[1]: Starting dracut-cmdline-ask.service... Mar 17 18:27:05.725902 systemd-journald[291]: Journal started Mar 17 18:27:05.725943 systemd-journald[291]: Runtime Journal (/run/log/journal/9cb6e0fc844144dc9302e14bdcff4a97) is 6.0M, max 48.7M, 42.6M free. Mar 17 18:27:05.723000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-vconsole-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:27:05.718215 systemd-modules-load[292]: Inserted module 'overlay' Mar 17 18:27:05.727850 systemd[1]: Started systemd-journald.service. Mar 17 18:27:05.728000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-journald comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:27:05.730513 systemd[1]: Finished systemd-tmpfiles-setup-dev.service. Mar 17 18:27:05.733853 kernel: audit: type=1130 audit(1742236025.728:3): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-journald comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:27:05.733873 kernel: audit: type=1130 audit(1742236025.731:4): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-tmpfiles-setup-dev comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:27:05.731000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-tmpfiles-setup-dev comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:27:05.745076 kernel: bridge: filtering via arp/ip/ip6tables is no longer available by default. Update your scripts to load br_netfilter if you need this. Mar 17 18:27:05.746491 systemd[1]: Finished dracut-cmdline-ask.service. Mar 17 18:27:05.750463 kernel: audit: type=1130 audit(1742236025.747:5): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-cmdline-ask comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:27:05.750480 kernel: Bridge firewalling registered Mar 17 18:27:05.747000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-cmdline-ask comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:27:05.747961 systemd[1]: Starting dracut-cmdline.service... Mar 17 18:27:05.749964 systemd-modules-load[292]: Inserted module 'br_netfilter' Mar 17 18:27:05.750415 systemd-resolved[293]: Positive Trust Anchors: Mar 17 18:27:05.750421 systemd-resolved[293]: . IN DS 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d Mar 17 18:27:05.750447 systemd-resolved[293]: Negative trust anchors: home.arpa 10.in-addr.arpa 16.172.in-addr.arpa 17.172.in-addr.arpa 18.172.in-addr.arpa 19.172.in-addr.arpa 20.172.in-addr.arpa 21.172.in-addr.arpa 22.172.in-addr.arpa 23.172.in-addr.arpa 24.172.in-addr.arpa 25.172.in-addr.arpa 26.172.in-addr.arpa 27.172.in-addr.arpa 28.172.in-addr.arpa 29.172.in-addr.arpa 30.172.in-addr.arpa 31.172.in-addr.arpa 168.192.in-addr.arpa d.f.ip6.arpa corp home internal intranet lan local private test Mar 17 18:27:05.754573 systemd-resolved[293]: Defaulting to hostname 'linux'. Mar 17 18:27:05.760000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-resolved comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:27:05.763856 kernel: audit: type=1130 audit(1742236025.760:6): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-resolved comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:27:05.763873 kernel: SCSI subsystem initialized Mar 17 18:27:05.755285 systemd[1]: Started systemd-resolved.service. Mar 17 18:27:05.761119 systemd[1]: Reached target nss-lookup.target. Mar 17 18:27:05.768289 dracut-cmdline[308]: dracut-dracut-053 Mar 17 18:27:05.770410 dracut-cmdline[308]: Using kernel command line parameters: rd.driver.pre=btrfs BOOT_IMAGE=/flatcar/vmlinuz-a mount.usr=/dev/mapper/usr verity.usr=PARTUUID=7130c94a-213a-4e5a-8e26-6cce9662f132 rootflags=rw mount.usrflags=ro consoleblank=0 root=LABEL=ROOT console=ttyS0,115200 flatcar.first_boot=detected acpi=force verity.usrhash=e034db32d58fe7496a3db6ba3879dd9052cea2cf1597d65edfc7b26afc92530d Mar 17 18:27:05.774884 kernel: device-mapper: core: CONFIG_IMA_DISABLE_HTABLE is disabled. Duplicate IMA measurements will not be recorded in the IMA log. Mar 17 18:27:05.774900 kernel: device-mapper: uevent: version 1.0.3 Mar 17 18:27:05.774909 kernel: device-mapper: ioctl: 4.45.0-ioctl (2021-03-22) initialised: dm-devel@redhat.com Mar 17 18:27:05.777735 systemd-modules-load[292]: Inserted module 'dm_multipath' Mar 17 18:27:05.778672 systemd[1]: Finished systemd-modules-load.service. Mar 17 18:27:05.779000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-modules-load comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:27:05.780764 systemd[1]: Starting systemd-sysctl.service... Mar 17 18:27:05.783632 kernel: audit: type=1130 audit(1742236025.779:7): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-modules-load comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:27:05.787952 systemd[1]: Finished systemd-sysctl.service. Mar 17 18:27:05.787000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-sysctl comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:27:05.792071 kernel: audit: type=1130 audit(1742236025.787:8): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-sysctl comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:27:05.826848 kernel: Loading iSCSI transport class v2.0-870. Mar 17 18:27:05.839860 kernel: iscsi: registered transport (tcp) Mar 17 18:27:05.853950 kernel: iscsi: registered transport (qla4xxx) Mar 17 18:27:05.853978 kernel: QLogic iSCSI HBA Driver Mar 17 18:27:05.885271 systemd[1]: Finished dracut-cmdline.service. Mar 17 18:27:05.885000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-cmdline comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:27:05.886714 systemd[1]: Starting dracut-pre-udev.service... Mar 17 18:27:05.889861 kernel: audit: type=1130 audit(1742236025.885:9): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-cmdline comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:27:05.929853 kernel: raid6: neonx8 gen() 13756 MB/s Mar 17 18:27:05.946841 kernel: raid6: neonx8 xor() 10798 MB/s Mar 17 18:27:05.963847 kernel: raid6: neonx4 gen() 13478 MB/s Mar 17 18:27:05.980842 kernel: raid6: neonx4 xor() 11036 MB/s Mar 17 18:27:05.997851 kernel: raid6: neonx2 gen() 12912 MB/s Mar 17 18:27:06.014848 kernel: raid6: neonx2 xor() 10261 MB/s Mar 17 18:27:06.031846 kernel: raid6: neonx1 gen() 10488 MB/s Mar 17 18:27:06.048850 kernel: raid6: neonx1 xor() 8765 MB/s Mar 17 18:27:06.065843 kernel: raid6: int64x8 gen() 6256 MB/s Mar 17 18:27:06.082847 kernel: raid6: int64x8 xor() 3534 MB/s Mar 17 18:27:06.099841 kernel: raid6: int64x4 gen() 7204 MB/s Mar 17 18:27:06.116847 kernel: raid6: int64x4 xor() 3851 MB/s Mar 17 18:27:06.133847 kernel: raid6: int64x2 gen() 6139 MB/s Mar 17 18:27:06.150857 kernel: raid6: int64x2 xor() 3309 MB/s Mar 17 18:27:06.167851 kernel: raid6: int64x1 gen() 5043 MB/s Mar 17 18:27:06.185010 kernel: raid6: int64x1 xor() 2645 MB/s Mar 17 18:27:06.185021 kernel: raid6: using algorithm neonx8 gen() 13756 MB/s Mar 17 18:27:06.185029 kernel: raid6: .... xor() 10798 MB/s, rmw enabled Mar 17 18:27:06.185037 kernel: raid6: using neon recovery algorithm Mar 17 18:27:06.194847 kernel: xor: measuring software checksum speed Mar 17 18:27:06.195844 kernel: 8regs : 15701 MB/sec Mar 17 18:27:06.195855 kernel: 32regs : 20712 MB/sec Mar 17 18:27:06.196850 kernel: arm64_neon : 25292 MB/sec Mar 17 18:27:06.196874 kernel: xor: using function: arm64_neon (25292 MB/sec) Mar 17 18:27:06.250848 kernel: Btrfs loaded, crc32c=crc32c-generic, zoned=no, fsverity=no Mar 17 18:27:06.260602 systemd[1]: Finished dracut-pre-udev.service. Mar 17 18:27:06.260000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-udev comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:27:06.261000 audit: BPF prog-id=7 op=LOAD Mar 17 18:27:06.262000 audit: BPF prog-id=8 op=LOAD Mar 17 18:27:06.263845 kernel: audit: type=1130 audit(1742236026.260:10): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-udev comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:27:06.264084 systemd[1]: Starting systemd-udevd.service... Mar 17 18:27:06.275867 systemd-udevd[491]: Using default interface naming scheme 'v252'. Mar 17 18:27:06.279680 systemd[1]: Started systemd-udevd.service. Mar 17 18:27:06.279000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-udevd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:27:06.281173 systemd[1]: Starting dracut-pre-trigger.service... Mar 17 18:27:06.291456 dracut-pre-trigger[498]: rd.md=0: removing MD RAID activation Mar 17 18:27:06.315820 systemd[1]: Finished dracut-pre-trigger.service. Mar 17 18:27:06.315000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-trigger comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:27:06.317251 systemd[1]: Starting systemd-udev-trigger.service... Mar 17 18:27:06.348708 systemd[1]: Finished systemd-udev-trigger.service. Mar 17 18:27:06.348000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-udev-trigger comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:27:06.377985 kernel: virtio_blk virtio1: [vda] 19775488 512-byte logical blocks (10.1 GB/9.43 GiB) Mar 17 18:27:06.382116 kernel: GPT:Primary header thinks Alt. header is not at the end of the disk. Mar 17 18:27:06.382129 kernel: GPT:9289727 != 19775487 Mar 17 18:27:06.382138 kernel: GPT:Alternate GPT header not at the end of the disk. Mar 17 18:27:06.382146 kernel: GPT:9289727 != 19775487 Mar 17 18:27:06.382154 kernel: GPT: Use GNU Parted to correct GPT errors. Mar 17 18:27:06.382163 kernel: vda: vda1 vda2 vda3 vda4 vda6 vda7 vda9 Mar 17 18:27:06.394850 kernel: BTRFS: device label OEM devid 1 transid 12 /dev/vda6 scanned by (udev-worker) (548) Mar 17 18:27:06.399335 systemd[1]: Found device dev-disk-by\x2dlabel-ROOT.device. Mar 17 18:27:06.406881 systemd[1]: Found device dev-disk-by\x2dlabel-EFI\x2dSYSTEM.device. Mar 17 18:27:06.410638 systemd[1]: Found device dev-disk-by\x2dpartuuid-7130c94a\x2d213a\x2d4e5a\x2d8e26\x2d6cce9662f132.device. Mar 17 18:27:06.411693 systemd[1]: Found device dev-disk-by\x2dpartlabel-USR\x2dA.device. Mar 17 18:27:06.416362 systemd[1]: Found device dev-disk-by\x2dlabel-OEM.device. Mar 17 18:27:06.417994 systemd[1]: Starting disk-uuid.service... Mar 17 18:27:06.423795 disk-uuid[565]: Primary Header is updated. Mar 17 18:27:06.423795 disk-uuid[565]: Secondary Entries is updated. Mar 17 18:27:06.423795 disk-uuid[565]: Secondary Header is updated. Mar 17 18:27:06.426862 kernel: vda: vda1 vda2 vda3 vda4 vda6 vda7 vda9 Mar 17 18:27:07.437814 disk-uuid[566]: The operation has completed successfully. Mar 17 18:27:07.439680 kernel: vda: vda1 vda2 vda3 vda4 vda6 vda7 vda9 Mar 17 18:27:07.465488 systemd[1]: disk-uuid.service: Deactivated successfully. Mar 17 18:27:07.465000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=disk-uuid comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:27:07.465000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=disk-uuid comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:27:07.465585 systemd[1]: Finished disk-uuid.service. Mar 17 18:27:07.467130 systemd[1]: Starting verity-setup.service... Mar 17 18:27:07.480861 kernel: device-mapper: verity: sha256 using implementation "sha256-ce" Mar 17 18:27:07.499612 systemd[1]: Found device dev-mapper-usr.device. Mar 17 18:27:07.501787 systemd[1]: Mounting sysusr-usr.mount... Mar 17 18:27:07.503522 systemd[1]: Finished verity-setup.service. Mar 17 18:27:07.503000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=verity-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:27:07.547860 kernel: EXT4-fs (dm-0): mounted filesystem without journal. Opts: norecovery. Quota mode: none. Mar 17 18:27:07.548275 systemd[1]: Mounted sysusr-usr.mount. Mar 17 18:27:07.549066 systemd[1]: afterburn-network-kargs.service was skipped because no trigger condition checks were met. Mar 17 18:27:07.549699 systemd[1]: Starting ignition-setup.service... Mar 17 18:27:07.551956 systemd[1]: Starting parse-ip-for-networkd.service... Mar 17 18:27:07.557887 kernel: BTRFS info (device vda6): using crc32c (crc32c-generic) checksum algorithm Mar 17 18:27:07.557988 kernel: BTRFS info (device vda6): using free space tree Mar 17 18:27:07.558030 kernel: BTRFS info (device vda6): has skinny extents Mar 17 18:27:07.564562 systemd[1]: mnt-oem.mount: Deactivated successfully. Mar 17 18:27:07.570391 systemd[1]: Finished ignition-setup.service. Mar 17 18:27:07.571000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:27:07.571867 systemd[1]: Starting ignition-fetch-offline.service... Mar 17 18:27:07.631725 systemd[1]: Finished parse-ip-for-networkd.service. Mar 17 18:27:07.632000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=parse-ip-for-networkd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:27:07.633000 audit: BPF prog-id=9 op=LOAD Mar 17 18:27:07.634054 systemd[1]: Starting systemd-networkd.service... Mar 17 18:27:07.647525 ignition[648]: Ignition 2.14.0 Mar 17 18:27:07.647538 ignition[648]: Stage: fetch-offline Mar 17 18:27:07.647584 ignition[648]: no configs at "/usr/lib/ignition/base.d" Mar 17 18:27:07.647593 ignition[648]: no config dir at "/usr/lib/ignition/base.platform.d/qemu" Mar 17 18:27:07.647755 ignition[648]: parsed url from cmdline: "" Mar 17 18:27:07.647759 ignition[648]: no config URL provided Mar 17 18:27:07.647763 ignition[648]: reading system config file "/usr/lib/ignition/user.ign" Mar 17 18:27:07.647770 ignition[648]: no config at "/usr/lib/ignition/user.ign" Mar 17 18:27:07.647787 ignition[648]: op(1): [started] loading QEMU firmware config module Mar 17 18:27:07.647792 ignition[648]: op(1): executing: "modprobe" "qemu_fw_cfg" Mar 17 18:27:07.657738 ignition[648]: op(1): [finished] loading QEMU firmware config module Mar 17 18:27:07.659060 systemd-networkd[739]: lo: Link UP Mar 17 18:27:07.660000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-networkd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:27:07.659071 systemd-networkd[739]: lo: Gained carrier Mar 17 18:27:07.659408 systemd-networkd[739]: Enumeration completed Mar 17 18:27:07.659574 systemd-networkd[739]: eth0: Configuring with /usr/lib/systemd/network/zz-default.network. Mar 17 18:27:07.659875 systemd[1]: Started systemd-networkd.service. Mar 17 18:27:07.660581 systemd-networkd[739]: eth0: Link UP Mar 17 18:27:07.660585 systemd-networkd[739]: eth0: Gained carrier Mar 17 18:27:07.661022 systemd[1]: Reached target network.target. Mar 17 18:27:07.662643 systemd[1]: Starting iscsiuio.service... Mar 17 18:27:07.672000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=iscsiuio comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:27:07.673025 systemd[1]: Started iscsiuio.service. Mar 17 18:27:07.674670 systemd[1]: Starting iscsid.service... Mar 17 18:27:07.678021 iscsid[746]: iscsid: can't open InitiatorName configuration file /etc/iscsi/initiatorname.iscsi Mar 17 18:27:07.678021 iscsid[746]: iscsid: Warning: InitiatorName file /etc/iscsi/initiatorname.iscsi does not exist or does not contain a properly formatted InitiatorName. If using software iscsi (iscsi_tcp or ib_iser) or partial offload (bnx2i or cxgbi iscsi), you may not be able to log into or discover targets. Please create a file /etc/iscsi/initiatorname.iscsi that contains a sting with the format: InitiatorName=iqn.yyyy-mm.[:identifier]. Mar 17 18:27:07.678021 iscsid[746]: Example: InitiatorName=iqn.2001-04.com.redhat:fc6. Mar 17 18:27:07.678021 iscsid[746]: If using hardware iscsi like qla4xxx this message can be ignored. Mar 17 18:27:07.678021 iscsid[746]: iscsid: can't open InitiatorAlias configuration file /etc/iscsi/initiatorname.iscsi Mar 17 18:27:07.678021 iscsid[746]: iscsid: can't open iscsid.safe_logout configuration file /etc/iscsi/iscsid.conf Mar 17 18:27:07.685000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=iscsid comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:27:07.680844 systemd-networkd[739]: eth0: DHCPv4 address 10.0.0.111/16, gateway 10.0.0.1 acquired from 10.0.0.1 Mar 17 18:27:07.685111 systemd[1]: Started iscsid.service. Mar 17 18:27:07.686657 systemd[1]: Starting dracut-initqueue.service... Mar 17 18:27:07.696399 systemd[1]: Finished dracut-initqueue.service. Mar 17 18:27:07.697000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-initqueue comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:27:07.697398 systemd[1]: Reached target remote-fs-pre.target. Mar 17 18:27:07.698886 systemd[1]: Reached target remote-cryptsetup.target. Mar 17 18:27:07.700474 systemd[1]: Reached target remote-fs.target. Mar 17 18:27:07.702715 systemd[1]: Starting dracut-pre-mount.service... Mar 17 18:27:07.709942 systemd[1]: Finished dracut-pre-mount.service. Mar 17 18:27:07.709000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-mount comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:27:07.724525 ignition[648]: parsing config with SHA512: 27786afe610572d318ca749c02c8c21eaafd6ac8e83abc8772d76f65a27449b22955566d57e72f07e4bab554aff2aecc007220acb4b7f00c64e8e00d0b66f0c0 Mar 17 18:27:07.731757 unknown[648]: fetched base config from "system" Mar 17 18:27:07.731766 unknown[648]: fetched user config from "qemu" Mar 17 18:27:07.732219 ignition[648]: fetch-offline: fetch-offline passed Mar 17 18:27:07.733000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-fetch-offline comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:27:07.733535 systemd[1]: Finished ignition-fetch-offline.service. Mar 17 18:27:07.732273 ignition[648]: Ignition finished successfully Mar 17 18:27:07.734589 systemd[1]: ignition-fetch.service was skipped because of an unmet condition check (ConditionPathExists=!/run/ignition.json). Mar 17 18:27:07.735301 systemd[1]: Starting ignition-kargs.service... Mar 17 18:27:07.743180 ignition[761]: Ignition 2.14.0 Mar 17 18:27:07.743189 ignition[761]: Stage: kargs Mar 17 18:27:07.743271 ignition[761]: no configs at "/usr/lib/ignition/base.d" Mar 17 18:27:07.745335 systemd[1]: Finished ignition-kargs.service. Mar 17 18:27:07.745000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-kargs comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:27:07.743281 ignition[761]: no config dir at "/usr/lib/ignition/base.platform.d/qemu" Mar 17 18:27:07.744050 ignition[761]: kargs: kargs passed Mar 17 18:27:07.747548 systemd[1]: Starting ignition-disks.service... Mar 17 18:27:07.744087 ignition[761]: Ignition finished successfully Mar 17 18:27:07.753615 ignition[767]: Ignition 2.14.0 Mar 17 18:27:07.753633 ignition[767]: Stage: disks Mar 17 18:27:07.753716 ignition[767]: no configs at "/usr/lib/ignition/base.d" Mar 17 18:27:07.753725 ignition[767]: no config dir at "/usr/lib/ignition/base.platform.d/qemu" Mar 17 18:27:07.755000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-disks comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:27:07.755618 systemd[1]: Finished ignition-disks.service. Mar 17 18:27:07.754896 ignition[767]: disks: disks passed Mar 17 18:27:07.756594 systemd[1]: Reached target initrd-root-device.target. Mar 17 18:27:07.754940 ignition[767]: Ignition finished successfully Mar 17 18:27:07.758179 systemd[1]: Reached target local-fs-pre.target. Mar 17 18:27:07.759540 systemd[1]: Reached target local-fs.target. Mar 17 18:27:07.760741 systemd[1]: Reached target sysinit.target. Mar 17 18:27:07.762130 systemd[1]: Reached target basic.target. Mar 17 18:27:07.764176 systemd[1]: Starting systemd-fsck-root.service... Mar 17 18:27:07.774291 systemd-fsck[775]: ROOT: clean, 623/553520 files, 56021/553472 blocks Mar 17 18:27:07.777593 systemd[1]: Finished systemd-fsck-root.service. Mar 17 18:27:07.777000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-fsck-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:27:07.779160 systemd[1]: Mounting sysroot.mount... Mar 17 18:27:07.785854 kernel: EXT4-fs (vda9): mounted filesystem with ordered data mode. Opts: (null). Quota mode: none. Mar 17 18:27:07.786304 systemd[1]: Mounted sysroot.mount. Mar 17 18:27:07.787073 systemd[1]: Reached target initrd-root-fs.target. Mar 17 18:27:07.789617 systemd[1]: Mounting sysroot-usr.mount... Mar 17 18:27:07.790498 systemd[1]: flatcar-metadata-hostname.service was skipped because no trigger condition checks were met. Mar 17 18:27:07.790533 systemd[1]: ignition-remount-sysroot.service was skipped because of an unmet condition check (ConditionPathIsReadWrite=!/sysroot). Mar 17 18:27:07.790555 systemd[1]: Reached target ignition-diskful.target. Mar 17 18:27:07.792328 systemd[1]: Mounted sysroot-usr.mount. Mar 17 18:27:07.794185 systemd[1]: Starting initrd-setup-root.service... Mar 17 18:27:07.798149 initrd-setup-root[785]: cut: /sysroot/etc/passwd: No such file or directory Mar 17 18:27:07.801472 initrd-setup-root[793]: cut: /sysroot/etc/group: No such file or directory Mar 17 18:27:07.805599 initrd-setup-root[801]: cut: /sysroot/etc/shadow: No such file or directory Mar 17 18:27:07.809615 initrd-setup-root[809]: cut: /sysroot/etc/gshadow: No such file or directory Mar 17 18:27:07.834508 systemd[1]: Finished initrd-setup-root.service. Mar 17 18:27:07.834000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-setup-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:27:07.836051 systemd[1]: Starting ignition-mount.service... Mar 17 18:27:07.837324 systemd[1]: Starting sysroot-boot.service... Mar 17 18:27:07.841781 bash[827]: umount: /sysroot/usr/share/oem: not mounted. Mar 17 18:27:07.850025 ignition[829]: INFO : Ignition 2.14.0 Mar 17 18:27:07.850025 ignition[829]: INFO : Stage: mount Mar 17 18:27:07.852901 ignition[829]: INFO : no configs at "/usr/lib/ignition/base.d" Mar 17 18:27:07.852901 ignition[829]: INFO : no config dir at "/usr/lib/ignition/base.platform.d/qemu" Mar 17 18:27:07.852901 ignition[829]: INFO : mount: mount passed Mar 17 18:27:07.852901 ignition[829]: INFO : Ignition finished successfully Mar 17 18:27:07.852000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-mount comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:27:07.855000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=sysroot-boot comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:27:07.852455 systemd[1]: Finished ignition-mount.service. Mar 17 18:27:07.854302 systemd[1]: Finished sysroot-boot.service. Mar 17 18:27:08.510222 systemd[1]: Mounting sysroot-usr-share-oem.mount... Mar 17 18:27:08.516242 kernel: BTRFS: device label OEM devid 1 transid 13 /dev/vda6 scanned by mount (837) Mar 17 18:27:08.516267 kernel: BTRFS info (device vda6): using crc32c (crc32c-generic) checksum algorithm Mar 17 18:27:08.516277 kernel: BTRFS info (device vda6): using free space tree Mar 17 18:27:08.517129 kernel: BTRFS info (device vda6): has skinny extents Mar 17 18:27:08.519763 systemd[1]: Mounted sysroot-usr-share-oem.mount. Mar 17 18:27:08.521234 systemd[1]: Starting ignition-files.service... Mar 17 18:27:08.534200 ignition[857]: INFO : Ignition 2.14.0 Mar 17 18:27:08.534200 ignition[857]: INFO : Stage: files Mar 17 18:27:08.535689 ignition[857]: INFO : no configs at "/usr/lib/ignition/base.d" Mar 17 18:27:08.535689 ignition[857]: INFO : no config dir at "/usr/lib/ignition/base.platform.d/qemu" Mar 17 18:27:08.535689 ignition[857]: DEBUG : files: compiled without relabeling support, skipping Mar 17 18:27:08.541511 ignition[857]: INFO : files: ensureUsers: op(1): [started] creating or modifying user "core" Mar 17 18:27:08.541511 ignition[857]: DEBUG : files: ensureUsers: op(1): executing: "usermod" "--root" "/sysroot" "core" Mar 17 18:27:08.544375 ignition[857]: INFO : files: ensureUsers: op(1): [finished] creating or modifying user "core" Mar 17 18:27:08.545712 ignition[857]: INFO : files: ensureUsers: op(2): [started] adding ssh keys to user "core" Mar 17 18:27:08.547213 unknown[857]: wrote ssh authorized keys file for user: core Mar 17 18:27:08.548909 ignition[857]: INFO : files: ensureUsers: op(2): [finished] adding ssh keys to user "core" Mar 17 18:27:08.548909 ignition[857]: INFO : files: createFilesystemsFiles: createFiles: op(3): [started] writing file "/sysroot/opt/helm-v3.13.2-linux-arm64.tar.gz" Mar 17 18:27:08.548909 ignition[857]: INFO : files: createFilesystemsFiles: createFiles: op(3): GET https://get.helm.sh/helm-v3.13.2-linux-arm64.tar.gz: attempt #1 Mar 17 18:27:08.683247 ignition[857]: INFO : files: createFilesystemsFiles: createFiles: op(3): GET result: OK Mar 17 18:27:08.833258 ignition[857]: INFO : files: createFilesystemsFiles: createFiles: op(3): [finished] writing file "/sysroot/opt/helm-v3.13.2-linux-arm64.tar.gz" Mar 17 18:27:08.833258 ignition[857]: INFO : files: createFilesystemsFiles: createFiles: op(4): [started] writing file "/sysroot/home/core/install.sh" Mar 17 18:27:08.836890 ignition[857]: INFO : files: createFilesystemsFiles: createFiles: op(4): [finished] writing file "/sysroot/home/core/install.sh" Mar 17 18:27:08.836890 ignition[857]: INFO : files: createFilesystemsFiles: createFiles: op(5): [started] writing file "/sysroot/home/core/nginx.yaml" Mar 17 18:27:08.836890 ignition[857]: INFO : files: createFilesystemsFiles: createFiles: op(5): [finished] writing file "/sysroot/home/core/nginx.yaml" Mar 17 18:27:08.836890 ignition[857]: INFO : files: createFilesystemsFiles: createFiles: op(6): [started] writing file "/sysroot/home/core/nfs-pod.yaml" Mar 17 18:27:08.836890 ignition[857]: INFO : files: createFilesystemsFiles: createFiles: op(6): [finished] writing file "/sysroot/home/core/nfs-pod.yaml" Mar 17 18:27:08.836890 ignition[857]: INFO : files: createFilesystemsFiles: createFiles: op(7): [started] writing file "/sysroot/home/core/nfs-pvc.yaml" Mar 17 18:27:08.836890 ignition[857]: INFO : files: createFilesystemsFiles: createFiles: op(7): [finished] writing file "/sysroot/home/core/nfs-pvc.yaml" Mar 17 18:27:08.836890 ignition[857]: INFO : files: createFilesystemsFiles: createFiles: op(8): [started] writing file "/sysroot/etc/flatcar/update.conf" Mar 17 18:27:08.836890 ignition[857]: INFO : files: createFilesystemsFiles: createFiles: op(8): [finished] writing file "/sysroot/etc/flatcar/update.conf" Mar 17 18:27:08.836890 ignition[857]: INFO : files: createFilesystemsFiles: createFiles: op(9): [started] writing link "/sysroot/etc/extensions/kubernetes.raw" -> "/opt/extensions/kubernetes/kubernetes-v1.31.0-arm64.raw" Mar 17 18:27:08.836890 ignition[857]: INFO : files: createFilesystemsFiles: createFiles: op(9): [finished] writing link "/sysroot/etc/extensions/kubernetes.raw" -> "/opt/extensions/kubernetes/kubernetes-v1.31.0-arm64.raw" Mar 17 18:27:08.836890 ignition[857]: INFO : files: createFilesystemsFiles: createFiles: op(a): [started] writing file "/sysroot/opt/extensions/kubernetes/kubernetes-v1.31.0-arm64.raw" Mar 17 18:27:08.836890 ignition[857]: INFO : files: createFilesystemsFiles: createFiles: op(a): GET https://github.com/flatcar/sysext-bakery/releases/download/latest/kubernetes-v1.31.0-arm64.raw: attempt #1 Mar 17 18:27:08.882107 systemd-networkd[739]: eth0: Gained IPv6LL Mar 17 18:27:09.071708 ignition[857]: INFO : files: createFilesystemsFiles: createFiles: op(a): GET result: OK Mar 17 18:27:09.296407 ignition[857]: INFO : files: createFilesystemsFiles: createFiles: op(a): [finished] writing file "/sysroot/opt/extensions/kubernetes/kubernetes-v1.31.0-arm64.raw" Mar 17 18:27:09.298450 ignition[857]: INFO : files: op(b): [started] processing unit "prepare-helm.service" Mar 17 18:27:09.299709 ignition[857]: INFO : files: op(b): op(c): [started] writing unit "prepare-helm.service" at "/sysroot/etc/systemd/system/prepare-helm.service" Mar 17 18:27:09.299709 ignition[857]: INFO : files: op(b): op(c): [finished] writing unit "prepare-helm.service" at "/sysroot/etc/systemd/system/prepare-helm.service" Mar 17 18:27:09.299709 ignition[857]: INFO : files: op(b): [finished] processing unit "prepare-helm.service" Mar 17 18:27:09.299709 ignition[857]: INFO : files: op(d): [started] processing unit "coreos-metadata.service" Mar 17 18:27:09.299709 ignition[857]: INFO : files: op(d): op(e): [started] writing unit "coreos-metadata.service" at "/sysroot/etc/systemd/system/coreos-metadata.service" Mar 17 18:27:09.299709 ignition[857]: INFO : files: op(d): op(e): [finished] writing unit "coreos-metadata.service" at "/sysroot/etc/systemd/system/coreos-metadata.service" Mar 17 18:27:09.299709 ignition[857]: INFO : files: op(d): [finished] processing unit "coreos-metadata.service" Mar 17 18:27:09.299709 ignition[857]: INFO : files: op(f): [started] setting preset to enabled for "prepare-helm.service" Mar 17 18:27:09.299709 ignition[857]: INFO : files: op(f): [finished] setting preset to enabled for "prepare-helm.service" Mar 17 18:27:09.299709 ignition[857]: INFO : files: op(10): [started] setting preset to disabled for "coreos-metadata.service" Mar 17 18:27:09.299709 ignition[857]: INFO : files: op(10): op(11): [started] removing enablement symlink(s) for "coreos-metadata.service" Mar 17 18:27:09.327879 ignition[857]: INFO : files: op(10): op(11): [finished] removing enablement symlink(s) for "coreos-metadata.service" Mar 17 18:27:09.330093 ignition[857]: INFO : files: op(10): [finished] setting preset to disabled for "coreos-metadata.service" Mar 17 18:27:09.330093 ignition[857]: INFO : files: createResultFile: createFiles: op(12): [started] writing file "/sysroot/etc/.ignition-result.json" Mar 17 18:27:09.330093 ignition[857]: INFO : files: createResultFile: createFiles: op(12): [finished] writing file "/sysroot/etc/.ignition-result.json" Mar 17 18:27:09.330093 ignition[857]: INFO : files: files passed Mar 17 18:27:09.330093 ignition[857]: INFO : Ignition finished successfully Mar 17 18:27:09.332000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-files comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:27:09.330223 systemd[1]: Finished ignition-files.service. Mar 17 18:27:09.333084 systemd[1]: Starting initrd-setup-root-after-ignition.service... Mar 17 18:27:09.338000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-quench comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:27:09.338000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-quench comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:27:09.340669 initrd-setup-root-after-ignition[883]: grep: /sysroot/usr/share/oem/oem-release: No such file or directory Mar 17 18:27:09.334493 systemd[1]: torcx-profile-populate.service was skipped because of an unmet condition check (ConditionPathExists=/sysroot/etc/torcx/next-profile). Mar 17 18:27:09.342000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-setup-root-after-ignition comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:27:09.344513 initrd-setup-root-after-ignition[885]: grep: /sysroot/etc/flatcar/enabled-sysext.conf: No such file or directory Mar 17 18:27:09.335135 systemd[1]: Starting ignition-quench.service... Mar 17 18:27:09.338335 systemd[1]: ignition-quench.service: Deactivated successfully. Mar 17 18:27:09.338420 systemd[1]: Finished ignition-quench.service. Mar 17 18:27:09.341797 systemd[1]: Finished initrd-setup-root-after-ignition.service. Mar 17 18:27:09.342949 systemd[1]: Reached target ignition-complete.target. Mar 17 18:27:09.345767 systemd[1]: Starting initrd-parse-etc.service... Mar 17 18:27:09.357327 systemd[1]: initrd-parse-etc.service: Deactivated successfully. Mar 17 18:27:09.357411 systemd[1]: Finished initrd-parse-etc.service. Mar 17 18:27:09.358000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-parse-etc comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:27:09.358000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-parse-etc comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:27:09.359042 systemd[1]: Reached target initrd-fs.target. Mar 17 18:27:09.360232 systemd[1]: Reached target initrd.target. Mar 17 18:27:09.361497 systemd[1]: dracut-mount.service was skipped because no trigger condition checks were met. Mar 17 18:27:09.362188 systemd[1]: Starting dracut-pre-pivot.service... Mar 17 18:27:09.371688 systemd[1]: Finished dracut-pre-pivot.service. Mar 17 18:27:09.371000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-pivot comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:27:09.373178 systemd[1]: Starting initrd-cleanup.service... Mar 17 18:27:09.380449 systemd[1]: Stopped target nss-lookup.target. Mar 17 18:27:09.381304 systemd[1]: Stopped target remote-cryptsetup.target. Mar 17 18:27:09.382731 systemd[1]: Stopped target timers.target. Mar 17 18:27:09.384070 systemd[1]: dracut-pre-pivot.service: Deactivated successfully. Mar 17 18:27:09.384000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-pivot comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:27:09.384170 systemd[1]: Stopped dracut-pre-pivot.service. Mar 17 18:27:09.385412 systemd[1]: Stopped target initrd.target. Mar 17 18:27:09.386728 systemd[1]: Stopped target basic.target. Mar 17 18:27:09.388070 systemd[1]: Stopped target ignition-complete.target. Mar 17 18:27:09.389388 systemd[1]: Stopped target ignition-diskful.target. Mar 17 18:27:09.390704 systemd[1]: Stopped target initrd-root-device.target. Mar 17 18:27:09.392161 systemd[1]: Stopped target remote-fs.target. Mar 17 18:27:09.393473 systemd[1]: Stopped target remote-fs-pre.target. Mar 17 18:27:09.394844 systemd[1]: Stopped target sysinit.target. Mar 17 18:27:09.396081 systemd[1]: Stopped target local-fs.target. Mar 17 18:27:09.397340 systemd[1]: Stopped target local-fs-pre.target. Mar 17 18:27:09.398619 systemd[1]: Stopped target swap.target. Mar 17 18:27:09.400000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-mount comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:27:09.399805 systemd[1]: dracut-pre-mount.service: Deactivated successfully. Mar 17 18:27:09.399927 systemd[1]: Stopped dracut-pre-mount.service. Mar 17 18:27:09.402000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-initqueue comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:27:09.401212 systemd[1]: Stopped target cryptsetup.target. Mar 17 18:27:09.404000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-fetch-offline comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:27:09.402343 systemd[1]: dracut-initqueue.service: Deactivated successfully. Mar 17 18:27:09.402441 systemd[1]: Stopped dracut-initqueue.service. Mar 17 18:27:09.403899 systemd[1]: ignition-fetch-offline.service: Deactivated successfully. Mar 17 18:27:09.403998 systemd[1]: Stopped ignition-fetch-offline.service. Mar 17 18:27:09.405245 systemd[1]: Stopped target paths.target. Mar 17 18:27:09.406383 systemd[1]: systemd-ask-password-console.path: Deactivated successfully. Mar 17 18:27:09.409886 systemd[1]: Stopped systemd-ask-password-console.path. Mar 17 18:27:09.411018 systemd[1]: Stopped target slices.target. Mar 17 18:27:09.412518 systemd[1]: Stopped target sockets.target. Mar 17 18:27:09.413874 systemd[1]: iscsid.socket: Deactivated successfully. Mar 17 18:27:09.413943 systemd[1]: Closed iscsid.socket. Mar 17 18:27:09.416000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-setup-root-after-ignition comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:27:09.415017 systemd[1]: iscsiuio.socket: Deactivated successfully. Mar 17 18:27:09.418000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-files comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:27:09.415077 systemd[1]: Closed iscsiuio.socket. Mar 17 18:27:09.416191 systemd[1]: initrd-setup-root-after-ignition.service: Deactivated successfully. Mar 17 18:27:09.416289 systemd[1]: Stopped initrd-setup-root-after-ignition.service. Mar 17 18:27:09.421000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=kmod-static-nodes comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:27:09.417747 systemd[1]: ignition-files.service: Deactivated successfully. Mar 17 18:27:09.425902 ignition[898]: INFO : Ignition 2.14.0 Mar 17 18:27:09.425902 ignition[898]: INFO : Stage: umount Mar 17 18:27:09.425902 ignition[898]: INFO : no configs at "/usr/lib/ignition/base.d" Mar 17 18:27:09.425902 ignition[898]: INFO : no config dir at "/usr/lib/ignition/base.platform.d/qemu" Mar 17 18:27:09.425000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-udev-trigger comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:27:09.428000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-trigger comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:27:09.417864 systemd[1]: Stopped ignition-files.service. Mar 17 18:27:09.431000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-mount comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:27:09.432126 ignition[898]: INFO : umount: umount passed Mar 17 18:27:09.432126 ignition[898]: INFO : Ignition finished successfully Mar 17 18:27:09.419591 systemd[1]: Stopping ignition-mount.service... Mar 17 18:27:09.434000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-cleanup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:27:09.434000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-cleanup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:27:09.420766 systemd[1]: kmod-static-nodes.service: Deactivated successfully. Mar 17 18:27:09.420913 systemd[1]: Stopped kmod-static-nodes.service. Mar 17 18:27:09.437000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-disks comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:27:09.423253 systemd[1]: Stopping sysroot-boot.service... Mar 17 18:27:09.440000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-kargs comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:27:09.425078 systemd[1]: systemd-udev-trigger.service: Deactivated successfully. Mar 17 18:27:09.440000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:27:09.425203 systemd[1]: Stopped systemd-udev-trigger.service. Mar 17 18:27:09.426732 systemd[1]: dracut-pre-trigger.service: Deactivated successfully. Mar 17 18:27:09.426845 systemd[1]: Stopped dracut-pre-trigger.service. Mar 17 18:27:09.430076 systemd[1]: ignition-mount.service: Deactivated successfully. Mar 17 18:27:09.430154 systemd[1]: Stopped ignition-mount.service. Mar 17 18:27:09.432452 systemd[1]: sysroot-boot.mount: Deactivated successfully. Mar 17 18:27:09.433420 systemd[1]: initrd-cleanup.service: Deactivated successfully. Mar 17 18:27:09.433503 systemd[1]: Finished initrd-cleanup.service. Mar 17 18:27:09.434762 systemd[1]: Stopped target network.target. Mar 17 18:27:09.437181 systemd[1]: ignition-disks.service: Deactivated successfully. Mar 17 18:27:09.437237 systemd[1]: Stopped ignition-disks.service. Mar 17 18:27:09.438692 systemd[1]: ignition-kargs.service: Deactivated successfully. Mar 17 18:27:09.438731 systemd[1]: Stopped ignition-kargs.service. Mar 17 18:27:09.440434 systemd[1]: ignition-setup.service: Deactivated successfully. Mar 17 18:27:09.440474 systemd[1]: Stopped ignition-setup.service. Mar 17 18:27:09.441820 systemd[1]: Stopping systemd-networkd.service... Mar 17 18:27:09.443212 systemd[1]: Stopping systemd-resolved.service... Mar 17 18:27:09.459000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-networkd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:27:09.454888 systemd-networkd[739]: eth0: DHCPv6 lease lost Mar 17 18:27:09.460000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-resolved comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:27:09.461000 audit: BPF prog-id=9 op=UNLOAD Mar 17 18:27:09.456689 systemd[1]: systemd-networkd.service: Deactivated successfully. Mar 17 18:27:09.456795 systemd[1]: Stopped systemd-networkd.service. Mar 17 18:27:09.463000 audit: BPF prog-id=6 op=UNLOAD Mar 17 18:27:09.460431 systemd[1]: systemd-resolved.service: Deactivated successfully. Mar 17 18:27:09.465000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=parse-ip-for-networkd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:27:09.460524 systemd[1]: Stopped systemd-resolved.service. Mar 17 18:27:09.466000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-sysctl comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:27:09.461911 systemd[1]: systemd-networkd.socket: Deactivated successfully. Mar 17 18:27:09.468000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-modules-load comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:27:09.461940 systemd[1]: Closed systemd-networkd.socket. Mar 17 18:27:09.463685 systemd[1]: Stopping network-cleanup.service... Mar 17 18:27:09.464548 systemd[1]: parse-ip-for-networkd.service: Deactivated successfully. Mar 17 18:27:09.475000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=sysroot-boot comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:27:09.464607 systemd[1]: Stopped parse-ip-for-networkd.service. Mar 17 18:27:09.476000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-setup-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:27:09.466370 systemd[1]: systemd-sysctl.service: Deactivated successfully. Mar 17 18:27:09.466422 systemd[1]: Stopped systemd-sysctl.service. Mar 17 18:27:09.468547 systemd[1]: systemd-modules-load.service: Deactivated successfully. Mar 17 18:27:09.468587 systemd[1]: Stopped systemd-modules-load.service. Mar 17 18:27:09.469574 systemd[1]: Stopping systemd-udevd.service... Mar 17 18:27:09.474391 systemd[1]: run-credentials-systemd\x2dsysctl.service.mount: Deactivated successfully. Mar 17 18:27:09.474876 systemd[1]: sysroot-boot.service: Deactivated successfully. Mar 17 18:27:09.474955 systemd[1]: Stopped sysroot-boot.service. Mar 17 18:27:09.476773 systemd[1]: initrd-setup-root.service: Deactivated successfully. Mar 17 18:27:09.476877 systemd[1]: Stopped initrd-setup-root.service. Mar 17 18:27:09.486967 systemd[1]: network-cleanup.service: Deactivated successfully. Mar 17 18:27:09.486000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=network-cleanup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:27:09.487059 systemd[1]: Stopped network-cleanup.service. Mar 17 18:27:09.488060 systemd[1]: systemd-udevd.service: Deactivated successfully. Mar 17 18:27:09.488164 systemd[1]: Stopped systemd-udevd.service. Mar 17 18:27:09.489624 systemd[1]: systemd-udevd-control.socket: Deactivated successfully. Mar 17 18:27:09.489657 systemd[1]: Closed systemd-udevd-control.socket. Mar 17 18:27:09.489000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-udevd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:27:09.493000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-udev comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:27:09.494000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-cmdline comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:27:09.490730 systemd[1]: systemd-udevd-kernel.socket: Deactivated successfully. Mar 17 18:27:09.496000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-cmdline-ask comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:27:09.490760 systemd[1]: Closed systemd-udevd-kernel.socket. Mar 17 18:27:09.492243 systemd[1]: dracut-pre-udev.service: Deactivated successfully. Mar 17 18:27:09.499000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-vconsole-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:27:09.492284 systemd[1]: Stopped dracut-pre-udev.service. Mar 17 18:27:09.493520 systemd[1]: dracut-cmdline.service: Deactivated successfully. Mar 17 18:27:09.493556 systemd[1]: Stopped dracut-cmdline.service. Mar 17 18:27:09.502000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-udevadm-cleanup-db comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:27:09.502000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-udevadm-cleanup-db comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:27:09.495017 systemd[1]: dracut-cmdline-ask.service: Deactivated successfully. Mar 17 18:27:09.495055 systemd[1]: Stopped dracut-cmdline-ask.service. Mar 17 18:27:09.497148 systemd[1]: Starting initrd-udevadm-cleanup-db.service... Mar 17 18:27:09.498111 systemd[1]: systemd-vconsole-setup.service: Deactivated successfully. Mar 17 18:27:09.498167 systemd[1]: Stopped systemd-vconsole-setup.service. Mar 17 18:27:09.501942 systemd[1]: initrd-udevadm-cleanup-db.service: Deactivated successfully. Mar 17 18:27:09.502021 systemd[1]: Finished initrd-udevadm-cleanup-db.service. Mar 17 18:27:09.502956 systemd[1]: Reached target initrd-switch-root.target. Mar 17 18:27:09.504904 systemd[1]: Starting initrd-switch-root.service... Mar 17 18:27:09.510600 systemd[1]: Switching root. Mar 17 18:27:09.528076 systemd-journald[291]: Journal stopped Mar 17 18:27:11.540883 systemd-journald[291]: Received SIGTERM from PID 1 (systemd). Mar 17 18:27:11.540940 kernel: SELinux: Class mctp_socket not defined in policy. Mar 17 18:27:11.540958 kernel: SELinux: Class anon_inode not defined in policy. Mar 17 18:27:11.540971 kernel: SELinux: the above unknown classes and permissions will be allowed Mar 17 18:27:11.540981 kernel: SELinux: policy capability network_peer_controls=1 Mar 17 18:27:11.540990 kernel: SELinux: policy capability open_perms=1 Mar 17 18:27:11.540999 kernel: SELinux: policy capability extended_socket_class=1 Mar 17 18:27:11.541009 kernel: SELinux: policy capability always_check_network=0 Mar 17 18:27:11.541020 kernel: SELinux: policy capability cgroup_seclabel=1 Mar 17 18:27:11.541029 kernel: SELinux: policy capability nnp_nosuid_transition=1 Mar 17 18:27:11.541039 kernel: SELinux: policy capability genfs_seclabel_symlinks=0 Mar 17 18:27:11.541048 kernel: SELinux: policy capability ioctl_skip_cloexec=0 Mar 17 18:27:11.541058 systemd[1]: Successfully loaded SELinux policy in 39.475ms. Mar 17 18:27:11.541074 systemd[1]: Relabelled /dev, /dev/shm, /run, /sys/fs/cgroup in 6.724ms. Mar 17 18:27:11.541093 systemd[1]: systemd 252 running in system mode (+PAM +AUDIT +SELINUX -APPARMOR +IMA +SMACK +SECCOMP +GCRYPT -GNUTLS +OPENSSL -ACL +BLKID +CURL -ELFUTILS -FIDO2 +IDN2 -IDN +IPTC +KMOD +LIBCRYPTSETUP +LIBFDISK +PCRE2 -PWQUALITY -P11KIT -QRENCODE -TPM2 +BZIP2 +LZ4 +XZ +ZLIB +ZSTD -BPF_FRAMEWORK -XKBCOMMON +UTMP +SYSVINIT default-hierarchy=unified) Mar 17 18:27:11.541103 systemd[1]: Detected virtualization kvm. Mar 17 18:27:11.541115 systemd[1]: Detected architecture arm64. Mar 17 18:27:11.541126 systemd[1]: Detected first boot. Mar 17 18:27:11.541136 systemd[1]: Initializing machine ID from VM UUID. Mar 17 18:27:11.541146 kernel: SELinux: Context system_u:object_r:container_file_t:s0:c1022,c1023 is not valid (left unmapped). Mar 17 18:27:11.541156 systemd[1]: Populated /etc with preset unit settings. Mar 17 18:27:11.541166 systemd[1]: /usr/lib/systemd/system/locksmithd.service:8: Unit uses CPUShares=; please use CPUWeight= instead. Support for CPUShares= will be removed soon. Mar 17 18:27:11.541177 systemd[1]: /usr/lib/systemd/system/locksmithd.service:9: Unit uses MemoryLimit=; please use MemoryMax= instead. Support for MemoryLimit= will be removed soon. Mar 17 18:27:11.541188 systemd[1]: /run/systemd/system/docker.socket:8: ListenStream= references a path below legacy directory /var/run/, updating /var/run/docker.sock → /run/docker.sock; please update the unit file accordingly. Mar 17 18:27:11.541200 kernel: kauditd_printk_skb: 78 callbacks suppressed Mar 17 18:27:11.541210 kernel: audit: type=1334 audit(1742236031.397:82): prog-id=12 op=LOAD Mar 17 18:27:11.541219 kernel: audit: type=1334 audit(1742236031.397:83): prog-id=3 op=UNLOAD Mar 17 18:27:11.541228 kernel: audit: type=1334 audit(1742236031.398:84): prog-id=13 op=LOAD Mar 17 18:27:11.541237 kernel: audit: type=1334 audit(1742236031.398:85): prog-id=14 op=LOAD Mar 17 18:27:11.541247 kernel: audit: type=1334 audit(1742236031.398:86): prog-id=4 op=UNLOAD Mar 17 18:27:11.541260 systemd[1]: iscsiuio.service: Deactivated successfully. Mar 17 18:27:11.541270 kernel: audit: type=1334 audit(1742236031.398:87): prog-id=5 op=UNLOAD Mar 17 18:27:11.541281 systemd[1]: Stopped iscsiuio.service. Mar 17 18:27:11.541292 kernel: audit: type=1131 audit(1742236031.400:88): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-journald comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:27:11.541302 kernel: audit: type=1131 audit(1742236031.404:89): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=iscsiuio comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:27:11.541313 systemd[1]: iscsid.service: Deactivated successfully. Mar 17 18:27:11.541323 systemd[1]: Stopped iscsid.service. Mar 17 18:27:11.541333 kernel: audit: type=1131 audit(1742236031.408:90): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=iscsid comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:27:11.541343 systemd[1]: initrd-switch-root.service: Deactivated successfully. Mar 17 18:27:11.541353 systemd[1]: Stopped initrd-switch-root.service. Mar 17 18:27:11.541364 kernel: audit: type=1130 audit(1742236031.412:91): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=initrd-switch-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:27:11.541377 systemd[1]: systemd-journald.service: Scheduled restart job, restart counter is at 1. Mar 17 18:27:11.541387 systemd[1]: Created slice system-addon\x2dconfig.slice. Mar 17 18:27:11.541399 systemd[1]: Created slice system-addon\x2drun.slice. Mar 17 18:27:11.541409 systemd[1]: Created slice system-getty.slice. Mar 17 18:27:11.541420 systemd[1]: Created slice system-modprobe.slice. Mar 17 18:27:11.541431 systemd[1]: Created slice system-serial\x2dgetty.slice. Mar 17 18:27:11.541442 systemd[1]: Created slice system-system\x2dcloudinit.slice. Mar 17 18:27:11.541452 systemd[1]: Created slice system-systemd\x2dfsck.slice. Mar 17 18:27:11.541462 systemd[1]: Created slice user.slice. Mar 17 18:27:11.541472 systemd[1]: Started systemd-ask-password-console.path. Mar 17 18:27:11.541482 systemd[1]: Started systemd-ask-password-wall.path. Mar 17 18:27:11.541492 systemd[1]: Set up automount boot.automount. Mar 17 18:27:11.541502 systemd[1]: Set up automount proc-sys-fs-binfmt_misc.automount. Mar 17 18:27:11.541514 systemd[1]: Stopped target initrd-switch-root.target. Mar 17 18:27:11.541524 systemd[1]: Stopped target initrd-fs.target. Mar 17 18:27:11.541536 systemd[1]: Stopped target initrd-root-fs.target. Mar 17 18:27:11.541545 systemd[1]: Reached target integritysetup.target. Mar 17 18:27:11.541555 systemd[1]: Reached target remote-cryptsetup.target. Mar 17 18:27:11.541565 systemd[1]: Reached target remote-fs.target. Mar 17 18:27:11.541575 systemd[1]: Reached target slices.target. Mar 17 18:27:11.541585 systemd[1]: Reached target swap.target. Mar 17 18:27:11.541595 systemd[1]: Reached target torcx.target. Mar 17 18:27:11.541610 systemd[1]: Reached target veritysetup.target. Mar 17 18:27:11.541620 systemd[1]: Listening on systemd-coredump.socket. Mar 17 18:27:11.541630 systemd[1]: Listening on systemd-initctl.socket. Mar 17 18:27:11.541641 systemd[1]: Listening on systemd-networkd.socket. Mar 17 18:27:11.541650 systemd[1]: Listening on systemd-udevd-control.socket. Mar 17 18:27:11.541661 systemd[1]: Listening on systemd-udevd-kernel.socket. Mar 17 18:27:11.541671 systemd[1]: Listening on systemd-userdbd.socket. Mar 17 18:27:11.541680 systemd[1]: Mounting dev-hugepages.mount... Mar 17 18:27:11.541690 systemd[1]: Mounting dev-mqueue.mount... Mar 17 18:27:11.541701 systemd[1]: Mounting media.mount... Mar 17 18:27:11.541712 systemd[1]: Mounting sys-kernel-debug.mount... Mar 17 18:27:11.541723 systemd[1]: Mounting sys-kernel-tracing.mount... Mar 17 18:27:11.541732 systemd[1]: Mounting tmp.mount... Mar 17 18:27:11.541742 systemd[1]: Starting flatcar-tmpfiles.service... Mar 17 18:27:11.541758 systemd[1]: ignition-delete-config.service was skipped because no trigger condition checks were met. Mar 17 18:27:11.541771 systemd[1]: Starting kmod-static-nodes.service... Mar 17 18:27:11.541781 systemd[1]: Starting modprobe@configfs.service... Mar 17 18:27:11.541792 systemd[1]: Starting modprobe@dm_mod.service... Mar 17 18:27:11.541802 systemd[1]: Starting modprobe@drm.service... Mar 17 18:27:11.541814 systemd[1]: Starting modprobe@efi_pstore.service... Mar 17 18:27:11.541825 systemd[1]: Starting modprobe@fuse.service... Mar 17 18:27:11.541843 systemd[1]: Starting modprobe@loop.service... Mar 17 18:27:11.541855 systemd[1]: setup-nsswitch.service was skipped because of an unmet condition check (ConditionPathExists=!/etc/nsswitch.conf). Mar 17 18:27:11.541866 systemd[1]: systemd-fsck-root.service: Deactivated successfully. Mar 17 18:27:11.541876 systemd[1]: Stopped systemd-fsck-root.service. Mar 17 18:27:11.541886 systemd[1]: systemd-fsck-usr.service: Deactivated successfully. Mar 17 18:27:11.541896 systemd[1]: Stopped systemd-fsck-usr.service. Mar 17 18:27:11.541908 systemd[1]: Stopped systemd-journald.service. Mar 17 18:27:11.541918 kernel: fuse: init (API version 7.34) Mar 17 18:27:11.541928 systemd[1]: Starting systemd-journald.service... Mar 17 18:27:11.541938 systemd[1]: Starting systemd-modules-load.service... Mar 17 18:27:11.541949 systemd[1]: Starting systemd-network-generator.service... Mar 17 18:27:11.541959 systemd[1]: Starting systemd-remount-fs.service... Mar 17 18:27:11.541969 kernel: loop: module loaded Mar 17 18:27:11.541978 systemd[1]: Starting systemd-udev-trigger.service... Mar 17 18:27:11.541990 systemd[1]: verity-setup.service: Deactivated successfully. Mar 17 18:27:11.542000 systemd[1]: Stopped verity-setup.service. Mar 17 18:27:11.542612 systemd[1]: Mounted dev-hugepages.mount. Mar 17 18:27:11.542632 systemd[1]: Mounted dev-mqueue.mount. Mar 17 18:27:11.542643 systemd[1]: Mounted media.mount. Mar 17 18:27:11.542653 systemd[1]: Mounted sys-kernel-debug.mount. Mar 17 18:27:11.542664 systemd[1]: Mounted sys-kernel-tracing.mount. Mar 17 18:27:11.542674 systemd[1]: Mounted tmp.mount. Mar 17 18:27:11.542684 systemd[1]: Finished kmod-static-nodes.service. Mar 17 18:27:11.542694 systemd[1]: modprobe@configfs.service: Deactivated successfully. Mar 17 18:27:11.542704 systemd[1]: Finished modprobe@configfs.service. Mar 17 18:27:11.542718 systemd[1]: modprobe@dm_mod.service: Deactivated successfully. Mar 17 18:27:11.542730 systemd-journald[990]: Journal started Mar 17 18:27:11.542781 systemd-journald[990]: Runtime Journal (/run/log/journal/9cb6e0fc844144dc9302e14bdcff4a97) is 6.0M, max 48.7M, 42.6M free. Mar 17 18:27:09.601000 audit: MAC_POLICY_LOAD auid=4294967295 ses=4294967295 lsm=selinux res=1 Mar 17 18:27:09.687000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=1 Mar 17 18:27:09.687000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=1 Mar 17 18:27:09.687000 audit: BPF prog-id=10 op=LOAD Mar 17 18:27:09.687000 audit: BPF prog-id=10 op=UNLOAD Mar 17 18:27:09.687000 audit: BPF prog-id=11 op=LOAD Mar 17 18:27:09.687000 audit: BPF prog-id=11 op=UNLOAD Mar 17 18:27:09.735000 audit[932]: AVC avc: denied { associate } for pid=932 comm="torcx-generator" name="docker" dev="tmpfs" ino=2 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:tmpfs_t:s0 tclass=filesystem permissive=1 srawcon="system_u:object_r:container_file_t:s0:c1022,c1023" Mar 17 18:27:09.735000 audit[932]: SYSCALL arch=c00000b7 syscall=5 success=yes exit=0 a0=40001c58b2 a1=40000c8de0 a2=40000cf0c0 a3=32 items=0 ppid=915 pid=932 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="torcx-generator" exe="/usr/lib/systemd/system-generators/torcx-generator" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:27:09.735000 audit: PROCTITLE proctitle=2F7573722F6C69622F73797374656D642F73797374656D2D67656E657261746F72732F746F7263782D67656E657261746F72002F72756E2F73797374656D642F67656E657261746F72002F72756E2F73797374656D642F67656E657261746F722E6561726C79002F72756E2F73797374656D642F67656E657261746F722E6C61 Mar 17 18:27:09.736000 audit[932]: AVC avc: denied { associate } for pid=932 comm="torcx-generator" name="usr" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:tmpfs_t:s0 tclass=filesystem permissive=1 Mar 17 18:27:09.736000 audit[932]: SYSCALL arch=c00000b7 syscall=34 success=yes exit=0 a0=ffffffffffffff9c a1=40001c5989 a2=1ed a3=0 items=2 ppid=915 pid=932 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="torcx-generator" exe="/usr/lib/systemd/system-generators/torcx-generator" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:27:09.736000 audit: CWD cwd="/" Mar 17 18:27:09.736000 audit: PATH item=0 name=(null) inode=2 dev=00:1c mode=040755 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:unlabeled_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Mar 17 18:27:09.736000 audit: PATH item=1 name=(null) inode=3 dev=00:1c mode=040755 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:unlabeled_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Mar 17 18:27:09.736000 audit: PROCTITLE proctitle=2F7573722F6C69622F73797374656D642F73797374656D2D67656E657261746F72732F746F7263782D67656E657261746F72002F72756E2F73797374656D642F67656E657261746F72002F72756E2F73797374656D642F67656E657261746F722E6561726C79002F72756E2F73797374656D642F67656E657261746F722E6C61 Mar 17 18:27:11.397000 audit: BPF prog-id=12 op=LOAD Mar 17 18:27:11.397000 audit: BPF prog-id=3 op=UNLOAD Mar 17 18:27:11.398000 audit: BPF prog-id=13 op=LOAD Mar 17 18:27:11.398000 audit: BPF prog-id=14 op=LOAD Mar 17 18:27:11.398000 audit: BPF prog-id=4 op=UNLOAD Mar 17 18:27:11.398000 audit: BPF prog-id=5 op=UNLOAD Mar 17 18:27:11.400000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-journald comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:27:11.404000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=iscsiuio comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:27:11.408000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=iscsid comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:27:11.412000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=initrd-switch-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:27:11.412000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=initrd-switch-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:27:11.418000 audit: BPF prog-id=12 op=UNLOAD Mar 17 18:27:11.502000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-fsck-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:27:11.504000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-fsck-usr comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:27:11.506000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-journald comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:27:11.506000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-journald comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:27:11.507000 audit: BPF prog-id=15 op=LOAD Mar 17 18:27:11.507000 audit: BPF prog-id=16 op=LOAD Mar 17 18:27:11.507000 audit: BPF prog-id=17 op=LOAD Mar 17 18:27:11.507000 audit: BPF prog-id=13 op=UNLOAD Mar 17 18:27:11.507000 audit: BPF prog-id=14 op=UNLOAD Mar 17 18:27:11.528000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=verity-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:27:11.538000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kmod-static-nodes comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:27:11.539000 audit: CONFIG_CHANGE op=set audit_enabled=1 old=1 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 res=1 Mar 17 18:27:11.539000 audit[990]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=60 a0=6 a1=ffffef37b020 a2=4000 a3=1 items=0 ppid=1 pid=990 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="systemd-journal" exe="/usr/lib/systemd/systemd-journald" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:27:11.539000 audit: PROCTITLE proctitle="/usr/lib/systemd/systemd-journald" Mar 17 18:27:11.541000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@configfs comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:27:11.541000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@configfs comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:27:09.733053 /usr/lib/systemd/system-generators/torcx-generator[932]: time="2025-03-17T18:27:09Z" level=debug msg="common configuration parsed" base_dir=/var/lib/torcx/ conf_dir=/etc/torcx/ run_dir=/run/torcx/ store_paths="[/usr/share/torcx/store /usr/share/oem/torcx/store/3510.3.7 /usr/share/oem/torcx/store /var/lib/torcx/store/3510.3.7 /var/lib/torcx/store]" Mar 17 18:27:11.396540 systemd[1]: Queued start job for default target multi-user.target. Mar 17 18:27:09.734989 /usr/lib/systemd/system-generators/torcx-generator[932]: time="2025-03-17T18:27:09Z" level=debug msg="profile found" name=docker-1.12-no path=/usr/share/torcx/profiles/docker-1.12-no.json Mar 17 18:27:11.396551 systemd[1]: Unnecessary job was removed for dev-vda6.device. Mar 17 18:27:09.735009 /usr/lib/systemd/system-generators/torcx-generator[932]: time="2025-03-17T18:27:09Z" level=debug msg="profile found" name=vendor path=/usr/share/torcx/profiles/vendor.json Mar 17 18:27:11.400607 systemd[1]: systemd-journald.service: Deactivated successfully. Mar 17 18:27:09.735040 /usr/lib/systemd/system-generators/torcx-generator[932]: time="2025-03-17T18:27:09Z" level=info msg="no vendor profile selected by /etc/flatcar/docker-1.12" Mar 17 18:27:11.544283 systemd[1]: Finished modprobe@dm_mod.service. Mar 17 18:27:09.735049 /usr/lib/systemd/system-generators/torcx-generator[932]: time="2025-03-17T18:27:09Z" level=debug msg="skipped missing lower profile" missing profile=oem Mar 17 18:27:09.735079 /usr/lib/systemd/system-generators/torcx-generator[932]: time="2025-03-17T18:27:09Z" level=warning msg="no next profile: unable to read profile file: open /etc/torcx/next-profile: no such file or directory" Mar 17 18:27:11.544000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@dm_mod comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:27:11.544000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@dm_mod comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:27:09.735091 /usr/lib/systemd/system-generators/torcx-generator[932]: time="2025-03-17T18:27:09Z" level=debug msg="apply configuration parsed" lower profiles (vendor/oem)="[vendor]" upper profile (user)= Mar 17 18:27:09.735282 /usr/lib/systemd/system-generators/torcx-generator[932]: time="2025-03-17T18:27:09Z" level=debug msg="mounted tmpfs" target=/run/torcx/unpack Mar 17 18:27:09.735315 /usr/lib/systemd/system-generators/torcx-generator[932]: time="2025-03-17T18:27:09Z" level=debug msg="profile found" name=docker-1.12-no path=/usr/share/torcx/profiles/docker-1.12-no.json Mar 17 18:27:09.735326 /usr/lib/systemd/system-generators/torcx-generator[932]: time="2025-03-17T18:27:09Z" level=debug msg="profile found" name=vendor path=/usr/share/torcx/profiles/vendor.json Mar 17 18:27:09.735842 /usr/lib/systemd/system-generators/torcx-generator[932]: time="2025-03-17T18:27:09Z" level=debug msg="new archive/reference added to cache" format=tgz name=docker path="/usr/share/torcx/store/docker:20.10.torcx.tgz" reference=20.10 Mar 17 18:27:09.735879 /usr/lib/systemd/system-generators/torcx-generator[932]: time="2025-03-17T18:27:09Z" level=debug msg="new archive/reference added to cache" format=tgz name=docker path="/usr/share/torcx/store/docker:com.coreos.cl.torcx.tgz" reference=com.coreos.cl Mar 17 18:27:09.735898 /usr/lib/systemd/system-generators/torcx-generator[932]: time="2025-03-17T18:27:09Z" level=info msg="store skipped" err="open /usr/share/oem/torcx/store/3510.3.7: no such file or directory" path=/usr/share/oem/torcx/store/3510.3.7 Mar 17 18:27:09.735912 /usr/lib/systemd/system-generators/torcx-generator[932]: time="2025-03-17T18:27:09Z" level=info msg="store skipped" err="open /usr/share/oem/torcx/store: no such file or directory" path=/usr/share/oem/torcx/store Mar 17 18:27:09.735929 /usr/lib/systemd/system-generators/torcx-generator[932]: time="2025-03-17T18:27:09Z" level=info msg="store skipped" err="open /var/lib/torcx/store/3510.3.7: no such file or directory" path=/var/lib/torcx/store/3510.3.7 Mar 17 18:27:09.735942 /usr/lib/systemd/system-generators/torcx-generator[932]: time="2025-03-17T18:27:09Z" level=info msg="store skipped" err="open /var/lib/torcx/store: no such file or directory" path=/var/lib/torcx/store Mar 17 18:27:11.158215 /usr/lib/systemd/system-generators/torcx-generator[932]: time="2025-03-17T18:27:11Z" level=debug msg="image unpacked" image=docker path=/run/torcx/unpack/docker reference=com.coreos.cl Mar 17 18:27:11.158464 /usr/lib/systemd/system-generators/torcx-generator[932]: time="2025-03-17T18:27:11Z" level=debug msg="binaries propagated" assets="[/bin/containerd /bin/containerd-shim /bin/ctr /bin/docker /bin/docker-containerd /bin/docker-containerd-shim /bin/docker-init /bin/docker-proxy /bin/docker-runc /bin/dockerd /bin/runc /bin/tini]" image=docker path=/run/torcx/unpack/docker reference=com.coreos.cl Mar 17 18:27:11.158564 /usr/lib/systemd/system-generators/torcx-generator[932]: time="2025-03-17T18:27:11Z" level=debug msg="networkd units propagated" assets="[/lib/systemd/network/50-docker.network /lib/systemd/network/90-docker-veth.network]" image=docker path=/run/torcx/unpack/docker reference=com.coreos.cl Mar 17 18:27:11.158719 /usr/lib/systemd/system-generators/torcx-generator[932]: time="2025-03-17T18:27:11Z" level=debug msg="systemd units propagated" assets="[/lib/systemd/system/containerd.service /lib/systemd/system/docker.service /lib/systemd/system/docker.socket /lib/systemd/system/sockets.target.wants /lib/systemd/system/multi-user.target.wants]" image=docker path=/run/torcx/unpack/docker reference=com.coreos.cl Mar 17 18:27:11.158781 /usr/lib/systemd/system-generators/torcx-generator[932]: time="2025-03-17T18:27:11Z" level=debug msg="profile applied" sealed profile=/run/torcx/profile.json upper profile= Mar 17 18:27:11.158860 /usr/lib/systemd/system-generators/torcx-generator[932]: time="2025-03-17T18:27:11Z" level=debug msg="system state sealed" content="[TORCX_LOWER_PROFILES=\"vendor\" TORCX_UPPER_PROFILE=\"\" TORCX_PROFILE_PATH=\"/run/torcx/profile.json\" TORCX_BINDIR=\"/run/torcx/bin\" TORCX_UNPACKDIR=\"/run/torcx/unpack\"]" path=/run/metadata/torcx Mar 17 18:27:11.544000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-journald comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:27:11.545851 systemd[1]: Started systemd-journald.service. Mar 17 18:27:11.546337 systemd[1]: modprobe@drm.service: Deactivated successfully. Mar 17 18:27:11.546501 systemd[1]: Finished modprobe@drm.service. Mar 17 18:27:11.547000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@drm comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:27:11.547000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@drm comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:27:11.547596 systemd[1]: modprobe@efi_pstore.service: Deactivated successfully. Mar 17 18:27:11.547790 systemd[1]: Finished modprobe@efi_pstore.service. Mar 17 18:27:11.548000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@efi_pstore comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:27:11.548000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@efi_pstore comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:27:11.548927 systemd[1]: modprobe@fuse.service: Deactivated successfully. Mar 17 18:27:11.549082 systemd[1]: Finished modprobe@fuse.service. Mar 17 18:27:11.548000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@fuse comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:27:11.549000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@fuse comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:27:11.550170 systemd[1]: modprobe@loop.service: Deactivated successfully. Mar 17 18:27:11.550316 systemd[1]: Finished modprobe@loop.service. Mar 17 18:27:11.550000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@loop comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:27:11.550000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@loop comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:27:11.552000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-modules-load comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:27:11.551709 systemd[1]: Finished systemd-modules-load.service. Mar 17 18:27:11.552893 systemd[1]: Finished systemd-network-generator.service. Mar 17 18:27:11.552000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-network-generator comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:27:11.554060 systemd[1]: Finished systemd-remount-fs.service. Mar 17 18:27:11.554000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-remount-fs comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:27:11.555382 systemd[1]: Reached target network-pre.target. Mar 17 18:27:11.557325 systemd[1]: Mounting sys-fs-fuse-connections.mount... Mar 17 18:27:11.559313 systemd[1]: Mounting sys-kernel-config.mount... Mar 17 18:27:11.560035 systemd[1]: remount-root.service was skipped because of an unmet condition check (ConditionPathIsReadWrite=!/). Mar 17 18:27:11.561497 systemd[1]: Starting systemd-hwdb-update.service... Mar 17 18:27:11.563412 systemd[1]: Starting systemd-journal-flush.service... Mar 17 18:27:11.564378 systemd[1]: systemd-pstore.service was skipped because of an unmet condition check (ConditionDirectoryNotEmpty=/sys/fs/pstore). Mar 17 18:27:11.565504 systemd[1]: Starting systemd-random-seed.service... Mar 17 18:27:11.566436 systemd[1]: systemd-repart.service was skipped because no trigger condition checks were met. Mar 17 18:27:11.567506 systemd[1]: Starting systemd-sysctl.service... Mar 17 18:27:11.569991 systemd-journald[990]: Time spent on flushing to /var/log/journal/9cb6e0fc844144dc9302e14bdcff4a97 is 12.945ms for 981 entries. Mar 17 18:27:11.569991 systemd-journald[990]: System Journal (/var/log/journal/9cb6e0fc844144dc9302e14bdcff4a97) is 8.0M, max 195.6M, 187.6M free. Mar 17 18:27:11.600793 systemd-journald[990]: Received client request to flush runtime journal. Mar 17 18:27:11.571000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=flatcar-tmpfiles comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:27:11.578000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-random-seed comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:27:11.580000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-udev-trigger comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:27:11.587000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-sysctl comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:27:11.599000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-sysusers comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:27:11.570729 systemd[1]: Finished flatcar-tmpfiles.service. Mar 17 18:27:11.571977 systemd[1]: Mounted sys-fs-fuse-connections.mount. Mar 17 18:27:11.602115 udevadm[1033]: systemd-udev-settle.service is deprecated. Please fix lvm2-activation.service, lvm2-activation-early.service not to pull it in. Mar 17 18:27:11.573066 systemd[1]: Mounted sys-kernel-config.mount. Mar 17 18:27:11.576150 systemd[1]: Starting systemd-sysusers.service... Mar 17 18:27:11.577248 systemd[1]: Finished systemd-random-seed.service. Mar 17 18:27:11.580038 systemd[1]: Finished systemd-udev-trigger.service. Mar 17 18:27:11.581003 systemd[1]: Reached target first-boot-complete.target. Mar 17 18:27:11.582928 systemd[1]: Starting systemd-udev-settle.service... Mar 17 18:27:11.586730 systemd[1]: Finished systemd-sysctl.service. Mar 17 18:27:11.599606 systemd[1]: Finished systemd-sysusers.service. Mar 17 18:27:11.602000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-journal-flush comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:27:11.601659 systemd[1]: Finished systemd-journal-flush.service. Mar 17 18:27:11.912330 systemd[1]: Finished systemd-hwdb-update.service. Mar 17 18:27:11.912000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-hwdb-update comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:27:11.913000 audit: BPF prog-id=18 op=LOAD Mar 17 18:27:11.913000 audit: BPF prog-id=19 op=LOAD Mar 17 18:27:11.913000 audit: BPF prog-id=7 op=UNLOAD Mar 17 18:27:11.913000 audit: BPF prog-id=8 op=UNLOAD Mar 17 18:27:11.914603 systemd[1]: Starting systemd-udevd.service... Mar 17 18:27:11.934871 systemd-udevd[1035]: Using default interface naming scheme 'v252'. Mar 17 18:27:11.946521 systemd[1]: Started systemd-udevd.service. Mar 17 18:27:11.946000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-udevd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:27:11.947000 audit: BPF prog-id=20 op=LOAD Mar 17 18:27:11.948816 systemd[1]: Starting systemd-networkd.service... Mar 17 18:27:11.957000 audit: BPF prog-id=21 op=LOAD Mar 17 18:27:11.957000 audit: BPF prog-id=22 op=LOAD Mar 17 18:27:11.957000 audit: BPF prog-id=23 op=LOAD Mar 17 18:27:11.958727 systemd[1]: Starting systemd-userdbd.service... Mar 17 18:27:11.979535 systemd[1]: Condition check resulted in dev-ttyAMA0.device being skipped. Mar 17 18:27:11.994227 systemd[1]: Started systemd-userdbd.service. Mar 17 18:27:11.994000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-userdbd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:27:11.996060 systemd[1]: Found device dev-disk-by\x2dlabel-OEM.device. Mar 17 18:27:12.032641 systemd[1]: Finished systemd-udev-settle.service. Mar 17 18:27:12.032000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-udev-settle comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:27:12.034646 systemd[1]: Starting lvm2-activation-early.service... Mar 17 18:27:12.052819 lvm[1068]: WARNING: Failed to connect to lvmetad. Falling back to device scanning. Mar 17 18:27:12.052808 systemd-networkd[1043]: lo: Link UP Mar 17 18:27:12.052812 systemd-networkd[1043]: lo: Gained carrier Mar 17 18:27:12.053148 systemd-networkd[1043]: Enumeration completed Mar 17 18:27:12.053246 systemd-networkd[1043]: eth0: Configuring with /usr/lib/systemd/network/zz-default.network. Mar 17 18:27:12.053279 systemd[1]: Started systemd-networkd.service. Mar 17 18:27:12.053000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-networkd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:27:12.055939 systemd-networkd[1043]: eth0: Link UP Mar 17 18:27:12.055949 systemd-networkd[1043]: eth0: Gained carrier Mar 17 18:27:12.076963 systemd-networkd[1043]: eth0: DHCPv4 address 10.0.0.111/16, gateway 10.0.0.1 acquired from 10.0.0.1 Mar 17 18:27:12.080679 systemd[1]: Finished lvm2-activation-early.service. Mar 17 18:27:12.080000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=lvm2-activation-early comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:27:12.081678 systemd[1]: Reached target cryptsetup.target. Mar 17 18:27:12.083556 systemd[1]: Starting lvm2-activation.service... Mar 17 18:27:12.087106 lvm[1069]: WARNING: Failed to connect to lvmetad. Falling back to device scanning. Mar 17 18:27:12.113643 systemd[1]: Finished lvm2-activation.service. Mar 17 18:27:12.113000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=lvm2-activation comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:27:12.114586 systemd[1]: Reached target local-fs-pre.target. Mar 17 18:27:12.115438 systemd[1]: var-lib-machines.mount was skipped because of an unmet condition check (ConditionPathExists=/var/lib/machines.raw). Mar 17 18:27:12.115471 systemd[1]: Reached target local-fs.target. Mar 17 18:27:12.116247 systemd[1]: Reached target machines.target. Mar 17 18:27:12.118038 systemd[1]: Starting ldconfig.service... Mar 17 18:27:12.119051 systemd[1]: systemd-binfmt.service was skipped because no trigger condition checks were met. Mar 17 18:27:12.119130 systemd[1]: systemd-boot-system-token.service was skipped because of an unmet condition check (ConditionPathExists=/sys/firmware/efi/efivars/LoaderFeatures-4a67b082-0a4c-41cf-b6c7-440b29bb8c4f). Mar 17 18:27:12.121067 systemd[1]: Starting systemd-boot-update.service... Mar 17 18:27:12.123330 systemd[1]: Starting systemd-fsck@dev-disk-by\x2dlabel-OEM.service... Mar 17 18:27:12.125716 systemd[1]: Starting systemd-machine-id-commit.service... Mar 17 18:27:12.128216 systemd[1]: Starting systemd-sysext.service... Mar 17 18:27:12.129308 systemd[1]: boot.automount: Got automount request for /boot, triggered by 1071 (bootctl) Mar 17 18:27:12.132535 systemd[1]: Starting systemd-fsck@dev-disk-by\x2dlabel-EFI\x2dSYSTEM.service... Mar 17 18:27:12.137204 systemd[1]: Finished systemd-fsck@dev-disk-by\x2dlabel-OEM.service. Mar 17 18:27:12.137000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-fsck@dev-disk-by\x2dlabel-OEM comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:27:12.145575 systemd[1]: Unmounting usr-share-oem.mount... Mar 17 18:27:12.150788 systemd[1]: usr-share-oem.mount: Deactivated successfully. Mar 17 18:27:12.151060 systemd[1]: Unmounted usr-share-oem.mount. Mar 17 18:27:12.160859 kernel: loop0: detected capacity change from 0 to 189592 Mar 17 18:27:12.196062 systemd[1]: Finished systemd-machine-id-commit.service. Mar 17 18:27:12.196000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-machine-id-commit comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:27:12.202859 kernel: squashfs: version 4.0 (2009/01/31) Phillip Lougher Mar 17 18:27:12.206091 systemd-fsck[1081]: fsck.fat 4.2 (2021-01-31) Mar 17 18:27:12.206091 systemd-fsck[1081]: /dev/vda1: 236 files, 117179/258078 clusters Mar 17 18:27:12.208261 systemd[1]: Finished systemd-fsck@dev-disk-by\x2dlabel-EFI\x2dSYSTEM.service. Mar 17 18:27:12.208000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-fsck@dev-disk-by\x2dlabel-EFI\x2dSYSTEM comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:27:12.223869 kernel: loop1: detected capacity change from 0 to 189592 Mar 17 18:27:12.228423 (sd-sysext)[1085]: Using extensions 'kubernetes'. Mar 17 18:27:12.228996 (sd-sysext)[1085]: Merged extensions into '/usr'. Mar 17 18:27:12.247141 systemd[1]: ignition-delete-config.service was skipped because no trigger condition checks were met. Mar 17 18:27:12.248623 systemd[1]: Starting modprobe@dm_mod.service... Mar 17 18:27:12.250618 systemd[1]: Starting modprobe@efi_pstore.service... Mar 17 18:27:12.252792 systemd[1]: Starting modprobe@loop.service... Mar 17 18:27:12.253633 systemd[1]: systemd-binfmt.service was skipped because no trigger condition checks were met. Mar 17 18:27:12.253803 systemd[1]: systemd-boot-system-token.service was skipped because of an unmet condition check (ConditionPathExists=/sys/firmware/efi/efivars/LoaderFeatures-4a67b082-0a4c-41cf-b6c7-440b29bb8c4f). Mar 17 18:27:12.254757 systemd[1]: modprobe@dm_mod.service: Deactivated successfully. Mar 17 18:27:12.254938 systemd[1]: Finished modprobe@dm_mod.service. Mar 17 18:27:12.254000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@dm_mod comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:27:12.255000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@dm_mod comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:27:12.256202 systemd[1]: modprobe@efi_pstore.service: Deactivated successfully. Mar 17 18:27:12.256374 systemd[1]: Finished modprobe@efi_pstore.service. Mar 17 18:27:12.256000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@efi_pstore comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:27:12.256000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@efi_pstore comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:27:12.257861 systemd[1]: modprobe@loop.service: Deactivated successfully. Mar 17 18:27:12.257976 systemd[1]: Finished modprobe@loop.service. Mar 17 18:27:12.258000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@loop comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:27:12.258000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@loop comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:27:12.259494 systemd[1]: systemd-pstore.service was skipped because of an unmet condition check (ConditionDirectoryNotEmpty=/sys/fs/pstore). Mar 17 18:27:12.259659 systemd[1]: systemd-repart.service was skipped because no trigger condition checks were met. Mar 17 18:27:12.294195 ldconfig[1070]: /sbin/ldconfig: /lib/ld.so.conf is not an ELF file - it has the wrong magic bytes at the start. Mar 17 18:27:12.297363 systemd[1]: Finished ldconfig.service. Mar 17 18:27:12.297000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=ldconfig comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:27:12.530167 systemd[1]: etc-machine\x2did.mount: Deactivated successfully. Mar 17 18:27:12.531971 systemd[1]: Mounting boot.mount... Mar 17 18:27:12.534050 systemd[1]: Mounting usr-share-oem.mount... Mar 17 18:27:12.540107 systemd[1]: Mounted boot.mount. Mar 17 18:27:12.541030 systemd[1]: Mounted usr-share-oem.mount. Mar 17 18:27:12.543042 systemd[1]: Finished systemd-sysext.service. Mar 17 18:27:12.543000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-sysext comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:27:12.545143 systemd[1]: Starting ensure-sysext.service... Mar 17 18:27:12.547029 systemd[1]: Starting systemd-tmpfiles-setup.service... Mar 17 18:27:12.549000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-boot-update comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:27:12.549969 systemd[1]: Finished systemd-boot-update.service. Mar 17 18:27:12.552358 systemd[1]: Reloading. Mar 17 18:27:12.557525 systemd-tmpfiles[1093]: /usr/lib/tmpfiles.d/legacy.conf:13: Duplicate line for path "/run/lock", ignoring. Mar 17 18:27:12.559079 systemd-tmpfiles[1093]: /usr/lib/tmpfiles.d/provision.conf:20: Duplicate line for path "/root", ignoring. Mar 17 18:27:12.561538 systemd-tmpfiles[1093]: /usr/lib/tmpfiles.d/systemd.conf:29: Duplicate line for path "/var/lib/systemd", ignoring. Mar 17 18:27:12.594939 /usr/lib/systemd/system-generators/torcx-generator[1113]: time="2025-03-17T18:27:12Z" level=debug msg="common configuration parsed" base_dir=/var/lib/torcx/ conf_dir=/etc/torcx/ run_dir=/run/torcx/ store_paths="[/usr/share/torcx/store /usr/share/oem/torcx/store/3510.3.7 /usr/share/oem/torcx/store /var/lib/torcx/store/3510.3.7 /var/lib/torcx/store]" Mar 17 18:27:12.595214 /usr/lib/systemd/system-generators/torcx-generator[1113]: time="2025-03-17T18:27:12Z" level=info msg="torcx already run" Mar 17 18:27:12.648621 systemd[1]: /usr/lib/systemd/system/locksmithd.service:8: Unit uses CPUShares=; please use CPUWeight= instead. Support for CPUShares= will be removed soon. Mar 17 18:27:12.648640 systemd[1]: /usr/lib/systemd/system/locksmithd.service:9: Unit uses MemoryLimit=; please use MemoryMax= instead. Support for MemoryLimit= will be removed soon. Mar 17 18:27:12.663907 systemd[1]: /run/systemd/system/docker.socket:8: ListenStream= references a path below legacy directory /var/run/, updating /var/run/docker.sock → /run/docker.sock; please update the unit file accordingly. Mar 17 18:27:12.703000 audit: BPF prog-id=24 op=LOAD Mar 17 18:27:12.703000 audit: BPF prog-id=25 op=LOAD Mar 17 18:27:12.703000 audit: BPF prog-id=18 op=UNLOAD Mar 17 18:27:12.703000 audit: BPF prog-id=19 op=UNLOAD Mar 17 18:27:12.704000 audit: BPF prog-id=26 op=LOAD Mar 17 18:27:12.704000 audit: BPF prog-id=21 op=UNLOAD Mar 17 18:27:12.704000 audit: BPF prog-id=27 op=LOAD Mar 17 18:27:12.704000 audit: BPF prog-id=28 op=LOAD Mar 17 18:27:12.704000 audit: BPF prog-id=22 op=UNLOAD Mar 17 18:27:12.704000 audit: BPF prog-id=23 op=UNLOAD Mar 17 18:27:12.706000 audit: BPF prog-id=29 op=LOAD Mar 17 18:27:12.706000 audit: BPF prog-id=15 op=UNLOAD Mar 17 18:27:12.706000 audit: BPF prog-id=30 op=LOAD Mar 17 18:27:12.706000 audit: BPF prog-id=31 op=LOAD Mar 17 18:27:12.706000 audit: BPF prog-id=16 op=UNLOAD Mar 17 18:27:12.706000 audit: BPF prog-id=17 op=UNLOAD Mar 17 18:27:12.707000 audit: BPF prog-id=32 op=LOAD Mar 17 18:27:12.707000 audit: BPF prog-id=20 op=UNLOAD Mar 17 18:27:12.710380 systemd[1]: Finished systemd-tmpfiles-setup.service. Mar 17 18:27:12.711000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-tmpfiles-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:27:12.714988 systemd[1]: Starting audit-rules.service... Mar 17 18:27:12.716790 systemd[1]: Starting clean-ca-certificates.service... Mar 17 18:27:12.722000 audit: BPF prog-id=33 op=LOAD Mar 17 18:27:12.719380 systemd[1]: Starting systemd-journal-catalog-update.service... Mar 17 18:27:12.724068 systemd[1]: Starting systemd-resolved.service... Mar 17 18:27:12.725000 audit: BPF prog-id=34 op=LOAD Mar 17 18:27:12.726726 systemd[1]: Starting systemd-timesyncd.service... Mar 17 18:27:12.729113 systemd[1]: Starting systemd-update-utmp.service... Mar 17 18:27:12.732988 systemd[1]: Finished clean-ca-certificates.service. Mar 17 18:27:12.732000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=clean-ca-certificates comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:27:12.735000 audit[1162]: SYSTEM_BOOT pid=1162 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg=' comm="systemd-update-utmp" exe="/usr/lib/systemd/systemd-update-utmp" hostname=? addr=? terminal=? res=success' Mar 17 18:27:12.738622 systemd[1]: ignition-delete-config.service was skipped because no trigger condition checks were met. Mar 17 18:27:12.740010 systemd[1]: Starting modprobe@dm_mod.service... Mar 17 18:27:12.741724 systemd[1]: Starting modprobe@efi_pstore.service... Mar 17 18:27:12.743642 systemd[1]: Starting modprobe@loop.service... Mar 17 18:27:12.744783 systemd[1]: systemd-binfmt.service was skipped because no trigger condition checks were met. Mar 17 18:27:12.744946 systemd[1]: systemd-boot-system-token.service was skipped because of an unmet condition check (ConditionPathExists=/sys/firmware/efi/efivars/LoaderFeatures-4a67b082-0a4c-41cf-b6c7-440b29bb8c4f). Mar 17 18:27:12.745041 systemd[1]: update-ca-certificates.service was skipped because of an unmet condition check (ConditionPathIsSymbolicLink=!/etc/ssl/certs/ca-certificates.crt). Mar 17 18:27:12.745874 systemd[1]: Finished systemd-update-utmp.service. Mar 17 18:27:12.746000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-update-utmp comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:27:12.747417 systemd[1]: modprobe@dm_mod.service: Deactivated successfully. Mar 17 18:27:12.747530 systemd[1]: Finished modprobe@dm_mod.service. Mar 17 18:27:12.747000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@dm_mod comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:27:12.747000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@dm_mod comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:27:12.748910 systemd[1]: modprobe@efi_pstore.service: Deactivated successfully. Mar 17 18:27:12.749013 systemd[1]: Finished modprobe@efi_pstore.service. Mar 17 18:27:12.749000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@efi_pstore comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:27:12.749000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@efi_pstore comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:27:12.750322 systemd[1]: Finished systemd-journal-catalog-update.service. Mar 17 18:27:12.750000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-journal-catalog-update comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:27:12.751791 systemd[1]: modprobe@loop.service: Deactivated successfully. Mar 17 18:27:12.751914 systemd[1]: Finished modprobe@loop.service. Mar 17 18:27:12.751000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@loop comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:27:12.751000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@loop comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:27:12.754886 systemd[1]: ignition-delete-config.service was skipped because no trigger condition checks were met. Mar 17 18:27:12.756075 systemd[1]: Starting modprobe@dm_mod.service... Mar 17 18:27:12.757914 systemd[1]: Starting modprobe@efi_pstore.service... Mar 17 18:27:12.759825 systemd[1]: Starting modprobe@loop.service... Mar 17 18:27:12.760584 systemd[1]: systemd-binfmt.service was skipped because no trigger condition checks were met. Mar 17 18:27:12.760716 systemd[1]: systemd-boot-system-token.service was skipped because of an unmet condition check (ConditionPathExists=/sys/firmware/efi/efivars/LoaderFeatures-4a67b082-0a4c-41cf-b6c7-440b29bb8c4f). Mar 17 18:27:12.762117 systemd[1]: Starting systemd-update-done.service... Mar 17 18:27:12.761000 audit: CONFIG_CHANGE auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op=add_rule key=(null) list=5 res=1 Mar 17 18:27:12.761000 audit[1176]: SYSCALL arch=c00000b7 syscall=206 success=yes exit=1056 a0=3 a1=ffffe1646d90 a2=420 a3=0 items=0 ppid=1151 pid=1176 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auditctl" exe="/usr/sbin/auditctl" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:27:12.761000 audit: PROCTITLE proctitle=2F7362696E2F617564697463746C002D52002F6574632F61756469742F61756469742E72756C6573 Mar 17 18:27:12.762896 augenrules[1176]: No rules Mar 17 18:27:12.762925 systemd[1]: update-ca-certificates.service was skipped because of an unmet condition check (ConditionPathIsSymbolicLink=!/etc/ssl/certs/ca-certificates.crt). Mar 17 18:27:12.763808 systemd[1]: modprobe@efi_pstore.service: Deactivated successfully. Mar 17 18:27:12.763942 systemd[1]: Finished modprobe@efi_pstore.service. Mar 17 18:27:12.765190 systemd[1]: Finished audit-rules.service. Mar 17 18:27:12.766258 systemd[1]: modprobe@loop.service: Deactivated successfully. Mar 17 18:27:12.766364 systemd[1]: Finished modprobe@loop.service. Mar 17 18:27:12.767648 systemd[1]: modprobe@dm_mod.service: Deactivated successfully. Mar 17 18:27:12.767767 systemd[1]: Finished modprobe@dm_mod.service. Mar 17 18:27:12.768939 systemd[1]: systemd-pstore.service was skipped because of an unmet condition check (ConditionDirectoryNotEmpty=/sys/fs/pstore). Mar 17 18:27:12.769032 systemd[1]: systemd-repart.service was skipped because no trigger condition checks were met. Mar 17 18:27:12.771297 systemd[1]: ignition-delete-config.service was skipped because no trigger condition checks were met. Mar 17 18:27:12.772499 systemd[1]: Starting modprobe@dm_mod.service... Mar 17 18:27:12.774361 systemd[1]: Starting modprobe@drm.service... Mar 17 18:27:12.776208 systemd[1]: Starting modprobe@efi_pstore.service... Mar 17 18:27:12.778073 systemd[1]: Starting modprobe@loop.service... Mar 17 18:27:12.778902 systemd[1]: systemd-binfmt.service was skipped because no trigger condition checks were met. Mar 17 18:27:12.779033 systemd[1]: systemd-boot-system-token.service was skipped because of an unmet condition check (ConditionPathExists=/sys/firmware/efi/efivars/LoaderFeatures-4a67b082-0a4c-41cf-b6c7-440b29bb8c4f). Mar 17 18:27:12.780200 systemd[1]: Starting systemd-networkd-wait-online.service... Mar 17 18:27:12.781208 systemd[1]: update-ca-certificates.service was skipped because of an unmet condition check (ConditionPathIsSymbolicLink=!/etc/ssl/certs/ca-certificates.crt). Mar 17 18:27:12.782176 systemd[1]: Finished systemd-update-done.service. Mar 17 18:27:12.783519 systemd[1]: modprobe@dm_mod.service: Deactivated successfully. Mar 17 18:27:12.783643 systemd[1]: Finished modprobe@dm_mod.service. Mar 17 18:27:12.784815 systemd[1]: modprobe@drm.service: Deactivated successfully. Mar 17 18:27:12.784947 systemd[1]: Finished modprobe@drm.service. Mar 17 18:27:12.786065 systemd[1]: modprobe@efi_pstore.service: Deactivated successfully. Mar 17 18:27:12.786172 systemd[1]: Finished modprobe@efi_pstore.service. Mar 17 18:27:12.787423 systemd[1]: modprobe@loop.service: Deactivated successfully. Mar 17 18:27:12.787527 systemd[1]: Finished modprobe@loop.service. Mar 17 18:27:12.788813 systemd[1]: systemd-pstore.service was skipped because of an unmet condition check (ConditionDirectoryNotEmpty=/sys/fs/pstore). Mar 17 18:27:12.788976 systemd[1]: systemd-repart.service was skipped because no trigger condition checks were met. Mar 17 18:27:12.789865 systemd[1]: Finished ensure-sysext.service. Mar 17 18:27:12.793283 systemd-resolved[1155]: Positive Trust Anchors: Mar 17 18:27:12.793294 systemd-resolved[1155]: . IN DS 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d Mar 17 18:27:12.793321 systemd-resolved[1155]: Negative trust anchors: home.arpa 10.in-addr.arpa 16.172.in-addr.arpa 17.172.in-addr.arpa 18.172.in-addr.arpa 19.172.in-addr.arpa 20.172.in-addr.arpa 21.172.in-addr.arpa 22.172.in-addr.arpa 23.172.in-addr.arpa 24.172.in-addr.arpa 25.172.in-addr.arpa 26.172.in-addr.arpa 27.172.in-addr.arpa 28.172.in-addr.arpa 29.172.in-addr.arpa 30.172.in-addr.arpa 31.172.in-addr.arpa 168.192.in-addr.arpa d.f.ip6.arpa corp home internal intranet lan local private test Mar 17 18:27:12.803554 systemd-resolved[1155]: Defaulting to hostname 'linux'. Mar 17 18:27:12.804634 systemd[1]: Started systemd-timesyncd.service. Mar 17 18:27:12.805346 systemd-timesyncd[1156]: Contacted time server 10.0.0.1:123 (10.0.0.1). Mar 17 18:27:12.805401 systemd-timesyncd[1156]: Initial clock synchronization to Mon 2025-03-17 18:27:12.970055 UTC. Mar 17 18:27:12.805858 systemd[1]: Started systemd-resolved.service. Mar 17 18:27:12.806721 systemd[1]: Reached target network.target. Mar 17 18:27:12.807504 systemd[1]: Reached target nss-lookup.target. Mar 17 18:27:12.808327 systemd[1]: Reached target sysinit.target. Mar 17 18:27:12.809209 systemd[1]: Started motdgen.path. Mar 17 18:27:12.809924 systemd[1]: Started user-cloudinit@var-lib-flatcar\x2dinstall-user_data.path. Mar 17 18:27:12.810961 systemd[1]: Started systemd-tmpfiles-clean.timer. Mar 17 18:27:12.811755 systemd[1]: update-engine-stub.timer was skipped because of an unmet condition check (ConditionPathExists=/usr/.noupdate). Mar 17 18:27:12.811786 systemd[1]: Reached target paths.target. Mar 17 18:27:12.812572 systemd[1]: Reached target time-set.target. Mar 17 18:27:12.813536 systemd[1]: Started logrotate.timer. Mar 17 18:27:12.814376 systemd[1]: Started mdadm.timer. Mar 17 18:27:12.815048 systemd[1]: Reached target timers.target. Mar 17 18:27:12.816083 systemd[1]: Listening on dbus.socket. Mar 17 18:27:12.817692 systemd[1]: Starting docker.socket... Mar 17 18:27:12.820731 systemd[1]: Listening on sshd.socket. Mar 17 18:27:12.821595 systemd[1]: systemd-pcrphase-sysinit.service was skipped because of an unmet condition check (ConditionPathExists=/sys/firmware/efi/efivars/StubPcrKernelImage-4a67b082-0a4c-41cf-b6c7-440b29bb8c4f). Mar 17 18:27:12.822027 systemd[1]: Listening on docker.socket. Mar 17 18:27:12.822823 systemd[1]: Reached target sockets.target. Mar 17 18:27:12.823572 systemd[1]: Reached target basic.target. Mar 17 18:27:12.824405 systemd[1]: addon-config@usr-share-oem.service was skipped because no trigger condition checks were met. Mar 17 18:27:12.824438 systemd[1]: addon-run@usr-share-oem.service was skipped because no trigger condition checks were met. Mar 17 18:27:12.825443 systemd[1]: Starting containerd.service... Mar 17 18:27:12.827114 systemd[1]: Starting dbus.service... Mar 17 18:27:12.828666 systemd[1]: Starting enable-oem-cloudinit.service... Mar 17 18:27:12.830631 systemd[1]: Starting extend-filesystems.service... Mar 17 18:27:12.831535 systemd[1]: flatcar-setup-environment.service was skipped because of an unmet condition check (ConditionPathExists=/usr/share/oem/bin/flatcar-setup-environment). Mar 17 18:27:12.832907 systemd[1]: Starting motdgen.service... Mar 17 18:27:12.835860 jq[1193]: false Mar 17 18:27:12.837327 systemd[1]: Starting prepare-helm.service... Mar 17 18:27:12.839074 systemd[1]: Starting ssh-key-proc-cmdline.service... Mar 17 18:27:12.841357 systemd[1]: Starting sshd-keygen.service... Mar 17 18:27:12.844535 systemd[1]: Starting systemd-logind.service... Mar 17 18:27:12.845298 systemd[1]: systemd-pcrphase.service was skipped because of an unmet condition check (ConditionPathExists=/sys/firmware/efi/efivars/StubPcrKernelImage-4a67b082-0a4c-41cf-b6c7-440b29bb8c4f). Mar 17 18:27:12.845366 systemd[1]: tcsd.service was skipped because of an unmet condition check (ConditionPathExists=/dev/tpm0). Mar 17 18:27:12.845765 systemd[1]: cgroup compatibility translation between legacy and unified hierarchy settings activated. See cgroup-compat debug messages for details. Mar 17 18:27:12.846426 systemd[1]: Starting update-engine.service... Mar 17 18:27:12.848205 systemd[1]: Starting update-ssh-keys-after-ignition.service... Mar 17 18:27:12.851240 jq[1212]: true Mar 17 18:27:12.850866 systemd[1]: enable-oem-cloudinit.service: Skipped due to 'exec-condition'. Mar 17 18:27:12.851036 systemd[1]: Condition check resulted in enable-oem-cloudinit.service being skipped. Mar 17 18:27:12.851987 systemd[1]: ssh-key-proc-cmdline.service: Deactivated successfully. Mar 17 18:27:12.852140 systemd[1]: Finished ssh-key-proc-cmdline.service. Mar 17 18:27:12.858999 extend-filesystems[1194]: Found loop1 Mar 17 18:27:12.858999 extend-filesystems[1194]: Found vda Mar 17 18:27:12.858999 extend-filesystems[1194]: Found vda1 Mar 17 18:27:12.858999 extend-filesystems[1194]: Found vda2 Mar 17 18:27:12.858999 extend-filesystems[1194]: Found vda3 Mar 17 18:27:12.858999 extend-filesystems[1194]: Found usr Mar 17 18:27:12.858999 extend-filesystems[1194]: Found vda4 Mar 17 18:27:12.858999 extend-filesystems[1194]: Found vda6 Mar 17 18:27:12.858999 extend-filesystems[1194]: Found vda7 Mar 17 18:27:12.858999 extend-filesystems[1194]: Found vda9 Mar 17 18:27:12.858999 extend-filesystems[1194]: Checking size of /dev/vda9 Mar 17 18:27:12.875644 tar[1214]: linux-arm64/helm Mar 17 18:27:12.862577 systemd[1]: motdgen.service: Deactivated successfully. Mar 17 18:27:12.876047 jq[1215]: true Mar 17 18:27:12.862774 systemd[1]: Finished motdgen.service. Mar 17 18:27:12.878056 dbus-daemon[1192]: [system] SELinux support is enabled Mar 17 18:27:12.878803 systemd[1]: Started dbus.service. Mar 17 18:27:12.881281 systemd[1]: system-cloudinit@usr-share-oem-cloud\x2dconfig.yml.service was skipped because of an unmet condition check (ConditionFileNotEmpty=/usr/share/oem/cloud-config.yml). Mar 17 18:27:12.881310 systemd[1]: Reached target system-config.target. Mar 17 18:27:12.882322 systemd[1]: user-cloudinit-proc-cmdline.service was skipped because of an unmet condition check (ConditionKernelCommandLine=cloud-config-url). Mar 17 18:27:12.882344 systemd[1]: Reached target user-config.target. Mar 17 18:27:12.894968 extend-filesystems[1194]: Resized partition /dev/vda9 Mar 17 18:27:12.918761 extend-filesystems[1242]: resize2fs 1.46.5 (30-Dec-2021) Mar 17 18:27:12.934848 kernel: EXT4-fs (vda9): resizing filesystem from 553472 to 1864699 blocks Mar 17 18:27:12.955115 systemd-logind[1207]: Watching system buttons on /dev/input/event0 (Power Button) Mar 17 18:27:12.955584 systemd-logind[1207]: New seat seat0. Mar 17 18:27:12.956516 update_engine[1210]: I0317 18:27:12.954594 1210 main.cc:92] Flatcar Update Engine starting Mar 17 18:27:12.960176 systemd[1]: Started systemd-logind.service. Mar 17 18:27:12.963664 bash[1239]: Updated "/home/core/.ssh/authorized_keys" Mar 17 18:27:12.979666 kernel: EXT4-fs (vda9): resized filesystem to 1864699 Mar 17 18:27:12.979718 update_engine[1210]: I0317 18:27:12.972644 1210 update_check_scheduler.cc:74] Next update check in 8m19s Mar 17 18:27:12.964698 systemd[1]: Finished update-ssh-keys-after-ignition.service. Mar 17 18:27:12.968801 systemd[1]: Started update-engine.service. Mar 17 18:27:12.971427 systemd[1]: Started locksmithd.service. Mar 17 18:27:12.980938 extend-filesystems[1242]: Filesystem at /dev/vda9 is mounted on /; on-line resizing required Mar 17 18:27:12.980938 extend-filesystems[1242]: old_desc_blocks = 1, new_desc_blocks = 1 Mar 17 18:27:12.980938 extend-filesystems[1242]: The filesystem on /dev/vda9 is now 1864699 (4k) blocks long. Mar 17 18:27:12.984313 env[1216]: time="2025-03-17T18:27:12.980914920Z" level=info msg="starting containerd" revision=92b3a9d6f1b3bcc6dc74875cfdea653fe39f09c2 version=1.6.16 Mar 17 18:27:12.988994 extend-filesystems[1194]: Resized filesystem in /dev/vda9 Mar 17 18:27:12.989456 systemd[1]: extend-filesystems.service: Deactivated successfully. Mar 17 18:27:12.989615 systemd[1]: Finished extend-filesystems.service. Mar 17 18:27:13.010631 env[1216]: time="2025-03-17T18:27:13.010585457Z" level=info msg="loading plugin \"io.containerd.content.v1.content\"..." type=io.containerd.content.v1 Mar 17 18:27:13.010738 env[1216]: time="2025-03-17T18:27:13.010720788Z" level=info msg="loading plugin \"io.containerd.snapshotter.v1.aufs\"..." type=io.containerd.snapshotter.v1 Mar 17 18:27:13.014200 env[1216]: time="2025-03-17T18:27:13.014161017Z" level=info msg="skip loading plugin \"io.containerd.snapshotter.v1.aufs\"..." error="aufs is not supported (modprobe aufs failed: exit status 1 \"modprobe: FATAL: Module aufs not found in directory /lib/modules/5.15.179-flatcar\\n\"): skip plugin" type=io.containerd.snapshotter.v1 Mar 17 18:27:13.014200 env[1216]: time="2025-03-17T18:27:13.014195840Z" level=info msg="loading plugin \"io.containerd.snapshotter.v1.btrfs\"..." type=io.containerd.snapshotter.v1 Mar 17 18:27:13.014438 env[1216]: time="2025-03-17T18:27:13.014412737Z" level=info msg="skip loading plugin \"io.containerd.snapshotter.v1.btrfs\"..." error="path /var/lib/containerd/io.containerd.snapshotter.v1.btrfs (ext4) must be a btrfs filesystem to be used with the btrfs snapshotter: skip plugin" type=io.containerd.snapshotter.v1 Mar 17 18:27:13.014473 env[1216]: time="2025-03-17T18:27:13.014437435Z" level=info msg="loading plugin \"io.containerd.snapshotter.v1.devmapper\"..." type=io.containerd.snapshotter.v1 Mar 17 18:27:13.014473 env[1216]: time="2025-03-17T18:27:13.014450785Z" level=warning msg="failed to load plugin io.containerd.snapshotter.v1.devmapper" error="devmapper not configured" Mar 17 18:27:13.014473 env[1216]: time="2025-03-17T18:27:13.014460746Z" level=info msg="loading plugin \"io.containerd.snapshotter.v1.native\"..." type=io.containerd.snapshotter.v1 Mar 17 18:27:13.014544 env[1216]: time="2025-03-17T18:27:13.014529697Z" level=info msg="loading plugin \"io.containerd.snapshotter.v1.overlayfs\"..." type=io.containerd.snapshotter.v1 Mar 17 18:27:13.014768 env[1216]: time="2025-03-17T18:27:13.014750146Z" level=info msg="loading plugin \"io.containerd.snapshotter.v1.zfs\"..." type=io.containerd.snapshotter.v1 Mar 17 18:27:13.014935 env[1216]: time="2025-03-17T18:27:13.014904706Z" level=info msg="skip loading plugin \"io.containerd.snapshotter.v1.zfs\"..." error="path /var/lib/containerd/io.containerd.snapshotter.v1.zfs must be a zfs filesystem to be used with the zfs snapshotter: skip plugin" type=io.containerd.snapshotter.v1 Mar 17 18:27:13.014935 env[1216]: time="2025-03-17T18:27:13.014927200Z" level=info msg="loading plugin \"io.containerd.metadata.v1.bolt\"..." type=io.containerd.metadata.v1 Mar 17 18:27:13.014992 env[1216]: time="2025-03-17T18:27:13.014979413Z" level=warning msg="could not use snapshotter devmapper in metadata plugin" error="devmapper not configured" Mar 17 18:27:13.015022 env[1216]: time="2025-03-17T18:27:13.014991946Z" level=info msg="metadata content store policy set" policy=shared Mar 17 18:27:13.018743 env[1216]: time="2025-03-17T18:27:13.018713452Z" level=info msg="loading plugin \"io.containerd.differ.v1.walking\"..." type=io.containerd.differ.v1 Mar 17 18:27:13.018824 env[1216]: time="2025-03-17T18:27:13.018751051Z" level=info msg="loading plugin \"io.containerd.event.v1.exchange\"..." type=io.containerd.event.v1 Mar 17 18:27:13.018824 env[1216]: time="2025-03-17T18:27:13.018765870Z" level=info msg="loading plugin \"io.containerd.gc.v1.scheduler\"..." type=io.containerd.gc.v1 Mar 17 18:27:13.018824 env[1216]: time="2025-03-17T18:27:13.018801754Z" level=info msg="loading plugin \"io.containerd.service.v1.introspection-service\"..." type=io.containerd.service.v1 Mar 17 18:27:13.018824 env[1216]: time="2025-03-17T18:27:13.018815553Z" level=info msg="loading plugin \"io.containerd.service.v1.containers-service\"..." type=io.containerd.service.v1 Mar 17 18:27:13.018944 env[1216]: time="2025-03-17T18:27:13.018828779Z" level=info msg="loading plugin \"io.containerd.service.v1.content-service\"..." type=io.containerd.service.v1 Mar 17 18:27:13.018944 env[1216]: time="2025-03-17T18:27:13.018900589Z" level=info msg="loading plugin \"io.containerd.service.v1.diff-service\"..." type=io.containerd.service.v1 Mar 17 18:27:13.019257 env[1216]: time="2025-03-17T18:27:13.019236855Z" level=info msg="loading plugin \"io.containerd.service.v1.images-service\"..." type=io.containerd.service.v1 Mar 17 18:27:13.019309 env[1216]: time="2025-03-17T18:27:13.019262125Z" level=info msg="loading plugin \"io.containerd.service.v1.leases-service\"..." type=io.containerd.service.v1 Mar 17 18:27:13.019309 env[1216]: time="2025-03-17T18:27:13.019275515Z" level=info msg="loading plugin \"io.containerd.service.v1.namespaces-service\"..." type=io.containerd.service.v1 Mar 17 18:27:13.019309 env[1216]: time="2025-03-17T18:27:13.019288334Z" level=info msg="loading plugin \"io.containerd.service.v1.snapshots-service\"..." type=io.containerd.service.v1 Mar 17 18:27:13.019309 env[1216]: time="2025-03-17T18:27:13.019300459Z" level=info msg="loading plugin \"io.containerd.runtime.v1.linux\"..." type=io.containerd.runtime.v1 Mar 17 18:27:13.019429 env[1216]: time="2025-03-17T18:27:13.019410969Z" level=info msg="loading plugin \"io.containerd.runtime.v2.task\"..." type=io.containerd.runtime.v2 Mar 17 18:27:13.019504 env[1216]: time="2025-03-17T18:27:13.019488330Z" level=info msg="loading plugin \"io.containerd.monitor.v1.cgroups\"..." type=io.containerd.monitor.v1 Mar 17 18:27:13.019756 env[1216]: time="2025-03-17T18:27:13.019738336Z" level=info msg="loading plugin \"io.containerd.service.v1.tasks-service\"..." type=io.containerd.service.v1 Mar 17 18:27:13.019793 env[1216]: time="2025-03-17T18:27:13.019768137Z" level=info msg="loading plugin \"io.containerd.grpc.v1.introspection\"..." type=io.containerd.grpc.v1 Mar 17 18:27:13.019793 env[1216]: time="2025-03-17T18:27:13.019786345Z" level=info msg="loading plugin \"io.containerd.internal.v1.restart\"..." type=io.containerd.internal.v1 Mar 17 18:27:13.019933 env[1216]: time="2025-03-17T18:27:13.019916818Z" level=info msg="loading plugin \"io.containerd.grpc.v1.containers\"..." type=io.containerd.grpc.v1 Mar 17 18:27:13.019978 env[1216]: time="2025-03-17T18:27:13.019935964Z" level=info msg="loading plugin \"io.containerd.grpc.v1.content\"..." type=io.containerd.grpc.v1 Mar 17 18:27:13.019978 env[1216]: time="2025-03-17T18:27:13.019948497Z" level=info msg="loading plugin \"io.containerd.grpc.v1.diff\"..." type=io.containerd.grpc.v1 Mar 17 18:27:13.019978 env[1216]: time="2025-03-17T18:27:13.019959356Z" level=info msg="loading plugin \"io.containerd.grpc.v1.events\"..." type=io.containerd.grpc.v1 Mar 17 18:27:13.020079 env[1216]: time="2025-03-17T18:27:13.020015571Z" level=info msg="loading plugin \"io.containerd.grpc.v1.healthcheck\"..." type=io.containerd.grpc.v1 Mar 17 18:27:13.020079 env[1216]: time="2025-03-17T18:27:13.020028920Z" level=info msg="loading plugin \"io.containerd.grpc.v1.images\"..." type=io.containerd.grpc.v1 Mar 17 18:27:13.020079 env[1216]: time="2025-03-17T18:27:13.020040065Z" level=info msg="loading plugin \"io.containerd.grpc.v1.leases\"..." type=io.containerd.grpc.v1 Mar 17 18:27:13.020079 env[1216]: time="2025-03-17T18:27:13.020050924Z" level=info msg="loading plugin \"io.containerd.grpc.v1.namespaces\"..." type=io.containerd.grpc.v1 Mar 17 18:27:13.020079 env[1216]: time="2025-03-17T18:27:13.020063947Z" level=info msg="loading plugin \"io.containerd.internal.v1.opt\"..." type=io.containerd.internal.v1 Mar 17 18:27:13.020326 env[1216]: time="2025-03-17T18:27:13.020304359Z" level=info msg="loading plugin \"io.containerd.grpc.v1.snapshots\"..." type=io.containerd.grpc.v1 Mar 17 18:27:13.020357 env[1216]: time="2025-03-17T18:27:13.020331221Z" level=info msg="loading plugin \"io.containerd.grpc.v1.tasks\"..." type=io.containerd.grpc.v1 Mar 17 18:27:13.020357 env[1216]: time="2025-03-17T18:27:13.020343632Z" level=info msg="loading plugin \"io.containerd.grpc.v1.version\"..." type=io.containerd.grpc.v1 Mar 17 18:27:13.020406 env[1216]: time="2025-03-17T18:27:13.020359349Z" level=info msg="loading plugin \"io.containerd.tracing.processor.v1.otlp\"..." type=io.containerd.tracing.processor.v1 Mar 17 18:27:13.020406 env[1216]: time="2025-03-17T18:27:13.020373188Z" level=info msg="skip loading plugin \"io.containerd.tracing.processor.v1.otlp\"..." error="no OpenTelemetry endpoint: skip plugin" type=io.containerd.tracing.processor.v1 Mar 17 18:27:13.020406 env[1216]: time="2025-03-17T18:27:13.020383435Z" level=info msg="loading plugin \"io.containerd.internal.v1.tracing\"..." type=io.containerd.internal.v1 Mar 17 18:27:13.020406 env[1216]: time="2025-03-17T18:27:13.020399724Z" level=error msg="failed to initialize a tracing processor \"otlp\"" error="no OpenTelemetry endpoint: skip plugin" Mar 17 18:27:13.020484 env[1216]: time="2025-03-17T18:27:13.020431240Z" level=info msg="loading plugin \"io.containerd.grpc.v1.cri\"..." type=io.containerd.grpc.v1 Mar 17 18:27:13.020660 env[1216]: time="2025-03-17T18:27:13.020614457Z" level=info msg="Start cri plugin with config {PluginConfig:{ContainerdConfig:{Snapshotter:overlayfs DefaultRuntimeName:runc DefaultRuntime:{Type: Path: Engine: PodAnnotations:[] ContainerAnnotations:[] Root: Options:map[] PrivilegedWithoutHostDevices:false BaseRuntimeSpec: NetworkPluginConfDir: NetworkPluginMaxConfNum:0} UntrustedWorkloadRuntime:{Type: Path: Engine: PodAnnotations:[] ContainerAnnotations:[] Root: Options:map[] PrivilegedWithoutHostDevices:false BaseRuntimeSpec: NetworkPluginConfDir: NetworkPluginMaxConfNum:0} Runtimes:map[runc:{Type:io.containerd.runc.v2 Path: Engine: PodAnnotations:[] ContainerAnnotations:[] Root: Options:map[SystemdCgroup:true] PrivilegedWithoutHostDevices:false BaseRuntimeSpec: NetworkPluginConfDir: NetworkPluginMaxConfNum:0}] NoPivot:false DisableSnapshotAnnotations:true DiscardUnpackedLayers:false IgnoreRdtNotEnabledErrors:false} CniConfig:{NetworkPluginBinDir:/opt/cni/bin NetworkPluginConfDir:/etc/cni/net.d NetworkPluginMaxConfNum:1 NetworkPluginConfTemplate: IPPreference:} Registry:{ConfigPath: Mirrors:map[] Configs:map[] Auths:map[] Headers:map[]} ImageDecryption:{KeyModel:node} DisableTCPService:true StreamServerAddress:127.0.0.1 StreamServerPort:0 StreamIdleTimeout:4h0m0s EnableSelinux:true SelinuxCategoryRange:1024 SandboxImage:registry.k8s.io/pause:3.6 StatsCollectPeriod:10 SystemdCgroup:false EnableTLSStreaming:false X509KeyPairStreaming:{TLSCertFile: TLSKeyFile:} MaxContainerLogLineSize:16384 DisableCgroup:false DisableApparmor:false RestrictOOMScoreAdj:false MaxConcurrentDownloads:3 DisableProcMount:false UnsetSeccompProfile: TolerateMissingHugetlbController:true DisableHugetlbController:true DeviceOwnershipFromSecurityContext:false IgnoreImageDefinedVolumes:false NetNSMountsUnderStateDir:false EnableUnprivilegedPorts:false EnableUnprivilegedICMP:false} ContainerdRootDir:/var/lib/containerd ContainerdEndpoint:/run/containerd/containerd.sock RootDir:/var/lib/containerd/io.containerd.grpc.v1.cri StateDir:/run/containerd/io.containerd.grpc.v1.cri}" Mar 17 18:27:13.023308 env[1216]: time="2025-03-17T18:27:13.020671202Z" level=info msg="Connect containerd service" Mar 17 18:27:13.023308 env[1216]: time="2025-03-17T18:27:13.020699085Z" level=info msg="Get image filesystem path \"/var/lib/containerd/io.containerd.snapshotter.v1.overlayfs\"" Mar 17 18:27:13.023308 env[1216]: time="2025-03-17T18:27:13.021888407Z" level=error msg="failed to load cni during init, please check CRI plugin status before setting up network for pods" error="cni config load failed: no network config found in /etc/cni/net.d: cni plugin not initialized: failed to load cni config" Mar 17 18:27:13.023308 env[1216]: time="2025-03-17T18:27:13.022444021Z" level=info msg=serving... address=/run/containerd/containerd.sock.ttrpc Mar 17 18:27:13.023308 env[1216]: time="2025-03-17T18:27:13.022486396Z" level=info msg=serving... address=/run/containerd/containerd.sock Mar 17 18:27:13.023308 env[1216]: time="2025-03-17T18:27:13.022599886Z" level=info msg="containerd successfully booted in 0.044985s" Mar 17 18:27:13.023308 env[1216]: time="2025-03-17T18:27:13.023228166Z" level=info msg="Start subscribing containerd event" Mar 17 18:27:13.022671 systemd[1]: Started containerd.service. Mar 17 18:27:13.025162 env[1216]: time="2025-03-17T18:27:13.023758713Z" level=info msg="Start recovering state" Mar 17 18:27:13.025162 env[1216]: time="2025-03-17T18:27:13.024803356Z" level=info msg="Start event monitor" Mar 17 18:27:13.025162 env[1216]: time="2025-03-17T18:27:13.024971917Z" level=info msg="Start snapshots syncer" Mar 17 18:27:13.025162 env[1216]: time="2025-03-17T18:27:13.024985308Z" level=info msg="Start cni network conf syncer for default" Mar 17 18:27:13.025162 env[1216]: time="2025-03-17T18:27:13.024995718Z" level=info msg="Start streaming server" Mar 17 18:27:13.025457 locksmithd[1244]: locksmithd starting currentOperation="UPDATE_STATUS_IDLE" strategy="reboot" Mar 17 18:27:13.263629 tar[1214]: linux-arm64/LICENSE Mar 17 18:27:13.263629 tar[1214]: linux-arm64/README.md Mar 17 18:27:13.267671 systemd[1]: Finished prepare-helm.service. Mar 17 18:27:14.001979 systemd-networkd[1043]: eth0: Gained IPv6LL Mar 17 18:27:14.003666 systemd[1]: Finished systemd-networkd-wait-online.service. Mar 17 18:27:14.004957 systemd[1]: Reached target network-online.target. Mar 17 18:27:14.007305 systemd[1]: Starting kubelet.service... Mar 17 18:27:14.286097 sshd_keygen[1211]: ssh-keygen: generating new host keys: RSA ECDSA ED25519 Mar 17 18:27:14.303436 systemd[1]: Finished sshd-keygen.service. Mar 17 18:27:14.305792 systemd[1]: Starting issuegen.service... Mar 17 18:27:14.310606 systemd[1]: issuegen.service: Deactivated successfully. Mar 17 18:27:14.310756 systemd[1]: Finished issuegen.service. Mar 17 18:27:14.312890 systemd[1]: Starting systemd-user-sessions.service... Mar 17 18:27:14.319028 systemd[1]: Finished systemd-user-sessions.service. Mar 17 18:27:14.321263 systemd[1]: Started getty@tty1.service. Mar 17 18:27:14.323277 systemd[1]: Started serial-getty@ttyAMA0.service. Mar 17 18:27:14.324466 systemd[1]: Reached target getty.target. Mar 17 18:27:14.528469 systemd[1]: Started kubelet.service. Mar 17 18:27:14.529716 systemd[1]: Reached target multi-user.target. Mar 17 18:27:14.531832 systemd[1]: Starting systemd-update-utmp-runlevel.service... Mar 17 18:27:14.539065 systemd[1]: systemd-update-utmp-runlevel.service: Deactivated successfully. Mar 17 18:27:14.539222 systemd[1]: Finished systemd-update-utmp-runlevel.service. Mar 17 18:27:14.540297 systemd[1]: Startup finished in 557ms (kernel) + 3.985s (initrd) + 4.986s (userspace) = 9.529s. Mar 17 18:27:15.015060 kubelet[1273]: E0317 18:27:15.014955 1273 run.go:72] "command failed" err="failed to load kubelet config file, path: /var/lib/kubelet/config.yaml, error: failed to load Kubelet config file /var/lib/kubelet/config.yaml, error failed to read kubelet config file \"/var/lib/kubelet/config.yaml\", error: open /var/lib/kubelet/config.yaml: no such file or directory" Mar 17 18:27:15.017342 systemd[1]: kubelet.service: Main process exited, code=exited, status=1/FAILURE Mar 17 18:27:15.017481 systemd[1]: kubelet.service: Failed with result 'exit-code'. Mar 17 18:27:19.169347 systemd[1]: Created slice system-sshd.slice. Mar 17 18:27:19.170398 systemd[1]: Started sshd@0-10.0.0.111:22-10.0.0.1:58284.service. Mar 17 18:27:19.215269 sshd[1283]: Accepted publickey for core from 10.0.0.1 port 58284 ssh2: RSA SHA256:hoQCPKafrT/V1URQ18ch5K7mLY85DMM2OIJJf47c8zQ Mar 17 18:27:19.217109 sshd[1283]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Mar 17 18:27:19.226744 systemd[1]: Created slice user-500.slice. Mar 17 18:27:19.227758 systemd[1]: Starting user-runtime-dir@500.service... Mar 17 18:27:19.229185 systemd-logind[1207]: New session 1 of user core. Mar 17 18:27:19.235276 systemd[1]: Finished user-runtime-dir@500.service. Mar 17 18:27:19.236450 systemd[1]: Starting user@500.service... Mar 17 18:27:19.239057 (systemd)[1286]: pam_unix(systemd-user:session): session opened for user core(uid=500) by (uid=0) Mar 17 18:27:19.295689 systemd[1286]: Queued start job for default target default.target. Mar 17 18:27:19.296158 systemd[1286]: Reached target paths.target. Mar 17 18:27:19.296176 systemd[1286]: Reached target sockets.target. Mar 17 18:27:19.296187 systemd[1286]: Reached target timers.target. Mar 17 18:27:19.296198 systemd[1286]: Reached target basic.target. Mar 17 18:27:19.296246 systemd[1286]: Reached target default.target. Mar 17 18:27:19.296269 systemd[1286]: Startup finished in 52ms. Mar 17 18:27:19.296439 systemd[1]: Started user@500.service. Mar 17 18:27:19.298207 systemd[1]: Started session-1.scope. Mar 17 18:27:19.350082 systemd[1]: Started sshd@1-10.0.0.111:22-10.0.0.1:58292.service. Mar 17 18:27:19.388948 sshd[1295]: Accepted publickey for core from 10.0.0.1 port 58292 ssh2: RSA SHA256:hoQCPKafrT/V1URQ18ch5K7mLY85DMM2OIJJf47c8zQ Mar 17 18:27:19.390287 sshd[1295]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Mar 17 18:27:19.394589 systemd-logind[1207]: New session 2 of user core. Mar 17 18:27:19.395438 systemd[1]: Started session-2.scope. Mar 17 18:27:19.448737 sshd[1295]: pam_unix(sshd:session): session closed for user core Mar 17 18:27:19.452814 systemd[1]: sshd@1-10.0.0.111:22-10.0.0.1:58292.service: Deactivated successfully. Mar 17 18:27:19.453445 systemd[1]: session-2.scope: Deactivated successfully. Mar 17 18:27:19.454006 systemd-logind[1207]: Session 2 logged out. Waiting for processes to exit. Mar 17 18:27:19.455035 systemd[1]: Started sshd@2-10.0.0.111:22-10.0.0.1:58306.service. Mar 17 18:27:19.455750 systemd-logind[1207]: Removed session 2. Mar 17 18:27:19.485515 sshd[1301]: Accepted publickey for core from 10.0.0.1 port 58306 ssh2: RSA SHA256:hoQCPKafrT/V1URQ18ch5K7mLY85DMM2OIJJf47c8zQ Mar 17 18:27:19.486634 sshd[1301]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Mar 17 18:27:19.490076 systemd-logind[1207]: New session 3 of user core. Mar 17 18:27:19.490422 systemd[1]: Started session-3.scope. Mar 17 18:27:19.540611 sshd[1301]: pam_unix(sshd:session): session closed for user core Mar 17 18:27:19.543141 systemd[1]: sshd@2-10.0.0.111:22-10.0.0.1:58306.service: Deactivated successfully. Mar 17 18:27:19.543685 systemd[1]: session-3.scope: Deactivated successfully. Mar 17 18:27:19.544177 systemd-logind[1207]: Session 3 logged out. Waiting for processes to exit. Mar 17 18:27:19.545256 systemd[1]: Started sshd@3-10.0.0.111:22-10.0.0.1:58318.service. Mar 17 18:27:19.545868 systemd-logind[1207]: Removed session 3. Mar 17 18:27:19.576048 sshd[1308]: Accepted publickey for core from 10.0.0.1 port 58318 ssh2: RSA SHA256:hoQCPKafrT/V1URQ18ch5K7mLY85DMM2OIJJf47c8zQ Mar 17 18:27:19.577138 sshd[1308]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Mar 17 18:27:19.580203 systemd-logind[1207]: New session 4 of user core. Mar 17 18:27:19.580968 systemd[1]: Started session-4.scope. Mar 17 18:27:19.633531 sshd[1308]: pam_unix(sshd:session): session closed for user core Mar 17 18:27:19.637330 systemd[1]: sshd@3-10.0.0.111:22-10.0.0.1:58318.service: Deactivated successfully. Mar 17 18:27:19.637908 systemd[1]: session-4.scope: Deactivated successfully. Mar 17 18:27:19.638379 systemd-logind[1207]: Session 4 logged out. Waiting for processes to exit. Mar 17 18:27:19.639429 systemd[1]: Started sshd@4-10.0.0.111:22-10.0.0.1:58332.service. Mar 17 18:27:19.640053 systemd-logind[1207]: Removed session 4. Mar 17 18:27:19.670299 sshd[1314]: Accepted publickey for core from 10.0.0.1 port 58332 ssh2: RSA SHA256:hoQCPKafrT/V1URQ18ch5K7mLY85DMM2OIJJf47c8zQ Mar 17 18:27:19.671408 sshd[1314]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Mar 17 18:27:19.674903 systemd-logind[1207]: New session 5 of user core. Mar 17 18:27:19.675326 systemd[1]: Started session-5.scope. Mar 17 18:27:19.737211 sudo[1317]: core : PWD=/home/core ; USER=root ; COMMAND=/usr/sbin/setenforce 1 Mar 17 18:27:19.737433 sudo[1317]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=500) Mar 17 18:27:19.749073 dbus-daemon[1192]: avc: received setenforce notice (enforcing=1) Mar 17 18:27:19.750755 sudo[1317]: pam_unix(sudo:session): session closed for user root Mar 17 18:27:19.752496 sshd[1314]: pam_unix(sshd:session): session closed for user core Mar 17 18:27:19.755076 systemd[1]: sshd@4-10.0.0.111:22-10.0.0.1:58332.service: Deactivated successfully. Mar 17 18:27:19.755586 systemd[1]: session-5.scope: Deactivated successfully. Mar 17 18:27:19.756101 systemd-logind[1207]: Session 5 logged out. Waiting for processes to exit. Mar 17 18:27:19.757101 systemd[1]: Started sshd@5-10.0.0.111:22-10.0.0.1:58340.service. Mar 17 18:27:19.757642 systemd-logind[1207]: Removed session 5. Mar 17 18:27:19.788278 sshd[1321]: Accepted publickey for core from 10.0.0.1 port 58340 ssh2: RSA SHA256:hoQCPKafrT/V1URQ18ch5K7mLY85DMM2OIJJf47c8zQ Mar 17 18:27:19.789393 sshd[1321]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Mar 17 18:27:19.792407 systemd-logind[1207]: New session 6 of user core. Mar 17 18:27:19.793147 systemd[1]: Started session-6.scope. Mar 17 18:27:19.843434 sudo[1326]: core : PWD=/home/core ; USER=root ; COMMAND=/usr/bin/rm -rf /etc/audit/rules.d/80-selinux.rules /etc/audit/rules.d/99-default.rules Mar 17 18:27:19.843641 sudo[1326]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=500) Mar 17 18:27:19.845995 sudo[1326]: pam_unix(sudo:session): session closed for user root Mar 17 18:27:19.849959 sudo[1325]: core : PWD=/home/core ; USER=root ; COMMAND=/usr/bin/systemctl restart audit-rules Mar 17 18:27:19.850161 sudo[1325]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=500) Mar 17 18:27:19.857834 systemd[1]: Stopping audit-rules.service... Mar 17 18:27:19.857000 audit: CONFIG_CHANGE auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op=remove_rule key=(null) list=5 res=1 Mar 17 18:27:19.858887 auditctl[1329]: No rules Mar 17 18:27:19.859120 systemd[1]: audit-rules.service: Deactivated successfully. Mar 17 18:27:19.859257 systemd[1]: Stopped audit-rules.service. Mar 17 18:27:19.859328 kernel: kauditd_printk_skb: 99 callbacks suppressed Mar 17 18:27:19.859353 kernel: audit: type=1305 audit(1742236039.857:187): auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op=remove_rule key=(null) list=5 res=1 Mar 17 18:27:19.857000 audit[1329]: SYSCALL arch=c00000b7 syscall=206 success=yes exit=1056 a0=3 a1=ffffc0b93ba0 a2=420 a3=0 items=0 ppid=1 pid=1329 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auditctl" exe="/usr/sbin/auditctl" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:27:19.860538 systemd[1]: Starting audit-rules.service... Mar 17 18:27:19.863107 kernel: audit: type=1300 audit(1742236039.857:187): arch=c00000b7 syscall=206 success=yes exit=1056 a0=3 a1=ffffc0b93ba0 a2=420 a3=0 items=0 ppid=1 pid=1329 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auditctl" exe="/usr/sbin/auditctl" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:27:19.863143 kernel: audit: type=1327 audit(1742236039.857:187): proctitle=2F7362696E2F617564697463746C002D44 Mar 17 18:27:19.857000 audit: PROCTITLE proctitle=2F7362696E2F617564697463746C002D44 Mar 17 18:27:19.863847 kernel: audit: type=1131 audit(1742236039.857:188): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=audit-rules comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:27:19.857000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=audit-rules comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:27:19.875441 augenrules[1346]: No rules Mar 17 18:27:19.876023 systemd[1]: Finished audit-rules.service. Mar 17 18:27:19.875000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=audit-rules comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:27:19.878205 sudo[1325]: pam_unix(sudo:session): session closed for user root Mar 17 18:27:19.877000 audit[1325]: USER_END pid=1325 uid=500 auid=500 ses=6 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_limits,pam_env,pam_unix,pam_permit,pam_systemd acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Mar 17 18:27:19.881064 kernel: audit: type=1130 audit(1742236039.875:189): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=audit-rules comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:27:19.881186 kernel: audit: type=1106 audit(1742236039.877:190): pid=1325 uid=500 auid=500 ses=6 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_limits,pam_env,pam_unix,pam_permit,pam_systemd acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Mar 17 18:27:19.881217 kernel: audit: type=1104 audit(1742236039.877:191): pid=1325 uid=500 auid=500 ses=6 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Mar 17 18:27:19.877000 audit[1325]: CRED_DISP pid=1325 uid=500 auid=500 ses=6 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Mar 17 18:27:19.883509 sshd[1321]: pam_unix(sshd:session): session closed for user core Mar 17 18:27:19.883000 audit[1321]: USER_END pid=1321 uid=0 auid=500 ses=6 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Mar 17 18:27:19.886658 systemd[1]: Started sshd@6-10.0.0.111:22-10.0.0.1:58342.service. Mar 17 18:27:19.887140 systemd[1]: sshd@5-10.0.0.111:22-10.0.0.1:58340.service: Deactivated successfully. Mar 17 18:27:19.883000 audit[1321]: CRED_DISP pid=1321 uid=0 auid=500 ses=6 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Mar 17 18:27:19.887740 systemd[1]: session-6.scope: Deactivated successfully. Mar 17 18:27:19.888254 systemd-logind[1207]: Session 6 logged out. Waiting for processes to exit. Mar 17 18:27:19.889099 systemd-logind[1207]: Removed session 6. Mar 17 18:27:19.889441 kernel: audit: type=1106 audit(1742236039.883:192): pid=1321 uid=0 auid=500 ses=6 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Mar 17 18:27:19.889484 kernel: audit: type=1104 audit(1742236039.883:193): pid=1321 uid=0 auid=500 ses=6 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Mar 17 18:27:19.889502 kernel: audit: type=1130 audit(1742236039.885:194): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@6-10.0.0.111:22-10.0.0.1:58342 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:27:19.885000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@6-10.0.0.111:22-10.0.0.1:58342 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:27:19.886000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@5-10.0.0.111:22-10.0.0.1:58340 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:27:19.916000 audit[1351]: USER_ACCT pid=1351 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Mar 17 18:27:19.918007 sshd[1351]: Accepted publickey for core from 10.0.0.1 port 58342 ssh2: RSA SHA256:hoQCPKafrT/V1URQ18ch5K7mLY85DMM2OIJJf47c8zQ Mar 17 18:27:19.916000 audit[1351]: CRED_ACQ pid=1351 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Mar 17 18:27:19.916000 audit[1351]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffd90f0e60 a2=3 a3=1 items=0 ppid=1 pid=1351 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=7 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:27:19.916000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Mar 17 18:27:19.919188 sshd[1351]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Mar 17 18:27:19.922450 systemd-logind[1207]: New session 7 of user core. Mar 17 18:27:19.922771 systemd[1]: Started session-7.scope. Mar 17 18:27:19.924000 audit[1351]: USER_START pid=1351 uid=0 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Mar 17 18:27:19.925000 audit[1354]: CRED_ACQ pid=1354 uid=0 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Mar 17 18:27:19.974304 sudo[1355]: core : PWD=/home/core ; USER=root ; COMMAND=/home/core/install.sh Mar 17 18:27:19.973000 audit[1355]: USER_ACCT pid=1355 uid=500 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Mar 17 18:27:19.973000 audit[1355]: CRED_REFR pid=1355 uid=500 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Mar 17 18:27:19.974509 sudo[1355]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=500) Mar 17 18:27:19.974000 audit[1355]: USER_START pid=1355 uid=500 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_limits,pam_env,pam_unix,pam_permit,pam_systemd acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Mar 17 18:27:20.026781 systemd[1]: Starting docker.service... Mar 17 18:27:20.108475 env[1367]: time="2025-03-17T18:27:20.108423993Z" level=info msg="Starting up" Mar 17 18:27:20.109919 env[1367]: time="2025-03-17T18:27:20.109898625Z" level=info msg="parsed scheme: \"unix\"" module=grpc Mar 17 18:27:20.110000 env[1367]: time="2025-03-17T18:27:20.109986490Z" level=info msg="scheme \"unix\" not registered, fallback to default scheme" module=grpc Mar 17 18:27:20.110079 env[1367]: time="2025-03-17T18:27:20.110063629Z" level=info msg="ccResolverWrapper: sending update to cc: {[{unix:///var/run/docker/libcontainerd/docker-containerd.sock 0 }] }" module=grpc Mar 17 18:27:20.110129 env[1367]: time="2025-03-17T18:27:20.110116815Z" level=info msg="ClientConn switching balancer to \"pick_first\"" module=grpc Mar 17 18:27:20.112077 env[1367]: time="2025-03-17T18:27:20.112053394Z" level=info msg="parsed scheme: \"unix\"" module=grpc Mar 17 18:27:20.112077 env[1367]: time="2025-03-17T18:27:20.112075289Z" level=info msg="scheme \"unix\" not registered, fallback to default scheme" module=grpc Mar 17 18:27:20.112149 env[1367]: time="2025-03-17T18:27:20.112089040Z" level=info msg="ccResolverWrapper: sending update to cc: {[{unix:///var/run/docker/libcontainerd/docker-containerd.sock 0 }] }" module=grpc Mar 17 18:27:20.112149 env[1367]: time="2025-03-17T18:27:20.112100492Z" level=info msg="ClientConn switching balancer to \"pick_first\"" module=grpc Mar 17 18:27:20.117881 systemd[1]: var-lib-docker-check\x2doverlayfs\x2dsupport564894086-merged.mount: Deactivated successfully. Mar 17 18:27:20.201240 env[1367]: time="2025-03-17T18:27:20.201203937Z" level=info msg="Loading containers: start." Mar 17 18:27:20.245000 audit[1400]: NETFILTER_CFG table=nat:2 family=2 entries=2 op=nft_register_chain pid=1400 subj=system_u:system_r:kernel_t:s0 comm="iptables" Mar 17 18:27:20.245000 audit[1400]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=116 a0=3 a1=ffffecb41200 a2=0 a3=1 items=0 ppid=1367 pid=1400 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:27:20.245000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D74006E6174002D4E00444F434B4552 Mar 17 18:27:20.246000 audit[1402]: NETFILTER_CFG table=filter:3 family=2 entries=2 op=nft_register_chain pid=1402 subj=system_u:system_r:kernel_t:s0 comm="iptables" Mar 17 18:27:20.246000 audit[1402]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=124 a0=3 a1=ffffd60b1580 a2=0 a3=1 items=0 ppid=1367 pid=1402 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:27:20.246000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D740066696C746572002D4E00444F434B4552 Mar 17 18:27:20.248000 audit[1404]: NETFILTER_CFG table=filter:4 family=2 entries=1 op=nft_register_chain pid=1404 subj=system_u:system_r:kernel_t:s0 comm="iptables" Mar 17 18:27:20.248000 audit[1404]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=112 a0=3 a1=ffffee648490 a2=0 a3=1 items=0 ppid=1367 pid=1404 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:27:20.248000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D740066696C746572002D4E00444F434B45522D49534F4C4154494F4E2D53544147452D31 Mar 17 18:27:20.249000 audit[1406]: NETFILTER_CFG table=filter:5 family=2 entries=1 op=nft_register_chain pid=1406 subj=system_u:system_r:kernel_t:s0 comm="iptables" Mar 17 18:27:20.249000 audit[1406]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=112 a0=3 a1=ffffce3a6560 a2=0 a3=1 items=0 ppid=1367 pid=1406 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:27:20.249000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D740066696C746572002D4E00444F434B45522D49534F4C4154494F4E2D53544147452D32 Mar 17 18:27:20.251000 audit[1408]: NETFILTER_CFG table=filter:6 family=2 entries=1 op=nft_register_rule pid=1408 subj=system_u:system_r:kernel_t:s0 comm="iptables" Mar 17 18:27:20.251000 audit[1408]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=228 a0=3 a1=ffffebddd140 a2=0 a3=1 items=0 ppid=1367 pid=1408 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:27:20.251000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4100444F434B45522D49534F4C4154494F4E2D53544147452D31002D6A0052455455524E Mar 17 18:27:20.277000 audit[1413]: NETFILTER_CFG table=filter:7 family=2 entries=1 op=nft_register_rule pid=1413 subj=system_u:system_r:kernel_t:s0 comm="iptables" Mar 17 18:27:20.277000 audit[1413]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=228 a0=3 a1=ffffd4e1df80 a2=0 a3=1 items=0 ppid=1367 pid=1413 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:27:20.277000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4100444F434B45522D49534F4C4154494F4E2D53544147452D32002D6A0052455455524E Mar 17 18:27:20.282000 audit[1415]: NETFILTER_CFG table=filter:8 family=2 entries=1 op=nft_register_chain pid=1415 subj=system_u:system_r:kernel_t:s0 comm="iptables" Mar 17 18:27:20.282000 audit[1415]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=96 a0=3 a1=ffffe7248fd0 a2=0 a3=1 items=0 ppid=1367 pid=1415 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:27:20.282000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D740066696C746572002D4E00444F434B45522D55534552 Mar 17 18:27:20.284000 audit[1417]: NETFILTER_CFG table=filter:9 family=2 entries=1 op=nft_register_rule pid=1417 subj=system_u:system_r:kernel_t:s0 comm="iptables" Mar 17 18:27:20.284000 audit[1417]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=212 a0=3 a1=ffffe0e75810 a2=0 a3=1 items=0 ppid=1367 pid=1417 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:27:20.284000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4100444F434B45522D55534552002D6A0052455455524E Mar 17 18:27:20.285000 audit[1419]: NETFILTER_CFG table=filter:10 family=2 entries=2 op=nft_register_chain pid=1419 subj=system_u:system_r:kernel_t:s0 comm="iptables" Mar 17 18:27:20.285000 audit[1419]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=308 a0=3 a1=fffff3351410 a2=0 a3=1 items=0 ppid=1367 pid=1419 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:27:20.285000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6A00444F434B45522D55534552 Mar 17 18:27:20.292000 audit[1423]: NETFILTER_CFG table=filter:11 family=2 entries=1 op=nft_unregister_rule pid=1423 subj=system_u:system_r:kernel_t:s0 comm="iptables" Mar 17 18:27:20.292000 audit[1423]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=216 a0=3 a1=ffffe1bfacc0 a2=0 a3=1 items=0 ppid=1367 pid=1423 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:27:20.292000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4400464F5257415244002D6A00444F434B45522D55534552 Mar 17 18:27:20.304000 audit[1424]: NETFILTER_CFG table=filter:12 family=2 entries=1 op=nft_register_rule pid=1424 subj=system_u:system_r:kernel_t:s0 comm="iptables" Mar 17 18:27:20.304000 audit[1424]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=224 a0=3 a1=ffffe001ed00 a2=0 a3=1 items=0 ppid=1367 pid=1424 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:27:20.304000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6A00444F434B45522D55534552 Mar 17 18:27:20.313860 kernel: Initializing XFRM netlink socket Mar 17 18:27:20.335700 env[1367]: time="2025-03-17T18:27:20.335668419Z" level=info msg="Default bridge (docker0) is assigned with an IP address 172.17.0.0/16. Daemon option --bip can be used to set a preferred IP address" Mar 17 18:27:20.352000 audit[1432]: NETFILTER_CFG table=nat:13 family=2 entries=2 op=nft_register_chain pid=1432 subj=system_u:system_r:kernel_t:s0 comm="iptables" Mar 17 18:27:20.352000 audit[1432]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=492 a0=3 a1=ffffd4a9bc90 a2=0 a3=1 items=0 ppid=1367 pid=1432 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:27:20.352000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D74006E6174002D4900504F5354524F5554494E47002D73003137322E31372E302E302F31360000002D6F00646F636B657230002D6A004D415351554552414445 Mar 17 18:27:20.366000 audit[1435]: NETFILTER_CFG table=nat:14 family=2 entries=1 op=nft_register_rule pid=1435 subj=system_u:system_r:kernel_t:s0 comm="iptables" Mar 17 18:27:20.366000 audit[1435]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=288 a0=3 a1=ffffc15c3d40 a2=0 a3=1 items=0 ppid=1367 pid=1435 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:27:20.366000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D74006E6174002D4900444F434B4552002D6900646F636B657230002D6A0052455455524E Mar 17 18:27:20.368000 audit[1438]: NETFILTER_CFG table=filter:15 family=2 entries=1 op=nft_register_rule pid=1438 subj=system_u:system_r:kernel_t:s0 comm="iptables" Mar 17 18:27:20.368000 audit[1438]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=376 a0=3 a1=fffff8b3d080 a2=0 a3=1 items=0 ppid=1367 pid=1438 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:27:20.368000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6900646F636B657230002D6F00646F636B657230002D6A00414343455054 Mar 17 18:27:20.370000 audit[1440]: NETFILTER_CFG table=filter:16 family=2 entries=1 op=nft_register_rule pid=1440 subj=system_u:system_r:kernel_t:s0 comm="iptables" Mar 17 18:27:20.370000 audit[1440]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=376 a0=3 a1=fffffc779990 a2=0 a3=1 items=0 ppid=1367 pid=1440 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:27:20.370000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6900646F636B6572300000002D6F00646F636B657230002D6A00414343455054 Mar 17 18:27:20.372000 audit[1442]: NETFILTER_CFG table=nat:17 family=2 entries=2 op=nft_register_chain pid=1442 subj=system_u:system_r:kernel_t:s0 comm="iptables" Mar 17 18:27:20.372000 audit[1442]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=356 a0=3 a1=ffffcfe6b8d0 a2=0 a3=1 items=0 ppid=1367 pid=1442 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:27:20.372000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D74006E6174002D4100505245524F5554494E47002D6D006164647274797065002D2D6473742D74797065004C4F43414C002D6A00444F434B4552 Mar 17 18:27:20.374000 audit[1444]: NETFILTER_CFG table=nat:18 family=2 entries=2 op=nft_register_chain pid=1444 subj=system_u:system_r:kernel_t:s0 comm="iptables" Mar 17 18:27:20.374000 audit[1444]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=444 a0=3 a1=fffffd62b1f0 a2=0 a3=1 items=0 ppid=1367 pid=1444 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:27:20.374000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D74006E6174002D41004F5554505554002D6D006164647274797065002D2D6473742D74797065004C4F43414C002D6A00444F434B45520000002D2D647374003132372E302E302E302F38 Mar 17 18:27:20.375000 audit[1446]: NETFILTER_CFG table=filter:19 family=2 entries=1 op=nft_register_rule pid=1446 subj=system_u:system_r:kernel_t:s0 comm="iptables" Mar 17 18:27:20.375000 audit[1446]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=304 a0=3 a1=ffffdbeeb440 a2=0 a3=1 items=0 ppid=1367 pid=1446 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:27:20.375000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6F00646F636B657230002D6A00444F434B4552 Mar 17 18:27:20.383000 audit[1449]: NETFILTER_CFG table=filter:20 family=2 entries=1 op=nft_register_rule pid=1449 subj=system_u:system_r:kernel_t:s0 comm="iptables" Mar 17 18:27:20.383000 audit[1449]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=508 a0=3 a1=fffffcbbfed0 a2=0 a3=1 items=0 ppid=1367 pid=1449 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:27:20.383000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6F00646F636B657230002D6D00636F6E6E747261636B002D2D637473746174650052454C415445442C45535441424C4953484544002D6A00414343455054 Mar 17 18:27:20.385000 audit[1451]: NETFILTER_CFG table=filter:21 family=2 entries=1 op=nft_register_rule pid=1451 subj=system_u:system_r:kernel_t:s0 comm="iptables" Mar 17 18:27:20.385000 audit[1451]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=240 a0=3 a1=fffff89cb240 a2=0 a3=1 items=0 ppid=1367 pid=1451 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:27:20.385000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6A00444F434B45522D49534F4C4154494F4E2D53544147452D31 Mar 17 18:27:20.387000 audit[1453]: NETFILTER_CFG table=filter:22 family=2 entries=1 op=nft_register_rule pid=1453 subj=system_u:system_r:kernel_t:s0 comm="iptables" Mar 17 18:27:20.387000 audit[1453]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=428 a0=3 a1=ffffd374eda0 a2=0 a3=1 items=0 ppid=1367 pid=1453 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:27:20.387000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D740066696C746572002D4900444F434B45522D49534F4C4154494F4E2D53544147452D31002D6900646F636B6572300000002D6F00646F636B657230002D6A00444F434B45522D49534F4C4154494F4E2D53544147452D32 Mar 17 18:27:20.389000 audit[1455]: NETFILTER_CFG table=filter:23 family=2 entries=1 op=nft_register_rule pid=1455 subj=system_u:system_r:kernel_t:s0 comm="iptables" Mar 17 18:27:20.389000 audit[1455]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=312 a0=3 a1=fffff20ced10 a2=0 a3=1 items=0 ppid=1367 pid=1455 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:27:20.389000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D740066696C746572002D4900444F434B45522D49534F4C4154494F4E2D53544147452D32002D6F00646F636B657230002D6A0044524F50 Mar 17 18:27:20.390448 systemd-networkd[1043]: docker0: Link UP Mar 17 18:27:20.396000 audit[1459]: NETFILTER_CFG table=filter:24 family=2 entries=1 op=nft_unregister_rule pid=1459 subj=system_u:system_r:kernel_t:s0 comm="iptables" Mar 17 18:27:20.396000 audit[1459]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=228 a0=3 a1=ffffce11cba0 a2=0 a3=1 items=0 ppid=1367 pid=1459 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:27:20.396000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4400464F5257415244002D6A00444F434B45522D55534552 Mar 17 18:27:20.405000 audit[1460]: NETFILTER_CFG table=filter:25 family=2 entries=1 op=nft_register_rule pid=1460 subj=system_u:system_r:kernel_t:s0 comm="iptables" Mar 17 18:27:20.405000 audit[1460]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=224 a0=3 a1=ffffd85ff6c0 a2=0 a3=1 items=0 ppid=1367 pid=1460 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:27:20.405000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6A00444F434B45522D55534552 Mar 17 18:27:20.408122 env[1367]: time="2025-03-17T18:27:20.408079372Z" level=info msg="Loading containers: done." Mar 17 18:27:20.426296 systemd[1]: var-lib-docker-overlay2-opaque\x2dbug\x2dcheck2317903378-merged.mount: Deactivated successfully. Mar 17 18:27:20.431286 env[1367]: time="2025-03-17T18:27:20.431238107Z" level=warning msg="Not using native diff for overlay2, this may cause degraded performance for building images: kernel has CONFIG_OVERLAY_FS_REDIRECT_DIR enabled" storage-driver=overlay2 Mar 17 18:27:20.431414 env[1367]: time="2025-03-17T18:27:20.431396578Z" level=info msg="Docker daemon" commit=112bdf3343 graphdriver(s)=overlay2 version=20.10.23 Mar 17 18:27:20.431518 env[1367]: time="2025-03-17T18:27:20.431492145Z" level=info msg="Daemon has completed initialization" Mar 17 18:27:20.444194 systemd[1]: Started docker.service. Mar 17 18:27:20.443000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=docker comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:27:20.454744 env[1367]: time="2025-03-17T18:27:20.454697172Z" level=info msg="API listen on /run/docker.sock" Mar 17 18:27:21.257232 env[1216]: time="2025-03-17T18:27:21.257190094Z" level=info msg="PullImage \"registry.k8s.io/kube-apiserver:v1.31.7\"" Mar 17 18:27:21.889528 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount216231825.mount: Deactivated successfully. Mar 17 18:27:23.350622 env[1216]: time="2025-03-17T18:27:23.350555810Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-apiserver:v1.31.7,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Mar 17 18:27:23.351857 env[1216]: time="2025-03-17T18:27:23.351823924Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:26ae5fde2308729bfda71fa20aa73cb5a1a4490f107f62dc7e1c4c49823cc084,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Mar 17 18:27:23.353923 env[1216]: time="2025-03-17T18:27:23.353885917Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/kube-apiserver:v1.31.7,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Mar 17 18:27:23.356075 env[1216]: time="2025-03-17T18:27:23.356046441Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-apiserver@sha256:22c19cc70fe5806d0a2cb28a6b6b33fd34e6f9e50616bdf6d53649bcfafbc277,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Mar 17 18:27:23.356725 env[1216]: time="2025-03-17T18:27:23.356698113Z" level=info msg="PullImage \"registry.k8s.io/kube-apiserver:v1.31.7\" returns image reference \"sha256:26ae5fde2308729bfda71fa20aa73cb5a1a4490f107f62dc7e1c4c49823cc084\"" Mar 17 18:27:23.357284 env[1216]: time="2025-03-17T18:27:23.357252542Z" level=info msg="PullImage \"registry.k8s.io/kube-controller-manager:v1.31.7\"" Mar 17 18:27:25.120003 env[1216]: time="2025-03-17T18:27:25.119955609Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-controller-manager:v1.31.7,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Mar 17 18:27:25.121911 env[1216]: time="2025-03-17T18:27:25.121876987Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:3f2886c2c7c101461e78c37591f8beb12ac073f8dcf5e32c95da9e9689d0c1d3,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Mar 17 18:27:25.123890 env[1216]: time="2025-03-17T18:27:25.123861105Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/kube-controller-manager:v1.31.7,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Mar 17 18:27:25.126095 env[1216]: time="2025-03-17T18:27:25.126060270Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-controller-manager@sha256:6abe7a0accecf29db6ebab18a10f844678ffed693d79e2e51a18a6f2b4530cbb,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Mar 17 18:27:25.126909 env[1216]: time="2025-03-17T18:27:25.126882909Z" level=info msg="PullImage \"registry.k8s.io/kube-controller-manager:v1.31.7\" returns image reference \"sha256:3f2886c2c7c101461e78c37591f8beb12ac073f8dcf5e32c95da9e9689d0c1d3\"" Mar 17 18:27:25.127454 env[1216]: time="2025-03-17T18:27:25.127398238Z" level=info msg="PullImage \"registry.k8s.io/kube-scheduler:v1.31.7\"" Mar 17 18:27:25.268330 systemd[1]: kubelet.service: Scheduled restart job, restart counter is at 1. Mar 17 18:27:25.268502 systemd[1]: Stopped kubelet.service. Mar 17 18:27:25.269180 kernel: kauditd_printk_skb: 84 callbacks suppressed Mar 17 18:27:25.269299 kernel: audit: type=1130 audit(1742236045.267:229): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:27:25.267000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:27:25.269860 systemd[1]: Starting kubelet.service... Mar 17 18:27:25.267000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:27:25.272679 kernel: audit: type=1131 audit(1742236045.267:230): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:27:25.350000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:27:25.350997 systemd[1]: Started kubelet.service. Mar 17 18:27:25.353894 kernel: audit: type=1130 audit(1742236045.350:231): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:27:25.399018 kubelet[1503]: E0317 18:27:25.398305 1503 run.go:72] "command failed" err="failed to load kubelet config file, path: /var/lib/kubelet/config.yaml, error: failed to load Kubelet config file /var/lib/kubelet/config.yaml, error failed to read kubelet config file \"/var/lib/kubelet/config.yaml\", error: open /var/lib/kubelet/config.yaml: no such file or directory" Mar 17 18:27:25.401072 systemd[1]: kubelet.service: Main process exited, code=exited, status=1/FAILURE Mar 17 18:27:25.401216 systemd[1]: kubelet.service: Failed with result 'exit-code'. Mar 17 18:27:25.400000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' Mar 17 18:27:25.403864 kernel: audit: type=1131 audit(1742236045.400:232): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' Mar 17 18:27:26.720286 env[1216]: time="2025-03-17T18:27:26.720213843Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-scheduler:v1.31.7,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Mar 17 18:27:26.724715 env[1216]: time="2025-03-17T18:27:26.724682848Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:3dd474fdc8c0d007008dd47bafecdd344fbdace928731ae8b09f58f633f4a30f,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Mar 17 18:27:26.726450 env[1216]: time="2025-03-17T18:27:26.726409453Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/kube-scheduler:v1.31.7,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Mar 17 18:27:26.728729 env[1216]: time="2025-03-17T18:27:26.728694317Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-scheduler@sha256:fb80249bcb77ee72b1c9fa5b70bc28a83ed107c9ca71957841ad91db379963bf,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Mar 17 18:27:26.729391 env[1216]: time="2025-03-17T18:27:26.729357515Z" level=info msg="PullImage \"registry.k8s.io/kube-scheduler:v1.31.7\" returns image reference \"sha256:3dd474fdc8c0d007008dd47bafecdd344fbdace928731ae8b09f58f633f4a30f\"" Mar 17 18:27:26.729921 env[1216]: time="2025-03-17T18:27:26.729884943Z" level=info msg="PullImage \"registry.k8s.io/kube-proxy:v1.31.7\"" Mar 17 18:27:27.918305 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount2114375161.mount: Deactivated successfully. Mar 17 18:27:28.362356 env[1216]: time="2025-03-17T18:27:28.362224638Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-proxy:v1.31.7,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Mar 17 18:27:28.363905 env[1216]: time="2025-03-17T18:27:28.363871562Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:939054a0dc9c7c1596b061fc2380758139ce62751b44a0b21b3afc7abd7eb3ff,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Mar 17 18:27:28.365547 env[1216]: time="2025-03-17T18:27:28.365516521Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/kube-proxy:v1.31.7,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Mar 17 18:27:28.367032 env[1216]: time="2025-03-17T18:27:28.367001437Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-proxy@sha256:e5839270c96c3ad1bea1dce4935126d3281297527f3655408d2970aa4b5cf178,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Mar 17 18:27:28.367400 env[1216]: time="2025-03-17T18:27:28.367375353Z" level=info msg="PullImage \"registry.k8s.io/kube-proxy:v1.31.7\" returns image reference \"sha256:939054a0dc9c7c1596b061fc2380758139ce62751b44a0b21b3afc7abd7eb3ff\"" Mar 17 18:27:28.367908 env[1216]: time="2025-03-17T18:27:28.367862784Z" level=info msg="PullImage \"registry.k8s.io/coredns/coredns:v1.11.1\"" Mar 17 18:27:28.863986 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount2033251454.mount: Deactivated successfully. Mar 17 18:27:29.813622 env[1216]: time="2025-03-17T18:27:29.813566955Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/coredns/coredns:v1.11.1,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Mar 17 18:27:29.815613 env[1216]: time="2025-03-17T18:27:29.815570415Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:2437cf762177702dec2dfe99a09c37427a15af6d9a57c456b65352667c223d93,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Mar 17 18:27:29.817896 env[1216]: time="2025-03-17T18:27:29.817866305Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/coredns/coredns:v1.11.1,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Mar 17 18:27:29.819759 env[1216]: time="2025-03-17T18:27:29.819731349Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/coredns/coredns@sha256:1eeb4c7316bacb1d4c8ead65571cd92dd21e27359f0d4917f1a5822a73b75db1,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Mar 17 18:27:29.820380 env[1216]: time="2025-03-17T18:27:29.820347364Z" level=info msg="PullImage \"registry.k8s.io/coredns/coredns:v1.11.1\" returns image reference \"sha256:2437cf762177702dec2dfe99a09c37427a15af6d9a57c456b65352667c223d93\"" Mar 17 18:27:29.821772 env[1216]: time="2025-03-17T18:27:29.821744714Z" level=info msg="PullImage \"registry.k8s.io/pause:3.10\"" Mar 17 18:27:30.347220 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount3358601129.mount: Deactivated successfully. Mar 17 18:27:30.350683 env[1216]: time="2025-03-17T18:27:30.350643107Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/pause:3.10,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Mar 17 18:27:30.352002 env[1216]: time="2025-03-17T18:27:30.351961747Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:afb61768ce381961ca0beff95337601f29dc70ff3ed14e5e4b3e5699057e6aa8,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Mar 17 18:27:30.353914 env[1216]: time="2025-03-17T18:27:30.353889240Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause:3.10,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Mar 17 18:27:30.355599 env[1216]: time="2025-03-17T18:27:30.355570891Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/pause@sha256:ee6521f290b2168b6e0935a181d4cff9be1ac3f505666ef0e3c98fae8199917a,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Mar 17 18:27:30.356069 env[1216]: time="2025-03-17T18:27:30.356036880Z" level=info msg="PullImage \"registry.k8s.io/pause:3.10\" returns image reference \"sha256:afb61768ce381961ca0beff95337601f29dc70ff3ed14e5e4b3e5699057e6aa8\"" Mar 17 18:27:30.356938 env[1216]: time="2025-03-17T18:27:30.356895343Z" level=info msg="PullImage \"registry.k8s.io/etcd:3.5.15-0\"" Mar 17 18:27:30.877678 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount979351301.mount: Deactivated successfully. Mar 17 18:27:33.585595 env[1216]: time="2025-03-17T18:27:33.585540502Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/etcd:3.5.15-0,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Mar 17 18:27:33.586820 env[1216]: time="2025-03-17T18:27:33.586787957Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:27e3830e1402783674d8b594038967deea9d51f0d91b34c93c8f39d2f68af7da,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Mar 17 18:27:33.589281 env[1216]: time="2025-03-17T18:27:33.589251344Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/etcd:3.5.15-0,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Mar 17 18:27:33.591204 env[1216]: time="2025-03-17T18:27:33.591175603Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/etcd@sha256:a6dc63e6e8cfa0307d7851762fa6b629afb18f28d8aa3fab5a6e91b4af60026a,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Mar 17 18:27:33.592134 env[1216]: time="2025-03-17T18:27:33.592102723Z" level=info msg="PullImage \"registry.k8s.io/etcd:3.5.15-0\" returns image reference \"sha256:27e3830e1402783674d8b594038967deea9d51f0d91b34c93c8f39d2f68af7da\"" Mar 17 18:27:35.651960 systemd[1]: kubelet.service: Scheduled restart job, restart counter is at 2. Mar 17 18:27:35.651000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:27:35.652119 systemd[1]: Stopped kubelet.service. Mar 17 18:27:35.653506 systemd[1]: Starting kubelet.service... Mar 17 18:27:35.651000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:27:35.655614 kernel: audit: type=1130 audit(1742236055.651:233): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:27:35.655689 kernel: audit: type=1131 audit(1742236055.651:234): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:27:35.733000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:27:35.734011 systemd[1]: Started kubelet.service. Mar 17 18:27:35.736852 kernel: audit: type=1130 audit(1742236055.733:235): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:27:35.784531 kubelet[1535]: E0317 18:27:35.784479 1535 run.go:72] "command failed" err="failed to load kubelet config file, path: /var/lib/kubelet/config.yaml, error: failed to load Kubelet config file /var/lib/kubelet/config.yaml, error failed to read kubelet config file \"/var/lib/kubelet/config.yaml\", error: open /var/lib/kubelet/config.yaml: no such file or directory" Mar 17 18:27:35.786313 systemd[1]: kubelet.service: Main process exited, code=exited, status=1/FAILURE Mar 17 18:27:35.786440 systemd[1]: kubelet.service: Failed with result 'exit-code'. Mar 17 18:27:35.785000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' Mar 17 18:27:35.788855 kernel: audit: type=1131 audit(1742236055.785:236): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' Mar 17 18:27:37.608163 systemd[1]: Stopped kubelet.service. Mar 17 18:27:37.606000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:27:37.606000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:27:37.610127 systemd[1]: Starting kubelet.service... Mar 17 18:27:37.612786 kernel: audit: type=1130 audit(1742236057.606:237): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:27:37.612935 kernel: audit: type=1131 audit(1742236057.606:238): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:27:37.631108 systemd[1]: Reloading. Mar 17 18:27:37.684345 /usr/lib/systemd/system-generators/torcx-generator[1569]: time="2025-03-17T18:27:37Z" level=debug msg="common configuration parsed" base_dir=/var/lib/torcx/ conf_dir=/etc/torcx/ run_dir=/run/torcx/ store_paths="[/usr/share/torcx/store /usr/share/oem/torcx/store/3510.3.7 /usr/share/oem/torcx/store /var/lib/torcx/store/3510.3.7 /var/lib/torcx/store]" Mar 17 18:27:37.684376 /usr/lib/systemd/system-generators/torcx-generator[1569]: time="2025-03-17T18:27:37Z" level=info msg="torcx already run" Mar 17 18:27:37.831692 systemd[1]: /usr/lib/systemd/system/locksmithd.service:8: Unit uses CPUShares=; please use CPUWeight= instead. Support for CPUShares= will be removed soon. Mar 17 18:27:37.831712 systemd[1]: /usr/lib/systemd/system/locksmithd.service:9: Unit uses MemoryLimit=; please use MemoryMax= instead. Support for MemoryLimit= will be removed soon. Mar 17 18:27:37.846893 systemd[1]: /run/systemd/system/docker.socket:8: ListenStream= references a path below legacy directory /var/run/, updating /var/run/docker.sock → /run/docker.sock; please update the unit file accordingly. Mar 17 18:27:37.893000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:27:37.893000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:27:37.898328 kernel: audit: type=1400 audit(1742236057.893:239): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:27:37.898399 kernel: audit: type=1400 audit(1742236057.893:240): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:27:37.898422 kernel: audit: type=1400 audit(1742236057.893:241): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:27:37.893000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:27:37.899998 kernel: audit: type=1400 audit(1742236057.893:242): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:27:37.893000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:27:37.893000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:27:37.893000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:27:37.893000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:27:37.893000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:27:37.893000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:27:37.895000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:27:37.895000 audit: BPF prog-id=40 op=LOAD Mar 17 18:27:37.895000 audit: BPF prog-id=35 op=UNLOAD Mar 17 18:27:37.895000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:27:37.895000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:27:37.895000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:27:37.895000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:27:37.895000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:27:37.895000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:27:37.895000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:27:37.895000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:27:37.897000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:27:37.897000 audit: BPF prog-id=41 op=LOAD Mar 17 18:27:37.897000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:27:37.897000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:27:37.897000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:27:37.897000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:27:37.897000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:27:37.897000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:27:37.897000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:27:37.897000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:27:37.899000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:27:37.899000 audit: BPF prog-id=42 op=LOAD Mar 17 18:27:37.899000 audit: BPF prog-id=36 op=UNLOAD Mar 17 18:27:37.899000 audit: BPF prog-id=37 op=UNLOAD Mar 17 18:27:37.899000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:27:37.899000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:27:37.899000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:27:37.899000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:27:37.899000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:27:37.899000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:27:37.899000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:27:37.899000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:27:37.900000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:27:37.900000 audit: BPF prog-id=43 op=LOAD Mar 17 18:27:37.900000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:27:37.900000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:27:37.900000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:27:37.900000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:27:37.900000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:27:37.900000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:27:37.900000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:27:37.900000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:27:37.900000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:27:37.900000 audit: BPF prog-id=44 op=LOAD Mar 17 18:27:37.900000 audit: BPF prog-id=24 op=UNLOAD Mar 17 18:27:37.900000 audit: BPF prog-id=25 op=UNLOAD Mar 17 18:27:37.901000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:27:37.901000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:27:37.901000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:27:37.901000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:27:37.901000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:27:37.901000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:27:37.901000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:27:37.901000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:27:37.901000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:27:37.901000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:27:37.901000 audit: BPF prog-id=45 op=LOAD Mar 17 18:27:37.901000 audit: BPF prog-id=26 op=UNLOAD Mar 17 18:27:37.901000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:27:37.901000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:27:37.901000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:27:37.901000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:27:37.901000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:27:37.901000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:27:37.901000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:27:37.901000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:27:37.901000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:27:37.901000 audit: BPF prog-id=46 op=LOAD Mar 17 18:27:37.901000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:27:37.901000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:27:37.901000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:27:37.901000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:27:37.901000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:27:37.901000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:27:37.901000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:27:37.901000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:27:37.901000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:27:37.901000 audit: BPF prog-id=47 op=LOAD Mar 17 18:27:37.901000 audit: BPF prog-id=27 op=UNLOAD Mar 17 18:27:37.901000 audit: BPF prog-id=28 op=UNLOAD Mar 17 18:27:37.901000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:27:37.901000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:27:37.901000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:27:37.901000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:27:37.901000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:27:37.901000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:27:37.901000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:27:37.901000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:27:37.901000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:27:37.902000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:27:37.902000 audit: BPF prog-id=48 op=LOAD Mar 17 18:27:37.902000 audit: BPF prog-id=38 op=UNLOAD Mar 17 18:27:37.903000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:27:37.903000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:27:37.903000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:27:37.903000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:27:37.903000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:27:37.903000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:27:37.903000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:27:37.903000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:27:37.903000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:27:37.903000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:27:37.903000 audit: BPF prog-id=49 op=LOAD Mar 17 18:27:37.903000 audit: BPF prog-id=34 op=UNLOAD Mar 17 18:27:37.904000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:27:37.904000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:27:37.904000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:27:37.904000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:27:37.904000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:27:37.904000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:27:37.904000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:27:37.904000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:27:37.904000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:27:37.904000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:27:37.904000 audit: BPF prog-id=50 op=LOAD Mar 17 18:27:37.904000 audit: BPF prog-id=33 op=UNLOAD Mar 17 18:27:37.905000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:27:37.905000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:27:37.905000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:27:37.905000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:27:37.905000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:27:37.905000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:27:37.905000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:27:37.905000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:27:37.905000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:27:37.906000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:27:37.906000 audit: BPF prog-id=51 op=LOAD Mar 17 18:27:37.906000 audit: BPF prog-id=29 op=UNLOAD Mar 17 18:27:37.906000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:27:37.906000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:27:37.906000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:27:37.906000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:27:37.906000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:27:37.906000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:27:37.906000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:27:37.906000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:27:37.906000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:27:37.906000 audit: BPF prog-id=52 op=LOAD Mar 17 18:27:37.906000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:27:37.906000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:27:37.906000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:27:37.906000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:27:37.906000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:27:37.906000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:27:37.906000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:27:37.906000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:27:37.906000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:27:37.906000 audit: BPF prog-id=53 op=LOAD Mar 17 18:27:37.906000 audit: BPF prog-id=30 op=UNLOAD Mar 17 18:27:37.906000 audit: BPF prog-id=31 op=UNLOAD Mar 17 18:27:37.906000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:27:37.906000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:27:37.906000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:27:37.906000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:27:37.906000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:27:37.906000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:27:37.906000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:27:37.906000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:27:37.906000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:27:37.907000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:27:37.907000 audit: BPF prog-id=54 op=LOAD Mar 17 18:27:37.907000 audit: BPF prog-id=32 op=UNLOAD Mar 17 18:27:37.916000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:27:37.917553 systemd[1]: Started kubelet.service. Mar 17 18:27:37.920661 systemd[1]: Stopping kubelet.service... Mar 17 18:27:37.920980 systemd[1]: kubelet.service: Deactivated successfully. Mar 17 18:27:37.921141 systemd[1]: Stopped kubelet.service. Mar 17 18:27:37.920000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:27:37.922631 systemd[1]: Starting kubelet.service... Mar 17 18:27:38.003876 systemd[1]: Started kubelet.service. Mar 17 18:27:38.003000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:27:38.037816 kubelet[1616]: Flag --container-runtime-endpoint has been deprecated, This parameter should be set via the config file specified by the Kubelet's --config flag. See https://kubernetes.io/docs/tasks/administer-cluster/kubelet-config-file/ for more information. Mar 17 18:27:38.037816 kubelet[1616]: Flag --pod-infra-container-image has been deprecated, will be removed in a future release. Image garbage collector will get sandbox image information from CRI. Mar 17 18:27:38.037816 kubelet[1616]: Flag --volume-plugin-dir has been deprecated, This parameter should be set via the config file specified by the Kubelet's --config flag. See https://kubernetes.io/docs/tasks/administer-cluster/kubelet-config-file/ for more information. Mar 17 18:27:38.038163 kubelet[1616]: I0317 18:27:38.037950 1616 server.go:206] "--pod-infra-container-image will not be pruned by the image garbage collector in kubelet and should also be set in the remote runtime" Mar 17 18:27:39.030961 kubelet[1616]: I0317 18:27:39.030921 1616 server.go:486] "Kubelet version" kubeletVersion="v1.31.0" Mar 17 18:27:39.031118 kubelet[1616]: I0317 18:27:39.031106 1616 server.go:488] "Golang settings" GOGC="" GOMAXPROCS="" GOTRACEBACK="" Mar 17 18:27:39.031443 kubelet[1616]: I0317 18:27:39.031405 1616 server.go:929] "Client rotation is on, will bootstrap in background" Mar 17 18:27:39.065037 kubelet[1616]: E0317 18:27:39.065007 1616 certificate_manager.go:562] "Unhandled Error" err="kubernetes.io/kube-apiserver-client-kubelet: Failed while requesting a signed certificate from the control plane: cannot create certificate signing request: Post \"https://10.0.0.111:6443/apis/certificates.k8s.io/v1/certificatesigningrequests\": dial tcp 10.0.0.111:6443: connect: connection refused" logger="UnhandledError" Mar 17 18:27:39.065879 kubelet[1616]: I0317 18:27:39.065861 1616 dynamic_cafile_content.go:160] "Starting controller" name="client-ca-bundle::/etc/kubernetes/pki/ca.crt" Mar 17 18:27:39.073419 kubelet[1616]: E0317 18:27:39.073393 1616 log.go:32] "RuntimeConfig from runtime service failed" err="rpc error: code = Unimplemented desc = unknown method RuntimeConfig for service runtime.v1.RuntimeService" Mar 17 18:27:39.073523 kubelet[1616]: I0317 18:27:39.073508 1616 server.go:1403] "CRI implementation should be updated to support RuntimeConfig when KubeletCgroupDriverFromCRI feature gate has been enabled. Falling back to using cgroupDriver from kubelet config." Mar 17 18:27:39.077159 kubelet[1616]: I0317 18:27:39.077133 1616 server.go:744] "--cgroups-per-qos enabled, but --cgroup-root was not specified. defaulting to /" Mar 17 18:27:39.078036 kubelet[1616]: I0317 18:27:39.078014 1616 swap_util.go:113] "Swap is on" /proc/swaps contents="Filename\t\t\t\tType\t\tSize\t\tUsed\t\tPriority" Mar 17 18:27:39.078184 kubelet[1616]: I0317 18:27:39.078163 1616 container_manager_linux.go:264] "Container manager verified user specified cgroup-root exists" cgroupRoot=[] Mar 17 18:27:39.078328 kubelet[1616]: I0317 18:27:39.078184 1616 container_manager_linux.go:269] "Creating Container Manager object based on Node Config" nodeConfig={"NodeName":"localhost","RuntimeCgroupsName":"","SystemCgroupsName":"","KubeletCgroupsName":"","KubeletOOMScoreAdj":-999,"ContainerRuntime":"","CgroupsPerQOS":true,"CgroupRoot":"/","CgroupDriver":"systemd","KubeletRootDir":"/var/lib/kubelet","ProtectKernelDefaults":false,"KubeReservedCgroupName":"","SystemReservedCgroupName":"","ReservedSystemCPUs":{},"EnforceNodeAllocatable":{"pods":{}},"KubeReserved":null,"SystemReserved":null,"HardEvictionThresholds":[{"Signal":"nodefs.inodesFree","Operator":"LessThan","Value":{"Quantity":null,"Percentage":0.05},"GracePeriod":0,"MinReclaim":null},{"Signal":"imagefs.available","Operator":"LessThan","Value":{"Quantity":null,"Percentage":0.15},"GracePeriod":0,"MinReclaim":null},{"Signal":"imagefs.inodesFree","Operator":"LessThan","Value":{"Quantity":null,"Percentage":0.05},"GracePeriod":0,"MinReclaim":null},{"Signal":"memory.available","Operator":"LessThan","Value":{"Quantity":"100Mi","Percentage":0},"GracePeriod":0,"MinReclaim":null},{"Signal":"nodefs.available","Operator":"LessThan","Value":{"Quantity":null,"Percentage":0.1},"GracePeriod":0,"MinReclaim":null}],"QOSReserved":{},"CPUManagerPolicy":"none","CPUManagerPolicyOptions":null,"TopologyManagerScope":"container","CPUManagerReconcilePeriod":10000000000,"ExperimentalMemoryManagerPolicy":"None","ExperimentalMemoryManagerReservedMemory":null,"PodPidsLimit":-1,"EnforceCPULimits":true,"CPUCFSQuotaPeriod":100000000,"TopologyManagerPolicy":"none","TopologyManagerPolicyOptions":null,"CgroupVersion":2} Mar 17 18:27:39.078482 kubelet[1616]: I0317 18:27:39.078470 1616 topology_manager.go:138] "Creating topology manager with none policy" Mar 17 18:27:39.078482 kubelet[1616]: I0317 18:27:39.078483 1616 container_manager_linux.go:300] "Creating device plugin manager" Mar 17 18:27:39.078657 kubelet[1616]: I0317 18:27:39.078645 1616 state_mem.go:36] "Initialized new in-memory state store" Mar 17 18:27:39.082990 kubelet[1616]: I0317 18:27:39.082945 1616 kubelet.go:408] "Attempting to sync node with API server" Mar 17 18:27:39.082990 kubelet[1616]: I0317 18:27:39.082972 1616 kubelet.go:303] "Adding static pod path" path="/etc/kubernetes/manifests" Mar 17 18:27:39.083078 kubelet[1616]: I0317 18:27:39.083068 1616 kubelet.go:314] "Adding apiserver pod source" Mar 17 18:27:39.083101 kubelet[1616]: I0317 18:27:39.083079 1616 apiserver.go:42] "Waiting for node sync before watching apiserver pods" Mar 17 18:27:39.086682 kubelet[1616]: I0317 18:27:39.086656 1616 kuberuntime_manager.go:262] "Container runtime initialized" containerRuntime="containerd" version="1.6.16" apiVersion="v1" Mar 17 18:27:39.086956 kubelet[1616]: W0317 18:27:39.086815 1616 reflector.go:561] k8s.io/client-go/informers/factory.go:160: failed to list *v1.Node: Get "https://10.0.0.111:6443/api/v1/nodes?fieldSelector=metadata.name%3Dlocalhost&limit=500&resourceVersion=0": dial tcp 10.0.0.111:6443: connect: connection refused Mar 17 18:27:39.086956 kubelet[1616]: E0317 18:27:39.086897 1616 reflector.go:158] "Unhandled Error" err="k8s.io/client-go/informers/factory.go:160: Failed to watch *v1.Node: failed to list *v1.Node: Get \"https://10.0.0.111:6443/api/v1/nodes?fieldSelector=metadata.name%3Dlocalhost&limit=500&resourceVersion=0\": dial tcp 10.0.0.111:6443: connect: connection refused" logger="UnhandledError" Mar 17 18:27:39.088568 kubelet[1616]: I0317 18:27:39.088510 1616 kubelet.go:837] "Not starting ClusterTrustBundle informer because we are in static kubelet mode" Mar 17 18:27:39.088630 kubelet[1616]: W0317 18:27:39.088571 1616 reflector.go:561] k8s.io/client-go/informers/factory.go:160: failed to list *v1.Service: Get "https://10.0.0.111:6443/api/v1/services?fieldSelector=spec.clusterIP%21%3DNone&limit=500&resourceVersion=0": dial tcp 10.0.0.111:6443: connect: connection refused Mar 17 18:27:39.088630 kubelet[1616]: E0317 18:27:39.088619 1616 reflector.go:158] "Unhandled Error" err="k8s.io/client-go/informers/factory.go:160: Failed to watch *v1.Service: failed to list *v1.Service: Get \"https://10.0.0.111:6443/api/v1/services?fieldSelector=spec.clusterIP%21%3DNone&limit=500&resourceVersion=0\": dial tcp 10.0.0.111:6443: connect: connection refused" logger="UnhandledError" Mar 17 18:27:39.089857 kubelet[1616]: W0317 18:27:39.089822 1616 probe.go:272] Flexvolume plugin directory at /opt/libexec/kubernetes/kubelet-plugins/volume/exec/ does not exist. Recreating. Mar 17 18:27:39.090502 kubelet[1616]: I0317 18:27:39.090485 1616 server.go:1269] "Started kubelet" Mar 17 18:27:39.090660 kubelet[1616]: I0317 18:27:39.090621 1616 ratelimit.go:55] "Setting rate limiting for endpoint" service="podresources" qps=100 burstTokens=10 Mar 17 18:27:39.095125 kubelet[1616]: I0317 18:27:39.095092 1616 server.go:236] "Starting to serve the podresources API" endpoint="unix:/var/lib/kubelet/pod-resources/kubelet.sock" Mar 17 18:27:39.095928 kubelet[1616]: I0317 18:27:39.095890 1616 server.go:163] "Starting to listen" address="0.0.0.0" port=10250 Mar 17 18:27:39.095000 audit[1616]: AVC avc: denied { mac_admin } for pid=1616 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:27:39.095000 audit: SELINUX_ERR op=setxattr invalid_context="system_u:object_r:container_file_t:s0" Mar 17 18:27:39.095000 audit[1616]: SYSCALL arch=c00000b7 syscall=5 success=no exit=-22 a0=4000a9c5d0 a1=40007bd908 a2=4000a9c5a0 a3=25 items=0 ppid=1 pid=1616 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/usr/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:27:39.095000 audit: PROCTITLE proctitle=2F7573722F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 Mar 17 18:27:39.097761 kubelet[1616]: I0317 18:27:39.097738 1616 kubelet.go:1430] "Unprivileged containerized plugins might not work, could not set selinux context on plugin registration dir" path="/var/lib/kubelet/plugins_registry" err="setxattr /var/lib/kubelet/plugins_registry: invalid argument" Mar 17 18:27:39.095000 audit[1616]: AVC avc: denied { mac_admin } for pid=1616 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:27:39.095000 audit: SELINUX_ERR op=setxattr invalid_context="system_u:object_r:container_file_t:s0" Mar 17 18:27:39.095000 audit[1616]: SYSCALL arch=c00000b7 syscall=5 success=no exit=-22 a0=4000164600 a1=40007bd920 a2=4000a9cde0 a3=25 items=0 ppid=1 pid=1616 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/usr/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:27:39.095000 audit: PROCTITLE proctitle=2F7573722F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 Mar 17 18:27:39.098134 kubelet[1616]: I0317 18:27:39.098115 1616 kubelet.go:1434] "Unprivileged containerized plugins might not work, could not set selinux context on plugins dir" path="/var/lib/kubelet/plugins" err="setxattr /var/lib/kubelet/plugins: invalid argument" Mar 17 18:27:39.098258 kubelet[1616]: I0317 18:27:39.098244 1616 fs_resource_analyzer.go:67] "Starting FS ResourceAnalyzer" Mar 17 18:27:39.099235 kubelet[1616]: I0317 18:27:39.098994 1616 dynamic_serving_content.go:135] "Starting controller" name="kubelet-server-cert-files::/var/lib/kubelet/pki/kubelet.crt::/var/lib/kubelet/pki/kubelet.key" Mar 17 18:27:39.101129 kubelet[1616]: E0317 18:27:39.101102 1616 kubelet_node_status.go:453] "Error getting the current node from lister" err="node \"localhost\" not found" Mar 17 18:27:39.101278 kubelet[1616]: I0317 18:27:39.101259 1616 volume_manager.go:289] "Starting Kubelet Volume Manager" Mar 17 18:27:39.101435 kubelet[1616]: I0317 18:27:39.101413 1616 desired_state_of_world_populator.go:146] "Desired state populator starts to run" Mar 17 18:27:39.101507 kubelet[1616]: I0317 18:27:39.101495 1616 reconciler.go:26] "Reconciler: start to sync state" Mar 17 18:27:39.101896 kubelet[1616]: W0317 18:27:39.101814 1616 reflector.go:561] k8s.io/client-go/informers/factory.go:160: failed to list *v1.CSIDriver: Get "https://10.0.0.111:6443/apis/storage.k8s.io/v1/csidrivers?limit=500&resourceVersion=0": dial tcp 10.0.0.111:6443: connect: connection refused Mar 17 18:27:39.101896 kubelet[1616]: E0317 18:27:39.101876 1616 reflector.go:158] "Unhandled Error" err="k8s.io/client-go/informers/factory.go:160: Failed to watch *v1.CSIDriver: failed to list *v1.CSIDriver: Get \"https://10.0.0.111:6443/apis/storage.k8s.io/v1/csidrivers?limit=500&resourceVersion=0\": dial tcp 10.0.0.111:6443: connect: connection refused" logger="UnhandledError" Mar 17 18:27:39.102211 kubelet[1616]: E0317 18:27:39.102167 1616 controller.go:145] "Failed to ensure lease exists, will retry" err="Get \"https://10.0.0.111:6443/apis/coordination.k8s.io/v1/namespaces/kube-node-lease/leases/localhost?timeout=10s\": dial tcp 10.0.0.111:6443: connect: connection refused" interval="200ms" Mar 17 18:27:39.102350 kubelet[1616]: I0317 18:27:39.102335 1616 factory.go:221] Registration of the systemd container factory successfully Mar 17 18:27:39.102416 kubelet[1616]: I0317 18:27:39.102402 1616 factory.go:219] Registration of the crio container factory failed: Get "http://%2Fvar%2Frun%2Fcrio%2Fcrio.sock/info": dial unix /var/run/crio/crio.sock: connect: no such file or directory Mar 17 18:27:39.105518 kubelet[1616]: E0317 18:27:39.103861 1616 kubelet.go:1478] "Image garbage collection failed once. Stats initialization may not have completed yet" err="invalid capacity 0 on image filesystem" Mar 17 18:27:39.105518 kubelet[1616]: I0317 18:27:39.104072 1616 factory.go:221] Registration of the containerd container factory successfully Mar 17 18:27:39.105626 kubelet[1616]: E0317 18:27:39.101592 1616 event.go:368] "Unable to write event (may retry after sleeping)" err="Post \"https://10.0.0.111:6443/api/v1/namespaces/default/events\": dial tcp 10.0.0.111:6443: connect: connection refused" event="&Event{ObjectMeta:{localhost.182daa7708f6ae8e default 0 0001-01-01 00:00:00 +0000 UTC map[] map[] [] [] []},InvolvedObject:ObjectReference{Kind:Node,Namespace:,Name:localhost,UID:localhost,APIVersion:,ResourceVersion:,FieldPath:,},Reason:Starting,Message:Starting kubelet.,Source:EventSource{Component:kubelet,Host:localhost,},FirstTimestamp:2025-03-17 18:27:39.090464398 +0000 UTC m=+1.083285023,LastTimestamp:2025-03-17 18:27:39.090464398 +0000 UTC m=+1.083285023,Count:1,Type:Normal,EventTime:0001-01-01 00:00:00 +0000 UTC,Series:nil,Action:,Related:nil,ReportingController:kubelet,ReportingInstance:localhost,}" Mar 17 18:27:39.106000 audit[1628]: NETFILTER_CFG table=mangle:26 family=2 entries=2 op=nft_register_chain pid=1628 subj=system_u:system_r:kernel_t:s0 comm="iptables" Mar 17 18:27:39.106000 audit[1628]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=136 a0=3 a1=ffffcc14d360 a2=0 a3=1 items=0 ppid=1616 pid=1628 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:27:39.106000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D49505441424C45532D48494E54002D74006D616E676C65 Mar 17 18:27:39.107000 audit[1629]: NETFILTER_CFG table=filter:27 family=2 entries=1 op=nft_register_chain pid=1629 subj=system_u:system_r:kernel_t:s0 comm="iptables" Mar 17 18:27:39.107000 audit[1629]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=100 a0=3 a1=fffffc18a530 a2=0 a3=1 items=0 ppid=1616 pid=1629 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:27:39.107000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D4649524557414C4C002D740066696C746572 Mar 17 18:27:39.109000 audit[1631]: NETFILTER_CFG table=filter:28 family=2 entries=2 op=nft_register_chain pid=1631 subj=system_u:system_r:kernel_t:s0 comm="iptables" Mar 17 18:27:39.109000 audit[1631]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=312 a0=3 a1=ffffd41a9650 a2=0 a3=1 items=0 ppid=1616 pid=1631 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:27:39.109000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D49004F5554505554002D740066696C746572002D6A004B5542452D4649524557414C4C Mar 17 18:27:39.112070 kubelet[1616]: I0317 18:27:39.112037 1616 server.go:460] "Adding debug handlers to kubelet server" Mar 17 18:27:39.111000 audit[1633]: NETFILTER_CFG table=filter:29 family=2 entries=2 op=nft_register_chain pid=1633 subj=system_u:system_r:kernel_t:s0 comm="iptables" Mar 17 18:27:39.111000 audit[1633]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=312 a0=3 a1=ffffe8c377f0 a2=0 a3=1 items=0 ppid=1616 pid=1633 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:27:39.111000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6A004B5542452D4649524557414C4C Mar 17 18:27:39.117000 audit[1638]: NETFILTER_CFG table=filter:30 family=2 entries=1 op=nft_register_rule pid=1638 subj=system_u:system_r:kernel_t:s0 comm="iptables" Mar 17 18:27:39.117000 audit[1638]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=924 a0=3 a1=ffffc4ef4d00 a2=0 a3=1 items=0 ppid=1616 pid=1638 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:27:39.117000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D41004B5542452D4649524557414C4C002D740066696C746572002D6D00636F6D6D656E74002D2D636F6D6D656E7400626C6F636B20696E636F6D696E67206C6F63616C6E657420636F6E6E656374696F6E73002D2D647374003132372E302E302E302F38 Mar 17 18:27:39.118465 kubelet[1616]: I0317 18:27:39.118437 1616 kubelet_network_linux.go:50] "Initialized iptables rules." protocol="IPv4" Mar 17 18:27:39.118000 audit[1640]: NETFILTER_CFG table=mangle:31 family=10 entries=2 op=nft_register_chain pid=1640 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Mar 17 18:27:39.118000 audit[1640]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=136 a0=3 a1=ffffd70b9ee0 a2=0 a3=1 items=0 ppid=1616 pid=1640 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:27:39.118000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D49505441424C45532D48494E54002D74006D616E676C65 Mar 17 18:27:39.119496 kubelet[1616]: I0317 18:27:39.119478 1616 kubelet_network_linux.go:50] "Initialized iptables rules." protocol="IPv6" Mar 17 18:27:39.119768 kubelet[1616]: I0317 18:27:39.119752 1616 status_manager.go:217] "Starting to sync pod status with apiserver" Mar 17 18:27:39.119888 kubelet[1616]: I0317 18:27:39.119873 1616 kubelet.go:2321] "Starting kubelet main sync loop" Mar 17 18:27:39.119983 kubelet[1616]: E0317 18:27:39.119967 1616 kubelet.go:2345] "Skipping pod synchronization" err="[container runtime status check may not have completed yet, PLEG is not healthy: pleg has yet to be successful]" Mar 17 18:27:39.119000 audit[1641]: NETFILTER_CFG table=mangle:32 family=2 entries=1 op=nft_register_chain pid=1641 subj=system_u:system_r:kernel_t:s0 comm="iptables" Mar 17 18:27:39.119000 audit[1641]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=104 a0=3 a1=ffffc41dce60 a2=0 a3=1 items=0 ppid=1616 pid=1641 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:27:39.119000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D4B5542454C45542D43414E415259002D74006D616E676C65 Mar 17 18:27:39.120000 audit[1642]: NETFILTER_CFG table=mangle:33 family=10 entries=1 op=nft_register_chain pid=1642 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Mar 17 18:27:39.120000 audit[1642]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=104 a0=3 a1=ffffc553bfb0 a2=0 a3=1 items=0 ppid=1616 pid=1642 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:27:39.120000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D4B5542454C45542D43414E415259002D74006D616E676C65 Mar 17 18:27:39.122274 kubelet[1616]: I0317 18:27:39.122242 1616 cpu_manager.go:214] "Starting CPU manager" policy="none" Mar 17 18:27:39.122274 kubelet[1616]: I0317 18:27:39.122261 1616 cpu_manager.go:215] "Reconciling" reconcilePeriod="10s" Mar 17 18:27:39.122353 kubelet[1616]: I0317 18:27:39.122286 1616 state_mem.go:36] "Initialized new in-memory state store" Mar 17 18:27:39.121000 audit[1643]: NETFILTER_CFG table=nat:34 family=2 entries=1 op=nft_register_chain pid=1643 subj=system_u:system_r:kernel_t:s0 comm="iptables" Mar 17 18:27:39.121000 audit[1643]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=100 a0=3 a1=ffffe4519450 a2=0 a3=1 items=0 ppid=1616 pid=1643 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:27:39.121000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D4B5542454C45542D43414E415259002D74006E6174 Mar 17 18:27:39.121000 audit[1648]: NETFILTER_CFG table=nat:35 family=10 entries=2 op=nft_register_chain pid=1648 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Mar 17 18:27:39.121000 audit[1648]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=128 a0=3 a1=ffffcd797ce0 a2=0 a3=1 items=0 ppid=1616 pid=1648 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:27:39.121000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D4B5542454C45542D43414E415259002D74006E6174 Mar 17 18:27:39.123134 kubelet[1616]: W0317 18:27:39.122926 1616 reflector.go:561] k8s.io/client-go/informers/factory.go:160: failed to list *v1.RuntimeClass: Get "https://10.0.0.111:6443/apis/node.k8s.io/v1/runtimeclasses?limit=500&resourceVersion=0": dial tcp 10.0.0.111:6443: connect: connection refused Mar 17 18:27:39.123134 kubelet[1616]: E0317 18:27:39.122973 1616 reflector.go:158] "Unhandled Error" err="k8s.io/client-go/informers/factory.go:160: Failed to watch *v1.RuntimeClass: failed to list *v1.RuntimeClass: Get \"https://10.0.0.111:6443/apis/node.k8s.io/v1/runtimeclasses?limit=500&resourceVersion=0\": dial tcp 10.0.0.111:6443: connect: connection refused" logger="UnhandledError" Mar 17 18:27:39.123000 audit[1650]: NETFILTER_CFG table=filter:36 family=10 entries=2 op=nft_register_chain pid=1650 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Mar 17 18:27:39.123000 audit[1650]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=136 a0=3 a1=ffffd97fddf0 a2=0 a3=1 items=0 ppid=1616 pid=1650 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:27:39.123000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D4B5542454C45542D43414E415259002D740066696C746572 Mar 17 18:27:39.123000 audit[1651]: NETFILTER_CFG table=filter:37 family=2 entries=1 op=nft_register_chain pid=1651 subj=system_u:system_r:kernel_t:s0 comm="iptables" Mar 17 18:27:39.123000 audit[1651]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=104 a0=3 a1=ffffeac7a740 a2=0 a3=1 items=0 ppid=1616 pid=1651 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:27:39.123000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D4B5542454C45542D43414E415259002D740066696C746572 Mar 17 18:27:39.201292 kubelet[1616]: E0317 18:27:39.201239 1616 kubelet_node_status.go:453] "Error getting the current node from lister" err="node \"localhost\" not found" Mar 17 18:27:39.220589 kubelet[1616]: E0317 18:27:39.220571 1616 kubelet.go:2345] "Skipping pod synchronization" err="container runtime status check may not have completed yet" Mar 17 18:27:39.226720 kubelet[1616]: I0317 18:27:39.226698 1616 policy_none.go:49] "None policy: Start" Mar 17 18:27:39.227524 kubelet[1616]: I0317 18:27:39.227506 1616 memory_manager.go:170] "Starting memorymanager" policy="None" Mar 17 18:27:39.227618 kubelet[1616]: I0317 18:27:39.227532 1616 state_mem.go:35] "Initializing new in-memory state store" Mar 17 18:27:39.232749 systemd[1]: Created slice kubepods.slice. Mar 17 18:27:39.237171 systemd[1]: Created slice kubepods-burstable.slice. Mar 17 18:27:39.239761 systemd[1]: Created slice kubepods-besteffort.slice. Mar 17 18:27:39.250594 kubelet[1616]: I0317 18:27:39.250546 1616 manager.go:510] "Failed to read data from checkpoint" checkpoint="kubelet_internal_checkpoint" err="checkpoint is not found" Mar 17 18:27:39.249000 audit[1616]: AVC avc: denied { mac_admin } for pid=1616 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:27:39.249000 audit: SELINUX_ERR op=setxattr invalid_context="system_u:object_r:container_file_t:s0" Mar 17 18:27:39.249000 audit[1616]: SYSCALL arch=c00000b7 syscall=5 success=no exit=-22 a0=4000d6af90 a1=4000d61968 a2=4000d6af60 a3=25 items=0 ppid=1 pid=1616 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/usr/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:27:39.249000 audit: PROCTITLE proctitle=2F7573722F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 Mar 17 18:27:39.250821 kubelet[1616]: I0317 18:27:39.250619 1616 server.go:88] "Unprivileged containerized plugins might not work. Could not set selinux context on socket dir" path="/var/lib/kubelet/device-plugins/" err="setxattr /var/lib/kubelet/device-plugins/: invalid argument" Mar 17 18:27:39.250821 kubelet[1616]: I0317 18:27:39.250725 1616 eviction_manager.go:189] "Eviction manager: starting control loop" Mar 17 18:27:39.250821 kubelet[1616]: I0317 18:27:39.250737 1616 container_log_manager.go:189] "Initializing container log rotate workers" workers=1 monitorPeriod="10s" Mar 17 18:27:39.251259 kubelet[1616]: I0317 18:27:39.251242 1616 plugin_manager.go:118] "Starting Kubelet Plugin Manager" Mar 17 18:27:39.252259 kubelet[1616]: E0317 18:27:39.252229 1616 eviction_manager.go:285] "Eviction manager: failed to get summary stats" err="failed to get node info: node \"localhost\" not found" Mar 17 18:27:39.303127 kubelet[1616]: E0317 18:27:39.303051 1616 controller.go:145] "Failed to ensure lease exists, will retry" err="Get \"https://10.0.0.111:6443/apis/coordination.k8s.io/v1/namespaces/kube-node-lease/leases/localhost?timeout=10s\": dial tcp 10.0.0.111:6443: connect: connection refused" interval="400ms" Mar 17 18:27:39.352363 kubelet[1616]: I0317 18:27:39.352336 1616 kubelet_node_status.go:72] "Attempting to register node" node="localhost" Mar 17 18:27:39.352793 kubelet[1616]: E0317 18:27:39.352764 1616 kubelet_node_status.go:95] "Unable to register node with API server" err="Post \"https://10.0.0.111:6443/api/v1/nodes\": dial tcp 10.0.0.111:6443: connect: connection refused" node="localhost" Mar 17 18:27:39.426936 systemd[1]: Created slice kubepods-burstable-podaa7e6f0f1f2c91c25fc26d78cab4851a.slice. Mar 17 18:27:39.446327 systemd[1]: Created slice kubepods-burstable-pod60762308083b5ef6c837b1be48ec53d6.slice. Mar 17 18:27:39.463909 systemd[1]: Created slice kubepods-burstable-pod6f32907a07e55aea05abdc5cd284a8d5.slice. Mar 17 18:27:39.504504 kubelet[1616]: I0317 18:27:39.504464 1616 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kubeconfig\" (UniqueName: \"kubernetes.io/host-path/6f32907a07e55aea05abdc5cd284a8d5-kubeconfig\") pod \"kube-scheduler-localhost\" (UID: \"6f32907a07e55aea05abdc5cd284a8d5\") " pod="kube-system/kube-scheduler-localhost" Mar 17 18:27:39.504504 kubelet[1616]: I0317 18:27:39.504499 1616 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"ca-certs\" (UniqueName: \"kubernetes.io/host-path/aa7e6f0f1f2c91c25fc26d78cab4851a-ca-certs\") pod \"kube-apiserver-localhost\" (UID: \"aa7e6f0f1f2c91c25fc26d78cab4851a\") " pod="kube-system/kube-apiserver-localhost" Mar 17 18:27:39.504672 kubelet[1616]: I0317 18:27:39.504517 1616 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"flexvolume-dir\" (UniqueName: \"kubernetes.io/host-path/60762308083b5ef6c837b1be48ec53d6-flexvolume-dir\") pod \"kube-controller-manager-localhost\" (UID: \"60762308083b5ef6c837b1be48ec53d6\") " pod="kube-system/kube-controller-manager-localhost" Mar 17 18:27:39.504672 kubelet[1616]: I0317 18:27:39.504535 1616 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kubeconfig\" (UniqueName: \"kubernetes.io/host-path/60762308083b5ef6c837b1be48ec53d6-kubeconfig\") pod \"kube-controller-manager-localhost\" (UID: \"60762308083b5ef6c837b1be48ec53d6\") " pod="kube-system/kube-controller-manager-localhost" Mar 17 18:27:39.504672 kubelet[1616]: I0317 18:27:39.504550 1616 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"usr-share-ca-certificates\" (UniqueName: \"kubernetes.io/host-path/60762308083b5ef6c837b1be48ec53d6-usr-share-ca-certificates\") pod \"kube-controller-manager-localhost\" (UID: \"60762308083b5ef6c837b1be48ec53d6\") " pod="kube-system/kube-controller-manager-localhost" Mar 17 18:27:39.504672 kubelet[1616]: I0317 18:27:39.504564 1616 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"k8s-certs\" (UniqueName: \"kubernetes.io/host-path/aa7e6f0f1f2c91c25fc26d78cab4851a-k8s-certs\") pod \"kube-apiserver-localhost\" (UID: \"aa7e6f0f1f2c91c25fc26d78cab4851a\") " pod="kube-system/kube-apiserver-localhost" Mar 17 18:27:39.504672 kubelet[1616]: I0317 18:27:39.504578 1616 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"usr-share-ca-certificates\" (UniqueName: \"kubernetes.io/host-path/aa7e6f0f1f2c91c25fc26d78cab4851a-usr-share-ca-certificates\") pod \"kube-apiserver-localhost\" (UID: \"aa7e6f0f1f2c91c25fc26d78cab4851a\") " pod="kube-system/kube-apiserver-localhost" Mar 17 18:27:39.504801 kubelet[1616]: I0317 18:27:39.504592 1616 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"ca-certs\" (UniqueName: \"kubernetes.io/host-path/60762308083b5ef6c837b1be48ec53d6-ca-certs\") pod \"kube-controller-manager-localhost\" (UID: \"60762308083b5ef6c837b1be48ec53d6\") " pod="kube-system/kube-controller-manager-localhost" Mar 17 18:27:39.504801 kubelet[1616]: I0317 18:27:39.504606 1616 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"k8s-certs\" (UniqueName: \"kubernetes.io/host-path/60762308083b5ef6c837b1be48ec53d6-k8s-certs\") pod \"kube-controller-manager-localhost\" (UID: \"60762308083b5ef6c837b1be48ec53d6\") " pod="kube-system/kube-controller-manager-localhost" Mar 17 18:27:39.554635 kubelet[1616]: I0317 18:27:39.554572 1616 kubelet_node_status.go:72] "Attempting to register node" node="localhost" Mar 17 18:27:39.555153 kubelet[1616]: E0317 18:27:39.555076 1616 kubelet_node_status.go:95] "Unable to register node with API server" err="Post \"https://10.0.0.111:6443/api/v1/nodes\": dial tcp 10.0.0.111:6443: connect: connection refused" node="localhost" Mar 17 18:27:39.703568 kubelet[1616]: E0317 18:27:39.703524 1616 controller.go:145] "Failed to ensure lease exists, will retry" err="Get \"https://10.0.0.111:6443/apis/coordination.k8s.io/v1/namespaces/kube-node-lease/leases/localhost?timeout=10s\": dial tcp 10.0.0.111:6443: connect: connection refused" interval="800ms" Mar 17 18:27:39.743050 kubelet[1616]: E0317 18:27:39.743005 1616 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Mar 17 18:27:39.743532 env[1216]: time="2025-03-17T18:27:39.743484868Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-apiserver-localhost,Uid:aa7e6f0f1f2c91c25fc26d78cab4851a,Namespace:kube-system,Attempt:0,}" Mar 17 18:27:39.748164 kubelet[1616]: E0317 18:27:39.748141 1616 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Mar 17 18:27:39.748639 env[1216]: time="2025-03-17T18:27:39.748594495Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-controller-manager-localhost,Uid:60762308083b5ef6c837b1be48ec53d6,Namespace:kube-system,Attempt:0,}" Mar 17 18:27:39.765851 kubelet[1616]: E0317 18:27:39.765820 1616 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Mar 17 18:27:39.766279 env[1216]: time="2025-03-17T18:27:39.766231091Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-scheduler-localhost,Uid:6f32907a07e55aea05abdc5cd284a8d5,Namespace:kube-system,Attempt:0,}" Mar 17 18:27:39.956793 kubelet[1616]: I0317 18:27:39.956698 1616 kubelet_node_status.go:72] "Attempting to register node" node="localhost" Mar 17 18:27:39.957117 kubelet[1616]: E0317 18:27:39.957086 1616 kubelet_node_status.go:95] "Unable to register node with API server" err="Post \"https://10.0.0.111:6443/api/v1/nodes\": dial tcp 10.0.0.111:6443: connect: connection refused" node="localhost" Mar 17 18:27:40.277529 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount1196041987.mount: Deactivated successfully. Mar 17 18:27:40.282026 env[1216]: time="2025-03-17T18:27:40.281985863Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/pause:3.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Mar 17 18:27:40.284204 env[1216]: time="2025-03-17T18:27:40.284160160Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause:3.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Mar 17 18:27:40.284945 env[1216]: time="2025-03-17T18:27:40.284920545Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause:3.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Mar 17 18:27:40.285671 env[1216]: time="2025-03-17T18:27:40.285645351Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:7d46a07936af93fcce097459055f93ab07331509aa55f4a2a90d95a3ace1850e,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Mar 17 18:27:40.288800 env[1216]: time="2025-03-17T18:27:40.288769859Z" level=info msg="ImageUpdate event &ImageUpdate{Name:sha256:7d46a07936af93fcce097459055f93ab07331509aa55f4a2a90d95a3ace1850e,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Mar 17 18:27:40.290384 env[1216]: time="2025-03-17T18:27:40.290352664Z" level=info msg="ImageUpdate event &ImageUpdate{Name:sha256:7d46a07936af93fcce097459055f93ab07331509aa55f4a2a90d95a3ace1850e,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Mar 17 18:27:40.292619 env[1216]: time="2025-03-17T18:27:40.292584793Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause:3.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Mar 17 18:27:40.294370 env[1216]: time="2025-03-17T18:27:40.294338854Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause:3.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Mar 17 18:27:40.296512 env[1216]: time="2025-03-17T18:27:40.296483094Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause:3.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Mar 17 18:27:40.297207 env[1216]: time="2025-03-17T18:27:40.297169918Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/pause@sha256:3d380ca8864549e74af4b29c10f9cb0956236dfb01c40ca076fb6c37253234db,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Mar 17 18:27:40.301395 env[1216]: time="2025-03-17T18:27:40.301355220Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause@sha256:3d380ca8864549e74af4b29c10f9cb0956236dfb01c40ca076fb6c37253234db,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Mar 17 18:27:40.306255 env[1216]: time="2025-03-17T18:27:40.305772932Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause@sha256:3d380ca8864549e74af4b29c10f9cb0956236dfb01c40ca076fb6c37253234db,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Mar 17 18:27:40.326036 env[1216]: time="2025-03-17T18:27:40.325961947Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Mar 17 18:27:40.326036 env[1216]: time="2025-03-17T18:27:40.326006092Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Mar 17 18:27:40.326134 env[1216]: time="2025-03-17T18:27:40.326068567Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Mar 17 18:27:40.326134 env[1216]: time="2025-03-17T18:27:40.326110670Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Mar 17 18:27:40.326191 env[1216]: time="2025-03-17T18:27:40.326123197Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Mar 17 18:27:40.326327 env[1216]: time="2025-03-17T18:27:40.326025182Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Mar 17 18:27:40.327397 env[1216]: time="2025-03-17T18:27:40.326617033Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Mar 17 18:27:40.327397 env[1216]: time="2025-03-17T18:27:40.326648371Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Mar 17 18:27:40.327397 env[1216]: time="2025-03-17T18:27:40.326685912Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Mar 17 18:27:40.327397 env[1216]: time="2025-03-17T18:27:40.326864772Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/1069f9f0f15a9e1b414dcab67cff23be2a2d1ac8086430e15c1f584db68860ac pid=1676 runtime=io.containerd.runc.v2 Mar 17 18:27:40.327548 env[1216]: time="2025-03-17T18:27:40.326520820Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/fc775ad90e7f5b477044dfb4d4f1f5cd417c84d913f179606e42ae96ee1d5241 pid=1671 runtime=io.containerd.runc.v2 Mar 17 18:27:40.327629 env[1216]: time="2025-03-17T18:27:40.326505731Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/6b7a4f6257c90bf691449a4638318a0b2e2bfdc7df6f674b985d6a34685521f3 pid=1674 runtime=io.containerd.runc.v2 Mar 17 18:27:40.338932 systemd[1]: Started cri-containerd-fc775ad90e7f5b477044dfb4d4f1f5cd417c84d913f179606e42ae96ee1d5241.scope. Mar 17 18:27:40.347692 systemd[1]: Started cri-containerd-1069f9f0f15a9e1b414dcab67cff23be2a2d1ac8086430e15c1f584db68860ac.scope. Mar 17 18:27:40.358014 systemd[1]: Started cri-containerd-6b7a4f6257c90bf691449a4638318a0b2e2bfdc7df6f674b985d6a34685521f3.scope. Mar 17 18:27:40.368431 kubelet[1616]: W0317 18:27:40.368319 1616 reflector.go:561] k8s.io/client-go/informers/factory.go:160: failed to list *v1.Node: Get "https://10.0.0.111:6443/api/v1/nodes?fieldSelector=metadata.name%3Dlocalhost&limit=500&resourceVersion=0": dial tcp 10.0.0.111:6443: connect: connection refused Mar 17 18:27:40.368431 kubelet[1616]: E0317 18:27:40.368396 1616 reflector.go:158] "Unhandled Error" err="k8s.io/client-go/informers/factory.go:160: Failed to watch *v1.Node: failed to list *v1.Node: Get \"https://10.0.0.111:6443/api/v1/nodes?fieldSelector=metadata.name%3Dlocalhost&limit=500&resourceVersion=0\": dial tcp 10.0.0.111:6443: connect: connection refused" logger="UnhandledError" Mar 17 18:27:40.383000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:27:40.383000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:27:40.383000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:27:40.383000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:27:40.383000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:27:40.383000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:27:40.383000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:27:40.383000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:27:40.383000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:27:40.384000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:27:40.384000 audit: BPF prog-id=55 op=LOAD Mar 17 18:27:40.384000 audit[1708]: AVC avc: denied { bpf } for pid=1708 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:27:40.384000 audit[1708]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000195b38 a2=10 a3=0 items=0 ppid=1674 pid=1708 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:27:40.384000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3662376134663632353763393062663639313434396134363338333138 Mar 17 18:27:40.384000 audit[1708]: AVC avc: denied { perfmon } for pid=1708 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:27:40.384000 audit[1708]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=0 a1=40001955a0 a2=3c a3=0 items=0 ppid=1674 pid=1708 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:27:40.384000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3662376134663632353763393062663639313434396134363338333138 Mar 17 18:27:40.384000 audit[1708]: AVC avc: denied { bpf } for pid=1708 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:27:40.384000 audit[1708]: AVC avc: denied { bpf } for pid=1708 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:27:40.384000 audit[1708]: AVC avc: denied { bpf } for pid=1708 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:27:40.384000 audit[1708]: AVC avc: denied { perfmon } for pid=1708 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:27:40.384000 audit[1708]: AVC avc: denied { perfmon } for pid=1708 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:27:40.384000 audit[1708]: AVC avc: denied { perfmon } for pid=1708 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:27:40.384000 audit[1708]: AVC avc: denied { perfmon } for pid=1708 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:27:40.384000 audit[1708]: AVC avc: denied { perfmon } for pid=1708 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:27:40.384000 audit[1708]: AVC avc: denied { bpf } for pid=1708 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:27:40.384000 audit[1708]: AVC avc: denied { bpf } for pid=1708 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:27:40.384000 audit: BPF prog-id=56 op=LOAD Mar 17 18:27:40.384000 audit[1708]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=5 a1=40001958e0 a2=78 a3=0 items=0 ppid=1674 pid=1708 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:27:40.384000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3662376134663632353763393062663639313434396134363338333138 Mar 17 18:27:40.386000 audit[1708]: AVC avc: denied { bpf } for pid=1708 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:27:40.386000 audit[1708]: AVC avc: denied { bpf } for pid=1708 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:27:40.386000 audit[1708]: AVC avc: denied { perfmon } for pid=1708 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:27:40.386000 audit[1708]: AVC avc: denied { perfmon } for pid=1708 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:27:40.386000 audit[1708]: AVC avc: denied { perfmon } for pid=1708 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:27:40.386000 audit[1708]: AVC avc: denied { perfmon } for pid=1708 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:27:40.386000 audit[1708]: AVC avc: denied { perfmon } for pid=1708 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:27:40.386000 audit[1708]: AVC avc: denied { bpf } for pid=1708 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:27:40.386000 audit[1708]: AVC avc: denied { bpf } for pid=1708 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:27:40.386000 audit: BPF prog-id=57 op=LOAD Mar 17 18:27:40.386000 audit[1708]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=17 a0=5 a1=4000195670 a2=78 a3=0 items=0 ppid=1674 pid=1708 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:27:40.386000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3662376134663632353763393062663639313434396134363338333138 Mar 17 18:27:40.387000 audit: BPF prog-id=57 op=UNLOAD Mar 17 18:27:40.387000 audit: BPF prog-id=56 op=UNLOAD Mar 17 18:27:40.388000 audit[1708]: AVC avc: denied { bpf } for pid=1708 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:27:40.388000 audit[1708]: AVC avc: denied { bpf } for pid=1708 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:27:40.388000 audit[1708]: AVC avc: denied { bpf } for pid=1708 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:27:40.388000 audit[1708]: AVC avc: denied { perfmon } for pid=1708 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:27:40.388000 audit[1708]: AVC avc: denied { perfmon } for pid=1708 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:27:40.388000 audit[1708]: AVC avc: denied { perfmon } for pid=1708 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:27:40.388000 audit[1708]: AVC avc: denied { perfmon } for pid=1708 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:27:40.388000 audit[1708]: AVC avc: denied { perfmon } for pid=1708 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:27:40.388000 audit[1708]: AVC avc: denied { bpf } for pid=1708 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:27:40.388000 audit[1708]: AVC avc: denied { bpf } for pid=1708 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:27:40.388000 audit: BPF prog-id=58 op=LOAD Mar 17 18:27:40.388000 audit[1708]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=5 a1=4000195b40 a2=78 a3=0 items=0 ppid=1674 pid=1708 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:27:40.388000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3662376134663632353763393062663639313434396134363338333138 Mar 17 18:27:40.393000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:27:40.393000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:27:40.393000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:27:40.393000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:27:40.393000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:27:40.393000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:27:40.393000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:27:40.393000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:27:40.393000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:27:40.394000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:27:40.394000 audit: BPF prog-id=59 op=LOAD Mar 17 18:27:40.394000 audit[1706]: AVC avc: denied { bpf } for pid=1706 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:27:40.394000 audit[1706]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=40001bfb38 a2=10 a3=0 items=0 ppid=1676 pid=1706 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:27:40.394000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3130363966396630663135613965316234313464636162363763666632 Mar 17 18:27:40.394000 audit[1706]: AVC avc: denied { perfmon } for pid=1706 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:27:40.394000 audit[1706]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001bf5a0 a2=3c a3=0 items=0 ppid=1676 pid=1706 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:27:40.394000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3130363966396630663135613965316234313464636162363763666632 Mar 17 18:27:40.394000 audit[1706]: AVC avc: denied { bpf } for pid=1706 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:27:40.394000 audit[1706]: AVC avc: denied { bpf } for pid=1706 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:27:40.394000 audit[1706]: AVC avc: denied { bpf } for pid=1706 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:27:40.394000 audit[1706]: AVC avc: denied { perfmon } for pid=1706 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:27:40.394000 audit[1706]: AVC avc: denied { perfmon } for pid=1706 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:27:40.394000 audit[1706]: AVC avc: denied { perfmon } for pid=1706 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:27:40.394000 audit[1706]: AVC avc: denied { perfmon } for pid=1706 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:27:40.394000 audit[1706]: AVC avc: denied { perfmon } for pid=1706 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:27:40.394000 audit[1706]: AVC avc: denied { bpf } for pid=1706 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:27:40.394000 audit[1706]: AVC avc: denied { bpf } for pid=1706 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:27:40.394000 audit: BPF prog-id=60 op=LOAD Mar 17 18:27:40.394000 audit[1706]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001bf8e0 a2=78 a3=0 items=0 ppid=1676 pid=1706 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:27:40.394000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3130363966396630663135613965316234313464636162363763666632 Mar 17 18:27:40.396000 audit[1706]: AVC avc: denied { bpf } for pid=1706 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:27:40.396000 audit[1706]: AVC avc: denied { bpf } for pid=1706 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:27:40.396000 audit[1706]: AVC avc: denied { perfmon } for pid=1706 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:27:40.396000 audit[1706]: AVC avc: denied { perfmon } for pid=1706 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:27:40.396000 audit[1706]: AVC avc: denied { perfmon } for pid=1706 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:27:40.396000 audit[1706]: AVC avc: denied { perfmon } for pid=1706 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:27:40.396000 audit[1706]: AVC avc: denied { perfmon } for pid=1706 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:27:40.396000 audit[1706]: AVC avc: denied { bpf } for pid=1706 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:27:40.396000 audit[1706]: AVC avc: denied { bpf } for pid=1706 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:27:40.396000 audit: BPF prog-id=61 op=LOAD Mar 17 18:27:40.396000 audit[1706]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=40001bf670 a2=78 a3=0 items=0 ppid=1676 pid=1706 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:27:40.396000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3130363966396630663135613965316234313464636162363763666632 Mar 17 18:27:40.396000 audit: BPF prog-id=61 op=UNLOAD Mar 17 18:27:40.396000 audit: BPF prog-id=60 op=UNLOAD Mar 17 18:27:40.396000 audit[1706]: AVC avc: denied { bpf } for pid=1706 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:27:40.396000 audit[1706]: AVC avc: denied { bpf } for pid=1706 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:27:40.396000 audit[1706]: AVC avc: denied { bpf } for pid=1706 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:27:40.396000 audit[1706]: AVC avc: denied { perfmon } for pid=1706 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:27:40.396000 audit[1706]: AVC avc: denied { perfmon } for pid=1706 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:27:40.396000 audit[1706]: AVC avc: denied { perfmon } for pid=1706 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:27:40.396000 audit[1706]: AVC avc: denied { perfmon } for pid=1706 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:27:40.396000 audit[1706]: AVC avc: denied { perfmon } for pid=1706 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:27:40.396000 audit[1706]: AVC avc: denied { bpf } for pid=1706 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:27:40.396000 audit[1706]: AVC avc: denied { bpf } for pid=1706 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:27:40.396000 audit: BPF prog-id=62 op=LOAD Mar 17 18:27:40.396000 audit[1706]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001bfb40 a2=78 a3=0 items=0 ppid=1676 pid=1706 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:27:40.396000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3130363966396630663135613965316234313464636162363763666632 Mar 17 18:27:40.412000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:27:40.412000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:27:40.412000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:27:40.412000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:27:40.412000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:27:40.412000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:27:40.412000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:27:40.412000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:27:40.412000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:27:40.412000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:27:40.412000 audit: BPF prog-id=63 op=LOAD Mar 17 18:27:40.413000 audit[1705]: AVC avc: denied { bpf } for pid=1705 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:27:40.413000 audit[1705]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000151b38 a2=10 a3=0 items=0 ppid=1671 pid=1705 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:27:40.413000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6663373735616439306537663562343737303434646662346434663166 Mar 17 18:27:40.413000 audit[1705]: AVC avc: denied { perfmon } for pid=1705 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:27:40.413000 audit[1705]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001515a0 a2=3c a3=0 items=0 ppid=1671 pid=1705 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:27:40.413000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6663373735616439306537663562343737303434646662346434663166 Mar 17 18:27:40.413000 audit[1705]: AVC avc: denied { bpf } for pid=1705 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:27:40.413000 audit[1705]: AVC avc: denied { bpf } for pid=1705 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:27:40.413000 audit[1705]: AVC avc: denied { bpf } for pid=1705 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:27:40.413000 audit[1705]: AVC avc: denied { perfmon } for pid=1705 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:27:40.413000 audit[1705]: AVC avc: denied { perfmon } for pid=1705 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:27:40.413000 audit[1705]: AVC avc: denied { perfmon } for pid=1705 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:27:40.413000 audit[1705]: AVC avc: denied { perfmon } for pid=1705 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:27:40.413000 audit[1705]: AVC avc: denied { perfmon } for pid=1705 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:27:40.413000 audit[1705]: AVC avc: denied { bpf } for pid=1705 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:27:40.413000 audit[1705]: AVC avc: denied { bpf } for pid=1705 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:27:40.413000 audit: BPF prog-id=64 op=LOAD Mar 17 18:27:40.413000 audit[1705]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001518e0 a2=78 a3=0 items=0 ppid=1671 pid=1705 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:27:40.413000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6663373735616439306537663562343737303434646662346434663166 Mar 17 18:27:40.414000 audit[1705]: AVC avc: denied { bpf } for pid=1705 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:27:40.414000 audit[1705]: AVC avc: denied { bpf } for pid=1705 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:27:40.414000 audit[1705]: AVC avc: denied { perfmon } for pid=1705 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:27:40.414000 audit[1705]: AVC avc: denied { perfmon } for pid=1705 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:27:40.414000 audit[1705]: AVC avc: denied { perfmon } for pid=1705 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:27:40.414000 audit[1705]: AVC avc: denied { perfmon } for pid=1705 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:27:40.414000 audit[1705]: AVC avc: denied { perfmon } for pid=1705 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:27:40.414000 audit[1705]: AVC avc: denied { bpf } for pid=1705 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:27:40.414000 audit[1705]: AVC avc: denied { bpf } for pid=1705 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:27:40.414000 audit: BPF prog-id=65 op=LOAD Mar 17 18:27:40.414000 audit[1705]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000151670 a2=78 a3=0 items=0 ppid=1671 pid=1705 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:27:40.414000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6663373735616439306537663562343737303434646662346434663166 Mar 17 18:27:40.415000 audit: BPF prog-id=65 op=UNLOAD Mar 17 18:27:40.415000 audit: BPF prog-id=64 op=UNLOAD Mar 17 18:27:40.415000 audit[1705]: AVC avc: denied { bpf } for pid=1705 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:27:40.415000 audit[1705]: AVC avc: denied { bpf } for pid=1705 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:27:40.415000 audit[1705]: AVC avc: denied { bpf } for pid=1705 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:27:40.415000 audit[1705]: AVC avc: denied { perfmon } for pid=1705 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:27:40.415000 audit[1705]: AVC avc: denied { perfmon } for pid=1705 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:27:40.415000 audit[1705]: AVC avc: denied { perfmon } for pid=1705 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:27:40.415000 audit[1705]: AVC avc: denied { perfmon } for pid=1705 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:27:40.415000 audit[1705]: AVC avc: denied { perfmon } for pid=1705 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:27:40.415000 audit[1705]: AVC avc: denied { bpf } for pid=1705 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:27:40.415000 audit[1705]: AVC avc: denied { bpf } for pid=1705 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:27:40.415000 audit: BPF prog-id=66 op=LOAD Mar 17 18:27:40.415000 audit[1705]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000151b40 a2=78 a3=0 items=0 ppid=1671 pid=1705 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:27:40.415000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6663373735616439306537663562343737303434646662346434663166 Mar 17 18:27:40.417239 env[1216]: time="2025-03-17T18:27:40.416374451Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-controller-manager-localhost,Uid:60762308083b5ef6c837b1be48ec53d6,Namespace:kube-system,Attempt:0,} returns sandbox id \"6b7a4f6257c90bf691449a4638318a0b2e2bfdc7df6f674b985d6a34685521f3\"" Mar 17 18:27:40.420159 kubelet[1616]: E0317 18:27:40.418317 1616 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Mar 17 18:27:40.422235 env[1216]: time="2025-03-17T18:27:40.422181860Z" level=info msg="CreateContainer within sandbox \"6b7a4f6257c90bf691449a4638318a0b2e2bfdc7df6f674b985d6a34685521f3\" for container &ContainerMetadata{Name:kube-controller-manager,Attempt:0,}" Mar 17 18:27:40.432604 env[1216]: time="2025-03-17T18:27:40.432565149Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-apiserver-localhost,Uid:aa7e6f0f1f2c91c25fc26d78cab4851a,Namespace:kube-system,Attempt:0,} returns sandbox id \"fc775ad90e7f5b477044dfb4d4f1f5cd417c84d913f179606e42ae96ee1d5241\"" Mar 17 18:27:40.433182 kubelet[1616]: E0317 18:27:40.433155 1616 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Mar 17 18:27:40.434507 env[1216]: time="2025-03-17T18:27:40.434360674Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-scheduler-localhost,Uid:6f32907a07e55aea05abdc5cd284a8d5,Namespace:kube-system,Attempt:0,} returns sandbox id \"1069f9f0f15a9e1b414dcab67cff23be2a2d1ac8086430e15c1f584db68860ac\"" Mar 17 18:27:40.435244 kubelet[1616]: E0317 18:27:40.435117 1616 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Mar 17 18:27:40.435792 env[1216]: time="2025-03-17T18:27:40.435629063Z" level=info msg="CreateContainer within sandbox \"fc775ad90e7f5b477044dfb4d4f1f5cd417c84d913f179606e42ae96ee1d5241\" for container &ContainerMetadata{Name:kube-apiserver,Attempt:0,}" Mar 17 18:27:40.437950 env[1216]: time="2025-03-17T18:27:40.437909219Z" level=info msg="CreateContainer within sandbox \"1069f9f0f15a9e1b414dcab67cff23be2a2d1ac8086430e15c1f584db68860ac\" for container &ContainerMetadata{Name:kube-scheduler,Attempt:0,}" Mar 17 18:27:40.444122 env[1216]: time="2025-03-17T18:27:40.444079031Z" level=info msg="CreateContainer within sandbox \"6b7a4f6257c90bf691449a4638318a0b2e2bfdc7df6f674b985d6a34685521f3\" for &ContainerMetadata{Name:kube-controller-manager,Attempt:0,} returns container id \"c2c8b7306f25cfa9faa2d0e9efcedf43cfacec172bf4b45bea4350cc06ce859f\"" Mar 17 18:27:40.444792 env[1216]: time="2025-03-17T18:27:40.444764134Z" level=info msg="StartContainer for \"c2c8b7306f25cfa9faa2d0e9efcedf43cfacec172bf4b45bea4350cc06ce859f\"" Mar 17 18:27:40.446200 kubelet[1616]: W0317 18:27:40.446139 1616 reflector.go:561] k8s.io/client-go/informers/factory.go:160: failed to list *v1.CSIDriver: Get "https://10.0.0.111:6443/apis/storage.k8s.io/v1/csidrivers?limit=500&resourceVersion=0": dial tcp 10.0.0.111:6443: connect: connection refused Mar 17 18:27:40.446280 kubelet[1616]: E0317 18:27:40.446213 1616 reflector.go:158] "Unhandled Error" err="k8s.io/client-go/informers/factory.go:160: Failed to watch *v1.CSIDriver: failed to list *v1.CSIDriver: Get \"https://10.0.0.111:6443/apis/storage.k8s.io/v1/csidrivers?limit=500&resourceVersion=0\": dial tcp 10.0.0.111:6443: connect: connection refused" logger="UnhandledError" Mar 17 18:27:40.451338 env[1216]: time="2025-03-17T18:27:40.451304793Z" level=info msg="CreateContainer within sandbox \"fc775ad90e7f5b477044dfb4d4f1f5cd417c84d913f179606e42ae96ee1d5241\" for &ContainerMetadata{Name:kube-apiserver,Attempt:0,} returns container id \"36b8a88a2934ffbde14f524c8870c1903e19ef6c93556b14c5dc1fe995ae5f80\"" Mar 17 18:27:40.451900 env[1216]: time="2025-03-17T18:27:40.451812718Z" level=info msg="StartContainer for \"36b8a88a2934ffbde14f524c8870c1903e19ef6c93556b14c5dc1fe995ae5f80\"" Mar 17 18:27:40.454982 env[1216]: time="2025-03-17T18:27:40.454946231Z" level=info msg="CreateContainer within sandbox \"1069f9f0f15a9e1b414dcab67cff23be2a2d1ac8086430e15c1f584db68860ac\" for &ContainerMetadata{Name:kube-scheduler,Attempt:0,} returns container id \"e7eb2ce826f9474ba9797bc7ec8ca078c25c617cd54ae41ae74105471d9d2fb0\"" Mar 17 18:27:40.455620 env[1216]: time="2025-03-17T18:27:40.455521272Z" level=info msg="StartContainer for \"e7eb2ce826f9474ba9797bc7ec8ca078c25c617cd54ae41ae74105471d9d2fb0\"" Mar 17 18:27:40.462662 systemd[1]: Started cri-containerd-c2c8b7306f25cfa9faa2d0e9efcedf43cfacec172bf4b45bea4350cc06ce859f.scope. Mar 17 18:27:40.470146 systemd[1]: Started cri-containerd-e7eb2ce826f9474ba9797bc7ec8ca078c25c617cd54ae41ae74105471d9d2fb0.scope. Mar 17 18:27:40.487440 kubelet[1616]: W0317 18:27:40.487363 1616 reflector.go:561] k8s.io/client-go/informers/factory.go:160: failed to list *v1.RuntimeClass: Get "https://10.0.0.111:6443/apis/node.k8s.io/v1/runtimeclasses?limit=500&resourceVersion=0": dial tcp 10.0.0.111:6443: connect: connection refused Mar 17 18:27:40.487521 kubelet[1616]: E0317 18:27:40.487443 1616 reflector.go:158] "Unhandled Error" err="k8s.io/client-go/informers/factory.go:160: Failed to watch *v1.RuntimeClass: failed to list *v1.RuntimeClass: Get \"https://10.0.0.111:6443/apis/node.k8s.io/v1/runtimeclasses?limit=500&resourceVersion=0\": dial tcp 10.0.0.111:6443: connect: connection refused" logger="UnhandledError" Mar 17 18:27:40.488557 systemd[1]: Started cri-containerd-36b8a88a2934ffbde14f524c8870c1903e19ef6c93556b14c5dc1fe995ae5f80.scope. Mar 17 18:27:40.504747 kubelet[1616]: E0317 18:27:40.504696 1616 controller.go:145] "Failed to ensure lease exists, will retry" err="Get \"https://10.0.0.111:6443/apis/coordination.k8s.io/v1/namespaces/kube-node-lease/leases/localhost?timeout=10s\": dial tcp 10.0.0.111:6443: connect: connection refused" interval="1.6s" Mar 17 18:27:40.506000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:27:40.506000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:27:40.506000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:27:40.506000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:27:40.506000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:27:40.506000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:27:40.506000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:27:40.506000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:27:40.506000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:27:40.507000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:27:40.507000 audit: BPF prog-id=67 op=LOAD Mar 17 18:27:40.507000 audit[1822]: AVC avc: denied { bpf } for pid=1822 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:27:40.507000 audit[1822]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000145b38 a2=10 a3=0 items=0 ppid=1676 pid=1822 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:27:40.507000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6537656232636538323666393437346261393739376263376563386361 Mar 17 18:27:40.507000 audit[1822]: AVC avc: denied { perfmon } for pid=1822 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:27:40.507000 audit[1822]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001455a0 a2=3c a3=0 items=0 ppid=1676 pid=1822 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:27:40.507000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6537656232636538323666393437346261393739376263376563386361 Mar 17 18:27:40.507000 audit[1822]: AVC avc: denied { bpf } for pid=1822 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:27:40.507000 audit[1822]: AVC avc: denied { bpf } for pid=1822 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:27:40.507000 audit[1822]: AVC avc: denied { bpf } for pid=1822 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:27:40.507000 audit[1822]: AVC avc: denied { perfmon } for pid=1822 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:27:40.507000 audit[1822]: AVC avc: denied { perfmon } for pid=1822 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:27:40.507000 audit[1822]: AVC avc: denied { perfmon } for pid=1822 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:27:40.507000 audit[1822]: AVC avc: denied { perfmon } for pid=1822 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:27:40.507000 audit[1822]: AVC avc: denied { perfmon } for pid=1822 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:27:40.507000 audit[1822]: AVC avc: denied { bpf } for pid=1822 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:27:40.507000 audit[1822]: AVC avc: denied { bpf } for pid=1822 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:27:40.507000 audit: BPF prog-id=68 op=LOAD Mar 17 18:27:40.507000 audit[1822]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001458e0 a2=78 a3=0 items=0 ppid=1676 pid=1822 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:27:40.507000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6537656232636538323666393437346261393739376263376563386361 Mar 17 18:27:40.507000 audit[1822]: AVC avc: denied { bpf } for pid=1822 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:27:40.507000 audit[1822]: AVC avc: denied { bpf } for pid=1822 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:27:40.507000 audit[1822]: AVC avc: denied { perfmon } for pid=1822 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:27:40.507000 audit[1822]: AVC avc: denied { perfmon } for pid=1822 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:27:40.507000 audit[1822]: AVC avc: denied { perfmon } for pid=1822 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:27:40.507000 audit[1822]: AVC avc: denied { perfmon } for pid=1822 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:27:40.507000 audit[1822]: AVC avc: denied { perfmon } for pid=1822 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:27:40.507000 audit[1822]: AVC avc: denied { bpf } for pid=1822 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:27:40.507000 audit[1822]: AVC avc: denied { bpf } for pid=1822 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:27:40.507000 audit: BPF prog-id=69 op=LOAD Mar 17 18:27:40.507000 audit[1822]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000145670 a2=78 a3=0 items=0 ppid=1676 pid=1822 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:27:40.507000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6537656232636538323666393437346261393739376263376563386361 Mar 17 18:27:40.507000 audit: BPF prog-id=69 op=UNLOAD Mar 17 18:27:40.507000 audit: BPF prog-id=68 op=UNLOAD Mar 17 18:27:40.507000 audit[1822]: AVC avc: denied { bpf } for pid=1822 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:27:40.507000 audit[1822]: AVC avc: denied { bpf } for pid=1822 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:27:40.507000 audit[1822]: AVC avc: denied { bpf } for pid=1822 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:27:40.507000 audit[1822]: AVC avc: denied { perfmon } for pid=1822 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:27:40.507000 audit[1822]: AVC avc: denied { perfmon } for pid=1822 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:27:40.507000 audit[1822]: AVC avc: denied { perfmon } for pid=1822 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:27:40.507000 audit[1822]: AVC avc: denied { perfmon } for pid=1822 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:27:40.507000 audit[1822]: AVC avc: denied { perfmon } for pid=1822 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:27:40.507000 audit[1822]: AVC avc: denied { bpf } for pid=1822 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:27:40.507000 audit[1822]: AVC avc: denied { bpf } for pid=1822 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:27:40.507000 audit: BPF prog-id=70 op=LOAD Mar 17 18:27:40.507000 audit[1822]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000145b40 a2=78 a3=0 items=0 ppid=1676 pid=1822 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:27:40.507000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6537656232636538323666393437346261393739376263376563386361 Mar 17 18:27:40.508000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:27:40.508000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:27:40.508000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:27:40.508000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:27:40.508000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:27:40.508000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:27:40.508000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:27:40.508000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:27:40.508000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:27:40.508000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:27:40.508000 audit: BPF prog-id=71 op=LOAD Mar 17 18:27:40.509000 audit[1793]: AVC avc: denied { bpf } for pid=1793 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:27:40.509000 audit[1793]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000195b38 a2=10 a3=0 items=0 ppid=1674 pid=1793 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:27:40.509000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6332633862373330366632356366613966616132643065396566636564 Mar 17 18:27:40.509000 audit[1793]: AVC avc: denied { perfmon } for pid=1793 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:27:40.509000 audit[1793]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001955a0 a2=3c a3=0 items=0 ppid=1674 pid=1793 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:27:40.509000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6332633862373330366632356366613966616132643065396566636564 Mar 17 18:27:40.510000 audit[1793]: AVC avc: denied { bpf } for pid=1793 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:27:40.510000 audit[1793]: AVC avc: denied { bpf } for pid=1793 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:27:40.510000 audit[1793]: AVC avc: denied { bpf } for pid=1793 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:27:40.510000 audit[1793]: AVC avc: denied { perfmon } for pid=1793 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:27:40.510000 audit[1793]: AVC avc: denied { perfmon } for pid=1793 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:27:40.510000 audit[1793]: AVC avc: denied { perfmon } for pid=1793 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:27:40.510000 audit[1793]: AVC avc: denied { perfmon } for pid=1793 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:27:40.510000 audit[1793]: AVC avc: denied { perfmon } for pid=1793 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:27:40.510000 audit[1793]: AVC avc: denied { bpf } for pid=1793 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:27:40.510000 audit[1793]: AVC avc: denied { bpf } for pid=1793 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:27:40.510000 audit: BPF prog-id=72 op=LOAD Mar 17 18:27:40.510000 audit[1793]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001958e0 a2=78 a3=0 items=0 ppid=1674 pid=1793 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:27:40.510000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6332633862373330366632356366613966616132643065396566636564 Mar 17 18:27:40.510000 audit[1793]: AVC avc: denied { bpf } for pid=1793 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:27:40.510000 audit[1793]: AVC avc: denied { bpf } for pid=1793 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:27:40.510000 audit[1793]: AVC avc: denied { perfmon } for pid=1793 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:27:40.510000 audit[1793]: AVC avc: denied { perfmon } for pid=1793 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:27:40.510000 audit[1793]: AVC avc: denied { perfmon } for pid=1793 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:27:40.510000 audit[1793]: AVC avc: denied { perfmon } for pid=1793 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:27:40.510000 audit[1793]: AVC avc: denied { perfmon } for pid=1793 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:27:40.510000 audit[1793]: AVC avc: denied { bpf } for pid=1793 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:27:40.510000 audit[1793]: AVC avc: denied { bpf } for pid=1793 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:27:40.510000 audit: BPF prog-id=73 op=LOAD Mar 17 18:27:40.510000 audit[1793]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000195670 a2=78 a3=0 items=0 ppid=1674 pid=1793 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:27:40.510000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6332633862373330366632356366613966616132643065396566636564 Mar 17 18:27:40.511000 audit: BPF prog-id=73 op=UNLOAD Mar 17 18:27:40.511000 audit: BPF prog-id=72 op=UNLOAD Mar 17 18:27:40.511000 audit[1793]: AVC avc: denied { bpf } for pid=1793 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:27:40.511000 audit[1793]: AVC avc: denied { bpf } for pid=1793 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:27:40.511000 audit[1793]: AVC avc: denied { bpf } for pid=1793 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:27:40.511000 audit[1793]: AVC avc: denied { perfmon } for pid=1793 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:27:40.511000 audit[1793]: AVC avc: denied { perfmon } for pid=1793 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:27:40.511000 audit[1793]: AVC avc: denied { perfmon } for pid=1793 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:27:40.511000 audit[1793]: AVC avc: denied { perfmon } for pid=1793 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:27:40.511000 audit[1793]: AVC avc: denied { perfmon } for pid=1793 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:27:40.511000 audit[1793]: AVC avc: denied { bpf } for pid=1793 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:27:40.511000 audit[1793]: AVC avc: denied { bpf } for pid=1793 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:27:40.511000 audit: BPF prog-id=74 op=LOAD Mar 17 18:27:40.511000 audit[1793]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000195b40 a2=78 a3=0 items=0 ppid=1674 pid=1793 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:27:40.511000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6332633862373330366632356366613966616132643065396566636564 Mar 17 18:27:40.512000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:27:40.512000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:27:40.512000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:27:40.512000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:27:40.512000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:27:40.512000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:27:40.512000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:27:40.512000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:27:40.512000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:27:40.513000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:27:40.513000 audit: BPF prog-id=75 op=LOAD Mar 17 18:27:40.513000 audit[1810]: AVC avc: denied { bpf } for pid=1810 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:27:40.513000 audit[1810]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000195b38 a2=10 a3=0 items=0 ppid=1671 pid=1810 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:27:40.513000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3336623861383861323933346666626465313466353234633838373063 Mar 17 18:27:40.513000 audit[1810]: AVC avc: denied { perfmon } for pid=1810 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:27:40.513000 audit[1810]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001955a0 a2=3c a3=0 items=0 ppid=1671 pid=1810 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:27:40.513000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3336623861383861323933346666626465313466353234633838373063 Mar 17 18:27:40.513000 audit[1810]: AVC avc: denied { bpf } for pid=1810 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:27:40.513000 audit[1810]: AVC avc: denied { bpf } for pid=1810 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:27:40.513000 audit[1810]: AVC avc: denied { bpf } for pid=1810 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:27:40.513000 audit[1810]: AVC avc: denied { perfmon } for pid=1810 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:27:40.513000 audit[1810]: AVC avc: denied { perfmon } for pid=1810 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:27:40.513000 audit[1810]: AVC avc: denied { perfmon } for pid=1810 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:27:40.513000 audit[1810]: AVC avc: denied { perfmon } for pid=1810 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:27:40.513000 audit[1810]: AVC avc: denied { perfmon } for pid=1810 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:27:40.513000 audit[1810]: AVC avc: denied { bpf } for pid=1810 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:27:40.513000 audit[1810]: AVC avc: denied { bpf } for pid=1810 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:27:40.513000 audit: BPF prog-id=76 op=LOAD Mar 17 18:27:40.513000 audit[1810]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001958e0 a2=78 a3=0 items=0 ppid=1671 pid=1810 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:27:40.513000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3336623861383861323933346666626465313466353234633838373063 Mar 17 18:27:40.513000 audit[1810]: AVC avc: denied { bpf } for pid=1810 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:27:40.513000 audit[1810]: AVC avc: denied { bpf } for pid=1810 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:27:40.513000 audit[1810]: AVC avc: denied { perfmon } for pid=1810 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:27:40.513000 audit[1810]: AVC avc: denied { perfmon } for pid=1810 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:27:40.513000 audit[1810]: AVC avc: denied { perfmon } for pid=1810 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:27:40.513000 audit[1810]: AVC avc: denied { perfmon } for pid=1810 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:27:40.513000 audit[1810]: AVC avc: denied { perfmon } for pid=1810 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:27:40.513000 audit[1810]: AVC avc: denied { bpf } for pid=1810 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:27:40.513000 audit[1810]: AVC avc: denied { bpf } for pid=1810 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:27:40.513000 audit: BPF prog-id=77 op=LOAD Mar 17 18:27:40.513000 audit[1810]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000195670 a2=78 a3=0 items=0 ppid=1671 pid=1810 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:27:40.513000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3336623861383861323933346666626465313466353234633838373063 Mar 17 18:27:40.513000 audit: BPF prog-id=77 op=UNLOAD Mar 17 18:27:40.513000 audit: BPF prog-id=76 op=UNLOAD Mar 17 18:27:40.513000 audit[1810]: AVC avc: denied { bpf } for pid=1810 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:27:40.513000 audit[1810]: AVC avc: denied { bpf } for pid=1810 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:27:40.513000 audit[1810]: AVC avc: denied { bpf } for pid=1810 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:27:40.513000 audit[1810]: AVC avc: denied { perfmon } for pid=1810 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:27:40.513000 audit[1810]: AVC avc: denied { perfmon } for pid=1810 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:27:40.513000 audit[1810]: AVC avc: denied { perfmon } for pid=1810 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:27:40.513000 audit[1810]: AVC avc: denied { perfmon } for pid=1810 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:27:40.513000 audit[1810]: AVC avc: denied { perfmon } for pid=1810 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:27:40.513000 audit[1810]: AVC avc: denied { bpf } for pid=1810 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:27:40.513000 audit[1810]: AVC avc: denied { bpf } for pid=1810 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:27:40.513000 audit: BPF prog-id=78 op=LOAD Mar 17 18:27:40.513000 audit[1810]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000195b40 a2=78 a3=0 items=0 ppid=1671 pid=1810 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:27:40.513000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3336623861383861323933346666626465313466353234633838373063 Mar 17 18:27:40.551081 env[1216]: time="2025-03-17T18:27:40.545974599Z" level=info msg="StartContainer for \"c2c8b7306f25cfa9faa2d0e9efcedf43cfacec172bf4b45bea4350cc06ce859f\" returns successfully" Mar 17 18:27:40.551081 env[1216]: time="2025-03-17T18:27:40.546507657Z" level=info msg="StartContainer for \"36b8a88a2934ffbde14f524c8870c1903e19ef6c93556b14c5dc1fe995ae5f80\" returns successfully" Mar 17 18:27:40.551081 env[1216]: time="2025-03-17T18:27:40.548424770Z" level=info msg="StartContainer for \"e7eb2ce826f9474ba9797bc7ec8ca078c25c617cd54ae41ae74105471d9d2fb0\" returns successfully" Mar 17 18:27:40.557433 kubelet[1616]: W0317 18:27:40.557259 1616 reflector.go:561] k8s.io/client-go/informers/factory.go:160: failed to list *v1.Service: Get "https://10.0.0.111:6443/api/v1/services?fieldSelector=spec.clusterIP%21%3DNone&limit=500&resourceVersion=0": dial tcp 10.0.0.111:6443: connect: connection refused Mar 17 18:27:40.557433 kubelet[1616]: E0317 18:27:40.557368 1616 reflector.go:158] "Unhandled Error" err="k8s.io/client-go/informers/factory.go:160: Failed to watch *v1.Service: failed to list *v1.Service: Get \"https://10.0.0.111:6443/api/v1/services?fieldSelector=spec.clusterIP%21%3DNone&limit=500&resourceVersion=0\": dial tcp 10.0.0.111:6443: connect: connection refused" logger="UnhandledError" Mar 17 18:27:40.758485 kubelet[1616]: I0317 18:27:40.758437 1616 kubelet_node_status.go:72] "Attempting to register node" node="localhost" Mar 17 18:27:41.127039 kubelet[1616]: E0317 18:27:41.127011 1616 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Mar 17 18:27:41.128763 kubelet[1616]: E0317 18:27:41.128737 1616 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Mar 17 18:27:41.130289 kubelet[1616]: E0317 18:27:41.130264 1616 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Mar 17 18:27:42.018657 kernel: kauditd_printk_skb: 561 callbacks suppressed Mar 17 18:27:42.018754 kernel: audit: type=1400 audit(1742236062.016:537): avc: denied { watch } for pid=1835 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="vda9" ino=7291 scontext=system_u:system_r:svirt_lxc_net_t:s0:c540,c941 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Mar 17 18:27:42.016000 audit[1835]: AVC avc: denied { watch } for pid=1835 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="vda9" ino=7291 scontext=system_u:system_r:svirt_lxc_net_t:s0:c540,c941 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Mar 17 18:27:42.016000 audit[1835]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=6 a1=4000134810 a2=fc6 a3=0 items=0 ppid=1674 pid=1835 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c540,c941 key=(null) Mar 17 18:27:42.023411 kernel: audit: type=1300 audit(1742236062.016:537): arch=c00000b7 syscall=27 success=no exit=-13 a0=6 a1=4000134810 a2=fc6 a3=0 items=0 ppid=1674 pid=1835 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c540,c941 key=(null) Mar 17 18:27:42.023491 kernel: audit: type=1327 audit(1742236062.016:537): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Mar 17 18:27:42.016000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Mar 17 18:27:42.017000 audit[1835]: AVC avc: denied { watch } for pid=1835 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=7285 scontext=system_u:system_r:svirt_lxc_net_t:s0:c540,c941 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Mar 17 18:27:42.027752 kernel: audit: type=1400 audit(1742236062.017:538): avc: denied { watch } for pid=1835 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=7285 scontext=system_u:system_r:svirt_lxc_net_t:s0:c540,c941 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Mar 17 18:27:42.017000 audit[1835]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=6 a1=4000c0e020 a2=fc6 a3=0 items=0 ppid=1674 pid=1835 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c540,c941 key=(null) Mar 17 18:27:42.031167 kernel: audit: type=1300 audit(1742236062.017:538): arch=c00000b7 syscall=27 success=no exit=-13 a0=6 a1=4000c0e020 a2=fc6 a3=0 items=0 ppid=1674 pid=1835 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c540,c941 key=(null) Mar 17 18:27:42.031204 kernel: audit: type=1327 audit(1742236062.017:538): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Mar 17 18:27:42.017000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Mar 17 18:27:42.131949 kubelet[1616]: E0317 18:27:42.131912 1616 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Mar 17 18:27:42.363000 audit[1852]: AVC avc: denied { watch } for pid=1852 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="vda9" ino=7291 scontext=system_u:system_r:svirt_lxc_net_t:s0:c653,c983 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Mar 17 18:27:42.363000 audit[1852]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=41 a1=4003f40060 a2=fc6 a3=0 items=0 ppid=1671 pid=1852 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c653,c983 key=(null) Mar 17 18:27:42.369517 kernel: audit: type=1400 audit(1742236062.363:539): avc: denied { watch } for pid=1852 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="vda9" ino=7291 scontext=system_u:system_r:svirt_lxc_net_t:s0:c653,c983 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Mar 17 18:27:42.369564 kernel: audit: type=1300 audit(1742236062.363:539): arch=c00000b7 syscall=27 success=no exit=-13 a0=41 a1=4003f40060 a2=fc6 a3=0 items=0 ppid=1671 pid=1852 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c653,c983 key=(null) Mar 17 18:27:42.369597 kernel: audit: type=1327 audit(1742236062.363:539): proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E313131002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75626572 Mar 17 18:27:42.363000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E313131002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75626572 Mar 17 18:27:42.363000 audit[1852]: AVC avc: denied { watch } for pid=1852 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=7285 scontext=system_u:system_r:svirt_lxc_net_t:s0:c653,c983 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Mar 17 18:27:42.374068 kernel: audit: type=1400 audit(1742236062.363:540): avc: denied { watch } for pid=1852 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=7285 scontext=system_u:system_r:svirt_lxc_net_t:s0:c653,c983 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Mar 17 18:27:42.363000 audit[1852]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=41 a1=4003dcdfe0 a2=fc6 a3=0 items=0 ppid=1671 pid=1852 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c653,c983 key=(null) Mar 17 18:27:42.363000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E313131002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75626572 Mar 17 18:27:42.363000 audit[1852]: AVC avc: denied { watch } for pid=1852 comm="kube-apiserver" path="/etc/kubernetes/pki/apiserver.crt" dev="vda9" ino=7287 scontext=system_u:system_r:svirt_lxc_net_t:s0:c653,c983 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Mar 17 18:27:42.363000 audit[1852]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=42 a1=4005c608d0 a2=fc6 a3=0 items=0 ppid=1671 pid=1852 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c653,c983 key=(null) Mar 17 18:27:42.363000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E313131002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75626572 Mar 17 18:27:42.401000 audit[1852]: AVC avc: denied { watch } for pid=1852 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-client.crt" dev="vda9" ino=7293 scontext=system_u:system_r:svirt_lxc_net_t:s0:c653,c983 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Mar 17 18:27:42.401000 audit[1852]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=4f a1=4003ebd1a0 a2=fc6 a3=0 items=0 ppid=1671 pid=1852 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c653,c983 key=(null) Mar 17 18:27:42.401000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E313131002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75626572 Mar 17 18:27:42.402000 audit[1852]: AVC avc: denied { watch } for pid=1852 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=7285 scontext=system_u:system_r:svirt_lxc_net_t:s0:c653,c983 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Mar 17 18:27:42.402000 audit[1852]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=51 a1=4009d9c080 a2=fc6 a3=0 items=0 ppid=1671 pid=1852 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c653,c983 key=(null) Mar 17 18:27:42.402000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E313131002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75626572 Mar 17 18:27:42.402000 audit[1852]: AVC avc: denied { watch } for pid=1852 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="vda9" ino=7291 scontext=system_u:system_r:svirt_lxc_net_t:s0:c653,c983 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Mar 17 18:27:42.402000 audit[1852]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=51 a1=4003ebd5f0 a2=fc6 a3=0 items=0 ppid=1671 pid=1852 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c653,c983 key=(null) Mar 17 18:27:42.402000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E313131002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75626572 Mar 17 18:27:42.439114 kubelet[1616]: E0317 18:27:42.439072 1616 nodelease.go:49] "Failed to get node when trying to set owner ref to the node lease" err="nodes \"localhost\" not found" node="localhost" Mar 17 18:27:42.571863 kubelet[1616]: E0317 18:27:42.571749 1616 event.go:359] "Server rejected event (will not retry!)" err="namespaces \"default\" not found" event="&Event{ObjectMeta:{localhost.182daa7708f6ae8e default 0 0001-01-01 00:00:00 +0000 UTC map[] map[] [] [] []},InvolvedObject:ObjectReference{Kind:Node,Namespace:,Name:localhost,UID:localhost,APIVersion:,ResourceVersion:,FieldPath:,},Reason:Starting,Message:Starting kubelet.,Source:EventSource{Component:kubelet,Host:localhost,},FirstTimestamp:2025-03-17 18:27:39.090464398 +0000 UTC m=+1.083285023,LastTimestamp:2025-03-17 18:27:39.090464398 +0000 UTC m=+1.083285023,Count:1,Type:Normal,EventTime:0001-01-01 00:00:00 +0000 UTC,Series:nil,Action:,Related:nil,ReportingController:kubelet,ReportingInstance:localhost,}" Mar 17 18:27:42.629768 kubelet[1616]: I0317 18:27:42.629662 1616 kubelet_node_status.go:75] "Successfully registered node" node="localhost" Mar 17 18:27:42.629768 kubelet[1616]: E0317 18:27:42.629697 1616 kubelet_node_status.go:535] "Error updating node status, will retry" err="error getting node \"localhost\": node \"localhost\" not found" Mar 17 18:27:42.638303 kubelet[1616]: E0317 18:27:42.638273 1616 kubelet_node_status.go:453] "Error getting the current node from lister" err="node \"localhost\" not found" Mar 17 18:27:43.087611 kubelet[1616]: I0317 18:27:43.087486 1616 apiserver.go:52] "Watching apiserver" Mar 17 18:27:43.101716 kubelet[1616]: I0317 18:27:43.101665 1616 desired_state_of_world_populator.go:154] "Finished populating initial desired state of world" Mar 17 18:27:44.467864 systemd[1]: Reloading. Mar 17 18:27:44.511792 /usr/lib/systemd/system-generators/torcx-generator[1920]: time="2025-03-17T18:27:44Z" level=debug msg="common configuration parsed" base_dir=/var/lib/torcx/ conf_dir=/etc/torcx/ run_dir=/run/torcx/ store_paths="[/usr/share/torcx/store /usr/share/oem/torcx/store/3510.3.7 /usr/share/oem/torcx/store /var/lib/torcx/store/3510.3.7 /var/lib/torcx/store]" Mar 17 18:27:44.511824 /usr/lib/systemd/system-generators/torcx-generator[1920]: time="2025-03-17T18:27:44Z" level=info msg="torcx already run" Mar 17 18:27:44.568244 systemd[1]: /usr/lib/systemd/system/locksmithd.service:8: Unit uses CPUShares=; please use CPUWeight= instead. Support for CPUShares= will be removed soon. Mar 17 18:27:44.568263 systemd[1]: /usr/lib/systemd/system/locksmithd.service:9: Unit uses MemoryLimit=; please use MemoryMax= instead. Support for MemoryLimit= will be removed soon. Mar 17 18:27:44.584477 systemd[1]: /run/systemd/system/docker.socket:8: ListenStream= references a path below legacy directory /var/run/, updating /var/run/docker.sock → /run/docker.sock; please update the unit file accordingly. Mar 17 18:27:44.642000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:27:44.642000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:27:44.642000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:27:44.642000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:27:44.642000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:27:44.642000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:27:44.642000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:27:44.642000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:27:44.642000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:27:44.643000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:27:44.643000 audit: BPF prog-id=79 op=LOAD Mar 17 18:27:44.643000 audit: BPF prog-id=40 op=UNLOAD Mar 17 18:27:44.643000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:27:44.643000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:27:44.643000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:27:44.643000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:27:44.643000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:27:44.643000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:27:44.643000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:27:44.643000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:27:44.643000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:27:44.643000 audit: BPF prog-id=80 op=LOAD Mar 17 18:27:44.643000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:27:44.643000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:27:44.643000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:27:44.643000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:27:44.643000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:27:44.643000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:27:44.643000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:27:44.643000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:27:44.643000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:27:44.643000 audit: BPF prog-id=81 op=LOAD Mar 17 18:27:44.643000 audit: BPF prog-id=41 op=UNLOAD Mar 17 18:27:44.643000 audit: BPF prog-id=42 op=UNLOAD Mar 17 18:27:44.643000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:27:44.643000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:27:44.643000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:27:44.643000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:27:44.643000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:27:44.643000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:27:44.643000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:27:44.643000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:27:44.643000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:27:44.643000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:27:44.643000 audit: BPF prog-id=82 op=LOAD Mar 17 18:27:44.643000 audit: BPF prog-id=55 op=UNLOAD Mar 17 18:27:44.644000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:27:44.644000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:27:44.644000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:27:44.644000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:27:44.644000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:27:44.644000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:27:44.644000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:27:44.644000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:27:44.644000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:27:44.644000 audit: BPF prog-id=83 op=LOAD Mar 17 18:27:44.644000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:27:44.644000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:27:44.644000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:27:44.644000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:27:44.644000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:27:44.644000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:27:44.644000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:27:44.644000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:27:44.644000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:27:44.644000 audit: BPF prog-id=84 op=LOAD Mar 17 18:27:44.644000 audit: BPF prog-id=43 op=UNLOAD Mar 17 18:27:44.644000 audit: BPF prog-id=44 op=UNLOAD Mar 17 18:27:44.644000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:27:44.644000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:27:44.644000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:27:44.644000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:27:44.644000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:27:44.644000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:27:44.644000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:27:44.644000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:27:44.644000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:27:44.644000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:27:44.644000 audit: BPF prog-id=85 op=LOAD Mar 17 18:27:44.644000 audit: BPF prog-id=71 op=UNLOAD Mar 17 18:27:44.645000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:27:44.645000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:27:44.645000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:27:44.645000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:27:44.645000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:27:44.645000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:27:44.645000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:27:44.645000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:27:44.645000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:27:44.645000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:27:44.645000 audit: BPF prog-id=86 op=LOAD Mar 17 18:27:44.645000 audit: BPF prog-id=45 op=UNLOAD Mar 17 18:27:44.645000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:27:44.645000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:27:44.645000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:27:44.645000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:27:44.645000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:27:44.645000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:27:44.645000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:27:44.645000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:27:44.645000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:27:44.645000 audit: BPF prog-id=87 op=LOAD Mar 17 18:27:44.645000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:27:44.645000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:27:44.645000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:27:44.645000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:27:44.645000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:27:44.645000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:27:44.645000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:27:44.645000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:27:44.645000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:27:44.645000 audit: BPF prog-id=88 op=LOAD Mar 17 18:27:44.645000 audit: BPF prog-id=46 op=UNLOAD Mar 17 18:27:44.645000 audit: BPF prog-id=47 op=UNLOAD Mar 17 18:27:44.645000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:27:44.645000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:27:44.645000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:27:44.645000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:27:44.645000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:27:44.645000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:27:44.645000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:27:44.645000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:27:44.645000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:27:44.646000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:27:44.646000 audit: BPF prog-id=89 op=LOAD Mar 17 18:27:44.646000 audit: BPF prog-id=48 op=UNLOAD Mar 17 18:27:44.647000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:27:44.647000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:27:44.647000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:27:44.647000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:27:44.647000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:27:44.647000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:27:44.647000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:27:44.647000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:27:44.647000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:27:44.647000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:27:44.647000 audit: BPF prog-id=90 op=LOAD Mar 17 18:27:44.647000 audit: BPF prog-id=63 op=UNLOAD Mar 17 18:27:44.647000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:27:44.647000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:27:44.647000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:27:44.647000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:27:44.647000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:27:44.647000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:27:44.647000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:27:44.647000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:27:44.647000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:27:44.648000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:27:44.648000 audit: BPF prog-id=91 op=LOAD Mar 17 18:27:44.648000 audit: BPF prog-id=75 op=UNLOAD Mar 17 18:27:44.648000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:27:44.648000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:27:44.648000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:27:44.648000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:27:44.648000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:27:44.648000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:27:44.648000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:27:44.648000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:27:44.648000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:27:44.649000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:27:44.649000 audit: BPF prog-id=92 op=LOAD Mar 17 18:27:44.649000 audit: BPF prog-id=49 op=UNLOAD Mar 17 18:27:44.649000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:27:44.649000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:27:44.649000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:27:44.649000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:27:44.649000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:27:44.649000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:27:44.649000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:27:44.649000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:27:44.649000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:27:44.650000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:27:44.650000 audit: BPF prog-id=93 op=LOAD Mar 17 18:27:44.650000 audit: BPF prog-id=50 op=UNLOAD Mar 17 18:27:44.650000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:27:44.650000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:27:44.650000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:27:44.650000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:27:44.650000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:27:44.650000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:27:44.650000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:27:44.650000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:27:44.650000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:27:44.651000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:27:44.651000 audit: BPF prog-id=94 op=LOAD Mar 17 18:27:44.651000 audit: BPF prog-id=59 op=UNLOAD Mar 17 18:27:44.651000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:27:44.651000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:27:44.651000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:27:44.651000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:27:44.651000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:27:44.651000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:27:44.651000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:27:44.651000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:27:44.651000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:27:44.652000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:27:44.652000 audit: BPF prog-id=95 op=LOAD Mar 17 18:27:44.652000 audit: BPF prog-id=51 op=UNLOAD Mar 17 18:27:44.652000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:27:44.652000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:27:44.652000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:27:44.652000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:27:44.652000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:27:44.652000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:27:44.652000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:27:44.652000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:27:44.652000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:27:44.652000 audit: BPF prog-id=96 op=LOAD Mar 17 18:27:44.652000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:27:44.652000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:27:44.652000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:27:44.652000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:27:44.652000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:27:44.652000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:27:44.652000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:27:44.652000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:27:44.652000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:27:44.652000 audit: BPF prog-id=97 op=LOAD Mar 17 18:27:44.652000 audit: BPF prog-id=52 op=UNLOAD Mar 17 18:27:44.652000 audit: BPF prog-id=53 op=UNLOAD Mar 17 18:27:44.653000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:27:44.653000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:27:44.653000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:27:44.653000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:27:44.653000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:27:44.653000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:27:44.653000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:27:44.653000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:27:44.653000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:27:44.653000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:27:44.653000 audit: BPF prog-id=98 op=LOAD Mar 17 18:27:44.653000 audit: BPF prog-id=54 op=UNLOAD Mar 17 18:27:44.654000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:27:44.654000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:27:44.654000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:27:44.654000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:27:44.654000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:27:44.654000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:27:44.654000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:27:44.654000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:27:44.654000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:27:44.654000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:27:44.654000 audit: BPF prog-id=99 op=LOAD Mar 17 18:27:44.654000 audit: BPF prog-id=67 op=UNLOAD Mar 17 18:27:44.665040 systemd[1]: Stopping kubelet.service... Mar 17 18:27:44.689174 systemd[1]: kubelet.service: Deactivated successfully. Mar 17 18:27:44.689355 systemd[1]: Stopped kubelet.service. Mar 17 18:27:44.688000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:27:44.689408 systemd[1]: kubelet.service: Consumed 1.440s CPU time. Mar 17 18:27:44.690952 systemd[1]: Starting kubelet.service... Mar 17 18:27:44.770494 systemd[1]: Started kubelet.service. Mar 17 18:27:44.770000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:27:44.801289 kubelet[1962]: Flag --container-runtime-endpoint has been deprecated, This parameter should be set via the config file specified by the Kubelet's --config flag. See https://kubernetes.io/docs/tasks/administer-cluster/kubelet-config-file/ for more information. Mar 17 18:27:44.801289 kubelet[1962]: Flag --pod-infra-container-image has been deprecated, will be removed in a future release. Image garbage collector will get sandbox image information from CRI. Mar 17 18:27:44.801289 kubelet[1962]: Flag --volume-plugin-dir has been deprecated, This parameter should be set via the config file specified by the Kubelet's --config flag. See https://kubernetes.io/docs/tasks/administer-cluster/kubelet-config-file/ for more information. Mar 17 18:27:44.801616 kubelet[1962]: I0317 18:27:44.801340 1962 server.go:206] "--pod-infra-container-image will not be pruned by the image garbage collector in kubelet and should also be set in the remote runtime" Mar 17 18:27:44.808868 kubelet[1962]: I0317 18:27:44.808843 1962 server.go:486] "Kubelet version" kubeletVersion="v1.31.0" Mar 17 18:27:44.808983 kubelet[1962]: I0317 18:27:44.808972 1962 server.go:488] "Golang settings" GOGC="" GOMAXPROCS="" GOTRACEBACK="" Mar 17 18:27:44.809389 kubelet[1962]: I0317 18:27:44.809370 1962 server.go:929] "Client rotation is on, will bootstrap in background" Mar 17 18:27:44.811054 kubelet[1962]: I0317 18:27:44.811033 1962 certificate_store.go:130] Loading cert/key pair from "/var/lib/kubelet/pki/kubelet-client-current.pem". Mar 17 18:27:44.813179 kubelet[1962]: I0317 18:27:44.813160 1962 dynamic_cafile_content.go:160] "Starting controller" name="client-ca-bundle::/etc/kubernetes/pki/ca.crt" Mar 17 18:27:44.816113 kubelet[1962]: E0317 18:27:44.816075 1962 log.go:32] "RuntimeConfig from runtime service failed" err="rpc error: code = Unimplemented desc = unknown method RuntimeConfig for service runtime.v1.RuntimeService" Mar 17 18:27:44.816183 kubelet[1962]: I0317 18:27:44.816148 1962 server.go:1403] "CRI implementation should be updated to support RuntimeConfig when KubeletCgroupDriverFromCRI feature gate has been enabled. Falling back to using cgroupDriver from kubelet config." Mar 17 18:27:44.818407 kubelet[1962]: I0317 18:27:44.818384 1962 server.go:744] "--cgroups-per-qos enabled, but --cgroup-root was not specified. defaulting to /" Mar 17 18:27:44.818506 kubelet[1962]: I0317 18:27:44.818486 1962 swap_util.go:113] "Swap is on" /proc/swaps contents="Filename\t\t\t\tType\t\tSize\t\tUsed\t\tPriority" Mar 17 18:27:44.818648 kubelet[1962]: I0317 18:27:44.818617 1962 container_manager_linux.go:264] "Container manager verified user specified cgroup-root exists" cgroupRoot=[] Mar 17 18:27:44.818802 kubelet[1962]: I0317 18:27:44.818644 1962 container_manager_linux.go:269] "Creating Container Manager object based on Node Config" nodeConfig={"NodeName":"localhost","RuntimeCgroupsName":"","SystemCgroupsName":"","KubeletCgroupsName":"","KubeletOOMScoreAdj":-999,"ContainerRuntime":"","CgroupsPerQOS":true,"CgroupRoot":"/","CgroupDriver":"systemd","KubeletRootDir":"/var/lib/kubelet","ProtectKernelDefaults":false,"KubeReservedCgroupName":"","SystemReservedCgroupName":"","ReservedSystemCPUs":{},"EnforceNodeAllocatable":{"pods":{}},"KubeReserved":null,"SystemReserved":null,"HardEvictionThresholds":[{"Signal":"nodefs.available","Operator":"LessThan","Value":{"Quantity":null,"Percentage":0.1},"GracePeriod":0,"MinReclaim":null},{"Signal":"nodefs.inodesFree","Operator":"LessThan","Value":{"Quantity":null,"Percentage":0.05},"GracePeriod":0,"MinReclaim":null},{"Signal":"imagefs.available","Operator":"LessThan","Value":{"Quantity":null,"Percentage":0.15},"GracePeriod":0,"MinReclaim":null},{"Signal":"imagefs.inodesFree","Operator":"LessThan","Value":{"Quantity":null,"Percentage":0.05},"GracePeriod":0,"MinReclaim":null},{"Signal":"memory.available","Operator":"LessThan","Value":{"Quantity":"100Mi","Percentage":0},"GracePeriod":0,"MinReclaim":null}],"QOSReserved":{},"CPUManagerPolicy":"none","CPUManagerPolicyOptions":null,"TopologyManagerScope":"container","CPUManagerReconcilePeriod":10000000000,"ExperimentalMemoryManagerPolicy":"None","ExperimentalMemoryManagerReservedMemory":null,"PodPidsLimit":-1,"EnforceCPULimits":true,"CPUCFSQuotaPeriod":100000000,"TopologyManagerPolicy":"none","TopologyManagerPolicyOptions":null,"CgroupVersion":2} Mar 17 18:27:44.818899 kubelet[1962]: I0317 18:27:44.818809 1962 topology_manager.go:138] "Creating topology manager with none policy" Mar 17 18:27:44.818899 kubelet[1962]: I0317 18:27:44.818818 1962 container_manager_linux.go:300] "Creating device plugin manager" Mar 17 18:27:44.818899 kubelet[1962]: I0317 18:27:44.818872 1962 state_mem.go:36] "Initialized new in-memory state store" Mar 17 18:27:44.818978 kubelet[1962]: I0317 18:27:44.818967 1962 kubelet.go:408] "Attempting to sync node with API server" Mar 17 18:27:44.819004 kubelet[1962]: I0317 18:27:44.818981 1962 kubelet.go:303] "Adding static pod path" path="/etc/kubernetes/manifests" Mar 17 18:27:44.819004 kubelet[1962]: I0317 18:27:44.819001 1962 kubelet.go:314] "Adding apiserver pod source" Mar 17 18:27:44.819047 kubelet[1962]: I0317 18:27:44.819009 1962 apiserver.go:42] "Waiting for node sync before watching apiserver pods" Mar 17 18:27:44.820041 kubelet[1962]: I0317 18:27:44.820007 1962 kuberuntime_manager.go:262] "Container runtime initialized" containerRuntime="containerd" version="1.6.16" apiVersion="v1" Mar 17 18:27:44.820484 kubelet[1962]: I0317 18:27:44.820457 1962 kubelet.go:837] "Not starting ClusterTrustBundle informer because we are in static kubelet mode" Mar 17 18:27:44.820795 kubelet[1962]: I0317 18:27:44.820779 1962 server.go:1269] "Started kubelet" Mar 17 18:27:44.822562 kubelet[1962]: I0317 18:27:44.822528 1962 server.go:163] "Starting to listen" address="0.0.0.0" port=10250 Mar 17 18:27:44.823380 kubelet[1962]: I0317 18:27:44.823350 1962 server.go:460] "Adding debug handlers to kubelet server" Mar 17 18:27:44.827000 audit[1962]: AVC avc: denied { mac_admin } for pid=1962 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:27:44.827000 audit: SELINUX_ERR op=setxattr invalid_context="system_u:object_r:container_file_t:s0" Mar 17 18:27:44.827000 audit[1962]: SYSCALL arch=c00000b7 syscall=5 success=no exit=-22 a0=4000949a70 a1=4000918a80 a2=4000949a40 a3=25 items=0 ppid=1 pid=1962 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/usr/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:27:44.827000 audit: PROCTITLE proctitle=2F7573722F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 Mar 17 18:27:44.827000 audit[1962]: AVC avc: denied { mac_admin } for pid=1962 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:27:44.827000 audit: SELINUX_ERR op=setxattr invalid_context="system_u:object_r:container_file_t:s0" Mar 17 18:27:44.827000 audit[1962]: SYSCALL arch=c00000b7 syscall=5 success=no exit=-22 a0=4000c86260 a1=4000918a98 a2=4000949b00 a3=25 items=0 ppid=1 pid=1962 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/usr/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:27:44.827000 audit: PROCTITLE proctitle=2F7573722F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 Mar 17 18:27:44.829618 kubelet[1962]: I0317 18:27:44.828384 1962 kubelet.go:1430] "Unprivileged containerized plugins might not work, could not set selinux context on plugin registration dir" path="/var/lib/kubelet/plugins_registry" err="setxattr /var/lib/kubelet/plugins_registry: invalid argument" Mar 17 18:27:44.829618 kubelet[1962]: I0317 18:27:44.828420 1962 kubelet.go:1434] "Unprivileged containerized plugins might not work, could not set selinux context on plugins dir" path="/var/lib/kubelet/plugins" err="setxattr /var/lib/kubelet/plugins: invalid argument" Mar 17 18:27:44.829618 kubelet[1962]: I0317 18:27:44.828447 1962 fs_resource_analyzer.go:67] "Starting FS ResourceAnalyzer" Mar 17 18:27:44.835339 kubelet[1962]: I0317 18:27:44.835302 1962 dynamic_serving_content.go:135] "Starting controller" name="kubelet-server-cert-files::/var/lib/kubelet/pki/kubelet.crt::/var/lib/kubelet/pki/kubelet.key" Mar 17 18:27:44.836915 kubelet[1962]: I0317 18:27:44.836894 1962 volume_manager.go:289] "Starting Kubelet Volume Manager" Mar 17 18:27:44.837118 kubelet[1962]: E0317 18:27:44.837086 1962 kubelet_node_status.go:453] "Error getting the current node from lister" err="node \"localhost\" not found" Mar 17 18:27:44.837513 kubelet[1962]: I0317 18:27:44.837486 1962 desired_state_of_world_populator.go:146] "Desired state populator starts to run" Mar 17 18:27:44.837992 kubelet[1962]: I0317 18:27:44.837973 1962 reconciler.go:26] "Reconciler: start to sync state" Mar 17 18:27:44.848979 kubelet[1962]: I0317 18:27:44.839468 1962 factory.go:219] Registration of the crio container factory failed: Get "http://%2Fvar%2Frun%2Fcrio%2Fcrio.sock/info": dial unix /var/run/crio/crio.sock: connect: no such file or directory Mar 17 18:27:44.848979 kubelet[1962]: E0317 18:27:44.841054 1962 kubelet.go:1478] "Image garbage collection failed once. Stats initialization may not have completed yet" err="invalid capacity 0 on image filesystem" Mar 17 18:27:44.848979 kubelet[1962]: I0317 18:27:44.845769 1962 ratelimit.go:55] "Setting rate limiting for endpoint" service="podresources" qps=100 burstTokens=10 Mar 17 18:27:44.848979 kubelet[1962]: I0317 18:27:44.845969 1962 server.go:236] "Starting to serve the podresources API" endpoint="unix:/var/lib/kubelet/pod-resources/kubelet.sock" Mar 17 18:27:44.848979 kubelet[1962]: I0317 18:27:44.846439 1962 factory.go:221] Registration of the containerd container factory successfully Mar 17 18:27:44.848979 kubelet[1962]: I0317 18:27:44.846453 1962 factory.go:221] Registration of the systemd container factory successfully Mar 17 18:27:44.865159 kubelet[1962]: I0317 18:27:44.865112 1962 kubelet_network_linux.go:50] "Initialized iptables rules." protocol="IPv4" Mar 17 18:27:44.868236 kubelet[1962]: I0317 18:27:44.867453 1962 kubelet_network_linux.go:50] "Initialized iptables rules." protocol="IPv6" Mar 17 18:27:44.868236 kubelet[1962]: I0317 18:27:44.867528 1962 status_manager.go:217] "Starting to sync pod status with apiserver" Mar 17 18:27:44.868236 kubelet[1962]: I0317 18:27:44.867548 1962 kubelet.go:2321] "Starting kubelet main sync loop" Mar 17 18:27:44.868236 kubelet[1962]: E0317 18:27:44.867589 1962 kubelet.go:2345] "Skipping pod synchronization" err="[container runtime status check may not have completed yet, PLEG is not healthy: pleg has yet to be successful]" Mar 17 18:27:44.885022 kubelet[1962]: I0317 18:27:44.884968 1962 cpu_manager.go:214] "Starting CPU manager" policy="none" Mar 17 18:27:44.885098 kubelet[1962]: I0317 18:27:44.885028 1962 cpu_manager.go:215] "Reconciling" reconcilePeriod="10s" Mar 17 18:27:44.885098 kubelet[1962]: I0317 18:27:44.885049 1962 state_mem.go:36] "Initialized new in-memory state store" Mar 17 18:27:44.885223 kubelet[1962]: I0317 18:27:44.885206 1962 state_mem.go:88] "Updated default CPUSet" cpuSet="" Mar 17 18:27:44.885250 kubelet[1962]: I0317 18:27:44.885221 1962 state_mem.go:96] "Updated CPUSet assignments" assignments={} Mar 17 18:27:44.885250 kubelet[1962]: I0317 18:27:44.885238 1962 policy_none.go:49] "None policy: Start" Mar 17 18:27:44.885906 kubelet[1962]: I0317 18:27:44.885889 1962 memory_manager.go:170] "Starting memorymanager" policy="None" Mar 17 18:27:44.885947 kubelet[1962]: I0317 18:27:44.885915 1962 state_mem.go:35] "Initializing new in-memory state store" Mar 17 18:27:44.886061 kubelet[1962]: I0317 18:27:44.886048 1962 state_mem.go:75] "Updated machine memory state" Mar 17 18:27:44.889527 kubelet[1962]: I0317 18:27:44.889501 1962 manager.go:510] "Failed to read data from checkpoint" checkpoint="kubelet_internal_checkpoint" err="checkpoint is not found" Mar 17 18:27:44.888000 audit[1962]: AVC avc: denied { mac_admin } for pid=1962 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:27:44.888000 audit: SELINUX_ERR op=setxattr invalid_context="system_u:object_r:container_file_t:s0" Mar 17 18:27:44.888000 audit[1962]: SYSCALL arch=c00000b7 syscall=5 success=no exit=-22 a0=40010cc0f0 a1=4001085d58 a2=40010cc0c0 a3=25 items=0 ppid=1 pid=1962 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/usr/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:27:44.888000 audit: PROCTITLE proctitle=2F7573722F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 Mar 17 18:27:44.889765 kubelet[1962]: I0317 18:27:44.889556 1962 server.go:88] "Unprivileged containerized plugins might not work. Could not set selinux context on socket dir" path="/var/lib/kubelet/device-plugins/" err="setxattr /var/lib/kubelet/device-plugins/: invalid argument" Mar 17 18:27:44.890023 kubelet[1962]: I0317 18:27:44.889998 1962 eviction_manager.go:189] "Eviction manager: starting control loop" Mar 17 18:27:44.890072 kubelet[1962]: I0317 18:27:44.890017 1962 container_log_manager.go:189] "Initializing container log rotate workers" workers=1 monitorPeriod="10s" Mar 17 18:27:44.890322 kubelet[1962]: I0317 18:27:44.890306 1962 plugin_manager.go:118] "Starting Kubelet Plugin Manager" Mar 17 18:27:44.993514 kubelet[1962]: I0317 18:27:44.993484 1962 kubelet_node_status.go:72] "Attempting to register node" node="localhost" Mar 17 18:27:44.999630 kubelet[1962]: I0317 18:27:44.999608 1962 kubelet_node_status.go:111] "Node was previously registered" node="localhost" Mar 17 18:27:44.999721 kubelet[1962]: I0317 18:27:44.999675 1962 kubelet_node_status.go:75] "Successfully registered node" node="localhost" Mar 17 18:27:45.139099 kubelet[1962]: I0317 18:27:45.139015 1962 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"k8s-certs\" (UniqueName: \"kubernetes.io/host-path/aa7e6f0f1f2c91c25fc26d78cab4851a-k8s-certs\") pod \"kube-apiserver-localhost\" (UID: \"aa7e6f0f1f2c91c25fc26d78cab4851a\") " pod="kube-system/kube-apiserver-localhost" Mar 17 18:27:45.139099 kubelet[1962]: I0317 18:27:45.139049 1962 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kubeconfig\" (UniqueName: \"kubernetes.io/host-path/6f32907a07e55aea05abdc5cd284a8d5-kubeconfig\") pod \"kube-scheduler-localhost\" (UID: \"6f32907a07e55aea05abdc5cd284a8d5\") " pod="kube-system/kube-scheduler-localhost" Mar 17 18:27:45.139099 kubelet[1962]: I0317 18:27:45.139069 1962 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"usr-share-ca-certificates\" (UniqueName: \"kubernetes.io/host-path/aa7e6f0f1f2c91c25fc26d78cab4851a-usr-share-ca-certificates\") pod \"kube-apiserver-localhost\" (UID: \"aa7e6f0f1f2c91c25fc26d78cab4851a\") " pod="kube-system/kube-apiserver-localhost" Mar 17 18:27:45.139099 kubelet[1962]: I0317 18:27:45.139087 1962 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"ca-certs\" (UniqueName: \"kubernetes.io/host-path/60762308083b5ef6c837b1be48ec53d6-ca-certs\") pod \"kube-controller-manager-localhost\" (UID: \"60762308083b5ef6c837b1be48ec53d6\") " pod="kube-system/kube-controller-manager-localhost" Mar 17 18:27:45.139254 kubelet[1962]: I0317 18:27:45.139115 1962 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"flexvolume-dir\" (UniqueName: \"kubernetes.io/host-path/60762308083b5ef6c837b1be48ec53d6-flexvolume-dir\") pod \"kube-controller-manager-localhost\" (UID: \"60762308083b5ef6c837b1be48ec53d6\") " pod="kube-system/kube-controller-manager-localhost" Mar 17 18:27:45.139254 kubelet[1962]: I0317 18:27:45.139131 1962 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"k8s-certs\" (UniqueName: \"kubernetes.io/host-path/60762308083b5ef6c837b1be48ec53d6-k8s-certs\") pod \"kube-controller-manager-localhost\" (UID: \"60762308083b5ef6c837b1be48ec53d6\") " pod="kube-system/kube-controller-manager-localhost" Mar 17 18:27:45.139254 kubelet[1962]: I0317 18:27:45.139146 1962 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kubeconfig\" (UniqueName: \"kubernetes.io/host-path/60762308083b5ef6c837b1be48ec53d6-kubeconfig\") pod \"kube-controller-manager-localhost\" (UID: \"60762308083b5ef6c837b1be48ec53d6\") " pod="kube-system/kube-controller-manager-localhost" Mar 17 18:27:45.139254 kubelet[1962]: I0317 18:27:45.139160 1962 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"usr-share-ca-certificates\" (UniqueName: \"kubernetes.io/host-path/60762308083b5ef6c837b1be48ec53d6-usr-share-ca-certificates\") pod \"kube-controller-manager-localhost\" (UID: \"60762308083b5ef6c837b1be48ec53d6\") " pod="kube-system/kube-controller-manager-localhost" Mar 17 18:27:45.139254 kubelet[1962]: I0317 18:27:45.139175 1962 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"ca-certs\" (UniqueName: \"kubernetes.io/host-path/aa7e6f0f1f2c91c25fc26d78cab4851a-ca-certs\") pod \"kube-apiserver-localhost\" (UID: \"aa7e6f0f1f2c91c25fc26d78cab4851a\") " pod="kube-system/kube-apiserver-localhost" Mar 17 18:27:45.276034 kubelet[1962]: E0317 18:27:45.276002 1962 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Mar 17 18:27:45.276177 kubelet[1962]: E0317 18:27:45.276148 1962 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Mar 17 18:27:45.276244 kubelet[1962]: E0317 18:27:45.276080 1962 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Mar 17 18:27:45.819230 kubelet[1962]: I0317 18:27:45.819188 1962 apiserver.go:52] "Watching apiserver" Mar 17 18:27:45.837787 kubelet[1962]: I0317 18:27:45.837762 1962 desired_state_of_world_populator.go:154] "Finished populating initial desired state of world" Mar 17 18:27:45.876615 kubelet[1962]: E0317 18:27:45.876576 1962 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Mar 17 18:27:45.876745 kubelet[1962]: E0317 18:27:45.876674 1962 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Mar 17 18:27:45.876869 kubelet[1962]: E0317 18:27:45.876848 1962 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Mar 17 18:27:45.908747 kubelet[1962]: I0317 18:27:45.908123 1962 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="kube-system/kube-apiserver-localhost" podStartSLOduration=1.9081059310000001 podStartE2EDuration="1.908105931s" podCreationTimestamp="2025-03-17 18:27:44 +0000 UTC" firstStartedPulling="0001-01-01 00:00:00 +0000 UTC" lastFinishedPulling="0001-01-01 00:00:00 +0000 UTC" observedRunningTime="2025-03-17 18:27:45.900594762 +0000 UTC m=+1.126900143" watchObservedRunningTime="2025-03-17 18:27:45.908105931 +0000 UTC m=+1.134411272" Mar 17 18:27:45.908747 kubelet[1962]: I0317 18:27:45.908233 1962 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="kube-system/kube-controller-manager-localhost" podStartSLOduration=1.9082278499999998 podStartE2EDuration="1.90822785s" podCreationTimestamp="2025-03-17 18:27:44 +0000 UTC" firstStartedPulling="0001-01-01 00:00:00 +0000 UTC" lastFinishedPulling="0001-01-01 00:00:00 +0000 UTC" observedRunningTime="2025-03-17 18:27:45.907964285 +0000 UTC m=+1.134269666" watchObservedRunningTime="2025-03-17 18:27:45.90822785 +0000 UTC m=+1.134533231" Mar 17 18:27:45.921602 kubelet[1962]: I0317 18:27:45.921536 1962 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="kube-system/kube-scheduler-localhost" podStartSLOduration=1.9215255930000001 podStartE2EDuration="1.921525593s" podCreationTimestamp="2025-03-17 18:27:44 +0000 UTC" firstStartedPulling="0001-01-01 00:00:00 +0000 UTC" lastFinishedPulling="0001-01-01 00:00:00 +0000 UTC" observedRunningTime="2025-03-17 18:27:45.914148068 +0000 UTC m=+1.140453449" watchObservedRunningTime="2025-03-17 18:27:45.921525593 +0000 UTC m=+1.147830934" Mar 17 18:27:46.878458 kubelet[1962]: E0317 18:27:46.878430 1962 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Mar 17 18:27:47.879584 kubelet[1962]: E0317 18:27:47.879554 1962 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Mar 17 18:27:48.549000 audit[1835]: AVC avc: denied { watch } for pid=1835 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=7285 scontext=system_u:system_r:svirt_lxc_net_t:s0:c540,c941 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Mar 17 18:27:48.552703 kernel: kauditd_printk_skb: 272 callbacks suppressed Mar 17 18:27:48.552767 kernel: audit: type=1400 audit(1742236068.549:794): avc: denied { watch } for pid=1835 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=7285 scontext=system_u:system_r:svirt_lxc_net_t:s0:c540,c941 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Mar 17 18:27:48.552786 kernel: audit: type=1400 audit(1742236068.549:795): avc: denied { watch } for pid=1835 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=7285 scontext=system_u:system_r:svirt_lxc_net_t:s0:c540,c941 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Mar 17 18:27:48.549000 audit[1835]: AVC avc: denied { watch } for pid=1835 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=7285 scontext=system_u:system_r:svirt_lxc_net_t:s0:c540,c941 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Mar 17 18:27:48.549000 audit[1835]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=9 a1=400068df20 a2=fc6 a3=0 items=0 ppid=1674 pid=1835 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c540,c941 key=(null) Mar 17 18:27:48.557685 kernel: audit: type=1300 audit(1742236068.549:795): arch=c00000b7 syscall=27 success=no exit=-13 a0=9 a1=400068df20 a2=fc6 a3=0 items=0 ppid=1674 pid=1835 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c540,c941 key=(null) Mar 17 18:27:48.557717 kernel: audit: type=1327 audit(1742236068.549:795): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Mar 17 18:27:48.549000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Mar 17 18:27:48.550000 audit[1835]: AVC avc: denied { watch } for pid=1835 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=7285 scontext=system_u:system_r:svirt_lxc_net_t:s0:c540,c941 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Mar 17 18:27:48.562230 kernel: audit: type=1400 audit(1742236068.550:796): avc: denied { watch } for pid=1835 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=7285 scontext=system_u:system_r:svirt_lxc_net_t:s0:c540,c941 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Mar 17 18:27:48.562268 kernel: audit: type=1300 audit(1742236068.550:796): arch=c00000b7 syscall=27 success=no exit=-13 a0=9 a1=40003195c0 a2=fc6 a3=0 items=0 ppid=1674 pid=1835 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c540,c941 key=(null) Mar 17 18:27:48.550000 audit[1835]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=9 a1=40003195c0 a2=fc6 a3=0 items=0 ppid=1674 pid=1835 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c540,c941 key=(null) Mar 17 18:27:48.565080 kernel: audit: type=1327 audit(1742236068.550:796): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Mar 17 18:27:48.550000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Mar 17 18:27:48.550000 audit[1835]: AVC avc: denied { watch } for pid=1835 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=7285 scontext=system_u:system_r:svirt_lxc_net_t:s0:c540,c941 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Mar 17 18:27:48.569621 kernel: audit: type=1400 audit(1742236068.550:797): avc: denied { watch } for pid=1835 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=7285 scontext=system_u:system_r:svirt_lxc_net_t:s0:c540,c941 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Mar 17 18:27:48.569664 kernel: audit: type=1300 audit(1742236068.550:797): arch=c00000b7 syscall=27 success=no exit=-13 a0=9 a1=4000c0e0e0 a2=fc6 a3=0 items=0 ppid=1674 pid=1835 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c540,c941 key=(null) Mar 17 18:27:48.550000 audit[1835]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=9 a1=4000c0e0e0 a2=fc6 a3=0 items=0 ppid=1674 pid=1835 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c540,c941 key=(null) Mar 17 18:27:48.550000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Mar 17 18:27:48.574877 kernel: audit: type=1327 audit(1742236068.550:797): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Mar 17 18:27:48.549000 audit[1835]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=8 a1=4000167f80 a2=fc6 a3=0 items=0 ppid=1674 pid=1835 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c540,c941 key=(null) Mar 17 18:27:48.549000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Mar 17 18:27:49.716859 sudo[1355]: pam_unix(sudo:session): session closed for user root Mar 17 18:27:49.716000 audit[1355]: USER_END pid=1355 uid=500 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_limits,pam_env,pam_unix,pam_permit,pam_systemd acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Mar 17 18:27:49.716000 audit[1355]: CRED_DISP pid=1355 uid=500 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Mar 17 18:27:49.718408 sshd[1351]: pam_unix(sshd:session): session closed for user core Mar 17 18:27:49.718000 audit[1351]: USER_END pid=1351 uid=0 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Mar 17 18:27:49.718000 audit[1351]: CRED_DISP pid=1351 uid=0 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Mar 17 18:27:49.721182 systemd[1]: sshd@6-10.0.0.111:22-10.0.0.1:58342.service: Deactivated successfully. Mar 17 18:27:49.720000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@6-10.0.0.111:22-10.0.0.1:58342 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:27:49.721938 systemd[1]: session-7.scope: Deactivated successfully. Mar 17 18:27:49.722110 systemd[1]: session-7.scope: Consumed 5.736s CPU time. Mar 17 18:27:49.722478 systemd-logind[1207]: Session 7 logged out. Waiting for processes to exit. Mar 17 18:27:49.723370 systemd-logind[1207]: Removed session 7. Mar 17 18:27:50.350000 audit[1835]: AVC avc: denied { watch } for pid=1835 comm="kube-controller" path="/opt/libexec/kubernetes/kubelet-plugins/volume/exec" dev="vda9" ino=520971 scontext=system_u:system_r:svirt_lxc_net_t:s0:c540,c941 tcontext=system_u:object_r:usr_t:s0 tclass=dir permissive=0 Mar 17 18:27:50.350000 audit[1835]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=8 a1=40012d6480 a2=fc6 a3=0 items=0 ppid=1674 pid=1835 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c540,c941 key=(null) Mar 17 18:27:50.350000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Mar 17 18:27:50.516370 kubelet[1962]: I0317 18:27:50.516115 1962 kuberuntime_manager.go:1633] "Updating runtime config through cri with podcidr" CIDR="192.168.0.0/24" Mar 17 18:27:50.517012 env[1216]: time="2025-03-17T18:27:50.516974866Z" level=info msg="No cni config template is specified, wait for other system components to drop the config." Mar 17 18:27:50.518719 kubelet[1962]: I0317 18:27:50.517403 1962 kubelet_network.go:61] "Updating Pod CIDR" originalPodCIDR="" newPodCIDR="192.168.0.0/24" Mar 17 18:27:50.906319 kubelet[1962]: E0317 18:27:50.906286 1962 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Mar 17 18:27:51.422065 systemd[1]: Created slice kubepods-besteffort-pod3839093a_29d6_4092_b744_470df4a65d50.slice. Mar 17 18:27:51.481335 kubelet[1962]: I0317 18:27:51.481282 1962 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"lib-modules\" (UniqueName: \"kubernetes.io/host-path/3839093a-29d6-4092-b744-470df4a65d50-lib-modules\") pod \"kube-proxy-st9h2\" (UID: \"3839093a-29d6-4092-b744-470df4a65d50\") " pod="kube-system/kube-proxy-st9h2" Mar 17 18:27:51.481485 kubelet[1962]: I0317 18:27:51.481356 1962 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-dhjtp\" (UniqueName: \"kubernetes.io/projected/3839093a-29d6-4092-b744-470df4a65d50-kube-api-access-dhjtp\") pod \"kube-proxy-st9h2\" (UID: \"3839093a-29d6-4092-b744-470df4a65d50\") " pod="kube-system/kube-proxy-st9h2" Mar 17 18:27:51.481485 kubelet[1962]: I0317 18:27:51.481377 1962 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-proxy\" (UniqueName: \"kubernetes.io/configmap/3839093a-29d6-4092-b744-470df4a65d50-kube-proxy\") pod \"kube-proxy-st9h2\" (UID: \"3839093a-29d6-4092-b744-470df4a65d50\") " pod="kube-system/kube-proxy-st9h2" Mar 17 18:27:51.481485 kubelet[1962]: I0317 18:27:51.481393 1962 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"xtables-lock\" (UniqueName: \"kubernetes.io/host-path/3839093a-29d6-4092-b744-470df4a65d50-xtables-lock\") pod \"kube-proxy-st9h2\" (UID: \"3839093a-29d6-4092-b744-470df4a65d50\") " pod="kube-system/kube-proxy-st9h2" Mar 17 18:27:51.583529 systemd[1]: Created slice kubepods-besteffort-pod1e9b33c7_7091_49a9_a3b8_8514e7dee5d1.slice. Mar 17 18:27:51.595836 kubelet[1962]: I0317 18:27:51.595774 1962 swap_util.go:74] "error creating dir to test if tmpfs noswap is enabled. Assuming not supported" mount path="" error="stat /var/lib/kubelet/plugins/kubernetes.io/empty-dir: no such file or directory" Mar 17 18:27:51.682367 kubelet[1962]: I0317 18:27:51.682258 1962 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-xvxd8\" (UniqueName: \"kubernetes.io/projected/1e9b33c7-7091-49a9-a3b8-8514e7dee5d1-kube-api-access-xvxd8\") pod \"tigera-operator-76c4976dd7-z9fjd\" (UID: \"1e9b33c7-7091-49a9-a3b8-8514e7dee5d1\") " pod="tigera-operator/tigera-operator-76c4976dd7-z9fjd" Mar 17 18:27:51.682367 kubelet[1962]: I0317 18:27:51.682295 1962 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"var-lib-calico\" (UniqueName: \"kubernetes.io/host-path/1e9b33c7-7091-49a9-a3b8-8514e7dee5d1-var-lib-calico\") pod \"tigera-operator-76c4976dd7-z9fjd\" (UID: \"1e9b33c7-7091-49a9-a3b8-8514e7dee5d1\") " pod="tigera-operator/tigera-operator-76c4976dd7-z9fjd" Mar 17 18:27:51.729599 kubelet[1962]: E0317 18:27:51.729569 1962 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Mar 17 18:27:51.730089 env[1216]: time="2025-03-17T18:27:51.730053303Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-proxy-st9h2,Uid:3839093a-29d6-4092-b744-470df4a65d50,Namespace:kube-system,Attempt:0,}" Mar 17 18:27:51.743479 env[1216]: time="2025-03-17T18:27:51.743413592Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Mar 17 18:27:51.743479 env[1216]: time="2025-03-17T18:27:51.743453601Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Mar 17 18:27:51.743479 env[1216]: time="2025-03-17T18:27:51.743464243Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Mar 17 18:27:51.743705 env[1216]: time="2025-03-17T18:27:51.743672051Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/519c3b8a7d115cba162bc830563f7e10a191c79a4991241b54006894d7e8172d pid=2054 runtime=io.containerd.runc.v2 Mar 17 18:27:51.758768 systemd[1]: Started cri-containerd-519c3b8a7d115cba162bc830563f7e10a191c79a4991241b54006894d7e8172d.scope. Mar 17 18:27:51.785000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:27:51.785000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:27:51.785000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:27:51.785000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:27:51.785000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:27:51.785000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:27:51.785000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:27:51.785000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:27:51.786000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:27:51.786000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:27:51.786000 audit: BPF prog-id=100 op=LOAD Mar 17 18:27:51.786000 audit[2064]: AVC avc: denied { bpf } for pid=2064 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:27:51.786000 audit[2064]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000195b38 a2=10 a3=0 items=0 ppid=2054 pid=2064 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:27:51.786000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3531396333623861376431313563626131363262633833303536336637 Mar 17 18:27:51.786000 audit[2064]: AVC avc: denied { perfmon } for pid=2064 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:27:51.786000 audit[2064]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001955a0 a2=3c a3=0 items=0 ppid=2054 pid=2064 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:27:51.786000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3531396333623861376431313563626131363262633833303536336637 Mar 17 18:27:51.786000 audit[2064]: AVC avc: denied { bpf } for pid=2064 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:27:51.786000 audit[2064]: AVC avc: denied { bpf } for pid=2064 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:27:51.786000 audit[2064]: AVC avc: denied { bpf } for pid=2064 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:27:51.786000 audit[2064]: AVC avc: denied { perfmon } for pid=2064 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:27:51.786000 audit[2064]: AVC avc: denied { perfmon } for pid=2064 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:27:51.786000 audit[2064]: AVC avc: denied { perfmon } for pid=2064 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:27:51.786000 audit[2064]: AVC avc: denied { perfmon } for pid=2064 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:27:51.786000 audit[2064]: AVC avc: denied { perfmon } for pid=2064 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:27:51.786000 audit[2064]: AVC avc: denied { bpf } for pid=2064 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:27:51.786000 audit[2064]: AVC avc: denied { bpf } for pid=2064 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:27:51.786000 audit: BPF prog-id=101 op=LOAD Mar 17 18:27:51.786000 audit[2064]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001958e0 a2=78 a3=0 items=0 ppid=2054 pid=2064 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:27:51.786000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3531396333623861376431313563626131363262633833303536336637 Mar 17 18:27:51.786000 audit[2064]: AVC avc: denied { bpf } for pid=2064 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:27:51.786000 audit[2064]: AVC avc: denied { bpf } for pid=2064 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:27:51.786000 audit[2064]: AVC avc: denied { perfmon } for pid=2064 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:27:51.786000 audit[2064]: AVC avc: denied { perfmon } for pid=2064 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:27:51.786000 audit[2064]: AVC avc: denied { perfmon } for pid=2064 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:27:51.786000 audit[2064]: AVC avc: denied { perfmon } for pid=2064 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:27:51.786000 audit[2064]: AVC avc: denied { perfmon } for pid=2064 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:27:51.786000 audit[2064]: AVC avc: denied { bpf } for pid=2064 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:27:51.786000 audit[2064]: AVC avc: denied { bpf } for pid=2064 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:27:51.786000 audit: BPF prog-id=102 op=LOAD Mar 17 18:27:51.786000 audit[2064]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000195670 a2=78 a3=0 items=0 ppid=2054 pid=2064 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:27:51.786000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3531396333623861376431313563626131363262633833303536336637 Mar 17 18:27:51.786000 audit: BPF prog-id=102 op=UNLOAD Mar 17 18:27:51.786000 audit: BPF prog-id=101 op=UNLOAD Mar 17 18:27:51.786000 audit[2064]: AVC avc: denied { bpf } for pid=2064 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:27:51.786000 audit[2064]: AVC avc: denied { bpf } for pid=2064 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:27:51.786000 audit[2064]: AVC avc: denied { bpf } for pid=2064 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:27:51.786000 audit[2064]: AVC avc: denied { perfmon } for pid=2064 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:27:51.786000 audit[2064]: AVC avc: denied { perfmon } for pid=2064 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:27:51.786000 audit[2064]: AVC avc: denied { perfmon } for pid=2064 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:27:51.786000 audit[2064]: AVC avc: denied { perfmon } for pid=2064 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:27:51.786000 audit[2064]: AVC avc: denied { perfmon } for pid=2064 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:27:51.786000 audit[2064]: AVC avc: denied { bpf } for pid=2064 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:27:51.786000 audit[2064]: AVC avc: denied { bpf } for pid=2064 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:27:51.786000 audit: BPF prog-id=103 op=LOAD Mar 17 18:27:51.786000 audit[2064]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000195b40 a2=78 a3=0 items=0 ppid=2054 pid=2064 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:27:51.786000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3531396333623861376431313563626131363262633833303536336637 Mar 17 18:27:51.799708 env[1216]: time="2025-03-17T18:27:51.799669230Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-proxy-st9h2,Uid:3839093a-29d6-4092-b744-470df4a65d50,Namespace:kube-system,Attempt:0,} returns sandbox id \"519c3b8a7d115cba162bc830563f7e10a191c79a4991241b54006894d7e8172d\"" Mar 17 18:27:51.802157 kubelet[1962]: E0317 18:27:51.800393 1962 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Mar 17 18:27:51.804541 env[1216]: time="2025-03-17T18:27:51.804506734Z" level=info msg="CreateContainer within sandbox \"519c3b8a7d115cba162bc830563f7e10a191c79a4991241b54006894d7e8172d\" for container &ContainerMetadata{Name:kube-proxy,Attempt:0,}" Mar 17 18:27:51.816060 env[1216]: time="2025-03-17T18:27:51.816012840Z" level=info msg="CreateContainer within sandbox \"519c3b8a7d115cba162bc830563f7e10a191c79a4991241b54006894d7e8172d\" for &ContainerMetadata{Name:kube-proxy,Attempt:0,} returns container id \"46d3df245b669427fac2e6e08664ee5159d6657facd3cb52c3c54ec9c5741e28\"" Mar 17 18:27:51.816471 env[1216]: time="2025-03-17T18:27:51.816441698Z" level=info msg="StartContainer for \"46d3df245b669427fac2e6e08664ee5159d6657facd3cb52c3c54ec9c5741e28\"" Mar 17 18:27:51.830399 systemd[1]: Started cri-containerd-46d3df245b669427fac2e6e08664ee5159d6657facd3cb52c3c54ec9c5741e28.scope. Mar 17 18:27:51.851000 audit[2097]: AVC avc: denied { perfmon } for pid=2097 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:27:51.851000 audit[2097]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=0 a1=40001955a0 a2=3c a3=0 items=0 ppid=2054 pid=2097 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:27:51.851000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3436643364663234356236363934323766616332653665303836363465 Mar 17 18:27:51.851000 audit[2097]: AVC avc: denied { bpf } for pid=2097 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:27:51.851000 audit[2097]: AVC avc: denied { bpf } for pid=2097 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:27:51.851000 audit[2097]: AVC avc: denied { bpf } for pid=2097 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:27:51.851000 audit[2097]: AVC avc: denied { perfmon } for pid=2097 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:27:51.851000 audit[2097]: AVC avc: denied { perfmon } for pid=2097 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:27:51.851000 audit[2097]: AVC avc: denied { perfmon } for pid=2097 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:27:51.851000 audit[2097]: AVC avc: denied { perfmon } for pid=2097 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:27:51.851000 audit[2097]: AVC avc: denied { perfmon } for pid=2097 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:27:51.851000 audit[2097]: AVC avc: denied { bpf } for pid=2097 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:27:51.851000 audit[2097]: AVC avc: denied { bpf } for pid=2097 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:27:51.851000 audit: BPF prog-id=104 op=LOAD Mar 17 18:27:51.851000 audit[2097]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=5 a1=40001958e0 a2=78 a3=0 items=0 ppid=2054 pid=2097 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:27:51.851000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3436643364663234356236363934323766616332653665303836363465 Mar 17 18:27:51.852000 audit[2097]: AVC avc: denied { bpf } for pid=2097 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:27:51.852000 audit[2097]: AVC avc: denied { bpf } for pid=2097 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:27:51.852000 audit[2097]: AVC avc: denied { perfmon } for pid=2097 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:27:51.852000 audit[2097]: AVC avc: denied { perfmon } for pid=2097 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:27:51.852000 audit[2097]: AVC avc: denied { perfmon } for pid=2097 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:27:51.852000 audit[2097]: AVC avc: denied { perfmon } for pid=2097 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:27:51.852000 audit[2097]: AVC avc: denied { perfmon } for pid=2097 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:27:51.852000 audit[2097]: AVC avc: denied { bpf } for pid=2097 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:27:51.852000 audit[2097]: AVC avc: denied { bpf } for pid=2097 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:27:51.852000 audit: BPF prog-id=105 op=LOAD Mar 17 18:27:51.852000 audit[2097]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=17 a0=5 a1=4000195670 a2=78 a3=0 items=0 ppid=2054 pid=2097 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:27:51.852000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3436643364663234356236363934323766616332653665303836363465 Mar 17 18:27:51.852000 audit: BPF prog-id=105 op=UNLOAD Mar 17 18:27:51.852000 audit: BPF prog-id=104 op=UNLOAD Mar 17 18:27:51.852000 audit[2097]: AVC avc: denied { bpf } for pid=2097 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:27:51.852000 audit[2097]: AVC avc: denied { bpf } for pid=2097 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:27:51.852000 audit[2097]: AVC avc: denied { bpf } for pid=2097 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:27:51.852000 audit[2097]: AVC avc: denied { perfmon } for pid=2097 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:27:51.852000 audit[2097]: AVC avc: denied { perfmon } for pid=2097 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:27:51.852000 audit[2097]: AVC avc: denied { perfmon } for pid=2097 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:27:51.852000 audit[2097]: AVC avc: denied { perfmon } for pid=2097 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:27:51.852000 audit[2097]: AVC avc: denied { perfmon } for pid=2097 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:27:51.852000 audit[2097]: AVC avc: denied { bpf } for pid=2097 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:27:51.852000 audit[2097]: AVC avc: denied { bpf } for pid=2097 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:27:51.852000 audit: BPF prog-id=106 op=LOAD Mar 17 18:27:51.852000 audit[2097]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=5 a1=4000195b40 a2=78 a3=0 items=0 ppid=2054 pid=2097 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:27:51.852000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3436643364663234356236363934323766616332653665303836363465 Mar 17 18:27:51.872957 env[1216]: time="2025-03-17T18:27:51.871100172Z" level=info msg="StartContainer for \"46d3df245b669427fac2e6e08664ee5159d6657facd3cb52c3c54ec9c5741e28\" returns successfully" Mar 17 18:27:51.886727 kubelet[1962]: E0317 18:27:51.885593 1962 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Mar 17 18:27:51.886727 kubelet[1962]: E0317 18:27:51.885734 1962 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Mar 17 18:27:51.888024 env[1216]: time="2025-03-17T18:27:51.887901006Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:tigera-operator-76c4976dd7-z9fjd,Uid:1e9b33c7-7091-49a9-a3b8-8514e7dee5d1,Namespace:tigera-operator,Attempt:0,}" Mar 17 18:27:51.902445 kubelet[1962]: I0317 18:27:51.902359 1962 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="kube-system/kube-proxy-st9h2" podStartSLOduration=0.902343142 podStartE2EDuration="902.343142ms" podCreationTimestamp="2025-03-17 18:27:51 +0000 UTC" firstStartedPulling="0001-01-01 00:00:00 +0000 UTC" lastFinishedPulling="0001-01-01 00:00:00 +0000 UTC" observedRunningTime="2025-03-17 18:27:51.902179624 +0000 UTC m=+7.128485005" watchObservedRunningTime="2025-03-17 18:27:51.902343142 +0000 UTC m=+7.128648523" Mar 17 18:27:51.912860 env[1216]: time="2025-03-17T18:27:51.912783044Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Mar 17 18:27:51.912939 env[1216]: time="2025-03-17T18:27:51.912868024Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Mar 17 18:27:51.912939 env[1216]: time="2025-03-17T18:27:51.912894310Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Mar 17 18:27:51.913256 env[1216]: time="2025-03-17T18:27:51.913207821Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/c98745c28f7f98707e35df3adb87b83cb4c0f8ebd1268c0cc87c1e10017f746a pid=2134 runtime=io.containerd.runc.v2 Mar 17 18:27:51.924062 systemd[1]: Started cri-containerd-c98745c28f7f98707e35df3adb87b83cb4c0f8ebd1268c0cc87c1e10017f746a.scope. Mar 17 18:27:51.965000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:27:51.965000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:27:51.965000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:27:51.965000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:27:51.965000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:27:51.965000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:27:51.965000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:27:51.965000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:27:51.965000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:27:51.965000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:27:51.965000 audit: BPF prog-id=107 op=LOAD Mar 17 18:27:51.967000 audit[2143]: AVC avc: denied { bpf } for pid=2143 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:27:51.967000 audit[2143]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000195b38 a2=10 a3=0 items=0 ppid=2134 pid=2143 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:27:51.967000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6339383734356332386637663938373037653335646633616462383762 Mar 17 18:27:51.967000 audit[2143]: AVC avc: denied { perfmon } for pid=2143 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:27:51.967000 audit[2143]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001955a0 a2=3c a3=0 items=0 ppid=2134 pid=2143 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:27:51.967000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6339383734356332386637663938373037653335646633616462383762 Mar 17 18:27:51.967000 audit[2143]: AVC avc: denied { bpf } for pid=2143 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:27:51.967000 audit[2143]: AVC avc: denied { bpf } for pid=2143 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:27:51.967000 audit[2143]: AVC avc: denied { bpf } for pid=2143 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:27:51.967000 audit[2143]: AVC avc: denied { perfmon } for pid=2143 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:27:51.967000 audit[2143]: AVC avc: denied { perfmon } for pid=2143 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:27:51.967000 audit[2143]: AVC avc: denied { perfmon } for pid=2143 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:27:51.967000 audit[2143]: AVC avc: denied { perfmon } for pid=2143 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:27:51.967000 audit[2143]: AVC avc: denied { perfmon } for pid=2143 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:27:51.967000 audit[2143]: AVC avc: denied { bpf } for pid=2143 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:27:51.967000 audit[2143]: AVC avc: denied { bpf } for pid=2143 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:27:51.967000 audit: BPF prog-id=108 op=LOAD Mar 17 18:27:51.967000 audit[2143]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001958e0 a2=78 a3=0 items=0 ppid=2134 pid=2143 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:27:51.967000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6339383734356332386637663938373037653335646633616462383762 Mar 17 18:27:51.969000 audit[2143]: AVC avc: denied { bpf } for pid=2143 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:27:51.969000 audit[2143]: AVC avc: denied { bpf } for pid=2143 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:27:51.969000 audit[2143]: AVC avc: denied { perfmon } for pid=2143 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:27:51.969000 audit[2143]: AVC avc: denied { perfmon } for pid=2143 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:27:51.969000 audit[2143]: AVC avc: denied { perfmon } for pid=2143 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:27:51.969000 audit[2143]: AVC avc: denied { perfmon } for pid=2143 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:27:51.969000 audit[2143]: AVC avc: denied { perfmon } for pid=2143 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:27:51.969000 audit[2143]: AVC avc: denied { bpf } for pid=2143 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:27:51.969000 audit[2143]: AVC avc: denied { bpf } for pid=2143 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:27:51.969000 audit: BPF prog-id=109 op=LOAD Mar 17 18:27:51.969000 audit[2143]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000195670 a2=78 a3=0 items=0 ppid=2134 pid=2143 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:27:51.969000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6339383734356332386637663938373037653335646633616462383762 Mar 17 18:27:51.970000 audit: BPF prog-id=109 op=UNLOAD Mar 17 18:27:51.970000 audit: BPF prog-id=108 op=UNLOAD Mar 17 18:27:51.970000 audit[2143]: AVC avc: denied { bpf } for pid=2143 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:27:51.970000 audit[2143]: AVC avc: denied { bpf } for pid=2143 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:27:51.970000 audit[2143]: AVC avc: denied { bpf } for pid=2143 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:27:51.970000 audit[2143]: AVC avc: denied { perfmon } for pid=2143 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:27:51.970000 audit[2143]: AVC avc: denied { perfmon } for pid=2143 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:27:51.970000 audit[2143]: AVC avc: denied { perfmon } for pid=2143 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:27:51.970000 audit[2143]: AVC avc: denied { perfmon } for pid=2143 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:27:51.970000 audit[2143]: AVC avc: denied { perfmon } for pid=2143 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:27:51.970000 audit[2143]: AVC avc: denied { bpf } for pid=2143 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:27:51.970000 audit[2143]: AVC avc: denied { bpf } for pid=2143 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:27:51.970000 audit: BPF prog-id=110 op=LOAD Mar 17 18:27:51.970000 audit[2143]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000195b40 a2=78 a3=0 items=0 ppid=2134 pid=2143 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:27:51.970000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6339383734356332386637663938373037653335646633616462383762 Mar 17 18:27:51.989456 env[1216]: time="2025-03-17T18:27:51.989406971Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:tigera-operator-76c4976dd7-z9fjd,Uid:1e9b33c7-7091-49a9-a3b8-8514e7dee5d1,Namespace:tigera-operator,Attempt:0,} returns sandbox id \"c98745c28f7f98707e35df3adb87b83cb4c0f8ebd1268c0cc87c1e10017f746a\"" Mar 17 18:27:51.990906 env[1216]: time="2025-03-17T18:27:51.990877507Z" level=info msg="PullImage \"quay.io/tigera/operator:v1.36.2\"" Mar 17 18:27:52.054000 audit[2200]: NETFILTER_CFG table=mangle:38 family=2 entries=1 op=nft_register_chain pid=2200 subj=system_u:system_r:kernel_t:s0 comm="iptables" Mar 17 18:27:52.054000 audit[2200]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=104 a0=3 a1=ffffcc6fbc70 a2=0 a3=1 items=0 ppid=2108 pid=2200 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:27:52.054000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D43414E415259002D74006D616E676C65 Mar 17 18:27:52.054000 audit[2201]: NETFILTER_CFG table=mangle:39 family=10 entries=1 op=nft_register_chain pid=2201 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Mar 17 18:27:52.054000 audit[2201]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=104 a0=3 a1=ffffdcb6cfa0 a2=0 a3=1 items=0 ppid=2108 pid=2201 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:27:52.054000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D43414E415259002D74006D616E676C65 Mar 17 18:27:52.055000 audit[2202]: NETFILTER_CFG table=nat:40 family=2 entries=1 op=nft_register_chain pid=2202 subj=system_u:system_r:kernel_t:s0 comm="iptables" Mar 17 18:27:52.055000 audit[2202]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=100 a0=3 a1=fffffcbeb9e0 a2=0 a3=1 items=0 ppid=2108 pid=2202 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:27:52.055000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D43414E415259002D74006E6174 Mar 17 18:27:52.055000 audit[2203]: NETFILTER_CFG table=nat:41 family=10 entries=1 op=nft_register_chain pid=2203 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Mar 17 18:27:52.055000 audit[2203]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=100 a0=3 a1=ffffd54acc60 a2=0 a3=1 items=0 ppid=2108 pid=2203 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:27:52.055000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D43414E415259002D74006E6174 Mar 17 18:27:52.056000 audit[2204]: NETFILTER_CFG table=filter:42 family=2 entries=1 op=nft_register_chain pid=2204 subj=system_u:system_r:kernel_t:s0 comm="iptables" Mar 17 18:27:52.056000 audit[2204]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=104 a0=3 a1=ffffff9a4360 a2=0 a3=1 items=0 ppid=2108 pid=2204 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:27:52.056000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D43414E415259002D740066696C746572 Mar 17 18:27:52.056000 audit[2205]: NETFILTER_CFG table=filter:43 family=10 entries=1 op=nft_register_chain pid=2205 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Mar 17 18:27:52.056000 audit[2205]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=104 a0=3 a1=ffffcfb1ed00 a2=0 a3=1 items=0 ppid=2108 pid=2205 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:27:52.056000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D43414E415259002D740066696C746572 Mar 17 18:27:52.157000 audit[2206]: NETFILTER_CFG table=filter:44 family=2 entries=1 op=nft_register_chain pid=2206 subj=system_u:system_r:kernel_t:s0 comm="iptables" Mar 17 18:27:52.157000 audit[2206]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=108 a0=3 a1=ffffd3293b40 a2=0 a3=1 items=0 ppid=2108 pid=2206 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:27:52.157000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D45585445524E414C2D5345525649434553002D740066696C746572 Mar 17 18:27:52.161000 audit[2208]: NETFILTER_CFG table=filter:45 family=2 entries=1 op=nft_register_rule pid=2208 subj=system_u:system_r:kernel_t:s0 comm="iptables" Mar 17 18:27:52.161000 audit[2208]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=752 a0=3 a1=ffffe72fdd10 a2=0 a3=1 items=0 ppid=2108 pid=2208 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:27:52.161000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E657465732065787465726E616C6C792D76697369626C652073657276696365 Mar 17 18:27:52.164000 audit[2211]: NETFILTER_CFG table=filter:46 family=2 entries=1 op=nft_register_rule pid=2211 subj=system_u:system_r:kernel_t:s0 comm="iptables" Mar 17 18:27:52.164000 audit[2211]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=752 a0=3 a1=ffffc7370720 a2=0 a3=1 items=0 ppid=2108 pid=2211 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:27:52.164000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E657465732065787465726E616C6C792D76697369626C65207365727669 Mar 17 18:27:52.165000 audit[2212]: NETFILTER_CFG table=filter:47 family=2 entries=1 op=nft_register_chain pid=2212 subj=system_u:system_r:kernel_t:s0 comm="iptables" Mar 17 18:27:52.165000 audit[2212]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=100 a0=3 a1=fffff7362f00 a2=0 a3=1 items=0 ppid=2108 pid=2212 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:27:52.165000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D4E4F4445504F525453002D740066696C746572 Mar 17 18:27:52.167000 audit[2214]: NETFILTER_CFG table=filter:48 family=2 entries=1 op=nft_register_rule pid=2214 subj=system_u:system_r:kernel_t:s0 comm="iptables" Mar 17 18:27:52.167000 audit[2214]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=528 a0=3 a1=ffffc5ae07c0 a2=0 a3=1 items=0 ppid=2108 pid=2214 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:27:52.167000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206865616C746820636865636B207365727669636520706F727473002D6A004B5542452D4E4F4445504F525453 Mar 17 18:27:52.168000 audit[2215]: NETFILTER_CFG table=filter:49 family=2 entries=1 op=nft_register_chain pid=2215 subj=system_u:system_r:kernel_t:s0 comm="iptables" Mar 17 18:27:52.168000 audit[2215]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=100 a0=3 a1=ffffef4c23c0 a2=0 a3=1 items=0 ppid=2108 pid=2215 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:27:52.168000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D5345525649434553002D740066696C746572 Mar 17 18:27:52.170000 audit[2217]: NETFILTER_CFG table=filter:50 family=2 entries=1 op=nft_register_rule pid=2217 subj=system_u:system_r:kernel_t:s0 comm="iptables" Mar 17 18:27:52.170000 audit[2217]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=744 a0=3 a1=ffffce7867f0 a2=0 a3=1 items=0 ppid=2108 pid=2217 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:27:52.170000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D Mar 17 18:27:52.173000 audit[2220]: NETFILTER_CFG table=filter:51 family=2 entries=1 op=nft_register_rule pid=2220 subj=system_u:system_r:kernel_t:s0 comm="iptables" Mar 17 18:27:52.173000 audit[2220]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=744 a0=3 a1=ffffee11eec0 a2=0 a3=1 items=0 ppid=2108 pid=2220 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:27:52.173000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D49004F5554505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D53 Mar 17 18:27:52.174000 audit[2221]: NETFILTER_CFG table=filter:52 family=2 entries=1 op=nft_register_chain pid=2221 subj=system_u:system_r:kernel_t:s0 comm="iptables" Mar 17 18:27:52.174000 audit[2221]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=100 a0=3 a1=ffffe654c9f0 a2=0 a3=1 items=0 ppid=2108 pid=2221 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:27:52.174000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D464F5257415244002D740066696C746572 Mar 17 18:27:52.176000 audit[2223]: NETFILTER_CFG table=filter:53 family=2 entries=1 op=nft_register_rule pid=2223 subj=system_u:system_r:kernel_t:s0 comm="iptables" Mar 17 18:27:52.176000 audit[2223]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=528 a0=3 a1=fffffda7d9d0 a2=0 a3=1 items=0 ppid=2108 pid=2223 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:27:52.176000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E6574657320666F7277617264696E672072756C6573002D6A004B5542452D464F5257415244 Mar 17 18:27:52.177000 audit[2224]: NETFILTER_CFG table=filter:54 family=2 entries=1 op=nft_register_chain pid=2224 subj=system_u:system_r:kernel_t:s0 comm="iptables" Mar 17 18:27:52.177000 audit[2224]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=104 a0=3 a1=ffffce3e7b70 a2=0 a3=1 items=0 ppid=2108 pid=2224 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:27:52.177000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D4649524557414C4C002D740066696C746572 Mar 17 18:27:52.179000 audit[2226]: NETFILTER_CFG table=filter:55 family=2 entries=1 op=nft_register_rule pid=2226 subj=system_u:system_r:kernel_t:s0 comm="iptables" Mar 17 18:27:52.179000 audit[2226]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=748 a0=3 a1=fffffee1b500 a2=0 a3=1 items=0 ppid=2108 pid=2226 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:27:52.179000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206C6F61642062616C616E636572206669726577616C6C002D6A Mar 17 18:27:52.182000 audit[2229]: NETFILTER_CFG table=filter:56 family=2 entries=1 op=nft_register_rule pid=2229 subj=system_u:system_r:kernel_t:s0 comm="iptables" Mar 17 18:27:52.182000 audit[2229]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=748 a0=3 a1=ffffed8ec800 a2=0 a3=1 items=0 ppid=2108 pid=2229 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:27:52.182000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D49004F5554505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206C6F61642062616C616E636572206669726577616C6C002D6A Mar 17 18:27:52.185000 audit[2232]: NETFILTER_CFG table=filter:57 family=2 entries=1 op=nft_register_rule pid=2232 subj=system_u:system_r:kernel_t:s0 comm="iptables" Mar 17 18:27:52.185000 audit[2232]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=748 a0=3 a1=ffffea3c4950 a2=0 a3=1 items=0 ppid=2108 pid=2232 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:27:52.185000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206C6F61642062616C616E636572206669726577616C6C002D Mar 17 18:27:52.186000 audit[2233]: NETFILTER_CFG table=nat:58 family=2 entries=1 op=nft_register_chain pid=2233 subj=system_u:system_r:kernel_t:s0 comm="iptables" Mar 17 18:27:52.186000 audit[2233]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=96 a0=3 a1=ffffecb0e140 a2=0 a3=1 items=0 ppid=2108 pid=2233 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:27:52.186000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D5345525649434553002D74006E6174 Mar 17 18:27:52.188000 audit[2235]: NETFILTER_CFG table=nat:59 family=2 entries=1 op=nft_register_rule pid=2235 subj=system_u:system_r:kernel_t:s0 comm="iptables" Mar 17 18:27:52.188000 audit[2235]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=524 a0=3 a1=fffffb577cd0 a2=0 a3=1 items=0 ppid=2108 pid=2235 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:27:52.188000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D49004F5554505554002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D5345525649434553 Mar 17 18:27:52.191000 audit[2238]: NETFILTER_CFG table=nat:60 family=2 entries=1 op=nft_register_rule pid=2238 subj=system_u:system_r:kernel_t:s0 comm="iptables" Mar 17 18:27:52.191000 audit[2238]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=528 a0=3 a1=ffffd5b3e460 a2=0 a3=1 items=0 ppid=2108 pid=2238 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:27:52.191000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900505245524F5554494E47002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D5345525649434553 Mar 17 18:27:52.192000 audit[2239]: NETFILTER_CFG table=nat:61 family=2 entries=1 op=nft_register_chain pid=2239 subj=system_u:system_r:kernel_t:s0 comm="iptables" Mar 17 18:27:52.192000 audit[2239]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=100 a0=3 a1=ffffe988d760 a2=0 a3=1 items=0 ppid=2108 pid=2239 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:27:52.192000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D504F5354524F5554494E47002D74006E6174 Mar 17 18:27:52.194000 audit[2241]: NETFILTER_CFG table=nat:62 family=2 entries=1 op=nft_register_rule pid=2241 subj=system_u:system_r:kernel_t:s0 comm="iptables" Mar 17 18:27:52.194000 audit[2241]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=532 a0=3 a1=ffffdfa7de70 a2=0 a3=1 items=0 ppid=2108 pid=2241 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:27:52.194000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900504F5354524F5554494E47002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E6574657320706F7374726F7574696E672072756C6573002D6A004B5542452D504F5354524F5554494E47 Mar 17 18:27:52.216000 audit[2247]: NETFILTER_CFG table=filter:63 family=2 entries=8 op=nft_register_rule pid=2247 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Mar 17 18:27:52.216000 audit[2247]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=5248 a0=3 a1=fffffc4fd1b0 a2=0 a3=1 items=0 ppid=2108 pid=2247 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:27:52.216000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Mar 17 18:27:52.231000 audit[2247]: NETFILTER_CFG table=nat:64 family=2 entries=14 op=nft_register_chain pid=2247 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Mar 17 18:27:52.231000 audit[2247]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=5508 a0=3 a1=fffffc4fd1b0 a2=0 a3=1 items=0 ppid=2108 pid=2247 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:27:52.231000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Mar 17 18:27:52.232000 audit[2252]: NETFILTER_CFG table=filter:65 family=10 entries=1 op=nft_register_chain pid=2252 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Mar 17 18:27:52.232000 audit[2252]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=108 a0=3 a1=ffffe3ba6340 a2=0 a3=1 items=0 ppid=2108 pid=2252 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:27:52.232000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D45585445524E414C2D5345525649434553002D740066696C746572 Mar 17 18:27:52.234000 audit[2254]: NETFILTER_CFG table=filter:66 family=10 entries=2 op=nft_register_chain pid=2254 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Mar 17 18:27:52.234000 audit[2254]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=836 a0=3 a1=ffffd939a090 a2=0 a3=1 items=0 ppid=2108 pid=2254 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:27:52.234000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E657465732065787465726E616C6C792D76697369626C6520736572766963 Mar 17 18:27:52.237000 audit[2257]: NETFILTER_CFG table=filter:67 family=10 entries=2 op=nft_register_chain pid=2257 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Mar 17 18:27:52.237000 audit[2257]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=836 a0=3 a1=ffffc5084c50 a2=0 a3=1 items=0 ppid=2108 pid=2257 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:27:52.237000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E657465732065787465726E616C6C792D76697369626C652073657276 Mar 17 18:27:52.238000 audit[2258]: NETFILTER_CFG table=filter:68 family=10 entries=1 op=nft_register_chain pid=2258 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Mar 17 18:27:52.238000 audit[2258]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=100 a0=3 a1=ffffe9123c40 a2=0 a3=1 items=0 ppid=2108 pid=2258 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:27:52.238000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D4E4F4445504F525453002D740066696C746572 Mar 17 18:27:52.240000 audit[2260]: NETFILTER_CFG table=filter:69 family=10 entries=1 op=nft_register_rule pid=2260 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Mar 17 18:27:52.240000 audit[2260]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=528 a0=3 a1=ffffd851f290 a2=0 a3=1 items=0 ppid=2108 pid=2260 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:27:52.240000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206865616C746820636865636B207365727669636520706F727473002D6A004B5542452D4E4F4445504F525453 Mar 17 18:27:52.241000 audit[2261]: NETFILTER_CFG table=filter:70 family=10 entries=1 op=nft_register_chain pid=2261 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Mar 17 18:27:52.241000 audit[2261]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=100 a0=3 a1=ffffd0528d50 a2=0 a3=1 items=0 ppid=2108 pid=2261 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:27:52.241000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D5345525649434553002D740066696C746572 Mar 17 18:27:52.243000 audit[2263]: NETFILTER_CFG table=filter:71 family=10 entries=1 op=nft_register_rule pid=2263 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Mar 17 18:27:52.243000 audit[2263]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=744 a0=3 a1=ffffc2737cc0 a2=0 a3=1 items=0 ppid=2108 pid=2263 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:27:52.243000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B554245 Mar 17 18:27:52.246000 audit[2266]: NETFILTER_CFG table=filter:72 family=10 entries=2 op=nft_register_chain pid=2266 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Mar 17 18:27:52.246000 audit[2266]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=828 a0=3 a1=fffffc40d530 a2=0 a3=1 items=0 ppid=2108 pid=2266 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:27:52.246000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D49004F5554505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D Mar 17 18:27:52.247000 audit[2267]: NETFILTER_CFG table=filter:73 family=10 entries=1 op=nft_register_chain pid=2267 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Mar 17 18:27:52.247000 audit[2267]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=100 a0=3 a1=ffffd1ba0650 a2=0 a3=1 items=0 ppid=2108 pid=2267 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:27:52.247000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D464F5257415244002D740066696C746572 Mar 17 18:27:52.249000 audit[2269]: NETFILTER_CFG table=filter:74 family=10 entries=1 op=nft_register_rule pid=2269 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Mar 17 18:27:52.249000 audit[2269]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=528 a0=3 a1=ffffe87c5b80 a2=0 a3=1 items=0 ppid=2108 pid=2269 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:27:52.249000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E6574657320666F7277617264696E672072756C6573002D6A004B5542452D464F5257415244 Mar 17 18:27:52.250000 audit[2270]: NETFILTER_CFG table=filter:75 family=10 entries=1 op=nft_register_chain pid=2270 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Mar 17 18:27:52.250000 audit[2270]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=104 a0=3 a1=ffffd99484c0 a2=0 a3=1 items=0 ppid=2108 pid=2270 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:27:52.250000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D4649524557414C4C002D740066696C746572 Mar 17 18:27:52.253000 audit[2272]: NETFILTER_CFG table=filter:76 family=10 entries=1 op=nft_register_rule pid=2272 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Mar 17 18:27:52.253000 audit[2272]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=748 a0=3 a1=fffff16640f0 a2=0 a3=1 items=0 ppid=2108 pid=2272 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:27:52.253000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206C6F61642062616C616E636572206669726577616C6C002D6A Mar 17 18:27:52.256000 audit[2275]: NETFILTER_CFG table=filter:77 family=10 entries=1 op=nft_register_rule pid=2275 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Mar 17 18:27:52.256000 audit[2275]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=748 a0=3 a1=ffffeb94a2a0 a2=0 a3=1 items=0 ppid=2108 pid=2275 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:27:52.256000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D49004F5554505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206C6F61642062616C616E636572206669726577616C6C002D Mar 17 18:27:52.260000 audit[2278]: NETFILTER_CFG table=filter:78 family=10 entries=1 op=nft_register_rule pid=2278 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Mar 17 18:27:52.260000 audit[2278]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=748 a0=3 a1=ffffedb98060 a2=0 a3=1 items=0 ppid=2108 pid=2278 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:27:52.260000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206C6F61642062616C616E636572206669726577616C6C Mar 17 18:27:52.261000 audit[2279]: NETFILTER_CFG table=nat:79 family=10 entries=1 op=nft_register_chain pid=2279 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Mar 17 18:27:52.261000 audit[2279]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=96 a0=3 a1=ffffd8034a10 a2=0 a3=1 items=0 ppid=2108 pid=2279 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:27:52.261000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D5345525649434553002D74006E6174 Mar 17 18:27:52.263000 audit[2281]: NETFILTER_CFG table=nat:80 family=10 entries=2 op=nft_register_chain pid=2281 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Mar 17 18:27:52.263000 audit[2281]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=600 a0=3 a1=ffffc9e73820 a2=0 a3=1 items=0 ppid=2108 pid=2281 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:27:52.263000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D49004F5554505554002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D5345525649434553 Mar 17 18:27:52.266000 audit[2284]: NETFILTER_CFG table=nat:81 family=10 entries=2 op=nft_register_chain pid=2284 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Mar 17 18:27:52.266000 audit[2284]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=608 a0=3 a1=ffffd2507540 a2=0 a3=1 items=0 ppid=2108 pid=2284 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:27:52.266000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900505245524F5554494E47002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D5345525649434553 Mar 17 18:27:52.267000 audit[2285]: NETFILTER_CFG table=nat:82 family=10 entries=1 op=nft_register_chain pid=2285 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Mar 17 18:27:52.267000 audit[2285]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=100 a0=3 a1=ffffe02564e0 a2=0 a3=1 items=0 ppid=2108 pid=2285 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:27:52.267000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D504F5354524F5554494E47002D74006E6174 Mar 17 18:27:52.269000 audit[2287]: NETFILTER_CFG table=nat:83 family=10 entries=2 op=nft_register_chain pid=2287 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Mar 17 18:27:52.269000 audit[2287]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=612 a0=3 a1=fffffe5d4b10 a2=0 a3=1 items=0 ppid=2108 pid=2287 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:27:52.269000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900504F5354524F5554494E47002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E6574657320706F7374726F7574696E672072756C6573002D6A004B5542452D504F5354524F5554494E47 Mar 17 18:27:52.270000 audit[2288]: NETFILTER_CFG table=filter:84 family=10 entries=1 op=nft_register_chain pid=2288 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Mar 17 18:27:52.270000 audit[2288]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=100 a0=3 a1=ffffdb5bd1f0 a2=0 a3=1 items=0 ppid=2108 pid=2288 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:27:52.270000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D4649524557414C4C002D740066696C746572 Mar 17 18:27:52.272000 audit[2290]: NETFILTER_CFG table=filter:85 family=10 entries=1 op=nft_register_rule pid=2290 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Mar 17 18:27:52.272000 audit[2290]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=228 a0=3 a1=ffffcce09a70 a2=0 a3=1 items=0 ppid=2108 pid=2290 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:27:52.272000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6A004B5542452D4649524557414C4C Mar 17 18:27:52.275000 audit[2293]: NETFILTER_CFG table=filter:86 family=10 entries=1 op=nft_register_rule pid=2293 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Mar 17 18:27:52.275000 audit[2293]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=228 a0=3 a1=ffffd70535e0 a2=0 a3=1 items=0 ppid=2108 pid=2293 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:27:52.275000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D49004F5554505554002D740066696C746572002D6A004B5542452D4649524557414C4C Mar 17 18:27:52.277000 audit[2295]: NETFILTER_CFG table=filter:87 family=10 entries=3 op=nft_register_rule pid=2295 subj=system_u:system_r:kernel_t:s0 comm="ip6tables-resto" Mar 17 18:27:52.277000 audit[2295]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=2088 a0=3 a1=ffffc8af83b0 a2=0 a3=1 items=0 ppid=2108 pid=2295 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:27:52.277000 audit: PROCTITLE proctitle=6970367461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Mar 17 18:27:52.277000 audit[2295]: NETFILTER_CFG table=nat:88 family=10 entries=7 op=nft_register_chain pid=2295 subj=system_u:system_r:kernel_t:s0 comm="ip6tables-resto" Mar 17 18:27:52.277000 audit[2295]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=2056 a0=3 a1=ffffc8af83b0 a2=0 a3=1 items=0 ppid=2108 pid=2295 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:27:52.277000 audit: PROCTITLE proctitle=6970367461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Mar 17 18:27:52.602012 systemd[1]: run-containerd-runc-k8s.io-519c3b8a7d115cba162bc830563f7e10a191c79a4991241b54006894d7e8172d-runc.OB3k3N.mount: Deactivated successfully. Mar 17 18:27:54.233552 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount4246464073.mount: Deactivated successfully. Mar 17 18:27:54.460578 kubelet[1962]: E0317 18:27:54.459843 1962 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Mar 17 18:27:54.693235 env[1216]: time="2025-03-17T18:27:54.693136628Z" level=info msg="ImageCreate event &ImageCreate{Name:quay.io/tigera/operator:v1.36.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Mar 17 18:27:54.695563 env[1216]: time="2025-03-17T18:27:54.695524611Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:30d521e4e84764b396aacbb2a373ca7a573f84571e3955b34329652acccfb73c,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Mar 17 18:27:54.697391 env[1216]: time="2025-03-17T18:27:54.697355406Z" level=info msg="ImageUpdate event &ImageUpdate{Name:quay.io/tigera/operator:v1.36.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Mar 17 18:27:54.698892 env[1216]: time="2025-03-17T18:27:54.698865139Z" level=info msg="ImageCreate event &ImageCreate{Name:quay.io/tigera/operator@sha256:fc9ea45f2475fd99db1b36d2ff180a50017b1a5ea0e82a171c6b439b3a620764,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Mar 17 18:27:54.699432 env[1216]: time="2025-03-17T18:27:54.699401963Z" level=info msg="PullImage \"quay.io/tigera/operator:v1.36.2\" returns image reference \"sha256:30d521e4e84764b396aacbb2a373ca7a573f84571e3955b34329652acccfb73c\"" Mar 17 18:27:54.701883 env[1216]: time="2025-03-17T18:27:54.701827513Z" level=info msg="CreateContainer within sandbox \"c98745c28f7f98707e35df3adb87b83cb4c0f8ebd1268c0cc87c1e10017f746a\" for container &ContainerMetadata{Name:tigera-operator,Attempt:0,}" Mar 17 18:27:54.711457 env[1216]: time="2025-03-17T18:27:54.711413373Z" level=info msg="CreateContainer within sandbox \"c98745c28f7f98707e35df3adb87b83cb4c0f8ebd1268c0cc87c1e10017f746a\" for &ContainerMetadata{Name:tigera-operator,Attempt:0,} returns container id \"57e7ce9acdf2666b910ceec2d4ba9b3a2cc7b73dbfee4315e5709217649a748f\"" Mar 17 18:27:54.711940 env[1216]: time="2025-03-17T18:27:54.711794887Z" level=info msg="StartContainer for \"57e7ce9acdf2666b910ceec2d4ba9b3a2cc7b73dbfee4315e5709217649a748f\"" Mar 17 18:27:54.736748 systemd[1]: Started cri-containerd-57e7ce9acdf2666b910ceec2d4ba9b3a2cc7b73dbfee4315e5709217649a748f.scope. Mar 17 18:27:54.757000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:27:54.761062 kernel: kauditd_printk_skb: 320 callbacks suppressed Mar 17 18:27:54.761121 kernel: audit: type=1400 audit(1742236074.757:897): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:27:54.761152 kernel: audit: type=1400 audit(1742236074.757:898): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:27:54.757000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:27:54.757000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:27:54.764546 kernel: audit: type=1400 audit(1742236074.757:899): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:27:54.764596 kernel: audit: type=1400 audit(1742236074.757:900): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:27:54.757000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:27:54.757000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:27:54.768027 kernel: audit: type=1400 audit(1742236074.757:901): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:27:54.768091 kernel: audit: type=1400 audit(1742236074.757:902): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:27:54.757000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:27:54.769758 kernel: audit: type=1400 audit(1742236074.757:903): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:27:54.757000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:27:54.771544 kernel: audit: type=1400 audit(1742236074.757:904): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:27:54.757000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:27:54.773244 kernel: audit: type=1400 audit(1742236074.757:905): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:27:54.757000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:27:54.774926 kernel: audit: type=1400 audit(1742236074.758:906): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:27:54.758000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:27:54.758000 audit: BPF prog-id=111 op=LOAD Mar 17 18:27:54.760000 audit[2304]: AVC avc: denied { bpf } for pid=2304 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:27:54.760000 audit[2304]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000145b38 a2=10 a3=0 items=0 ppid=2134 pid=2304 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:27:54.760000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3537653763653961636466323636366239313063656563326434626139 Mar 17 18:27:54.760000 audit[2304]: AVC avc: denied { perfmon } for pid=2304 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:27:54.760000 audit[2304]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001455a0 a2=3c a3=0 items=0 ppid=2134 pid=2304 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:27:54.760000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3537653763653961636466323636366239313063656563326434626139 Mar 17 18:27:54.760000 audit[2304]: AVC avc: denied { bpf } for pid=2304 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:27:54.760000 audit[2304]: AVC avc: denied { bpf } for pid=2304 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:27:54.760000 audit[2304]: AVC avc: denied { bpf } for pid=2304 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:27:54.760000 audit[2304]: AVC avc: denied { perfmon } for pid=2304 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:27:54.760000 audit[2304]: AVC avc: denied { perfmon } for pid=2304 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:27:54.760000 audit[2304]: AVC avc: denied { perfmon } for pid=2304 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:27:54.760000 audit[2304]: AVC avc: denied { perfmon } for pid=2304 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:27:54.760000 audit[2304]: AVC avc: denied { perfmon } for pid=2304 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:27:54.760000 audit[2304]: AVC avc: denied { bpf } for pid=2304 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:27:54.760000 audit[2304]: AVC avc: denied { bpf } for pid=2304 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:27:54.760000 audit: BPF prog-id=112 op=LOAD Mar 17 18:27:54.760000 audit[2304]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001458e0 a2=78 a3=0 items=0 ppid=2134 pid=2304 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:27:54.760000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3537653763653961636466323636366239313063656563326434626139 Mar 17 18:27:54.762000 audit[2304]: AVC avc: denied { bpf } for pid=2304 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:27:54.762000 audit[2304]: AVC avc: denied { bpf } for pid=2304 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:27:54.762000 audit[2304]: AVC avc: denied { perfmon } for pid=2304 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:27:54.762000 audit[2304]: AVC avc: denied { perfmon } for pid=2304 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:27:54.762000 audit[2304]: AVC avc: denied { perfmon } for pid=2304 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:27:54.762000 audit[2304]: AVC avc: denied { perfmon } for pid=2304 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:27:54.762000 audit[2304]: AVC avc: denied { perfmon } for pid=2304 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:27:54.762000 audit[2304]: AVC avc: denied { bpf } for pid=2304 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:27:54.762000 audit[2304]: AVC avc: denied { bpf } for pid=2304 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:27:54.762000 audit: BPF prog-id=113 op=LOAD Mar 17 18:27:54.762000 audit[2304]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000145670 a2=78 a3=0 items=0 ppid=2134 pid=2304 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:27:54.762000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3537653763653961636466323636366239313063656563326434626139 Mar 17 18:27:54.764000 audit: BPF prog-id=113 op=UNLOAD Mar 17 18:27:54.764000 audit: BPF prog-id=112 op=UNLOAD Mar 17 18:27:54.764000 audit[2304]: AVC avc: denied { bpf } for pid=2304 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:27:54.764000 audit[2304]: AVC avc: denied { bpf } for pid=2304 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:27:54.764000 audit[2304]: AVC avc: denied { bpf } for pid=2304 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:27:54.764000 audit[2304]: AVC avc: denied { perfmon } for pid=2304 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:27:54.764000 audit[2304]: AVC avc: denied { perfmon } for pid=2304 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:27:54.764000 audit[2304]: AVC avc: denied { perfmon } for pid=2304 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:27:54.764000 audit[2304]: AVC avc: denied { perfmon } for pid=2304 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:27:54.764000 audit[2304]: AVC avc: denied { perfmon } for pid=2304 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:27:54.764000 audit[2304]: AVC avc: denied { bpf } for pid=2304 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:27:54.764000 audit[2304]: AVC avc: denied { bpf } for pid=2304 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:27:54.764000 audit: BPF prog-id=114 op=LOAD Mar 17 18:27:54.764000 audit[2304]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000145b40 a2=78 a3=0 items=0 ppid=2134 pid=2304 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:27:54.764000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3537653763653961636466323636366239313063656563326434626139 Mar 17 18:27:54.791946 env[1216]: time="2025-03-17T18:27:54.791905065Z" level=info msg="StartContainer for \"57e7ce9acdf2666b910ceec2d4ba9b3a2cc7b73dbfee4315e5709217649a748f\" returns successfully" Mar 17 18:27:54.891033 kubelet[1962]: E0317 18:27:54.891005 1962 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Mar 17 18:27:54.914296 kubelet[1962]: I0317 18:27:54.913227 1962 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="tigera-operator/tigera-operator-76c4976dd7-z9fjd" podStartSLOduration=1.20307677 podStartE2EDuration="3.913202992s" podCreationTimestamp="2025-03-17 18:27:51 +0000 UTC" firstStartedPulling="2025-03-17 18:27:51.990442887 +0000 UTC m=+7.216748228" lastFinishedPulling="2025-03-17 18:27:54.700569109 +0000 UTC m=+9.926874450" observedRunningTime="2025-03-17 18:27:54.901061717 +0000 UTC m=+10.127367098" watchObservedRunningTime="2025-03-17 18:27:54.913202992 +0000 UTC m=+10.139508333" Mar 17 18:27:55.200288 systemd[1]: run-containerd-runc-k8s.io-57e7ce9acdf2666b910ceec2d4ba9b3a2cc7b73dbfee4315e5709217649a748f-runc.WoPaxx.mount: Deactivated successfully. Mar 17 18:27:57.005849 kubelet[1962]: E0317 18:27:57.005790 1962 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Mar 17 18:27:57.894961 kubelet[1962]: E0317 18:27:57.894929 1962 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Mar 17 18:27:58.014957 update_engine[1210]: I0317 18:27:58.014917 1210 update_attempter.cc:509] Updating boot flags... Mar 17 18:27:58.356000 audit[2351]: NETFILTER_CFG table=filter:89 family=2 entries=15 op=nft_register_rule pid=2351 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Mar 17 18:27:58.356000 audit[2351]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=5992 a0=3 a1=ffffe9ab2690 a2=0 a3=1 items=0 ppid=2108 pid=2351 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:27:58.356000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Mar 17 18:27:58.360000 audit[2351]: NETFILTER_CFG table=nat:90 family=2 entries=12 op=nft_register_rule pid=2351 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Mar 17 18:27:58.360000 audit[2351]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=2700 a0=3 a1=ffffe9ab2690 a2=0 a3=1 items=0 ppid=2108 pid=2351 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:27:58.360000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Mar 17 18:27:58.373000 audit[2353]: NETFILTER_CFG table=filter:91 family=2 entries=16 op=nft_register_rule pid=2353 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Mar 17 18:27:58.373000 audit[2353]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=5992 a0=3 a1=ffffcbc1ebf0 a2=0 a3=1 items=0 ppid=2108 pid=2353 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:27:58.373000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Mar 17 18:27:58.379000 audit[2353]: NETFILTER_CFG table=nat:92 family=2 entries=12 op=nft_register_rule pid=2353 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Mar 17 18:27:58.379000 audit[2353]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=2700 a0=3 a1=ffffcbc1ebf0 a2=0 a3=1 items=0 ppid=2108 pid=2353 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:27:58.379000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Mar 17 18:27:58.456725 systemd[1]: Created slice kubepods-besteffort-podbe316314_4a7f_4be6_94e0_3a61af5683cd.slice. Mar 17 18:27:58.515428 systemd[1]: Created slice kubepods-besteffort-pod0ae37aa1_1891_40fe_82d7_0ce810ab5af9.slice. Mar 17 18:27:58.618759 kubelet[1962]: E0317 18:27:58.618619 1962 pod_workers.go:1301] "Error syncing pod, skipping" err="network is not ready: container runtime network not ready: NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" pod="calico-system/csi-node-driver-2brpt" podUID="89bbd71b-c404-4c0b-b107-937675df3164" Mar 17 18:27:58.628210 kubelet[1962]: I0317 18:27:58.628160 1962 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"xtables-lock\" (UniqueName: \"kubernetes.io/host-path/0ae37aa1-1891-40fe-82d7-0ce810ab5af9-xtables-lock\") pod \"calico-node-kgl87\" (UID: \"0ae37aa1-1891-40fe-82d7-0ce810ab5af9\") " pod="calico-system/calico-node-kgl87" Mar 17 18:27:58.628210 kubelet[1962]: I0317 18:27:58.628204 1962 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"var-run-calico\" (UniqueName: \"kubernetes.io/host-path/0ae37aa1-1891-40fe-82d7-0ce810ab5af9-var-run-calico\") pod \"calico-node-kgl87\" (UID: \"0ae37aa1-1891-40fe-82d7-0ce810ab5af9\") " pod="calico-system/calico-node-kgl87" Mar 17 18:27:58.628367 kubelet[1962]: I0317 18:27:58.628223 1962 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"typha-certs\" (UniqueName: \"kubernetes.io/secret/be316314-4a7f-4be6-94e0-3a61af5683cd-typha-certs\") pod \"calico-typha-5cf59bcf46-858hc\" (UID: \"be316314-4a7f-4be6-94e0-3a61af5683cd\") " pod="calico-system/calico-typha-5cf59bcf46-858hc" Mar 17 18:27:58.628367 kubelet[1962]: I0317 18:27:58.628238 1962 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"policysync\" (UniqueName: \"kubernetes.io/host-path/0ae37aa1-1891-40fe-82d7-0ce810ab5af9-policysync\") pod \"calico-node-kgl87\" (UID: \"0ae37aa1-1891-40fe-82d7-0ce810ab5af9\") " pod="calico-system/calico-node-kgl87" Mar 17 18:27:58.628367 kubelet[1962]: I0317 18:27:58.628253 1962 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"cni-log-dir\" (UniqueName: \"kubernetes.io/host-path/0ae37aa1-1891-40fe-82d7-0ce810ab5af9-cni-log-dir\") pod \"calico-node-kgl87\" (UID: \"0ae37aa1-1891-40fe-82d7-0ce810ab5af9\") " pod="calico-system/calico-node-kgl87" Mar 17 18:27:58.628367 kubelet[1962]: I0317 18:27:58.628266 1962 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"socket-dir\" (UniqueName: \"kubernetes.io/host-path/89bbd71b-c404-4c0b-b107-937675df3164-socket-dir\") pod \"csi-node-driver-2brpt\" (UID: \"89bbd71b-c404-4c0b-b107-937675df3164\") " pod="calico-system/csi-node-driver-2brpt" Mar 17 18:27:58.628367 kubelet[1962]: I0317 18:27:58.628283 1962 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"registration-dir\" (UniqueName: \"kubernetes.io/host-path/89bbd71b-c404-4c0b-b107-937675df3164-registration-dir\") pod \"csi-node-driver-2brpt\" (UID: \"89bbd71b-c404-4c0b-b107-937675df3164\") " pod="calico-system/csi-node-driver-2brpt" Mar 17 18:27:58.628491 kubelet[1962]: I0317 18:27:58.628299 1962 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"node-certs\" (UniqueName: \"kubernetes.io/secret/0ae37aa1-1891-40fe-82d7-0ce810ab5af9-node-certs\") pod \"calico-node-kgl87\" (UID: \"0ae37aa1-1891-40fe-82d7-0ce810ab5af9\") " pod="calico-system/calico-node-kgl87" Mar 17 18:27:58.628491 kubelet[1962]: I0317 18:27:58.628314 1962 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"cni-bin-dir\" (UniqueName: \"kubernetes.io/host-path/0ae37aa1-1891-40fe-82d7-0ce810ab5af9-cni-bin-dir\") pod \"calico-node-kgl87\" (UID: \"0ae37aa1-1891-40fe-82d7-0ce810ab5af9\") " pod="calico-system/calico-node-kgl87" Mar 17 18:27:58.628491 kubelet[1962]: I0317 18:27:58.628331 1962 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"varrun\" (UniqueName: \"kubernetes.io/host-path/89bbd71b-c404-4c0b-b107-937675df3164-varrun\") pod \"csi-node-driver-2brpt\" (UID: \"89bbd71b-c404-4c0b-b107-937675df3164\") " pod="calico-system/csi-node-driver-2brpt" Mar 17 18:27:58.628491 kubelet[1962]: I0317 18:27:58.628346 1962 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-nfq2p\" (UniqueName: \"kubernetes.io/projected/be316314-4a7f-4be6-94e0-3a61af5683cd-kube-api-access-nfq2p\") pod \"calico-typha-5cf59bcf46-858hc\" (UID: \"be316314-4a7f-4be6-94e0-3a61af5683cd\") " pod="calico-system/calico-typha-5cf59bcf46-858hc" Mar 17 18:27:58.628491 kubelet[1962]: I0317 18:27:58.628363 1962 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"tigera-ca-bundle\" (UniqueName: \"kubernetes.io/configmap/be316314-4a7f-4be6-94e0-3a61af5683cd-tigera-ca-bundle\") pod \"calico-typha-5cf59bcf46-858hc\" (UID: \"be316314-4a7f-4be6-94e0-3a61af5683cd\") " pod="calico-system/calico-typha-5cf59bcf46-858hc" Mar 17 18:27:58.628597 kubelet[1962]: I0317 18:27:58.628377 1962 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"lib-modules\" (UniqueName: \"kubernetes.io/host-path/0ae37aa1-1891-40fe-82d7-0ce810ab5af9-lib-modules\") pod \"calico-node-kgl87\" (UID: \"0ae37aa1-1891-40fe-82d7-0ce810ab5af9\") " pod="calico-system/calico-node-kgl87" Mar 17 18:27:58.628597 kubelet[1962]: I0317 18:27:58.628392 1962 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"tigera-ca-bundle\" (UniqueName: \"kubernetes.io/configmap/0ae37aa1-1891-40fe-82d7-0ce810ab5af9-tigera-ca-bundle\") pod \"calico-node-kgl87\" (UID: \"0ae37aa1-1891-40fe-82d7-0ce810ab5af9\") " pod="calico-system/calico-node-kgl87" Mar 17 18:27:58.628597 kubelet[1962]: I0317 18:27:58.628407 1962 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"var-lib-calico\" (UniqueName: \"kubernetes.io/host-path/0ae37aa1-1891-40fe-82d7-0ce810ab5af9-var-lib-calico\") pod \"calico-node-kgl87\" (UID: \"0ae37aa1-1891-40fe-82d7-0ce810ab5af9\") " pod="calico-system/calico-node-kgl87" Mar 17 18:27:58.628597 kubelet[1962]: I0317 18:27:58.628421 1962 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"cni-net-dir\" (UniqueName: \"kubernetes.io/host-path/0ae37aa1-1891-40fe-82d7-0ce810ab5af9-cni-net-dir\") pod \"calico-node-kgl87\" (UID: \"0ae37aa1-1891-40fe-82d7-0ce810ab5af9\") " pod="calico-system/calico-node-kgl87" Mar 17 18:27:58.628597 kubelet[1962]: I0317 18:27:58.628439 1962 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kubelet-dir\" (UniqueName: \"kubernetes.io/host-path/89bbd71b-c404-4c0b-b107-937675df3164-kubelet-dir\") pod \"csi-node-driver-2brpt\" (UID: \"89bbd71b-c404-4c0b-b107-937675df3164\") " pod="calico-system/csi-node-driver-2brpt" Mar 17 18:27:58.628703 kubelet[1962]: I0317 18:27:58.628454 1962 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-htqtk\" (UniqueName: \"kubernetes.io/projected/89bbd71b-c404-4c0b-b107-937675df3164-kube-api-access-htqtk\") pod \"csi-node-driver-2brpt\" (UID: \"89bbd71b-c404-4c0b-b107-937675df3164\") " pod="calico-system/csi-node-driver-2brpt" Mar 17 18:27:58.628703 kubelet[1962]: I0317 18:27:58.628469 1962 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"flexvol-driver-host\" (UniqueName: \"kubernetes.io/host-path/0ae37aa1-1891-40fe-82d7-0ce810ab5af9-flexvol-driver-host\") pod \"calico-node-kgl87\" (UID: \"0ae37aa1-1891-40fe-82d7-0ce810ab5af9\") " pod="calico-system/calico-node-kgl87" Mar 17 18:27:58.628703 kubelet[1962]: I0317 18:27:58.628485 1962 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-h4zjn\" (UniqueName: \"kubernetes.io/projected/0ae37aa1-1891-40fe-82d7-0ce810ab5af9-kube-api-access-h4zjn\") pod \"calico-node-kgl87\" (UID: \"0ae37aa1-1891-40fe-82d7-0ce810ab5af9\") " pod="calico-system/calico-node-kgl87" Mar 17 18:27:58.730973 kubelet[1962]: E0317 18:27:58.730939 1962 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Mar 17 18:27:58.730973 kubelet[1962]: W0317 18:27:58.730963 1962 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Mar 17 18:27:58.731134 kubelet[1962]: E0317 18:27:58.730994 1962 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Mar 17 18:27:58.734402 kubelet[1962]: E0317 18:27:58.734373 1962 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Mar 17 18:27:58.734402 kubelet[1962]: W0317 18:27:58.734393 1962 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Mar 17 18:27:58.734519 kubelet[1962]: E0317 18:27:58.734415 1962 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Mar 17 18:27:58.734608 kubelet[1962]: E0317 18:27:58.734588 1962 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Mar 17 18:27:58.734608 kubelet[1962]: W0317 18:27:58.734602 1962 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Mar 17 18:27:58.734666 kubelet[1962]: E0317 18:27:58.734612 1962 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Mar 17 18:27:58.734823 kubelet[1962]: E0317 18:27:58.734805 1962 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Mar 17 18:27:58.734823 kubelet[1962]: W0317 18:27:58.734819 1962 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Mar 17 18:27:58.734897 kubelet[1962]: E0317 18:27:58.734841 1962 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Mar 17 18:27:58.734988 kubelet[1962]: E0317 18:27:58.734971 1962 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Mar 17 18:27:58.734988 kubelet[1962]: W0317 18:27:58.734984 1962 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Mar 17 18:27:58.735043 kubelet[1962]: E0317 18:27:58.734993 1962 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Mar 17 18:27:58.735121 kubelet[1962]: E0317 18:27:58.735107 1962 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Mar 17 18:27:58.735121 kubelet[1962]: W0317 18:27:58.735118 1962 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Mar 17 18:27:58.735186 kubelet[1962]: E0317 18:27:58.735127 1962 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Mar 17 18:27:58.735255 kubelet[1962]: E0317 18:27:58.735240 1962 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Mar 17 18:27:58.735255 kubelet[1962]: W0317 18:27:58.735251 1962 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Mar 17 18:27:58.735309 kubelet[1962]: E0317 18:27:58.735259 1962 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Mar 17 18:27:58.735409 kubelet[1962]: E0317 18:27:58.735394 1962 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Mar 17 18:27:58.735409 kubelet[1962]: W0317 18:27:58.735405 1962 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Mar 17 18:27:58.735460 kubelet[1962]: E0317 18:27:58.735414 1962 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Mar 17 18:27:58.738336 kubelet[1962]: E0317 18:27:58.738305 1962 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Mar 17 18:27:58.738336 kubelet[1962]: W0317 18:27:58.738326 1962 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Mar 17 18:27:58.738336 kubelet[1962]: E0317 18:27:58.738341 1962 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Mar 17 18:27:58.739087 kubelet[1962]: E0317 18:27:58.739067 1962 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Mar 17 18:27:58.739087 kubelet[1962]: W0317 18:27:58.739086 1962 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Mar 17 18:27:58.739152 kubelet[1962]: E0317 18:27:58.739098 1962 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Mar 17 18:27:58.746918 kubelet[1962]: E0317 18:27:58.746902 1962 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Mar 17 18:27:58.747024 kubelet[1962]: W0317 18:27:58.747010 1962 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Mar 17 18:27:58.747095 kubelet[1962]: E0317 18:27:58.747084 1962 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Mar 17 18:27:58.747592 kubelet[1962]: E0317 18:27:58.747576 1962 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Mar 17 18:27:58.747686 kubelet[1962]: W0317 18:27:58.747672 1962 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Mar 17 18:27:58.747750 kubelet[1962]: E0317 18:27:58.747740 1962 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Mar 17 18:27:58.747996 kubelet[1962]: E0317 18:27:58.747983 1962 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Mar 17 18:27:58.748087 kubelet[1962]: W0317 18:27:58.748075 1962 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Mar 17 18:27:58.748145 kubelet[1962]: E0317 18:27:58.748134 1962 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Mar 17 18:27:58.760136 kubelet[1962]: E0317 18:27:58.760114 1962 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Mar 17 18:27:58.760666 env[1216]: time="2025-03-17T18:27:58.760623600Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-typha-5cf59bcf46-858hc,Uid:be316314-4a7f-4be6-94e0-3a61af5683cd,Namespace:calico-system,Attempt:0,}" Mar 17 18:27:58.775162 env[1216]: time="2025-03-17T18:27:58.775098960Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Mar 17 18:27:58.775261 env[1216]: time="2025-03-17T18:27:58.775181453Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Mar 17 18:27:58.775261 env[1216]: time="2025-03-17T18:27:58.775209577Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Mar 17 18:27:58.775412 env[1216]: time="2025-03-17T18:27:58.775366482Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/1b1c35cf96edf1092052573782de0ec63dfa564837d01bead851667ab031dc2e pid=2382 runtime=io.containerd.runc.v2 Mar 17 18:27:58.785176 systemd[1]: Started cri-containerd-1b1c35cf96edf1092052573782de0ec63dfa564837d01bead851667ab031dc2e.scope. Mar 17 18:27:58.812000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:27:58.812000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:27:58.812000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:27:58.812000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:27:58.812000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:27:58.812000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:27:58.812000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:27:58.812000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:27:58.812000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:27:58.813000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:27:58.813000 audit: BPF prog-id=115 op=LOAD Mar 17 18:27:58.813000 audit[2391]: AVC avc: denied { bpf } for pid=2391 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:27:58.813000 audit[2391]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000145b38 a2=10 a3=0 items=0 ppid=2382 pid=2391 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:27:58.813000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3162316333356366393665646631303932303532353733373832646530 Mar 17 18:27:58.813000 audit[2391]: AVC avc: denied { perfmon } for pid=2391 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:27:58.813000 audit[2391]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001455a0 a2=3c a3=0 items=0 ppid=2382 pid=2391 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:27:58.813000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3162316333356366393665646631303932303532353733373832646530 Mar 17 18:27:58.813000 audit[2391]: AVC avc: denied { bpf } for pid=2391 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:27:58.813000 audit[2391]: AVC avc: denied { bpf } for pid=2391 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:27:58.813000 audit[2391]: AVC avc: denied { bpf } for pid=2391 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:27:58.813000 audit[2391]: AVC avc: denied { perfmon } for pid=2391 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:27:58.813000 audit[2391]: AVC avc: denied { perfmon } for pid=2391 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:27:58.813000 audit[2391]: AVC avc: denied { perfmon } for pid=2391 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:27:58.813000 audit[2391]: AVC avc: denied { perfmon } for pid=2391 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:27:58.813000 audit[2391]: AVC avc: denied { perfmon } for pid=2391 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:27:58.813000 audit[2391]: AVC avc: denied { bpf } for pid=2391 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:27:58.813000 audit[2391]: AVC avc: denied { bpf } for pid=2391 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:27:58.813000 audit: BPF prog-id=116 op=LOAD Mar 17 18:27:58.813000 audit[2391]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001458e0 a2=78 a3=0 items=0 ppid=2382 pid=2391 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:27:58.813000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3162316333356366393665646631303932303532353733373832646530 Mar 17 18:27:58.813000 audit[2391]: AVC avc: denied { bpf } for pid=2391 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:27:58.813000 audit[2391]: AVC avc: denied { bpf } for pid=2391 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:27:58.813000 audit[2391]: AVC avc: denied { perfmon } for pid=2391 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:27:58.813000 audit[2391]: AVC avc: denied { perfmon } for pid=2391 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:27:58.813000 audit[2391]: AVC avc: denied { perfmon } for pid=2391 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:27:58.813000 audit[2391]: AVC avc: denied { perfmon } for pid=2391 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:27:58.813000 audit[2391]: AVC avc: denied { perfmon } for pid=2391 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:27:58.813000 audit[2391]: AVC avc: denied { bpf } for pid=2391 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:27:58.813000 audit[2391]: AVC avc: denied { bpf } for pid=2391 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:27:58.813000 audit: BPF prog-id=117 op=LOAD Mar 17 18:27:58.813000 audit[2391]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000145670 a2=78 a3=0 items=0 ppid=2382 pid=2391 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:27:58.813000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3162316333356366393665646631303932303532353733373832646530 Mar 17 18:27:58.813000 audit: BPF prog-id=117 op=UNLOAD Mar 17 18:27:58.813000 audit: BPF prog-id=116 op=UNLOAD Mar 17 18:27:58.813000 audit[2391]: AVC avc: denied { bpf } for pid=2391 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:27:58.813000 audit[2391]: AVC avc: denied { bpf } for pid=2391 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:27:58.813000 audit[2391]: AVC avc: denied { bpf } for pid=2391 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:27:58.813000 audit[2391]: AVC avc: denied { perfmon } for pid=2391 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:27:58.813000 audit[2391]: AVC avc: denied { perfmon } for pid=2391 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:27:58.813000 audit[2391]: AVC avc: denied { perfmon } for pid=2391 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:27:58.813000 audit[2391]: AVC avc: denied { perfmon } for pid=2391 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:27:58.813000 audit[2391]: AVC avc: denied { perfmon } for pid=2391 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:27:58.813000 audit[2391]: AVC avc: denied { bpf } for pid=2391 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:27:58.813000 audit[2391]: AVC avc: denied { bpf } for pid=2391 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:27:58.813000 audit: BPF prog-id=118 op=LOAD Mar 17 18:27:58.813000 audit[2391]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000145b40 a2=78 a3=0 items=0 ppid=2382 pid=2391 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:27:58.813000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3162316333356366393665646631303932303532353733373832646530 Mar 17 18:27:58.817948 kubelet[1962]: E0317 18:27:58.817926 1962 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Mar 17 18:27:58.819302 env[1216]: time="2025-03-17T18:27:58.819255594Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-node-kgl87,Uid:0ae37aa1-1891-40fe-82d7-0ce810ab5af9,Namespace:calico-system,Attempt:0,}" Mar 17 18:27:58.834350 env[1216]: time="2025-03-17T18:27:58.834310805Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-typha-5cf59bcf46-858hc,Uid:be316314-4a7f-4be6-94e0-3a61af5683cd,Namespace:calico-system,Attempt:0,} returns sandbox id \"1b1c35cf96edf1092052573782de0ec63dfa564837d01bead851667ab031dc2e\"" Mar 17 18:27:58.835023 kubelet[1962]: E0317 18:27:58.835000 1962 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Mar 17 18:27:58.837226 env[1216]: time="2025-03-17T18:27:58.837182217Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/typha:v3.29.1\"" Mar 17 18:27:58.855405 env[1216]: time="2025-03-17T18:27:58.855338756Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Mar 17 18:27:58.855405 env[1216]: time="2025-03-17T18:27:58.855376922Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Mar 17 18:27:58.855405 env[1216]: time="2025-03-17T18:27:58.855386644Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Mar 17 18:27:58.855655 env[1216]: time="2025-03-17T18:27:58.855626481Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/150a0e38e135092c874443f4cf4f176ae37c8a26863861eb6970c898609ed280 pid=2420 runtime=io.containerd.runc.v2 Mar 17 18:27:58.865047 systemd[1]: Started cri-containerd-150a0e38e135092c874443f4cf4f176ae37c8a26863861eb6970c898609ed280.scope. Mar 17 18:27:58.880000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:27:58.880000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:27:58.880000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:27:58.880000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:27:58.880000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:27:58.880000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:27:58.880000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:27:58.880000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:27:58.880000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:27:58.880000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:27:58.880000 audit: BPF prog-id=119 op=LOAD Mar 17 18:27:58.883000 audit[2429]: AVC avc: denied { bpf } for pid=2429 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:27:58.883000 audit[2429]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000195b38 a2=10 a3=0 items=0 ppid=2420 pid=2429 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:27:58.883000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3135306130653338653133353039326338373434343366346366346631 Mar 17 18:27:58.883000 audit[2429]: AVC avc: denied { perfmon } for pid=2429 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:27:58.883000 audit[2429]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001955a0 a2=3c a3=0 items=0 ppid=2420 pid=2429 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:27:58.883000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3135306130653338653133353039326338373434343366346366346631 Mar 17 18:27:58.883000 audit[2429]: AVC avc: denied { bpf } for pid=2429 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:27:58.883000 audit[2429]: AVC avc: denied { bpf } for pid=2429 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:27:58.883000 audit[2429]: AVC avc: denied { bpf } for pid=2429 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:27:58.883000 audit[2429]: AVC avc: denied { perfmon } for pid=2429 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:27:58.883000 audit[2429]: AVC avc: denied { perfmon } for pid=2429 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:27:58.883000 audit[2429]: AVC avc: denied { perfmon } for pid=2429 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:27:58.883000 audit[2429]: AVC avc: denied { perfmon } for pid=2429 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:27:58.883000 audit[2429]: AVC avc: denied { perfmon } for pid=2429 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:27:58.883000 audit[2429]: AVC avc: denied { bpf } for pid=2429 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:27:58.883000 audit[2429]: AVC avc: denied { bpf } for pid=2429 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:27:58.883000 audit: BPF prog-id=120 op=LOAD Mar 17 18:27:58.883000 audit[2429]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001958e0 a2=78 a3=0 items=0 ppid=2420 pid=2429 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:27:58.883000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3135306130653338653133353039326338373434343366346366346631 Mar 17 18:27:58.884000 audit[2429]: AVC avc: denied { bpf } for pid=2429 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:27:58.884000 audit[2429]: AVC avc: denied { bpf } for pid=2429 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:27:58.884000 audit[2429]: AVC avc: denied { perfmon } for pid=2429 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:27:58.884000 audit[2429]: AVC avc: denied { perfmon } for pid=2429 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:27:58.884000 audit[2429]: AVC avc: denied { perfmon } for pid=2429 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:27:58.884000 audit[2429]: AVC avc: denied { perfmon } for pid=2429 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:27:58.884000 audit[2429]: AVC avc: denied { perfmon } for pid=2429 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:27:58.884000 audit[2429]: AVC avc: denied { bpf } for pid=2429 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:27:58.884000 audit[2429]: AVC avc: denied { bpf } for pid=2429 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:27:58.884000 audit: BPF prog-id=121 op=LOAD Mar 17 18:27:58.884000 audit[2429]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000195670 a2=78 a3=0 items=0 ppid=2420 pid=2429 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:27:58.884000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3135306130653338653133353039326338373434343366346366346631 Mar 17 18:27:58.884000 audit: BPF prog-id=121 op=UNLOAD Mar 17 18:27:58.884000 audit: BPF prog-id=120 op=UNLOAD Mar 17 18:27:58.885000 audit[2429]: AVC avc: denied { bpf } for pid=2429 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:27:58.885000 audit[2429]: AVC avc: denied { bpf } for pid=2429 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:27:58.885000 audit[2429]: AVC avc: denied { bpf } for pid=2429 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:27:58.885000 audit[2429]: AVC avc: denied { perfmon } for pid=2429 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:27:58.885000 audit[2429]: AVC avc: denied { perfmon } for pid=2429 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:27:58.885000 audit[2429]: AVC avc: denied { perfmon } for pid=2429 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:27:58.885000 audit[2429]: AVC avc: denied { perfmon } for pid=2429 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:27:58.885000 audit[2429]: AVC avc: denied { perfmon } for pid=2429 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:27:58.885000 audit[2429]: AVC avc: denied { bpf } for pid=2429 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:27:58.885000 audit[2429]: AVC avc: denied { bpf } for pid=2429 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:27:58.885000 audit: BPF prog-id=122 op=LOAD Mar 17 18:27:58.885000 audit[2429]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000195b40 a2=78 a3=0 items=0 ppid=2420 pid=2429 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:27:58.885000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3135306130653338653133353039326338373434343366346366346631 Mar 17 18:27:58.898451 env[1216]: time="2025-03-17T18:27:58.898402178Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-node-kgl87,Uid:0ae37aa1-1891-40fe-82d7-0ce810ab5af9,Namespace:calico-system,Attempt:0,} returns sandbox id \"150a0e38e135092c874443f4cf4f176ae37c8a26863861eb6970c898609ed280\"" Mar 17 18:27:58.898881 kubelet[1962]: E0317 18:27:58.898852 1962 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Mar 17 18:27:59.390000 audit[2456]: NETFILTER_CFG table=filter:93 family=2 entries=17 op=nft_register_rule pid=2456 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Mar 17 18:27:59.390000 audit[2456]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=6736 a0=3 a1=ffffc43d51b0 a2=0 a3=1 items=0 ppid=2108 pid=2456 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:27:59.390000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Mar 17 18:27:59.397000 audit[2456]: NETFILTER_CFG table=nat:94 family=2 entries=12 op=nft_register_rule pid=2456 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Mar 17 18:27:59.397000 audit[2456]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=2700 a0=3 a1=ffffc43d51b0 a2=0 a3=1 items=0 ppid=2108 pid=2456 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:27:59.397000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Mar 17 18:27:59.868627 kubelet[1962]: E0317 18:27:59.868512 1962 pod_workers.go:1301] "Error syncing pod, skipping" err="network is not ready: container runtime network not ready: NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" pod="calico-system/csi-node-driver-2brpt" podUID="89bbd71b-c404-4c0b-b107-937675df3164" Mar 17 18:28:00.083754 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount3034279289.mount: Deactivated successfully. Mar 17 18:28:00.722937 env[1216]: time="2025-03-17T18:28:00.722896135Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/typha:v3.29.1,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Mar 17 18:28:00.724424 env[1216]: time="2025-03-17T18:28:00.724384907Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:1d1fc316829ae1650b0b1629b54232520f297e7c3b1444eecd290ae088902a28,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Mar 17 18:28:00.726270 env[1216]: time="2025-03-17T18:28:00.726236331Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/typha:v3.29.1,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Mar 17 18:28:00.727993 env[1216]: time="2025-03-17T18:28:00.727957136Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/typha@sha256:768a194e1115c73bcbf35edb7afd18a63e16e08d940c79993565b6a3cca2da7c,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Mar 17 18:28:00.728581 env[1216]: time="2025-03-17T18:28:00.728540499Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/typha:v3.29.1\" returns image reference \"sha256:1d1fc316829ae1650b0b1629b54232520f297e7c3b1444eecd290ae088902a28\"" Mar 17 18:28:00.729972 env[1216]: time="2025-03-17T18:28:00.729941498Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/pod2daemon-flexvol:v3.29.1\"" Mar 17 18:28:00.739268 env[1216]: time="2025-03-17T18:28:00.739222821Z" level=info msg="CreateContainer within sandbox \"1b1c35cf96edf1092052573782de0ec63dfa564837d01bead851667ab031dc2e\" for container &ContainerMetadata{Name:calico-typha,Attempt:0,}" Mar 17 18:28:00.748467 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount3241273771.mount: Deactivated successfully. Mar 17 18:28:00.750820 env[1216]: time="2025-03-17T18:28:00.750780428Z" level=info msg="CreateContainer within sandbox \"1b1c35cf96edf1092052573782de0ec63dfa564837d01bead851667ab031dc2e\" for &ContainerMetadata{Name:calico-typha,Attempt:0,} returns container id \"d3f4289dd14442c78dee344683c683d82311e110fa1d508a37176d377aeccbd3\"" Mar 17 18:28:00.752060 env[1216]: time="2025-03-17T18:28:00.752016444Z" level=info msg="StartContainer for \"d3f4289dd14442c78dee344683c683d82311e110fa1d508a37176d377aeccbd3\"" Mar 17 18:28:00.774039 systemd[1]: Started cri-containerd-d3f4289dd14442c78dee344683c683d82311e110fa1d508a37176d377aeccbd3.scope. Mar 17 18:28:00.803000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:28:00.806555 kernel: kauditd_printk_skb: 179 callbacks suppressed Mar 17 18:28:00.806620 kernel: audit: type=1400 audit(1742236080.803:957): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:28:00.806642 kernel: audit: type=1400 audit(1742236080.803:958): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:28:00.803000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:28:00.803000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:28:00.810190 kernel: audit: type=1400 audit(1742236080.803:959): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:28:00.810230 kernel: audit: type=1400 audit(1742236080.803:960): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:28:00.803000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:28:00.803000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:28:00.813724 kernel: audit: type=1400 audit(1742236080.803:961): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:28:00.813781 kernel: audit: type=1400 audit(1742236080.803:962): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:28:00.803000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:28:00.815490 kernel: audit: type=1400 audit(1742236080.803:963): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:28:00.803000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:28:00.803000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:28:00.819053 kernel: audit: type=1400 audit(1742236080.803:964): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:28:00.819113 kernel: audit: type=1400 audit(1742236080.803:965): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:28:00.803000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:28:00.820790 kernel: audit: type=1400 audit(1742236080.803:966): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:28:00.803000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:28:00.803000 audit: BPF prog-id=123 op=LOAD Mar 17 18:28:00.808000 audit[2467]: AVC avc: denied { bpf } for pid=2467 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:28:00.808000 audit[2467]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000195b38 a2=10 a3=0 items=0 ppid=2382 pid=2467 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:28:00.808000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6433663432383964643134343432633738646565333434363833633638 Mar 17 18:28:00.808000 audit[2467]: AVC avc: denied { perfmon } for pid=2467 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:28:00.808000 audit[2467]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001955a0 a2=3c a3=0 items=0 ppid=2382 pid=2467 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:28:00.808000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6433663432383964643134343432633738646565333434363833633638 Mar 17 18:28:00.809000 audit[2467]: AVC avc: denied { bpf } for pid=2467 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:28:00.809000 audit[2467]: AVC avc: denied { bpf } for pid=2467 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:28:00.809000 audit[2467]: AVC avc: denied { bpf } for pid=2467 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:28:00.809000 audit[2467]: AVC avc: denied { perfmon } for pid=2467 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:28:00.809000 audit[2467]: AVC avc: denied { perfmon } for pid=2467 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:28:00.809000 audit[2467]: AVC avc: denied { perfmon } for pid=2467 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:28:00.809000 audit[2467]: AVC avc: denied { perfmon } for pid=2467 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:28:00.809000 audit[2467]: AVC avc: denied { perfmon } for pid=2467 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:28:00.809000 audit[2467]: AVC avc: denied { bpf } for pid=2467 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:28:00.809000 audit[2467]: AVC avc: denied { bpf } for pid=2467 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:28:00.809000 audit: BPF prog-id=124 op=LOAD Mar 17 18:28:00.809000 audit[2467]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001958e0 a2=78 a3=0 items=0 ppid=2382 pid=2467 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:28:00.809000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6433663432383964643134343432633738646565333434363833633638 Mar 17 18:28:00.811000 audit[2467]: AVC avc: denied { bpf } for pid=2467 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:28:00.811000 audit[2467]: AVC avc: denied { bpf } for pid=2467 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:28:00.811000 audit[2467]: AVC avc: denied { perfmon } for pid=2467 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:28:00.811000 audit[2467]: AVC avc: denied { perfmon } for pid=2467 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:28:00.811000 audit[2467]: AVC avc: denied { perfmon } for pid=2467 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:28:00.811000 audit[2467]: AVC avc: denied { perfmon } for pid=2467 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:28:00.811000 audit[2467]: AVC avc: denied { perfmon } for pid=2467 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:28:00.811000 audit[2467]: AVC avc: denied { bpf } for pid=2467 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:28:00.811000 audit[2467]: AVC avc: denied { bpf } for pid=2467 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:28:00.811000 audit: BPF prog-id=125 op=LOAD Mar 17 18:28:00.811000 audit[2467]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000195670 a2=78 a3=0 items=0 ppid=2382 pid=2467 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:28:00.811000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6433663432383964643134343432633738646565333434363833633638 Mar 17 18:28:00.813000 audit: BPF prog-id=125 op=UNLOAD Mar 17 18:28:00.813000 audit: BPF prog-id=124 op=UNLOAD Mar 17 18:28:00.813000 audit[2467]: AVC avc: denied { bpf } for pid=2467 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:28:00.813000 audit[2467]: AVC avc: denied { bpf } for pid=2467 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:28:00.813000 audit[2467]: AVC avc: denied { bpf } for pid=2467 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:28:00.813000 audit[2467]: AVC avc: denied { perfmon } for pid=2467 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:28:00.813000 audit[2467]: AVC avc: denied { perfmon } for pid=2467 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:28:00.813000 audit[2467]: AVC avc: denied { perfmon } for pid=2467 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:28:00.813000 audit[2467]: AVC avc: denied { perfmon } for pid=2467 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:28:00.813000 audit[2467]: AVC avc: denied { perfmon } for pid=2467 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:28:00.813000 audit[2467]: AVC avc: denied { bpf } for pid=2467 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:28:00.813000 audit[2467]: AVC avc: denied { bpf } for pid=2467 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:28:00.813000 audit: BPF prog-id=126 op=LOAD Mar 17 18:28:00.813000 audit[2467]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000195b40 a2=78 a3=0 items=0 ppid=2382 pid=2467 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:28:00.813000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6433663432383964643134343432633738646565333434363833633638 Mar 17 18:28:00.854116 env[1216]: time="2025-03-17T18:28:00.854057063Z" level=info msg="StartContainer for \"d3f4289dd14442c78dee344683c683d82311e110fa1d508a37176d377aeccbd3\" returns successfully" Mar 17 18:28:00.902732 kubelet[1962]: E0317 18:28:00.902641 1962 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Mar 17 18:28:00.913334 kubelet[1962]: I0317 18:28:00.913076 1962 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="calico-system/calico-typha-5cf59bcf46-858hc" podStartSLOduration=1.019698931 podStartE2EDuration="2.91306307s" podCreationTimestamp="2025-03-17 18:27:58 +0000 UTC" firstStartedPulling="2025-03-17 18:27:58.836393813 +0000 UTC m=+14.062699194" lastFinishedPulling="2025-03-17 18:28:00.729757912 +0000 UTC m=+15.956063333" observedRunningTime="2025-03-17 18:28:00.912611965 +0000 UTC m=+16.138917346" watchObservedRunningTime="2025-03-17 18:28:00.91306307 +0000 UTC m=+16.139368451" Mar 17 18:28:00.943412 kubelet[1962]: E0317 18:28:00.943384 1962 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Mar 17 18:28:00.943412 kubelet[1962]: W0317 18:28:00.943407 1962 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Mar 17 18:28:00.943412 kubelet[1962]: E0317 18:28:00.943423 1962 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Mar 17 18:28:00.943644 kubelet[1962]: E0317 18:28:00.943624 1962 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Mar 17 18:28:00.943644 kubelet[1962]: W0317 18:28:00.943637 1962 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Mar 17 18:28:00.943644 kubelet[1962]: E0317 18:28:00.943646 1962 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Mar 17 18:28:00.943813 kubelet[1962]: E0317 18:28:00.943790 1962 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Mar 17 18:28:00.943813 kubelet[1962]: W0317 18:28:00.943797 1962 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Mar 17 18:28:00.943813 kubelet[1962]: E0317 18:28:00.943806 1962 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Mar 17 18:28:00.944003 kubelet[1962]: E0317 18:28:00.943988 1962 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Mar 17 18:28:00.944003 kubelet[1962]: W0317 18:28:00.943999 1962 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Mar 17 18:28:00.944063 kubelet[1962]: E0317 18:28:00.944008 1962 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Mar 17 18:28:00.944174 kubelet[1962]: E0317 18:28:00.944161 1962 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Mar 17 18:28:00.944174 kubelet[1962]: W0317 18:28:00.944172 1962 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Mar 17 18:28:00.944244 kubelet[1962]: E0317 18:28:00.944183 1962 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Mar 17 18:28:00.944343 kubelet[1962]: E0317 18:28:00.944322 1962 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Mar 17 18:28:00.944343 kubelet[1962]: W0317 18:28:00.944333 1962 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Mar 17 18:28:00.944343 kubelet[1962]: E0317 18:28:00.944341 1962 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Mar 17 18:28:00.944503 kubelet[1962]: E0317 18:28:00.944485 1962 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Mar 17 18:28:00.944503 kubelet[1962]: W0317 18:28:00.944495 1962 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Mar 17 18:28:00.944503 kubelet[1962]: E0317 18:28:00.944503 1962 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Mar 17 18:28:00.944729 kubelet[1962]: E0317 18:28:00.944684 1962 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Mar 17 18:28:00.944729 kubelet[1962]: W0317 18:28:00.944693 1962 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Mar 17 18:28:00.944729 kubelet[1962]: E0317 18:28:00.944701 1962 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Mar 17 18:28:00.944907 kubelet[1962]: E0317 18:28:00.944887 1962 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Mar 17 18:28:00.944907 kubelet[1962]: W0317 18:28:00.944899 1962 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Mar 17 18:28:00.944907 kubelet[1962]: E0317 18:28:00.944906 1962 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Mar 17 18:28:00.945071 kubelet[1962]: E0317 18:28:00.945053 1962 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Mar 17 18:28:00.945071 kubelet[1962]: W0317 18:28:00.945063 1962 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Mar 17 18:28:00.945071 kubelet[1962]: E0317 18:28:00.945070 1962 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Mar 17 18:28:00.945222 kubelet[1962]: E0317 18:28:00.945205 1962 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Mar 17 18:28:00.945222 kubelet[1962]: W0317 18:28:00.945214 1962 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Mar 17 18:28:00.945222 kubelet[1962]: E0317 18:28:00.945221 1962 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Mar 17 18:28:00.945376 kubelet[1962]: E0317 18:28:00.945357 1962 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Mar 17 18:28:00.945376 kubelet[1962]: W0317 18:28:00.945367 1962 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Mar 17 18:28:00.945376 kubelet[1962]: E0317 18:28:00.945374 1962 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Mar 17 18:28:00.945534 kubelet[1962]: E0317 18:28:00.945516 1962 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Mar 17 18:28:00.945534 kubelet[1962]: W0317 18:28:00.945527 1962 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Mar 17 18:28:00.945534 kubelet[1962]: E0317 18:28:00.945534 1962 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Mar 17 18:28:00.945688 kubelet[1962]: E0317 18:28:00.945675 1962 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Mar 17 18:28:00.945688 kubelet[1962]: W0317 18:28:00.945685 1962 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Mar 17 18:28:00.945756 kubelet[1962]: E0317 18:28:00.945692 1962 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Mar 17 18:28:00.945876 kubelet[1962]: E0317 18:28:00.945862 1962 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Mar 17 18:28:00.945876 kubelet[1962]: W0317 18:28:00.945875 1962 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Mar 17 18:28:00.945927 kubelet[1962]: E0317 18:28:00.945884 1962 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Mar 17 18:28:01.043769 kubelet[1962]: E0317 18:28:01.043674 1962 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Mar 17 18:28:01.043769 kubelet[1962]: W0317 18:28:01.043696 1962 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Mar 17 18:28:01.043769 kubelet[1962]: E0317 18:28:01.043713 1962 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Mar 17 18:28:01.043974 kubelet[1962]: E0317 18:28:01.043950 1962 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Mar 17 18:28:01.043974 kubelet[1962]: W0317 18:28:01.043961 1962 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Mar 17 18:28:01.043974 kubelet[1962]: E0317 18:28:01.043976 1962 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Mar 17 18:28:01.044703 kubelet[1962]: E0317 18:28:01.044614 1962 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Mar 17 18:28:01.044703 kubelet[1962]: W0317 18:28:01.044627 1962 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Mar 17 18:28:01.044703 kubelet[1962]: E0317 18:28:01.044641 1962 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Mar 17 18:28:01.045067 kubelet[1962]: E0317 18:28:01.044920 1962 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Mar 17 18:28:01.045067 kubelet[1962]: W0317 18:28:01.044938 1962 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Mar 17 18:28:01.045067 kubelet[1962]: E0317 18:28:01.044962 1962 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Mar 17 18:28:01.045302 kubelet[1962]: E0317 18:28:01.045214 1962 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Mar 17 18:28:01.045302 kubelet[1962]: W0317 18:28:01.045230 1962 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Mar 17 18:28:01.045459 kubelet[1962]: E0317 18:28:01.045321 1962 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Mar 17 18:28:01.045619 kubelet[1962]: E0317 18:28:01.045511 1962 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Mar 17 18:28:01.045619 kubelet[1962]: W0317 18:28:01.045522 1962 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Mar 17 18:28:01.045619 kubelet[1962]: E0317 18:28:01.045620 1962 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Mar 17 18:28:01.046078 kubelet[1962]: E0317 18:28:01.045821 1962 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Mar 17 18:28:01.046078 kubelet[1962]: W0317 18:28:01.045846 1962 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Mar 17 18:28:01.046078 kubelet[1962]: E0317 18:28:01.045859 1962 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Mar 17 18:28:01.046078 kubelet[1962]: E0317 18:28:01.046062 1962 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Mar 17 18:28:01.046078 kubelet[1962]: W0317 18:28:01.046073 1962 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Mar 17 18:28:01.046205 kubelet[1962]: E0317 18:28:01.046093 1962 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Mar 17 18:28:01.046450 kubelet[1962]: E0317 18:28:01.046315 1962 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Mar 17 18:28:01.046450 kubelet[1962]: W0317 18:28:01.046332 1962 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Mar 17 18:28:01.046450 kubelet[1962]: E0317 18:28:01.046349 1962 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Mar 17 18:28:01.046591 kubelet[1962]: E0317 18:28:01.046540 1962 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Mar 17 18:28:01.046591 kubelet[1962]: W0317 18:28:01.046549 1962 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Mar 17 18:28:01.046591 kubelet[1962]: E0317 18:28:01.046578 1962 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Mar 17 18:28:01.046714 kubelet[1962]: E0317 18:28:01.046699 1962 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Mar 17 18:28:01.046714 kubelet[1962]: W0317 18:28:01.046711 1962 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Mar 17 18:28:01.046767 kubelet[1962]: E0317 18:28:01.046739 1962 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Mar 17 18:28:01.046893 kubelet[1962]: E0317 18:28:01.046881 1962 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Mar 17 18:28:01.046925 kubelet[1962]: W0317 18:28:01.046893 1962 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Mar 17 18:28:01.046925 kubelet[1962]: E0317 18:28:01.046907 1962 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Mar 17 18:28:01.047078 kubelet[1962]: E0317 18:28:01.047057 1962 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Mar 17 18:28:01.047078 kubelet[1962]: W0317 18:28:01.047069 1962 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Mar 17 18:28:01.047130 kubelet[1962]: E0317 18:28:01.047081 1962 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Mar 17 18:28:01.047234 kubelet[1962]: E0317 18:28:01.047221 1962 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Mar 17 18:28:01.047261 kubelet[1962]: W0317 18:28:01.047235 1962 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Mar 17 18:28:01.047261 kubelet[1962]: E0317 18:28:01.047250 1962 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Mar 17 18:28:01.047532 kubelet[1962]: E0317 18:28:01.047514 1962 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Mar 17 18:28:01.047532 kubelet[1962]: W0317 18:28:01.047531 1962 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Mar 17 18:28:01.047602 kubelet[1962]: E0317 18:28:01.047547 1962 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Mar 17 18:28:01.047760 kubelet[1962]: E0317 18:28:01.047742 1962 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Mar 17 18:28:01.047760 kubelet[1962]: W0317 18:28:01.047758 1962 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Mar 17 18:28:01.047810 kubelet[1962]: E0317 18:28:01.047773 1962 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Mar 17 18:28:01.047988 kubelet[1962]: E0317 18:28:01.047975 1962 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Mar 17 18:28:01.048019 kubelet[1962]: W0317 18:28:01.047988 1962 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Mar 17 18:28:01.048019 kubelet[1962]: E0317 18:28:01.048002 1962 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Mar 17 18:28:01.048189 kubelet[1962]: E0317 18:28:01.048179 1962 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Mar 17 18:28:01.048189 kubelet[1962]: W0317 18:28:01.048188 1962 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Mar 17 18:28:01.048236 kubelet[1962]: E0317 18:28:01.048197 1962 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Mar 17 18:28:01.868596 kubelet[1962]: E0317 18:28:01.868540 1962 pod_workers.go:1301] "Error syncing pod, skipping" err="network is not ready: container runtime network not ready: NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" pod="calico-system/csi-node-driver-2brpt" podUID="89bbd71b-c404-4c0b-b107-937675df3164" Mar 17 18:28:01.903942 kubelet[1962]: I0317 18:28:01.903913 1962 prober_manager.go:312] "Failed to trigger a manual run" probe="Readiness" Mar 17 18:28:01.904331 kubelet[1962]: E0317 18:28:01.904311 1962 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Mar 17 18:28:01.951762 kubelet[1962]: E0317 18:28:01.951722 1962 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Mar 17 18:28:01.951762 kubelet[1962]: W0317 18:28:01.951744 1962 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Mar 17 18:28:01.951762 kubelet[1962]: E0317 18:28:01.951761 1962 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Mar 17 18:28:01.951994 kubelet[1962]: E0317 18:28:01.951963 1962 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Mar 17 18:28:01.951994 kubelet[1962]: W0317 18:28:01.951974 1962 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Mar 17 18:28:01.951994 kubelet[1962]: E0317 18:28:01.951985 1962 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Mar 17 18:28:01.952163 kubelet[1962]: E0317 18:28:01.952134 1962 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Mar 17 18:28:01.952163 kubelet[1962]: W0317 18:28:01.952146 1962 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Mar 17 18:28:01.952163 kubelet[1962]: E0317 18:28:01.952162 1962 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Mar 17 18:28:01.952362 kubelet[1962]: E0317 18:28:01.952338 1962 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Mar 17 18:28:01.952362 kubelet[1962]: W0317 18:28:01.952351 1962 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Mar 17 18:28:01.952362 kubelet[1962]: E0317 18:28:01.952360 1962 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Mar 17 18:28:01.952534 kubelet[1962]: E0317 18:28:01.952511 1962 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Mar 17 18:28:01.952534 kubelet[1962]: W0317 18:28:01.952524 1962 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Mar 17 18:28:01.952594 kubelet[1962]: E0317 18:28:01.952533 1962 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Mar 17 18:28:01.952718 kubelet[1962]: E0317 18:28:01.952689 1962 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Mar 17 18:28:01.952718 kubelet[1962]: W0317 18:28:01.952707 1962 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Mar 17 18:28:01.952718 kubelet[1962]: E0317 18:28:01.952716 1962 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Mar 17 18:28:01.952869 kubelet[1962]: E0317 18:28:01.952858 1962 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Mar 17 18:28:01.952900 kubelet[1962]: W0317 18:28:01.952869 1962 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Mar 17 18:28:01.952900 kubelet[1962]: E0317 18:28:01.952879 1962 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Mar 17 18:28:01.953028 kubelet[1962]: E0317 18:28:01.953016 1962 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Mar 17 18:28:01.953028 kubelet[1962]: W0317 18:28:01.953027 1962 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Mar 17 18:28:01.953072 kubelet[1962]: E0317 18:28:01.953035 1962 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Mar 17 18:28:01.953234 kubelet[1962]: E0317 18:28:01.953219 1962 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Mar 17 18:28:01.953277 kubelet[1962]: W0317 18:28:01.953237 1962 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Mar 17 18:28:01.953277 kubelet[1962]: E0317 18:28:01.953245 1962 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Mar 17 18:28:01.953400 kubelet[1962]: E0317 18:28:01.953389 1962 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Mar 17 18:28:01.953400 kubelet[1962]: W0317 18:28:01.953398 1962 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Mar 17 18:28:01.953456 kubelet[1962]: E0317 18:28:01.953405 1962 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Mar 17 18:28:01.953548 kubelet[1962]: E0317 18:28:01.953531 1962 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Mar 17 18:28:01.953548 kubelet[1962]: W0317 18:28:01.953547 1962 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Mar 17 18:28:01.953608 kubelet[1962]: E0317 18:28:01.953554 1962 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Mar 17 18:28:01.953688 kubelet[1962]: E0317 18:28:01.953678 1962 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Mar 17 18:28:01.953715 kubelet[1962]: W0317 18:28:01.953690 1962 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Mar 17 18:28:01.953715 kubelet[1962]: E0317 18:28:01.953705 1962 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Mar 17 18:28:01.953841 kubelet[1962]: E0317 18:28:01.953823 1962 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Mar 17 18:28:01.953866 kubelet[1962]: W0317 18:28:01.953857 1962 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Mar 17 18:28:01.953888 kubelet[1962]: E0317 18:28:01.953867 1962 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Mar 17 18:28:01.954031 kubelet[1962]: E0317 18:28:01.954008 1962 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Mar 17 18:28:01.954031 kubelet[1962]: W0317 18:28:01.954019 1962 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Mar 17 18:28:01.954031 kubelet[1962]: E0317 18:28:01.954026 1962 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Mar 17 18:28:01.954147 kubelet[1962]: E0317 18:28:01.954137 1962 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Mar 17 18:28:01.954147 kubelet[1962]: W0317 18:28:01.954146 1962 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Mar 17 18:28:01.954192 kubelet[1962]: E0317 18:28:01.954161 1962 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Mar 17 18:28:02.051178 kubelet[1962]: E0317 18:28:02.051142 1962 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Mar 17 18:28:02.051178 kubelet[1962]: W0317 18:28:02.051162 1962 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Mar 17 18:28:02.051178 kubelet[1962]: E0317 18:28:02.051179 1962 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Mar 17 18:28:02.051382 kubelet[1962]: E0317 18:28:02.051356 1962 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Mar 17 18:28:02.051382 kubelet[1962]: W0317 18:28:02.051363 1962 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Mar 17 18:28:02.051382 kubelet[1962]: E0317 18:28:02.051371 1962 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Mar 17 18:28:02.051615 kubelet[1962]: E0317 18:28:02.051591 1962 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Mar 17 18:28:02.051615 kubelet[1962]: W0317 18:28:02.051612 1962 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Mar 17 18:28:02.051690 kubelet[1962]: E0317 18:28:02.051632 1962 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Mar 17 18:28:02.051847 kubelet[1962]: E0317 18:28:02.051809 1962 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Mar 17 18:28:02.051847 kubelet[1962]: W0317 18:28:02.051823 1962 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Mar 17 18:28:02.051847 kubelet[1962]: E0317 18:28:02.051845 1962 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Mar 17 18:28:02.052006 kubelet[1962]: E0317 18:28:02.051989 1962 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Mar 17 18:28:02.052006 kubelet[1962]: W0317 18:28:02.052001 1962 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Mar 17 18:28:02.052064 kubelet[1962]: E0317 18:28:02.052009 1962 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Mar 17 18:28:02.052156 kubelet[1962]: E0317 18:28:02.052140 1962 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Mar 17 18:28:02.052156 kubelet[1962]: W0317 18:28:02.052156 1962 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Mar 17 18:28:02.052216 kubelet[1962]: E0317 18:28:02.052169 1962 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Mar 17 18:28:02.052335 kubelet[1962]: E0317 18:28:02.052324 1962 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Mar 17 18:28:02.052335 kubelet[1962]: W0317 18:28:02.052335 1962 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Mar 17 18:28:02.052393 kubelet[1962]: E0317 18:28:02.052345 1962 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Mar 17 18:28:02.052720 kubelet[1962]: E0317 18:28:02.052705 1962 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Mar 17 18:28:02.052720 kubelet[1962]: W0317 18:28:02.052719 1962 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Mar 17 18:28:02.052818 kubelet[1962]: E0317 18:28:02.052801 1962 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Mar 17 18:28:02.052881 kubelet[1962]: E0317 18:28:02.052875 1962 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Mar 17 18:28:02.052912 kubelet[1962]: W0317 18:28:02.052882 1962 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Mar 17 18:28:02.052974 kubelet[1962]: E0317 18:28:02.052962 1962 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Mar 17 18:28:02.053034 kubelet[1962]: E0317 18:28:02.053025 1962 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Mar 17 18:28:02.053034 kubelet[1962]: W0317 18:28:02.053034 1962 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Mar 17 18:28:02.053100 kubelet[1962]: E0317 18:28:02.053043 1962 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Mar 17 18:28:02.053194 kubelet[1962]: E0317 18:28:02.053180 1962 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Mar 17 18:28:02.053194 kubelet[1962]: W0317 18:28:02.053191 1962 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Mar 17 18:28:02.053251 kubelet[1962]: E0317 18:28:02.053199 1962 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Mar 17 18:28:02.053338 kubelet[1962]: E0317 18:28:02.053323 1962 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Mar 17 18:28:02.053376 kubelet[1962]: W0317 18:28:02.053339 1962 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Mar 17 18:28:02.053376 kubelet[1962]: E0317 18:28:02.053352 1962 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Mar 17 18:28:02.053501 kubelet[1962]: E0317 18:28:02.053491 1962 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Mar 17 18:28:02.053501 kubelet[1962]: W0317 18:28:02.053501 1962 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Mar 17 18:28:02.053552 kubelet[1962]: E0317 18:28:02.053510 1962 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Mar 17 18:28:02.053815 kubelet[1962]: E0317 18:28:02.053802 1962 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Mar 17 18:28:02.053879 kubelet[1962]: W0317 18:28:02.053817 1962 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Mar 17 18:28:02.053879 kubelet[1962]: E0317 18:28:02.053854 1962 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Mar 17 18:28:02.054039 kubelet[1962]: E0317 18:28:02.054025 1962 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Mar 17 18:28:02.054039 kubelet[1962]: W0317 18:28:02.054037 1962 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Mar 17 18:28:02.054096 kubelet[1962]: E0317 18:28:02.054045 1962 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Mar 17 18:28:02.054179 kubelet[1962]: E0317 18:28:02.054168 1962 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Mar 17 18:28:02.054213 kubelet[1962]: W0317 18:28:02.054182 1962 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Mar 17 18:28:02.054213 kubelet[1962]: E0317 18:28:02.054190 1962 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Mar 17 18:28:02.054447 kubelet[1962]: E0317 18:28:02.054434 1962 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Mar 17 18:28:02.054447 kubelet[1962]: W0317 18:28:02.054447 1962 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Mar 17 18:28:02.054511 kubelet[1962]: E0317 18:28:02.054456 1962 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Mar 17 18:28:02.055027 kubelet[1962]: E0317 18:28:02.055013 1962 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Mar 17 18:28:02.055027 kubelet[1962]: W0317 18:28:02.055027 1962 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Mar 17 18:28:02.055108 kubelet[1962]: E0317 18:28:02.055038 1962 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Mar 17 18:28:02.177631 env[1216]: time="2025-03-17T18:28:02.177585185Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/pod2daemon-flexvol:v3.29.1,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Mar 17 18:28:02.180154 env[1216]: time="2025-03-17T18:28:02.180118553Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:ece9bca32e64e726de8bbfc9e175a3ca91e0881cd40352bfcd1d107411f4f348,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Mar 17 18:28:02.181685 env[1216]: time="2025-03-17T18:28:02.181661872Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/pod2daemon-flexvol:v3.29.1,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Mar 17 18:28:02.183066 env[1216]: time="2025-03-17T18:28:02.183034210Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/pod2daemon-flexvol@sha256:a63f8b4ff531912d12d143664eb263fdbc6cd7b3ff4aa777dfb6e318a090462c,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Mar 17 18:28:02.183650 env[1216]: time="2025-03-17T18:28:02.183612684Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/pod2daemon-flexvol:v3.29.1\" returns image reference \"sha256:ece9bca32e64e726de8bbfc9e175a3ca91e0881cd40352bfcd1d107411f4f348\"" Mar 17 18:28:02.186413 env[1216]: time="2025-03-17T18:28:02.186373881Z" level=info msg="CreateContainer within sandbox \"150a0e38e135092c874443f4cf4f176ae37c8a26863861eb6970c898609ed280\" for container &ContainerMetadata{Name:flexvol-driver,Attempt:0,}" Mar 17 18:28:02.200767 env[1216]: time="2025-03-17T18:28:02.200736458Z" level=info msg="CreateContainer within sandbox \"150a0e38e135092c874443f4cf4f176ae37c8a26863861eb6970c898609ed280\" for &ContainerMetadata{Name:flexvol-driver,Attempt:0,} returns container id \"899615dd83e6526feb6727fe1acae60a7b8f652b0830106b0ddfb3efa50aa728\"" Mar 17 18:28:02.201312 env[1216]: time="2025-03-17T18:28:02.201248285Z" level=info msg="StartContainer for \"899615dd83e6526feb6727fe1acae60a7b8f652b0830106b0ddfb3efa50aa728\"" Mar 17 18:28:02.219526 systemd[1]: Started cri-containerd-899615dd83e6526feb6727fe1acae60a7b8f652b0830106b0ddfb3efa50aa728.scope. Mar 17 18:28:02.249000 audit[2571]: AVC avc: denied { perfmon } for pid=2571 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:28:02.249000 audit[2571]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=0 a1=40001c55a0 a2=3c a3=0 items=0 ppid=2420 pid=2571 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:28:02.249000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3839393631356464383365363532366665623637323766653161636165 Mar 17 18:28:02.249000 audit[2571]: AVC avc: denied { bpf } for pid=2571 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:28:02.249000 audit[2571]: AVC avc: denied { bpf } for pid=2571 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:28:02.249000 audit[2571]: AVC avc: denied { bpf } for pid=2571 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:28:02.249000 audit[2571]: AVC avc: denied { perfmon } for pid=2571 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:28:02.249000 audit[2571]: AVC avc: denied { perfmon } for pid=2571 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:28:02.249000 audit[2571]: AVC avc: denied { perfmon } for pid=2571 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:28:02.249000 audit[2571]: AVC avc: denied { perfmon } for pid=2571 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:28:02.249000 audit[2571]: AVC avc: denied { perfmon } for pid=2571 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:28:02.249000 audit[2571]: AVC avc: denied { bpf } for pid=2571 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:28:02.249000 audit[2571]: AVC avc: denied { bpf } for pid=2571 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:28:02.249000 audit: BPF prog-id=127 op=LOAD Mar 17 18:28:02.249000 audit[2571]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=5 a1=40001c58e0 a2=78 a3=0 items=0 ppid=2420 pid=2571 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:28:02.249000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3839393631356464383365363532366665623637323766653161636165 Mar 17 18:28:02.249000 audit[2571]: AVC avc: denied { bpf } for pid=2571 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:28:02.249000 audit[2571]: AVC avc: denied { bpf } for pid=2571 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:28:02.249000 audit[2571]: AVC avc: denied { perfmon } for pid=2571 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:28:02.249000 audit[2571]: AVC avc: denied { perfmon } for pid=2571 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:28:02.249000 audit[2571]: AVC avc: denied { perfmon } for pid=2571 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:28:02.249000 audit[2571]: AVC avc: denied { perfmon } for pid=2571 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:28:02.249000 audit[2571]: AVC avc: denied { perfmon } for pid=2571 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:28:02.249000 audit[2571]: AVC avc: denied { bpf } for pid=2571 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:28:02.249000 audit[2571]: AVC avc: denied { bpf } for pid=2571 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:28:02.249000 audit: BPF prog-id=128 op=LOAD Mar 17 18:28:02.249000 audit[2571]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=17 a0=5 a1=40001c5670 a2=78 a3=0 items=0 ppid=2420 pid=2571 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:28:02.249000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3839393631356464383365363532366665623637323766653161636165 Mar 17 18:28:02.249000 audit: BPF prog-id=128 op=UNLOAD Mar 17 18:28:02.249000 audit: BPF prog-id=127 op=UNLOAD Mar 17 18:28:02.249000 audit[2571]: AVC avc: denied { bpf } for pid=2571 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:28:02.249000 audit[2571]: AVC avc: denied { bpf } for pid=2571 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:28:02.249000 audit[2571]: AVC avc: denied { bpf } for pid=2571 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:28:02.249000 audit[2571]: AVC avc: denied { perfmon } for pid=2571 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:28:02.249000 audit[2571]: AVC avc: denied { perfmon } for pid=2571 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:28:02.249000 audit[2571]: AVC avc: denied { perfmon } for pid=2571 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:28:02.249000 audit[2571]: AVC avc: denied { perfmon } for pid=2571 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:28:02.249000 audit[2571]: AVC avc: denied { perfmon } for pid=2571 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:28:02.249000 audit[2571]: AVC avc: denied { bpf } for pid=2571 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:28:02.249000 audit[2571]: AVC avc: denied { bpf } for pid=2571 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:28:02.249000 audit: BPF prog-id=129 op=LOAD Mar 17 18:28:02.249000 audit[2571]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=5 a1=40001c5b40 a2=78 a3=0 items=0 ppid=2420 pid=2571 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:28:02.249000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3839393631356464383365363532366665623637323766653161636165 Mar 17 18:28:02.266777 env[1216]: time="2025-03-17T18:28:02.266726311Z" level=info msg="StartContainer for \"899615dd83e6526feb6727fe1acae60a7b8f652b0830106b0ddfb3efa50aa728\" returns successfully" Mar 17 18:28:02.295019 systemd[1]: cri-containerd-899615dd83e6526feb6727fe1acae60a7b8f652b0830106b0ddfb3efa50aa728.scope: Deactivated successfully. Mar 17 18:28:02.300000 audit: BPF prog-id=129 op=UNLOAD Mar 17 18:28:02.313539 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-899615dd83e6526feb6727fe1acae60a7b8f652b0830106b0ddfb3efa50aa728-rootfs.mount: Deactivated successfully. Mar 17 18:28:02.327328 env[1216]: time="2025-03-17T18:28:02.327259737Z" level=info msg="shim disconnected" id=899615dd83e6526feb6727fe1acae60a7b8f652b0830106b0ddfb3efa50aa728 Mar 17 18:28:02.327328 env[1216]: time="2025-03-17T18:28:02.327308344Z" level=warning msg="cleaning up after shim disconnected" id=899615dd83e6526feb6727fe1acae60a7b8f652b0830106b0ddfb3efa50aa728 namespace=k8s.io Mar 17 18:28:02.327328 env[1216]: time="2025-03-17T18:28:02.327318145Z" level=info msg="cleaning up dead shim" Mar 17 18:28:02.335325 env[1216]: time="2025-03-17T18:28:02.335285095Z" level=warning msg="cleanup warnings time=\"2025-03-17T18:28:02Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=2608 runtime=io.containerd.runc.v2\n" Mar 17 18:28:02.907135 kubelet[1962]: E0317 18:28:02.907101 1962 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Mar 17 18:28:02.908234 env[1216]: time="2025-03-17T18:28:02.908173768Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/cni:v3.29.1\"" Mar 17 18:28:03.868116 kubelet[1962]: E0317 18:28:03.868063 1962 pod_workers.go:1301] "Error syncing pod, skipping" err="network is not ready: container runtime network not ready: NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" pod="calico-system/csi-node-driver-2brpt" podUID="89bbd71b-c404-4c0b-b107-937675df3164" Mar 17 18:28:05.869074 kubelet[1962]: E0317 18:28:05.868583 1962 pod_workers.go:1301] "Error syncing pod, skipping" err="network is not ready: container runtime network not ready: NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" pod="calico-system/csi-node-driver-2brpt" podUID="89bbd71b-c404-4c0b-b107-937675df3164" Mar 17 18:28:06.457793 env[1216]: time="2025-03-17T18:28:06.457741521Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/cni:v3.29.1,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Mar 17 18:28:06.459610 env[1216]: time="2025-03-17T18:28:06.459569918Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:e5ca62af4ff61b88f55fe4e0d7723151103d3f6a470fd4ebb311a2de27a9597f,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Mar 17 18:28:06.461198 env[1216]: time="2025-03-17T18:28:06.461173730Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/cni:v3.29.1,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Mar 17 18:28:06.462613 env[1216]: time="2025-03-17T18:28:06.462577881Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/cni@sha256:21e759d51c90dfb34fc1397dc180dd3a3fb564c2b0580d2f61ffe108f2a3c94b,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Mar 17 18:28:06.463304 env[1216]: time="2025-03-17T18:28:06.463279077Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/cni:v3.29.1\" returns image reference \"sha256:e5ca62af4ff61b88f55fe4e0d7723151103d3f6a470fd4ebb311a2de27a9597f\"" Mar 17 18:28:06.466717 env[1216]: time="2025-03-17T18:28:06.466682043Z" level=info msg="CreateContainer within sandbox \"150a0e38e135092c874443f4cf4f176ae37c8a26863861eb6970c898609ed280\" for container &ContainerMetadata{Name:install-cni,Attempt:0,}" Mar 17 18:28:06.478024 env[1216]: time="2025-03-17T18:28:06.477988338Z" level=info msg="CreateContainer within sandbox \"150a0e38e135092c874443f4cf4f176ae37c8a26863861eb6970c898609ed280\" for &ContainerMetadata{Name:install-cni,Attempt:0,} returns container id \"e47631473d28b808301b037f280b4abfeb5771357938ecf0dd56482dda569834\"" Mar 17 18:28:06.478477 env[1216]: time="2025-03-17T18:28:06.478452148Z" level=info msg="StartContainer for \"e47631473d28b808301b037f280b4abfeb5771357938ecf0dd56482dda569834\"" Mar 17 18:28:06.501772 systemd[1]: Started cri-containerd-e47631473d28b808301b037f280b4abfeb5771357938ecf0dd56482dda569834.scope. Mar 17 18:28:06.537000 audit[2634]: AVC avc: denied { perfmon } for pid=2634 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:28:06.541209 kernel: kauditd_printk_skb: 91 callbacks suppressed Mar 17 18:28:06.541288 kernel: audit: type=1400 audit(1742236086.537:982): avc: denied { perfmon } for pid=2634 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:28:06.541315 kernel: audit: type=1300 audit(1742236086.537:982): arch=c00000b7 syscall=280 success=yes exit=15 a0=0 a1=40001955a0 a2=3c a3=0 items=0 ppid=2420 pid=2634 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:28:06.537000 audit[2634]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=0 a1=40001955a0 a2=3c a3=0 items=0 ppid=2420 pid=2634 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:28:06.543779 kernel: audit: type=1327 audit(1742236086.537:982): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6534373633313437336432386238303833303162303337663238306234 Mar 17 18:28:06.537000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6534373633313437336432386238303833303162303337663238306234 Mar 17 18:28:06.546200 kernel: audit: type=1400 audit(1742236086.537:983): avc: denied { bpf } for pid=2634 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:28:06.537000 audit[2634]: AVC avc: denied { bpf } for pid=2634 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:28:06.548548 kernel: audit: type=1400 audit(1742236086.537:983): avc: denied { bpf } for pid=2634 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:28:06.537000 audit[2634]: AVC avc: denied { bpf } for pid=2634 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:28:06.537000 audit[2634]: AVC avc: denied { bpf } for pid=2634 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:28:06.554470 kernel: audit: type=1400 audit(1742236086.537:983): avc: denied { bpf } for pid=2634 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:28:06.554541 kernel: audit: type=1400 audit(1742236086.537:983): avc: denied { perfmon } for pid=2634 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:28:06.537000 audit[2634]: AVC avc: denied { perfmon } for pid=2634 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:28:06.557934 kernel: audit: type=1400 audit(1742236086.537:983): avc: denied { perfmon } for pid=2634 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:28:06.537000 audit[2634]: AVC avc: denied { perfmon } for pid=2634 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:28:06.537000 audit[2634]: AVC avc: denied { perfmon } for pid=2634 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:28:06.563715 kernel: audit: type=1400 audit(1742236086.537:983): avc: denied { perfmon } for pid=2634 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:28:06.567263 kernel: audit: type=1400 audit(1742236086.537:983): avc: denied { perfmon } for pid=2634 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:28:06.537000 audit[2634]: AVC avc: denied { perfmon } for pid=2634 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:28:06.537000 audit[2634]: AVC avc: denied { perfmon } for pid=2634 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:28:06.537000 audit[2634]: AVC avc: denied { bpf } for pid=2634 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:28:06.537000 audit[2634]: AVC avc: denied { bpf } for pid=2634 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:28:06.537000 audit: BPF prog-id=130 op=LOAD Mar 17 18:28:06.537000 audit[2634]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=5 a1=40001958e0 a2=78 a3=0 items=0 ppid=2420 pid=2634 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:28:06.537000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6534373633313437336432386238303833303162303337663238306234 Mar 17 18:28:06.537000 audit[2634]: AVC avc: denied { bpf } for pid=2634 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:28:06.537000 audit[2634]: AVC avc: denied { bpf } for pid=2634 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:28:06.537000 audit[2634]: AVC avc: denied { perfmon } for pid=2634 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:28:06.537000 audit[2634]: AVC avc: denied { perfmon } for pid=2634 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:28:06.537000 audit[2634]: AVC avc: denied { perfmon } for pid=2634 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:28:06.537000 audit[2634]: AVC avc: denied { perfmon } for pid=2634 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:28:06.537000 audit[2634]: AVC avc: denied { perfmon } for pid=2634 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:28:06.537000 audit[2634]: AVC avc: denied { bpf } for pid=2634 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:28:06.537000 audit[2634]: AVC avc: denied { bpf } for pid=2634 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:28:06.537000 audit: BPF prog-id=131 op=LOAD Mar 17 18:28:06.537000 audit[2634]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=17 a0=5 a1=4000195670 a2=78 a3=0 items=0 ppid=2420 pid=2634 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:28:06.537000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6534373633313437336432386238303833303162303337663238306234 Mar 17 18:28:06.539000 audit: BPF prog-id=131 op=UNLOAD Mar 17 18:28:06.539000 audit: BPF prog-id=130 op=UNLOAD Mar 17 18:28:06.539000 audit[2634]: AVC avc: denied { bpf } for pid=2634 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:28:06.539000 audit[2634]: AVC avc: denied { bpf } for pid=2634 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:28:06.539000 audit[2634]: AVC avc: denied { bpf } for pid=2634 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:28:06.539000 audit[2634]: AVC avc: denied { perfmon } for pid=2634 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:28:06.539000 audit[2634]: AVC avc: denied { perfmon } for pid=2634 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:28:06.539000 audit[2634]: AVC avc: denied { perfmon } for pid=2634 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:28:06.539000 audit[2634]: AVC avc: denied { perfmon } for pid=2634 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:28:06.539000 audit[2634]: AVC avc: denied { perfmon } for pid=2634 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:28:06.539000 audit[2634]: AVC avc: denied { bpf } for pid=2634 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:28:06.539000 audit[2634]: AVC avc: denied { bpf } for pid=2634 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:28:06.539000 audit: BPF prog-id=132 op=LOAD Mar 17 18:28:06.539000 audit[2634]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=5 a1=4000195b40 a2=78 a3=0 items=0 ppid=2420 pid=2634 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:28:06.539000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6534373633313437336432386238303833303162303337663238306234 Mar 17 18:28:06.583581 env[1216]: time="2025-03-17T18:28:06.583538768Z" level=info msg="StartContainer for \"e47631473d28b808301b037f280b4abfeb5771357938ecf0dd56482dda569834\" returns successfully" Mar 17 18:28:06.916717 kubelet[1962]: E0317 18:28:06.916682 1962 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Mar 17 18:28:07.093811 env[1216]: time="2025-03-17T18:28:07.093719961Z" level=error msg="failed to reload cni configuration after receiving fs change event(\"/etc/cni/net.d/calico-kubeconfig\": WRITE)" error="cni config load failed: no network config found in /etc/cni/net.d: cni plugin not initialized: failed to load cni config" Mar 17 18:28:07.096582 systemd[1]: cri-containerd-e47631473d28b808301b037f280b4abfeb5771357938ecf0dd56482dda569834.scope: Deactivated successfully. Mar 17 18:28:07.100000 audit: BPF prog-id=132 op=UNLOAD Mar 17 18:28:07.115826 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-e47631473d28b808301b037f280b4abfeb5771357938ecf0dd56482dda569834-rootfs.mount: Deactivated successfully. Mar 17 18:28:07.119102 env[1216]: time="2025-03-17T18:28:07.119063849Z" level=info msg="shim disconnected" id=e47631473d28b808301b037f280b4abfeb5771357938ecf0dd56482dda569834 Mar 17 18:28:07.119209 env[1216]: time="2025-03-17T18:28:07.119102132Z" level=warning msg="cleaning up after shim disconnected" id=e47631473d28b808301b037f280b4abfeb5771357938ecf0dd56482dda569834 namespace=k8s.io Mar 17 18:28:07.119209 env[1216]: time="2025-03-17T18:28:07.119113574Z" level=info msg="cleaning up dead shim" Mar 17 18:28:07.125976 env[1216]: time="2025-03-17T18:28:07.125928795Z" level=warning msg="cleanup warnings time=\"2025-03-17T18:28:07Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=2675 runtime=io.containerd.runc.v2\n" Mar 17 18:28:07.180126 kubelet[1962]: I0317 18:28:07.179634 1962 kubelet_node_status.go:488] "Fast updating node status as it just became ready" Mar 17 18:28:07.206376 kubelet[1962]: W0317 18:28:07.206345 1962 reflector.go:561] object-"calico-apiserver"/"calico-apiserver-certs": failed to list *v1.Secret: secrets "calico-apiserver-certs" is forbidden: User "system:node:localhost" cannot list resource "secrets" in API group "" in the namespace "calico-apiserver": no relationship found between node 'localhost' and this object Mar 17 18:28:07.208561 kubelet[1962]: W0317 18:28:07.208510 1962 reflector.go:561] object-"kube-system"/"coredns": failed to list *v1.ConfigMap: configmaps "coredns" is forbidden: User "system:node:localhost" cannot list resource "configmaps" in API group "" in the namespace "kube-system": no relationship found between node 'localhost' and this object Mar 17 18:28:07.208770 kubelet[1962]: W0317 18:28:07.208723 1962 reflector.go:561] object-"calico-apiserver"/"kube-root-ca.crt": failed to list *v1.ConfigMap: configmaps "kube-root-ca.crt" is forbidden: User "system:node:localhost" cannot list resource "configmaps" in API group "" in the namespace "calico-apiserver": no relationship found between node 'localhost' and this object Mar 17 18:28:07.209508 systemd[1]: Created slice kubepods-burstable-pod701122a6_4262_4c31_b9ac_c3483ca8c88f.slice. Mar 17 18:28:07.210514 kubelet[1962]: E0317 18:28:07.210468 1962 reflector.go:158] "Unhandled Error" err="object-\"calico-apiserver\"/\"kube-root-ca.crt\": Failed to watch *v1.ConfigMap: failed to list *v1.ConfigMap: configmaps \"kube-root-ca.crt\" is forbidden: User \"system:node:localhost\" cannot list resource \"configmaps\" in API group \"\" in the namespace \"calico-apiserver\": no relationship found between node 'localhost' and this object" logger="UnhandledError" Mar 17 18:28:07.210514 kubelet[1962]: E0317 18:28:07.210476 1962 reflector.go:158] "Unhandled Error" err="object-\"calico-apiserver\"/\"calico-apiserver-certs\": Failed to watch *v1.Secret: failed to list *v1.Secret: secrets \"calico-apiserver-certs\" is forbidden: User \"system:node:localhost\" cannot list resource \"secrets\" in API group \"\" in the namespace \"calico-apiserver\": no relationship found between node 'localhost' and this object" logger="UnhandledError" Mar 17 18:28:07.210769 kubelet[1962]: E0317 18:28:07.210740 1962 reflector.go:158] "Unhandled Error" err="object-\"kube-system\"/\"coredns\": Failed to watch *v1.ConfigMap: failed to list *v1.ConfigMap: configmaps \"coredns\" is forbidden: User \"system:node:localhost\" cannot list resource \"configmaps\" in API group \"\" in the namespace \"kube-system\": no relationship found between node 'localhost' and this object" logger="UnhandledError" Mar 17 18:28:07.214576 systemd[1]: Created slice kubepods-burstable-pod20480c0c_aba3_48d5_8372_dcc5d0a137a4.slice. Mar 17 18:28:07.217769 systemd[1]: Created slice kubepods-besteffort-pod2583581b_be32_4ea5_876e_18fe9067e955.slice. Mar 17 18:28:07.221599 systemd[1]: Created slice kubepods-besteffort-podfebc9f3a_c5fd_4e88_ac3b_68eff786c39c.slice. Mar 17 18:28:07.226322 systemd[1]: Created slice kubepods-besteffort-pod3fa28842_51f6_423c_ab80_b3915356f87b.slice. Mar 17 18:28:07.285909 kubelet[1962]: I0317 18:28:07.285875 1962 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"config-volume\" (UniqueName: \"kubernetes.io/configmap/701122a6-4262-4c31-b9ac-c3483ca8c88f-config-volume\") pod \"coredns-6f6b679f8f-fkzq6\" (UID: \"701122a6-4262-4c31-b9ac-c3483ca8c88f\") " pod="kube-system/coredns-6f6b679f8f-fkzq6" Mar 17 18:28:07.286086 kubelet[1962]: I0317 18:28:07.286068 1962 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"calico-apiserver-certs\" (UniqueName: \"kubernetes.io/secret/2583581b-be32-4ea5-876e-18fe9067e955-calico-apiserver-certs\") pod \"calico-apiserver-66cb7fb7dc-vzzfc\" (UID: \"2583581b-be32-4ea5-876e-18fe9067e955\") " pod="calico-apiserver/calico-apiserver-66cb7fb7dc-vzzfc" Mar 17 18:28:07.286186 kubelet[1962]: I0317 18:28:07.286171 1962 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"calico-apiserver-certs\" (UniqueName: \"kubernetes.io/secret/febc9f3a-c5fd-4e88-ac3b-68eff786c39c-calico-apiserver-certs\") pod \"calico-apiserver-66cb7fb7dc-2bvrs\" (UID: \"febc9f3a-c5fd-4e88-ac3b-68eff786c39c\") " pod="calico-apiserver/calico-apiserver-66cb7fb7dc-2bvrs" Mar 17 18:28:07.286286 kubelet[1962]: I0317 18:28:07.286273 1962 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-sjczl\" (UniqueName: \"kubernetes.io/projected/701122a6-4262-4c31-b9ac-c3483ca8c88f-kube-api-access-sjczl\") pod \"coredns-6f6b679f8f-fkzq6\" (UID: \"701122a6-4262-4c31-b9ac-c3483ca8c88f\") " pod="kube-system/coredns-6f6b679f8f-fkzq6" Mar 17 18:28:07.286369 kubelet[1962]: I0317 18:28:07.286356 1962 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-bq6pq\" (UniqueName: \"kubernetes.io/projected/20480c0c-aba3-48d5-8372-dcc5d0a137a4-kube-api-access-bq6pq\") pod \"coredns-6f6b679f8f-b9nsl\" (UID: \"20480c0c-aba3-48d5-8372-dcc5d0a137a4\") " pod="kube-system/coredns-6f6b679f8f-b9nsl" Mar 17 18:28:07.286457 kubelet[1962]: I0317 18:28:07.286444 1962 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-55v2l\" (UniqueName: \"kubernetes.io/projected/2583581b-be32-4ea5-876e-18fe9067e955-kube-api-access-55v2l\") pod \"calico-apiserver-66cb7fb7dc-vzzfc\" (UID: \"2583581b-be32-4ea5-876e-18fe9067e955\") " pod="calico-apiserver/calico-apiserver-66cb7fb7dc-vzzfc" Mar 17 18:28:07.286550 kubelet[1962]: I0317 18:28:07.286534 1962 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"tigera-ca-bundle\" (UniqueName: \"kubernetes.io/configmap/3fa28842-51f6-423c-ab80-b3915356f87b-tigera-ca-bundle\") pod \"calico-kube-controllers-5f9fb877b9-db89t\" (UID: \"3fa28842-51f6-423c-ab80-b3915356f87b\") " pod="calico-system/calico-kube-controllers-5f9fb877b9-db89t" Mar 17 18:28:07.286637 kubelet[1962]: I0317 18:28:07.286624 1962 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"config-volume\" (UniqueName: \"kubernetes.io/configmap/20480c0c-aba3-48d5-8372-dcc5d0a137a4-config-volume\") pod \"coredns-6f6b679f8f-b9nsl\" (UID: \"20480c0c-aba3-48d5-8372-dcc5d0a137a4\") " pod="kube-system/coredns-6f6b679f8f-b9nsl" Mar 17 18:28:07.286715 kubelet[1962]: I0317 18:28:07.286702 1962 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-2tgdd\" (UniqueName: \"kubernetes.io/projected/febc9f3a-c5fd-4e88-ac3b-68eff786c39c-kube-api-access-2tgdd\") pod \"calico-apiserver-66cb7fb7dc-2bvrs\" (UID: \"febc9f3a-c5fd-4e88-ac3b-68eff786c39c\") " pod="calico-apiserver/calico-apiserver-66cb7fb7dc-2bvrs" Mar 17 18:28:07.286796 kubelet[1962]: I0317 18:28:07.286780 1962 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-9bs7w\" (UniqueName: \"kubernetes.io/projected/3fa28842-51f6-423c-ab80-b3915356f87b-kube-api-access-9bs7w\") pod \"calico-kube-controllers-5f9fb877b9-db89t\" (UID: \"3fa28842-51f6-423c-ab80-b3915356f87b\") " pod="calico-system/calico-kube-controllers-5f9fb877b9-db89t" Mar 17 18:28:07.530731 env[1216]: time="2025-03-17T18:28:07.529871643Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-kube-controllers-5f9fb877b9-db89t,Uid:3fa28842-51f6-423c-ab80-b3915356f87b,Namespace:calico-system,Attempt:0,}" Mar 17 18:28:07.692423 env[1216]: time="2025-03-17T18:28:07.692362524Z" level=error msg="Failed to destroy network for sandbox \"7aebfcc5fb73f92f982b621769d1ba9950a2531944c35feca41ed03e8b8e54ff\"" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Mar 17 18:28:07.692898 env[1216]: time="2025-03-17T18:28:07.692865256Z" level=error msg="encountered an error cleaning up failed sandbox \"7aebfcc5fb73f92f982b621769d1ba9950a2531944c35feca41ed03e8b8e54ff\", marking sandbox state as SANDBOX_UNKNOWN" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Mar 17 18:28:07.693026 env[1216]: time="2025-03-17T18:28:07.692999109Z" level=error msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-kube-controllers-5f9fb877b9-db89t,Uid:3fa28842-51f6-423c-ab80-b3915356f87b,Namespace:calico-system,Attempt:0,} failed, error" error="failed to setup network for sandbox \"7aebfcc5fb73f92f982b621769d1ba9950a2531944c35feca41ed03e8b8e54ff\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Mar 17 18:28:07.693358 kubelet[1962]: E0317 18:28:07.693307 1962 log.go:32] "RunPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"7aebfcc5fb73f92f982b621769d1ba9950a2531944c35feca41ed03e8b8e54ff\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Mar 17 18:28:07.693433 kubelet[1962]: E0317 18:28:07.693377 1962 kuberuntime_sandbox.go:72] "Failed to create sandbox for pod" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"7aebfcc5fb73f92f982b621769d1ba9950a2531944c35feca41ed03e8b8e54ff\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="calico-system/calico-kube-controllers-5f9fb877b9-db89t" Mar 17 18:28:07.693433 kubelet[1962]: E0317 18:28:07.693396 1962 kuberuntime_manager.go:1168] "CreatePodSandbox for pod failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"7aebfcc5fb73f92f982b621769d1ba9950a2531944c35feca41ed03e8b8e54ff\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="calico-system/calico-kube-controllers-5f9fb877b9-db89t" Mar 17 18:28:07.693494 kubelet[1962]: E0317 18:28:07.693437 1962 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"CreatePodSandbox\" for \"calico-kube-controllers-5f9fb877b9-db89t_calico-system(3fa28842-51f6-423c-ab80-b3915356f87b)\" with CreatePodSandboxError: \"Failed to create sandbox for pod \\\"calico-kube-controllers-5f9fb877b9-db89t_calico-system(3fa28842-51f6-423c-ab80-b3915356f87b)\\\": rpc error: code = Unknown desc = failed to setup network for sandbox \\\"7aebfcc5fb73f92f982b621769d1ba9950a2531944c35feca41ed03e8b8e54ff\\\": plugin type=\\\"calico\\\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-system/calico-kube-controllers-5f9fb877b9-db89t" podUID="3fa28842-51f6-423c-ab80-b3915356f87b" Mar 17 18:28:07.694333 systemd[1]: run-containerd-io.containerd.grpc.v1.cri-sandboxes-7aebfcc5fb73f92f982b621769d1ba9950a2531944c35feca41ed03e8b8e54ff-shm.mount: Deactivated successfully. Mar 17 18:28:07.873003 systemd[1]: Created slice kubepods-besteffort-pod89bbd71b_c404_4c0b_b107_937675df3164.slice. Mar 17 18:28:07.875317 env[1216]: time="2025-03-17T18:28:07.875282307Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:csi-node-driver-2brpt,Uid:89bbd71b-c404-4c0b-b107-937675df3164,Namespace:calico-system,Attempt:0,}" Mar 17 18:28:07.926239 kubelet[1962]: E0317 18:28:07.926175 1962 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Mar 17 18:28:07.928819 env[1216]: time="2025-03-17T18:28:07.928787893Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/node:v3.29.1\"" Mar 17 18:28:07.930240 kubelet[1962]: I0317 18:28:07.930206 1962 pod_container_deletor.go:80] "Container not found in pod's containers" containerID="7aebfcc5fb73f92f982b621769d1ba9950a2531944c35feca41ed03e8b8e54ff" Mar 17 18:28:07.931748 env[1216]: time="2025-03-17T18:28:07.931700913Z" level=info msg="StopPodSandbox for \"7aebfcc5fb73f92f982b621769d1ba9950a2531944c35feca41ed03e8b8e54ff\"" Mar 17 18:28:07.952821 env[1216]: time="2025-03-17T18:28:07.952759560Z" level=error msg="Failed to destroy network for sandbox \"ae4beda153f0e8f2215f60f4da7748192f2f0b969b5793e2bc335b672aaa7272\"" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Mar 17 18:28:07.953169 env[1216]: time="2025-03-17T18:28:07.953122637Z" level=error msg="encountered an error cleaning up failed sandbox \"ae4beda153f0e8f2215f60f4da7748192f2f0b969b5793e2bc335b672aaa7272\", marking sandbox state as SANDBOX_UNKNOWN" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Mar 17 18:28:07.953242 env[1216]: time="2025-03-17T18:28:07.953185044Z" level=error msg="RunPodSandbox for &PodSandboxMetadata{Name:csi-node-driver-2brpt,Uid:89bbd71b-c404-4c0b-b107-937675df3164,Namespace:calico-system,Attempt:0,} failed, error" error="failed to setup network for sandbox \"ae4beda153f0e8f2215f60f4da7748192f2f0b969b5793e2bc335b672aaa7272\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Mar 17 18:28:07.953444 kubelet[1962]: E0317 18:28:07.953397 1962 log.go:32] "RunPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"ae4beda153f0e8f2215f60f4da7748192f2f0b969b5793e2bc335b672aaa7272\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Mar 17 18:28:07.953512 kubelet[1962]: E0317 18:28:07.953463 1962 kuberuntime_sandbox.go:72] "Failed to create sandbox for pod" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"ae4beda153f0e8f2215f60f4da7748192f2f0b969b5793e2bc335b672aaa7272\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="calico-system/csi-node-driver-2brpt" Mar 17 18:28:07.953570 kubelet[1962]: E0317 18:28:07.953485 1962 kuberuntime_manager.go:1168] "CreatePodSandbox for pod failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"ae4beda153f0e8f2215f60f4da7748192f2f0b969b5793e2bc335b672aaa7272\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="calico-system/csi-node-driver-2brpt" Mar 17 18:28:07.953679 kubelet[1962]: E0317 18:28:07.953644 1962 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"CreatePodSandbox\" for \"csi-node-driver-2brpt_calico-system(89bbd71b-c404-4c0b-b107-937675df3164)\" with CreatePodSandboxError: \"Failed to create sandbox for pod \\\"csi-node-driver-2brpt_calico-system(89bbd71b-c404-4c0b-b107-937675df3164)\\\": rpc error: code = Unknown desc = failed to setup network for sandbox \\\"ae4beda153f0e8f2215f60f4da7748192f2f0b969b5793e2bc335b672aaa7272\\\": plugin type=\\\"calico\\\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-system/csi-node-driver-2brpt" podUID="89bbd71b-c404-4c0b-b107-937675df3164" Mar 17 18:28:07.965732 env[1216]: time="2025-03-17T18:28:07.965684490Z" level=error msg="StopPodSandbox for \"7aebfcc5fb73f92f982b621769d1ba9950a2531944c35feca41ed03e8b8e54ff\" failed" error="failed to destroy network for sandbox \"7aebfcc5fb73f92f982b621769d1ba9950a2531944c35feca41ed03e8b8e54ff\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Mar 17 18:28:07.965929 kubelet[1962]: E0317 18:28:07.965884 1962 log.go:32] "StopPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to destroy network for sandbox \"7aebfcc5fb73f92f982b621769d1ba9950a2531944c35feca41ed03e8b8e54ff\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" podSandboxID="7aebfcc5fb73f92f982b621769d1ba9950a2531944c35feca41ed03e8b8e54ff" Mar 17 18:28:07.965983 kubelet[1962]: E0317 18:28:07.965938 1962 kuberuntime_manager.go:1477] "Failed to stop sandbox" podSandboxID={"Type":"containerd","ID":"7aebfcc5fb73f92f982b621769d1ba9950a2531944c35feca41ed03e8b8e54ff"} Mar 17 18:28:07.966015 kubelet[1962]: E0317 18:28:07.965989 1962 kuberuntime_manager.go:1077] "killPodWithSyncResult failed" err="failed to \"KillPodSandbox\" for \"3fa28842-51f6-423c-ab80-b3915356f87b\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"7aebfcc5fb73f92f982b621769d1ba9950a2531944c35feca41ed03e8b8e54ff\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" Mar 17 18:28:07.966063 kubelet[1962]: E0317 18:28:07.966009 1962 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"KillPodSandbox\" for \"3fa28842-51f6-423c-ab80-b3915356f87b\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"7aebfcc5fb73f92f982b621769d1ba9950a2531944c35feca41ed03e8b8e54ff\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-system/calico-kube-controllers-5f9fb877b9-db89t" podUID="3fa28842-51f6-423c-ab80-b3915356f87b" Mar 17 18:28:08.389617 kubelet[1962]: E0317 18:28:08.389583 1962 configmap.go:193] Couldn't get configMap kube-system/coredns: failed to sync configmap cache: timed out waiting for the condition Mar 17 18:28:08.389752 kubelet[1962]: E0317 18:28:08.389670 1962 nestedpendingoperations.go:348] Operation for "{volumeName:kubernetes.io/configmap/20480c0c-aba3-48d5-8372-dcc5d0a137a4-config-volume podName:20480c0c-aba3-48d5-8372-dcc5d0a137a4 nodeName:}" failed. No retries permitted until 2025-03-17 18:28:08.889650834 +0000 UTC m=+24.115956215 (durationBeforeRetry 500ms). Error: MountVolume.SetUp failed for volume "config-volume" (UniqueName: "kubernetes.io/configmap/20480c0c-aba3-48d5-8372-dcc5d0a137a4-config-volume") pod "coredns-6f6b679f8f-b9nsl" (UID: "20480c0c-aba3-48d5-8372-dcc5d0a137a4") : failed to sync configmap cache: timed out waiting for the condition Mar 17 18:28:08.389886 kubelet[1962]: E0317 18:28:08.389815 1962 configmap.go:193] Couldn't get configMap kube-system/coredns: failed to sync configmap cache: timed out waiting for the condition Mar 17 18:28:08.390017 kubelet[1962]: E0317 18:28:08.390002 1962 nestedpendingoperations.go:348] Operation for "{volumeName:kubernetes.io/configmap/701122a6-4262-4c31-b9ac-c3483ca8c88f-config-volume podName:701122a6-4262-4c31-b9ac-c3483ca8c88f nodeName:}" failed. No retries permitted until 2025-03-17 18:28:08.889987547 +0000 UTC m=+24.116292928 (durationBeforeRetry 500ms). Error: MountVolume.SetUp failed for volume "config-volume" (UniqueName: "kubernetes.io/configmap/701122a6-4262-4c31-b9ac-c3483ca8c88f-config-volume") pod "coredns-6f6b679f8f-fkzq6" (UID: "701122a6-4262-4c31-b9ac-c3483ca8c88f") : failed to sync configmap cache: timed out waiting for the condition Mar 17 18:28:08.420418 env[1216]: time="2025-03-17T18:28:08.420360541Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-apiserver-66cb7fb7dc-vzzfc,Uid:2583581b-be32-4ea5-876e-18fe9067e955,Namespace:calico-apiserver,Attempt:0,}" Mar 17 18:28:08.425054 env[1216]: time="2025-03-17T18:28:08.425026601Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-apiserver-66cb7fb7dc-2bvrs,Uid:febc9f3a-c5fd-4e88-ac3b-68eff786c39c,Namespace:calico-apiserver,Attempt:0,}" Mar 17 18:28:08.478941 systemd[1]: run-containerd-io.containerd.grpc.v1.cri-sandboxes-ae4beda153f0e8f2215f60f4da7748192f2f0b969b5793e2bc335b672aaa7272-shm.mount: Deactivated successfully. Mar 17 18:28:08.485919 env[1216]: time="2025-03-17T18:28:08.485863838Z" level=error msg="Failed to destroy network for sandbox \"23ff737391387adfa05fc971a2384b56959ec40974ec3bbcf1afa3a226bf18f5\"" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Mar 17 18:28:08.488642 systemd[1]: run-containerd-io.containerd.grpc.v1.cri-sandboxes-23ff737391387adfa05fc971a2384b56959ec40974ec3bbcf1afa3a226bf18f5-shm.mount: Deactivated successfully. Mar 17 18:28:08.489351 env[1216]: time="2025-03-17T18:28:08.489203327Z" level=error msg="encountered an error cleaning up failed sandbox \"23ff737391387adfa05fc971a2384b56959ec40974ec3bbcf1afa3a226bf18f5\", marking sandbox state as SANDBOX_UNKNOWN" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Mar 17 18:28:08.489526 env[1216]: time="2025-03-17T18:28:08.489485435Z" level=error msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-apiserver-66cb7fb7dc-2bvrs,Uid:febc9f3a-c5fd-4e88-ac3b-68eff786c39c,Namespace:calico-apiserver,Attempt:0,} failed, error" error="failed to setup network for sandbox \"23ff737391387adfa05fc971a2384b56959ec40974ec3bbcf1afa3a226bf18f5\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Mar 17 18:28:08.489736 env[1216]: time="2025-03-17T18:28:08.489100717Z" level=error msg="Failed to destroy network for sandbox \"fa5551db9702a4adfa64e435cfdf70e40a3076d4d0a89d993024a38a57de183f\"" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Mar 17 18:28:08.490145 env[1216]: time="2025-03-17T18:28:08.490112817Z" level=error msg="encountered an error cleaning up failed sandbox \"fa5551db9702a4adfa64e435cfdf70e40a3076d4d0a89d993024a38a57de183f\", marking sandbox state as SANDBOX_UNKNOWN" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Mar 17 18:28:08.490289 env[1216]: time="2025-03-17T18:28:08.490244790Z" level=error msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-apiserver-66cb7fb7dc-vzzfc,Uid:2583581b-be32-4ea5-876e-18fe9067e955,Namespace:calico-apiserver,Attempt:0,} failed, error" error="failed to setup network for sandbox \"fa5551db9702a4adfa64e435cfdf70e40a3076d4d0a89d993024a38a57de183f\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Mar 17 18:28:08.491403 systemd[1]: run-containerd-io.containerd.grpc.v1.cri-sandboxes-fa5551db9702a4adfa64e435cfdf70e40a3076d4d0a89d993024a38a57de183f-shm.mount: Deactivated successfully. Mar 17 18:28:08.492088 kubelet[1962]: E0317 18:28:08.492033 1962 log.go:32] "RunPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"fa5551db9702a4adfa64e435cfdf70e40a3076d4d0a89d993024a38a57de183f\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Mar 17 18:28:08.492160 kubelet[1962]: E0317 18:28:08.492082 1962 log.go:32] "RunPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"23ff737391387adfa05fc971a2384b56959ec40974ec3bbcf1afa3a226bf18f5\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Mar 17 18:28:08.492160 kubelet[1962]: E0317 18:28:08.492145 1962 kuberuntime_sandbox.go:72] "Failed to create sandbox for pod" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"23ff737391387adfa05fc971a2384b56959ec40974ec3bbcf1afa3a226bf18f5\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="calico-apiserver/calico-apiserver-66cb7fb7dc-2bvrs" Mar 17 18:28:08.492224 kubelet[1962]: E0317 18:28:08.492164 1962 kuberuntime_manager.go:1168] "CreatePodSandbox for pod failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"23ff737391387adfa05fc971a2384b56959ec40974ec3bbcf1afa3a226bf18f5\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="calico-apiserver/calico-apiserver-66cb7fb7dc-2bvrs" Mar 17 18:28:08.492224 kubelet[1962]: E0317 18:28:08.492202 1962 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"CreatePodSandbox\" for \"calico-apiserver-66cb7fb7dc-2bvrs_calico-apiserver(febc9f3a-c5fd-4e88-ac3b-68eff786c39c)\" with CreatePodSandboxError: \"Failed to create sandbox for pod \\\"calico-apiserver-66cb7fb7dc-2bvrs_calico-apiserver(febc9f3a-c5fd-4e88-ac3b-68eff786c39c)\\\": rpc error: code = Unknown desc = failed to setup network for sandbox \\\"23ff737391387adfa05fc971a2384b56959ec40974ec3bbcf1afa3a226bf18f5\\\": plugin type=\\\"calico\\\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-apiserver/calico-apiserver-66cb7fb7dc-2bvrs" podUID="febc9f3a-c5fd-4e88-ac3b-68eff786c39c" Mar 17 18:28:08.492224 kubelet[1962]: E0317 18:28:08.492093 1962 kuberuntime_sandbox.go:72] "Failed to create sandbox for pod" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"fa5551db9702a4adfa64e435cfdf70e40a3076d4d0a89d993024a38a57de183f\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="calico-apiserver/calico-apiserver-66cb7fb7dc-vzzfc" Mar 17 18:28:08.492336 kubelet[1962]: E0317 18:28:08.492234 1962 kuberuntime_manager.go:1168] "CreatePodSandbox for pod failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"fa5551db9702a4adfa64e435cfdf70e40a3076d4d0a89d993024a38a57de183f\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="calico-apiserver/calico-apiserver-66cb7fb7dc-vzzfc" Mar 17 18:28:08.492336 kubelet[1962]: E0317 18:28:08.492278 1962 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"CreatePodSandbox\" for \"calico-apiserver-66cb7fb7dc-vzzfc_calico-apiserver(2583581b-be32-4ea5-876e-18fe9067e955)\" with CreatePodSandboxError: \"Failed to create sandbox for pod \\\"calico-apiserver-66cb7fb7dc-vzzfc_calico-apiserver(2583581b-be32-4ea5-876e-18fe9067e955)\\\": rpc error: code = Unknown desc = failed to setup network for sandbox \\\"fa5551db9702a4adfa64e435cfdf70e40a3076d4d0a89d993024a38a57de183f\\\": plugin type=\\\"calico\\\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-apiserver/calico-apiserver-66cb7fb7dc-vzzfc" podUID="2583581b-be32-4ea5-876e-18fe9067e955" Mar 17 18:28:08.933321 kubelet[1962]: I0317 18:28:08.932802 1962 pod_container_deletor.go:80] "Container not found in pod's containers" containerID="fa5551db9702a4adfa64e435cfdf70e40a3076d4d0a89d993024a38a57de183f" Mar 17 18:28:08.933604 env[1216]: time="2025-03-17T18:28:08.933362830Z" level=info msg="StopPodSandbox for \"fa5551db9702a4adfa64e435cfdf70e40a3076d4d0a89d993024a38a57de183f\"" Mar 17 18:28:08.934653 kubelet[1962]: I0317 18:28:08.934545 1962 pod_container_deletor.go:80] "Container not found in pod's containers" containerID="ae4beda153f0e8f2215f60f4da7748192f2f0b969b5793e2bc335b672aaa7272" Mar 17 18:28:08.935164 env[1216]: time="2025-03-17T18:28:08.935136445Z" level=info msg="StopPodSandbox for \"ae4beda153f0e8f2215f60f4da7748192f2f0b969b5793e2bc335b672aaa7272\"" Mar 17 18:28:08.936376 kubelet[1962]: I0317 18:28:08.936064 1962 pod_container_deletor.go:80] "Container not found in pod's containers" containerID="23ff737391387adfa05fc971a2384b56959ec40974ec3bbcf1afa3a226bf18f5" Mar 17 18:28:08.936455 env[1216]: time="2025-03-17T18:28:08.936421251Z" level=info msg="StopPodSandbox for \"23ff737391387adfa05fc971a2384b56959ec40974ec3bbcf1afa3a226bf18f5\"" Mar 17 18:28:08.958907 env[1216]: time="2025-03-17T18:28:08.958842101Z" level=error msg="StopPodSandbox for \"ae4beda153f0e8f2215f60f4da7748192f2f0b969b5793e2bc335b672aaa7272\" failed" error="failed to destroy network for sandbox \"ae4beda153f0e8f2215f60f4da7748192f2f0b969b5793e2bc335b672aaa7272\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Mar 17 18:28:08.959317 kubelet[1962]: E0317 18:28:08.959157 1962 log.go:32] "StopPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to destroy network for sandbox \"ae4beda153f0e8f2215f60f4da7748192f2f0b969b5793e2bc335b672aaa7272\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" podSandboxID="ae4beda153f0e8f2215f60f4da7748192f2f0b969b5793e2bc335b672aaa7272" Mar 17 18:28:08.959317 kubelet[1962]: E0317 18:28:08.959201 1962 kuberuntime_manager.go:1477] "Failed to stop sandbox" podSandboxID={"Type":"containerd","ID":"ae4beda153f0e8f2215f60f4da7748192f2f0b969b5793e2bc335b672aaa7272"} Mar 17 18:28:08.959317 kubelet[1962]: E0317 18:28:08.959234 1962 kuberuntime_manager.go:1077] "killPodWithSyncResult failed" err="failed to \"KillPodSandbox\" for \"89bbd71b-c404-4c0b-b107-937675df3164\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"ae4beda153f0e8f2215f60f4da7748192f2f0b969b5793e2bc335b672aaa7272\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" Mar 17 18:28:08.959317 kubelet[1962]: E0317 18:28:08.959259 1962 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"KillPodSandbox\" for \"89bbd71b-c404-4c0b-b107-937675df3164\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"ae4beda153f0e8f2215f60f4da7748192f2f0b969b5793e2bc335b672aaa7272\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-system/csi-node-driver-2brpt" podUID="89bbd71b-c404-4c0b-b107-937675df3164" Mar 17 18:28:08.964158 env[1216]: time="2025-03-17T18:28:08.964116261Z" level=error msg="StopPodSandbox for \"23ff737391387adfa05fc971a2384b56959ec40974ec3bbcf1afa3a226bf18f5\" failed" error="failed to destroy network for sandbox \"23ff737391387adfa05fc971a2384b56959ec40974ec3bbcf1afa3a226bf18f5\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Mar 17 18:28:08.964494 kubelet[1962]: E0317 18:28:08.964385 1962 log.go:32] "StopPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to destroy network for sandbox \"23ff737391387adfa05fc971a2384b56959ec40974ec3bbcf1afa3a226bf18f5\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" podSandboxID="23ff737391387adfa05fc971a2384b56959ec40974ec3bbcf1afa3a226bf18f5" Mar 17 18:28:08.964494 kubelet[1962]: E0317 18:28:08.964419 1962 kuberuntime_manager.go:1477] "Failed to stop sandbox" podSandboxID={"Type":"containerd","ID":"23ff737391387adfa05fc971a2384b56959ec40974ec3bbcf1afa3a226bf18f5"} Mar 17 18:28:08.964494 kubelet[1962]: E0317 18:28:08.964443 1962 kuberuntime_manager.go:1077] "killPodWithSyncResult failed" err="failed to \"KillPodSandbox\" for \"febc9f3a-c5fd-4e88-ac3b-68eff786c39c\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"23ff737391387adfa05fc971a2384b56959ec40974ec3bbcf1afa3a226bf18f5\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" Mar 17 18:28:08.964494 kubelet[1962]: E0317 18:28:08.964461 1962 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"KillPodSandbox\" for \"febc9f3a-c5fd-4e88-ac3b-68eff786c39c\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"23ff737391387adfa05fc971a2384b56959ec40974ec3bbcf1afa3a226bf18f5\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-apiserver/calico-apiserver-66cb7fb7dc-2bvrs" podUID="febc9f3a-c5fd-4e88-ac3b-68eff786c39c" Mar 17 18:28:08.966296 env[1216]: time="2025-03-17T18:28:08.966262033Z" level=error msg="StopPodSandbox for \"fa5551db9702a4adfa64e435cfdf70e40a3076d4d0a89d993024a38a57de183f\" failed" error="failed to destroy network for sandbox \"fa5551db9702a4adfa64e435cfdf70e40a3076d4d0a89d993024a38a57de183f\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Mar 17 18:28:08.966685 kubelet[1962]: E0317 18:28:08.966511 1962 log.go:32] "StopPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to destroy network for sandbox \"fa5551db9702a4adfa64e435cfdf70e40a3076d4d0a89d993024a38a57de183f\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" podSandboxID="fa5551db9702a4adfa64e435cfdf70e40a3076d4d0a89d993024a38a57de183f" Mar 17 18:28:08.966685 kubelet[1962]: E0317 18:28:08.966540 1962 kuberuntime_manager.go:1477] "Failed to stop sandbox" podSandboxID={"Type":"containerd","ID":"fa5551db9702a4adfa64e435cfdf70e40a3076d4d0a89d993024a38a57de183f"} Mar 17 18:28:08.966685 kubelet[1962]: E0317 18:28:08.966562 1962 kuberuntime_manager.go:1077] "killPodWithSyncResult failed" err="failed to \"KillPodSandbox\" for \"2583581b-be32-4ea5-876e-18fe9067e955\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"fa5551db9702a4adfa64e435cfdf70e40a3076d4d0a89d993024a38a57de183f\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" Mar 17 18:28:08.966685 kubelet[1962]: E0317 18:28:08.966583 1962 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"KillPodSandbox\" for \"2583581b-be32-4ea5-876e-18fe9067e955\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"fa5551db9702a4adfa64e435cfdf70e40a3076d4d0a89d993024a38a57de183f\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-apiserver/calico-apiserver-66cb7fb7dc-vzzfc" podUID="2583581b-be32-4ea5-876e-18fe9067e955" Mar 17 18:28:09.012237 kubelet[1962]: E0317 18:28:09.012210 1962 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Mar 17 18:28:09.015486 env[1216]: time="2025-03-17T18:28:09.015449222Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:coredns-6f6b679f8f-fkzq6,Uid:701122a6-4262-4c31-b9ac-c3483ca8c88f,Namespace:kube-system,Attempt:0,}" Mar 17 18:28:09.017864 kubelet[1962]: E0317 18:28:09.017454 1962 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Mar 17 18:28:09.018700 env[1216]: time="2025-03-17T18:28:09.018671967Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:coredns-6f6b679f8f-b9nsl,Uid:20480c0c-aba3-48d5-8372-dcc5d0a137a4,Namespace:kube-system,Attempt:0,}" Mar 17 18:28:09.078227 env[1216]: time="2025-03-17T18:28:09.078172990Z" level=error msg="Failed to destroy network for sandbox \"4e127a8801dcc95eef0564f350e374fd79deb924e30287c7f4cbc63f53152ee8\"" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Mar 17 18:28:09.078676 env[1216]: time="2025-03-17T18:28:09.078642275Z" level=error msg="encountered an error cleaning up failed sandbox \"4e127a8801dcc95eef0564f350e374fd79deb924e30287c7f4cbc63f53152ee8\", marking sandbox state as SANDBOX_UNKNOWN" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Mar 17 18:28:09.078799 env[1216]: time="2025-03-17T18:28:09.078772167Z" level=error msg="RunPodSandbox for &PodSandboxMetadata{Name:coredns-6f6b679f8f-fkzq6,Uid:701122a6-4262-4c31-b9ac-c3483ca8c88f,Namespace:kube-system,Attempt:0,} failed, error" error="failed to setup network for sandbox \"4e127a8801dcc95eef0564f350e374fd79deb924e30287c7f4cbc63f53152ee8\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Mar 17 18:28:09.079113 kubelet[1962]: E0317 18:28:09.079060 1962 log.go:32] "RunPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"4e127a8801dcc95eef0564f350e374fd79deb924e30287c7f4cbc63f53152ee8\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Mar 17 18:28:09.079194 kubelet[1962]: E0317 18:28:09.079127 1962 kuberuntime_sandbox.go:72] "Failed to create sandbox for pod" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"4e127a8801dcc95eef0564f350e374fd79deb924e30287c7f4cbc63f53152ee8\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="kube-system/coredns-6f6b679f8f-fkzq6" Mar 17 18:28:09.079194 kubelet[1962]: E0317 18:28:09.079146 1962 kuberuntime_manager.go:1168] "CreatePodSandbox for pod failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"4e127a8801dcc95eef0564f350e374fd79deb924e30287c7f4cbc63f53152ee8\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="kube-system/coredns-6f6b679f8f-fkzq6" Mar 17 18:28:09.079262 kubelet[1962]: E0317 18:28:09.079188 1962 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"CreatePodSandbox\" for \"coredns-6f6b679f8f-fkzq6_kube-system(701122a6-4262-4c31-b9ac-c3483ca8c88f)\" with CreatePodSandboxError: \"Failed to create sandbox for pod \\\"coredns-6f6b679f8f-fkzq6_kube-system(701122a6-4262-4c31-b9ac-c3483ca8c88f)\\\": rpc error: code = Unknown desc = failed to setup network for sandbox \\\"4e127a8801dcc95eef0564f350e374fd79deb924e30287c7f4cbc63f53152ee8\\\": plugin type=\\\"calico\\\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="kube-system/coredns-6f6b679f8f-fkzq6" podUID="701122a6-4262-4c31-b9ac-c3483ca8c88f" Mar 17 18:28:09.092630 env[1216]: time="2025-03-17T18:28:09.092582072Z" level=error msg="Failed to destroy network for sandbox \"0524b4acf1ec082d67914ee78ca0f736df7532e8ab6013f34ab43ac23d219f01\"" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Mar 17 18:28:09.092957 env[1216]: time="2025-03-17T18:28:09.092917224Z" level=error msg="encountered an error cleaning up failed sandbox \"0524b4acf1ec082d67914ee78ca0f736df7532e8ab6013f34ab43ac23d219f01\", marking sandbox state as SANDBOX_UNKNOWN" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Mar 17 18:28:09.093001 env[1216]: time="2025-03-17T18:28:09.092974749Z" level=error msg="RunPodSandbox for &PodSandboxMetadata{Name:coredns-6f6b679f8f-b9nsl,Uid:20480c0c-aba3-48d5-8372-dcc5d0a137a4,Namespace:kube-system,Attempt:0,} failed, error" error="failed to setup network for sandbox \"0524b4acf1ec082d67914ee78ca0f736df7532e8ab6013f34ab43ac23d219f01\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Mar 17 18:28:09.093180 kubelet[1962]: E0317 18:28:09.093152 1962 log.go:32] "RunPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"0524b4acf1ec082d67914ee78ca0f736df7532e8ab6013f34ab43ac23d219f01\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Mar 17 18:28:09.093242 kubelet[1962]: E0317 18:28:09.093196 1962 kuberuntime_sandbox.go:72] "Failed to create sandbox for pod" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"0524b4acf1ec082d67914ee78ca0f736df7532e8ab6013f34ab43ac23d219f01\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="kube-system/coredns-6f6b679f8f-b9nsl" Mar 17 18:28:09.093242 kubelet[1962]: E0317 18:28:09.093213 1962 kuberuntime_manager.go:1168] "CreatePodSandbox for pod failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"0524b4acf1ec082d67914ee78ca0f736df7532e8ab6013f34ab43ac23d219f01\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="kube-system/coredns-6f6b679f8f-b9nsl" Mar 17 18:28:09.093298 kubelet[1962]: E0317 18:28:09.093252 1962 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"CreatePodSandbox\" for \"coredns-6f6b679f8f-b9nsl_kube-system(20480c0c-aba3-48d5-8372-dcc5d0a137a4)\" with CreatePodSandboxError: \"Failed to create sandbox for pod \\\"coredns-6f6b679f8f-b9nsl_kube-system(20480c0c-aba3-48d5-8372-dcc5d0a137a4)\\\": rpc error: code = Unknown desc = failed to setup network for sandbox \\\"0524b4acf1ec082d67914ee78ca0f736df7532e8ab6013f34ab43ac23d219f01\\\": plugin type=\\\"calico\\\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="kube-system/coredns-6f6b679f8f-b9nsl" podUID="20480c0c-aba3-48d5-8372-dcc5d0a137a4" Mar 17 18:28:09.474744 systemd[1]: run-containerd-io.containerd.grpc.v1.cri-sandboxes-4e127a8801dcc95eef0564f350e374fd79deb924e30287c7f4cbc63f53152ee8-shm.mount: Deactivated successfully. Mar 17 18:28:09.939905 kubelet[1962]: I0317 18:28:09.939871 1962 pod_container_deletor.go:80] "Container not found in pod's containers" containerID="0524b4acf1ec082d67914ee78ca0f736df7532e8ab6013f34ab43ac23d219f01" Mar 17 18:28:09.941526 env[1216]: time="2025-03-17T18:28:09.940596380Z" level=info msg="StopPodSandbox for \"0524b4acf1ec082d67914ee78ca0f736df7532e8ab6013f34ab43ac23d219f01\"" Mar 17 18:28:09.941746 kubelet[1962]: I0317 18:28:09.941257 1962 pod_container_deletor.go:80] "Container not found in pod's containers" containerID="4e127a8801dcc95eef0564f350e374fd79deb924e30287c7f4cbc63f53152ee8" Mar 17 18:28:09.942197 env[1216]: time="2025-03-17T18:28:09.942135526Z" level=info msg="StopPodSandbox for \"4e127a8801dcc95eef0564f350e374fd79deb924e30287c7f4cbc63f53152ee8\"" Mar 17 18:28:09.968365 env[1216]: time="2025-03-17T18:28:09.968300639Z" level=error msg="StopPodSandbox for \"0524b4acf1ec082d67914ee78ca0f736df7532e8ab6013f34ab43ac23d219f01\" failed" error="failed to destroy network for sandbox \"0524b4acf1ec082d67914ee78ca0f736df7532e8ab6013f34ab43ac23d219f01\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Mar 17 18:28:09.968682 kubelet[1962]: E0317 18:28:09.968648 1962 log.go:32] "StopPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to destroy network for sandbox \"0524b4acf1ec082d67914ee78ca0f736df7532e8ab6013f34ab43ac23d219f01\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" podSandboxID="0524b4acf1ec082d67914ee78ca0f736df7532e8ab6013f34ab43ac23d219f01" Mar 17 18:28:09.968744 kubelet[1962]: E0317 18:28:09.968703 1962 kuberuntime_manager.go:1477] "Failed to stop sandbox" podSandboxID={"Type":"containerd","ID":"0524b4acf1ec082d67914ee78ca0f736df7532e8ab6013f34ab43ac23d219f01"} Mar 17 18:28:09.968744 kubelet[1962]: E0317 18:28:09.968737 1962 kuberuntime_manager.go:1077] "killPodWithSyncResult failed" err="failed to \"KillPodSandbox\" for \"20480c0c-aba3-48d5-8372-dcc5d0a137a4\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"0524b4acf1ec082d67914ee78ca0f736df7532e8ab6013f34ab43ac23d219f01\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" Mar 17 18:28:09.968851 kubelet[1962]: E0317 18:28:09.968757 1962 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"KillPodSandbox\" for \"20480c0c-aba3-48d5-8372-dcc5d0a137a4\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"0524b4acf1ec082d67914ee78ca0f736df7532e8ab6013f34ab43ac23d219f01\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="kube-system/coredns-6f6b679f8f-b9nsl" podUID="20480c0c-aba3-48d5-8372-dcc5d0a137a4" Mar 17 18:28:09.970992 env[1216]: time="2025-03-17T18:28:09.970892044Z" level=error msg="StopPodSandbox for \"4e127a8801dcc95eef0564f350e374fd79deb924e30287c7f4cbc63f53152ee8\" failed" error="failed to destroy network for sandbox \"4e127a8801dcc95eef0564f350e374fd79deb924e30287c7f4cbc63f53152ee8\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Mar 17 18:28:09.971326 kubelet[1962]: E0317 18:28:09.971201 1962 log.go:32] "StopPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to destroy network for sandbox \"4e127a8801dcc95eef0564f350e374fd79deb924e30287c7f4cbc63f53152ee8\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" podSandboxID="4e127a8801dcc95eef0564f350e374fd79deb924e30287c7f4cbc63f53152ee8" Mar 17 18:28:09.971326 kubelet[1962]: E0317 18:28:09.971239 1962 kuberuntime_manager.go:1477] "Failed to stop sandbox" podSandboxID={"Type":"containerd","ID":"4e127a8801dcc95eef0564f350e374fd79deb924e30287c7f4cbc63f53152ee8"} Mar 17 18:28:09.971326 kubelet[1962]: E0317 18:28:09.971276 1962 kuberuntime_manager.go:1077] "killPodWithSyncResult failed" err="failed to \"KillPodSandbox\" for \"701122a6-4262-4c31-b9ac-c3483ca8c88f\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"4e127a8801dcc95eef0564f350e374fd79deb924e30287c7f4cbc63f53152ee8\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" Mar 17 18:28:09.971326 kubelet[1962]: E0317 18:28:09.971297 1962 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"KillPodSandbox\" for \"701122a6-4262-4c31-b9ac-c3483ca8c88f\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"4e127a8801dcc95eef0564f350e374fd79deb924e30287c7f4cbc63f53152ee8\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="kube-system/coredns-6f6b679f8f-fkzq6" podUID="701122a6-4262-4c31-b9ac-c3483ca8c88f" Mar 17 18:28:13.193473 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount2923059887.mount: Deactivated successfully. Mar 17 18:28:13.303979 env[1216]: time="2025-03-17T18:28:13.303934674Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/node:v3.29.1,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Mar 17 18:28:13.305282 env[1216]: time="2025-03-17T18:28:13.305253341Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:680b8c280812d12c035ca9f0deedea7c761afe0f1cc65109ea2f96bf63801758,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Mar 17 18:28:13.306608 env[1216]: time="2025-03-17T18:28:13.306585568Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/node:v3.29.1,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Mar 17 18:28:13.307847 env[1216]: time="2025-03-17T18:28:13.307800946Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/node@sha256:99c3917516efe1f807a0cfdf2d14b628b7c5cc6bd8a9ee5a253154f31756bea1,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Mar 17 18:28:13.308314 env[1216]: time="2025-03-17T18:28:13.308287585Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/node:v3.29.1\" returns image reference \"sha256:680b8c280812d12c035ca9f0deedea7c761afe0f1cc65109ea2f96bf63801758\"" Mar 17 18:28:13.322257 env[1216]: time="2025-03-17T18:28:13.322212909Z" level=info msg="CreateContainer within sandbox \"150a0e38e135092c874443f4cf4f176ae37c8a26863861eb6970c898609ed280\" for container &ContainerMetadata{Name:calico-node,Attempt:0,}" Mar 17 18:28:13.333862 env[1216]: time="2025-03-17T18:28:13.333808564Z" level=info msg="CreateContainer within sandbox \"150a0e38e135092c874443f4cf4f176ae37c8a26863861eb6970c898609ed280\" for &ContainerMetadata{Name:calico-node,Attempt:0,} returns container id \"39b7c79d0c05b5edfd4a3318a10c84e54a0e0228ee0695cfd7c60eafac2cd074\"" Mar 17 18:28:13.334291 env[1216]: time="2025-03-17T18:28:13.334267801Z" level=info msg="StartContainer for \"39b7c79d0c05b5edfd4a3318a10c84e54a0e0228ee0695cfd7c60eafac2cd074\"" Mar 17 18:28:13.350703 systemd[1]: Started cri-containerd-39b7c79d0c05b5edfd4a3318a10c84e54a0e0228ee0695cfd7c60eafac2cd074.scope. Mar 17 18:28:13.427000 audit[3073]: AVC avc: denied { perfmon } for pid=3073 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:28:13.430141 kernel: kauditd_printk_skb: 34 callbacks suppressed Mar 17 18:28:13.430208 kernel: audit: type=1400 audit(1742236093.427:989): avc: denied { perfmon } for pid=3073 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:28:13.430235 kernel: audit: type=1300 audit(1742236093.427:989): arch=c00000b7 syscall=280 success=yes exit=15 a0=0 a1=40001c55a0 a2=3c a3=0 items=0 ppid=2420 pid=3073 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:28:13.427000 audit[3073]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=0 a1=40001c55a0 a2=3c a3=0 items=0 ppid=2420 pid=3073 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:28:13.427000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3339623763373964306330356235656466643461333331386131306338 Mar 17 18:28:13.435036 kernel: audit: type=1327 audit(1742236093.427:989): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3339623763373964306330356235656466643461333331386131306338 Mar 17 18:28:13.435083 kernel: audit: type=1400 audit(1742236093.427:990): avc: denied { bpf } for pid=3073 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:28:13.427000 audit[3073]: AVC avc: denied { bpf } for pid=3073 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:28:13.436685 kernel: audit: type=1400 audit(1742236093.427:990): avc: denied { bpf } for pid=3073 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:28:13.427000 audit[3073]: AVC avc: denied { bpf } for pid=3073 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:28:13.427000 audit[3073]: AVC avc: denied { bpf } for pid=3073 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:28:13.440125 kernel: audit: type=1400 audit(1742236093.427:990): avc: denied { bpf } for pid=3073 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:28:13.440201 kernel: audit: type=1400 audit(1742236093.427:990): avc: denied { perfmon } for pid=3073 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:28:13.427000 audit[3073]: AVC avc: denied { perfmon } for pid=3073 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:28:13.427000 audit[3073]: AVC avc: denied { perfmon } for pid=3073 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:28:13.443549 kernel: audit: type=1400 audit(1742236093.427:990): avc: denied { perfmon } for pid=3073 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:28:13.427000 audit[3073]: AVC avc: denied { perfmon } for pid=3073 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:28:13.446063 kernel: audit: type=1400 audit(1742236093.427:990): avc: denied { perfmon } for pid=3073 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:28:13.427000 audit[3073]: AVC avc: denied { perfmon } for pid=3073 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:28:13.447922 kernel: audit: type=1400 audit(1742236093.427:990): avc: denied { perfmon } for pid=3073 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:28:13.427000 audit[3073]: AVC avc: denied { perfmon } for pid=3073 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:28:13.427000 audit[3073]: AVC avc: denied { bpf } for pid=3073 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:28:13.427000 audit[3073]: AVC avc: denied { bpf } for pid=3073 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:28:13.427000 audit: BPF prog-id=133 op=LOAD Mar 17 18:28:13.427000 audit[3073]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=5 a1=40001c58e0 a2=78 a3=0 items=0 ppid=2420 pid=3073 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:28:13.427000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3339623763373964306330356235656466643461333331386131306338 Mar 17 18:28:13.427000 audit[3073]: AVC avc: denied { bpf } for pid=3073 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:28:13.427000 audit[3073]: AVC avc: denied { bpf } for pid=3073 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:28:13.427000 audit[3073]: AVC avc: denied { perfmon } for pid=3073 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:28:13.427000 audit[3073]: AVC avc: denied { perfmon } for pid=3073 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:28:13.427000 audit[3073]: AVC avc: denied { perfmon } for pid=3073 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:28:13.427000 audit[3073]: AVC avc: denied { perfmon } for pid=3073 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:28:13.427000 audit[3073]: AVC avc: denied { perfmon } for pid=3073 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:28:13.427000 audit[3073]: AVC avc: denied { bpf } for pid=3073 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:28:13.427000 audit[3073]: AVC avc: denied { bpf } for pid=3073 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:28:13.427000 audit: BPF prog-id=134 op=LOAD Mar 17 18:28:13.427000 audit[3073]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=17 a0=5 a1=40001c5670 a2=78 a3=0 items=0 ppid=2420 pid=3073 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:28:13.427000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3339623763373964306330356235656466643461333331386131306338 Mar 17 18:28:13.429000 audit: BPF prog-id=134 op=UNLOAD Mar 17 18:28:13.429000 audit: BPF prog-id=133 op=UNLOAD Mar 17 18:28:13.429000 audit[3073]: AVC avc: denied { bpf } for pid=3073 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:28:13.429000 audit[3073]: AVC avc: denied { bpf } for pid=3073 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:28:13.429000 audit[3073]: AVC avc: denied { bpf } for pid=3073 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:28:13.429000 audit[3073]: AVC avc: denied { perfmon } for pid=3073 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:28:13.429000 audit[3073]: AVC avc: denied { perfmon } for pid=3073 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:28:13.429000 audit[3073]: AVC avc: denied { perfmon } for pid=3073 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:28:13.429000 audit[3073]: AVC avc: denied { perfmon } for pid=3073 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:28:13.429000 audit[3073]: AVC avc: denied { perfmon } for pid=3073 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:28:13.429000 audit[3073]: AVC avc: denied { bpf } for pid=3073 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:28:13.429000 audit[3073]: AVC avc: denied { bpf } for pid=3073 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:28:13.429000 audit: BPF prog-id=135 op=LOAD Mar 17 18:28:13.429000 audit[3073]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=5 a1=40001c5b40 a2=78 a3=0 items=0 ppid=2420 pid=3073 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:28:13.429000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3339623763373964306330356235656466643461333331386131306338 Mar 17 18:28:13.459093 env[1216]: time="2025-03-17T18:28:13.459055306Z" level=info msg="StartContainer for \"39b7c79d0c05b5edfd4a3318a10c84e54a0e0228ee0695cfd7c60eafac2cd074\" returns successfully" Mar 17 18:28:13.601133 kernel: wireguard: WireGuard 1.0.0 loaded. See www.wireguard.com for information. Mar 17 18:28:13.601229 kernel: wireguard: Copyright (C) 2015-2019 Jason A. Donenfeld . All Rights Reserved. Mar 17 18:28:13.949070 kubelet[1962]: E0317 18:28:13.949031 1962 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Mar 17 18:28:14.564138 systemd[1]: Started sshd@7-10.0.0.111:22-10.0.0.1:37940.service. Mar 17 18:28:14.563000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@7-10.0.0.111:22-10.0.0.1:37940 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:28:14.601000 audit[3133]: USER_ACCT pid=3133 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Mar 17 18:28:14.602943 sshd[3133]: Accepted publickey for core from 10.0.0.1 port 37940 ssh2: RSA SHA256:hoQCPKafrT/V1URQ18ch5K7mLY85DMM2OIJJf47c8zQ Mar 17 18:28:14.602000 audit[3133]: CRED_ACQ pid=3133 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Mar 17 18:28:14.602000 audit[3133]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffe990a2f0 a2=3 a3=1 items=0 ppid=1 pid=3133 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=8 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:28:14.602000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Mar 17 18:28:14.604167 sshd[3133]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Mar 17 18:28:14.610054 systemd-logind[1207]: New session 8 of user core. Mar 17 18:28:14.610823 systemd[1]: Started session-8.scope. Mar 17 18:28:14.613000 audit[3133]: USER_START pid=3133 uid=0 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Mar 17 18:28:14.615000 audit[3135]: CRED_ACQ pid=3135 uid=0 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Mar 17 18:28:14.769086 sshd[3133]: pam_unix(sshd:session): session closed for user core Mar 17 18:28:14.769000 audit[3133]: USER_END pid=3133 uid=0 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Mar 17 18:28:14.769000 audit[3133]: CRED_DISP pid=3133 uid=0 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Mar 17 18:28:14.771599 systemd[1]: sshd@7-10.0.0.111:22-10.0.0.1:37940.service: Deactivated successfully. Mar 17 18:28:14.770000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@7-10.0.0.111:22-10.0.0.1:37940 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:28:14.772376 systemd[1]: session-8.scope: Deactivated successfully. Mar 17 18:28:14.772871 systemd-logind[1207]: Session 8 logged out. Waiting for processes to exit. Mar 17 18:28:14.773458 systemd-logind[1207]: Removed session 8. Mar 17 18:28:14.824000 audit[3196]: AVC avc: denied { write } for pid=3196 comm="tee" name="fd" dev="proc" ino=19167 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0 Mar 17 18:28:14.824000 audit[3196]: SYSCALL arch=c00000b7 syscall=56 success=yes exit=3 a0=ffffffffffffff9c a1=ffffffadea2b a2=241 a3=1b6 items=1 ppid=3156 pid=3196 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tee" exe="/usr/bin/coreutils" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:28:14.824000 audit: CWD cwd="/etc/service/enabled/bird/log" Mar 17 18:28:14.824000 audit: PATH item=0 name="/dev/fd/63" inode=19161 dev=00:0b mode=010600 ouid=0 ogid=0 rdev=00:00 obj=system_u:system_r:kernel_t:s0 nametype=NORMAL cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Mar 17 18:28:14.824000 audit: PROCTITLE proctitle=2F7573722F62696E2F636F72657574696C73002D2D636F72657574696C732D70726F672D73686562616E673D746565002F7573722F62696E2F746565002F6465762F66642F3633 Mar 17 18:28:14.828000 audit[3202]: AVC avc: denied { write } for pid=3202 comm="tee" name="fd" dev="proc" ino=19174 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0 Mar 17 18:28:14.828000 audit[3209]: AVC avc: denied { write } for pid=3209 comm="tee" name="fd" dev="proc" ino=19171 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0 Mar 17 18:28:14.828000 audit[3209]: SYSCALL arch=c00000b7 syscall=56 success=yes exit=3 a0=ffffffffffffff9c a1=ffffe10bfa2c a2=241 a3=1b6 items=1 ppid=3162 pid=3209 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tee" exe="/usr/bin/coreutils" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:28:14.828000 audit: CWD cwd="/etc/service/enabled/cni/log" Mar 17 18:28:14.828000 audit: PATH item=0 name="/dev/fd/63" inode=16349 dev=00:0b mode=010600 ouid=0 ogid=0 rdev=00:00 obj=system_u:system_r:kernel_t:s0 nametype=NORMAL cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Mar 17 18:28:14.828000 audit: PROCTITLE proctitle=2F7573722F62696E2F636F72657574696C73002D2D636F72657574696C732D70726F672D73686562616E673D746565002F7573722F62696E2F746565002F6465762F66642F3633 Mar 17 18:28:14.828000 audit[3202]: SYSCALL arch=c00000b7 syscall=56 success=yes exit=3 a0=ffffffffffffff9c a1=fffff5dc5a2a a2=241 a3=1b6 items=1 ppid=3161 pid=3202 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tee" exe="/usr/bin/coreutils" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:28:14.828000 audit: CWD cwd="/etc/service/enabled/felix/log" Mar 17 18:28:14.828000 audit: PATH item=0 name="/dev/fd/63" inode=19162 dev=00:0b mode=010600 ouid=0 ogid=0 rdev=00:00 obj=system_u:system_r:kernel_t:s0 nametype=NORMAL cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Mar 17 18:28:14.828000 audit: PROCTITLE proctitle=2F7573722F62696E2F636F72657574696C73002D2D636F72657574696C732D70726F672D73686562616E673D746565002F7573722F62696E2F746565002F6465762F66642F3633 Mar 17 18:28:14.831000 audit[3219]: AVC avc: denied { write } for pid=3219 comm="tee" name="fd" dev="proc" ino=18130 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0 Mar 17 18:28:14.831000 audit[3219]: SYSCALL arch=c00000b7 syscall=56 success=yes exit=3 a0=ffffffffffffff9c a1=fffffde42a1a a2=241 a3=1b6 items=1 ppid=3159 pid=3219 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tee" exe="/usr/bin/coreutils" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:28:14.831000 audit: CWD cwd="/etc/service/enabled/allocate-tunnel-addrs/log" Mar 17 18:28:14.831000 audit: PATH item=0 name="/dev/fd/63" inode=17271 dev=00:0b mode=010600 ouid=0 ogid=0 rdev=00:00 obj=system_u:system_r:kernel_t:s0 nametype=NORMAL cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Mar 17 18:28:14.831000 audit: PROCTITLE proctitle=2F7573722F62696E2F636F72657574696C73002D2D636F72657574696C732D70726F672D73686562616E673D746565002F7573722F62696E2F746565002F6465762F66642F3633 Mar 17 18:28:14.833000 audit[3220]: AVC avc: denied { write } for pid=3220 comm="tee" name="fd" dev="proc" ino=18134 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0 Mar 17 18:28:14.833000 audit[3220]: SYSCALL arch=c00000b7 syscall=56 success=yes exit=3 a0=ffffffffffffff9c a1=fffffaf64a2a a2=241 a3=1b6 items=1 ppid=3166 pid=3220 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tee" exe="/usr/bin/coreutils" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:28:14.833000 audit: CWD cwd="/etc/service/enabled/confd/log" Mar 17 18:28:14.833000 audit: PATH item=0 name="/dev/fd/63" inode=16352 dev=00:0b mode=010600 ouid=0 ogid=0 rdev=00:00 obj=system_u:system_r:kernel_t:s0 nametype=NORMAL cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Mar 17 18:28:14.833000 audit: PROCTITLE proctitle=2F7573722F62696E2F636F72657574696C73002D2D636F72657574696C732D70726F672D73686562616E673D746565002F7573722F62696E2F746565002F6465762F66642F3633 Mar 17 18:28:14.835000 audit[3226]: AVC avc: denied { write } for pid=3226 comm="tee" name="fd" dev="proc" ino=16356 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0 Mar 17 18:28:14.835000 audit[3226]: SYSCALL arch=c00000b7 syscall=56 success=yes exit=3 a0=ffffffffffffff9c a1=fffffe234a2a a2=241 a3=1b6 items=1 ppid=3157 pid=3226 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tee" exe="/usr/bin/coreutils" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:28:14.835000 audit: CWD cwd="/etc/service/enabled/bird6/log" Mar 17 18:28:14.835000 audit: PATH item=0 name="/dev/fd/63" inode=16353 dev=00:0b mode=010600 ouid=0 ogid=0 rdev=00:00 obj=system_u:system_r:kernel_t:s0 nametype=NORMAL cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Mar 17 18:28:14.835000 audit: PROCTITLE proctitle=2F7573722F62696E2F636F72657574696C73002D2D636F72657574696C732D70726F672D73686562616E673D746565002F7573722F62696E2F746565002F6465762F66642F3633 Mar 17 18:28:14.843000 audit[3231]: AVC avc: denied { write } for pid=3231 comm="tee" name="fd" dev="proc" ino=19179 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0 Mar 17 18:28:14.843000 audit[3231]: SYSCALL arch=c00000b7 syscall=56 success=yes exit=3 a0=ffffffffffffff9c a1=ffffe5752a1b a2=241 a3=1b6 items=1 ppid=3154 pid=3231 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tee" exe="/usr/bin/coreutils" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:28:14.843000 audit: CWD cwd="/etc/service/enabled/node-status-reporter/log" Mar 17 18:28:14.843000 audit: PATH item=0 name="/dev/fd/63" inode=18136 dev=00:0b mode=010600 ouid=0 ogid=0 rdev=00:00 obj=system_u:system_r:kernel_t:s0 nametype=NORMAL cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Mar 17 18:28:14.843000 audit: PROCTITLE proctitle=2F7573722F62696E2F636F72657574696C73002D2D636F72657574696C732D70726F672D73686562616E673D746565002F7573722F62696E2F746565002F6465762F66642F3633 Mar 17 18:28:14.951496 kubelet[1962]: I0317 18:28:14.950923 1962 prober_manager.go:312] "Failed to trigger a manual run" probe="Readiness" Mar 17 18:28:14.951496 kubelet[1962]: E0317 18:28:14.951378 1962 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Mar 17 18:28:18.868740 env[1216]: time="2025-03-17T18:28:18.868700892Z" level=info msg="StopPodSandbox for \"7aebfcc5fb73f92f982b621769d1ba9950a2531944c35feca41ed03e8b8e54ff\"" Mar 17 18:28:18.988583 kubelet[1962]: I0317 18:28:18.988002 1962 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="calico-system/calico-node-kgl87" podStartSLOduration=6.578449841 podStartE2EDuration="20.987982884s" podCreationTimestamp="2025-03-17 18:27:58 +0000 UTC" firstStartedPulling="2025-03-17 18:27:58.899656575 +0000 UTC m=+14.125961916" lastFinishedPulling="2025-03-17 18:28:13.309189618 +0000 UTC m=+28.535494959" observedRunningTime="2025-03-17 18:28:13.96609084 +0000 UTC m=+29.192396341" watchObservedRunningTime="2025-03-17 18:28:18.987982884 +0000 UTC m=+34.214288265" Mar 17 18:28:19.132678 env[1216]: 2025-03-17 18:28:18.991 [INFO][3337] cni-plugin/k8s.go 608: Cleaning up netns ContainerID="7aebfcc5fb73f92f982b621769d1ba9950a2531944c35feca41ed03e8b8e54ff" Mar 17 18:28:19.132678 env[1216]: 2025-03-17 18:28:18.992 [INFO][3337] cni-plugin/dataplane_linux.go 559: Deleting workload's device in netns. ContainerID="7aebfcc5fb73f92f982b621769d1ba9950a2531944c35feca41ed03e8b8e54ff" iface="eth0" netns="/var/run/netns/cni-13e8ed8b-a1db-9415-85ce-c76cc2f5722d" Mar 17 18:28:19.132678 env[1216]: 2025-03-17 18:28:18.992 [INFO][3337] cni-plugin/dataplane_linux.go 570: Entered netns, deleting veth. ContainerID="7aebfcc5fb73f92f982b621769d1ba9950a2531944c35feca41ed03e8b8e54ff" iface="eth0" netns="/var/run/netns/cni-13e8ed8b-a1db-9415-85ce-c76cc2f5722d" Mar 17 18:28:19.132678 env[1216]: 2025-03-17 18:28:18.993 [INFO][3337] cni-plugin/dataplane_linux.go 597: Workload's veth was already gone. Nothing to do. ContainerID="7aebfcc5fb73f92f982b621769d1ba9950a2531944c35feca41ed03e8b8e54ff" iface="eth0" netns="/var/run/netns/cni-13e8ed8b-a1db-9415-85ce-c76cc2f5722d" Mar 17 18:28:19.132678 env[1216]: 2025-03-17 18:28:18.993 [INFO][3337] cni-plugin/k8s.go 615: Releasing IP address(es) ContainerID="7aebfcc5fb73f92f982b621769d1ba9950a2531944c35feca41ed03e8b8e54ff" Mar 17 18:28:19.132678 env[1216]: 2025-03-17 18:28:18.993 [INFO][3337] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="7aebfcc5fb73f92f982b621769d1ba9950a2531944c35feca41ed03e8b8e54ff" Mar 17 18:28:19.132678 env[1216]: 2025-03-17 18:28:19.113 [INFO][3345] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="7aebfcc5fb73f92f982b621769d1ba9950a2531944c35feca41ed03e8b8e54ff" HandleID="k8s-pod-network.7aebfcc5fb73f92f982b621769d1ba9950a2531944c35feca41ed03e8b8e54ff" Workload="localhost-k8s-calico--kube--controllers--5f9fb877b9--db89t-eth0" Mar 17 18:28:19.132678 env[1216]: 2025-03-17 18:28:19.113 [INFO][3345] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Mar 17 18:28:19.132678 env[1216]: 2025-03-17 18:28:19.113 [INFO][3345] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Mar 17 18:28:19.132678 env[1216]: 2025-03-17 18:28:19.128 [WARNING][3345] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="7aebfcc5fb73f92f982b621769d1ba9950a2531944c35feca41ed03e8b8e54ff" HandleID="k8s-pod-network.7aebfcc5fb73f92f982b621769d1ba9950a2531944c35feca41ed03e8b8e54ff" Workload="localhost-k8s-calico--kube--controllers--5f9fb877b9--db89t-eth0" Mar 17 18:28:19.132678 env[1216]: 2025-03-17 18:28:19.128 [INFO][3345] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="7aebfcc5fb73f92f982b621769d1ba9950a2531944c35feca41ed03e8b8e54ff" HandleID="k8s-pod-network.7aebfcc5fb73f92f982b621769d1ba9950a2531944c35feca41ed03e8b8e54ff" Workload="localhost-k8s-calico--kube--controllers--5f9fb877b9--db89t-eth0" Mar 17 18:28:19.132678 env[1216]: 2025-03-17 18:28:19.129 [INFO][3345] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Mar 17 18:28:19.132678 env[1216]: 2025-03-17 18:28:19.131 [INFO][3337] cni-plugin/k8s.go 621: Teardown processing complete. ContainerID="7aebfcc5fb73f92f982b621769d1ba9950a2531944c35feca41ed03e8b8e54ff" Mar 17 18:28:19.134786 systemd[1]: run-netns-cni\x2d13e8ed8b\x2da1db\x2d9415\x2d85ce\x2dc76cc2f5722d.mount: Deactivated successfully. Mar 17 18:28:19.135565 env[1216]: time="2025-03-17T18:28:19.135507143Z" level=info msg="TearDown network for sandbox \"7aebfcc5fb73f92f982b621769d1ba9950a2531944c35feca41ed03e8b8e54ff\" successfully" Mar 17 18:28:19.135565 env[1216]: time="2025-03-17T18:28:19.135549906Z" level=info msg="StopPodSandbox for \"7aebfcc5fb73f92f982b621769d1ba9950a2531944c35feca41ed03e8b8e54ff\" returns successfully" Mar 17 18:28:19.136383 env[1216]: time="2025-03-17T18:28:19.136289475Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-kube-controllers-5f9fb877b9-db89t,Uid:3fa28842-51f6-423c-ab80-b3915356f87b,Namespace:calico-system,Attempt:1,}" Mar 17 18:28:19.389377 systemd-networkd[1043]: calif5fc947f3c4: Link UP Mar 17 18:28:19.390892 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): eth0: link becomes ready Mar 17 18:28:19.390950 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): calif5fc947f3c4: link becomes ready Mar 17 18:28:19.390979 systemd-networkd[1043]: calif5fc947f3c4: Gained carrier Mar 17 18:28:19.402941 env[1216]: 2025-03-17 18:28:19.208 [INFO][3375] cni-plugin/utils.go 100: File /var/lib/calico/mtu does not exist Mar 17 18:28:19.402941 env[1216]: 2025-03-17 18:28:19.220 [INFO][3375] cni-plugin/plugin.go 325: Calico CNI found existing endpoint: &{{WorkloadEndpoint projectcalico.org/v3} {localhost-k8s-calico--kube--controllers--5f9fb877b9--db89t-eth0 calico-kube-controllers-5f9fb877b9- calico-system 3fa28842-51f6-423c-ab80-b3915356f87b 841 0 2025-03-17 18:27:58 +0000 UTC map[app.kubernetes.io/name:calico-kube-controllers k8s-app:calico-kube-controllers pod-template-hash:5f9fb877b9 projectcalico.org/namespace:calico-system projectcalico.org/orchestrator:k8s projectcalico.org/serviceaccount:calico-kube-controllers] map[] [] [] []} {k8s localhost calico-kube-controllers-5f9fb877b9-db89t eth0 calico-kube-controllers [] [] [kns.calico-system ksa.calico-system.calico-kube-controllers] calif5fc947f3c4 [] []}} ContainerID="1252cfc4aed618c012d1d0148514744fc39d7ccd6a6a06181adb6b4b1e034e3e" Namespace="calico-system" Pod="calico-kube-controllers-5f9fb877b9-db89t" WorkloadEndpoint="localhost-k8s-calico--kube--controllers--5f9fb877b9--db89t-" Mar 17 18:28:19.402941 env[1216]: 2025-03-17 18:28:19.220 [INFO][3375] cni-plugin/k8s.go 77: Extracted identifiers for CmdAddK8s ContainerID="1252cfc4aed618c012d1d0148514744fc39d7ccd6a6a06181adb6b4b1e034e3e" Namespace="calico-system" Pod="calico-kube-controllers-5f9fb877b9-db89t" WorkloadEndpoint="localhost-k8s-calico--kube--controllers--5f9fb877b9--db89t-eth0" Mar 17 18:28:19.402941 env[1216]: 2025-03-17 18:28:19.245 [INFO][3387] ipam/ipam_plugin.go 225: Calico CNI IPAM request count IPv4=1 IPv6=0 ContainerID="1252cfc4aed618c012d1d0148514744fc39d7ccd6a6a06181adb6b4b1e034e3e" HandleID="k8s-pod-network.1252cfc4aed618c012d1d0148514744fc39d7ccd6a6a06181adb6b4b1e034e3e" Workload="localhost-k8s-calico--kube--controllers--5f9fb877b9--db89t-eth0" Mar 17 18:28:19.402941 env[1216]: 2025-03-17 18:28:19.355 [INFO][3387] ipam/ipam_plugin.go 265: Auto assigning IP ContainerID="1252cfc4aed618c012d1d0148514744fc39d7ccd6a6a06181adb6b4b1e034e3e" HandleID="k8s-pod-network.1252cfc4aed618c012d1d0148514744fc39d7ccd6a6a06181adb6b4b1e034e3e" Workload="localhost-k8s-calico--kube--controllers--5f9fb877b9--db89t-eth0" assignArgs=ipam.AutoAssignArgs{Num4:1, Num6:0, HandleID:(*string)(0x40003a8200), Attrs:map[string]string{"namespace":"calico-system", "node":"localhost", "pod":"calico-kube-controllers-5f9fb877b9-db89t", "timestamp":"2025-03-17 18:28:19.245351223 +0000 UTC"}, Hostname:"localhost", IPv4Pools:[]net.IPNet{}, IPv6Pools:[]net.IPNet{}, MaxBlocksPerHost:0, HostReservedAttrIPv4s:(*ipam.HostReservedAttr)(nil), HostReservedAttrIPv6s:(*ipam.HostReservedAttr)(nil), IntendedUse:"Workload"} Mar 17 18:28:19.402941 env[1216]: 2025-03-17 18:28:19.355 [INFO][3387] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Mar 17 18:28:19.402941 env[1216]: 2025-03-17 18:28:19.355 [INFO][3387] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Mar 17 18:28:19.402941 env[1216]: 2025-03-17 18:28:19.355 [INFO][3387] ipam/ipam.go 107: Auto-assign 1 ipv4, 0 ipv6 addrs for host 'localhost' Mar 17 18:28:19.402941 env[1216]: 2025-03-17 18:28:19.357 [INFO][3387] ipam/ipam.go 660: Looking up existing affinities for host handle="k8s-pod-network.1252cfc4aed618c012d1d0148514744fc39d7ccd6a6a06181adb6b4b1e034e3e" host="localhost" Mar 17 18:28:19.402941 env[1216]: 2025-03-17 18:28:19.362 [INFO][3387] ipam/ipam.go 372: Looking up existing affinities for host host="localhost" Mar 17 18:28:19.402941 env[1216]: 2025-03-17 18:28:19.366 [INFO][3387] ipam/ipam.go 489: Trying affinity for 192.168.88.128/26 host="localhost" Mar 17 18:28:19.402941 env[1216]: 2025-03-17 18:28:19.368 [INFO][3387] ipam/ipam.go 155: Attempting to load block cidr=192.168.88.128/26 host="localhost" Mar 17 18:28:19.402941 env[1216]: 2025-03-17 18:28:19.369 [INFO][3387] ipam/ipam.go 232: Affinity is confirmed and block has been loaded cidr=192.168.88.128/26 host="localhost" Mar 17 18:28:19.402941 env[1216]: 2025-03-17 18:28:19.370 [INFO][3387] ipam/ipam.go 1180: Attempting to assign 1 addresses from block block=192.168.88.128/26 handle="k8s-pod-network.1252cfc4aed618c012d1d0148514744fc39d7ccd6a6a06181adb6b4b1e034e3e" host="localhost" Mar 17 18:28:19.402941 env[1216]: 2025-03-17 18:28:19.371 [INFO][3387] ipam/ipam.go 1685: Creating new handle: k8s-pod-network.1252cfc4aed618c012d1d0148514744fc39d7ccd6a6a06181adb6b4b1e034e3e Mar 17 18:28:19.402941 env[1216]: 2025-03-17 18:28:19.374 [INFO][3387] ipam/ipam.go 1203: Writing block in order to claim IPs block=192.168.88.128/26 handle="k8s-pod-network.1252cfc4aed618c012d1d0148514744fc39d7ccd6a6a06181adb6b4b1e034e3e" host="localhost" Mar 17 18:28:19.402941 env[1216]: 2025-03-17 18:28:19.381 [INFO][3387] ipam/ipam.go 1216: Successfully claimed IPs: [192.168.88.129/26] block=192.168.88.128/26 handle="k8s-pod-network.1252cfc4aed618c012d1d0148514744fc39d7ccd6a6a06181adb6b4b1e034e3e" host="localhost" Mar 17 18:28:19.402941 env[1216]: 2025-03-17 18:28:19.381 [INFO][3387] ipam/ipam.go 847: Auto-assigned 1 out of 1 IPv4s: [192.168.88.129/26] handle="k8s-pod-network.1252cfc4aed618c012d1d0148514744fc39d7ccd6a6a06181adb6b4b1e034e3e" host="localhost" Mar 17 18:28:19.402941 env[1216]: 2025-03-17 18:28:19.381 [INFO][3387] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Mar 17 18:28:19.402941 env[1216]: 2025-03-17 18:28:19.381 [INFO][3387] ipam/ipam_plugin.go 283: Calico CNI IPAM assigned addresses IPv4=[192.168.88.129/26] IPv6=[] ContainerID="1252cfc4aed618c012d1d0148514744fc39d7ccd6a6a06181adb6b4b1e034e3e" HandleID="k8s-pod-network.1252cfc4aed618c012d1d0148514744fc39d7ccd6a6a06181adb6b4b1e034e3e" Workload="localhost-k8s-calico--kube--controllers--5f9fb877b9--db89t-eth0" Mar 17 18:28:19.403532 env[1216]: 2025-03-17 18:28:19.383 [INFO][3375] cni-plugin/k8s.go 386: Populated endpoint ContainerID="1252cfc4aed618c012d1d0148514744fc39d7ccd6a6a06181adb6b4b1e034e3e" Namespace="calico-system" Pod="calico-kube-controllers-5f9fb877b9-db89t" WorkloadEndpoint="localhost-k8s-calico--kube--controllers--5f9fb877b9--db89t-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-calico--kube--controllers--5f9fb877b9--db89t-eth0", GenerateName:"calico-kube-controllers-5f9fb877b9-", Namespace:"calico-system", SelfLink:"", UID:"3fa28842-51f6-423c-ab80-b3915356f87b", ResourceVersion:"841", Generation:0, CreationTimestamp:time.Date(2025, time.March, 17, 18, 27, 58, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"calico-kube-controllers", "k8s-app":"calico-kube-controllers", "pod-template-hash":"5f9fb877b9", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-kube-controllers"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"", Pod:"calico-kube-controllers-5f9fb877b9-db89t", Endpoint:"eth0", ServiceAccountName:"calico-kube-controllers", IPNetworks:[]string{"192.168.88.129/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.calico-kube-controllers"}, InterfaceName:"calif5fc947f3c4", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil)}} Mar 17 18:28:19.403532 env[1216]: 2025-03-17 18:28:19.383 [INFO][3375] cni-plugin/k8s.go 387: Calico CNI using IPs: [192.168.88.129/32] ContainerID="1252cfc4aed618c012d1d0148514744fc39d7ccd6a6a06181adb6b4b1e034e3e" Namespace="calico-system" Pod="calico-kube-controllers-5f9fb877b9-db89t" WorkloadEndpoint="localhost-k8s-calico--kube--controllers--5f9fb877b9--db89t-eth0" Mar 17 18:28:19.403532 env[1216]: 2025-03-17 18:28:19.383 [INFO][3375] cni-plugin/dataplane_linux.go 69: Setting the host side veth name to calif5fc947f3c4 ContainerID="1252cfc4aed618c012d1d0148514744fc39d7ccd6a6a06181adb6b4b1e034e3e" Namespace="calico-system" Pod="calico-kube-controllers-5f9fb877b9-db89t" WorkloadEndpoint="localhost-k8s-calico--kube--controllers--5f9fb877b9--db89t-eth0" Mar 17 18:28:19.403532 env[1216]: 2025-03-17 18:28:19.391 [INFO][3375] cni-plugin/dataplane_linux.go 508: Disabling IPv4 forwarding ContainerID="1252cfc4aed618c012d1d0148514744fc39d7ccd6a6a06181adb6b4b1e034e3e" Namespace="calico-system" Pod="calico-kube-controllers-5f9fb877b9-db89t" WorkloadEndpoint="localhost-k8s-calico--kube--controllers--5f9fb877b9--db89t-eth0" Mar 17 18:28:19.403532 env[1216]: 2025-03-17 18:28:19.391 [INFO][3375] cni-plugin/k8s.go 414: Added Mac, interface name, and active container ID to endpoint ContainerID="1252cfc4aed618c012d1d0148514744fc39d7ccd6a6a06181adb6b4b1e034e3e" Namespace="calico-system" Pod="calico-kube-controllers-5f9fb877b9-db89t" WorkloadEndpoint="localhost-k8s-calico--kube--controllers--5f9fb877b9--db89t-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-calico--kube--controllers--5f9fb877b9--db89t-eth0", GenerateName:"calico-kube-controllers-5f9fb877b9-", Namespace:"calico-system", SelfLink:"", UID:"3fa28842-51f6-423c-ab80-b3915356f87b", ResourceVersion:"841", Generation:0, CreationTimestamp:time.Date(2025, time.March, 17, 18, 27, 58, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"calico-kube-controllers", "k8s-app":"calico-kube-controllers", "pod-template-hash":"5f9fb877b9", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-kube-controllers"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"1252cfc4aed618c012d1d0148514744fc39d7ccd6a6a06181adb6b4b1e034e3e", Pod:"calico-kube-controllers-5f9fb877b9-db89t", Endpoint:"eth0", ServiceAccountName:"calico-kube-controllers", IPNetworks:[]string{"192.168.88.129/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.calico-kube-controllers"}, InterfaceName:"calif5fc947f3c4", MAC:"8a:29:71:e9:a4:87", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil)}} Mar 17 18:28:19.403532 env[1216]: 2025-03-17 18:28:19.400 [INFO][3375] cni-plugin/k8s.go 500: Wrote updated endpoint to datastore ContainerID="1252cfc4aed618c012d1d0148514744fc39d7ccd6a6a06181adb6b4b1e034e3e" Namespace="calico-system" Pod="calico-kube-controllers-5f9fb877b9-db89t" WorkloadEndpoint="localhost-k8s-calico--kube--controllers--5f9fb877b9--db89t-eth0" Mar 17 18:28:19.413939 env[1216]: time="2025-03-17T18:28:19.413719259Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Mar 17 18:28:19.413939 env[1216]: time="2025-03-17T18:28:19.413920793Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Mar 17 18:28:19.414081 env[1216]: time="2025-03-17T18:28:19.413931833Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Mar 17 18:28:19.414194 env[1216]: time="2025-03-17T18:28:19.414161648Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/1252cfc4aed618c012d1d0148514744fc39d7ccd6a6a06181adb6b4b1e034e3e pid=3417 runtime=io.containerd.runc.v2 Mar 17 18:28:19.430101 systemd[1]: Started cri-containerd-1252cfc4aed618c012d1d0148514744fc39d7ccd6a6a06181adb6b4b1e034e3e.scope. Mar 17 18:28:19.447000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:28:19.451316 kernel: kauditd_printk_skb: 79 callbacks suppressed Mar 17 18:28:19.451426 kernel: audit: type=1400 audit(1742236099.447:1011): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:28:19.451459 kernel: audit: type=1400 audit(1742236099.447:1012): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:28:19.447000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:28:19.453211 kernel: audit: type=1400 audit(1742236099.447:1013): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:28:19.447000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:28:19.447000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:28:19.456974 kernel: audit: type=1400 audit(1742236099.447:1014): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:28:19.457028 kernel: audit: type=1400 audit(1742236099.447:1015): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:28:19.447000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:28:19.447000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:28:19.459039 systemd-resolved[1155]: Failed to determine the local hostname and LLMNR/mDNS names, ignoring: No such device or address Mar 17 18:28:19.461029 kernel: audit: type=1400 audit(1742236099.447:1016): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:28:19.461110 kernel: audit: type=1400 audit(1742236099.447:1017): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:28:19.447000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:28:19.447000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:28:19.464700 kernel: audit: type=1400 audit(1742236099.447:1018): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:28:19.464747 kernel: audit: type=1400 audit(1742236099.447:1019): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:28:19.447000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:28:19.447000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:28:19.468413 kernel: audit: type=1400 audit(1742236099.447:1020): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:28:19.447000 audit: BPF prog-id=136 op=LOAD Mar 17 18:28:19.448000 audit[3428]: AVC avc: denied { bpf } for pid=3428 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:28:19.448000 audit[3428]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=40001bdb38 a2=10 a3=0 items=0 ppid=3417 pid=3428 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:28:19.448000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3132353263666334616564363138633031326431643031343835313437 Mar 17 18:28:19.448000 audit[3428]: AVC avc: denied { perfmon } for pid=3428 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:28:19.448000 audit[3428]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001bd5a0 a2=3c a3=0 items=0 ppid=3417 pid=3428 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:28:19.448000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3132353263666334616564363138633031326431643031343835313437 Mar 17 18:28:19.448000 audit[3428]: AVC avc: denied { bpf } for pid=3428 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:28:19.448000 audit[3428]: AVC avc: denied { bpf } for pid=3428 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:28:19.448000 audit[3428]: AVC avc: denied { bpf } for pid=3428 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:28:19.448000 audit[3428]: AVC avc: denied { perfmon } for pid=3428 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:28:19.448000 audit[3428]: AVC avc: denied { perfmon } for pid=3428 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:28:19.448000 audit[3428]: AVC avc: denied { perfmon } for pid=3428 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:28:19.448000 audit[3428]: AVC avc: denied { perfmon } for pid=3428 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:28:19.448000 audit[3428]: AVC avc: denied { perfmon } for pid=3428 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:28:19.448000 audit[3428]: AVC avc: denied { bpf } for pid=3428 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:28:19.448000 audit[3428]: AVC avc: denied { bpf } for pid=3428 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:28:19.448000 audit: BPF prog-id=137 op=LOAD Mar 17 18:28:19.448000 audit[3428]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001bd8e0 a2=78 a3=0 items=0 ppid=3417 pid=3428 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:28:19.448000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3132353263666334616564363138633031326431643031343835313437 Mar 17 18:28:19.450000 audit[3428]: AVC avc: denied { bpf } for pid=3428 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:28:19.450000 audit[3428]: AVC avc: denied { bpf } for pid=3428 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:28:19.450000 audit[3428]: AVC avc: denied { perfmon } for pid=3428 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:28:19.450000 audit[3428]: AVC avc: denied { perfmon } for pid=3428 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:28:19.450000 audit[3428]: AVC avc: denied { perfmon } for pid=3428 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:28:19.450000 audit[3428]: AVC avc: denied { perfmon } for pid=3428 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:28:19.450000 audit[3428]: AVC avc: denied { perfmon } for pid=3428 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:28:19.450000 audit[3428]: AVC avc: denied { bpf } for pid=3428 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:28:19.450000 audit[3428]: AVC avc: denied { bpf } for pid=3428 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:28:19.450000 audit: BPF prog-id=138 op=LOAD Mar 17 18:28:19.450000 audit[3428]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=40001bd670 a2=78 a3=0 items=0 ppid=3417 pid=3428 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:28:19.450000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3132353263666334616564363138633031326431643031343835313437 Mar 17 18:28:19.452000 audit: BPF prog-id=138 op=UNLOAD Mar 17 18:28:19.452000 audit: BPF prog-id=137 op=UNLOAD Mar 17 18:28:19.452000 audit[3428]: AVC avc: denied { bpf } for pid=3428 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:28:19.452000 audit[3428]: AVC avc: denied { bpf } for pid=3428 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:28:19.452000 audit[3428]: AVC avc: denied { bpf } for pid=3428 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:28:19.452000 audit[3428]: AVC avc: denied { perfmon } for pid=3428 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:28:19.452000 audit[3428]: AVC avc: denied { perfmon } for pid=3428 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:28:19.452000 audit[3428]: AVC avc: denied { perfmon } for pid=3428 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:28:19.452000 audit[3428]: AVC avc: denied { perfmon } for pid=3428 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:28:19.452000 audit[3428]: AVC avc: denied { perfmon } for pid=3428 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:28:19.452000 audit[3428]: AVC avc: denied { bpf } for pid=3428 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:28:19.452000 audit[3428]: AVC avc: denied { bpf } for pid=3428 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:28:19.452000 audit: BPF prog-id=139 op=LOAD Mar 17 18:28:19.452000 audit[3428]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001bdb40 a2=78 a3=0 items=0 ppid=3417 pid=3428 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:28:19.452000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3132353263666334616564363138633031326431643031343835313437 Mar 17 18:28:19.476263 env[1216]: time="2025-03-17T18:28:19.476224196Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-kube-controllers-5f9fb877b9-db89t,Uid:3fa28842-51f6-423c-ab80-b3915356f87b,Namespace:calico-system,Attempt:1,} returns sandbox id \"1252cfc4aed618c012d1d0148514744fc39d7ccd6a6a06181adb6b4b1e034e3e\"" Mar 17 18:28:19.479203 env[1216]: time="2025-03-17T18:28:19.479174470Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/kube-controllers:v3.29.1\"" Mar 17 18:28:19.775614 systemd[1]: Started sshd@8-10.0.0.111:22-10.0.0.1:37946.service. Mar 17 18:28:19.774000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@8-10.0.0.111:22-10.0.0.1:37946 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:28:19.809000 audit[3451]: USER_ACCT pid=3451 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Mar 17 18:28:19.810888 sshd[3451]: Accepted publickey for core from 10.0.0.1 port 37946 ssh2: RSA SHA256:hoQCPKafrT/V1URQ18ch5K7mLY85DMM2OIJJf47c8zQ Mar 17 18:28:19.811000 audit[3451]: CRED_ACQ pid=3451 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Mar 17 18:28:19.811000 audit[3451]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=fffff7f6a3d0 a2=3 a3=1 items=0 ppid=1 pid=3451 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=9 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:28:19.811000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Mar 17 18:28:19.812880 sshd[3451]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Mar 17 18:28:19.816482 systemd-logind[1207]: New session 9 of user core. Mar 17 18:28:19.817331 systemd[1]: Started session-9.scope. Mar 17 18:28:19.819000 audit[3451]: USER_START pid=3451 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Mar 17 18:28:19.821000 audit[3453]: CRED_ACQ pid=3453 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Mar 17 18:28:19.971410 sshd[3451]: pam_unix(sshd:session): session closed for user core Mar 17 18:28:19.971000 audit[3451]: USER_END pid=3451 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Mar 17 18:28:19.971000 audit[3451]: CRED_DISP pid=3451 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Mar 17 18:28:19.973742 systemd[1]: sshd@8-10.0.0.111:22-10.0.0.1:37946.service: Deactivated successfully. Mar 17 18:28:19.974493 systemd[1]: session-9.scope: Deactivated successfully. Mar 17 18:28:19.973000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@8-10.0.0.111:22-10.0.0.1:37946 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:28:19.975004 systemd-logind[1207]: Session 9 logged out. Waiting for processes to exit. Mar 17 18:28:19.975767 systemd-logind[1207]: Removed session 9. Mar 17 18:28:20.498007 systemd-networkd[1043]: calif5fc947f3c4: Gained IPv6LL Mar 17 18:28:20.869733 env[1216]: time="2025-03-17T18:28:20.869675758Z" level=info msg="StopPodSandbox for \"4e127a8801dcc95eef0564f350e374fd79deb924e30287c7f4cbc63f53152ee8\"" Mar 17 18:28:20.870477 env[1216]: time="2025-03-17T18:28:20.869675838Z" level=info msg="StopPodSandbox for \"23ff737391387adfa05fc971a2384b56959ec40974ec3bbcf1afa3a226bf18f5\"" Mar 17 18:28:20.870559 env[1216]: time="2025-03-17T18:28:20.870510011Z" level=info msg="StopPodSandbox for \"ae4beda153f0e8f2215f60f4da7748192f2f0b969b5793e2bc335b672aaa7272\"" Mar 17 18:28:20.996274 env[1216]: 2025-03-17 18:28:20.922 [INFO][3549] cni-plugin/k8s.go 608: Cleaning up netns ContainerID="4e127a8801dcc95eef0564f350e374fd79deb924e30287c7f4cbc63f53152ee8" Mar 17 18:28:20.996274 env[1216]: 2025-03-17 18:28:20.923 [INFO][3549] cni-plugin/dataplane_linux.go 559: Deleting workload's device in netns. ContainerID="4e127a8801dcc95eef0564f350e374fd79deb924e30287c7f4cbc63f53152ee8" iface="eth0" netns="/var/run/netns/cni-e1ce19dc-0716-2ab0-2918-2dbb8c1915d6" Mar 17 18:28:20.996274 env[1216]: 2025-03-17 18:28:20.924 [INFO][3549] cni-plugin/dataplane_linux.go 570: Entered netns, deleting veth. ContainerID="4e127a8801dcc95eef0564f350e374fd79deb924e30287c7f4cbc63f53152ee8" iface="eth0" netns="/var/run/netns/cni-e1ce19dc-0716-2ab0-2918-2dbb8c1915d6" Mar 17 18:28:20.996274 env[1216]: 2025-03-17 18:28:20.924 [INFO][3549] cni-plugin/dataplane_linux.go 597: Workload's veth was already gone. Nothing to do. ContainerID="4e127a8801dcc95eef0564f350e374fd79deb924e30287c7f4cbc63f53152ee8" iface="eth0" netns="/var/run/netns/cni-e1ce19dc-0716-2ab0-2918-2dbb8c1915d6" Mar 17 18:28:20.996274 env[1216]: 2025-03-17 18:28:20.924 [INFO][3549] cni-plugin/k8s.go 615: Releasing IP address(es) ContainerID="4e127a8801dcc95eef0564f350e374fd79deb924e30287c7f4cbc63f53152ee8" Mar 17 18:28:20.996274 env[1216]: 2025-03-17 18:28:20.924 [INFO][3549] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="4e127a8801dcc95eef0564f350e374fd79deb924e30287c7f4cbc63f53152ee8" Mar 17 18:28:20.996274 env[1216]: 2025-03-17 18:28:20.968 [INFO][3570] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="4e127a8801dcc95eef0564f350e374fd79deb924e30287c7f4cbc63f53152ee8" HandleID="k8s-pod-network.4e127a8801dcc95eef0564f350e374fd79deb924e30287c7f4cbc63f53152ee8" Workload="localhost-k8s-coredns--6f6b679f8f--fkzq6-eth0" Mar 17 18:28:20.996274 env[1216]: 2025-03-17 18:28:20.968 [INFO][3570] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Mar 17 18:28:20.996274 env[1216]: 2025-03-17 18:28:20.968 [INFO][3570] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Mar 17 18:28:20.996274 env[1216]: 2025-03-17 18:28:20.980 [WARNING][3570] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="4e127a8801dcc95eef0564f350e374fd79deb924e30287c7f4cbc63f53152ee8" HandleID="k8s-pod-network.4e127a8801dcc95eef0564f350e374fd79deb924e30287c7f4cbc63f53152ee8" Workload="localhost-k8s-coredns--6f6b679f8f--fkzq6-eth0" Mar 17 18:28:20.996274 env[1216]: 2025-03-17 18:28:20.980 [INFO][3570] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="4e127a8801dcc95eef0564f350e374fd79deb924e30287c7f4cbc63f53152ee8" HandleID="k8s-pod-network.4e127a8801dcc95eef0564f350e374fd79deb924e30287c7f4cbc63f53152ee8" Workload="localhost-k8s-coredns--6f6b679f8f--fkzq6-eth0" Mar 17 18:28:20.996274 env[1216]: 2025-03-17 18:28:20.983 [INFO][3570] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Mar 17 18:28:20.996274 env[1216]: 2025-03-17 18:28:20.994 [INFO][3549] cni-plugin/k8s.go 621: Teardown processing complete. ContainerID="4e127a8801dcc95eef0564f350e374fd79deb924e30287c7f4cbc63f53152ee8" Mar 17 18:28:21.002844 env[1216]: time="2025-03-17T18:28:21.002780613Z" level=info msg="TearDown network for sandbox \"4e127a8801dcc95eef0564f350e374fd79deb924e30287c7f4cbc63f53152ee8\" successfully" Mar 17 18:28:21.003059 env[1216]: time="2025-03-17T18:28:21.003036069Z" level=info msg="StopPodSandbox for \"4e127a8801dcc95eef0564f350e374fd79deb924e30287c7f4cbc63f53152ee8\" returns successfully" Mar 17 18:28:21.003586 kubelet[1962]: E0317 18:28:21.003557 1962 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Mar 17 18:28:21.004645 systemd[1]: run-netns-cni\x2de1ce19dc\x2d0716\x2d2ab0\x2d2918\x2d2dbb8c1915d6.mount: Deactivated successfully. Mar 17 18:28:21.006070 env[1216]: 2025-03-17 18:28:20.946 [INFO][3550] cni-plugin/k8s.go 608: Cleaning up netns ContainerID="23ff737391387adfa05fc971a2384b56959ec40974ec3bbcf1afa3a226bf18f5" Mar 17 18:28:21.006070 env[1216]: 2025-03-17 18:28:20.947 [INFO][3550] cni-plugin/dataplane_linux.go 559: Deleting workload's device in netns. ContainerID="23ff737391387adfa05fc971a2384b56959ec40974ec3bbcf1afa3a226bf18f5" iface="eth0" netns="/var/run/netns/cni-74462599-53a5-b413-5160-9048e75671bc" Mar 17 18:28:21.006070 env[1216]: 2025-03-17 18:28:20.947 [INFO][3550] cni-plugin/dataplane_linux.go 570: Entered netns, deleting veth. ContainerID="23ff737391387adfa05fc971a2384b56959ec40974ec3bbcf1afa3a226bf18f5" iface="eth0" netns="/var/run/netns/cni-74462599-53a5-b413-5160-9048e75671bc" Mar 17 18:28:21.006070 env[1216]: 2025-03-17 18:28:20.947 [INFO][3550] cni-plugin/dataplane_linux.go 597: Workload's veth was already gone. Nothing to do. ContainerID="23ff737391387adfa05fc971a2384b56959ec40974ec3bbcf1afa3a226bf18f5" iface="eth0" netns="/var/run/netns/cni-74462599-53a5-b413-5160-9048e75671bc" Mar 17 18:28:21.006070 env[1216]: 2025-03-17 18:28:20.947 [INFO][3550] cni-plugin/k8s.go 615: Releasing IP address(es) ContainerID="23ff737391387adfa05fc971a2384b56959ec40974ec3bbcf1afa3a226bf18f5" Mar 17 18:28:21.006070 env[1216]: 2025-03-17 18:28:20.947 [INFO][3550] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="23ff737391387adfa05fc971a2384b56959ec40974ec3bbcf1afa3a226bf18f5" Mar 17 18:28:21.006070 env[1216]: 2025-03-17 18:28:20.978 [INFO][3578] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="23ff737391387adfa05fc971a2384b56959ec40974ec3bbcf1afa3a226bf18f5" HandleID="k8s-pod-network.23ff737391387adfa05fc971a2384b56959ec40974ec3bbcf1afa3a226bf18f5" Workload="localhost-k8s-calico--apiserver--66cb7fb7dc--2bvrs-eth0" Mar 17 18:28:21.006070 env[1216]: 2025-03-17 18:28:20.978 [INFO][3578] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Mar 17 18:28:21.006070 env[1216]: 2025-03-17 18:28:20.983 [INFO][3578] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Mar 17 18:28:21.006070 env[1216]: 2025-03-17 18:28:20.992 [WARNING][3578] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="23ff737391387adfa05fc971a2384b56959ec40974ec3bbcf1afa3a226bf18f5" HandleID="k8s-pod-network.23ff737391387adfa05fc971a2384b56959ec40974ec3bbcf1afa3a226bf18f5" Workload="localhost-k8s-calico--apiserver--66cb7fb7dc--2bvrs-eth0" Mar 17 18:28:21.006070 env[1216]: 2025-03-17 18:28:20.992 [INFO][3578] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="23ff737391387adfa05fc971a2384b56959ec40974ec3bbcf1afa3a226bf18f5" HandleID="k8s-pod-network.23ff737391387adfa05fc971a2384b56959ec40974ec3bbcf1afa3a226bf18f5" Workload="localhost-k8s-calico--apiserver--66cb7fb7dc--2bvrs-eth0" Mar 17 18:28:21.006070 env[1216]: 2025-03-17 18:28:20.994 [INFO][3578] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Mar 17 18:28:21.006070 env[1216]: 2025-03-17 18:28:21.001 [INFO][3550] cni-plugin/k8s.go 621: Teardown processing complete. ContainerID="23ff737391387adfa05fc971a2384b56959ec40974ec3bbcf1afa3a226bf18f5" Mar 17 18:28:21.006602 env[1216]: time="2025-03-17T18:28:21.006196784Z" level=info msg="TearDown network for sandbox \"23ff737391387adfa05fc971a2384b56959ec40974ec3bbcf1afa3a226bf18f5\" successfully" Mar 17 18:28:21.006602 env[1216]: time="2025-03-17T18:28:21.006224106Z" level=info msg="StopPodSandbox for \"23ff737391387adfa05fc971a2384b56959ec40974ec3bbcf1afa3a226bf18f5\" returns successfully" Mar 17 18:28:21.007969 systemd[1]: run-netns-cni\x2d74462599\x2d53a5\x2db413\x2d5160\x2d9048e75671bc.mount: Deactivated successfully. Mar 17 18:28:21.009185 env[1216]: time="2025-03-17T18:28:21.009147646Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:coredns-6f6b679f8f-fkzq6,Uid:701122a6-4262-4c31-b9ac-c3483ca8c88f,Namespace:kube-system,Attempt:1,}" Mar 17 18:28:21.010111 env[1216]: time="2025-03-17T18:28:21.009932374Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-apiserver-66cb7fb7dc-2bvrs,Uid:febc9f3a-c5fd-4e88-ac3b-68eff786c39c,Namespace:calico-apiserver,Attempt:1,}" Mar 17 18:28:21.042737 env[1216]: 2025-03-17 18:28:20.981 [INFO][3560] cni-plugin/k8s.go 608: Cleaning up netns ContainerID="ae4beda153f0e8f2215f60f4da7748192f2f0b969b5793e2bc335b672aaa7272" Mar 17 18:28:21.042737 env[1216]: 2025-03-17 18:28:20.981 [INFO][3560] cni-plugin/dataplane_linux.go 559: Deleting workload's device in netns. ContainerID="ae4beda153f0e8f2215f60f4da7748192f2f0b969b5793e2bc335b672aaa7272" iface="eth0" netns="/var/run/netns/cni-0f7a0d6f-0c67-9f70-1753-04c719e871d4" Mar 17 18:28:21.042737 env[1216]: 2025-03-17 18:28:20.981 [INFO][3560] cni-plugin/dataplane_linux.go 570: Entered netns, deleting veth. ContainerID="ae4beda153f0e8f2215f60f4da7748192f2f0b969b5793e2bc335b672aaa7272" iface="eth0" netns="/var/run/netns/cni-0f7a0d6f-0c67-9f70-1753-04c719e871d4" Mar 17 18:28:21.042737 env[1216]: 2025-03-17 18:28:20.982 [INFO][3560] cni-plugin/dataplane_linux.go 597: Workload's veth was already gone. Nothing to do. ContainerID="ae4beda153f0e8f2215f60f4da7748192f2f0b969b5793e2bc335b672aaa7272" iface="eth0" netns="/var/run/netns/cni-0f7a0d6f-0c67-9f70-1753-04c719e871d4" Mar 17 18:28:21.042737 env[1216]: 2025-03-17 18:28:20.982 [INFO][3560] cni-plugin/k8s.go 615: Releasing IP address(es) ContainerID="ae4beda153f0e8f2215f60f4da7748192f2f0b969b5793e2bc335b672aaa7272" Mar 17 18:28:21.042737 env[1216]: 2025-03-17 18:28:20.982 [INFO][3560] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="ae4beda153f0e8f2215f60f4da7748192f2f0b969b5793e2bc335b672aaa7272" Mar 17 18:28:21.042737 env[1216]: 2025-03-17 18:28:21.018 [INFO][3586] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="ae4beda153f0e8f2215f60f4da7748192f2f0b969b5793e2bc335b672aaa7272" HandleID="k8s-pod-network.ae4beda153f0e8f2215f60f4da7748192f2f0b969b5793e2bc335b672aaa7272" Workload="localhost-k8s-csi--node--driver--2brpt-eth0" Mar 17 18:28:21.042737 env[1216]: 2025-03-17 18:28:21.019 [INFO][3586] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Mar 17 18:28:21.042737 env[1216]: 2025-03-17 18:28:21.019 [INFO][3586] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Mar 17 18:28:21.042737 env[1216]: 2025-03-17 18:28:21.033 [WARNING][3586] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="ae4beda153f0e8f2215f60f4da7748192f2f0b969b5793e2bc335b672aaa7272" HandleID="k8s-pod-network.ae4beda153f0e8f2215f60f4da7748192f2f0b969b5793e2bc335b672aaa7272" Workload="localhost-k8s-csi--node--driver--2brpt-eth0" Mar 17 18:28:21.042737 env[1216]: 2025-03-17 18:28:21.034 [INFO][3586] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="ae4beda153f0e8f2215f60f4da7748192f2f0b969b5793e2bc335b672aaa7272" HandleID="k8s-pod-network.ae4beda153f0e8f2215f60f4da7748192f2f0b969b5793e2bc335b672aaa7272" Workload="localhost-k8s-csi--node--driver--2brpt-eth0" Mar 17 18:28:21.042737 env[1216]: 2025-03-17 18:28:21.035 [INFO][3586] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Mar 17 18:28:21.042737 env[1216]: 2025-03-17 18:28:21.039 [INFO][3560] cni-plugin/k8s.go 621: Teardown processing complete. ContainerID="ae4beda153f0e8f2215f60f4da7748192f2f0b969b5793e2bc335b672aaa7272" Mar 17 18:28:21.043213 env[1216]: time="2025-03-17T18:28:21.042880207Z" level=info msg="TearDown network for sandbox \"ae4beda153f0e8f2215f60f4da7748192f2f0b969b5793e2bc335b672aaa7272\" successfully" Mar 17 18:28:21.043213 env[1216]: time="2025-03-17T18:28:21.042915329Z" level=info msg="StopPodSandbox for \"ae4beda153f0e8f2215f60f4da7748192f2f0b969b5793e2bc335b672aaa7272\" returns successfully" Mar 17 18:28:21.043532 env[1216]: time="2025-03-17T18:28:21.043501805Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:csi-node-driver-2brpt,Uid:89bbd71b-c404-4c0b-b107-937675df3164,Namespace:calico-system,Attempt:1,}" Mar 17 18:28:21.136532 systemd[1]: run-netns-cni\x2d0f7a0d6f\x2d0c67\x2d9f70\x2d1753\x2d04c719e871d4.mount: Deactivated successfully. Mar 17 18:28:21.195713 systemd-networkd[1043]: calic2268833577: Link UP Mar 17 18:28:21.196810 systemd-networkd[1043]: calic2268833577: Gained carrier Mar 17 18:28:21.196922 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): eth0: link becomes ready Mar 17 18:28:21.196958 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): calic2268833577: link becomes ready Mar 17 18:28:21.209792 env[1216]: 2025-03-17 18:28:21.067 [INFO][3610] cni-plugin/utils.go 100: File /var/lib/calico/mtu does not exist Mar 17 18:28:21.209792 env[1216]: 2025-03-17 18:28:21.095 [INFO][3610] cni-plugin/plugin.go 325: Calico CNI found existing endpoint: &{{WorkloadEndpoint projectcalico.org/v3} {localhost-k8s-calico--apiserver--66cb7fb7dc--2bvrs-eth0 calico-apiserver-66cb7fb7dc- calico-apiserver febc9f3a-c5fd-4e88-ac3b-68eff786c39c 865 0 2025-03-17 18:27:58 +0000 UTC map[apiserver:true app.kubernetes.io/name:calico-apiserver k8s-app:calico-apiserver pod-template-hash:66cb7fb7dc projectcalico.org/namespace:calico-apiserver projectcalico.org/orchestrator:k8s projectcalico.org/serviceaccount:calico-apiserver] map[] [] [] []} {k8s localhost calico-apiserver-66cb7fb7dc-2bvrs eth0 calico-apiserver [] [] [kns.calico-apiserver ksa.calico-apiserver.calico-apiserver] calic2268833577 [] []}} ContainerID="7e430e160a6c95321ff5fd120f3eab9e6afd20936602a5f1d3e361a692a04bbd" Namespace="calico-apiserver" Pod="calico-apiserver-66cb7fb7dc-2bvrs" WorkloadEndpoint="localhost-k8s-calico--apiserver--66cb7fb7dc--2bvrs-" Mar 17 18:28:21.209792 env[1216]: 2025-03-17 18:28:21.095 [INFO][3610] cni-plugin/k8s.go 77: Extracted identifiers for CmdAddK8s ContainerID="7e430e160a6c95321ff5fd120f3eab9e6afd20936602a5f1d3e361a692a04bbd" Namespace="calico-apiserver" Pod="calico-apiserver-66cb7fb7dc-2bvrs" WorkloadEndpoint="localhost-k8s-calico--apiserver--66cb7fb7dc--2bvrs-eth0" Mar 17 18:28:21.209792 env[1216]: 2025-03-17 18:28:21.134 [INFO][3645] ipam/ipam_plugin.go 225: Calico CNI IPAM request count IPv4=1 IPv6=0 ContainerID="7e430e160a6c95321ff5fd120f3eab9e6afd20936602a5f1d3e361a692a04bbd" HandleID="k8s-pod-network.7e430e160a6c95321ff5fd120f3eab9e6afd20936602a5f1d3e361a692a04bbd" Workload="localhost-k8s-calico--apiserver--66cb7fb7dc--2bvrs-eth0" Mar 17 18:28:21.209792 env[1216]: 2025-03-17 18:28:21.148 [INFO][3645] ipam/ipam_plugin.go 265: Auto assigning IP ContainerID="7e430e160a6c95321ff5fd120f3eab9e6afd20936602a5f1d3e361a692a04bbd" HandleID="k8s-pod-network.7e430e160a6c95321ff5fd120f3eab9e6afd20936602a5f1d3e361a692a04bbd" Workload="localhost-k8s-calico--apiserver--66cb7fb7dc--2bvrs-eth0" assignArgs=ipam.AutoAssignArgs{Num4:1, Num6:0, HandleID:(*string)(0x4000304840), Attrs:map[string]string{"namespace":"calico-apiserver", "node":"localhost", "pod":"calico-apiserver-66cb7fb7dc-2bvrs", "timestamp":"2025-03-17 18:28:21.134262523 +0000 UTC"}, Hostname:"localhost", IPv4Pools:[]net.IPNet{}, IPv6Pools:[]net.IPNet{}, MaxBlocksPerHost:0, HostReservedAttrIPv4s:(*ipam.HostReservedAttr)(nil), HostReservedAttrIPv6s:(*ipam.HostReservedAttr)(nil), IntendedUse:"Workload"} Mar 17 18:28:21.209792 env[1216]: 2025-03-17 18:28:21.148 [INFO][3645] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Mar 17 18:28:21.209792 env[1216]: 2025-03-17 18:28:21.148 [INFO][3645] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Mar 17 18:28:21.209792 env[1216]: 2025-03-17 18:28:21.148 [INFO][3645] ipam/ipam.go 107: Auto-assign 1 ipv4, 0 ipv6 addrs for host 'localhost' Mar 17 18:28:21.209792 env[1216]: 2025-03-17 18:28:21.154 [INFO][3645] ipam/ipam.go 660: Looking up existing affinities for host handle="k8s-pod-network.7e430e160a6c95321ff5fd120f3eab9e6afd20936602a5f1d3e361a692a04bbd" host="localhost" Mar 17 18:28:21.209792 env[1216]: 2025-03-17 18:28:21.165 [INFO][3645] ipam/ipam.go 372: Looking up existing affinities for host host="localhost" Mar 17 18:28:21.209792 env[1216]: 2025-03-17 18:28:21.169 [INFO][3645] ipam/ipam.go 489: Trying affinity for 192.168.88.128/26 host="localhost" Mar 17 18:28:21.209792 env[1216]: 2025-03-17 18:28:21.171 [INFO][3645] ipam/ipam.go 155: Attempting to load block cidr=192.168.88.128/26 host="localhost" Mar 17 18:28:21.209792 env[1216]: 2025-03-17 18:28:21.173 [INFO][3645] ipam/ipam.go 232: Affinity is confirmed and block has been loaded cidr=192.168.88.128/26 host="localhost" Mar 17 18:28:21.209792 env[1216]: 2025-03-17 18:28:21.173 [INFO][3645] ipam/ipam.go 1180: Attempting to assign 1 addresses from block block=192.168.88.128/26 handle="k8s-pod-network.7e430e160a6c95321ff5fd120f3eab9e6afd20936602a5f1d3e361a692a04bbd" host="localhost" Mar 17 18:28:21.209792 env[1216]: 2025-03-17 18:28:21.177 [INFO][3645] ipam/ipam.go 1685: Creating new handle: k8s-pod-network.7e430e160a6c95321ff5fd120f3eab9e6afd20936602a5f1d3e361a692a04bbd Mar 17 18:28:21.209792 env[1216]: 2025-03-17 18:28:21.183 [INFO][3645] ipam/ipam.go 1203: Writing block in order to claim IPs block=192.168.88.128/26 handle="k8s-pod-network.7e430e160a6c95321ff5fd120f3eab9e6afd20936602a5f1d3e361a692a04bbd" host="localhost" Mar 17 18:28:21.209792 env[1216]: 2025-03-17 18:28:21.189 [INFO][3645] ipam/ipam.go 1216: Successfully claimed IPs: [192.168.88.130/26] block=192.168.88.128/26 handle="k8s-pod-network.7e430e160a6c95321ff5fd120f3eab9e6afd20936602a5f1d3e361a692a04bbd" host="localhost" Mar 17 18:28:21.209792 env[1216]: 2025-03-17 18:28:21.189 [INFO][3645] ipam/ipam.go 847: Auto-assigned 1 out of 1 IPv4s: [192.168.88.130/26] handle="k8s-pod-network.7e430e160a6c95321ff5fd120f3eab9e6afd20936602a5f1d3e361a692a04bbd" host="localhost" Mar 17 18:28:21.209792 env[1216]: 2025-03-17 18:28:21.189 [INFO][3645] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Mar 17 18:28:21.209792 env[1216]: 2025-03-17 18:28:21.189 [INFO][3645] ipam/ipam_plugin.go 283: Calico CNI IPAM assigned addresses IPv4=[192.168.88.130/26] IPv6=[] ContainerID="7e430e160a6c95321ff5fd120f3eab9e6afd20936602a5f1d3e361a692a04bbd" HandleID="k8s-pod-network.7e430e160a6c95321ff5fd120f3eab9e6afd20936602a5f1d3e361a692a04bbd" Workload="localhost-k8s-calico--apiserver--66cb7fb7dc--2bvrs-eth0" Mar 17 18:28:21.210556 env[1216]: 2025-03-17 18:28:21.193 [INFO][3610] cni-plugin/k8s.go 386: Populated endpoint ContainerID="7e430e160a6c95321ff5fd120f3eab9e6afd20936602a5f1d3e361a692a04bbd" Namespace="calico-apiserver" Pod="calico-apiserver-66cb7fb7dc-2bvrs" WorkloadEndpoint="localhost-k8s-calico--apiserver--66cb7fb7dc--2bvrs-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-calico--apiserver--66cb7fb7dc--2bvrs-eth0", GenerateName:"calico-apiserver-66cb7fb7dc-", Namespace:"calico-apiserver", SelfLink:"", UID:"febc9f3a-c5fd-4e88-ac3b-68eff786c39c", ResourceVersion:"865", Generation:0, CreationTimestamp:time.Date(2025, time.March, 17, 18, 27, 58, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"apiserver":"true", "app.kubernetes.io/name":"calico-apiserver", "k8s-app":"calico-apiserver", "pod-template-hash":"66cb7fb7dc", "projectcalico.org/namespace":"calico-apiserver", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-apiserver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"", Pod:"calico-apiserver-66cb7fb7dc-2bvrs", Endpoint:"eth0", ServiceAccountName:"calico-apiserver", IPNetworks:[]string{"192.168.88.130/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-apiserver", "ksa.calico-apiserver.calico-apiserver"}, InterfaceName:"calic2268833577", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil)}} Mar 17 18:28:21.210556 env[1216]: 2025-03-17 18:28:21.193 [INFO][3610] cni-plugin/k8s.go 387: Calico CNI using IPs: [192.168.88.130/32] ContainerID="7e430e160a6c95321ff5fd120f3eab9e6afd20936602a5f1d3e361a692a04bbd" Namespace="calico-apiserver" Pod="calico-apiserver-66cb7fb7dc-2bvrs" WorkloadEndpoint="localhost-k8s-calico--apiserver--66cb7fb7dc--2bvrs-eth0" Mar 17 18:28:21.210556 env[1216]: 2025-03-17 18:28:21.193 [INFO][3610] cni-plugin/dataplane_linux.go 69: Setting the host side veth name to calic2268833577 ContainerID="7e430e160a6c95321ff5fd120f3eab9e6afd20936602a5f1d3e361a692a04bbd" Namespace="calico-apiserver" Pod="calico-apiserver-66cb7fb7dc-2bvrs" WorkloadEndpoint="localhost-k8s-calico--apiserver--66cb7fb7dc--2bvrs-eth0" Mar 17 18:28:21.210556 env[1216]: 2025-03-17 18:28:21.197 [INFO][3610] cni-plugin/dataplane_linux.go 508: Disabling IPv4 forwarding ContainerID="7e430e160a6c95321ff5fd120f3eab9e6afd20936602a5f1d3e361a692a04bbd" Namespace="calico-apiserver" Pod="calico-apiserver-66cb7fb7dc-2bvrs" WorkloadEndpoint="localhost-k8s-calico--apiserver--66cb7fb7dc--2bvrs-eth0" Mar 17 18:28:21.210556 env[1216]: 2025-03-17 18:28:21.197 [INFO][3610] cni-plugin/k8s.go 414: Added Mac, interface name, and active container ID to endpoint ContainerID="7e430e160a6c95321ff5fd120f3eab9e6afd20936602a5f1d3e361a692a04bbd" Namespace="calico-apiserver" Pod="calico-apiserver-66cb7fb7dc-2bvrs" WorkloadEndpoint="localhost-k8s-calico--apiserver--66cb7fb7dc--2bvrs-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-calico--apiserver--66cb7fb7dc--2bvrs-eth0", GenerateName:"calico-apiserver-66cb7fb7dc-", Namespace:"calico-apiserver", SelfLink:"", UID:"febc9f3a-c5fd-4e88-ac3b-68eff786c39c", ResourceVersion:"865", Generation:0, CreationTimestamp:time.Date(2025, time.March, 17, 18, 27, 58, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"apiserver":"true", "app.kubernetes.io/name":"calico-apiserver", "k8s-app":"calico-apiserver", "pod-template-hash":"66cb7fb7dc", "projectcalico.org/namespace":"calico-apiserver", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-apiserver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"7e430e160a6c95321ff5fd120f3eab9e6afd20936602a5f1d3e361a692a04bbd", Pod:"calico-apiserver-66cb7fb7dc-2bvrs", Endpoint:"eth0", ServiceAccountName:"calico-apiserver", IPNetworks:[]string{"192.168.88.130/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-apiserver", "ksa.calico-apiserver.calico-apiserver"}, InterfaceName:"calic2268833577", MAC:"26:19:e9:dc:2e:cd", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil)}} Mar 17 18:28:21.210556 env[1216]: 2025-03-17 18:28:21.206 [INFO][3610] cni-plugin/k8s.go 500: Wrote updated endpoint to datastore ContainerID="7e430e160a6c95321ff5fd120f3eab9e6afd20936602a5f1d3e361a692a04bbd" Namespace="calico-apiserver" Pod="calico-apiserver-66cb7fb7dc-2bvrs" WorkloadEndpoint="localhost-k8s-calico--apiserver--66cb7fb7dc--2bvrs-eth0" Mar 17 18:28:21.240928 env[1216]: time="2025-03-17T18:28:21.240274262Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Mar 17 18:28:21.240928 env[1216]: time="2025-03-17T18:28:21.240322705Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Mar 17 18:28:21.240928 env[1216]: time="2025-03-17T18:28:21.240332865Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Mar 17 18:28:21.240928 env[1216]: time="2025-03-17T18:28:21.240498435Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/7e430e160a6c95321ff5fd120f3eab9e6afd20936602a5f1d3e361a692a04bbd pid=3700 runtime=io.containerd.runc.v2 Mar 17 18:28:21.266386 systemd[1]: Started cri-containerd-7e430e160a6c95321ff5fd120f3eab9e6afd20936602a5f1d3e361a692a04bbd.scope. Mar 17 18:28:21.310000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:28:21.310000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:28:21.310000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:28:21.310000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:28:21.310000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:28:21.310000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:28:21.310000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:28:21.310000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:28:21.310000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:28:21.310000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:28:21.310000 audit: BPF prog-id=140 op=LOAD Mar 17 18:28:21.310000 audit[3709]: AVC avc: denied { bpf } for pid=3709 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:28:21.310000 audit[3709]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000195b38 a2=10 a3=0 items=0 ppid=3700 pid=3709 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:28:21.310000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3765343330653136306136633935333231666635666431323066336561 Mar 17 18:28:21.310000 audit[3709]: AVC avc: denied { perfmon } for pid=3709 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:28:21.310000 audit[3709]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001955a0 a2=3c a3=0 items=0 ppid=3700 pid=3709 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:28:21.310000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3765343330653136306136633935333231666635666431323066336561 Mar 17 18:28:21.310000 audit[3709]: AVC avc: denied { bpf } for pid=3709 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:28:21.310000 audit[3709]: AVC avc: denied { bpf } for pid=3709 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:28:21.310000 audit[3709]: AVC avc: denied { bpf } for pid=3709 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:28:21.310000 audit[3709]: AVC avc: denied { perfmon } for pid=3709 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:28:21.310000 audit[3709]: AVC avc: denied { perfmon } for pid=3709 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:28:21.310000 audit[3709]: AVC avc: denied { perfmon } for pid=3709 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:28:21.310000 audit[3709]: AVC avc: denied { perfmon } for pid=3709 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:28:21.310000 audit[3709]: AVC avc: denied { perfmon } for pid=3709 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:28:21.310000 audit[3709]: AVC avc: denied { bpf } for pid=3709 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:28:21.310000 audit[3709]: AVC avc: denied { bpf } for pid=3709 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:28:21.310000 audit: BPF prog-id=141 op=LOAD Mar 17 18:28:21.310000 audit[3709]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001958e0 a2=78 a3=0 items=0 ppid=3700 pid=3709 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:28:21.310000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3765343330653136306136633935333231666635666431323066336561 Mar 17 18:28:21.311000 audit[3709]: AVC avc: denied { bpf } for pid=3709 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:28:21.311000 audit[3709]: AVC avc: denied { bpf } for pid=3709 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:28:21.311000 audit[3709]: AVC avc: denied { perfmon } for pid=3709 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:28:21.311000 audit[3709]: AVC avc: denied { perfmon } for pid=3709 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:28:21.311000 audit[3709]: AVC avc: denied { perfmon } for pid=3709 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:28:21.311000 audit[3709]: AVC avc: denied { perfmon } for pid=3709 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:28:21.311000 audit[3709]: AVC avc: denied { perfmon } for pid=3709 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:28:21.311000 audit[3709]: AVC avc: denied { bpf } for pid=3709 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:28:21.311000 audit[3709]: AVC avc: denied { bpf } for pid=3709 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:28:21.311000 audit: BPF prog-id=142 op=LOAD Mar 17 18:28:21.311000 audit[3709]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000195670 a2=78 a3=0 items=0 ppid=3700 pid=3709 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:28:21.311000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3765343330653136306136633935333231666635666431323066336561 Mar 17 18:28:21.311000 audit: BPF prog-id=142 op=UNLOAD Mar 17 18:28:21.311000 audit: BPF prog-id=141 op=UNLOAD Mar 17 18:28:21.311000 audit[3709]: AVC avc: denied { bpf } for pid=3709 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:28:21.311000 audit[3709]: AVC avc: denied { bpf } for pid=3709 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:28:21.311000 audit[3709]: AVC avc: denied { bpf } for pid=3709 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:28:21.311000 audit[3709]: AVC avc: denied { perfmon } for pid=3709 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:28:21.311000 audit[3709]: AVC avc: denied { perfmon } for pid=3709 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:28:21.311000 audit[3709]: AVC avc: denied { perfmon } for pid=3709 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:28:21.311000 audit[3709]: AVC avc: denied { perfmon } for pid=3709 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:28:21.311000 audit[3709]: AVC avc: denied { perfmon } for pid=3709 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:28:21.311000 audit[3709]: AVC avc: denied { bpf } for pid=3709 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:28:21.311000 audit[3709]: AVC avc: denied { bpf } for pid=3709 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:28:21.311000 audit: BPF prog-id=143 op=LOAD Mar 17 18:28:21.311000 audit[3709]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000195b40 a2=78 a3=0 items=0 ppid=3700 pid=3709 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:28:21.311000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3765343330653136306136633935333231666635666431323066336561 Mar 17 18:28:21.312404 systemd-resolved[1155]: Failed to determine the local hostname and LLMNR/mDNS names, ignoring: No such device or address Mar 17 18:28:21.315993 systemd-networkd[1043]: cali06cfa15a03f: Link UP Mar 17 18:28:21.316970 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): cali06cfa15a03f: link becomes ready Mar 17 18:28:21.317357 systemd-networkd[1043]: cali06cfa15a03f: Gained carrier Mar 17 18:28:21.331784 env[1216]: 2025-03-17 18:28:21.083 [INFO][3621] cni-plugin/utils.go 100: File /var/lib/calico/mtu does not exist Mar 17 18:28:21.331784 env[1216]: 2025-03-17 18:28:21.100 [INFO][3621] cni-plugin/plugin.go 325: Calico CNI found existing endpoint: &{{WorkloadEndpoint projectcalico.org/v3} {localhost-k8s-csi--node--driver--2brpt-eth0 csi-node-driver- calico-system 89bbd71b-c404-4c0b-b107-937675df3164 866 0 2025-03-17 18:27:58 +0000 UTC map[app.kubernetes.io/name:csi-node-driver controller-revision-hash:56747c9949 k8s-app:csi-node-driver name:csi-node-driver pod-template-generation:1 projectcalico.org/namespace:calico-system projectcalico.org/orchestrator:k8s projectcalico.org/serviceaccount:csi-node-driver] map[] [] [] []} {k8s localhost csi-node-driver-2brpt eth0 csi-node-driver [] [] [kns.calico-system ksa.calico-system.csi-node-driver] cali06cfa15a03f [] []}} ContainerID="d6966a7e79563338d5eb4c2d384219225a1d3f028896cec0d7f576a8a0525117" Namespace="calico-system" Pod="csi-node-driver-2brpt" WorkloadEndpoint="localhost-k8s-csi--node--driver--2brpt-" Mar 17 18:28:21.331784 env[1216]: 2025-03-17 18:28:21.100 [INFO][3621] cni-plugin/k8s.go 77: Extracted identifiers for CmdAddK8s ContainerID="d6966a7e79563338d5eb4c2d384219225a1d3f028896cec0d7f576a8a0525117" Namespace="calico-system" Pod="csi-node-driver-2brpt" WorkloadEndpoint="localhost-k8s-csi--node--driver--2brpt-eth0" Mar 17 18:28:21.331784 env[1216]: 2025-03-17 18:28:21.157 [INFO][3651] ipam/ipam_plugin.go 225: Calico CNI IPAM request count IPv4=1 IPv6=0 ContainerID="d6966a7e79563338d5eb4c2d384219225a1d3f028896cec0d7f576a8a0525117" HandleID="k8s-pod-network.d6966a7e79563338d5eb4c2d384219225a1d3f028896cec0d7f576a8a0525117" Workload="localhost-k8s-csi--node--driver--2brpt-eth0" Mar 17 18:28:21.331784 env[1216]: 2025-03-17 18:28:21.167 [INFO][3651] ipam/ipam_plugin.go 265: Auto assigning IP ContainerID="d6966a7e79563338d5eb4c2d384219225a1d3f028896cec0d7f576a8a0525117" HandleID="k8s-pod-network.d6966a7e79563338d5eb4c2d384219225a1d3f028896cec0d7f576a8a0525117" Workload="localhost-k8s-csi--node--driver--2brpt-eth0" assignArgs=ipam.AutoAssignArgs{Num4:1, Num6:0, HandleID:(*string)(0x40002785d0), Attrs:map[string]string{"namespace":"calico-system", "node":"localhost", "pod":"csi-node-driver-2brpt", "timestamp":"2025-03-17 18:28:21.157531678 +0000 UTC"}, Hostname:"localhost", IPv4Pools:[]net.IPNet{}, IPv6Pools:[]net.IPNet{}, MaxBlocksPerHost:0, HostReservedAttrIPv4s:(*ipam.HostReservedAttr)(nil), HostReservedAttrIPv6s:(*ipam.HostReservedAttr)(nil), IntendedUse:"Workload"} Mar 17 18:28:21.331784 env[1216]: 2025-03-17 18:28:21.167 [INFO][3651] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Mar 17 18:28:21.331784 env[1216]: 2025-03-17 18:28:21.189 [INFO][3651] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Mar 17 18:28:21.331784 env[1216]: 2025-03-17 18:28:21.189 [INFO][3651] ipam/ipam.go 107: Auto-assign 1 ipv4, 0 ipv6 addrs for host 'localhost' Mar 17 18:28:21.331784 env[1216]: 2025-03-17 18:28:21.251 [INFO][3651] ipam/ipam.go 660: Looking up existing affinities for host handle="k8s-pod-network.d6966a7e79563338d5eb4c2d384219225a1d3f028896cec0d7f576a8a0525117" host="localhost" Mar 17 18:28:21.331784 env[1216]: 2025-03-17 18:28:21.263 [INFO][3651] ipam/ipam.go 372: Looking up existing affinities for host host="localhost" Mar 17 18:28:21.331784 env[1216]: 2025-03-17 18:28:21.279 [INFO][3651] ipam/ipam.go 489: Trying affinity for 192.168.88.128/26 host="localhost" Mar 17 18:28:21.331784 env[1216]: 2025-03-17 18:28:21.283 [INFO][3651] ipam/ipam.go 155: Attempting to load block cidr=192.168.88.128/26 host="localhost" Mar 17 18:28:21.331784 env[1216]: 2025-03-17 18:28:21.291 [INFO][3651] ipam/ipam.go 232: Affinity is confirmed and block has been loaded cidr=192.168.88.128/26 host="localhost" Mar 17 18:28:21.331784 env[1216]: 2025-03-17 18:28:21.291 [INFO][3651] ipam/ipam.go 1180: Attempting to assign 1 addresses from block block=192.168.88.128/26 handle="k8s-pod-network.d6966a7e79563338d5eb4c2d384219225a1d3f028896cec0d7f576a8a0525117" host="localhost" Mar 17 18:28:21.331784 env[1216]: 2025-03-17 18:28:21.298 [INFO][3651] ipam/ipam.go 1685: Creating new handle: k8s-pod-network.d6966a7e79563338d5eb4c2d384219225a1d3f028896cec0d7f576a8a0525117 Mar 17 18:28:21.331784 env[1216]: 2025-03-17 18:28:21.302 [INFO][3651] ipam/ipam.go 1203: Writing block in order to claim IPs block=192.168.88.128/26 handle="k8s-pod-network.d6966a7e79563338d5eb4c2d384219225a1d3f028896cec0d7f576a8a0525117" host="localhost" Mar 17 18:28:21.331784 env[1216]: 2025-03-17 18:28:21.308 [INFO][3651] ipam/ipam.go 1216: Successfully claimed IPs: [192.168.88.131/26] block=192.168.88.128/26 handle="k8s-pod-network.d6966a7e79563338d5eb4c2d384219225a1d3f028896cec0d7f576a8a0525117" host="localhost" Mar 17 18:28:21.331784 env[1216]: 2025-03-17 18:28:21.308 [INFO][3651] ipam/ipam.go 847: Auto-assigned 1 out of 1 IPv4s: [192.168.88.131/26] handle="k8s-pod-network.d6966a7e79563338d5eb4c2d384219225a1d3f028896cec0d7f576a8a0525117" host="localhost" Mar 17 18:28:21.331784 env[1216]: 2025-03-17 18:28:21.308 [INFO][3651] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Mar 17 18:28:21.331784 env[1216]: 2025-03-17 18:28:21.308 [INFO][3651] ipam/ipam_plugin.go 283: Calico CNI IPAM assigned addresses IPv4=[192.168.88.131/26] IPv6=[] ContainerID="d6966a7e79563338d5eb4c2d384219225a1d3f028896cec0d7f576a8a0525117" HandleID="k8s-pod-network.d6966a7e79563338d5eb4c2d384219225a1d3f028896cec0d7f576a8a0525117" Workload="localhost-k8s-csi--node--driver--2brpt-eth0" Mar 17 18:28:21.332443 env[1216]: 2025-03-17 18:28:21.314 [INFO][3621] cni-plugin/k8s.go 386: Populated endpoint ContainerID="d6966a7e79563338d5eb4c2d384219225a1d3f028896cec0d7f576a8a0525117" Namespace="calico-system" Pod="csi-node-driver-2brpt" WorkloadEndpoint="localhost-k8s-csi--node--driver--2brpt-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-csi--node--driver--2brpt-eth0", GenerateName:"csi-node-driver-", Namespace:"calico-system", SelfLink:"", UID:"89bbd71b-c404-4c0b-b107-937675df3164", ResourceVersion:"866", Generation:0, CreationTimestamp:time.Date(2025, time.March, 17, 18, 27, 58, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"csi-node-driver", "controller-revision-hash":"56747c9949", "k8s-app":"csi-node-driver", "name":"csi-node-driver", "pod-template-generation":"1", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"csi-node-driver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"", Pod:"csi-node-driver-2brpt", Endpoint:"eth0", ServiceAccountName:"csi-node-driver", IPNetworks:[]string{"192.168.88.131/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.csi-node-driver"}, InterfaceName:"cali06cfa15a03f", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil)}} Mar 17 18:28:21.332443 env[1216]: 2025-03-17 18:28:21.314 [INFO][3621] cni-plugin/k8s.go 387: Calico CNI using IPs: [192.168.88.131/32] ContainerID="d6966a7e79563338d5eb4c2d384219225a1d3f028896cec0d7f576a8a0525117" Namespace="calico-system" Pod="csi-node-driver-2brpt" WorkloadEndpoint="localhost-k8s-csi--node--driver--2brpt-eth0" Mar 17 18:28:21.332443 env[1216]: 2025-03-17 18:28:21.314 [INFO][3621] cni-plugin/dataplane_linux.go 69: Setting the host side veth name to cali06cfa15a03f ContainerID="d6966a7e79563338d5eb4c2d384219225a1d3f028896cec0d7f576a8a0525117" Namespace="calico-system" Pod="csi-node-driver-2brpt" WorkloadEndpoint="localhost-k8s-csi--node--driver--2brpt-eth0" Mar 17 18:28:21.332443 env[1216]: 2025-03-17 18:28:21.317 [INFO][3621] cni-plugin/dataplane_linux.go 508: Disabling IPv4 forwarding ContainerID="d6966a7e79563338d5eb4c2d384219225a1d3f028896cec0d7f576a8a0525117" Namespace="calico-system" Pod="csi-node-driver-2brpt" WorkloadEndpoint="localhost-k8s-csi--node--driver--2brpt-eth0" Mar 17 18:28:21.332443 env[1216]: 2025-03-17 18:28:21.317 [INFO][3621] cni-plugin/k8s.go 414: Added Mac, interface name, and active container ID to endpoint ContainerID="d6966a7e79563338d5eb4c2d384219225a1d3f028896cec0d7f576a8a0525117" Namespace="calico-system" Pod="csi-node-driver-2brpt" WorkloadEndpoint="localhost-k8s-csi--node--driver--2brpt-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-csi--node--driver--2brpt-eth0", GenerateName:"csi-node-driver-", Namespace:"calico-system", SelfLink:"", UID:"89bbd71b-c404-4c0b-b107-937675df3164", ResourceVersion:"866", Generation:0, CreationTimestamp:time.Date(2025, time.March, 17, 18, 27, 58, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"csi-node-driver", "controller-revision-hash":"56747c9949", "k8s-app":"csi-node-driver", "name":"csi-node-driver", "pod-template-generation":"1", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"csi-node-driver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"d6966a7e79563338d5eb4c2d384219225a1d3f028896cec0d7f576a8a0525117", Pod:"csi-node-driver-2brpt", Endpoint:"eth0", ServiceAccountName:"csi-node-driver", IPNetworks:[]string{"192.168.88.131/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.csi-node-driver"}, InterfaceName:"cali06cfa15a03f", MAC:"9a:bd:c0:6c:64:9e", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil)}} Mar 17 18:28:21.332443 env[1216]: 2025-03-17 18:28:21.329 [INFO][3621] cni-plugin/k8s.go 500: Wrote updated endpoint to datastore ContainerID="d6966a7e79563338d5eb4c2d384219225a1d3f028896cec0d7f576a8a0525117" Namespace="calico-system" Pod="csi-node-driver-2brpt" WorkloadEndpoint="localhost-k8s-csi--node--driver--2brpt-eth0" Mar 17 18:28:21.348051 env[1216]: time="2025-03-17T18:28:21.348007466Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-apiserver-66cb7fb7dc-2bvrs,Uid:febc9f3a-c5fd-4e88-ac3b-68eff786c39c,Namespace:calico-apiserver,Attempt:1,} returns sandbox id \"7e430e160a6c95321ff5fd120f3eab9e6afd20936602a5f1d3e361a692a04bbd\"" Mar 17 18:28:21.356546 env[1216]: time="2025-03-17T18:28:21.356470988Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Mar 17 18:28:21.356546 env[1216]: time="2025-03-17T18:28:21.356518711Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Mar 17 18:28:21.356546 env[1216]: time="2025-03-17T18:28:21.356529272Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Mar 17 18:28:21.356851 env[1216]: time="2025-03-17T18:28:21.356803049Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/d6966a7e79563338d5eb4c2d384219225a1d3f028896cec0d7f576a8a0525117 pid=3753 runtime=io.containerd.runc.v2 Mar 17 18:28:21.369881 systemd[1]: Started cri-containerd-d6966a7e79563338d5eb4c2d384219225a1d3f028896cec0d7f576a8a0525117.scope. Mar 17 18:28:21.397000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:28:21.397000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:28:21.397000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:28:21.397000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:28:21.397000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:28:21.397000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:28:21.397000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:28:21.397000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:28:21.397000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:28:21.397000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:28:21.397000 audit: BPF prog-id=144 op=LOAD Mar 17 18:28:21.398000 audit[3762]: AVC avc: denied { bpf } for pid=3762 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:28:21.398000 audit[3762]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000195b38 a2=10 a3=0 items=0 ppid=3753 pid=3762 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:28:21.398000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6436393636613765373935363333333864356562346332643338343231 Mar 17 18:28:21.398000 audit[3762]: AVC avc: denied { perfmon } for pid=3762 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:28:21.398000 audit[3762]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001955a0 a2=3c a3=0 items=0 ppid=3753 pid=3762 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:28:21.398000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6436393636613765373935363333333864356562346332643338343231 Mar 17 18:28:21.398000 audit[3762]: AVC avc: denied { bpf } for pid=3762 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:28:21.398000 audit[3762]: AVC avc: denied { bpf } for pid=3762 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:28:21.398000 audit[3762]: AVC avc: denied { bpf } for pid=3762 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:28:21.398000 audit[3762]: AVC avc: denied { perfmon } for pid=3762 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:28:21.398000 audit[3762]: AVC avc: denied { perfmon } for pid=3762 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:28:21.398000 audit[3762]: AVC avc: denied { perfmon } for pid=3762 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:28:21.398000 audit[3762]: AVC avc: denied { perfmon } for pid=3762 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:28:21.398000 audit[3762]: AVC avc: denied { perfmon } for pid=3762 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:28:21.398000 audit[3762]: AVC avc: denied { bpf } for pid=3762 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:28:21.398000 audit[3762]: AVC avc: denied { bpf } for pid=3762 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:28:21.398000 audit: BPF prog-id=145 op=LOAD Mar 17 18:28:21.398000 audit[3762]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001958e0 a2=78 a3=0 items=0 ppid=3753 pid=3762 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:28:21.398000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6436393636613765373935363333333864356562346332643338343231 Mar 17 18:28:21.398000 audit[3762]: AVC avc: denied { bpf } for pid=3762 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:28:21.398000 audit[3762]: AVC avc: denied { bpf } for pid=3762 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:28:21.398000 audit[3762]: AVC avc: denied { perfmon } for pid=3762 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:28:21.398000 audit[3762]: AVC avc: denied { perfmon } for pid=3762 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:28:21.403527 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): caliebe0a51f26e: link becomes ready Mar 17 18:28:21.398000 audit[3762]: AVC avc: denied { perfmon } for pid=3762 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:28:21.398000 audit[3762]: AVC avc: denied { perfmon } for pid=3762 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:28:21.398000 audit[3762]: AVC avc: denied { perfmon } for pid=3762 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:28:21.398000 audit[3762]: AVC avc: denied { bpf } for pid=3762 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:28:21.398000 audit[3762]: AVC avc: denied { bpf } for pid=3762 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:28:21.398000 audit: BPF prog-id=146 op=LOAD Mar 17 18:28:21.398000 audit[3762]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000195670 a2=78 a3=0 items=0 ppid=3753 pid=3762 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:28:21.398000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6436393636613765373935363333333864356562346332643338343231 Mar 17 18:28:21.398000 audit: BPF prog-id=146 op=UNLOAD Mar 17 18:28:21.398000 audit: BPF prog-id=145 op=UNLOAD Mar 17 18:28:21.398000 audit[3762]: AVC avc: denied { bpf } for pid=3762 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:28:21.398000 audit[3762]: AVC avc: denied { bpf } for pid=3762 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:28:21.398000 audit[3762]: AVC avc: denied { bpf } for pid=3762 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:28:21.398000 audit[3762]: AVC avc: denied { perfmon } for pid=3762 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:28:21.398000 audit[3762]: AVC avc: denied { perfmon } for pid=3762 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:28:21.398000 audit[3762]: AVC avc: denied { perfmon } for pid=3762 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:28:21.398000 audit[3762]: AVC avc: denied { perfmon } for pid=3762 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:28:21.398000 audit[3762]: AVC avc: denied { perfmon } for pid=3762 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:28:21.398000 audit[3762]: AVC avc: denied { bpf } for pid=3762 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:28:21.398000 audit[3762]: AVC avc: denied { bpf } for pid=3762 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:28:21.398000 audit: BPF prog-id=147 op=LOAD Mar 17 18:28:21.398000 audit[3762]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000195b40 a2=78 a3=0 items=0 ppid=3753 pid=3762 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:28:21.398000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6436393636613765373935363333333864356562346332643338343231 Mar 17 18:28:21.403098 systemd-networkd[1043]: caliebe0a51f26e: Link UP Mar 17 18:28:21.403355 systemd-networkd[1043]: caliebe0a51f26e: Gained carrier Mar 17 18:28:21.407905 systemd-resolved[1155]: Failed to determine the local hostname and LLMNR/mDNS names, ignoring: No such device or address Mar 17 18:28:21.420843 env[1216]: 2025-03-17 18:28:21.064 [INFO][3595] cni-plugin/utils.go 100: File /var/lib/calico/mtu does not exist Mar 17 18:28:21.420843 env[1216]: 2025-03-17 18:28:21.086 [INFO][3595] cni-plugin/plugin.go 325: Calico CNI found existing endpoint: &{{WorkloadEndpoint projectcalico.org/v3} {localhost-k8s-coredns--6f6b679f8f--fkzq6-eth0 coredns-6f6b679f8f- kube-system 701122a6-4262-4c31-b9ac-c3483ca8c88f 864 0 2025-03-17 18:27:51 +0000 UTC map[k8s-app:kube-dns pod-template-hash:6f6b679f8f projectcalico.org/namespace:kube-system projectcalico.org/orchestrator:k8s projectcalico.org/serviceaccount:coredns] map[] [] [] []} {k8s localhost coredns-6f6b679f8f-fkzq6 eth0 coredns [] [] [kns.kube-system ksa.kube-system.coredns] caliebe0a51f26e [{dns UDP 53 0 } {dns-tcp TCP 53 0 } {metrics TCP 9153 0 }] []}} ContainerID="cf6711a26f93547fe1c866391060f7f666dc9fd30bf982ada1bbff3c596e5d6b" Namespace="kube-system" Pod="coredns-6f6b679f8f-fkzq6" WorkloadEndpoint="localhost-k8s-coredns--6f6b679f8f--fkzq6-" Mar 17 18:28:21.420843 env[1216]: 2025-03-17 18:28:21.086 [INFO][3595] cni-plugin/k8s.go 77: Extracted identifiers for CmdAddK8s ContainerID="cf6711a26f93547fe1c866391060f7f666dc9fd30bf982ada1bbff3c596e5d6b" Namespace="kube-system" Pod="coredns-6f6b679f8f-fkzq6" WorkloadEndpoint="localhost-k8s-coredns--6f6b679f8f--fkzq6-eth0" Mar 17 18:28:21.420843 env[1216]: 2025-03-17 18:28:21.145 [INFO][3640] ipam/ipam_plugin.go 225: Calico CNI IPAM request count IPv4=1 IPv6=0 ContainerID="cf6711a26f93547fe1c866391060f7f666dc9fd30bf982ada1bbff3c596e5d6b" HandleID="k8s-pod-network.cf6711a26f93547fe1c866391060f7f666dc9fd30bf982ada1bbff3c596e5d6b" Workload="localhost-k8s-coredns--6f6b679f8f--fkzq6-eth0" Mar 17 18:28:21.420843 env[1216]: 2025-03-17 18:28:21.167 [INFO][3640] ipam/ipam_plugin.go 265: Auto assigning IP ContainerID="cf6711a26f93547fe1c866391060f7f666dc9fd30bf982ada1bbff3c596e5d6b" HandleID="k8s-pod-network.cf6711a26f93547fe1c866391060f7f666dc9fd30bf982ada1bbff3c596e5d6b" Workload="localhost-k8s-coredns--6f6b679f8f--fkzq6-eth0" assignArgs=ipam.AutoAssignArgs{Num4:1, Num6:0, HandleID:(*string)(0x40002d8a90), Attrs:map[string]string{"namespace":"kube-system", "node":"localhost", "pod":"coredns-6f6b679f8f-fkzq6", "timestamp":"2025-03-17 18:28:21.145753072 +0000 UTC"}, Hostname:"localhost", IPv4Pools:[]net.IPNet{}, IPv6Pools:[]net.IPNet{}, MaxBlocksPerHost:0, HostReservedAttrIPv4s:(*ipam.HostReservedAttr)(nil), HostReservedAttrIPv6s:(*ipam.HostReservedAttr)(nil), IntendedUse:"Workload"} Mar 17 18:28:21.420843 env[1216]: 2025-03-17 18:28:21.167 [INFO][3640] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Mar 17 18:28:21.420843 env[1216]: 2025-03-17 18:28:21.308 [INFO][3640] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Mar 17 18:28:21.420843 env[1216]: 2025-03-17 18:28:21.308 [INFO][3640] ipam/ipam.go 107: Auto-assign 1 ipv4, 0 ipv6 addrs for host 'localhost' Mar 17 18:28:21.420843 env[1216]: 2025-03-17 18:28:21.351 [INFO][3640] ipam/ipam.go 660: Looking up existing affinities for host handle="k8s-pod-network.cf6711a26f93547fe1c866391060f7f666dc9fd30bf982ada1bbff3c596e5d6b" host="localhost" Mar 17 18:28:21.420843 env[1216]: 2025-03-17 18:28:21.362 [INFO][3640] ipam/ipam.go 372: Looking up existing affinities for host host="localhost" Mar 17 18:28:21.420843 env[1216]: 2025-03-17 18:28:21.378 [INFO][3640] ipam/ipam.go 489: Trying affinity for 192.168.88.128/26 host="localhost" Mar 17 18:28:21.420843 env[1216]: 2025-03-17 18:28:21.380 [INFO][3640] ipam/ipam.go 155: Attempting to load block cidr=192.168.88.128/26 host="localhost" Mar 17 18:28:21.420843 env[1216]: 2025-03-17 18:28:21.385 [INFO][3640] ipam/ipam.go 232: Affinity is confirmed and block has been loaded cidr=192.168.88.128/26 host="localhost" Mar 17 18:28:21.420843 env[1216]: 2025-03-17 18:28:21.385 [INFO][3640] ipam/ipam.go 1180: Attempting to assign 1 addresses from block block=192.168.88.128/26 handle="k8s-pod-network.cf6711a26f93547fe1c866391060f7f666dc9fd30bf982ada1bbff3c596e5d6b" host="localhost" Mar 17 18:28:21.420843 env[1216]: 2025-03-17 18:28:21.386 [INFO][3640] ipam/ipam.go 1685: Creating new handle: k8s-pod-network.cf6711a26f93547fe1c866391060f7f666dc9fd30bf982ada1bbff3c596e5d6b Mar 17 18:28:21.420843 env[1216]: 2025-03-17 18:28:21.390 [INFO][3640] ipam/ipam.go 1203: Writing block in order to claim IPs block=192.168.88.128/26 handle="k8s-pod-network.cf6711a26f93547fe1c866391060f7f666dc9fd30bf982ada1bbff3c596e5d6b" host="localhost" Mar 17 18:28:21.420843 env[1216]: 2025-03-17 18:28:21.395 [INFO][3640] ipam/ipam.go 1216: Successfully claimed IPs: [192.168.88.132/26] block=192.168.88.128/26 handle="k8s-pod-network.cf6711a26f93547fe1c866391060f7f666dc9fd30bf982ada1bbff3c596e5d6b" host="localhost" Mar 17 18:28:21.420843 env[1216]: 2025-03-17 18:28:21.395 [INFO][3640] ipam/ipam.go 847: Auto-assigned 1 out of 1 IPv4s: [192.168.88.132/26] handle="k8s-pod-network.cf6711a26f93547fe1c866391060f7f666dc9fd30bf982ada1bbff3c596e5d6b" host="localhost" Mar 17 18:28:21.420843 env[1216]: 2025-03-17 18:28:21.395 [INFO][3640] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Mar 17 18:28:21.420843 env[1216]: 2025-03-17 18:28:21.395 [INFO][3640] ipam/ipam_plugin.go 283: Calico CNI IPAM assigned addresses IPv4=[192.168.88.132/26] IPv6=[] ContainerID="cf6711a26f93547fe1c866391060f7f666dc9fd30bf982ada1bbff3c596e5d6b" HandleID="k8s-pod-network.cf6711a26f93547fe1c866391060f7f666dc9fd30bf982ada1bbff3c596e5d6b" Workload="localhost-k8s-coredns--6f6b679f8f--fkzq6-eth0" Mar 17 18:28:21.421429 env[1216]: 2025-03-17 18:28:21.399 [INFO][3595] cni-plugin/k8s.go 386: Populated endpoint ContainerID="cf6711a26f93547fe1c866391060f7f666dc9fd30bf982ada1bbff3c596e5d6b" Namespace="kube-system" Pod="coredns-6f6b679f8f-fkzq6" WorkloadEndpoint="localhost-k8s-coredns--6f6b679f8f--fkzq6-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-coredns--6f6b679f8f--fkzq6-eth0", GenerateName:"coredns-6f6b679f8f-", Namespace:"kube-system", SelfLink:"", UID:"701122a6-4262-4c31-b9ac-c3483ca8c88f", ResourceVersion:"864", Generation:0, CreationTimestamp:time.Date(2025, time.March, 17, 18, 27, 51, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"k8s-app":"kube-dns", "pod-template-hash":"6f6b679f8f", "projectcalico.org/namespace":"kube-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"coredns"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"", Pod:"coredns-6f6b679f8f-fkzq6", Endpoint:"eth0", ServiceAccountName:"coredns", IPNetworks:[]string{"192.168.88.132/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.kube-system", "ksa.kube-system.coredns"}, InterfaceName:"caliebe0a51f26e", MAC:"", Ports:[]v3.WorkloadEndpointPort{v3.WorkloadEndpointPort{Name:"dns", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"UDP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"dns-tcp", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"metrics", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x23c1, HostPort:0x0, HostIP:""}}, AllowSpoofedSourcePrefixes:[]string(nil)}} Mar 17 18:28:21.421429 env[1216]: 2025-03-17 18:28:21.399 [INFO][3595] cni-plugin/k8s.go 387: Calico CNI using IPs: [192.168.88.132/32] ContainerID="cf6711a26f93547fe1c866391060f7f666dc9fd30bf982ada1bbff3c596e5d6b" Namespace="kube-system" Pod="coredns-6f6b679f8f-fkzq6" WorkloadEndpoint="localhost-k8s-coredns--6f6b679f8f--fkzq6-eth0" Mar 17 18:28:21.421429 env[1216]: 2025-03-17 18:28:21.399 [INFO][3595] cni-plugin/dataplane_linux.go 69: Setting the host side veth name to caliebe0a51f26e ContainerID="cf6711a26f93547fe1c866391060f7f666dc9fd30bf982ada1bbff3c596e5d6b" Namespace="kube-system" Pod="coredns-6f6b679f8f-fkzq6" WorkloadEndpoint="localhost-k8s-coredns--6f6b679f8f--fkzq6-eth0" Mar 17 18:28:21.421429 env[1216]: 2025-03-17 18:28:21.403 [INFO][3595] cni-plugin/dataplane_linux.go 508: Disabling IPv4 forwarding ContainerID="cf6711a26f93547fe1c866391060f7f666dc9fd30bf982ada1bbff3c596e5d6b" Namespace="kube-system" Pod="coredns-6f6b679f8f-fkzq6" WorkloadEndpoint="localhost-k8s-coredns--6f6b679f8f--fkzq6-eth0" Mar 17 18:28:21.421429 env[1216]: 2025-03-17 18:28:21.407 [INFO][3595] cni-plugin/k8s.go 414: Added Mac, interface name, and active container ID to endpoint ContainerID="cf6711a26f93547fe1c866391060f7f666dc9fd30bf982ada1bbff3c596e5d6b" Namespace="kube-system" Pod="coredns-6f6b679f8f-fkzq6" WorkloadEndpoint="localhost-k8s-coredns--6f6b679f8f--fkzq6-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-coredns--6f6b679f8f--fkzq6-eth0", GenerateName:"coredns-6f6b679f8f-", Namespace:"kube-system", SelfLink:"", UID:"701122a6-4262-4c31-b9ac-c3483ca8c88f", ResourceVersion:"864", Generation:0, CreationTimestamp:time.Date(2025, time.March, 17, 18, 27, 51, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"k8s-app":"kube-dns", "pod-template-hash":"6f6b679f8f", "projectcalico.org/namespace":"kube-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"coredns"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"cf6711a26f93547fe1c866391060f7f666dc9fd30bf982ada1bbff3c596e5d6b", Pod:"coredns-6f6b679f8f-fkzq6", Endpoint:"eth0", ServiceAccountName:"coredns", IPNetworks:[]string{"192.168.88.132/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.kube-system", "ksa.kube-system.coredns"}, InterfaceName:"caliebe0a51f26e", MAC:"4e:c0:cb:c5:aa:a6", Ports:[]v3.WorkloadEndpointPort{v3.WorkloadEndpointPort{Name:"dns", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"UDP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"dns-tcp", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"metrics", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x23c1, HostPort:0x0, HostIP:""}}, AllowSpoofedSourcePrefixes:[]string(nil)}} Mar 17 18:28:21.421429 env[1216]: 2025-03-17 18:28:21.419 [INFO][3595] cni-plugin/k8s.go 500: Wrote updated endpoint to datastore ContainerID="cf6711a26f93547fe1c866391060f7f666dc9fd30bf982ada1bbff3c596e5d6b" Namespace="kube-system" Pod="coredns-6f6b679f8f-fkzq6" WorkloadEndpoint="localhost-k8s-coredns--6f6b679f8f--fkzq6-eth0" Mar 17 18:28:21.432798 env[1216]: time="2025-03-17T18:28:21.432708891Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Mar 17 18:28:21.432798 env[1216]: time="2025-03-17T18:28:21.432787575Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Mar 17 18:28:21.432926 env[1216]: time="2025-03-17T18:28:21.432814097Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Mar 17 18:28:21.433052 env[1216]: time="2025-03-17T18:28:21.433016950Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/cf6711a26f93547fe1c866391060f7f666dc9fd30bf982ada1bbff3c596e5d6b pid=3806 runtime=io.containerd.runc.v2 Mar 17 18:28:21.433975 env[1216]: time="2025-03-17T18:28:21.433935326Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:csi-node-driver-2brpt,Uid:89bbd71b-c404-4c0b-b107-937675df3164,Namespace:calico-system,Attempt:1,} returns sandbox id \"d6966a7e79563338d5eb4c2d384219225a1d3f028896cec0d7f576a8a0525117\"" Mar 17 18:28:21.445480 systemd[1]: Started cri-containerd-cf6711a26f93547fe1c866391060f7f666dc9fd30bf982ada1bbff3c596e5d6b.scope. Mar 17 18:28:21.470000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:28:21.470000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:28:21.470000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:28:21.470000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:28:21.470000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:28:21.470000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:28:21.470000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:28:21.470000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:28:21.470000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:28:21.470000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:28:21.470000 audit: BPF prog-id=148 op=LOAD Mar 17 18:28:21.471000 audit[3815]: AVC avc: denied { bpf } for pid=3815 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:28:21.471000 audit[3815]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000115b38 a2=10 a3=0 items=0 ppid=3806 pid=3815 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:28:21.471000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6366363731316132366639333534376665316338363633393130363066 Mar 17 18:28:21.471000 audit[3815]: AVC avc: denied { perfmon } for pid=3815 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:28:21.471000 audit[3815]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001155a0 a2=3c a3=0 items=0 ppid=3806 pid=3815 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:28:21.471000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6366363731316132366639333534376665316338363633393130363066 Mar 17 18:28:21.471000 audit[3815]: AVC avc: denied { bpf } for pid=3815 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:28:21.471000 audit[3815]: AVC avc: denied { bpf } for pid=3815 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:28:21.471000 audit[3815]: AVC avc: denied { bpf } for pid=3815 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:28:21.471000 audit[3815]: AVC avc: denied { perfmon } for pid=3815 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:28:21.471000 audit[3815]: AVC avc: denied { perfmon } for pid=3815 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:28:21.471000 audit[3815]: AVC avc: denied { perfmon } for pid=3815 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:28:21.471000 audit[3815]: AVC avc: denied { perfmon } for pid=3815 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:28:21.471000 audit[3815]: AVC avc: denied { perfmon } for pid=3815 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:28:21.471000 audit[3815]: AVC avc: denied { bpf } for pid=3815 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:28:21.471000 audit[3815]: AVC avc: denied { bpf } for pid=3815 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:28:21.471000 audit: BPF prog-id=149 op=LOAD Mar 17 18:28:21.471000 audit[3815]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001158e0 a2=78 a3=0 items=0 ppid=3806 pid=3815 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:28:21.471000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6366363731316132366639333534376665316338363633393130363066 Mar 17 18:28:21.471000 audit[3815]: AVC avc: denied { bpf } for pid=3815 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:28:21.471000 audit[3815]: AVC avc: denied { bpf } for pid=3815 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:28:21.471000 audit[3815]: AVC avc: denied { perfmon } for pid=3815 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:28:21.471000 audit[3815]: AVC avc: denied { perfmon } for pid=3815 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:28:21.471000 audit[3815]: AVC avc: denied { perfmon } for pid=3815 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:28:21.471000 audit[3815]: AVC avc: denied { perfmon } for pid=3815 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:28:21.471000 audit[3815]: AVC avc: denied { perfmon } for pid=3815 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:28:21.471000 audit[3815]: AVC avc: denied { bpf } for pid=3815 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:28:21.471000 audit[3815]: AVC avc: denied { bpf } for pid=3815 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:28:21.471000 audit: BPF prog-id=150 op=LOAD Mar 17 18:28:21.471000 audit[3815]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000115670 a2=78 a3=0 items=0 ppid=3806 pid=3815 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:28:21.471000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6366363731316132366639333534376665316338363633393130363066 Mar 17 18:28:21.471000 audit: BPF prog-id=150 op=UNLOAD Mar 17 18:28:21.471000 audit: BPF prog-id=149 op=UNLOAD Mar 17 18:28:21.471000 audit[3815]: AVC avc: denied { bpf } for pid=3815 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:28:21.471000 audit[3815]: AVC avc: denied { bpf } for pid=3815 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:28:21.471000 audit[3815]: AVC avc: denied { bpf } for pid=3815 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:28:21.471000 audit[3815]: AVC avc: denied { perfmon } for pid=3815 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:28:21.471000 audit[3815]: AVC avc: denied { perfmon } for pid=3815 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:28:21.471000 audit[3815]: AVC avc: denied { perfmon } for pid=3815 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:28:21.471000 audit[3815]: AVC avc: denied { perfmon } for pid=3815 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:28:21.471000 audit[3815]: AVC avc: denied { perfmon } for pid=3815 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:28:21.471000 audit[3815]: AVC avc: denied { bpf } for pid=3815 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:28:21.471000 audit[3815]: AVC avc: denied { bpf } for pid=3815 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:28:21.471000 audit: BPF prog-id=151 op=LOAD Mar 17 18:28:21.471000 audit[3815]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000115b40 a2=78 a3=0 items=0 ppid=3806 pid=3815 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:28:21.471000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6366363731316132366639333534376665316338363633393130363066 Mar 17 18:28:21.472875 systemd-resolved[1155]: Failed to determine the local hostname and LLMNR/mDNS names, ignoring: No such device or address Mar 17 18:28:21.489696 env[1216]: time="2025-03-17T18:28:21.489661803Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:coredns-6f6b679f8f-fkzq6,Uid:701122a6-4262-4c31-b9ac-c3483ca8c88f,Namespace:kube-system,Attempt:1,} returns sandbox id \"cf6711a26f93547fe1c866391060f7f666dc9fd30bf982ada1bbff3c596e5d6b\"" Mar 17 18:28:21.490613 kubelet[1962]: E0317 18:28:21.490435 1962 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Mar 17 18:28:21.494698 env[1216]: time="2025-03-17T18:28:21.494657631Z" level=info msg="CreateContainer within sandbox \"cf6711a26f93547fe1c866391060f7f666dc9fd30bf982ada1bbff3c596e5d6b\" for container &ContainerMetadata{Name:coredns,Attempt:0,}" Mar 17 18:28:21.505935 env[1216]: time="2025-03-17T18:28:21.505894165Z" level=info msg="CreateContainer within sandbox \"cf6711a26f93547fe1c866391060f7f666dc9fd30bf982ada1bbff3c596e5d6b\" for &ContainerMetadata{Name:coredns,Attempt:0,} returns container id \"e37d7b365ecb48fc40ead39884a63c3e0d57c591c7558902415d19bb3319fd90\"" Mar 17 18:28:21.506534 env[1216]: time="2025-03-17T18:28:21.506502602Z" level=info msg="StartContainer for \"e37d7b365ecb48fc40ead39884a63c3e0d57c591c7558902415d19bb3319fd90\"" Mar 17 18:28:21.519706 systemd[1]: Started cri-containerd-e37d7b365ecb48fc40ead39884a63c3e0d57c591c7558902415d19bb3319fd90.scope. Mar 17 18:28:21.544000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:28:21.544000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:28:21.544000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:28:21.544000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:28:21.544000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:28:21.544000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:28:21.544000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:28:21.544000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:28:21.544000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:28:21.545000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:28:21.545000 audit: BPF prog-id=152 op=LOAD Mar 17 18:28:21.545000 audit[3846]: AVC avc: denied { bpf } for pid=3846 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:28:21.545000 audit[3846]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=40001bdb38 a2=10 a3=0 items=0 ppid=3806 pid=3846 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:28:21.545000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6533376437623336356563623438666334306561643339383834613633 Mar 17 18:28:21.545000 audit[3846]: AVC avc: denied { perfmon } for pid=3846 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:28:21.545000 audit[3846]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001bd5a0 a2=3c a3=0 items=0 ppid=3806 pid=3846 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:28:21.545000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6533376437623336356563623438666334306561643339383834613633 Mar 17 18:28:21.545000 audit[3846]: AVC avc: denied { bpf } for pid=3846 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:28:21.545000 audit[3846]: AVC avc: denied { bpf } for pid=3846 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:28:21.545000 audit[3846]: AVC avc: denied { bpf } for pid=3846 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:28:21.545000 audit[3846]: AVC avc: denied { perfmon } for pid=3846 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:28:21.545000 audit[3846]: AVC avc: denied { perfmon } for pid=3846 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:28:21.545000 audit[3846]: AVC avc: denied { perfmon } for pid=3846 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:28:21.545000 audit[3846]: AVC avc: denied { perfmon } for pid=3846 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:28:21.545000 audit[3846]: AVC avc: denied { perfmon } for pid=3846 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:28:21.545000 audit[3846]: AVC avc: denied { bpf } for pid=3846 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:28:21.545000 audit[3846]: AVC avc: denied { bpf } for pid=3846 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:28:21.545000 audit: BPF prog-id=153 op=LOAD Mar 17 18:28:21.545000 audit[3846]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001bd8e0 a2=78 a3=0 items=0 ppid=3806 pid=3846 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:28:21.545000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6533376437623336356563623438666334306561643339383834613633 Mar 17 18:28:21.545000 audit[3846]: AVC avc: denied { bpf } for pid=3846 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:28:21.545000 audit[3846]: AVC avc: denied { bpf } for pid=3846 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:28:21.545000 audit[3846]: AVC avc: denied { perfmon } for pid=3846 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:28:21.545000 audit[3846]: AVC avc: denied { perfmon } for pid=3846 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:28:21.545000 audit[3846]: AVC avc: denied { perfmon } for pid=3846 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:28:21.545000 audit[3846]: AVC avc: denied { perfmon } for pid=3846 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:28:21.545000 audit[3846]: AVC avc: denied { perfmon } for pid=3846 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:28:21.545000 audit[3846]: AVC avc: denied { bpf } for pid=3846 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:28:21.545000 audit[3846]: AVC avc: denied { bpf } for pid=3846 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:28:21.545000 audit: BPF prog-id=154 op=LOAD Mar 17 18:28:21.545000 audit[3846]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=40001bd670 a2=78 a3=0 items=0 ppid=3806 pid=3846 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:28:21.545000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6533376437623336356563623438666334306561643339383834613633 Mar 17 18:28:21.545000 audit: BPF prog-id=154 op=UNLOAD Mar 17 18:28:21.545000 audit: BPF prog-id=153 op=UNLOAD Mar 17 18:28:21.545000 audit[3846]: AVC avc: denied { bpf } for pid=3846 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:28:21.545000 audit[3846]: AVC avc: denied { bpf } for pid=3846 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:28:21.545000 audit[3846]: AVC avc: denied { bpf } for pid=3846 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:28:21.545000 audit[3846]: AVC avc: denied { perfmon } for pid=3846 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:28:21.545000 audit[3846]: AVC avc: denied { perfmon } for pid=3846 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:28:21.545000 audit[3846]: AVC avc: denied { perfmon } for pid=3846 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:28:21.545000 audit[3846]: AVC avc: denied { perfmon } for pid=3846 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:28:21.545000 audit[3846]: AVC avc: denied { perfmon } for pid=3846 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:28:21.545000 audit[3846]: AVC avc: denied { bpf } for pid=3846 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:28:21.545000 audit[3846]: AVC avc: denied { bpf } for pid=3846 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:28:21.545000 audit: BPF prog-id=155 op=LOAD Mar 17 18:28:21.545000 audit[3846]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001bdb40 a2=78 a3=0 items=0 ppid=3806 pid=3846 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:28:21.545000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6533376437623336356563623438666334306561643339383834613633 Mar 17 18:28:21.561560 env[1216]: time="2025-03-17T18:28:21.561520715Z" level=info msg="StartContainer for \"e37d7b365ecb48fc40ead39884a63c3e0d57c591c7558902415d19bb3319fd90\" returns successfully" Mar 17 18:28:21.860542 env[1216]: time="2025-03-17T18:28:21.860442352Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/kube-controllers:v3.29.1,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Mar 17 18:28:21.865525 env[1216]: time="2025-03-17T18:28:21.865488344Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:32c335fdb9d757e7ba6a76a9cfa8d292a5a229101ae7ea37b42f53c28adf2db1,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Mar 17 18:28:21.866904 env[1216]: time="2025-03-17T18:28:21.866870709Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/kube-controllers:v3.29.1,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Mar 17 18:28:21.868265 env[1216]: time="2025-03-17T18:28:21.868236113Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/kube-controllers@sha256:1072d6a98167a14ca361e9ce757733f9bae36d1f1c6a9621ea10934b6b1e10d9,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Mar 17 18:28:21.869199 env[1216]: time="2025-03-17T18:28:21.869169771Z" level=info msg="StopPodSandbox for \"0524b4acf1ec082d67914ee78ca0f736df7532e8ab6013f34ab43ac23d219f01\"" Mar 17 18:28:21.869600 env[1216]: time="2025-03-17T18:28:21.869188012Z" level=info msg="StopPodSandbox for \"fa5551db9702a4adfa64e435cfdf70e40a3076d4d0a89d993024a38a57de183f\"" Mar 17 18:28:21.869927 env[1216]: time="2025-03-17T18:28:21.869883255Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/kube-controllers:v3.29.1\" returns image reference \"sha256:32c335fdb9d757e7ba6a76a9cfa8d292a5a229101ae7ea37b42f53c28adf2db1\"" Mar 17 18:28:21.873457 env[1216]: time="2025-03-17T18:28:21.873414113Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/apiserver:v3.29.1\"" Mar 17 18:28:21.884335 env[1216]: time="2025-03-17T18:28:21.884295864Z" level=info msg="CreateContainer within sandbox \"1252cfc4aed618c012d1d0148514744fc39d7ccd6a6a06181adb6b4b1e034e3e\" for container &ContainerMetadata{Name:calico-kube-controllers,Attempt:0,}" Mar 17 18:28:21.897692 env[1216]: time="2025-03-17T18:28:21.897639087Z" level=info msg="CreateContainer within sandbox \"1252cfc4aed618c012d1d0148514744fc39d7ccd6a6a06181adb6b4b1e034e3e\" for &ContainerMetadata{Name:calico-kube-controllers,Attempt:0,} returns container id \"f1c25857df1cd91bbe15c911f7397f1e6c12045917decc7c47be175c06ed69a7\"" Mar 17 18:28:21.901087 env[1216]: time="2025-03-17T18:28:21.901052817Z" level=info msg="StartContainer for \"f1c25857df1cd91bbe15c911f7397f1e6c12045917decc7c47be175c06ed69a7\"" Mar 17 18:28:21.923778 systemd[1]: Started cri-containerd-f1c25857df1cd91bbe15c911f7397f1e6c12045917decc7c47be175c06ed69a7.scope. Mar 17 18:28:21.960000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:28:21.960000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:28:21.960000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:28:21.960000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:28:21.960000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:28:21.960000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:28:21.960000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:28:21.960000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:28:21.960000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:28:21.960000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:28:21.960000 audit: BPF prog-id=156 op=LOAD Mar 17 18:28:21.960000 audit[3937]: AVC avc: denied { bpf } for pid=3937 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:28:21.960000 audit[3937]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000145b38 a2=10 a3=0 items=0 ppid=3417 pid=3937 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:28:21.960000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6631633235383537646631636439316262653135633931316637333937 Mar 17 18:28:21.960000 audit[3937]: AVC avc: denied { perfmon } for pid=3937 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:28:21.960000 audit[3937]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001455a0 a2=3c a3=0 items=0 ppid=3417 pid=3937 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:28:21.960000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6631633235383537646631636439316262653135633931316637333937 Mar 17 18:28:21.960000 audit[3937]: AVC avc: denied { bpf } for pid=3937 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:28:21.960000 audit[3937]: AVC avc: denied { bpf } for pid=3937 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:28:21.960000 audit[3937]: AVC avc: denied { bpf } for pid=3937 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:28:21.960000 audit[3937]: AVC avc: denied { perfmon } for pid=3937 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:28:21.960000 audit[3937]: AVC avc: denied { perfmon } for pid=3937 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:28:21.960000 audit[3937]: AVC avc: denied { perfmon } for pid=3937 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:28:21.960000 audit[3937]: AVC avc: denied { perfmon } for pid=3937 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:28:21.960000 audit[3937]: AVC avc: denied { perfmon } for pid=3937 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:28:21.960000 audit[3937]: AVC avc: denied { bpf } for pid=3937 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:28:21.960000 audit[3937]: AVC avc: denied { bpf } for pid=3937 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:28:21.960000 audit: BPF prog-id=157 op=LOAD Mar 17 18:28:21.960000 audit[3937]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001458e0 a2=78 a3=0 items=0 ppid=3417 pid=3937 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:28:21.960000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6631633235383537646631636439316262653135633931316637333937 Mar 17 18:28:21.961000 audit[3937]: AVC avc: denied { bpf } for pid=3937 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:28:21.961000 audit[3937]: AVC avc: denied { bpf } for pid=3937 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:28:21.961000 audit[3937]: AVC avc: denied { perfmon } for pid=3937 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:28:21.961000 audit[3937]: AVC avc: denied { perfmon } for pid=3937 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:28:21.961000 audit[3937]: AVC avc: denied { perfmon } for pid=3937 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:28:21.961000 audit[3937]: AVC avc: denied { perfmon } for pid=3937 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:28:21.961000 audit[3937]: AVC avc: denied { perfmon } for pid=3937 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:28:21.961000 audit[3937]: AVC avc: denied { bpf } for pid=3937 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:28:21.961000 audit[3937]: AVC avc: denied { bpf } for pid=3937 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:28:21.961000 audit: BPF prog-id=158 op=LOAD Mar 17 18:28:21.961000 audit[3937]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000145670 a2=78 a3=0 items=0 ppid=3417 pid=3937 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:28:21.961000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6631633235383537646631636439316262653135633931316637333937 Mar 17 18:28:21.961000 audit: BPF prog-id=158 op=UNLOAD Mar 17 18:28:21.961000 audit: BPF prog-id=157 op=UNLOAD Mar 17 18:28:21.961000 audit[3937]: AVC avc: denied { bpf } for pid=3937 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:28:21.961000 audit[3937]: AVC avc: denied { bpf } for pid=3937 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:28:21.961000 audit[3937]: AVC avc: denied { bpf } for pid=3937 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:28:21.961000 audit[3937]: AVC avc: denied { perfmon } for pid=3937 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:28:21.961000 audit[3937]: AVC avc: denied { perfmon } for pid=3937 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:28:21.961000 audit[3937]: AVC avc: denied { perfmon } for pid=3937 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:28:21.961000 audit[3937]: AVC avc: denied { perfmon } for pid=3937 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:28:21.961000 audit[3937]: AVC avc: denied { perfmon } for pid=3937 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:28:21.961000 audit[3937]: AVC avc: denied { bpf } for pid=3937 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:28:21.961000 audit[3937]: AVC avc: denied { bpf } for pid=3937 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:28:21.961000 audit: BPF prog-id=159 op=LOAD Mar 17 18:28:21.961000 audit[3937]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000145b40 a2=78 a3=0 items=0 ppid=3417 pid=3937 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:28:21.961000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6631633235383537646631636439316262653135633931316637333937 Mar 17 18:28:21.974636 kubelet[1962]: E0317 18:28:21.973961 1962 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Mar 17 18:28:22.000883 env[1216]: 2025-03-17 18:28:21.941 [INFO][3915] cni-plugin/k8s.go 608: Cleaning up netns ContainerID="0524b4acf1ec082d67914ee78ca0f736df7532e8ab6013f34ab43ac23d219f01" Mar 17 18:28:22.000883 env[1216]: 2025-03-17 18:28:21.941 [INFO][3915] cni-plugin/dataplane_linux.go 559: Deleting workload's device in netns. ContainerID="0524b4acf1ec082d67914ee78ca0f736df7532e8ab6013f34ab43ac23d219f01" iface="eth0" netns="/var/run/netns/cni-8151eb74-de96-c3ca-9f94-29af5b4fdd37" Mar 17 18:28:22.000883 env[1216]: 2025-03-17 18:28:21.941 [INFO][3915] cni-plugin/dataplane_linux.go 570: Entered netns, deleting veth. ContainerID="0524b4acf1ec082d67914ee78ca0f736df7532e8ab6013f34ab43ac23d219f01" iface="eth0" netns="/var/run/netns/cni-8151eb74-de96-c3ca-9f94-29af5b4fdd37" Mar 17 18:28:22.000883 env[1216]: 2025-03-17 18:28:21.941 [INFO][3915] cni-plugin/dataplane_linux.go 597: Workload's veth was already gone. Nothing to do. ContainerID="0524b4acf1ec082d67914ee78ca0f736df7532e8ab6013f34ab43ac23d219f01" iface="eth0" netns="/var/run/netns/cni-8151eb74-de96-c3ca-9f94-29af5b4fdd37" Mar 17 18:28:22.000883 env[1216]: 2025-03-17 18:28:21.941 [INFO][3915] cni-plugin/k8s.go 615: Releasing IP address(es) ContainerID="0524b4acf1ec082d67914ee78ca0f736df7532e8ab6013f34ab43ac23d219f01" Mar 17 18:28:22.000883 env[1216]: 2025-03-17 18:28:21.941 [INFO][3915] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="0524b4acf1ec082d67914ee78ca0f736df7532e8ab6013f34ab43ac23d219f01" Mar 17 18:28:22.000883 env[1216]: 2025-03-17 18:28:21.967 [INFO][3950] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="0524b4acf1ec082d67914ee78ca0f736df7532e8ab6013f34ab43ac23d219f01" HandleID="k8s-pod-network.0524b4acf1ec082d67914ee78ca0f736df7532e8ab6013f34ab43ac23d219f01" Workload="localhost-k8s-coredns--6f6b679f8f--b9nsl-eth0" Mar 17 18:28:22.000883 env[1216]: 2025-03-17 18:28:21.968 [INFO][3950] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Mar 17 18:28:22.000883 env[1216]: 2025-03-17 18:28:21.968 [INFO][3950] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Mar 17 18:28:22.000883 env[1216]: 2025-03-17 18:28:21.978 [WARNING][3950] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="0524b4acf1ec082d67914ee78ca0f736df7532e8ab6013f34ab43ac23d219f01" HandleID="k8s-pod-network.0524b4acf1ec082d67914ee78ca0f736df7532e8ab6013f34ab43ac23d219f01" Workload="localhost-k8s-coredns--6f6b679f8f--b9nsl-eth0" Mar 17 18:28:22.000883 env[1216]: 2025-03-17 18:28:21.978 [INFO][3950] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="0524b4acf1ec082d67914ee78ca0f736df7532e8ab6013f34ab43ac23d219f01" HandleID="k8s-pod-network.0524b4acf1ec082d67914ee78ca0f736df7532e8ab6013f34ab43ac23d219f01" Workload="localhost-k8s-coredns--6f6b679f8f--b9nsl-eth0" Mar 17 18:28:22.000883 env[1216]: 2025-03-17 18:28:21.987 [INFO][3950] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Mar 17 18:28:22.000883 env[1216]: 2025-03-17 18:28:21.993 [INFO][3915] cni-plugin/k8s.go 621: Teardown processing complete. ContainerID="0524b4acf1ec082d67914ee78ca0f736df7532e8ab6013f34ab43ac23d219f01" Mar 17 18:28:22.000883 env[1216]: time="2025-03-17T18:28:21.998896852Z" level=info msg="TearDown network for sandbox \"0524b4acf1ec082d67914ee78ca0f736df7532e8ab6013f34ab43ac23d219f01\" successfully" Mar 17 18:28:22.000883 env[1216]: time="2025-03-17T18:28:21.998934534Z" level=info msg="StopPodSandbox for \"0524b4acf1ec082d67914ee78ca0f736df7532e8ab6013f34ab43ac23d219f01\" returns successfully" Mar 17 18:28:22.000883 env[1216]: time="2025-03-17T18:28:21.999852191Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:coredns-6f6b679f8f-b9nsl,Uid:20480c0c-aba3-48d5-8372-dcc5d0a137a4,Namespace:kube-system,Attempt:1,}" Mar 17 18:28:22.001423 kubelet[1962]: E0317 18:28:21.999177 1962 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Mar 17 18:28:22.016058 kubelet[1962]: I0317 18:28:22.014244 1962 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="kube-system/coredns-6f6b679f8f-fkzq6" podStartSLOduration=31.014220494 podStartE2EDuration="31.014220494s" podCreationTimestamp="2025-03-17 18:27:51 +0000 UTC" firstStartedPulling="0001-01-01 00:00:00 +0000 UTC" lastFinishedPulling="0001-01-01 00:00:00 +0000 UTC" observedRunningTime="2025-03-17 18:28:21.986448284 +0000 UTC m=+37.212753665" watchObservedRunningTime="2025-03-17 18:28:22.014220494 +0000 UTC m=+37.240525875" Mar 17 18:28:22.021730 env[1216]: time="2025-03-17T18:28:22.021689421Z" level=info msg="StartContainer for \"f1c25857df1cd91bbe15c911f7397f1e6c12045917decc7c47be175c06ed69a7\" returns successfully" Mar 17 18:28:22.032931 env[1216]: 2025-03-17 18:28:21.949 [INFO][3917] cni-plugin/k8s.go 608: Cleaning up netns ContainerID="fa5551db9702a4adfa64e435cfdf70e40a3076d4d0a89d993024a38a57de183f" Mar 17 18:28:22.032931 env[1216]: 2025-03-17 18:28:21.950 [INFO][3917] cni-plugin/dataplane_linux.go 559: Deleting workload's device in netns. ContainerID="fa5551db9702a4adfa64e435cfdf70e40a3076d4d0a89d993024a38a57de183f" iface="eth0" netns="/var/run/netns/cni-59ab958d-2a99-2686-6cdd-931b34a8c463" Mar 17 18:28:22.032931 env[1216]: 2025-03-17 18:28:21.951 [INFO][3917] cni-plugin/dataplane_linux.go 570: Entered netns, deleting veth. ContainerID="fa5551db9702a4adfa64e435cfdf70e40a3076d4d0a89d993024a38a57de183f" iface="eth0" netns="/var/run/netns/cni-59ab958d-2a99-2686-6cdd-931b34a8c463" Mar 17 18:28:22.032931 env[1216]: 2025-03-17 18:28:21.951 [INFO][3917] cni-plugin/dataplane_linux.go 597: Workload's veth was already gone. Nothing to do. ContainerID="fa5551db9702a4adfa64e435cfdf70e40a3076d4d0a89d993024a38a57de183f" iface="eth0" netns="/var/run/netns/cni-59ab958d-2a99-2686-6cdd-931b34a8c463" Mar 17 18:28:22.032931 env[1216]: 2025-03-17 18:28:21.951 [INFO][3917] cni-plugin/k8s.go 615: Releasing IP address(es) ContainerID="fa5551db9702a4adfa64e435cfdf70e40a3076d4d0a89d993024a38a57de183f" Mar 17 18:28:22.032931 env[1216]: 2025-03-17 18:28:21.951 [INFO][3917] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="fa5551db9702a4adfa64e435cfdf70e40a3076d4d0a89d993024a38a57de183f" Mar 17 18:28:22.032931 env[1216]: 2025-03-17 18:28:22.004 [INFO][3961] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="fa5551db9702a4adfa64e435cfdf70e40a3076d4d0a89d993024a38a57de183f" HandleID="k8s-pod-network.fa5551db9702a4adfa64e435cfdf70e40a3076d4d0a89d993024a38a57de183f" Workload="localhost-k8s-calico--apiserver--66cb7fb7dc--vzzfc-eth0" Mar 17 18:28:22.032931 env[1216]: 2025-03-17 18:28:22.004 [INFO][3961] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Mar 17 18:28:22.032931 env[1216]: 2025-03-17 18:28:22.004 [INFO][3961] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Mar 17 18:28:22.032931 env[1216]: 2025-03-17 18:28:22.020 [WARNING][3961] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="fa5551db9702a4adfa64e435cfdf70e40a3076d4d0a89d993024a38a57de183f" HandleID="k8s-pod-network.fa5551db9702a4adfa64e435cfdf70e40a3076d4d0a89d993024a38a57de183f" Workload="localhost-k8s-calico--apiserver--66cb7fb7dc--vzzfc-eth0" Mar 17 18:28:22.032931 env[1216]: 2025-03-17 18:28:22.020 [INFO][3961] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="fa5551db9702a4adfa64e435cfdf70e40a3076d4d0a89d993024a38a57de183f" HandleID="k8s-pod-network.fa5551db9702a4adfa64e435cfdf70e40a3076d4d0a89d993024a38a57de183f" Workload="localhost-k8s-calico--apiserver--66cb7fb7dc--vzzfc-eth0" Mar 17 18:28:22.032931 env[1216]: 2025-03-17 18:28:22.026 [INFO][3961] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Mar 17 18:28:22.032931 env[1216]: 2025-03-17 18:28:22.029 [INFO][3917] cni-plugin/k8s.go 621: Teardown processing complete. ContainerID="fa5551db9702a4adfa64e435cfdf70e40a3076d4d0a89d993024a38a57de183f" Mar 17 18:28:22.033364 env[1216]: time="2025-03-17T18:28:22.033110426Z" level=info msg="TearDown network for sandbox \"fa5551db9702a4adfa64e435cfdf70e40a3076d4d0a89d993024a38a57de183f\" successfully" Mar 17 18:28:22.033364 env[1216]: time="2025-03-17T18:28:22.033139147Z" level=info msg="StopPodSandbox for \"fa5551db9702a4adfa64e435cfdf70e40a3076d4d0a89d993024a38a57de183f\" returns successfully" Mar 17 18:28:22.033807 env[1216]: time="2025-03-17T18:28:22.033764025Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-apiserver-66cb7fb7dc-vzzfc,Uid:2583581b-be32-4ea5-876e-18fe9067e955,Namespace:calico-apiserver,Attempt:1,}" Mar 17 18:28:22.055000 audit[3992]: NETFILTER_CFG table=filter:95 family=2 entries=18 op=nft_register_rule pid=3992 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Mar 17 18:28:22.055000 audit[3992]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=6736 a0=3 a1=ffffc288e340 a2=0 a3=1 items=0 ppid=2108 pid=3992 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:28:22.055000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Mar 17 18:28:22.062000 audit[3992]: NETFILTER_CFG table=nat:96 family=2 entries=12 op=nft_register_rule pid=3992 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Mar 17 18:28:22.062000 audit[3992]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=2700 a0=3 a1=ffffc288e340 a2=0 a3=1 items=0 ppid=2108 pid=3992 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:28:22.062000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Mar 17 18:28:22.080000 audit[4013]: NETFILTER_CFG table=filter:97 family=2 entries=15 op=nft_register_rule pid=4013 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Mar 17 18:28:22.080000 audit[4013]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=4504 a0=3 a1=fffffe65b240 a2=0 a3=1 items=0 ppid=2108 pid=4013 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:28:22.080000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Mar 17 18:28:22.088000 audit[4013]: NETFILTER_CFG table=nat:98 family=2 entries=33 op=nft_register_chain pid=4013 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Mar 17 18:28:22.088000 audit[4013]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=13428 a0=3 a1=fffffe65b240 a2=0 a3=1 items=0 ppid=2108 pid=4013 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:28:22.088000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Mar 17 18:28:22.139696 systemd[1]: run-netns-cni\x2d8151eb74\x2dde96\x2dc3ca\x2d9f94\x2d29af5b4fdd37.mount: Deactivated successfully. Mar 17 18:28:22.139782 systemd[1]: run-netns-cni\x2d59ab958d\x2d2a99\x2d2686\x2d6cdd\x2d931b34a8c463.mount: Deactivated successfully. Mar 17 18:28:22.183113 systemd-networkd[1043]: cali3091a806a31: Link UP Mar 17 18:28:22.184902 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): cali3091a806a31: link becomes ready Mar 17 18:28:22.185054 systemd-networkd[1043]: cali3091a806a31: Gained carrier Mar 17 18:28:22.198138 env[1216]: 2025-03-17 18:28:22.067 [INFO][3980] cni-plugin/utils.go 100: File /var/lib/calico/mtu does not exist Mar 17 18:28:22.198138 env[1216]: 2025-03-17 18:28:22.089 [INFO][3980] cni-plugin/plugin.go 325: Calico CNI found existing endpoint: &{{WorkloadEndpoint projectcalico.org/v3} {localhost-k8s-coredns--6f6b679f8f--b9nsl-eth0 coredns-6f6b679f8f- kube-system 20480c0c-aba3-48d5-8372-dcc5d0a137a4 890 0 2025-03-17 18:27:51 +0000 UTC map[k8s-app:kube-dns pod-template-hash:6f6b679f8f projectcalico.org/namespace:kube-system projectcalico.org/orchestrator:k8s projectcalico.org/serviceaccount:coredns] map[] [] [] []} {k8s localhost coredns-6f6b679f8f-b9nsl eth0 coredns [] [] [kns.kube-system ksa.kube-system.coredns] cali3091a806a31 [{dns UDP 53 0 } {dns-tcp TCP 53 0 } {metrics TCP 9153 0 }] []}} ContainerID="677b54ac22f77aa4a32642dbea707d1aad59439f866f195977796f1842dcffa0" Namespace="kube-system" Pod="coredns-6f6b679f8f-b9nsl" WorkloadEndpoint="localhost-k8s-coredns--6f6b679f8f--b9nsl-" Mar 17 18:28:22.198138 env[1216]: 2025-03-17 18:28:22.090 [INFO][3980] cni-plugin/k8s.go 77: Extracted identifiers for CmdAddK8s ContainerID="677b54ac22f77aa4a32642dbea707d1aad59439f866f195977796f1842dcffa0" Namespace="kube-system" Pod="coredns-6f6b679f8f-b9nsl" WorkloadEndpoint="localhost-k8s-coredns--6f6b679f8f--b9nsl-eth0" Mar 17 18:28:22.198138 env[1216]: 2025-03-17 18:28:22.144 [INFO][4014] ipam/ipam_plugin.go 225: Calico CNI IPAM request count IPv4=1 IPv6=0 ContainerID="677b54ac22f77aa4a32642dbea707d1aad59439f866f195977796f1842dcffa0" HandleID="k8s-pod-network.677b54ac22f77aa4a32642dbea707d1aad59439f866f195977796f1842dcffa0" Workload="localhost-k8s-coredns--6f6b679f8f--b9nsl-eth0" Mar 17 18:28:22.198138 env[1216]: 2025-03-17 18:28:22.154 [INFO][4014] ipam/ipam_plugin.go 265: Auto assigning IP ContainerID="677b54ac22f77aa4a32642dbea707d1aad59439f866f195977796f1842dcffa0" HandleID="k8s-pod-network.677b54ac22f77aa4a32642dbea707d1aad59439f866f195977796f1842dcffa0" Workload="localhost-k8s-coredns--6f6b679f8f--b9nsl-eth0" assignArgs=ipam.AutoAssignArgs{Num4:1, Num6:0, HandleID:(*string)(0x400004d930), Attrs:map[string]string{"namespace":"kube-system", "node":"localhost", "pod":"coredns-6f6b679f8f-b9nsl", "timestamp":"2025-03-17 18:28:22.14432557 +0000 UTC"}, Hostname:"localhost", IPv4Pools:[]net.IPNet{}, IPv6Pools:[]net.IPNet{}, MaxBlocksPerHost:0, HostReservedAttrIPv4s:(*ipam.HostReservedAttr)(nil), HostReservedAttrIPv6s:(*ipam.HostReservedAttr)(nil), IntendedUse:"Workload"} Mar 17 18:28:22.198138 env[1216]: 2025-03-17 18:28:22.154 [INFO][4014] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Mar 17 18:28:22.198138 env[1216]: 2025-03-17 18:28:22.154 [INFO][4014] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Mar 17 18:28:22.198138 env[1216]: 2025-03-17 18:28:22.154 [INFO][4014] ipam/ipam.go 107: Auto-assign 1 ipv4, 0 ipv6 addrs for host 'localhost' Mar 17 18:28:22.198138 env[1216]: 2025-03-17 18:28:22.156 [INFO][4014] ipam/ipam.go 660: Looking up existing affinities for host handle="k8s-pod-network.677b54ac22f77aa4a32642dbea707d1aad59439f866f195977796f1842dcffa0" host="localhost" Mar 17 18:28:22.198138 env[1216]: 2025-03-17 18:28:22.160 [INFO][4014] ipam/ipam.go 372: Looking up existing affinities for host host="localhost" Mar 17 18:28:22.198138 env[1216]: 2025-03-17 18:28:22.163 [INFO][4014] ipam/ipam.go 489: Trying affinity for 192.168.88.128/26 host="localhost" Mar 17 18:28:22.198138 env[1216]: 2025-03-17 18:28:22.165 [INFO][4014] ipam/ipam.go 155: Attempting to load block cidr=192.168.88.128/26 host="localhost" Mar 17 18:28:22.198138 env[1216]: 2025-03-17 18:28:22.167 [INFO][4014] ipam/ipam.go 232: Affinity is confirmed and block has been loaded cidr=192.168.88.128/26 host="localhost" Mar 17 18:28:22.198138 env[1216]: 2025-03-17 18:28:22.167 [INFO][4014] ipam/ipam.go 1180: Attempting to assign 1 addresses from block block=192.168.88.128/26 handle="k8s-pod-network.677b54ac22f77aa4a32642dbea707d1aad59439f866f195977796f1842dcffa0" host="localhost" Mar 17 18:28:22.198138 env[1216]: 2025-03-17 18:28:22.168 [INFO][4014] ipam/ipam.go 1685: Creating new handle: k8s-pod-network.677b54ac22f77aa4a32642dbea707d1aad59439f866f195977796f1842dcffa0 Mar 17 18:28:22.198138 env[1216]: 2025-03-17 18:28:22.173 [INFO][4014] ipam/ipam.go 1203: Writing block in order to claim IPs block=192.168.88.128/26 handle="k8s-pod-network.677b54ac22f77aa4a32642dbea707d1aad59439f866f195977796f1842dcffa0" host="localhost" Mar 17 18:28:22.198138 env[1216]: 2025-03-17 18:28:22.178 [INFO][4014] ipam/ipam.go 1216: Successfully claimed IPs: [192.168.88.133/26] block=192.168.88.128/26 handle="k8s-pod-network.677b54ac22f77aa4a32642dbea707d1aad59439f866f195977796f1842dcffa0" host="localhost" Mar 17 18:28:22.198138 env[1216]: 2025-03-17 18:28:22.178 [INFO][4014] ipam/ipam.go 847: Auto-assigned 1 out of 1 IPv4s: [192.168.88.133/26] handle="k8s-pod-network.677b54ac22f77aa4a32642dbea707d1aad59439f866f195977796f1842dcffa0" host="localhost" Mar 17 18:28:22.198138 env[1216]: 2025-03-17 18:28:22.178 [INFO][4014] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Mar 17 18:28:22.198138 env[1216]: 2025-03-17 18:28:22.178 [INFO][4014] ipam/ipam_plugin.go 283: Calico CNI IPAM assigned addresses IPv4=[192.168.88.133/26] IPv6=[] ContainerID="677b54ac22f77aa4a32642dbea707d1aad59439f866f195977796f1842dcffa0" HandleID="k8s-pod-network.677b54ac22f77aa4a32642dbea707d1aad59439f866f195977796f1842dcffa0" Workload="localhost-k8s-coredns--6f6b679f8f--b9nsl-eth0" Mar 17 18:28:22.198686 env[1216]: 2025-03-17 18:28:22.181 [INFO][3980] cni-plugin/k8s.go 386: Populated endpoint ContainerID="677b54ac22f77aa4a32642dbea707d1aad59439f866f195977796f1842dcffa0" Namespace="kube-system" Pod="coredns-6f6b679f8f-b9nsl" WorkloadEndpoint="localhost-k8s-coredns--6f6b679f8f--b9nsl-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-coredns--6f6b679f8f--b9nsl-eth0", GenerateName:"coredns-6f6b679f8f-", Namespace:"kube-system", SelfLink:"", UID:"20480c0c-aba3-48d5-8372-dcc5d0a137a4", ResourceVersion:"890", Generation:0, CreationTimestamp:time.Date(2025, time.March, 17, 18, 27, 51, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"k8s-app":"kube-dns", "pod-template-hash":"6f6b679f8f", "projectcalico.org/namespace":"kube-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"coredns"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"", Pod:"coredns-6f6b679f8f-b9nsl", Endpoint:"eth0", ServiceAccountName:"coredns", IPNetworks:[]string{"192.168.88.133/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.kube-system", "ksa.kube-system.coredns"}, InterfaceName:"cali3091a806a31", MAC:"", Ports:[]v3.WorkloadEndpointPort{v3.WorkloadEndpointPort{Name:"dns", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"UDP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"dns-tcp", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"metrics", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x23c1, HostPort:0x0, HostIP:""}}, AllowSpoofedSourcePrefixes:[]string(nil)}} Mar 17 18:28:22.198686 env[1216]: 2025-03-17 18:28:22.181 [INFO][3980] cni-plugin/k8s.go 387: Calico CNI using IPs: [192.168.88.133/32] ContainerID="677b54ac22f77aa4a32642dbea707d1aad59439f866f195977796f1842dcffa0" Namespace="kube-system" Pod="coredns-6f6b679f8f-b9nsl" WorkloadEndpoint="localhost-k8s-coredns--6f6b679f8f--b9nsl-eth0" Mar 17 18:28:22.198686 env[1216]: 2025-03-17 18:28:22.181 [INFO][3980] cni-plugin/dataplane_linux.go 69: Setting the host side veth name to cali3091a806a31 ContainerID="677b54ac22f77aa4a32642dbea707d1aad59439f866f195977796f1842dcffa0" Namespace="kube-system" Pod="coredns-6f6b679f8f-b9nsl" WorkloadEndpoint="localhost-k8s-coredns--6f6b679f8f--b9nsl-eth0" Mar 17 18:28:22.198686 env[1216]: 2025-03-17 18:28:22.184 [INFO][3980] cni-plugin/dataplane_linux.go 508: Disabling IPv4 forwarding ContainerID="677b54ac22f77aa4a32642dbea707d1aad59439f866f195977796f1842dcffa0" Namespace="kube-system" Pod="coredns-6f6b679f8f-b9nsl" WorkloadEndpoint="localhost-k8s-coredns--6f6b679f8f--b9nsl-eth0" Mar 17 18:28:22.198686 env[1216]: 2025-03-17 18:28:22.187 [INFO][3980] cni-plugin/k8s.go 414: Added Mac, interface name, and active container ID to endpoint ContainerID="677b54ac22f77aa4a32642dbea707d1aad59439f866f195977796f1842dcffa0" Namespace="kube-system" Pod="coredns-6f6b679f8f-b9nsl" WorkloadEndpoint="localhost-k8s-coredns--6f6b679f8f--b9nsl-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-coredns--6f6b679f8f--b9nsl-eth0", GenerateName:"coredns-6f6b679f8f-", Namespace:"kube-system", SelfLink:"", UID:"20480c0c-aba3-48d5-8372-dcc5d0a137a4", ResourceVersion:"890", Generation:0, CreationTimestamp:time.Date(2025, time.March, 17, 18, 27, 51, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"k8s-app":"kube-dns", "pod-template-hash":"6f6b679f8f", "projectcalico.org/namespace":"kube-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"coredns"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"677b54ac22f77aa4a32642dbea707d1aad59439f866f195977796f1842dcffa0", Pod:"coredns-6f6b679f8f-b9nsl", Endpoint:"eth0", ServiceAccountName:"coredns", IPNetworks:[]string{"192.168.88.133/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.kube-system", "ksa.kube-system.coredns"}, InterfaceName:"cali3091a806a31", MAC:"ca:86:d3:8b:1d:b8", Ports:[]v3.WorkloadEndpointPort{v3.WorkloadEndpointPort{Name:"dns", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"UDP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"dns-tcp", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"metrics", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x23c1, HostPort:0x0, HostIP:""}}, AllowSpoofedSourcePrefixes:[]string(nil)}} Mar 17 18:28:22.198686 env[1216]: 2025-03-17 18:28:22.196 [INFO][3980] cni-plugin/k8s.go 500: Wrote updated endpoint to datastore ContainerID="677b54ac22f77aa4a32642dbea707d1aad59439f866f195977796f1842dcffa0" Namespace="kube-system" Pod="coredns-6f6b679f8f-b9nsl" WorkloadEndpoint="localhost-k8s-coredns--6f6b679f8f--b9nsl-eth0" Mar 17 18:28:22.209228 env[1216]: time="2025-03-17T18:28:22.209139494Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Mar 17 18:28:22.209228 env[1216]: time="2025-03-17T18:28:22.209224579Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Mar 17 18:28:22.209340 env[1216]: time="2025-03-17T18:28:22.209251341Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Mar 17 18:28:22.209471 env[1216]: time="2025-03-17T18:28:22.209418271Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/677b54ac22f77aa4a32642dbea707d1aad59439f866f195977796f1842dcffa0 pid=4051 runtime=io.containerd.runc.v2 Mar 17 18:28:22.224291 systemd[1]: run-containerd-runc-k8s.io-677b54ac22f77aa4a32642dbea707d1aad59439f866f195977796f1842dcffa0-runc.odchFs.mount: Deactivated successfully. Mar 17 18:28:22.226067 systemd[1]: Started cri-containerd-677b54ac22f77aa4a32642dbea707d1aad59439f866f195977796f1842dcffa0.scope. Mar 17 18:28:22.270000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:28:22.270000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:28:22.270000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:28:22.270000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:28:22.270000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:28:22.270000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:28:22.270000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:28:22.270000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:28:22.270000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:28:22.270000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:28:22.270000 audit: BPF prog-id=160 op=LOAD Mar 17 18:28:22.271000 audit[4061]: AVC avc: denied { bpf } for pid=4061 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:28:22.271000 audit[4061]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000195b38 a2=10 a3=0 items=0 ppid=4051 pid=4061 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:28:22.271000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3637376235346163323266373761613461333236343264626561373037 Mar 17 18:28:22.271000 audit[4061]: AVC avc: denied { perfmon } for pid=4061 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:28:22.271000 audit[4061]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=0 a1=40001955a0 a2=3c a3=0 items=0 ppid=4051 pid=4061 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:28:22.271000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3637376235346163323266373761613461333236343264626561373037 Mar 17 18:28:22.271000 audit[4061]: AVC avc: denied { bpf } for pid=4061 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:28:22.271000 audit[4061]: AVC avc: denied { bpf } for pid=4061 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:28:22.271000 audit[4061]: AVC avc: denied { bpf } for pid=4061 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:28:22.271000 audit[4061]: AVC avc: denied { perfmon } for pid=4061 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:28:22.271000 audit[4061]: AVC avc: denied { perfmon } for pid=4061 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:28:22.271000 audit[4061]: AVC avc: denied { perfmon } for pid=4061 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:28:22.271000 audit[4061]: AVC avc: denied { perfmon } for pid=4061 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:28:22.271000 audit[4061]: AVC avc: denied { perfmon } for pid=4061 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:28:22.271000 audit[4061]: AVC avc: denied { bpf } for pid=4061 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:28:22.271000 audit[4061]: AVC avc: denied { bpf } for pid=4061 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:28:22.271000 audit: BPF prog-id=161 op=LOAD Mar 17 18:28:22.271000 audit[4061]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=5 a1=40001958e0 a2=78 a3=0 items=0 ppid=4051 pid=4061 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:28:22.271000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3637376235346163323266373761613461333236343264626561373037 Mar 17 18:28:22.271000 audit[4061]: AVC avc: denied { bpf } for pid=4061 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:28:22.271000 audit[4061]: AVC avc: denied { bpf } for pid=4061 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:28:22.271000 audit[4061]: AVC avc: denied { perfmon } for pid=4061 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:28:22.271000 audit[4061]: AVC avc: denied { perfmon } for pid=4061 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:28:22.271000 audit[4061]: AVC avc: denied { perfmon } for pid=4061 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:28:22.271000 audit[4061]: AVC avc: denied { perfmon } for pid=4061 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:28:22.271000 audit[4061]: AVC avc: denied { perfmon } for pid=4061 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:28:22.271000 audit[4061]: AVC avc: denied { bpf } for pid=4061 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:28:22.271000 audit[4061]: AVC avc: denied { bpf } for pid=4061 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:28:22.271000 audit: BPF prog-id=162 op=LOAD Mar 17 18:28:22.271000 audit[4061]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=17 a0=5 a1=4000195670 a2=78 a3=0 items=0 ppid=4051 pid=4061 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:28:22.271000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3637376235346163323266373761613461333236343264626561373037 Mar 17 18:28:22.272000 audit: BPF prog-id=162 op=UNLOAD Mar 17 18:28:22.272000 audit: BPF prog-id=161 op=UNLOAD Mar 17 18:28:22.274000 audit[4061]: AVC avc: denied { bpf } for pid=4061 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:28:22.274000 audit[4061]: AVC avc: denied { bpf } for pid=4061 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:28:22.274000 audit[4061]: AVC avc: denied { bpf } for pid=4061 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:28:22.274000 audit[4061]: AVC avc: denied { perfmon } for pid=4061 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:28:22.274000 audit[4061]: AVC avc: denied { perfmon } for pid=4061 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:28:22.274000 audit[4061]: AVC avc: denied { perfmon } for pid=4061 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:28:22.274000 audit[4061]: AVC avc: denied { perfmon } for pid=4061 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:28:22.274000 audit[4061]: AVC avc: denied { perfmon } for pid=4061 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:28:22.274000 audit[4061]: AVC avc: denied { bpf } for pid=4061 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:28:22.274000 audit[4061]: AVC avc: denied { bpf } for pid=4061 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:28:22.274000 audit: BPF prog-id=163 op=LOAD Mar 17 18:28:22.274000 audit[4061]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=5 a1=4000195b40 a2=78 a3=0 items=0 ppid=4051 pid=4061 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:28:22.274000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3637376235346163323266373761613461333236343264626561373037 Mar 17 18:28:22.276658 systemd-resolved[1155]: Failed to determine the local hostname and LLMNR/mDNS names, ignoring: No such device or address Mar 17 18:28:22.298823 env[1216]: time="2025-03-17T18:28:22.298767585Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:coredns-6f6b679f8f-b9nsl,Uid:20480c0c-aba3-48d5-8372-dcc5d0a137a4,Namespace:kube-system,Attempt:1,} returns sandbox id \"677b54ac22f77aa4a32642dbea707d1aad59439f866f195977796f1842dcffa0\"" Mar 17 18:28:22.299238 systemd-networkd[1043]: calie29f3bc36a1: Link UP Mar 17 18:28:22.300920 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): eth0: link becomes ready Mar 17 18:28:22.300978 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): calie29f3bc36a1: link becomes ready Mar 17 18:28:22.300892 systemd-networkd[1043]: calie29f3bc36a1: Gained carrier Mar 17 18:28:22.308720 kubelet[1962]: E0317 18:28:22.308215 1962 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Mar 17 18:28:22.310588 env[1216]: time="2025-03-17T18:28:22.310554091Z" level=info msg="CreateContainer within sandbox \"677b54ac22f77aa4a32642dbea707d1aad59439f866f195977796f1842dcffa0\" for container &ContainerMetadata{Name:coredns,Attempt:0,}" Mar 17 18:28:22.318478 env[1216]: 2025-03-17 18:28:22.077 [INFO][3993] cni-plugin/utils.go 100: File /var/lib/calico/mtu does not exist Mar 17 18:28:22.318478 env[1216]: 2025-03-17 18:28:22.093 [INFO][3993] cni-plugin/plugin.go 325: Calico CNI found existing endpoint: &{{WorkloadEndpoint projectcalico.org/v3} {localhost-k8s-calico--apiserver--66cb7fb7dc--vzzfc-eth0 calico-apiserver-66cb7fb7dc- calico-apiserver 2583581b-be32-4ea5-876e-18fe9067e955 891 0 2025-03-17 18:27:58 +0000 UTC map[apiserver:true app.kubernetes.io/name:calico-apiserver k8s-app:calico-apiserver pod-template-hash:66cb7fb7dc projectcalico.org/namespace:calico-apiserver projectcalico.org/orchestrator:k8s projectcalico.org/serviceaccount:calico-apiserver] map[] [] [] []} {k8s localhost calico-apiserver-66cb7fb7dc-vzzfc eth0 calico-apiserver [] [] [kns.calico-apiserver ksa.calico-apiserver.calico-apiserver] calie29f3bc36a1 [] []}} ContainerID="f7c91c42a0e01d9502f0d1a3f29ffcf51d26610476dc5f7e2e85d2316693c5e0" Namespace="calico-apiserver" Pod="calico-apiserver-66cb7fb7dc-vzzfc" WorkloadEndpoint="localhost-k8s-calico--apiserver--66cb7fb7dc--vzzfc-" Mar 17 18:28:22.318478 env[1216]: 2025-03-17 18:28:22.093 [INFO][3993] cni-plugin/k8s.go 77: Extracted identifiers for CmdAddK8s ContainerID="f7c91c42a0e01d9502f0d1a3f29ffcf51d26610476dc5f7e2e85d2316693c5e0" Namespace="calico-apiserver" Pod="calico-apiserver-66cb7fb7dc-vzzfc" WorkloadEndpoint="localhost-k8s-calico--apiserver--66cb7fb7dc--vzzfc-eth0" Mar 17 18:28:22.318478 env[1216]: 2025-03-17 18:28:22.146 [INFO][4020] ipam/ipam_plugin.go 225: Calico CNI IPAM request count IPv4=1 IPv6=0 ContainerID="f7c91c42a0e01d9502f0d1a3f29ffcf51d26610476dc5f7e2e85d2316693c5e0" HandleID="k8s-pod-network.f7c91c42a0e01d9502f0d1a3f29ffcf51d26610476dc5f7e2e85d2316693c5e0" Workload="localhost-k8s-calico--apiserver--66cb7fb7dc--vzzfc-eth0" Mar 17 18:28:22.318478 env[1216]: 2025-03-17 18:28:22.158 [INFO][4020] ipam/ipam_plugin.go 265: Auto assigning IP ContainerID="f7c91c42a0e01d9502f0d1a3f29ffcf51d26610476dc5f7e2e85d2316693c5e0" HandleID="k8s-pod-network.f7c91c42a0e01d9502f0d1a3f29ffcf51d26610476dc5f7e2e85d2316693c5e0" Workload="localhost-k8s-calico--apiserver--66cb7fb7dc--vzzfc-eth0" assignArgs=ipam.AutoAssignArgs{Num4:1, Num6:0, HandleID:(*string)(0x40004d6e20), Attrs:map[string]string{"namespace":"calico-apiserver", "node":"localhost", "pod":"calico-apiserver-66cb7fb7dc-vzzfc", "timestamp":"2025-03-17 18:28:22.146933406 +0000 UTC"}, Hostname:"localhost", IPv4Pools:[]net.IPNet{}, IPv6Pools:[]net.IPNet{}, MaxBlocksPerHost:0, HostReservedAttrIPv4s:(*ipam.HostReservedAttr)(nil), HostReservedAttrIPv6s:(*ipam.HostReservedAttr)(nil), IntendedUse:"Workload"} Mar 17 18:28:22.318478 env[1216]: 2025-03-17 18:28:22.159 [INFO][4020] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Mar 17 18:28:22.318478 env[1216]: 2025-03-17 18:28:22.178 [INFO][4020] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Mar 17 18:28:22.318478 env[1216]: 2025-03-17 18:28:22.178 [INFO][4020] ipam/ipam.go 107: Auto-assign 1 ipv4, 0 ipv6 addrs for host 'localhost' Mar 17 18:28:22.318478 env[1216]: 2025-03-17 18:28:22.257 [INFO][4020] ipam/ipam.go 660: Looking up existing affinities for host handle="k8s-pod-network.f7c91c42a0e01d9502f0d1a3f29ffcf51d26610476dc5f7e2e85d2316693c5e0" host="localhost" Mar 17 18:28:22.318478 env[1216]: 2025-03-17 18:28:22.266 [INFO][4020] ipam/ipam.go 372: Looking up existing affinities for host host="localhost" Mar 17 18:28:22.318478 env[1216]: 2025-03-17 18:28:22.271 [INFO][4020] ipam/ipam.go 489: Trying affinity for 192.168.88.128/26 host="localhost" Mar 17 18:28:22.318478 env[1216]: 2025-03-17 18:28:22.272 [INFO][4020] ipam/ipam.go 155: Attempting to load block cidr=192.168.88.128/26 host="localhost" Mar 17 18:28:22.318478 env[1216]: 2025-03-17 18:28:22.275 [INFO][4020] ipam/ipam.go 232: Affinity is confirmed and block has been loaded cidr=192.168.88.128/26 host="localhost" Mar 17 18:28:22.318478 env[1216]: 2025-03-17 18:28:22.275 [INFO][4020] ipam/ipam.go 1180: Attempting to assign 1 addresses from block block=192.168.88.128/26 handle="k8s-pod-network.f7c91c42a0e01d9502f0d1a3f29ffcf51d26610476dc5f7e2e85d2316693c5e0" host="localhost" Mar 17 18:28:22.318478 env[1216]: 2025-03-17 18:28:22.277 [INFO][4020] ipam/ipam.go 1685: Creating new handle: k8s-pod-network.f7c91c42a0e01d9502f0d1a3f29ffcf51d26610476dc5f7e2e85d2316693c5e0 Mar 17 18:28:22.318478 env[1216]: 2025-03-17 18:28:22.284 [INFO][4020] ipam/ipam.go 1203: Writing block in order to claim IPs block=192.168.88.128/26 handle="k8s-pod-network.f7c91c42a0e01d9502f0d1a3f29ffcf51d26610476dc5f7e2e85d2316693c5e0" host="localhost" Mar 17 18:28:22.318478 env[1216]: 2025-03-17 18:28:22.292 [INFO][4020] ipam/ipam.go 1216: Successfully claimed IPs: [192.168.88.134/26] block=192.168.88.128/26 handle="k8s-pod-network.f7c91c42a0e01d9502f0d1a3f29ffcf51d26610476dc5f7e2e85d2316693c5e0" host="localhost" Mar 17 18:28:22.318478 env[1216]: 2025-03-17 18:28:22.292 [INFO][4020] ipam/ipam.go 847: Auto-assigned 1 out of 1 IPv4s: [192.168.88.134/26] handle="k8s-pod-network.f7c91c42a0e01d9502f0d1a3f29ffcf51d26610476dc5f7e2e85d2316693c5e0" host="localhost" Mar 17 18:28:22.318478 env[1216]: 2025-03-17 18:28:22.292 [INFO][4020] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Mar 17 18:28:22.318478 env[1216]: 2025-03-17 18:28:22.292 [INFO][4020] ipam/ipam_plugin.go 283: Calico CNI IPAM assigned addresses IPv4=[192.168.88.134/26] IPv6=[] ContainerID="f7c91c42a0e01d9502f0d1a3f29ffcf51d26610476dc5f7e2e85d2316693c5e0" HandleID="k8s-pod-network.f7c91c42a0e01d9502f0d1a3f29ffcf51d26610476dc5f7e2e85d2316693c5e0" Workload="localhost-k8s-calico--apiserver--66cb7fb7dc--vzzfc-eth0" Mar 17 18:28:22.319193 env[1216]: 2025-03-17 18:28:22.297 [INFO][3993] cni-plugin/k8s.go 386: Populated endpoint ContainerID="f7c91c42a0e01d9502f0d1a3f29ffcf51d26610476dc5f7e2e85d2316693c5e0" Namespace="calico-apiserver" Pod="calico-apiserver-66cb7fb7dc-vzzfc" WorkloadEndpoint="localhost-k8s-calico--apiserver--66cb7fb7dc--vzzfc-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-calico--apiserver--66cb7fb7dc--vzzfc-eth0", GenerateName:"calico-apiserver-66cb7fb7dc-", Namespace:"calico-apiserver", SelfLink:"", UID:"2583581b-be32-4ea5-876e-18fe9067e955", ResourceVersion:"891", Generation:0, CreationTimestamp:time.Date(2025, time.March, 17, 18, 27, 58, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"apiserver":"true", "app.kubernetes.io/name":"calico-apiserver", "k8s-app":"calico-apiserver", "pod-template-hash":"66cb7fb7dc", "projectcalico.org/namespace":"calico-apiserver", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-apiserver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"", Pod:"calico-apiserver-66cb7fb7dc-vzzfc", Endpoint:"eth0", ServiceAccountName:"calico-apiserver", IPNetworks:[]string{"192.168.88.134/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-apiserver", "ksa.calico-apiserver.calico-apiserver"}, InterfaceName:"calie29f3bc36a1", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil)}} Mar 17 18:28:22.319193 env[1216]: 2025-03-17 18:28:22.297 [INFO][3993] cni-plugin/k8s.go 387: Calico CNI using IPs: [192.168.88.134/32] ContainerID="f7c91c42a0e01d9502f0d1a3f29ffcf51d26610476dc5f7e2e85d2316693c5e0" Namespace="calico-apiserver" Pod="calico-apiserver-66cb7fb7dc-vzzfc" WorkloadEndpoint="localhost-k8s-calico--apiserver--66cb7fb7dc--vzzfc-eth0" Mar 17 18:28:22.319193 env[1216]: 2025-03-17 18:28:22.297 [INFO][3993] cni-plugin/dataplane_linux.go 69: Setting the host side veth name to calie29f3bc36a1 ContainerID="f7c91c42a0e01d9502f0d1a3f29ffcf51d26610476dc5f7e2e85d2316693c5e0" Namespace="calico-apiserver" Pod="calico-apiserver-66cb7fb7dc-vzzfc" WorkloadEndpoint="localhost-k8s-calico--apiserver--66cb7fb7dc--vzzfc-eth0" Mar 17 18:28:22.319193 env[1216]: 2025-03-17 18:28:22.301 [INFO][3993] cni-plugin/dataplane_linux.go 508: Disabling IPv4 forwarding ContainerID="f7c91c42a0e01d9502f0d1a3f29ffcf51d26610476dc5f7e2e85d2316693c5e0" Namespace="calico-apiserver" Pod="calico-apiserver-66cb7fb7dc-vzzfc" WorkloadEndpoint="localhost-k8s-calico--apiserver--66cb7fb7dc--vzzfc-eth0" Mar 17 18:28:22.319193 env[1216]: 2025-03-17 18:28:22.301 [INFO][3993] cni-plugin/k8s.go 414: Added Mac, interface name, and active container ID to endpoint ContainerID="f7c91c42a0e01d9502f0d1a3f29ffcf51d26610476dc5f7e2e85d2316693c5e0" Namespace="calico-apiserver" Pod="calico-apiserver-66cb7fb7dc-vzzfc" WorkloadEndpoint="localhost-k8s-calico--apiserver--66cb7fb7dc--vzzfc-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-calico--apiserver--66cb7fb7dc--vzzfc-eth0", GenerateName:"calico-apiserver-66cb7fb7dc-", Namespace:"calico-apiserver", SelfLink:"", UID:"2583581b-be32-4ea5-876e-18fe9067e955", ResourceVersion:"891", Generation:0, CreationTimestamp:time.Date(2025, time.March, 17, 18, 27, 58, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"apiserver":"true", "app.kubernetes.io/name":"calico-apiserver", "k8s-app":"calico-apiserver", "pod-template-hash":"66cb7fb7dc", "projectcalico.org/namespace":"calico-apiserver", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-apiserver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"f7c91c42a0e01d9502f0d1a3f29ffcf51d26610476dc5f7e2e85d2316693c5e0", Pod:"calico-apiserver-66cb7fb7dc-vzzfc", Endpoint:"eth0", ServiceAccountName:"calico-apiserver", IPNetworks:[]string{"192.168.88.134/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-apiserver", "ksa.calico-apiserver.calico-apiserver"}, InterfaceName:"calie29f3bc36a1", MAC:"32:b2:ad:29:20:e7", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil)}} Mar 17 18:28:22.319193 env[1216]: 2025-03-17 18:28:22.313 [INFO][3993] cni-plugin/k8s.go 500: Wrote updated endpoint to datastore ContainerID="f7c91c42a0e01d9502f0d1a3f29ffcf51d26610476dc5f7e2e85d2316693c5e0" Namespace="calico-apiserver" Pod="calico-apiserver-66cb7fb7dc-vzzfc" WorkloadEndpoint="localhost-k8s-calico--apiserver--66cb7fb7dc--vzzfc-eth0" Mar 17 18:28:22.333109 env[1216]: time="2025-03-17T18:28:22.333061920Z" level=info msg="CreateContainer within sandbox \"677b54ac22f77aa4a32642dbea707d1aad59439f866f195977796f1842dcffa0\" for &ContainerMetadata{Name:coredns,Attempt:0,} returns container id \"8af98fb2ef6e34b94042a2146aee68d4262c67b663966d10ae969adf7011d6f7\"" Mar 17 18:28:22.333981 env[1216]: time="2025-03-17T18:28:22.333952933Z" level=info msg="StartContainer for \"8af98fb2ef6e34b94042a2146aee68d4262c67b663966d10ae969adf7011d6f7\"" Mar 17 18:28:22.335873 env[1216]: time="2025-03-17T18:28:22.335779603Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Mar 17 18:28:22.335954 env[1216]: time="2025-03-17T18:28:22.335885409Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Mar 17 18:28:22.335954 env[1216]: time="2025-03-17T18:28:22.335911771Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Mar 17 18:28:22.336634 env[1216]: time="2025-03-17T18:28:22.336112223Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/f7c91c42a0e01d9502f0d1a3f29ffcf51d26610476dc5f7e2e85d2316693c5e0 pid=4123 runtime=io.containerd.runc.v2 Mar 17 18:28:22.350979 systemd[1]: Started cri-containerd-f7c91c42a0e01d9502f0d1a3f29ffcf51d26610476dc5f7e2e85d2316693c5e0.scope. Mar 17 18:28:22.363619 systemd[1]: Started cri-containerd-8af98fb2ef6e34b94042a2146aee68d4262c67b663966d10ae969adf7011d6f7.scope. Mar 17 18:28:22.396000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:28:22.396000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:28:22.396000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:28:22.396000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:28:22.396000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:28:22.396000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:28:22.396000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:28:22.396000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:28:22.396000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:28:22.397000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:28:22.397000 audit: BPF prog-id=164 op=LOAD Mar 17 18:28:22.398000 audit[4151]: AVC avc: denied { bpf } for pid=4151 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:28:22.398000 audit[4151]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000195b38 a2=10 a3=0 items=0 ppid=4051 pid=4151 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:28:22.398000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3861663938666232656636653334623934303432613231343661656536 Mar 17 18:28:22.398000 audit[4151]: AVC avc: denied { perfmon } for pid=4151 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:28:22.398000 audit[4151]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001955a0 a2=3c a3=0 items=0 ppid=4051 pid=4151 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:28:22.398000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3861663938666232656636653334623934303432613231343661656536 Mar 17 18:28:22.398000 audit[4151]: AVC avc: denied { bpf } for pid=4151 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:28:22.398000 audit[4151]: AVC avc: denied { bpf } for pid=4151 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:28:22.398000 audit[4151]: AVC avc: denied { bpf } for pid=4151 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:28:22.398000 audit[4151]: AVC avc: denied { perfmon } for pid=4151 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:28:22.398000 audit[4151]: AVC avc: denied { perfmon } for pid=4151 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:28:22.398000 audit[4151]: AVC avc: denied { perfmon } for pid=4151 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:28:22.398000 audit[4151]: AVC avc: denied { perfmon } for pid=4151 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:28:22.398000 audit[4151]: AVC avc: denied { perfmon } for pid=4151 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:28:22.398000 audit[4151]: AVC avc: denied { bpf } for pid=4151 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:28:22.398000 audit[4151]: AVC avc: denied { bpf } for pid=4151 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:28:22.398000 audit: BPF prog-id=165 op=LOAD Mar 17 18:28:22.398000 audit[4151]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001958e0 a2=78 a3=0 items=0 ppid=4051 pid=4151 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:28:22.398000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3861663938666232656636653334623934303432613231343661656536 Mar 17 18:28:22.399000 audit[4151]: AVC avc: denied { bpf } for pid=4151 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:28:22.399000 audit[4151]: AVC avc: denied { bpf } for pid=4151 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:28:22.399000 audit[4151]: AVC avc: denied { perfmon } for pid=4151 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:28:22.399000 audit[4151]: AVC avc: denied { perfmon } for pid=4151 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:28:22.399000 audit[4151]: AVC avc: denied { perfmon } for pid=4151 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:28:22.399000 audit[4151]: AVC avc: denied { perfmon } for pid=4151 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:28:22.399000 audit[4151]: AVC avc: denied { perfmon } for pid=4151 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:28:22.399000 audit[4151]: AVC avc: denied { bpf } for pid=4151 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:28:22.399000 audit[4151]: AVC avc: denied { bpf } for pid=4151 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:28:22.399000 audit: BPF prog-id=166 op=LOAD Mar 17 18:28:22.399000 audit[4151]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000195670 a2=78 a3=0 items=0 ppid=4051 pid=4151 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:28:22.399000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3861663938666232656636653334623934303432613231343661656536 Mar 17 18:28:22.399000 audit: BPF prog-id=166 op=UNLOAD Mar 17 18:28:22.399000 audit: BPF prog-id=165 op=UNLOAD Mar 17 18:28:22.399000 audit[4151]: AVC avc: denied { bpf } for pid=4151 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:28:22.399000 audit[4151]: AVC avc: denied { bpf } for pid=4151 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:28:22.399000 audit[4151]: AVC avc: denied { bpf } for pid=4151 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:28:22.399000 audit[4151]: AVC avc: denied { perfmon } for pid=4151 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:28:22.399000 audit[4151]: AVC avc: denied { perfmon } for pid=4151 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:28:22.399000 audit[4151]: AVC avc: denied { perfmon } for pid=4151 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:28:22.399000 audit[4151]: AVC avc: denied { perfmon } for pid=4151 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:28:22.399000 audit[4151]: AVC avc: denied { perfmon } for pid=4151 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:28:22.399000 audit[4151]: AVC avc: denied { bpf } for pid=4151 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:28:22.399000 audit[4151]: AVC avc: denied { bpf } for pid=4151 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:28:22.399000 audit: BPF prog-id=167 op=LOAD Mar 17 18:28:22.399000 audit[4151]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000195b40 a2=78 a3=0 items=0 ppid=4051 pid=4151 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:28:22.399000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3861663938666232656636653334623934303432613231343661656536 Mar 17 18:28:22.404000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:28:22.404000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:28:22.404000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:28:22.404000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:28:22.404000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:28:22.404000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:28:22.404000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:28:22.404000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:28:22.404000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:28:22.404000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:28:22.404000 audit: BPF prog-id=168 op=LOAD Mar 17 18:28:22.405000 audit[4138]: AVC avc: denied { bpf } for pid=4138 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:28:22.405000 audit[4138]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000195b38 a2=10 a3=0 items=0 ppid=4123 pid=4138 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:28:22.405000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6637633931633432613065303164393530326630643161336632396666 Mar 17 18:28:22.405000 audit[4138]: AVC avc: denied { perfmon } for pid=4138 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:28:22.405000 audit[4138]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001955a0 a2=3c a3=0 items=0 ppid=4123 pid=4138 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:28:22.405000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6637633931633432613065303164393530326630643161336632396666 Mar 17 18:28:22.405000 audit[4138]: AVC avc: denied { bpf } for pid=4138 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:28:22.405000 audit[4138]: AVC avc: denied { bpf } for pid=4138 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:28:22.405000 audit[4138]: AVC avc: denied { bpf } for pid=4138 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:28:22.405000 audit[4138]: AVC avc: denied { perfmon } for pid=4138 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:28:22.405000 audit[4138]: AVC avc: denied { perfmon } for pid=4138 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:28:22.405000 audit[4138]: AVC avc: denied { perfmon } for pid=4138 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:28:22.405000 audit[4138]: AVC avc: denied { perfmon } for pid=4138 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:28:22.405000 audit[4138]: AVC avc: denied { perfmon } for pid=4138 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:28:22.405000 audit[4138]: AVC avc: denied { bpf } for pid=4138 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:28:22.405000 audit[4138]: AVC avc: denied { bpf } for pid=4138 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:28:22.405000 audit: BPF prog-id=169 op=LOAD Mar 17 18:28:22.405000 audit[4138]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001958e0 a2=78 a3=0 items=0 ppid=4123 pid=4138 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:28:22.405000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6637633931633432613065303164393530326630643161336632396666 Mar 17 18:28:22.405000 audit[4138]: AVC avc: denied { bpf } for pid=4138 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:28:22.405000 audit[4138]: AVC avc: denied { bpf } for pid=4138 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:28:22.405000 audit[4138]: AVC avc: denied { perfmon } for pid=4138 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:28:22.405000 audit[4138]: AVC avc: denied { perfmon } for pid=4138 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:28:22.405000 audit[4138]: AVC avc: denied { perfmon } for pid=4138 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:28:22.405000 audit[4138]: AVC avc: denied { perfmon } for pid=4138 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:28:22.405000 audit[4138]: AVC avc: denied { perfmon } for pid=4138 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:28:22.405000 audit[4138]: AVC avc: denied { bpf } for pid=4138 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:28:22.405000 audit[4138]: AVC avc: denied { bpf } for pid=4138 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:28:22.405000 audit: BPF prog-id=170 op=LOAD Mar 17 18:28:22.405000 audit[4138]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000195670 a2=78 a3=0 items=0 ppid=4123 pid=4138 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:28:22.405000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6637633931633432613065303164393530326630643161336632396666 Mar 17 18:28:22.405000 audit: BPF prog-id=170 op=UNLOAD Mar 17 18:28:22.405000 audit: BPF prog-id=169 op=UNLOAD Mar 17 18:28:22.405000 audit[4138]: AVC avc: denied { bpf } for pid=4138 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:28:22.405000 audit[4138]: AVC avc: denied { bpf } for pid=4138 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:28:22.405000 audit[4138]: AVC avc: denied { bpf } for pid=4138 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:28:22.405000 audit[4138]: AVC avc: denied { perfmon } for pid=4138 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:28:22.405000 audit[4138]: AVC avc: denied { perfmon } for pid=4138 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:28:22.405000 audit[4138]: AVC avc: denied { perfmon } for pid=4138 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:28:22.405000 audit[4138]: AVC avc: denied { perfmon } for pid=4138 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:28:22.405000 audit[4138]: AVC avc: denied { perfmon } for pid=4138 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:28:22.405000 audit[4138]: AVC avc: denied { bpf } for pid=4138 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:28:22.405000 audit[4138]: AVC avc: denied { bpf } for pid=4138 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:28:22.405000 audit: BPF prog-id=171 op=LOAD Mar 17 18:28:22.405000 audit[4138]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000195b40 a2=78 a3=0 items=0 ppid=4123 pid=4138 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:28:22.405000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6637633931633432613065303164393530326630643161336632396666 Mar 17 18:28:22.408245 systemd-resolved[1155]: Failed to determine the local hostname and LLMNR/mDNS names, ignoring: No such device or address Mar 17 18:28:22.423266 env[1216]: time="2025-03-17T18:28:22.423223123Z" level=info msg="StartContainer for \"8af98fb2ef6e34b94042a2146aee68d4262c67b663966d10ae969adf7011d6f7\" returns successfully" Mar 17 18:28:22.428807 env[1216]: time="2025-03-17T18:28:22.428775615Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-apiserver-66cb7fb7dc-vzzfc,Uid:2583581b-be32-4ea5-876e-18fe9067e955,Namespace:calico-apiserver,Attempt:1,} returns sandbox id \"f7c91c42a0e01d9502f0d1a3f29ffcf51d26610476dc5f7e2e85d2316693c5e0\"" Mar 17 18:28:22.482063 systemd-networkd[1043]: calic2268833577: Gained IPv6LL Mar 17 18:28:22.609968 systemd-networkd[1043]: cali06cfa15a03f: Gained IPv6LL Mar 17 18:28:22.738022 systemd-networkd[1043]: caliebe0a51f26e: Gained IPv6LL Mar 17 18:28:22.997174 kubelet[1962]: E0317 18:28:22.996391 1962 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Mar 17 18:28:22.997324 kubelet[1962]: E0317 18:28:22.997029 1962 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Mar 17 18:28:23.016722 kubelet[1962]: I0317 18:28:23.016649 1962 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="kube-system/coredns-6f6b679f8f-b9nsl" podStartSLOduration=32.016630816 podStartE2EDuration="32.016630816s" podCreationTimestamp="2025-03-17 18:27:51 +0000 UTC" firstStartedPulling="0001-01-01 00:00:00 +0000 UTC" lastFinishedPulling="0001-01-01 00:00:00 +0000 UTC" observedRunningTime="2025-03-17 18:28:23.01310257 +0000 UTC m=+38.239407951" watchObservedRunningTime="2025-03-17 18:28:23.016630816 +0000 UTC m=+38.242936157" Mar 17 18:28:23.019000 audit[4209]: NETFILTER_CFG table=filter:99 family=2 entries=12 op=nft_register_rule pid=4209 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Mar 17 18:28:23.019000 audit[4209]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=4504 a0=3 a1=ffffd07ddbd0 a2=0 a3=1 items=0 ppid=2108 pid=4209 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:28:23.019000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Mar 17 18:28:23.026000 audit[4209]: NETFILTER_CFG table=nat:100 family=2 entries=42 op=nft_register_rule pid=4209 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Mar 17 18:28:23.026000 audit[4209]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=13428 a0=3 a1=ffffd07ddbd0 a2=0 a3=1 items=0 ppid=2108 pid=4209 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:28:23.026000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Mar 17 18:28:23.084025 kubelet[1962]: I0317 18:28:23.083954 1962 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="calico-system/calico-kube-controllers-5f9fb877b9-db89t" podStartSLOduration=22.689355992 podStartE2EDuration="25.083937058s" podCreationTimestamp="2025-03-17 18:27:58 +0000 UTC" firstStartedPulling="2025-03-17 18:28:19.478619673 +0000 UTC m=+34.704925054" lastFinishedPulling="2025-03-17 18:28:21.873200739 +0000 UTC m=+37.099506120" observedRunningTime="2025-03-17 18:28:23.046259302 +0000 UTC m=+38.272564643" watchObservedRunningTime="2025-03-17 18:28:23.083937058 +0000 UTC m=+38.310242439" Mar 17 18:28:23.140881 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount1755959260.mount: Deactivated successfully. Mar 17 18:28:23.250009 systemd-networkd[1043]: cali3091a806a31: Gained IPv6LL Mar 17 18:28:23.442978 systemd-networkd[1043]: calie29f3bc36a1: Gained IPv6LL Mar 17 18:28:24.006837 kubelet[1962]: E0317 18:28:24.006786 1962 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Mar 17 18:28:24.007339 kubelet[1962]: E0317 18:28:24.007307 1962 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Mar 17 18:28:24.040000 audit[4251]: NETFILTER_CFG table=filter:101 family=2 entries=12 op=nft_register_rule pid=4251 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Mar 17 18:28:24.040000 audit[4251]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=4504 a0=3 a1=fffff3054840 a2=0 a3=1 items=0 ppid=2108 pid=4251 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:28:24.040000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Mar 17 18:28:24.053000 audit[4251]: NETFILTER_CFG table=nat:102 family=2 entries=54 op=nft_register_chain pid=4251 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Mar 17 18:28:24.053000 audit[4251]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=19092 a0=3 a1=fffff3054840 a2=0 a3=1 items=0 ppid=2108 pid=4251 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:28:24.053000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Mar 17 18:28:24.129885 env[1216]: time="2025-03-17T18:28:24.129806451Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/apiserver:v3.29.1,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Mar 17 18:28:24.131198 env[1216]: time="2025-03-17T18:28:24.131173088Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:5451b31bd8d0784796fa1204c4ec22975a270e21feadf2c5095fe41a38524c6c,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Mar 17 18:28:24.132383 env[1216]: time="2025-03-17T18:28:24.132361716Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/apiserver:v3.29.1,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Mar 17 18:28:24.133727 env[1216]: time="2025-03-17T18:28:24.133695711Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/apiserver@sha256:b8c43e264fe52e0c327b0bf3ac882a0224b33bdd7f4ff58a74242da7d9b00486,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Mar 17 18:28:24.134341 env[1216]: time="2025-03-17T18:28:24.134299706Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/apiserver:v3.29.1\" returns image reference \"sha256:5451b31bd8d0784796fa1204c4ec22975a270e21feadf2c5095fe41a38524c6c\"" Mar 17 18:28:24.136890 env[1216]: time="2025-03-17T18:28:24.135797751Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/csi:v3.29.1\"" Mar 17 18:28:24.136890 env[1216]: time="2025-03-17T18:28:24.136617477Z" level=info msg="CreateContainer within sandbox \"7e430e160a6c95321ff5fd120f3eab9e6afd20936602a5f1d3e361a692a04bbd\" for container &ContainerMetadata{Name:calico-apiserver,Attempt:0,}" Mar 17 18:28:24.146750 env[1216]: time="2025-03-17T18:28:24.146469636Z" level=info msg="CreateContainer within sandbox \"7e430e160a6c95321ff5fd120f3eab9e6afd20936602a5f1d3e361a692a04bbd\" for &ContainerMetadata{Name:calico-apiserver,Attempt:0,} returns container id \"5bea4ab92170c85eff95ae260e9bbd410d9c979efe79efa4ec821561eb898752\"" Mar 17 18:28:24.147916 env[1216]: time="2025-03-17T18:28:24.147885876Z" level=info msg="StartContainer for \"5bea4ab92170c85eff95ae260e9bbd410d9c979efe79efa4ec821561eb898752\"" Mar 17 18:28:24.170620 systemd[1]: Started cri-containerd-5bea4ab92170c85eff95ae260e9bbd410d9c979efe79efa4ec821561eb898752.scope. Mar 17 18:28:24.203000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:28:24.203000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:28:24.203000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:28:24.203000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:28:24.203000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:28:24.203000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:28:24.203000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:28:24.203000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:28:24.203000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:28:24.203000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:28:24.203000 audit: BPF prog-id=172 op=LOAD Mar 17 18:28:24.203000 audit[4261]: AVC avc: denied { bpf } for pid=4261 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:28:24.203000 audit[4261]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000195b38 a2=10 a3=0 items=0 ppid=3700 pid=4261 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:28:24.203000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3562656134616239323137306338356566663935616532363065396262 Mar 17 18:28:24.203000 audit[4261]: AVC avc: denied { perfmon } for pid=4261 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:28:24.203000 audit[4261]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001955a0 a2=3c a3=0 items=0 ppid=3700 pid=4261 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:28:24.203000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3562656134616239323137306338356566663935616532363065396262 Mar 17 18:28:24.203000 audit[4261]: AVC avc: denied { bpf } for pid=4261 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:28:24.203000 audit[4261]: AVC avc: denied { bpf } for pid=4261 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:28:24.203000 audit[4261]: AVC avc: denied { bpf } for pid=4261 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:28:24.203000 audit[4261]: AVC avc: denied { perfmon } for pid=4261 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:28:24.203000 audit[4261]: AVC avc: denied { perfmon } for pid=4261 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:28:24.203000 audit[4261]: AVC avc: denied { perfmon } for pid=4261 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:28:24.203000 audit[4261]: AVC avc: denied { perfmon } for pid=4261 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:28:24.203000 audit[4261]: AVC avc: denied { perfmon } for pid=4261 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:28:24.203000 audit[4261]: AVC avc: denied { bpf } for pid=4261 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:28:24.203000 audit[4261]: AVC avc: denied { bpf } for pid=4261 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:28:24.203000 audit: BPF prog-id=173 op=LOAD Mar 17 18:28:24.203000 audit[4261]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001958e0 a2=78 a3=0 items=0 ppid=3700 pid=4261 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:28:24.203000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3562656134616239323137306338356566663935616532363065396262 Mar 17 18:28:24.203000 audit[4261]: AVC avc: denied { bpf } for pid=4261 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:28:24.203000 audit[4261]: AVC avc: denied { bpf } for pid=4261 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:28:24.203000 audit[4261]: AVC avc: denied { perfmon } for pid=4261 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:28:24.203000 audit[4261]: AVC avc: denied { perfmon } for pid=4261 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:28:24.203000 audit[4261]: AVC avc: denied { perfmon } for pid=4261 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:28:24.203000 audit[4261]: AVC avc: denied { perfmon } for pid=4261 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:28:24.203000 audit[4261]: AVC avc: denied { perfmon } for pid=4261 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:28:24.203000 audit[4261]: AVC avc: denied { bpf } for pid=4261 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:28:24.203000 audit[4261]: AVC avc: denied { bpf } for pid=4261 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:28:24.203000 audit: BPF prog-id=174 op=LOAD Mar 17 18:28:24.203000 audit[4261]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000195670 a2=78 a3=0 items=0 ppid=3700 pid=4261 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:28:24.203000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3562656134616239323137306338356566663935616532363065396262 Mar 17 18:28:24.203000 audit: BPF prog-id=174 op=UNLOAD Mar 17 18:28:24.203000 audit: BPF prog-id=173 op=UNLOAD Mar 17 18:28:24.203000 audit[4261]: AVC avc: denied { bpf } for pid=4261 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:28:24.203000 audit[4261]: AVC avc: denied { bpf } for pid=4261 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:28:24.203000 audit[4261]: AVC avc: denied { bpf } for pid=4261 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:28:24.203000 audit[4261]: AVC avc: denied { perfmon } for pid=4261 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:28:24.203000 audit[4261]: AVC avc: denied { perfmon } for pid=4261 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:28:24.203000 audit[4261]: AVC avc: denied { perfmon } for pid=4261 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:28:24.203000 audit[4261]: AVC avc: denied { perfmon } for pid=4261 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:28:24.203000 audit[4261]: AVC avc: denied { perfmon } for pid=4261 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:28:24.203000 audit[4261]: AVC avc: denied { bpf } for pid=4261 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:28:24.203000 audit[4261]: AVC avc: denied { bpf } for pid=4261 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:28:24.203000 audit: BPF prog-id=175 op=LOAD Mar 17 18:28:24.203000 audit[4261]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000195b40 a2=78 a3=0 items=0 ppid=3700 pid=4261 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:28:24.203000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3562656134616239323137306338356566663935616532363065396262 Mar 17 18:28:24.221166 env[1216]: time="2025-03-17T18:28:24.221127632Z" level=info msg="StartContainer for \"5bea4ab92170c85eff95ae260e9bbd410d9c979efe79efa4ec821561eb898752\" returns successfully" Mar 17 18:28:24.728490 kubelet[1962]: I0317 18:28:24.728439 1962 prober_manager.go:312] "Failed to trigger a manual run" probe="Readiness" Mar 17 18:28:24.728824 kubelet[1962]: E0317 18:28:24.728755 1962 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Mar 17 18:28:24.975000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@9-10.0.0.111:22-10.0.0.1:41158 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:28:24.975935 systemd[1]: Started sshd@9-10.0.0.111:22-10.0.0.1:41158.service. Mar 17 18:28:24.978729 kernel: kauditd_printk_skb: 595 callbacks suppressed Mar 17 18:28:24.978801 kernel: audit: type=1130 audit(1742236104.975:1208): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@9-10.0.0.111:22-10.0.0.1:41158 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:28:25.016641 kubelet[1962]: E0317 18:28:25.015703 1962 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Mar 17 18:28:25.018473 kubelet[1962]: E0317 18:28:25.017290 1962 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Mar 17 18:28:25.044000 audit[4323]: NETFILTER_CFG table=filter:103 family=2 entries=11 op=nft_register_rule pid=4323 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Mar 17 18:28:25.045426 sshd[4320]: Accepted publickey for core from 10.0.0.1 port 41158 ssh2: RSA SHA256:hoQCPKafrT/V1URQ18ch5K7mLY85DMM2OIJJf47c8zQ Mar 17 18:28:25.044000 audit[4323]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=3760 a0=3 a1=ffffea7637f0 a2=0 a3=1 items=0 ppid=2108 pid=4323 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:28:25.049697 sshd[4320]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Mar 17 18:28:25.050630 kernel: audit: type=1325 audit(1742236105.044:1209): table=filter:103 family=2 entries=11 op=nft_register_rule pid=4323 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Mar 17 18:28:25.050692 kernel: audit: type=1300 audit(1742236105.044:1209): arch=c00000b7 syscall=211 success=yes exit=3760 a0=3 a1=ffffea7637f0 a2=0 a3=1 items=0 ppid=2108 pid=4323 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:28:25.050717 kernel: audit: type=1327 audit(1742236105.044:1209): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Mar 17 18:28:25.044000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Mar 17 18:28:25.044000 audit[4320]: USER_ACCT pid=4320 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Mar 17 18:28:25.054158 kernel: audit: type=1101 audit(1742236105.044:1210): pid=4320 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Mar 17 18:28:25.054205 kernel: audit: type=1103 audit(1742236105.046:1211): pid=4320 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Mar 17 18:28:25.046000 audit[4320]: CRED_ACQ pid=4320 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Mar 17 18:28:25.058261 kernel: audit: type=1006 audit(1742236105.046:1212): pid=4320 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=10 res=1 Mar 17 18:28:25.046000 audit[4320]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=fffff7109980 a2=3 a3=1 items=0 ppid=1 pid=4320 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=10 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:28:25.060856 kernel: audit: type=1300 audit(1742236105.046:1212): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=fffff7109980 a2=3 a3=1 items=0 ppid=1 pid=4320 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=10 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:28:25.060912 kernel: audit: type=1327 audit(1742236105.046:1212): proctitle=737368643A20636F7265205B707269765D Mar 17 18:28:25.046000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Mar 17 18:28:25.051000 audit[4323]: NETFILTER_CFG table=nat:104 family=2 entries=25 op=nft_register_chain pid=4323 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Mar 17 18:28:25.062139 systemd-logind[1207]: New session 10 of user core. Mar 17 18:28:25.063149 kernel: audit: type=1325 audit(1742236105.051:1213): table=nat:104 family=2 entries=25 op=nft_register_chain pid=4323 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Mar 17 18:28:25.051000 audit[4323]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=8580 a0=3 a1=ffffea7637f0 a2=0 a3=1 items=0 ppid=2108 pid=4323 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:28:25.051000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Mar 17 18:28:25.063237 systemd[1]: Started session-10.scope. Mar 17 18:28:25.066000 audit[4320]: USER_START pid=4320 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Mar 17 18:28:25.067000 audit[4324]: CRED_ACQ pid=4324 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Mar 17 18:28:25.259000 audit[4350]: AVC avc: denied { bpf } for pid=4350 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:28:25.259000 audit[4350]: AVC avc: denied { bpf } for pid=4350 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:28:25.259000 audit[4350]: AVC avc: denied { perfmon } for pid=4350 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:28:25.259000 audit[4350]: AVC avc: denied { perfmon } for pid=4350 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:28:25.259000 audit[4350]: AVC avc: denied { perfmon } for pid=4350 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:28:25.259000 audit[4350]: AVC avc: denied { perfmon } for pid=4350 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:28:25.259000 audit[4350]: AVC avc: denied { perfmon } for pid=4350 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:28:25.259000 audit[4350]: AVC avc: denied { bpf } for pid=4350 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:28:25.259000 audit[4350]: AVC avc: denied { bpf } for pid=4350 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:28:25.259000 audit: BPF prog-id=176 op=LOAD Mar 17 18:28:25.259000 audit[4350]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=3 a0=5 a1=fffff407aa78 a2=98 a3=fffff407aa68 items=0 ppid=4333 pid=4350 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:28:25.259000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Mar 17 18:28:25.260000 audit: BPF prog-id=176 op=UNLOAD Mar 17 18:28:25.260000 audit[4350]: AVC avc: denied { bpf } for pid=4350 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:28:25.260000 audit[4350]: AVC avc: denied { bpf } for pid=4350 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:28:25.260000 audit[4350]: AVC avc: denied { perfmon } for pid=4350 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:28:25.260000 audit[4350]: AVC avc: denied { perfmon } for pid=4350 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:28:25.260000 audit[4350]: AVC avc: denied { perfmon } for pid=4350 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:28:25.260000 audit[4350]: AVC avc: denied { perfmon } for pid=4350 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:28:25.260000 audit[4350]: AVC avc: denied { perfmon } for pid=4350 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:28:25.260000 audit[4350]: AVC avc: denied { bpf } for pid=4350 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:28:25.260000 audit[4350]: AVC avc: denied { bpf } for pid=4350 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:28:25.260000 audit: BPF prog-id=177 op=LOAD Mar 17 18:28:25.260000 audit[4350]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=4 a0=5 a1=fffff407a708 a2=74 a3=95 items=0 ppid=4333 pid=4350 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:28:25.260000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Mar 17 18:28:25.260000 audit: BPF prog-id=177 op=UNLOAD Mar 17 18:28:25.260000 audit[4350]: AVC avc: denied { bpf } for pid=4350 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:28:25.260000 audit[4350]: AVC avc: denied { bpf } for pid=4350 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:28:25.260000 audit[4350]: AVC avc: denied { perfmon } for pid=4350 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:28:25.260000 audit[4350]: AVC avc: denied { perfmon } for pid=4350 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:28:25.260000 audit[4350]: AVC avc: denied { perfmon } for pid=4350 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:28:25.260000 audit[4350]: AVC avc: denied { perfmon } for pid=4350 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:28:25.260000 audit[4350]: AVC avc: denied { perfmon } for pid=4350 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:28:25.260000 audit[4350]: AVC avc: denied { bpf } for pid=4350 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:28:25.260000 audit[4350]: AVC avc: denied { bpf } for pid=4350 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:28:25.260000 audit: BPF prog-id=178 op=LOAD Mar 17 18:28:25.260000 audit[4350]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=4 a0=5 a1=fffff407a768 a2=94 a3=2 items=0 ppid=4333 pid=4350 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:28:25.260000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Mar 17 18:28:25.260000 audit: BPF prog-id=178 op=UNLOAD Mar 17 18:28:25.272672 sshd[4320]: pam_unix(sshd:session): session closed for user core Mar 17 18:28:25.274000 audit[4320]: USER_END pid=4320 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Mar 17 18:28:25.274000 audit[4320]: CRED_DISP pid=4320 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Mar 17 18:28:25.277586 systemd[1]: Started sshd@10-10.0.0.111:22-10.0.0.1:41162.service. Mar 17 18:28:25.276000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@10-10.0.0.111:22-10.0.0.1:41162 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:28:25.280757 systemd[1]: session-10.scope: Deactivated successfully. Mar 17 18:28:25.281429 systemd-logind[1207]: Session 10 logged out. Waiting for processes to exit. Mar 17 18:28:25.280000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@9-10.0.0.111:22-10.0.0.1:41158 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:28:25.281563 systemd[1]: sshd@9-10.0.0.111:22-10.0.0.1:41158.service: Deactivated successfully. Mar 17 18:28:25.282665 systemd-logind[1207]: Removed session 10. Mar 17 18:28:25.316000 audit[4352]: USER_ACCT pid=4352 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Mar 17 18:28:25.317899 sshd[4352]: Accepted publickey for core from 10.0.0.1 port 41162 ssh2: RSA SHA256:hoQCPKafrT/V1URQ18ch5K7mLY85DMM2OIJJf47c8zQ Mar 17 18:28:25.319000 audit[4352]: CRED_ACQ pid=4352 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Mar 17 18:28:25.320000 audit[4352]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=fffff05607d0 a2=3 a3=1 items=0 ppid=1 pid=4352 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=11 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:28:25.320000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Mar 17 18:28:25.321307 sshd[4352]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Mar 17 18:28:25.326759 systemd-logind[1207]: New session 11 of user core. Mar 17 18:28:25.327632 systemd[1]: Started session-11.scope. Mar 17 18:28:25.331000 audit[4352]: USER_START pid=4352 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Mar 17 18:28:25.333000 audit[4355]: CRED_ACQ pid=4355 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Mar 17 18:28:25.352000 audit[4350]: AVC avc: denied { bpf } for pid=4350 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:28:25.352000 audit[4350]: AVC avc: denied { bpf } for pid=4350 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:28:25.352000 audit[4350]: AVC avc: denied { perfmon } for pid=4350 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:28:25.352000 audit[4350]: AVC avc: denied { perfmon } for pid=4350 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:28:25.352000 audit[4350]: AVC avc: denied { perfmon } for pid=4350 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:28:25.352000 audit[4350]: AVC avc: denied { perfmon } for pid=4350 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:28:25.352000 audit[4350]: AVC avc: denied { perfmon } for pid=4350 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:28:25.352000 audit[4350]: AVC avc: denied { bpf } for pid=4350 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:28:25.352000 audit[4350]: AVC avc: denied { bpf } for pid=4350 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:28:25.352000 audit: BPF prog-id=179 op=LOAD Mar 17 18:28:25.352000 audit[4350]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=4 a0=5 a1=fffff407a728 a2=40 a3=fffff407a758 items=0 ppid=4333 pid=4350 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:28:25.352000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Mar 17 18:28:25.352000 audit: BPF prog-id=179 op=UNLOAD Mar 17 18:28:25.352000 audit[4350]: AVC avc: denied { perfmon } for pid=4350 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:28:25.352000 audit[4350]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=4 a0=0 a1=fffff407a840 a2=50 a3=0 items=0 ppid=4333 pid=4350 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:28:25.352000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Mar 17 18:28:25.360000 audit[4350]: AVC avc: denied { bpf } for pid=4350 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:28:25.360000 audit[4350]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=4 a0=12 a1=fffff407a798 a2=28 a3=fffff407a8c8 items=0 ppid=4333 pid=4350 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:28:25.360000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Mar 17 18:28:25.360000 audit[4350]: AVC avc: denied { bpf } for pid=4350 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:28:25.360000 audit[4350]: SYSCALL arch=c00000b7 syscall=280 success=no exit=-22 a0=12 a1=fffff407a7c8 a2=28 a3=fffff407a8f8 items=0 ppid=4333 pid=4350 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:28:25.360000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Mar 17 18:28:25.360000 audit[4350]: AVC avc: denied { bpf } for pid=4350 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:28:25.360000 audit[4350]: SYSCALL arch=c00000b7 syscall=280 success=no exit=-22 a0=12 a1=fffff407a678 a2=28 a3=fffff407a7a8 items=0 ppid=4333 pid=4350 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:28:25.360000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Mar 17 18:28:25.360000 audit[4350]: AVC avc: denied { bpf } for pid=4350 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:28:25.360000 audit[4350]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=4 a0=12 a1=fffff407a7e8 a2=28 a3=fffff407a918 items=0 ppid=4333 pid=4350 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:28:25.360000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Mar 17 18:28:25.360000 audit[4350]: AVC avc: denied { bpf } for pid=4350 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:28:25.360000 audit[4350]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=4 a0=12 a1=fffff407a7c8 a2=28 a3=fffff407a8f8 items=0 ppid=4333 pid=4350 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:28:25.360000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Mar 17 18:28:25.360000 audit[4350]: AVC avc: denied { bpf } for pid=4350 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:28:25.360000 audit[4350]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=4 a0=12 a1=fffff407a7b8 a2=28 a3=fffff407a8e8 items=0 ppid=4333 pid=4350 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:28:25.360000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Mar 17 18:28:25.360000 audit[4350]: AVC avc: denied { bpf } for pid=4350 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:28:25.360000 audit[4350]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=4 a0=12 a1=fffff407a7e8 a2=28 a3=fffff407a918 items=0 ppid=4333 pid=4350 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:28:25.360000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Mar 17 18:28:25.360000 audit[4350]: AVC avc: denied { bpf } for pid=4350 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:28:25.360000 audit[4350]: SYSCALL arch=c00000b7 syscall=280 success=no exit=-22 a0=12 a1=fffff407a7c8 a2=28 a3=fffff407a8f8 items=0 ppid=4333 pid=4350 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:28:25.360000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Mar 17 18:28:25.360000 audit[4350]: AVC avc: denied { bpf } for pid=4350 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:28:25.360000 audit[4350]: SYSCALL arch=c00000b7 syscall=280 success=no exit=-22 a0=12 a1=fffff407a7e8 a2=28 a3=fffff407a918 items=0 ppid=4333 pid=4350 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:28:25.360000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Mar 17 18:28:25.360000 audit[4350]: AVC avc: denied { bpf } for pid=4350 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:28:25.360000 audit[4350]: SYSCALL arch=c00000b7 syscall=280 success=no exit=-22 a0=12 a1=fffff407a7b8 a2=28 a3=fffff407a8e8 items=0 ppid=4333 pid=4350 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:28:25.360000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Mar 17 18:28:25.360000 audit[4350]: AVC avc: denied { bpf } for pid=4350 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:28:25.360000 audit[4350]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=4 a0=12 a1=fffff407a838 a2=28 a3=fffff407a978 items=0 ppid=4333 pid=4350 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:28:25.360000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Mar 17 18:28:25.361000 audit[4350]: AVC avc: denied { perfmon } for pid=4350 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:28:25.361000 audit[4350]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=5 a0=0 a1=fffff407a570 a2=50 a3=0 items=0 ppid=4333 pid=4350 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:28:25.361000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Mar 17 18:28:25.361000 audit[4350]: AVC avc: denied { bpf } for pid=4350 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:28:25.361000 audit[4350]: AVC avc: denied { bpf } for pid=4350 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:28:25.361000 audit[4350]: AVC avc: denied { perfmon } for pid=4350 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:28:25.361000 audit[4350]: AVC avc: denied { perfmon } for pid=4350 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:28:25.361000 audit[4350]: AVC avc: denied { perfmon } for pid=4350 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:28:25.361000 audit[4350]: AVC avc: denied { perfmon } for pid=4350 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:28:25.361000 audit[4350]: AVC avc: denied { perfmon } for pid=4350 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:28:25.361000 audit[4350]: AVC avc: denied { bpf } for pid=4350 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:28:25.361000 audit[4350]: AVC avc: denied { bpf } for pid=4350 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:28:25.361000 audit: BPF prog-id=180 op=LOAD Mar 17 18:28:25.361000 audit[4350]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=6 a0=5 a1=fffff407a578 a2=94 a3=5 items=0 ppid=4333 pid=4350 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:28:25.361000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Mar 17 18:28:25.361000 audit: BPF prog-id=180 op=UNLOAD Mar 17 18:28:25.361000 audit[4350]: AVC avc: denied { perfmon } for pid=4350 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:28:25.361000 audit[4350]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=5 a0=0 a1=fffff407a680 a2=50 a3=0 items=0 ppid=4333 pid=4350 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:28:25.361000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Mar 17 18:28:25.361000 audit[4350]: AVC avc: denied { bpf } for pid=4350 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:28:25.361000 audit[4350]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=16 a1=fffff407a7c8 a2=4 a3=3 items=0 ppid=4333 pid=4350 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:28:25.361000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Mar 17 18:28:25.361000 audit[4350]: AVC avc: denied { bpf } for pid=4350 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:28:25.361000 audit[4350]: AVC avc: denied { bpf } for pid=4350 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:28:25.361000 audit[4350]: AVC avc: denied { perfmon } for pid=4350 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:28:25.361000 audit[4350]: AVC avc: denied { bpf } for pid=4350 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:28:25.361000 audit[4350]: AVC avc: denied { perfmon } for pid=4350 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:28:25.361000 audit[4350]: AVC avc: denied { perfmon } for pid=4350 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:28:25.361000 audit[4350]: AVC avc: denied { perfmon } for pid=4350 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:28:25.361000 audit[4350]: AVC avc: denied { perfmon } for pid=4350 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:28:25.361000 audit[4350]: AVC avc: denied { perfmon } for pid=4350 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:28:25.361000 audit[4350]: AVC avc: denied { bpf } for pid=4350 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:28:25.361000 audit[4350]: AVC avc: denied { confidentiality } for pid=4350 comm="bpftool" lockdown_reason="use of bpf to read kernel RAM" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=lockdown permissive=0 Mar 17 18:28:25.361000 audit[4350]: SYSCALL arch=c00000b7 syscall=280 success=no exit=-22 a0=5 a1=fffff407a7a8 a2=94 a3=6 items=0 ppid=4333 pid=4350 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:28:25.361000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Mar 17 18:28:25.361000 audit[4350]: AVC avc: denied { bpf } for pid=4350 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:28:25.361000 audit[4350]: AVC avc: denied { bpf } for pid=4350 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:28:25.361000 audit[4350]: AVC avc: denied { perfmon } for pid=4350 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:28:25.361000 audit[4350]: AVC avc: denied { bpf } for pid=4350 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:28:25.361000 audit[4350]: AVC avc: denied { perfmon } for pid=4350 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:28:25.361000 audit[4350]: AVC avc: denied { perfmon } for pid=4350 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:28:25.361000 audit[4350]: AVC avc: denied { perfmon } for pid=4350 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:28:25.361000 audit[4350]: AVC avc: denied { perfmon } for pid=4350 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:28:25.361000 audit[4350]: AVC avc: denied { perfmon } for pid=4350 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:28:25.361000 audit[4350]: AVC avc: denied { bpf } for pid=4350 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:28:25.361000 audit[4350]: AVC avc: denied { confidentiality } for pid=4350 comm="bpftool" lockdown_reason="use of bpf to read kernel RAM" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=lockdown permissive=0 Mar 17 18:28:25.361000 audit[4350]: SYSCALL arch=c00000b7 syscall=280 success=no exit=-22 a0=5 a1=fffff4079f78 a2=94 a3=83 items=0 ppid=4333 pid=4350 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:28:25.361000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Mar 17 18:28:25.361000 audit[4350]: AVC avc: denied { bpf } for pid=4350 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:28:25.361000 audit[4350]: AVC avc: denied { bpf } for pid=4350 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:28:25.361000 audit[4350]: AVC avc: denied { perfmon } for pid=4350 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:28:25.361000 audit[4350]: AVC avc: denied { bpf } for pid=4350 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:28:25.361000 audit[4350]: AVC avc: denied { perfmon } for pid=4350 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:28:25.361000 audit[4350]: AVC avc: denied { perfmon } for pid=4350 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:28:25.361000 audit[4350]: AVC avc: denied { perfmon } for pid=4350 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:28:25.361000 audit[4350]: AVC avc: denied { perfmon } for pid=4350 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:28:25.361000 audit[4350]: AVC avc: denied { perfmon } for pid=4350 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:28:25.361000 audit[4350]: AVC avc: denied { bpf } for pid=4350 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:28:25.361000 audit[4350]: AVC avc: denied { confidentiality } for pid=4350 comm="bpftool" lockdown_reason="use of bpf to read kernel RAM" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=lockdown permissive=0 Mar 17 18:28:25.361000 audit[4350]: SYSCALL arch=c00000b7 syscall=280 success=no exit=-22 a0=5 a1=fffff4079f78 a2=94 a3=83 items=0 ppid=4333 pid=4350 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:28:25.361000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Mar 17 18:28:25.379000 audit[4359]: AVC avc: denied { bpf } for pid=4359 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:28:25.379000 audit[4359]: AVC avc: denied { bpf } for pid=4359 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:28:25.379000 audit[4359]: AVC avc: denied { perfmon } for pid=4359 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:28:25.379000 audit[4359]: AVC avc: denied { perfmon } for pid=4359 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:28:25.379000 audit[4359]: AVC avc: denied { perfmon } for pid=4359 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:28:25.379000 audit[4359]: AVC avc: denied { perfmon } for pid=4359 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:28:25.379000 audit[4359]: AVC avc: denied { perfmon } for pid=4359 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:28:25.379000 audit[4359]: AVC avc: denied { bpf } for pid=4359 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:28:25.379000 audit[4359]: AVC avc: denied { bpf } for pid=4359 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:28:25.379000 audit: BPF prog-id=181 op=LOAD Mar 17 18:28:25.379000 audit[4359]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=3 a0=5 a1=ffffc3c3fd48 a2=98 a3=ffffc3c3fd38 items=0 ppid=4333 pid=4359 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:28:25.379000 audit: PROCTITLE proctitle=627066746F6F6C006D617000637265617465002F7379732F66732F6270662F63616C69636F2F63616C69636F5F6661696C736166655F706F7274735F763100747970650068617368006B657900340076616C7565003100656E7472696573003635353335006E616D650063616C69636F5F6661696C736166655F706F7274735F Mar 17 18:28:25.379000 audit: BPF prog-id=181 op=UNLOAD Mar 17 18:28:25.379000 audit[4359]: AVC avc: denied { bpf } for pid=4359 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:28:25.379000 audit[4359]: AVC avc: denied { bpf } for pid=4359 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:28:25.379000 audit[4359]: AVC avc: denied { perfmon } for pid=4359 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:28:25.379000 audit[4359]: AVC avc: denied { perfmon } for pid=4359 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:28:25.379000 audit[4359]: AVC avc: denied { perfmon } for pid=4359 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:28:25.379000 audit[4359]: AVC avc: denied { perfmon } for pid=4359 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:28:25.379000 audit[4359]: AVC avc: denied { perfmon } for pid=4359 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:28:25.379000 audit[4359]: AVC avc: denied { bpf } for pid=4359 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:28:25.379000 audit[4359]: AVC avc: denied { bpf } for pid=4359 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:28:25.379000 audit: BPF prog-id=182 op=LOAD Mar 17 18:28:25.379000 audit[4359]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=3 a0=5 a1=ffffc3c3fbf8 a2=74 a3=95 items=0 ppid=4333 pid=4359 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:28:25.379000 audit: PROCTITLE proctitle=627066746F6F6C006D617000637265617465002F7379732F66732F6270662F63616C69636F2F63616C69636F5F6661696C736166655F706F7274735F763100747970650068617368006B657900340076616C7565003100656E7472696573003635353335006E616D650063616C69636F5F6661696C736166655F706F7274735F Mar 17 18:28:25.379000 audit: BPF prog-id=182 op=UNLOAD Mar 17 18:28:25.379000 audit[4359]: AVC avc: denied { bpf } for pid=4359 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:28:25.379000 audit[4359]: AVC avc: denied { bpf } for pid=4359 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:28:25.379000 audit[4359]: AVC avc: denied { perfmon } for pid=4359 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:28:25.379000 audit[4359]: AVC avc: denied { perfmon } for pid=4359 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:28:25.379000 audit[4359]: AVC avc: denied { perfmon } for pid=4359 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:28:25.379000 audit[4359]: AVC avc: denied { perfmon } for pid=4359 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:28:25.379000 audit[4359]: AVC avc: denied { perfmon } for pid=4359 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:28:25.379000 audit[4359]: AVC avc: denied { bpf } for pid=4359 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:28:25.379000 audit[4359]: AVC avc: denied { bpf } for pid=4359 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:28:25.379000 audit: BPF prog-id=183 op=LOAD Mar 17 18:28:25.379000 audit[4359]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=3 a0=5 a1=ffffc3c3fc28 a2=40 a3=ffffc3c3fc58 items=0 ppid=4333 pid=4359 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:28:25.379000 audit: PROCTITLE proctitle=627066746F6F6C006D617000637265617465002F7379732F66732F6270662F63616C69636F2F63616C69636F5F6661696C736166655F706F7274735F763100747970650068617368006B657900340076616C7565003100656E7472696573003635353335006E616D650063616C69636F5F6661696C736166655F706F7274735F Mar 17 18:28:25.379000 audit: BPF prog-id=183 op=UNLOAD Mar 17 18:28:25.608235 systemd-networkd[1043]: vxlan.calico: Link UP Mar 17 18:28:25.608245 systemd-networkd[1043]: vxlan.calico: Gained carrier Mar 17 18:28:25.647198 env[1216]: time="2025-03-17T18:28:25.647152604Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/csi:v3.29.1,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Mar 17 18:28:25.648905 env[1216]: time="2025-03-17T18:28:25.648874299Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:3c11734f3001b7070e7e2b5e64938f89891cf8c44f8997e86aa23c5d5bf70163,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Mar 17 18:28:25.650433 env[1216]: time="2025-03-17T18:28:25.650378022Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/csi:v3.29.1,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Mar 17 18:28:25.651912 env[1216]: time="2025-03-17T18:28:25.651885266Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/csi@sha256:eaa7e01fb16b603c155a67b81f16992281db7f831684c7b2081d3434587a7ff3,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Mar 17 18:28:25.652394 env[1216]: time="2025-03-17T18:28:25.652360732Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/csi:v3.29.1\" returns image reference \"sha256:3c11734f3001b7070e7e2b5e64938f89891cf8c44f8997e86aa23c5d5bf70163\"" Mar 17 18:28:25.654138 env[1216]: time="2025-03-17T18:28:25.654103468Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/apiserver:v3.29.1\"" Mar 17 18:28:25.656239 env[1216]: time="2025-03-17T18:28:25.655536628Z" level=info msg="CreateContainer within sandbox \"d6966a7e79563338d5eb4c2d384219225a1d3f028896cec0d7f576a8a0525117\" for container &ContainerMetadata{Name:calico-csi,Attempt:0,}" Mar 17 18:28:25.656439 sshd[4352]: pam_unix(sshd:session): session closed for user core Mar 17 18:28:25.659000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@11-10.0.0.111:22-10.0.0.1:41172 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:28:25.659886 systemd[1]: Started sshd@11-10.0.0.111:22-10.0.0.1:41172.service. Mar 17 18:28:25.663000 audit[4352]: USER_END pid=4352 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Mar 17 18:28:25.663000 audit[4352]: CRED_DISP pid=4352 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Mar 17 18:28:25.666685 systemd[1]: sshd@10-10.0.0.111:22-10.0.0.1:41162.service: Deactivated successfully. Mar 17 18:28:25.666000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@10-10.0.0.111:22-10.0.0.1:41162 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:28:25.667554 systemd[1]: session-11.scope: Deactivated successfully. Mar 17 18:28:25.668217 systemd-logind[1207]: Session 11 logged out. Waiting for processes to exit. Mar 17 18:28:25.670512 systemd-logind[1207]: Removed session 11. Mar 17 18:28:25.687888 env[1216]: time="2025-03-17T18:28:25.687816612Z" level=info msg="CreateContainer within sandbox \"d6966a7e79563338d5eb4c2d384219225a1d3f028896cec0d7f576a8a0525117\" for &ContainerMetadata{Name:calico-csi,Attempt:0,} returns container id \"f5e35d2c227009150e9d15ce1421ce1138fce508bb39618d618649bfeffe1391\"" Mar 17 18:28:25.689093 env[1216]: time="2025-03-17T18:28:25.689053441Z" level=info msg="StartContainer for \"f5e35d2c227009150e9d15ce1421ce1138fce508bb39618d618649bfeffe1391\"" Mar 17 18:28:25.708358 sshd[4427]: Accepted publickey for core from 10.0.0.1 port 41172 ssh2: RSA SHA256:hoQCPKafrT/V1URQ18ch5K7mLY85DMM2OIJJf47c8zQ Mar 17 18:28:25.707009 sshd[4427]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Mar 17 18:28:25.704000 audit[4427]: USER_ACCT pid=4427 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Mar 17 18:28:25.705000 audit[4427]: CRED_ACQ pid=4427 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Mar 17 18:28:25.705000 audit[4427]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=fffff7278e40 a2=3 a3=1 items=0 ppid=1 pid=4427 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=12 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:28:25.705000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Mar 17 18:28:25.719126 systemd[1]: Started session-12.scope. Mar 17 18:28:25.719677 systemd-logind[1207]: New session 12 of user core. Mar 17 18:28:25.726000 audit[4427]: USER_START pid=4427 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Mar 17 18:28:25.727000 audit[4465]: AVC avc: denied { bpf } for pid=4465 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:28:25.727000 audit[4465]: AVC avc: denied { bpf } for pid=4465 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:28:25.727000 audit[4465]: AVC avc: denied { perfmon } for pid=4465 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:28:25.727000 audit[4465]: AVC avc: denied { perfmon } for pid=4465 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:28:25.727000 audit[4465]: AVC avc: denied { perfmon } for pid=4465 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:28:25.727000 audit[4465]: AVC avc: denied { perfmon } for pid=4465 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:28:25.727000 audit[4465]: AVC avc: denied { perfmon } for pid=4465 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:28:25.727000 audit[4465]: AVC avc: denied { bpf } for pid=4465 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:28:25.727000 audit[4465]: AVC avc: denied { bpf } for pid=4465 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:28:25.727000 audit: BPF prog-id=184 op=LOAD Mar 17 18:28:25.727000 audit[4465]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=3 a0=5 a1=ffffc826a468 a2=98 a3=ffffc826a458 items=0 ppid=4333 pid=4465 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:28:25.727000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Mar 17 18:28:25.727000 audit: BPF prog-id=184 op=UNLOAD Mar 17 18:28:25.728000 audit[4464]: CRED_ACQ pid=4464 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Mar 17 18:28:25.728000 audit[4465]: AVC avc: denied { bpf } for pid=4465 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:28:25.728000 audit[4465]: AVC avc: denied { bpf } for pid=4465 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:28:25.728000 audit[4465]: AVC avc: denied { perfmon } for pid=4465 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:28:25.728000 audit[4465]: AVC avc: denied { perfmon } for pid=4465 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:28:25.728000 audit[4465]: AVC avc: denied { perfmon } for pid=4465 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:28:25.728000 audit[4465]: AVC avc: denied { perfmon } for pid=4465 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:28:25.728000 audit[4465]: AVC avc: denied { perfmon } for pid=4465 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:28:25.728000 audit[4465]: AVC avc: denied { bpf } for pid=4465 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:28:25.728000 audit[4465]: AVC avc: denied { bpf } for pid=4465 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:28:25.728000 audit: BPF prog-id=185 op=LOAD Mar 17 18:28:25.728000 audit[4465]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=3 a0=5 a1=ffffc826a148 a2=74 a3=95 items=0 ppid=4333 pid=4465 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:28:25.728000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Mar 17 18:28:25.728000 audit: BPF prog-id=185 op=UNLOAD Mar 17 18:28:25.728000 audit[4465]: AVC avc: denied { bpf } for pid=4465 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:28:25.728000 audit[4465]: AVC avc: denied { bpf } for pid=4465 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:28:25.728000 audit[4465]: AVC avc: denied { perfmon } for pid=4465 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:28:25.728000 audit[4465]: AVC avc: denied { perfmon } for pid=4465 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:28:25.728000 audit[4465]: AVC avc: denied { perfmon } for pid=4465 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:28:25.728000 audit[4465]: AVC avc: denied { perfmon } for pid=4465 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:28:25.728000 audit[4465]: AVC avc: denied { perfmon } for pid=4465 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:28:25.728000 audit[4465]: AVC avc: denied { bpf } for pid=4465 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:28:25.728000 audit[4465]: AVC avc: denied { bpf } for pid=4465 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:28:25.728000 audit: BPF prog-id=186 op=LOAD Mar 17 18:28:25.728000 audit[4465]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=3 a0=5 a1=ffffc826a1a8 a2=94 a3=2 items=0 ppid=4333 pid=4465 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:28:25.728000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Mar 17 18:28:25.728000 audit: BPF prog-id=186 op=UNLOAD Mar 17 18:28:25.728000 audit[4465]: AVC avc: denied { bpf } for pid=4465 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:28:25.728000 audit[4465]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=3 a0=12 a1=ffffc826a1d8 a2=28 a3=ffffc826a308 items=0 ppid=4333 pid=4465 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:28:25.728000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Mar 17 18:28:25.728000 audit[4465]: AVC avc: denied { bpf } for pid=4465 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:28:25.728000 audit[4465]: SYSCALL arch=c00000b7 syscall=280 success=no exit=-22 a0=12 a1=ffffc826a208 a2=28 a3=ffffc826a338 items=0 ppid=4333 pid=4465 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:28:25.728000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Mar 17 18:28:25.728000 audit[4465]: AVC avc: denied { bpf } for pid=4465 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:28:25.728000 audit[4465]: SYSCALL arch=c00000b7 syscall=280 success=no exit=-22 a0=12 a1=ffffc826a0b8 a2=28 a3=ffffc826a1e8 items=0 ppid=4333 pid=4465 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:28:25.728000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Mar 17 18:28:25.728000 audit[4465]: AVC avc: denied { bpf } for pid=4465 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:28:25.728000 audit[4465]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=3 a0=12 a1=ffffc826a228 a2=28 a3=ffffc826a358 items=0 ppid=4333 pid=4465 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:28:25.728000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Mar 17 18:28:25.728000 audit[4465]: AVC avc: denied { bpf } for pid=4465 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:28:25.728000 audit[4465]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=3 a0=12 a1=ffffc826a208 a2=28 a3=ffffc826a338 items=0 ppid=4333 pid=4465 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:28:25.728000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Mar 17 18:28:25.728000 audit[4465]: AVC avc: denied { bpf } for pid=4465 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:28:25.728000 audit[4465]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=3 a0=12 a1=ffffc826a1f8 a2=28 a3=ffffc826a328 items=0 ppid=4333 pid=4465 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:28:25.728000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Mar 17 18:28:25.728000 audit[4465]: AVC avc: denied { bpf } for pid=4465 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:28:25.728000 audit[4465]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=3 a0=12 a1=ffffc826a228 a2=28 a3=ffffc826a358 items=0 ppid=4333 pid=4465 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:28:25.728000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Mar 17 18:28:25.728000 audit[4465]: AVC avc: denied { bpf } for pid=4465 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:28:25.728000 audit[4465]: SYSCALL arch=c00000b7 syscall=280 success=no exit=-22 a0=12 a1=ffffc826a208 a2=28 a3=ffffc826a338 items=0 ppid=4333 pid=4465 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:28:25.728000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Mar 17 18:28:25.728000 audit[4465]: AVC avc: denied { bpf } for pid=4465 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:28:25.728000 audit[4465]: SYSCALL arch=c00000b7 syscall=280 success=no exit=-22 a0=12 a1=ffffc826a228 a2=28 a3=ffffc826a358 items=0 ppid=4333 pid=4465 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:28:25.728000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Mar 17 18:28:25.729000 audit[4465]: AVC avc: denied { bpf } for pid=4465 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:28:25.729000 audit[4465]: SYSCALL arch=c00000b7 syscall=280 success=no exit=-22 a0=0 a1=ffffc826a0c0 a2=50 a3=0 items=0 ppid=4333 pid=4465 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:28:25.729000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Mar 17 18:28:25.729000 audit[4465]: AVC avc: denied { bpf } for pid=4465 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:28:25.729000 audit[4465]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=6 a0=0 a1=ffffc826a0c0 a2=50 a3=0 items=0 ppid=4333 pid=4465 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:28:25.729000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Mar 17 18:28:25.729000 audit[4465]: AVC avc: denied { bpf } for pid=4465 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:28:25.729000 audit[4465]: AVC avc: denied { bpf } for pid=4465 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:28:25.729000 audit[4465]: AVC avc: denied { bpf } for pid=4465 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:28:25.729000 audit[4465]: AVC avc: denied { perfmon } for pid=4465 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:28:25.729000 audit[4465]: AVC avc: denied { perfmon } for pid=4465 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:28:25.729000 audit[4465]: AVC avc: denied { perfmon } for pid=4465 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:28:25.729000 audit[4465]: AVC avc: denied { perfmon } for pid=4465 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:28:25.729000 audit[4465]: AVC avc: denied { perfmon } for pid=4465 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:28:25.729000 audit[4465]: AVC avc: denied { bpf } for pid=4465 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:28:25.729000 audit[4465]: AVC avc: denied { bpf } for pid=4465 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:28:25.729000 audit: BPF prog-id=188 op=LOAD Mar 17 18:28:25.729000 audit[4465]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=6 a0=5 a1=ffffc8269828 a2=94 a3=2 items=0 ppid=4333 pid=4465 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:28:25.729000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Mar 17 18:28:25.729000 audit: BPF prog-id=188 op=UNLOAD Mar 17 18:28:25.729000 audit[4465]: AVC avc: denied { bpf } for pid=4465 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:28:25.729000 audit[4465]: AVC avc: denied { bpf } for pid=4465 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:28:25.729000 audit[4465]: AVC avc: denied { bpf } for pid=4465 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:28:25.729000 audit[4465]: AVC avc: denied { perfmon } for pid=4465 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:28:25.729000 audit[4465]: AVC avc: denied { perfmon } for pid=4465 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:28:25.729000 audit[4465]: AVC avc: denied { perfmon } for pid=4465 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:28:25.729000 audit[4465]: AVC avc: denied { perfmon } for pid=4465 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:28:25.729000 audit[4465]: AVC avc: denied { perfmon } for pid=4465 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:28:25.729000 audit[4465]: AVC avc: denied { bpf } for pid=4465 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:28:25.729000 audit[4465]: AVC avc: denied { bpf } for pid=4465 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:28:25.729000 audit: BPF prog-id=189 op=LOAD Mar 17 18:28:25.729000 audit[4465]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=6 a0=5 a1=ffffc82699b8 a2=94 a3=2d items=0 ppid=4333 pid=4465 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:28:25.729000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Mar 17 18:28:25.736464 systemd[1]: run-containerd-runc-k8s.io-f5e35d2c227009150e9d15ce1421ce1138fce508bb39618d618649bfeffe1391-runc.HJC7rx.mount: Deactivated successfully. Mar 17 18:28:25.740000 audit[4467]: AVC avc: denied { bpf } for pid=4467 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:28:25.740000 audit[4467]: AVC avc: denied { bpf } for pid=4467 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:28:25.740000 audit[4467]: AVC avc: denied { perfmon } for pid=4467 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:28:25.740000 audit[4467]: AVC avc: denied { perfmon } for pid=4467 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:28:25.740000 audit[4467]: AVC avc: denied { perfmon } for pid=4467 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:28:25.740000 audit[4467]: AVC avc: denied { perfmon } for pid=4467 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:28:25.740000 audit[4467]: AVC avc: denied { perfmon } for pid=4467 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:28:25.740000 audit[4467]: AVC avc: denied { bpf } for pid=4467 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:28:25.740000 audit[4467]: AVC avc: denied { bpf } for pid=4467 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:28:25.740000 audit: BPF prog-id=190 op=LOAD Mar 17 18:28:25.740000 audit[4467]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=3 a0=5 a1=ffffcec39508 a2=98 a3=ffffcec394f8 items=0 ppid=4333 pid=4467 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:28:25.740000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Mar 17 18:28:25.740000 audit: BPF prog-id=190 op=UNLOAD Mar 17 18:28:25.740000 audit[4467]: AVC avc: denied { bpf } for pid=4467 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:28:25.740000 audit[4467]: AVC avc: denied { bpf } for pid=4467 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:28:25.740000 audit[4467]: AVC avc: denied { perfmon } for pid=4467 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:28:25.740000 audit[4467]: AVC avc: denied { perfmon } for pid=4467 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:28:25.740000 audit[4467]: AVC avc: denied { perfmon } for pid=4467 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:28:25.740000 audit[4467]: AVC avc: denied { perfmon } for pid=4467 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:28:25.740000 audit[4467]: AVC avc: denied { perfmon } for pid=4467 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:28:25.740000 audit[4467]: AVC avc: denied { bpf } for pid=4467 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:28:25.740000 audit[4467]: AVC avc: denied { bpf } for pid=4467 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:28:25.740000 audit: BPF prog-id=191 op=LOAD Mar 17 18:28:25.740000 audit[4467]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=4 a0=5 a1=ffffcec39198 a2=74 a3=95 items=0 ppid=4333 pid=4467 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:28:25.740000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Mar 17 18:28:25.740000 audit: BPF prog-id=191 op=UNLOAD Mar 17 18:28:25.740000 audit[4467]: AVC avc: denied { bpf } for pid=4467 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:28:25.740000 audit[4467]: AVC avc: denied { bpf } for pid=4467 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:28:25.740000 audit[4467]: AVC avc: denied { perfmon } for pid=4467 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:28:25.740000 audit[4467]: AVC avc: denied { perfmon } for pid=4467 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:28:25.740000 audit[4467]: AVC avc: denied { perfmon } for pid=4467 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:28:25.740000 audit[4467]: AVC avc: denied { perfmon } for pid=4467 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:28:25.740000 audit[4467]: AVC avc: denied { perfmon } for pid=4467 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:28:25.740000 audit[4467]: AVC avc: denied { bpf } for pid=4467 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:28:25.740000 audit[4467]: AVC avc: denied { bpf } for pid=4467 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:28:25.740000 audit: BPF prog-id=192 op=LOAD Mar 17 18:28:25.740000 audit[4467]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=4 a0=5 a1=ffffcec391f8 a2=94 a3=2 items=0 ppid=4333 pid=4467 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:28:25.740000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Mar 17 18:28:25.740000 audit: BPF prog-id=192 op=UNLOAD Mar 17 18:28:25.757998 systemd[1]: Started cri-containerd-f5e35d2c227009150e9d15ce1421ce1138fce508bb39618d618649bfeffe1391.scope. Mar 17 18:28:25.793000 audit[4444]: AVC avc: denied { perfmon } for pid=4444 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:28:25.793000 audit[4444]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=0 a1=40001455a0 a2=3c a3=0 items=0 ppid=3753 pid=4444 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:28:25.793000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6635653335643263323237303039313530653964313563653134323163 Mar 17 18:28:25.793000 audit[4444]: AVC avc: denied { bpf } for pid=4444 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:28:25.793000 audit[4444]: AVC avc: denied { bpf } for pid=4444 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:28:25.793000 audit[4444]: AVC avc: denied { bpf } for pid=4444 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:28:25.793000 audit[4444]: AVC avc: denied { perfmon } for pid=4444 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:28:25.793000 audit[4444]: AVC avc: denied { perfmon } for pid=4444 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:28:25.793000 audit[4444]: AVC avc: denied { perfmon } for pid=4444 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:28:25.793000 audit[4444]: AVC avc: denied { perfmon } for pid=4444 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:28:25.793000 audit[4444]: AVC avc: denied { perfmon } for pid=4444 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:28:25.793000 audit[4444]: AVC avc: denied { bpf } for pid=4444 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:28:25.793000 audit[4444]: AVC avc: denied { bpf } for pid=4444 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:28:25.793000 audit: BPF prog-id=193 op=LOAD Mar 17 18:28:25.793000 audit[4444]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=5 a1=40001458e0 a2=78 a3=0 items=0 ppid=3753 pid=4444 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:28:25.793000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6635653335643263323237303039313530653964313563653134323163 Mar 17 18:28:25.794000 audit[4444]: AVC avc: denied { bpf } for pid=4444 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:28:25.794000 audit[4444]: AVC avc: denied { bpf } for pid=4444 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:28:25.794000 audit[4444]: AVC avc: denied { perfmon } for pid=4444 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:28:25.794000 audit[4444]: AVC avc: denied { perfmon } for pid=4444 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:28:25.794000 audit[4444]: AVC avc: denied { perfmon } for pid=4444 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:28:25.794000 audit[4444]: AVC avc: denied { perfmon } for pid=4444 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:28:25.794000 audit[4444]: AVC avc: denied { perfmon } for pid=4444 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:28:25.794000 audit[4444]: AVC avc: denied { bpf } for pid=4444 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:28:25.794000 audit[4444]: AVC avc: denied { bpf } for pid=4444 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:28:25.794000 audit: BPF prog-id=194 op=LOAD Mar 17 18:28:25.794000 audit[4444]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=17 a0=5 a1=4000145670 a2=78 a3=0 items=0 ppid=3753 pid=4444 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:28:25.794000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6635653335643263323237303039313530653964313563653134323163 Mar 17 18:28:25.794000 audit: BPF prog-id=194 op=UNLOAD Mar 17 18:28:25.794000 audit: BPF prog-id=193 op=UNLOAD Mar 17 18:28:25.794000 audit[4444]: AVC avc: denied { bpf } for pid=4444 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:28:25.794000 audit[4444]: AVC avc: denied { bpf } for pid=4444 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:28:25.794000 audit[4444]: AVC avc: denied { bpf } for pid=4444 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:28:25.794000 audit[4444]: AVC avc: denied { perfmon } for pid=4444 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:28:25.794000 audit[4444]: AVC avc: denied { perfmon } for pid=4444 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:28:25.794000 audit[4444]: AVC avc: denied { perfmon } for pid=4444 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:28:25.794000 audit[4444]: AVC avc: denied { perfmon } for pid=4444 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:28:25.794000 audit[4444]: AVC avc: denied { perfmon } for pid=4444 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:28:25.794000 audit[4444]: AVC avc: denied { bpf } for pid=4444 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:28:25.794000 audit[4444]: AVC avc: denied { bpf } for pid=4444 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:28:25.794000 audit: BPF prog-id=195 op=LOAD Mar 17 18:28:25.794000 audit[4444]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=5 a1=4000145b40 a2=78 a3=0 items=0 ppid=3753 pid=4444 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:28:25.794000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6635653335643263323237303039313530653964313563653134323163 Mar 17 18:28:25.812320 env[1216]: time="2025-03-17T18:28:25.812277694Z" level=info msg="StartContainer for \"f5e35d2c227009150e9d15ce1421ce1138fce508bb39618d618649bfeffe1391\" returns successfully" Mar 17 18:28:25.859000 audit[4467]: AVC avc: denied { bpf } for pid=4467 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:28:25.859000 audit[4467]: AVC avc: denied { bpf } for pid=4467 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:28:25.859000 audit[4467]: AVC avc: denied { perfmon } for pid=4467 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:28:25.859000 audit[4467]: AVC avc: denied { perfmon } for pid=4467 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:28:25.859000 audit[4467]: AVC avc: denied { perfmon } for pid=4467 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:28:25.859000 audit[4467]: AVC avc: denied { perfmon } for pid=4467 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:28:25.859000 audit[4467]: AVC avc: denied { perfmon } for pid=4467 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:28:25.859000 audit[4467]: AVC avc: denied { bpf } for pid=4467 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:28:25.859000 audit[4467]: AVC avc: denied { bpf } for pid=4467 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:28:25.859000 audit: BPF prog-id=196 op=LOAD Mar 17 18:28:25.859000 audit[4467]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=4 a0=5 a1=ffffcec391b8 a2=40 a3=ffffcec391e8 items=0 ppid=4333 pid=4467 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:28:25.859000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Mar 17 18:28:25.860000 audit: BPF prog-id=196 op=UNLOAD Mar 17 18:28:25.860000 audit[4467]: AVC avc: denied { perfmon } for pid=4467 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:28:25.860000 audit[4467]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=4 a0=0 a1=ffffcec392d0 a2=50 a3=0 items=0 ppid=4333 pid=4467 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:28:25.860000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Mar 17 18:28:25.870000 audit[4467]: AVC avc: denied { bpf } for pid=4467 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:28:25.870000 audit[4467]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=4 a0=12 a1=ffffcec39228 a2=28 a3=ffffcec39358 items=0 ppid=4333 pid=4467 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:28:25.870000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Mar 17 18:28:25.870000 audit[4467]: AVC avc: denied { bpf } for pid=4467 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:28:25.870000 audit[4467]: SYSCALL arch=c00000b7 syscall=280 success=no exit=-22 a0=12 a1=ffffcec39258 a2=28 a3=ffffcec39388 items=0 ppid=4333 pid=4467 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:28:25.870000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Mar 17 18:28:25.870000 audit[4467]: AVC avc: denied { bpf } for pid=4467 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:28:25.870000 audit[4467]: SYSCALL arch=c00000b7 syscall=280 success=no exit=-22 a0=12 a1=ffffcec39108 a2=28 a3=ffffcec39238 items=0 ppid=4333 pid=4467 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:28:25.870000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Mar 17 18:28:25.870000 audit[4467]: AVC avc: denied { bpf } for pid=4467 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:28:25.870000 audit[4467]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=4 a0=12 a1=ffffcec39278 a2=28 a3=ffffcec393a8 items=0 ppid=4333 pid=4467 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:28:25.870000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Mar 17 18:28:25.870000 audit[4467]: AVC avc: denied { bpf } for pid=4467 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:28:25.870000 audit[4467]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=4 a0=12 a1=ffffcec39258 a2=28 a3=ffffcec39388 items=0 ppid=4333 pid=4467 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:28:25.870000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Mar 17 18:28:25.870000 audit[4467]: AVC avc: denied { bpf } for pid=4467 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:28:25.870000 audit[4467]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=4 a0=12 a1=ffffcec39248 a2=28 a3=ffffcec39378 items=0 ppid=4333 pid=4467 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:28:25.870000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Mar 17 18:28:25.870000 audit[4467]: AVC avc: denied { bpf } for pid=4467 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:28:25.870000 audit[4467]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=4 a0=12 a1=ffffcec39278 a2=28 a3=ffffcec393a8 items=0 ppid=4333 pid=4467 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:28:25.870000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Mar 17 18:28:25.870000 audit[4467]: AVC avc: denied { bpf } for pid=4467 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:28:25.870000 audit[4467]: SYSCALL arch=c00000b7 syscall=280 success=no exit=-22 a0=12 a1=ffffcec39258 a2=28 a3=ffffcec39388 items=0 ppid=4333 pid=4467 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:28:25.870000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Mar 17 18:28:25.870000 audit[4467]: AVC avc: denied { bpf } for pid=4467 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:28:25.870000 audit[4467]: SYSCALL arch=c00000b7 syscall=280 success=no exit=-22 a0=12 a1=ffffcec39278 a2=28 a3=ffffcec393a8 items=0 ppid=4333 pid=4467 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:28:25.870000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Mar 17 18:28:25.870000 audit[4467]: AVC avc: denied { bpf } for pid=4467 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:28:25.870000 audit[4467]: SYSCALL arch=c00000b7 syscall=280 success=no exit=-22 a0=12 a1=ffffcec39248 a2=28 a3=ffffcec39378 items=0 ppid=4333 pid=4467 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:28:25.870000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Mar 17 18:28:25.870000 audit[4467]: AVC avc: denied { bpf } for pid=4467 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:28:25.870000 audit[4467]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=4 a0=12 a1=ffffcec392c8 a2=28 a3=ffffcec39408 items=0 ppid=4333 pid=4467 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:28:25.870000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Mar 17 18:28:25.871000 audit[4467]: AVC avc: denied { perfmon } for pid=4467 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:28:25.871000 audit[4467]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=5 a0=0 a1=ffffcec39000 a2=50 a3=0 items=0 ppid=4333 pid=4467 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:28:25.871000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Mar 17 18:28:25.871000 audit[4467]: AVC avc: denied { bpf } for pid=4467 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:28:25.871000 audit[4467]: AVC avc: denied { bpf } for pid=4467 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:28:25.871000 audit[4467]: AVC avc: denied { perfmon } for pid=4467 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:28:25.871000 audit[4467]: AVC avc: denied { perfmon } for pid=4467 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:28:25.871000 audit[4467]: AVC avc: denied { perfmon } for pid=4467 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:28:25.871000 audit[4467]: AVC avc: denied { perfmon } for pid=4467 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:28:25.871000 audit[4467]: AVC avc: denied { perfmon } for pid=4467 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:28:25.871000 audit[4467]: AVC avc: denied { bpf } for pid=4467 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:28:25.871000 audit[4467]: AVC avc: denied { bpf } for pid=4467 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:28:25.871000 audit: BPF prog-id=197 op=LOAD Mar 17 18:28:25.871000 audit[4467]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=6 a0=5 a1=ffffcec39008 a2=94 a3=5 items=0 ppid=4333 pid=4467 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:28:25.871000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Mar 17 18:28:25.871000 audit: BPF prog-id=197 op=UNLOAD Mar 17 18:28:25.871000 audit[4467]: AVC avc: denied { perfmon } for pid=4467 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:28:25.871000 audit[4467]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=5 a0=0 a1=ffffcec39110 a2=50 a3=0 items=0 ppid=4333 pid=4467 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:28:25.871000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Mar 17 18:28:25.871000 audit[4467]: AVC avc: denied { bpf } for pid=4467 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:28:25.871000 audit[4467]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=16 a1=ffffcec39258 a2=4 a3=3 items=0 ppid=4333 pid=4467 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:28:25.871000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Mar 17 18:28:25.871000 audit[4467]: AVC avc: denied { bpf } for pid=4467 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:28:25.871000 audit[4467]: AVC avc: denied { bpf } for pid=4467 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:28:25.871000 audit[4467]: AVC avc: denied { perfmon } for pid=4467 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:28:25.871000 audit[4467]: AVC avc: denied { bpf } for pid=4467 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:28:25.871000 audit[4467]: AVC avc: denied { perfmon } for pid=4467 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:28:25.871000 audit[4467]: AVC avc: denied { perfmon } for pid=4467 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:28:25.871000 audit[4467]: AVC avc: denied { perfmon } for pid=4467 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:28:25.871000 audit[4467]: AVC avc: denied { perfmon } for pid=4467 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:28:25.871000 audit[4467]: AVC avc: denied { perfmon } for pid=4467 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:28:25.871000 audit[4467]: AVC avc: denied { bpf } for pid=4467 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:28:25.871000 audit[4467]: AVC avc: denied { confidentiality } for pid=4467 comm="bpftool" lockdown_reason="use of bpf to read kernel RAM" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=lockdown permissive=0 Mar 17 18:28:25.871000 audit[4467]: SYSCALL arch=c00000b7 syscall=280 success=no exit=-22 a0=5 a1=ffffcec39238 a2=94 a3=6 items=0 ppid=4333 pid=4467 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:28:25.871000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Mar 17 18:28:25.871000 audit[4467]: AVC avc: denied { bpf } for pid=4467 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:28:25.871000 audit[4467]: AVC avc: denied { bpf } for pid=4467 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:28:25.871000 audit[4467]: AVC avc: denied { perfmon } for pid=4467 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:28:25.871000 audit[4467]: AVC avc: denied { bpf } for pid=4467 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:28:25.871000 audit[4467]: AVC avc: denied { perfmon } for pid=4467 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:28:25.871000 audit[4467]: AVC avc: denied { perfmon } for pid=4467 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:28:25.871000 audit[4467]: AVC avc: denied { perfmon } for pid=4467 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:28:25.871000 audit[4467]: AVC avc: denied { perfmon } for pid=4467 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:28:25.871000 audit[4467]: AVC avc: denied { perfmon } for pid=4467 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:28:25.871000 audit[4467]: AVC avc: denied { bpf } for pid=4467 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:28:25.871000 audit[4467]: AVC avc: denied { confidentiality } for pid=4467 comm="bpftool" lockdown_reason="use of bpf to read kernel RAM" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=lockdown permissive=0 Mar 17 18:28:25.871000 audit[4467]: SYSCALL arch=c00000b7 syscall=280 success=no exit=-22 a0=5 a1=ffffcec38a08 a2=94 a3=83 items=0 ppid=4333 pid=4467 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:28:25.871000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Mar 17 18:28:25.871000 audit[4467]: AVC avc: denied { bpf } for pid=4467 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:28:25.871000 audit[4467]: AVC avc: denied { bpf } for pid=4467 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:28:25.871000 audit[4467]: AVC avc: denied { perfmon } for pid=4467 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:28:25.871000 audit[4467]: AVC avc: denied { bpf } for pid=4467 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:28:25.871000 audit[4467]: AVC avc: denied { perfmon } for pid=4467 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:28:25.871000 audit[4467]: AVC avc: denied { perfmon } for pid=4467 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:28:25.871000 audit[4467]: AVC avc: denied { perfmon } for pid=4467 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:28:25.871000 audit[4467]: AVC avc: denied { perfmon } for pid=4467 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:28:25.871000 audit[4467]: AVC avc: denied { perfmon } for pid=4467 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:28:25.871000 audit[4467]: AVC avc: denied { bpf } for pid=4467 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:28:25.871000 audit[4467]: AVC avc: denied { confidentiality } for pid=4467 comm="bpftool" lockdown_reason="use of bpf to read kernel RAM" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=lockdown permissive=0 Mar 17 18:28:25.871000 audit[4467]: SYSCALL arch=c00000b7 syscall=280 success=no exit=-22 a0=5 a1=ffffcec38a08 a2=94 a3=83 items=0 ppid=4333 pid=4467 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:28:25.871000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Mar 17 18:28:25.872000 audit[4467]: AVC avc: denied { bpf } for pid=4467 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:28:25.872000 audit[4467]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=ffffcec3a448 a2=10 a3=ffffcec3a538 items=0 ppid=4333 pid=4467 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:28:25.872000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Mar 17 18:28:25.872000 audit[4467]: AVC avc: denied { bpf } for pid=4467 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:28:25.872000 audit[4467]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=ffffcec3a308 a2=10 a3=ffffcec3a3f8 items=0 ppid=4333 pid=4467 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:28:25.872000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Mar 17 18:28:25.872000 audit[4467]: AVC avc: denied { bpf } for pid=4467 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:28:25.872000 audit[4467]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=ffffcec3a278 a2=10 a3=ffffcec3a3f8 items=0 ppid=4333 pid=4467 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:28:25.872000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Mar 17 18:28:25.872000 audit[4467]: AVC avc: denied { bpf } for pid=4467 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:28:25.872000 audit[4467]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=ffffcec3a278 a2=10 a3=ffffcec3a3f8 items=0 ppid=4333 pid=4467 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:28:25.872000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Mar 17 18:28:25.883000 audit: BPF prog-id=189 op=UNLOAD Mar 17 18:28:25.909442 sshd[4427]: pam_unix(sshd:session): session closed for user core Mar 17 18:28:25.910000 audit[4427]: USER_END pid=4427 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Mar 17 18:28:25.910000 audit[4427]: CRED_DISP pid=4427 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Mar 17 18:28:25.913055 systemd[1]: sshd@11-10.0.0.111:22-10.0.0.1:41172.service: Deactivated successfully. Mar 17 18:28:25.912000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@11-10.0.0.111:22-10.0.0.1:41172 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:28:25.913789 systemd[1]: session-12.scope: Deactivated successfully. Mar 17 18:28:25.914403 systemd-logind[1207]: Session 12 logged out. Waiting for processes to exit. Mar 17 18:28:25.915171 systemd-logind[1207]: Removed session 12. Mar 17 18:28:25.948000 audit[4525]: NETFILTER_CFG table=mangle:105 family=2 entries=16 op=nft_register_chain pid=4525 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Mar 17 18:28:25.948000 audit[4525]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=6868 a0=3 a1=fffff42b5b50 a2=0 a3=ffffb5969fa8 items=0 ppid=4333 pid=4525 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:28:25.948000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Mar 17 18:28:25.950000 audit[4524]: NETFILTER_CFG table=nat:106 family=2 entries=15 op=nft_register_chain pid=4524 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Mar 17 18:28:25.950000 audit[4524]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=5084 a0=3 a1=fffff5e22aa0 a2=0 a3=ffffb57e9fa8 items=0 ppid=4333 pid=4524 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:28:25.950000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Mar 17 18:28:25.957000 audit[4523]: NETFILTER_CFG table=raw:107 family=2 entries=21 op=nft_register_chain pid=4523 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Mar 17 18:28:25.957000 audit[4523]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=8452 a0=3 a1=ffffd6a5ac50 a2=0 a3=ffff8aefffa8 items=0 ppid=4333 pid=4523 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:28:25.957000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Mar 17 18:28:25.963000 audit[4528]: NETFILTER_CFG table=filter:108 family=2 entries=215 op=nft_register_chain pid=4528 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Mar 17 18:28:25.963000 audit[4528]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=125772 a0=3 a1=ffffc14cf610 a2=0 a3=ffffa3fa8fa8 items=0 ppid=4333 pid=4528 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:28:25.963000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Mar 17 18:28:25.969905 env[1216]: time="2025-03-17T18:28:25.969852286Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/apiserver:v3.29.1,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Mar 17 18:28:25.971457 env[1216]: time="2025-03-17T18:28:25.971406172Z" level=info msg="ImageUpdate event &ImageUpdate{Name:sha256:5451b31bd8d0784796fa1204c4ec22975a270e21feadf2c5095fe41a38524c6c,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Mar 17 18:28:25.973705 env[1216]: time="2025-03-17T18:28:25.973666857Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/apiserver:v3.29.1,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Mar 17 18:28:25.975115 env[1216]: time="2025-03-17T18:28:25.975081895Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/apiserver@sha256:b8c43e264fe52e0c327b0bf3ac882a0224b33bdd7f4ff58a74242da7d9b00486,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Mar 17 18:28:25.975634 env[1216]: time="2025-03-17T18:28:25.975609484Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/apiserver:v3.29.1\" returns image reference \"sha256:5451b31bd8d0784796fa1204c4ec22975a270e21feadf2c5095fe41a38524c6c\"" Mar 17 18:28:25.977199 env[1216]: time="2025-03-17T18:28:25.977163290Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/node-driver-registrar:v3.29.1\"" Mar 17 18:28:25.977917 env[1216]: time="2025-03-17T18:28:25.977885290Z" level=info msg="CreateContainer within sandbox \"f7c91c42a0e01d9502f0d1a3f29ffcf51d26610476dc5f7e2e85d2316693c5e0\" for container &ContainerMetadata{Name:calico-apiserver,Attempt:0,}" Mar 17 18:28:25.991954 env[1216]: time="2025-03-17T18:28:25.991905265Z" level=info msg="CreateContainer within sandbox \"f7c91c42a0e01d9502f0d1a3f29ffcf51d26610476dc5f7e2e85d2316693c5e0\" for &ContainerMetadata{Name:calico-apiserver,Attempt:0,} returns container id \"107a57306c9d10cc83f1d35686233b454a1084cd6cceac001457b11ee9c69ba0\"" Mar 17 18:28:25.992345 env[1216]: time="2025-03-17T18:28:25.992321888Z" level=info msg="StartContainer for \"107a57306c9d10cc83f1d35686233b454a1084cd6cceac001457b11ee9c69ba0\"" Mar 17 18:28:26.012182 systemd[1]: Started cri-containerd-107a57306c9d10cc83f1d35686233b454a1084cd6cceac001457b11ee9c69ba0.scope. Mar 17 18:28:26.027678 kubelet[1962]: I0317 18:28:26.026652 1962 prober_manager.go:312] "Failed to trigger a manual run" probe="Readiness" Mar 17 18:28:26.040000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:28:26.040000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:28:26.040000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:28:26.040000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:28:26.040000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:28:26.040000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:28:26.040000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:28:26.040000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:28:26.040000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:28:26.040000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:28:26.040000 audit: BPF prog-id=198 op=LOAD Mar 17 18:28:26.041000 audit[4539]: AVC avc: denied { bpf } for pid=4539 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:28:26.041000 audit[4539]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000195b38 a2=10 a3=0 items=0 ppid=4123 pid=4539 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:28:26.041000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3130376135373330366339643130636338336631643335363836323333 Mar 17 18:28:26.041000 audit[4539]: AVC avc: denied { perfmon } for pid=4539 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:28:26.041000 audit[4539]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001955a0 a2=3c a3=0 items=0 ppid=4123 pid=4539 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:28:26.041000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3130376135373330366339643130636338336631643335363836323333 Mar 17 18:28:26.041000 audit[4539]: AVC avc: denied { bpf } for pid=4539 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:28:26.041000 audit[4539]: AVC avc: denied { bpf } for pid=4539 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:28:26.041000 audit[4539]: AVC avc: denied { bpf } for pid=4539 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:28:26.041000 audit[4539]: AVC avc: denied { perfmon } for pid=4539 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:28:26.041000 audit[4539]: AVC avc: denied { perfmon } for pid=4539 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:28:26.041000 audit[4539]: AVC avc: denied { perfmon } for pid=4539 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:28:26.041000 audit[4539]: AVC avc: denied { perfmon } for pid=4539 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:28:26.041000 audit[4539]: AVC avc: denied { perfmon } for pid=4539 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:28:26.041000 audit[4539]: AVC avc: denied { bpf } for pid=4539 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:28:26.041000 audit[4539]: AVC avc: denied { bpf } for pid=4539 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:28:26.041000 audit: BPF prog-id=199 op=LOAD Mar 17 18:28:26.041000 audit[4539]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001958e0 a2=78 a3=0 items=0 ppid=4123 pid=4539 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:28:26.041000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3130376135373330366339643130636338336631643335363836323333 Mar 17 18:28:26.041000 audit[4539]: AVC avc: denied { bpf } for pid=4539 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:28:26.041000 audit[4539]: AVC avc: denied { bpf } for pid=4539 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:28:26.041000 audit[4539]: AVC avc: denied { perfmon } for pid=4539 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:28:26.041000 audit[4539]: AVC avc: denied { perfmon } for pid=4539 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:28:26.041000 audit[4539]: AVC avc: denied { perfmon } for pid=4539 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:28:26.041000 audit[4539]: AVC avc: denied { perfmon } for pid=4539 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:28:26.041000 audit[4539]: AVC avc: denied { perfmon } for pid=4539 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:28:26.041000 audit[4539]: AVC avc: denied { bpf } for pid=4539 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:28:26.041000 audit[4539]: AVC avc: denied { bpf } for pid=4539 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:28:26.041000 audit: BPF prog-id=200 op=LOAD Mar 17 18:28:26.041000 audit[4539]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000195670 a2=78 a3=0 items=0 ppid=4123 pid=4539 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:28:26.041000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3130376135373330366339643130636338336631643335363836323333 Mar 17 18:28:26.041000 audit: BPF prog-id=200 op=UNLOAD Mar 17 18:28:26.041000 audit: BPF prog-id=199 op=UNLOAD Mar 17 18:28:26.041000 audit[4539]: AVC avc: denied { bpf } for pid=4539 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:28:26.041000 audit[4539]: AVC avc: denied { bpf } for pid=4539 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:28:26.041000 audit[4539]: AVC avc: denied { bpf } for pid=4539 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:28:26.041000 audit[4539]: AVC avc: denied { perfmon } for pid=4539 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:28:26.041000 audit[4539]: AVC avc: denied { perfmon } for pid=4539 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:28:26.041000 audit[4539]: AVC avc: denied { perfmon } for pid=4539 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:28:26.041000 audit[4539]: AVC avc: denied { perfmon } for pid=4539 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:28:26.041000 audit[4539]: AVC avc: denied { perfmon } for pid=4539 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:28:26.041000 audit[4539]: AVC avc: denied { bpf } for pid=4539 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:28:26.041000 audit[4539]: AVC avc: denied { bpf } for pid=4539 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:28:26.041000 audit: BPF prog-id=201 op=LOAD Mar 17 18:28:26.041000 audit[4539]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000195b40 a2=78 a3=0 items=0 ppid=4123 pid=4539 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:28:26.041000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3130376135373330366339643130636338336631643335363836323333 Mar 17 18:28:26.061238 env[1216]: time="2025-03-17T18:28:26.061190294Z" level=info msg="StartContainer for \"107a57306c9d10cc83f1d35686233b454a1084cd6cceac001457b11ee9c69ba0\" returns successfully" Mar 17 18:28:26.082000 audit[4568]: NETFILTER_CFG table=filter:109 family=2 entries=10 op=nft_register_rule pid=4568 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Mar 17 18:28:26.082000 audit[4568]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=3760 a0=3 a1=fffffba951c0 a2=0 a3=1 items=0 ppid=2108 pid=4568 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:28:26.082000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Mar 17 18:28:26.090000 audit[4568]: NETFILTER_CFG table=nat:110 family=2 entries=20 op=nft_register_rule pid=4568 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Mar 17 18:28:26.090000 audit[4568]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=5772 a0=3 a1=fffffba951c0 a2=0 a3=1 items=0 ppid=2108 pid=4568 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:28:26.090000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Mar 17 18:28:26.245000 audit[4272]: AVC avc: denied { watch } for pid=4272 comm="apiserver" path="/calico-apiserver-certs/..2025_03_17_18_28_08.1936002007/tls.crt" dev="tmpfs" ino=4 scontext=system_u:system_r:svirt_lxc_net_t:s0:c141,c333 tcontext=system_u:object_r:svirt_lxc_file_t:s0:c141,c333 tclass=file permissive=0 Mar 17 18:28:26.245000 audit[4272]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=7 a1=40013b9d60 a2=fc6 a3=0 items=0 ppid=3700 pid=4272 auid=4294967295 uid=10001 gid=10001 euid=10001 suid=10001 fsuid=10001 egid=10001 sgid=10001 fsgid=10001 tty=(none) ses=4294967295 comm="apiserver" exe="/code/apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c141,c333 key=(null) Mar 17 18:28:26.245000 audit: PROCTITLE proctitle=2F636F64652F617069736572766572002D2D7365637572652D706F72743D35343433002D2D746C732D707269766174652D6B65792D66696C653D2F63616C69636F2D6170697365727665722D63657274732F746C732E6B6579002D2D746C732D636572742D66696C653D2F63616C69636F2D6170697365727665722D63657274 Mar 17 18:28:26.625122 kubelet[1962]: I0317 18:28:26.625083 1962 prober_manager.go:312] "Failed to trigger a manual run" probe="Readiness" Mar 17 18:28:26.625522 kubelet[1962]: E0317 18:28:26.625499 1962 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Mar 17 18:28:27.045670 kubelet[1962]: I0317 18:28:27.045539 1962 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="calico-apiserver/calico-apiserver-66cb7fb7dc-2bvrs" podStartSLOduration=26.259792605 podStartE2EDuration="29.045520206s" podCreationTimestamp="2025-03-17 18:27:58 +0000 UTC" firstStartedPulling="2025-03-17 18:28:21.349348229 +0000 UTC m=+36.575653570" lastFinishedPulling="2025-03-17 18:28:24.13507579 +0000 UTC m=+39.361381171" observedRunningTime="2025-03-17 18:28:25.031660934 +0000 UTC m=+40.257966315" watchObservedRunningTime="2025-03-17 18:28:27.045520206 +0000 UTC m=+42.271825587" Mar 17 18:28:27.065000 audit[4622]: NETFILTER_CFG table=filter:111 family=2 entries=10 op=nft_register_rule pid=4622 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Mar 17 18:28:27.065000 audit[4622]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=3760 a0=3 a1=fffff238c280 a2=0 a3=1 items=0 ppid=2108 pid=4622 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:28:27.065000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Mar 17 18:28:27.073000 audit[4622]: NETFILTER_CFG table=nat:112 family=2 entries=20 op=nft_register_rule pid=4622 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Mar 17 18:28:27.073000 audit[4622]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=5772 a0=3 a1=fffff238c280 a2=0 a3=1 items=0 ppid=2108 pid=4622 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:28:27.073000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Mar 17 18:28:27.217959 systemd-networkd[1043]: vxlan.calico: Gained IPv6LL Mar 17 18:28:27.304818 env[1216]: time="2025-03-17T18:28:27.304708096Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/node-driver-registrar:v3.29.1,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Mar 17 18:28:27.306679 env[1216]: time="2025-03-17T18:28:27.306633878Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:3eb557f7694f230afd24a75a691bcda4c0a7bfe87a981386dcd4ecf2b0701349,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Mar 17 18:28:27.308562 env[1216]: time="2025-03-17T18:28:27.308532298Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/node-driver-registrar:v3.29.1,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Mar 17 18:28:27.310049 env[1216]: time="2025-03-17T18:28:27.310012696Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/node-driver-registrar@sha256:a338da9488cbaa83c78457c3d7354d84149969c0480e88dd768e036632ff5b76,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Mar 17 18:28:27.311569 env[1216]: time="2025-03-17T18:28:27.311534056Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/node-driver-registrar:v3.29.1\" returns image reference \"sha256:3eb557f7694f230afd24a75a691bcda4c0a7bfe87a981386dcd4ecf2b0701349\"" Mar 17 18:28:27.314494 env[1216]: time="2025-03-17T18:28:27.314437489Z" level=info msg="CreateContainer within sandbox \"d6966a7e79563338d5eb4c2d384219225a1d3f028896cec0d7f576a8a0525117\" for container &ContainerMetadata{Name:csi-node-driver-registrar,Attempt:0,}" Mar 17 18:28:27.333732 env[1216]: time="2025-03-17T18:28:27.333690942Z" level=info msg="CreateContainer within sandbox \"d6966a7e79563338d5eb4c2d384219225a1d3f028896cec0d7f576a8a0525117\" for &ContainerMetadata{Name:csi-node-driver-registrar,Attempt:0,} returns container id \"affdacf12f05e9436801a9f2a611eed116bca814a99fd506b77aba006814fb5d\"" Mar 17 18:28:27.334125 env[1216]: time="2025-03-17T18:28:27.334100724Z" level=info msg="StartContainer for \"affdacf12f05e9436801a9f2a611eed116bca814a99fd506b77aba006814fb5d\"" Mar 17 18:28:27.350399 systemd[1]: Started cri-containerd-affdacf12f05e9436801a9f2a611eed116bca814a99fd506b77aba006814fb5d.scope. Mar 17 18:28:27.380000 audit[4630]: AVC avc: denied { perfmon } for pid=4630 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:28:27.380000 audit[4630]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=0 a1=40001155a0 a2=3c a3=0 items=0 ppid=3753 pid=4630 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:28:27.380000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6166666461636631326630356539343336383031613966326136313165 Mar 17 18:28:27.380000 audit[4630]: AVC avc: denied { bpf } for pid=4630 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:28:27.380000 audit[4630]: AVC avc: denied { bpf } for pid=4630 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:28:27.380000 audit[4630]: AVC avc: denied { bpf } for pid=4630 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:28:27.380000 audit[4630]: AVC avc: denied { perfmon } for pid=4630 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:28:27.380000 audit[4630]: AVC avc: denied { perfmon } for pid=4630 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:28:27.380000 audit[4630]: AVC avc: denied { perfmon } for pid=4630 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:28:27.380000 audit[4630]: AVC avc: denied { perfmon } for pid=4630 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:28:27.380000 audit[4630]: AVC avc: denied { perfmon } for pid=4630 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:28:27.380000 audit[4630]: AVC avc: denied { bpf } for pid=4630 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:28:27.380000 audit[4630]: AVC avc: denied { bpf } for pid=4630 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:28:27.380000 audit: BPF prog-id=202 op=LOAD Mar 17 18:28:27.380000 audit[4630]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=5 a1=40001158e0 a2=78 a3=0 items=0 ppid=3753 pid=4630 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:28:27.380000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6166666461636631326630356539343336383031613966326136313165 Mar 17 18:28:27.380000 audit[4630]: AVC avc: denied { bpf } for pid=4630 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:28:27.380000 audit[4630]: AVC avc: denied { bpf } for pid=4630 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:28:27.380000 audit[4630]: AVC avc: denied { perfmon } for pid=4630 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:28:27.380000 audit[4630]: AVC avc: denied { perfmon } for pid=4630 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:28:27.380000 audit[4630]: AVC avc: denied { perfmon } for pid=4630 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:28:27.380000 audit[4630]: AVC avc: denied { perfmon } for pid=4630 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:28:27.380000 audit[4630]: AVC avc: denied { perfmon } for pid=4630 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:28:27.380000 audit[4630]: AVC avc: denied { bpf } for pid=4630 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:28:27.380000 audit[4630]: AVC avc: denied { bpf } for pid=4630 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:28:27.380000 audit: BPF prog-id=203 op=LOAD Mar 17 18:28:27.380000 audit[4630]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=17 a0=5 a1=4000115670 a2=78 a3=0 items=0 ppid=3753 pid=4630 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:28:27.380000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6166666461636631326630356539343336383031613966326136313165 Mar 17 18:28:27.380000 audit: BPF prog-id=203 op=UNLOAD Mar 17 18:28:27.380000 audit: BPF prog-id=202 op=UNLOAD Mar 17 18:28:27.380000 audit[4630]: AVC avc: denied { bpf } for pid=4630 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:28:27.380000 audit[4630]: AVC avc: denied { bpf } for pid=4630 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:28:27.380000 audit[4630]: AVC avc: denied { bpf } for pid=4630 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:28:27.380000 audit[4630]: AVC avc: denied { perfmon } for pid=4630 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:28:27.380000 audit[4630]: AVC avc: denied { perfmon } for pid=4630 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:28:27.380000 audit[4630]: AVC avc: denied { perfmon } for pid=4630 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:28:27.380000 audit[4630]: AVC avc: denied { perfmon } for pid=4630 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:28:27.380000 audit[4630]: AVC avc: denied { perfmon } for pid=4630 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:28:27.380000 audit[4630]: AVC avc: denied { bpf } for pid=4630 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:28:27.380000 audit[4630]: AVC avc: denied { bpf } for pid=4630 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:28:27.380000 audit: BPF prog-id=204 op=LOAD Mar 17 18:28:27.380000 audit[4630]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=5 a1=4000115b40 a2=78 a3=0 items=0 ppid=3753 pid=4630 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:28:27.380000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6166666461636631326630356539343336383031613966326136313165 Mar 17 18:28:27.396813 env[1216]: time="2025-03-17T18:28:27.396761264Z" level=info msg="StartContainer for \"affdacf12f05e9436801a9f2a611eed116bca814a99fd506b77aba006814fb5d\" returns successfully" Mar 17 18:28:27.552000 audit[4550]: AVC avc: denied { watch } for pid=4550 comm="apiserver" path="/calico-apiserver-certs/..2025_03_17_18_28_08.992037449/tls.crt" dev="tmpfs" ino=3 scontext=system_u:system_r:svirt_lxc_net_t:s0:c145,c499 tcontext=system_u:object_r:svirt_lxc_file_t:s0:c145,c499 tclass=file permissive=0 Mar 17 18:28:27.552000 audit[4550]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=7 a1=40010306e0 a2=fc6 a3=0 items=0 ppid=4123 pid=4550 auid=4294967295 uid=10001 gid=10001 euid=10001 suid=10001 fsuid=10001 egid=10001 sgid=10001 fsgid=10001 tty=(none) ses=4294967295 comm="apiserver" exe="/code/apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c145,c499 key=(null) Mar 17 18:28:27.552000 audit: PROCTITLE proctitle=2F636F64652F617069736572766572002D2D7365637572652D706F72743D35343433002D2D746C732D707269766174652D6B65792D66696C653D2F63616C69636F2D6170697365727665722D63657274732F746C732E6B6579002D2D746C732D636572742D66696C653D2F63616C69636F2D6170697365727665722D63657274 Mar 17 18:28:27.573159 kubelet[1962]: I0317 18:28:27.572806 1962 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="calico-apiserver/calico-apiserver-66cb7fb7dc-vzzfc" podStartSLOduration=26.026012594 podStartE2EDuration="29.572786894s" podCreationTimestamp="2025-03-17 18:27:58 +0000 UTC" firstStartedPulling="2025-03-17 18:28:22.42985016 +0000 UTC m=+37.656155501" lastFinishedPulling="2025-03-17 18:28:25.97662434 +0000 UTC m=+41.202929801" observedRunningTime="2025-03-17 18:28:27.045802421 +0000 UTC m=+42.272107802" watchObservedRunningTime="2025-03-17 18:28:27.572786894 +0000 UTC m=+42.799092275" Mar 17 18:28:27.927332 kubelet[1962]: I0317 18:28:27.927288 1962 csi_plugin.go:100] kubernetes.io/csi: Trying to validate a new CSI Driver with name: csi.tigera.io endpoint: /var/lib/kubelet/plugins/csi.tigera.io/csi.sock versions: 1.0.0 Mar 17 18:28:27.931001 kubelet[1962]: I0317 18:28:27.930976 1962 csi_plugin.go:113] kubernetes.io/csi: Register new plugin with name: csi.tigera.io at endpoint: /var/lib/kubelet/plugins/csi.tigera.io/csi.sock Mar 17 18:28:28.083000 audit[4663]: NETFILTER_CFG table=filter:113 family=2 entries=9 op=nft_register_rule pid=4663 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Mar 17 18:28:28.083000 audit[4663]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=3016 a0=3 a1=ffffc6f0efa0 a2=0 a3=1 items=0 ppid=2108 pid=4663 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:28:28.083000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Mar 17 18:28:28.092000 audit[4663]: NETFILTER_CFG table=nat:114 family=2 entries=27 op=nft_register_chain pid=4663 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Mar 17 18:28:28.092000 audit[4663]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=9348 a0=3 a1=ffffc6f0efa0 a2=0 a3=1 items=0 ppid=2108 pid=4663 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:28:28.092000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Mar 17 18:28:30.913000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@12-10.0.0.111:22-10.0.0.1:41178 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:28:30.914383 systemd[1]: Started sshd@12-10.0.0.111:22-10.0.0.1:41178.service. Mar 17 18:28:30.915218 kernel: kauditd_printk_skb: 696 callbacks suppressed Mar 17 18:28:30.915256 kernel: audit: type=1130 audit(1742236110.913:1366): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@12-10.0.0.111:22-10.0.0.1:41178 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:28:30.950000 audit[4670]: USER_ACCT pid=4670 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Mar 17 18:28:30.951124 sshd[4670]: Accepted publickey for core from 10.0.0.1 port 41178 ssh2: RSA SHA256:hoQCPKafrT/V1URQ18ch5K7mLY85DMM2OIJJf47c8zQ Mar 17 18:28:30.953047 sshd[4670]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Mar 17 18:28:30.951000 audit[4670]: CRED_ACQ pid=4670 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Mar 17 18:28:30.955730 kernel: audit: type=1101 audit(1742236110.950:1367): pid=4670 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Mar 17 18:28:30.955805 kernel: audit: type=1103 audit(1742236110.951:1368): pid=4670 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Mar 17 18:28:30.957243 kernel: audit: type=1006 audit(1742236110.951:1369): pid=4670 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=13 res=1 Mar 17 18:28:30.957296 kernel: audit: type=1300 audit(1742236110.951:1369): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffc1b0c6f0 a2=3 a3=1 items=0 ppid=1 pid=4670 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=13 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:28:30.951000 audit[4670]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffc1b0c6f0 a2=3 a3=1 items=0 ppid=1 pid=4670 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=13 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:28:30.951000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Mar 17 18:28:30.960850 kernel: audit: type=1327 audit(1742236110.951:1369): proctitle=737368643A20636F7265205B707269765D Mar 17 18:28:30.962915 systemd[1]: Started session-13.scope. Mar 17 18:28:30.963047 systemd-logind[1207]: New session 13 of user core. Mar 17 18:28:30.967000 audit[4670]: USER_START pid=4670 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Mar 17 18:28:30.968000 audit[4678]: CRED_ACQ pid=4678 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Mar 17 18:28:30.973223 kernel: audit: type=1105 audit(1742236110.967:1370): pid=4670 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Mar 17 18:28:30.973264 kernel: audit: type=1103 audit(1742236110.968:1371): pid=4678 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Mar 17 18:28:31.143284 sshd[4670]: pam_unix(sshd:session): session closed for user core Mar 17 18:28:31.143000 audit[4670]: USER_END pid=4670 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Mar 17 18:28:31.146041 systemd[1]: sshd@12-10.0.0.111:22-10.0.0.1:41178.service: Deactivated successfully. Mar 17 18:28:31.146777 systemd[1]: session-13.scope: Deactivated successfully. Mar 17 18:28:31.143000 audit[4670]: CRED_DISP pid=4670 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Mar 17 18:28:31.147459 systemd-logind[1207]: Session 13 logged out. Waiting for processes to exit. Mar 17 18:28:31.148091 systemd-logind[1207]: Removed session 13. Mar 17 18:28:31.148983 kernel: audit: type=1106 audit(1742236111.143:1372): pid=4670 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Mar 17 18:28:31.149033 kernel: audit: type=1104 audit(1742236111.143:1373): pid=4670 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Mar 17 18:28:31.143000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@12-10.0.0.111:22-10.0.0.1:41178 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:28:36.148689 systemd[1]: Started sshd@13-10.0.0.111:22-10.0.0.1:50032.service. Mar 17 18:28:36.147000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@13-10.0.0.111:22-10.0.0.1:50032 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:28:36.149868 kernel: kauditd_printk_skb: 1 callbacks suppressed Mar 17 18:28:36.149938 kernel: audit: type=1130 audit(1742236116.147:1375): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@13-10.0.0.111:22-10.0.0.1:50032 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:28:36.181000 audit[4700]: USER_ACCT pid=4700 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Mar 17 18:28:36.183916 sshd[4700]: Accepted publickey for core from 10.0.0.1 port 50032 ssh2: RSA SHA256:hoQCPKafrT/V1URQ18ch5K7mLY85DMM2OIJJf47c8zQ Mar 17 18:28:36.185249 sshd[4700]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Mar 17 18:28:36.183000 audit[4700]: CRED_ACQ pid=4700 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Mar 17 18:28:36.187890 kernel: audit: type=1101 audit(1742236116.181:1376): pid=4700 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Mar 17 18:28:36.187961 kernel: audit: type=1103 audit(1742236116.183:1377): pid=4700 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Mar 17 18:28:36.187987 kernel: audit: type=1006 audit(1742236116.183:1378): pid=4700 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=14 res=1 Mar 17 18:28:36.183000 audit[4700]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=fffff9d4b620 a2=3 a3=1 items=0 ppid=1 pid=4700 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=14 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:28:36.188863 systemd-logind[1207]: New session 14 of user core. Mar 17 18:28:36.189603 systemd[1]: Started session-14.scope. Mar 17 18:28:36.191472 kernel: audit: type=1300 audit(1742236116.183:1378): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=fffff9d4b620 a2=3 a3=1 items=0 ppid=1 pid=4700 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=14 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:28:36.191550 kernel: audit: type=1327 audit(1742236116.183:1378): proctitle=737368643A20636F7265205B707269765D Mar 17 18:28:36.183000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Mar 17 18:28:36.191000 audit[4700]: USER_START pid=4700 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Mar 17 18:28:36.191000 audit[4702]: CRED_ACQ pid=4702 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Mar 17 18:28:36.197824 kernel: audit: type=1105 audit(1742236116.191:1379): pid=4700 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Mar 17 18:28:36.197905 kernel: audit: type=1103 audit(1742236116.191:1380): pid=4702 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Mar 17 18:28:36.310502 sshd[4700]: pam_unix(sshd:session): session closed for user core Mar 17 18:28:36.309000 audit[4700]: USER_END pid=4700 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Mar 17 18:28:36.313299 systemd[1]: session-14.scope: Deactivated successfully. Mar 17 18:28:36.310000 audit[4700]: CRED_DISP pid=4700 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Mar 17 18:28:36.313965 systemd-logind[1207]: Session 14 logged out. Waiting for processes to exit. Mar 17 18:28:36.314129 systemd[1]: sshd@13-10.0.0.111:22-10.0.0.1:50032.service: Deactivated successfully. Mar 17 18:28:36.315232 systemd-logind[1207]: Removed session 14. Mar 17 18:28:36.316746 kernel: audit: type=1106 audit(1742236116.309:1381): pid=4700 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Mar 17 18:28:36.316802 kernel: audit: type=1104 audit(1742236116.310:1382): pid=4700 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Mar 17 18:28:36.312000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@13-10.0.0.111:22-10.0.0.1:50032 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:28:41.315993 systemd[1]: Started sshd@14-10.0.0.111:22-10.0.0.1:50046.service. Mar 17 18:28:41.315000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@14-10.0.0.111:22-10.0.0.1:50046 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:28:41.317082 kernel: kauditd_printk_skb: 1 callbacks suppressed Mar 17 18:28:41.317141 kernel: audit: type=1130 audit(1742236121.315:1384): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@14-10.0.0.111:22-10.0.0.1:50046 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:28:41.355791 sshd[4714]: Accepted publickey for core from 10.0.0.1 port 50046 ssh2: RSA SHA256:hoQCPKafrT/V1URQ18ch5K7mLY85DMM2OIJJf47c8zQ Mar 17 18:28:41.354000 audit[4714]: USER_ACCT pid=4714 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Mar 17 18:28:41.358000 audit[4714]: CRED_ACQ pid=4714 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Mar 17 18:28:41.359506 sshd[4714]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Mar 17 18:28:41.361314 kernel: audit: type=1101 audit(1742236121.354:1385): pid=4714 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Mar 17 18:28:41.361381 kernel: audit: type=1103 audit(1742236121.358:1386): pid=4714 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Mar 17 18:28:41.361409 kernel: audit: type=1006 audit(1742236121.358:1387): pid=4714 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=15 res=1 Mar 17 18:28:41.358000 audit[4714]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffff271fb0 a2=3 a3=1 items=0 ppid=1 pid=4714 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=15 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:28:41.365540 kernel: audit: type=1300 audit(1742236121.358:1387): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffff271fb0 a2=3 a3=1 items=0 ppid=1 pid=4714 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=15 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:28:41.365610 kernel: audit: type=1327 audit(1742236121.358:1387): proctitle=737368643A20636F7265205B707269765D Mar 17 18:28:41.358000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Mar 17 18:28:41.365807 systemd-logind[1207]: New session 15 of user core. Mar 17 18:28:41.366673 systemd[1]: Started session-15.scope. Mar 17 18:28:41.369000 audit[4714]: USER_START pid=4714 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Mar 17 18:28:41.370000 audit[4716]: CRED_ACQ pid=4716 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Mar 17 18:28:41.375140 kernel: audit: type=1105 audit(1742236121.369:1388): pid=4714 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Mar 17 18:28:41.375188 kernel: audit: type=1103 audit(1742236121.370:1389): pid=4716 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Mar 17 18:28:41.491552 sshd[4714]: pam_unix(sshd:session): session closed for user core Mar 17 18:28:41.491000 audit[4714]: USER_END pid=4714 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Mar 17 18:28:41.492000 audit[4714]: CRED_DISP pid=4714 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Mar 17 18:28:41.495469 systemd[1]: Started sshd@15-10.0.0.111:22-10.0.0.1:50058.service. Mar 17 18:28:41.497601 kernel: audit: type=1106 audit(1742236121.491:1390): pid=4714 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Mar 17 18:28:41.497678 kernel: audit: type=1104 audit(1742236121.492:1391): pid=4714 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Mar 17 18:28:41.494000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@15-10.0.0.111:22-10.0.0.1:50058 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:28:41.498125 systemd[1]: sshd@14-10.0.0.111:22-10.0.0.1:50046.service: Deactivated successfully. Mar 17 18:28:41.497000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@14-10.0.0.111:22-10.0.0.1:50046 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:28:41.498881 systemd[1]: session-15.scope: Deactivated successfully. Mar 17 18:28:41.499406 systemd-logind[1207]: Session 15 logged out. Waiting for processes to exit. Mar 17 18:28:41.500129 systemd-logind[1207]: Removed session 15. Mar 17 18:28:41.528992 sshd[4726]: Accepted publickey for core from 10.0.0.1 port 50058 ssh2: RSA SHA256:hoQCPKafrT/V1URQ18ch5K7mLY85DMM2OIJJf47c8zQ Mar 17 18:28:41.528000 audit[4726]: USER_ACCT pid=4726 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Mar 17 18:28:41.529000 audit[4726]: CRED_ACQ pid=4726 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Mar 17 18:28:41.529000 audit[4726]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffc7df84c0 a2=3 a3=1 items=0 ppid=1 pid=4726 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=16 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:28:41.529000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Mar 17 18:28:41.530484 sshd[4726]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Mar 17 18:28:41.533936 systemd-logind[1207]: New session 16 of user core. Mar 17 18:28:41.534537 systemd[1]: Started session-16.scope. Mar 17 18:28:41.536000 audit[4726]: USER_START pid=4726 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Mar 17 18:28:41.537000 audit[4729]: CRED_ACQ pid=4729 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Mar 17 18:28:41.748614 sshd[4726]: pam_unix(sshd:session): session closed for user core Mar 17 18:28:41.748000 audit[4726]: USER_END pid=4726 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Mar 17 18:28:41.749000 audit[4726]: CRED_DISP pid=4726 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Mar 17 18:28:41.752774 systemd[1]: Started sshd@16-10.0.0.111:22-10.0.0.1:50062.service. Mar 17 18:28:41.752000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@16-10.0.0.111:22-10.0.0.1:50062 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:28:41.754052 systemd[1]: session-16.scope: Deactivated successfully. Mar 17 18:28:41.754762 systemd-logind[1207]: Session 16 logged out. Waiting for processes to exit. Mar 17 18:28:41.754802 systemd[1]: sshd@15-10.0.0.111:22-10.0.0.1:50058.service: Deactivated successfully. Mar 17 18:28:41.754000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@15-10.0.0.111:22-10.0.0.1:50058 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:28:41.756892 systemd-logind[1207]: Removed session 16. Mar 17 18:28:41.786000 audit[4738]: USER_ACCT pid=4738 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Mar 17 18:28:41.787846 sshd[4738]: Accepted publickey for core from 10.0.0.1 port 50062 ssh2: RSA SHA256:hoQCPKafrT/V1URQ18ch5K7mLY85DMM2OIJJf47c8zQ Mar 17 18:28:41.787000 audit[4738]: CRED_ACQ pid=4738 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Mar 17 18:28:41.787000 audit[4738]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffd2fdb0e0 a2=3 a3=1 items=0 ppid=1 pid=4738 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=17 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:28:41.787000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Mar 17 18:28:41.788896 sshd[4738]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Mar 17 18:28:41.791784 systemd-logind[1207]: New session 17 of user core. Mar 17 18:28:41.792555 systemd[1]: Started session-17.scope. Mar 17 18:28:41.795000 audit[4738]: USER_START pid=4738 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Mar 17 18:28:41.796000 audit[4741]: CRED_ACQ pid=4741 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Mar 17 18:28:42.019000 audit[1835]: AVC avc: denied { watch } for pid=1835 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="vda9" ino=7291 scontext=system_u:system_r:svirt_lxc_net_t:s0:c540,c941 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Mar 17 18:28:42.019000 audit[1835]: AVC avc: denied { watch } for pid=1835 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=7285 scontext=system_u:system_r:svirt_lxc_net_t:s0:c540,c941 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Mar 17 18:28:42.019000 audit[1835]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=9 a1=40028fcb70 a2=fc6 a3=0 items=0 ppid=1674 pid=1835 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c540,c941 key=(null) Mar 17 18:28:42.019000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Mar 17 18:28:42.019000 audit[1835]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=b a1=400348b220 a2=fc6 a3=0 items=0 ppid=1674 pid=1835 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c540,c941 key=(null) Mar 17 18:28:42.019000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Mar 17 18:28:42.364000 audit[1852]: AVC avc: denied { watch } for pid=1852 comm="kube-apiserver" path="/etc/kubernetes/pki/apiserver.crt" dev="vda9" ino=7287 scontext=system_u:system_r:svirt_lxc_net_t:s0:c653,c983 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Mar 17 18:28:42.364000 audit[1852]: AVC avc: denied { watch } for pid=1852 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=7285 scontext=system_u:system_r:svirt_lxc_net_t:s0:c653,c983 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Mar 17 18:28:42.364000 audit[1852]: AVC avc: denied { watch } for pid=1852 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="vda9" ino=7291 scontext=system_u:system_r:svirt_lxc_net_t:s0:c653,c983 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Mar 17 18:28:42.364000 audit[1852]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=7a a1=401077e1e0 a2=fc6 a3=0 items=0 ppid=1671 pid=1852 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c653,c983 key=(null) Mar 17 18:28:42.364000 audit[1852]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=79 a1=4010258120 a2=fc6 a3=0 items=0 ppid=1671 pid=1852 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c653,c983 key=(null) Mar 17 18:28:42.364000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E313131002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75626572 Mar 17 18:28:42.364000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E313131002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75626572 Mar 17 18:28:42.364000 audit[1852]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=78 a1=4009e19c00 a2=fc6 a3=0 items=0 ppid=1671 pid=1852 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c653,c983 key=(null) Mar 17 18:28:42.364000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E313131002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75626572 Mar 17 18:28:42.402000 audit[1852]: AVC avc: denied { watch } for pid=1852 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-client.crt" dev="vda9" ino=7293 scontext=system_u:system_r:svirt_lxc_net_t:s0:c653,c983 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Mar 17 18:28:42.402000 audit[1852]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=78 a1=4010966a80 a2=fc6 a3=0 items=0 ppid=1671 pid=1852 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c653,c983 key=(null) Mar 17 18:28:42.402000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E313131002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75626572 Mar 17 18:28:42.402000 audit[1852]: AVC avc: denied { watch } for pid=1852 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=7285 scontext=system_u:system_r:svirt_lxc_net_t:s0:c653,c983 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Mar 17 18:28:42.402000 audit[1852]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=79 a1=4007b495e0 a2=fc6 a3=0 items=0 ppid=1671 pid=1852 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c653,c983 key=(null) Mar 17 18:28:42.402000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E313131002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75626572 Mar 17 18:28:42.402000 audit[1852]: AVC avc: denied { watch } for pid=1852 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="vda9" ino=7291 scontext=system_u:system_r:svirt_lxc_net_t:s0:c653,c983 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Mar 17 18:28:42.402000 audit[1852]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=78 a1=4010966ab0 a2=fc6 a3=0 items=0 ppid=1671 pid=1852 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c653,c983 key=(null) Mar 17 18:28:42.402000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E313131002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75626572 Mar 17 18:28:43.261000 audit[4753]: NETFILTER_CFG table=filter:115 family=2 entries=20 op=nft_register_rule pid=4753 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Mar 17 18:28:43.261000 audit[4753]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=11944 a0=3 a1=fffff112cb10 a2=0 a3=1 items=0 ppid=2108 pid=4753 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:28:43.261000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Mar 17 18:28:43.266000 audit[4753]: NETFILTER_CFG table=nat:116 family=2 entries=22 op=nft_register_rule pid=4753 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Mar 17 18:28:43.266000 audit[4753]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=6540 a0=3 a1=fffff112cb10 a2=0 a3=1 items=0 ppid=2108 pid=4753 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:28:43.266000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Mar 17 18:28:43.278877 sshd[4738]: pam_unix(sshd:session): session closed for user core Mar 17 18:28:43.279000 audit[4738]: USER_END pid=4738 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Mar 17 18:28:43.279000 audit[4738]: CRED_DISP pid=4738 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Mar 17 18:28:43.281805 systemd[1]: Started sshd@17-10.0.0.111:22-10.0.0.1:53548.service. Mar 17 18:28:43.282441 systemd[1]: sshd@16-10.0.0.111:22-10.0.0.1:50062.service: Deactivated successfully. Mar 17 18:28:43.283280 systemd[1]: session-17.scope: Deactivated successfully. Mar 17 18:28:43.283859 systemd-logind[1207]: Session 17 logged out. Waiting for processes to exit. Mar 17 18:28:43.281000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@17-10.0.0.111:22-10.0.0.1:53548 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:28:43.281000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@16-10.0.0.111:22-10.0.0.1:50062 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:28:43.284934 systemd-logind[1207]: Removed session 17. Mar 17 18:28:43.288000 audit[4758]: NETFILTER_CFG table=filter:117 family=2 entries=32 op=nft_register_rule pid=4758 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Mar 17 18:28:43.288000 audit[4758]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=11944 a0=3 a1=ffffd58ce0c0 a2=0 a3=1 items=0 ppid=2108 pid=4758 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:28:43.288000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Mar 17 18:28:43.292000 audit[4758]: NETFILTER_CFG table=nat:118 family=2 entries=22 op=nft_register_rule pid=4758 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Mar 17 18:28:43.292000 audit[4758]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=6540 a0=3 a1=ffffd58ce0c0 a2=0 a3=1 items=0 ppid=2108 pid=4758 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:28:43.292000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Mar 17 18:28:43.318000 audit[4756]: USER_ACCT pid=4756 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Mar 17 18:28:43.319498 sshd[4756]: Accepted publickey for core from 10.0.0.1 port 53548 ssh2: RSA SHA256:hoQCPKafrT/V1URQ18ch5K7mLY85DMM2OIJJf47c8zQ Mar 17 18:28:43.319000 audit[4756]: CRED_ACQ pid=4756 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Mar 17 18:28:43.319000 audit[4756]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=fffff5d206e0 a2=3 a3=1 items=0 ppid=1 pid=4756 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=18 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:28:43.319000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Mar 17 18:28:43.321017 sshd[4756]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Mar 17 18:28:43.324454 systemd-logind[1207]: New session 18 of user core. Mar 17 18:28:43.325384 systemd[1]: Started session-18.scope. Mar 17 18:28:43.328000 audit[4756]: USER_START pid=4756 uid=0 auid=500 ses=18 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Mar 17 18:28:43.329000 audit[4761]: CRED_ACQ pid=4761 uid=0 auid=500 ses=18 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Mar 17 18:28:43.667663 sshd[4756]: pam_unix(sshd:session): session closed for user core Mar 17 18:28:43.667000 audit[4756]: USER_END pid=4756 uid=0 auid=500 ses=18 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Mar 17 18:28:43.668000 audit[4756]: CRED_DISP pid=4756 uid=0 auid=500 ses=18 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Mar 17 18:28:43.672786 systemd[1]: Started sshd@18-10.0.0.111:22-10.0.0.1:53560.service. Mar 17 18:28:43.672000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@18-10.0.0.111:22-10.0.0.1:53560 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:28:43.673690 systemd[1]: sshd@17-10.0.0.111:22-10.0.0.1:53548.service: Deactivated successfully. Mar 17 18:28:43.673000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@17-10.0.0.111:22-10.0.0.1:53548 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:28:43.675191 systemd[1]: session-18.scope: Deactivated successfully. Mar 17 18:28:43.680643 systemd-logind[1207]: Session 18 logged out. Waiting for processes to exit. Mar 17 18:28:43.681599 systemd-logind[1207]: Removed session 18. Mar 17 18:28:43.704000 audit[4769]: USER_ACCT pid=4769 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Mar 17 18:28:43.705672 sshd[4769]: Accepted publickey for core from 10.0.0.1 port 53560 ssh2: RSA SHA256:hoQCPKafrT/V1URQ18ch5K7mLY85DMM2OIJJf47c8zQ Mar 17 18:28:43.706000 audit[4769]: CRED_ACQ pid=4769 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Mar 17 18:28:43.706000 audit[4769]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=fffff7434dd0 a2=3 a3=1 items=0 ppid=1 pid=4769 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=19 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:28:43.706000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Mar 17 18:28:43.707564 sshd[4769]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Mar 17 18:28:43.711732 systemd[1]: Started session-19.scope. Mar 17 18:28:43.712107 systemd-logind[1207]: New session 19 of user core. Mar 17 18:28:43.715000 audit[4769]: USER_START pid=4769 uid=0 auid=500 ses=19 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Mar 17 18:28:43.716000 audit[4772]: CRED_ACQ pid=4772 uid=0 auid=500 ses=19 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Mar 17 18:28:43.840970 sshd[4769]: pam_unix(sshd:session): session closed for user core Mar 17 18:28:43.841000 audit[4769]: USER_END pid=4769 uid=0 auid=500 ses=19 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Mar 17 18:28:43.841000 audit[4769]: CRED_DISP pid=4769 uid=0 auid=500 ses=19 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Mar 17 18:28:43.844124 systemd[1]: sshd@18-10.0.0.111:22-10.0.0.1:53560.service: Deactivated successfully. Mar 17 18:28:43.843000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@18-10.0.0.111:22-10.0.0.1:53560 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:28:43.844874 systemd[1]: session-19.scope: Deactivated successfully. Mar 17 18:28:43.845398 systemd-logind[1207]: Session 19 logged out. Waiting for processes to exit. Mar 17 18:28:43.846083 systemd-logind[1207]: Removed session 19. Mar 17 18:28:44.843076 env[1216]: time="2025-03-17T18:28:44.843012781Z" level=info msg="StopPodSandbox for \"7aebfcc5fb73f92f982b621769d1ba9950a2531944c35feca41ed03e8b8e54ff\"" Mar 17 18:28:44.919997 env[1216]: 2025-03-17 18:28:44.880 [WARNING][4797] cni-plugin/k8s.go 572: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="7aebfcc5fb73f92f982b621769d1ba9950a2531944c35feca41ed03e8b8e54ff" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-calico--kube--controllers--5f9fb877b9--db89t-eth0", GenerateName:"calico-kube-controllers-5f9fb877b9-", Namespace:"calico-system", SelfLink:"", UID:"3fa28842-51f6-423c-ab80-b3915356f87b", ResourceVersion:"932", Generation:0, CreationTimestamp:time.Date(2025, time.March, 17, 18, 27, 58, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"calico-kube-controllers", "k8s-app":"calico-kube-controllers", "pod-template-hash":"5f9fb877b9", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-kube-controllers"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"1252cfc4aed618c012d1d0148514744fc39d7ccd6a6a06181adb6b4b1e034e3e", Pod:"calico-kube-controllers-5f9fb877b9-db89t", Endpoint:"eth0", ServiceAccountName:"calico-kube-controllers", IPNetworks:[]string{"192.168.88.129/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.calico-kube-controllers"}, InterfaceName:"calif5fc947f3c4", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil)}} Mar 17 18:28:44.919997 env[1216]: 2025-03-17 18:28:44.880 [INFO][4797] cni-plugin/k8s.go 608: Cleaning up netns ContainerID="7aebfcc5fb73f92f982b621769d1ba9950a2531944c35feca41ed03e8b8e54ff" Mar 17 18:28:44.919997 env[1216]: 2025-03-17 18:28:44.880 [INFO][4797] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="7aebfcc5fb73f92f982b621769d1ba9950a2531944c35feca41ed03e8b8e54ff" iface="eth0" netns="" Mar 17 18:28:44.919997 env[1216]: 2025-03-17 18:28:44.881 [INFO][4797] cni-plugin/k8s.go 615: Releasing IP address(es) ContainerID="7aebfcc5fb73f92f982b621769d1ba9950a2531944c35feca41ed03e8b8e54ff" Mar 17 18:28:44.919997 env[1216]: 2025-03-17 18:28:44.881 [INFO][4797] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="7aebfcc5fb73f92f982b621769d1ba9950a2531944c35feca41ed03e8b8e54ff" Mar 17 18:28:44.919997 env[1216]: 2025-03-17 18:28:44.906 [INFO][4806] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="7aebfcc5fb73f92f982b621769d1ba9950a2531944c35feca41ed03e8b8e54ff" HandleID="k8s-pod-network.7aebfcc5fb73f92f982b621769d1ba9950a2531944c35feca41ed03e8b8e54ff" Workload="localhost-k8s-calico--kube--controllers--5f9fb877b9--db89t-eth0" Mar 17 18:28:44.919997 env[1216]: 2025-03-17 18:28:44.906 [INFO][4806] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Mar 17 18:28:44.919997 env[1216]: 2025-03-17 18:28:44.906 [INFO][4806] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Mar 17 18:28:44.919997 env[1216]: 2025-03-17 18:28:44.914 [WARNING][4806] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="7aebfcc5fb73f92f982b621769d1ba9950a2531944c35feca41ed03e8b8e54ff" HandleID="k8s-pod-network.7aebfcc5fb73f92f982b621769d1ba9950a2531944c35feca41ed03e8b8e54ff" Workload="localhost-k8s-calico--kube--controllers--5f9fb877b9--db89t-eth0" Mar 17 18:28:44.919997 env[1216]: 2025-03-17 18:28:44.915 [INFO][4806] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="7aebfcc5fb73f92f982b621769d1ba9950a2531944c35feca41ed03e8b8e54ff" HandleID="k8s-pod-network.7aebfcc5fb73f92f982b621769d1ba9950a2531944c35feca41ed03e8b8e54ff" Workload="localhost-k8s-calico--kube--controllers--5f9fb877b9--db89t-eth0" Mar 17 18:28:44.919997 env[1216]: 2025-03-17 18:28:44.916 [INFO][4806] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Mar 17 18:28:44.919997 env[1216]: 2025-03-17 18:28:44.918 [INFO][4797] cni-plugin/k8s.go 621: Teardown processing complete. ContainerID="7aebfcc5fb73f92f982b621769d1ba9950a2531944c35feca41ed03e8b8e54ff" Mar 17 18:28:44.920413 env[1216]: time="2025-03-17T18:28:44.920034499Z" level=info msg="TearDown network for sandbox \"7aebfcc5fb73f92f982b621769d1ba9950a2531944c35feca41ed03e8b8e54ff\" successfully" Mar 17 18:28:44.920413 env[1216]: time="2025-03-17T18:28:44.920066340Z" level=info msg="StopPodSandbox for \"7aebfcc5fb73f92f982b621769d1ba9950a2531944c35feca41ed03e8b8e54ff\" returns successfully" Mar 17 18:28:44.920571 env[1216]: time="2025-03-17T18:28:44.920527999Z" level=info msg="RemovePodSandbox for \"7aebfcc5fb73f92f982b621769d1ba9950a2531944c35feca41ed03e8b8e54ff\"" Mar 17 18:28:44.920605 env[1216]: time="2025-03-17T18:28:44.920568680Z" level=info msg="Forcibly stopping sandbox \"7aebfcc5fb73f92f982b621769d1ba9950a2531944c35feca41ed03e8b8e54ff\"" Mar 17 18:28:44.984941 env[1216]: 2025-03-17 18:28:44.953 [WARNING][4828] cni-plugin/k8s.go 572: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="7aebfcc5fb73f92f982b621769d1ba9950a2531944c35feca41ed03e8b8e54ff" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-calico--kube--controllers--5f9fb877b9--db89t-eth0", GenerateName:"calico-kube-controllers-5f9fb877b9-", Namespace:"calico-system", SelfLink:"", UID:"3fa28842-51f6-423c-ab80-b3915356f87b", ResourceVersion:"932", Generation:0, CreationTimestamp:time.Date(2025, time.March, 17, 18, 27, 58, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"calico-kube-controllers", "k8s-app":"calico-kube-controllers", "pod-template-hash":"5f9fb877b9", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-kube-controllers"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"1252cfc4aed618c012d1d0148514744fc39d7ccd6a6a06181adb6b4b1e034e3e", Pod:"calico-kube-controllers-5f9fb877b9-db89t", Endpoint:"eth0", ServiceAccountName:"calico-kube-controllers", IPNetworks:[]string{"192.168.88.129/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.calico-kube-controllers"}, InterfaceName:"calif5fc947f3c4", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil)}} Mar 17 18:28:44.984941 env[1216]: 2025-03-17 18:28:44.953 [INFO][4828] cni-plugin/k8s.go 608: Cleaning up netns ContainerID="7aebfcc5fb73f92f982b621769d1ba9950a2531944c35feca41ed03e8b8e54ff" Mar 17 18:28:44.984941 env[1216]: 2025-03-17 18:28:44.953 [INFO][4828] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="7aebfcc5fb73f92f982b621769d1ba9950a2531944c35feca41ed03e8b8e54ff" iface="eth0" netns="" Mar 17 18:28:44.984941 env[1216]: 2025-03-17 18:28:44.953 [INFO][4828] cni-plugin/k8s.go 615: Releasing IP address(es) ContainerID="7aebfcc5fb73f92f982b621769d1ba9950a2531944c35feca41ed03e8b8e54ff" Mar 17 18:28:44.984941 env[1216]: 2025-03-17 18:28:44.953 [INFO][4828] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="7aebfcc5fb73f92f982b621769d1ba9950a2531944c35feca41ed03e8b8e54ff" Mar 17 18:28:44.984941 env[1216]: 2025-03-17 18:28:44.971 [INFO][4836] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="7aebfcc5fb73f92f982b621769d1ba9950a2531944c35feca41ed03e8b8e54ff" HandleID="k8s-pod-network.7aebfcc5fb73f92f982b621769d1ba9950a2531944c35feca41ed03e8b8e54ff" Workload="localhost-k8s-calico--kube--controllers--5f9fb877b9--db89t-eth0" Mar 17 18:28:44.984941 env[1216]: 2025-03-17 18:28:44.971 [INFO][4836] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Mar 17 18:28:44.984941 env[1216]: 2025-03-17 18:28:44.971 [INFO][4836] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Mar 17 18:28:44.984941 env[1216]: 2025-03-17 18:28:44.980 [WARNING][4836] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="7aebfcc5fb73f92f982b621769d1ba9950a2531944c35feca41ed03e8b8e54ff" HandleID="k8s-pod-network.7aebfcc5fb73f92f982b621769d1ba9950a2531944c35feca41ed03e8b8e54ff" Workload="localhost-k8s-calico--kube--controllers--5f9fb877b9--db89t-eth0" Mar 17 18:28:44.984941 env[1216]: 2025-03-17 18:28:44.980 [INFO][4836] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="7aebfcc5fb73f92f982b621769d1ba9950a2531944c35feca41ed03e8b8e54ff" HandleID="k8s-pod-network.7aebfcc5fb73f92f982b621769d1ba9950a2531944c35feca41ed03e8b8e54ff" Workload="localhost-k8s-calico--kube--controllers--5f9fb877b9--db89t-eth0" Mar 17 18:28:44.984941 env[1216]: 2025-03-17 18:28:44.981 [INFO][4836] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Mar 17 18:28:44.984941 env[1216]: 2025-03-17 18:28:44.983 [INFO][4828] cni-plugin/k8s.go 621: Teardown processing complete. ContainerID="7aebfcc5fb73f92f982b621769d1ba9950a2531944c35feca41ed03e8b8e54ff" Mar 17 18:28:44.985456 env[1216]: time="2025-03-17T18:28:44.985411552Z" level=info msg="TearDown network for sandbox \"7aebfcc5fb73f92f982b621769d1ba9950a2531944c35feca41ed03e8b8e54ff\" successfully" Mar 17 18:28:44.994242 env[1216]: time="2025-03-17T18:28:44.994202023Z" level=info msg="RemovePodSandbox \"7aebfcc5fb73f92f982b621769d1ba9950a2531944c35feca41ed03e8b8e54ff\" returns successfully" Mar 17 18:28:44.994910 env[1216]: time="2025-03-17T18:28:44.994853209Z" level=info msg="StopPodSandbox for \"0524b4acf1ec082d67914ee78ca0f736df7532e8ab6013f34ab43ac23d219f01\"" Mar 17 18:28:45.069897 env[1216]: 2025-03-17 18:28:45.033 [WARNING][4859] cni-plugin/k8s.go 572: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="0524b4acf1ec082d67914ee78ca0f736df7532e8ab6013f34ab43ac23d219f01" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-coredns--6f6b679f8f--b9nsl-eth0", GenerateName:"coredns-6f6b679f8f-", Namespace:"kube-system", SelfLink:"", UID:"20480c0c-aba3-48d5-8372-dcc5d0a137a4", ResourceVersion:"926", Generation:0, CreationTimestamp:time.Date(2025, time.March, 17, 18, 27, 51, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"k8s-app":"kube-dns", "pod-template-hash":"6f6b679f8f", "projectcalico.org/namespace":"kube-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"coredns"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"677b54ac22f77aa4a32642dbea707d1aad59439f866f195977796f1842dcffa0", Pod:"coredns-6f6b679f8f-b9nsl", Endpoint:"eth0", ServiceAccountName:"coredns", IPNetworks:[]string{"192.168.88.133/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.kube-system", "ksa.kube-system.coredns"}, InterfaceName:"cali3091a806a31", MAC:"", Ports:[]v3.WorkloadEndpointPort{v3.WorkloadEndpointPort{Name:"dns", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"UDP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"dns-tcp", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"metrics", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x23c1, HostPort:0x0, HostIP:""}}, AllowSpoofedSourcePrefixes:[]string(nil)}} Mar 17 18:28:45.069897 env[1216]: 2025-03-17 18:28:45.034 [INFO][4859] cni-plugin/k8s.go 608: Cleaning up netns ContainerID="0524b4acf1ec082d67914ee78ca0f736df7532e8ab6013f34ab43ac23d219f01" Mar 17 18:28:45.069897 env[1216]: 2025-03-17 18:28:45.034 [INFO][4859] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="0524b4acf1ec082d67914ee78ca0f736df7532e8ab6013f34ab43ac23d219f01" iface="eth0" netns="" Mar 17 18:28:45.069897 env[1216]: 2025-03-17 18:28:45.034 [INFO][4859] cni-plugin/k8s.go 615: Releasing IP address(es) ContainerID="0524b4acf1ec082d67914ee78ca0f736df7532e8ab6013f34ab43ac23d219f01" Mar 17 18:28:45.069897 env[1216]: 2025-03-17 18:28:45.034 [INFO][4859] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="0524b4acf1ec082d67914ee78ca0f736df7532e8ab6013f34ab43ac23d219f01" Mar 17 18:28:45.069897 env[1216]: 2025-03-17 18:28:45.056 [INFO][4867] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="0524b4acf1ec082d67914ee78ca0f736df7532e8ab6013f34ab43ac23d219f01" HandleID="k8s-pod-network.0524b4acf1ec082d67914ee78ca0f736df7532e8ab6013f34ab43ac23d219f01" Workload="localhost-k8s-coredns--6f6b679f8f--b9nsl-eth0" Mar 17 18:28:45.069897 env[1216]: 2025-03-17 18:28:45.056 [INFO][4867] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Mar 17 18:28:45.069897 env[1216]: 2025-03-17 18:28:45.056 [INFO][4867] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Mar 17 18:28:45.069897 env[1216]: 2025-03-17 18:28:45.064 [WARNING][4867] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="0524b4acf1ec082d67914ee78ca0f736df7532e8ab6013f34ab43ac23d219f01" HandleID="k8s-pod-network.0524b4acf1ec082d67914ee78ca0f736df7532e8ab6013f34ab43ac23d219f01" Workload="localhost-k8s-coredns--6f6b679f8f--b9nsl-eth0" Mar 17 18:28:45.069897 env[1216]: 2025-03-17 18:28:45.064 [INFO][4867] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="0524b4acf1ec082d67914ee78ca0f736df7532e8ab6013f34ab43ac23d219f01" HandleID="k8s-pod-network.0524b4acf1ec082d67914ee78ca0f736df7532e8ab6013f34ab43ac23d219f01" Workload="localhost-k8s-coredns--6f6b679f8f--b9nsl-eth0" Mar 17 18:28:45.069897 env[1216]: 2025-03-17 18:28:45.066 [INFO][4867] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Mar 17 18:28:45.069897 env[1216]: 2025-03-17 18:28:45.068 [INFO][4859] cni-plugin/k8s.go 621: Teardown processing complete. ContainerID="0524b4acf1ec082d67914ee78ca0f736df7532e8ab6013f34ab43ac23d219f01" Mar 17 18:28:45.070321 env[1216]: time="2025-03-17T18:28:45.069922141Z" level=info msg="TearDown network for sandbox \"0524b4acf1ec082d67914ee78ca0f736df7532e8ab6013f34ab43ac23d219f01\" successfully" Mar 17 18:28:45.070321 env[1216]: time="2025-03-17T18:28:45.069949103Z" level=info msg="StopPodSandbox for \"0524b4acf1ec082d67914ee78ca0f736df7532e8ab6013f34ab43ac23d219f01\" returns successfully" Mar 17 18:28:45.070522 env[1216]: time="2025-03-17T18:28:45.070493364Z" level=info msg="RemovePodSandbox for \"0524b4acf1ec082d67914ee78ca0f736df7532e8ab6013f34ab43ac23d219f01\"" Mar 17 18:28:45.070627 env[1216]: time="2025-03-17T18:28:45.070589968Z" level=info msg="Forcibly stopping sandbox \"0524b4acf1ec082d67914ee78ca0f736df7532e8ab6013f34ab43ac23d219f01\"" Mar 17 18:28:45.136729 env[1216]: 2025-03-17 18:28:45.104 [WARNING][4889] cni-plugin/k8s.go 572: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="0524b4acf1ec082d67914ee78ca0f736df7532e8ab6013f34ab43ac23d219f01" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-coredns--6f6b679f8f--b9nsl-eth0", GenerateName:"coredns-6f6b679f8f-", Namespace:"kube-system", SelfLink:"", UID:"20480c0c-aba3-48d5-8372-dcc5d0a137a4", ResourceVersion:"926", Generation:0, CreationTimestamp:time.Date(2025, time.March, 17, 18, 27, 51, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"k8s-app":"kube-dns", "pod-template-hash":"6f6b679f8f", "projectcalico.org/namespace":"kube-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"coredns"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"677b54ac22f77aa4a32642dbea707d1aad59439f866f195977796f1842dcffa0", Pod:"coredns-6f6b679f8f-b9nsl", Endpoint:"eth0", ServiceAccountName:"coredns", IPNetworks:[]string{"192.168.88.133/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.kube-system", "ksa.kube-system.coredns"}, InterfaceName:"cali3091a806a31", MAC:"", Ports:[]v3.WorkloadEndpointPort{v3.WorkloadEndpointPort{Name:"dns", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"UDP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"dns-tcp", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"metrics", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x23c1, HostPort:0x0, HostIP:""}}, AllowSpoofedSourcePrefixes:[]string(nil)}} Mar 17 18:28:45.136729 env[1216]: 2025-03-17 18:28:45.105 [INFO][4889] cni-plugin/k8s.go 608: Cleaning up netns ContainerID="0524b4acf1ec082d67914ee78ca0f736df7532e8ab6013f34ab43ac23d219f01" Mar 17 18:28:45.136729 env[1216]: 2025-03-17 18:28:45.105 [INFO][4889] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="0524b4acf1ec082d67914ee78ca0f736df7532e8ab6013f34ab43ac23d219f01" iface="eth0" netns="" Mar 17 18:28:45.136729 env[1216]: 2025-03-17 18:28:45.105 [INFO][4889] cni-plugin/k8s.go 615: Releasing IP address(es) ContainerID="0524b4acf1ec082d67914ee78ca0f736df7532e8ab6013f34ab43ac23d219f01" Mar 17 18:28:45.136729 env[1216]: 2025-03-17 18:28:45.105 [INFO][4889] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="0524b4acf1ec082d67914ee78ca0f736df7532e8ab6013f34ab43ac23d219f01" Mar 17 18:28:45.136729 env[1216]: 2025-03-17 18:28:45.124 [INFO][4897] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="0524b4acf1ec082d67914ee78ca0f736df7532e8ab6013f34ab43ac23d219f01" HandleID="k8s-pod-network.0524b4acf1ec082d67914ee78ca0f736df7532e8ab6013f34ab43ac23d219f01" Workload="localhost-k8s-coredns--6f6b679f8f--b9nsl-eth0" Mar 17 18:28:45.136729 env[1216]: 2025-03-17 18:28:45.124 [INFO][4897] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Mar 17 18:28:45.136729 env[1216]: 2025-03-17 18:28:45.124 [INFO][4897] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Mar 17 18:28:45.136729 env[1216]: 2025-03-17 18:28:45.132 [WARNING][4897] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="0524b4acf1ec082d67914ee78ca0f736df7532e8ab6013f34ab43ac23d219f01" HandleID="k8s-pod-network.0524b4acf1ec082d67914ee78ca0f736df7532e8ab6013f34ab43ac23d219f01" Workload="localhost-k8s-coredns--6f6b679f8f--b9nsl-eth0" Mar 17 18:28:45.136729 env[1216]: 2025-03-17 18:28:45.132 [INFO][4897] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="0524b4acf1ec082d67914ee78ca0f736df7532e8ab6013f34ab43ac23d219f01" HandleID="k8s-pod-network.0524b4acf1ec082d67914ee78ca0f736df7532e8ab6013f34ab43ac23d219f01" Workload="localhost-k8s-coredns--6f6b679f8f--b9nsl-eth0" Mar 17 18:28:45.136729 env[1216]: 2025-03-17 18:28:45.133 [INFO][4897] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Mar 17 18:28:45.136729 env[1216]: 2025-03-17 18:28:45.135 [INFO][4889] cni-plugin/k8s.go 621: Teardown processing complete. ContainerID="0524b4acf1ec082d67914ee78ca0f736df7532e8ab6013f34ab43ac23d219f01" Mar 17 18:28:45.137301 env[1216]: time="2025-03-17T18:28:45.137264446Z" level=info msg="TearDown network for sandbox \"0524b4acf1ec082d67914ee78ca0f736df7532e8ab6013f34ab43ac23d219f01\" successfully" Mar 17 18:28:45.139906 env[1216]: time="2025-03-17T18:28:45.139878629Z" level=info msg="RemovePodSandbox \"0524b4acf1ec082d67914ee78ca0f736df7532e8ab6013f34ab43ac23d219f01\" returns successfully" Mar 17 18:28:45.140523 env[1216]: time="2025-03-17T18:28:45.140496774Z" level=info msg="StopPodSandbox for \"23ff737391387adfa05fc971a2384b56959ec40974ec3bbcf1afa3a226bf18f5\"" Mar 17 18:28:45.203857 env[1216]: 2025-03-17 18:28:45.172 [WARNING][4919] cni-plugin/k8s.go 572: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="23ff737391387adfa05fc971a2384b56959ec40974ec3bbcf1afa3a226bf18f5" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-calico--apiserver--66cb7fb7dc--2bvrs-eth0", GenerateName:"calico-apiserver-66cb7fb7dc-", Namespace:"calico-apiserver", SelfLink:"", UID:"febc9f3a-c5fd-4e88-ac3b-68eff786c39c", ResourceVersion:"964", Generation:0, CreationTimestamp:time.Date(2025, time.March, 17, 18, 27, 58, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"apiserver":"true", "app.kubernetes.io/name":"calico-apiserver", "k8s-app":"calico-apiserver", "pod-template-hash":"66cb7fb7dc", "projectcalico.org/namespace":"calico-apiserver", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-apiserver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"7e430e160a6c95321ff5fd120f3eab9e6afd20936602a5f1d3e361a692a04bbd", Pod:"calico-apiserver-66cb7fb7dc-2bvrs", Endpoint:"eth0", ServiceAccountName:"calico-apiserver", IPNetworks:[]string{"192.168.88.130/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-apiserver", "ksa.calico-apiserver.calico-apiserver"}, InterfaceName:"calic2268833577", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil)}} Mar 17 18:28:45.203857 env[1216]: 2025-03-17 18:28:45.172 [INFO][4919] cni-plugin/k8s.go 608: Cleaning up netns ContainerID="23ff737391387adfa05fc971a2384b56959ec40974ec3bbcf1afa3a226bf18f5" Mar 17 18:28:45.203857 env[1216]: 2025-03-17 18:28:45.172 [INFO][4919] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="23ff737391387adfa05fc971a2384b56959ec40974ec3bbcf1afa3a226bf18f5" iface="eth0" netns="" Mar 17 18:28:45.203857 env[1216]: 2025-03-17 18:28:45.172 [INFO][4919] cni-plugin/k8s.go 615: Releasing IP address(es) ContainerID="23ff737391387adfa05fc971a2384b56959ec40974ec3bbcf1afa3a226bf18f5" Mar 17 18:28:45.203857 env[1216]: 2025-03-17 18:28:45.172 [INFO][4919] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="23ff737391387adfa05fc971a2384b56959ec40974ec3bbcf1afa3a226bf18f5" Mar 17 18:28:45.203857 env[1216]: 2025-03-17 18:28:45.191 [INFO][4926] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="23ff737391387adfa05fc971a2384b56959ec40974ec3bbcf1afa3a226bf18f5" HandleID="k8s-pod-network.23ff737391387adfa05fc971a2384b56959ec40974ec3bbcf1afa3a226bf18f5" Workload="localhost-k8s-calico--apiserver--66cb7fb7dc--2bvrs-eth0" Mar 17 18:28:45.203857 env[1216]: 2025-03-17 18:28:45.191 [INFO][4926] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Mar 17 18:28:45.203857 env[1216]: 2025-03-17 18:28:45.191 [INFO][4926] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Mar 17 18:28:45.203857 env[1216]: 2025-03-17 18:28:45.198 [WARNING][4926] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="23ff737391387adfa05fc971a2384b56959ec40974ec3bbcf1afa3a226bf18f5" HandleID="k8s-pod-network.23ff737391387adfa05fc971a2384b56959ec40974ec3bbcf1afa3a226bf18f5" Workload="localhost-k8s-calico--apiserver--66cb7fb7dc--2bvrs-eth0" Mar 17 18:28:45.203857 env[1216]: 2025-03-17 18:28:45.199 [INFO][4926] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="23ff737391387adfa05fc971a2384b56959ec40974ec3bbcf1afa3a226bf18f5" HandleID="k8s-pod-network.23ff737391387adfa05fc971a2384b56959ec40974ec3bbcf1afa3a226bf18f5" Workload="localhost-k8s-calico--apiserver--66cb7fb7dc--2bvrs-eth0" Mar 17 18:28:45.203857 env[1216]: 2025-03-17 18:28:45.200 [INFO][4926] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Mar 17 18:28:45.203857 env[1216]: 2025-03-17 18:28:45.202 [INFO][4919] cni-plugin/k8s.go 621: Teardown processing complete. ContainerID="23ff737391387adfa05fc971a2384b56959ec40974ec3bbcf1afa3a226bf18f5" Mar 17 18:28:45.204323 env[1216]: time="2025-03-17T18:28:45.203900642Z" level=info msg="TearDown network for sandbox \"23ff737391387adfa05fc971a2384b56959ec40974ec3bbcf1afa3a226bf18f5\" successfully" Mar 17 18:28:45.204323 env[1216]: time="2025-03-17T18:28:45.203939844Z" level=info msg="StopPodSandbox for \"23ff737391387adfa05fc971a2384b56959ec40974ec3bbcf1afa3a226bf18f5\" returns successfully" Mar 17 18:28:45.204542 env[1216]: time="2025-03-17T18:28:45.204514467Z" level=info msg="RemovePodSandbox for \"23ff737391387adfa05fc971a2384b56959ec40974ec3bbcf1afa3a226bf18f5\"" Mar 17 18:28:45.204651 env[1216]: time="2025-03-17T18:28:45.204613751Z" level=info msg="Forcibly stopping sandbox \"23ff737391387adfa05fc971a2384b56959ec40974ec3bbcf1afa3a226bf18f5\"" Mar 17 18:28:45.274443 env[1216]: 2025-03-17 18:28:45.239 [WARNING][4948] cni-plugin/k8s.go 572: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="23ff737391387adfa05fc971a2384b56959ec40974ec3bbcf1afa3a226bf18f5" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-calico--apiserver--66cb7fb7dc--2bvrs-eth0", GenerateName:"calico-apiserver-66cb7fb7dc-", Namespace:"calico-apiserver", SelfLink:"", UID:"febc9f3a-c5fd-4e88-ac3b-68eff786c39c", ResourceVersion:"964", Generation:0, CreationTimestamp:time.Date(2025, time.March, 17, 18, 27, 58, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"apiserver":"true", "app.kubernetes.io/name":"calico-apiserver", "k8s-app":"calico-apiserver", "pod-template-hash":"66cb7fb7dc", "projectcalico.org/namespace":"calico-apiserver", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-apiserver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"7e430e160a6c95321ff5fd120f3eab9e6afd20936602a5f1d3e361a692a04bbd", Pod:"calico-apiserver-66cb7fb7dc-2bvrs", Endpoint:"eth0", ServiceAccountName:"calico-apiserver", IPNetworks:[]string{"192.168.88.130/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-apiserver", "ksa.calico-apiserver.calico-apiserver"}, InterfaceName:"calic2268833577", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil)}} Mar 17 18:28:45.274443 env[1216]: 2025-03-17 18:28:45.239 [INFO][4948] cni-plugin/k8s.go 608: Cleaning up netns ContainerID="23ff737391387adfa05fc971a2384b56959ec40974ec3bbcf1afa3a226bf18f5" Mar 17 18:28:45.274443 env[1216]: 2025-03-17 18:28:45.239 [INFO][4948] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="23ff737391387adfa05fc971a2384b56959ec40974ec3bbcf1afa3a226bf18f5" iface="eth0" netns="" Mar 17 18:28:45.274443 env[1216]: 2025-03-17 18:28:45.239 [INFO][4948] cni-plugin/k8s.go 615: Releasing IP address(es) ContainerID="23ff737391387adfa05fc971a2384b56959ec40974ec3bbcf1afa3a226bf18f5" Mar 17 18:28:45.274443 env[1216]: 2025-03-17 18:28:45.239 [INFO][4948] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="23ff737391387adfa05fc971a2384b56959ec40974ec3bbcf1afa3a226bf18f5" Mar 17 18:28:45.274443 env[1216]: 2025-03-17 18:28:45.258 [INFO][4955] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="23ff737391387adfa05fc971a2384b56959ec40974ec3bbcf1afa3a226bf18f5" HandleID="k8s-pod-network.23ff737391387adfa05fc971a2384b56959ec40974ec3bbcf1afa3a226bf18f5" Workload="localhost-k8s-calico--apiserver--66cb7fb7dc--2bvrs-eth0" Mar 17 18:28:45.274443 env[1216]: 2025-03-17 18:28:45.258 [INFO][4955] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Mar 17 18:28:45.274443 env[1216]: 2025-03-17 18:28:45.258 [INFO][4955] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Mar 17 18:28:45.274443 env[1216]: 2025-03-17 18:28:45.266 [WARNING][4955] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="23ff737391387adfa05fc971a2384b56959ec40974ec3bbcf1afa3a226bf18f5" HandleID="k8s-pod-network.23ff737391387adfa05fc971a2384b56959ec40974ec3bbcf1afa3a226bf18f5" Workload="localhost-k8s-calico--apiserver--66cb7fb7dc--2bvrs-eth0" Mar 17 18:28:45.274443 env[1216]: 2025-03-17 18:28:45.266 [INFO][4955] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="23ff737391387adfa05fc971a2384b56959ec40974ec3bbcf1afa3a226bf18f5" HandleID="k8s-pod-network.23ff737391387adfa05fc971a2384b56959ec40974ec3bbcf1afa3a226bf18f5" Workload="localhost-k8s-calico--apiserver--66cb7fb7dc--2bvrs-eth0" Mar 17 18:28:45.274443 env[1216]: 2025-03-17 18:28:45.267 [INFO][4955] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Mar 17 18:28:45.274443 env[1216]: 2025-03-17 18:28:45.269 [INFO][4948] cni-plugin/k8s.go 621: Teardown processing complete. ContainerID="23ff737391387adfa05fc971a2384b56959ec40974ec3bbcf1afa3a226bf18f5" Mar 17 18:28:45.274881 env[1216]: time="2025-03-17T18:28:45.274477595Z" level=info msg="TearDown network for sandbox \"23ff737391387adfa05fc971a2384b56959ec40974ec3bbcf1afa3a226bf18f5\" successfully" Mar 17 18:28:45.277287 env[1216]: time="2025-03-17T18:28:45.277253665Z" level=info msg="RemovePodSandbox \"23ff737391387adfa05fc971a2384b56959ec40974ec3bbcf1afa3a226bf18f5\" returns successfully" Mar 17 18:28:45.277722 env[1216]: time="2025-03-17T18:28:45.277702082Z" level=info msg="StopPodSandbox for \"4e127a8801dcc95eef0564f350e374fd79deb924e30287c7f4cbc63f53152ee8\"" Mar 17 18:28:45.339946 env[1216]: 2025-03-17 18:28:45.309 [WARNING][4978] cni-plugin/k8s.go 572: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="4e127a8801dcc95eef0564f350e374fd79deb924e30287c7f4cbc63f53152ee8" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-coredns--6f6b679f8f--fkzq6-eth0", GenerateName:"coredns-6f6b679f8f-", Namespace:"kube-system", SelfLink:"", UID:"701122a6-4262-4c31-b9ac-c3483ca8c88f", ResourceVersion:"897", Generation:0, CreationTimestamp:time.Date(2025, time.March, 17, 18, 27, 51, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"k8s-app":"kube-dns", "pod-template-hash":"6f6b679f8f", "projectcalico.org/namespace":"kube-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"coredns"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"cf6711a26f93547fe1c866391060f7f666dc9fd30bf982ada1bbff3c596e5d6b", Pod:"coredns-6f6b679f8f-fkzq6", Endpoint:"eth0", ServiceAccountName:"coredns", IPNetworks:[]string{"192.168.88.132/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.kube-system", "ksa.kube-system.coredns"}, InterfaceName:"caliebe0a51f26e", MAC:"", Ports:[]v3.WorkloadEndpointPort{v3.WorkloadEndpointPort{Name:"dns", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"UDP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"dns-tcp", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"metrics", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x23c1, HostPort:0x0, HostIP:""}}, AllowSpoofedSourcePrefixes:[]string(nil)}} Mar 17 18:28:45.339946 env[1216]: 2025-03-17 18:28:45.309 [INFO][4978] cni-plugin/k8s.go 608: Cleaning up netns ContainerID="4e127a8801dcc95eef0564f350e374fd79deb924e30287c7f4cbc63f53152ee8" Mar 17 18:28:45.339946 env[1216]: 2025-03-17 18:28:45.309 [INFO][4978] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="4e127a8801dcc95eef0564f350e374fd79deb924e30287c7f4cbc63f53152ee8" iface="eth0" netns="" Mar 17 18:28:45.339946 env[1216]: 2025-03-17 18:28:45.309 [INFO][4978] cni-plugin/k8s.go 615: Releasing IP address(es) ContainerID="4e127a8801dcc95eef0564f350e374fd79deb924e30287c7f4cbc63f53152ee8" Mar 17 18:28:45.339946 env[1216]: 2025-03-17 18:28:45.309 [INFO][4978] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="4e127a8801dcc95eef0564f350e374fd79deb924e30287c7f4cbc63f53152ee8" Mar 17 18:28:45.339946 env[1216]: 2025-03-17 18:28:45.327 [INFO][4986] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="4e127a8801dcc95eef0564f350e374fd79deb924e30287c7f4cbc63f53152ee8" HandleID="k8s-pod-network.4e127a8801dcc95eef0564f350e374fd79deb924e30287c7f4cbc63f53152ee8" Workload="localhost-k8s-coredns--6f6b679f8f--fkzq6-eth0" Mar 17 18:28:45.339946 env[1216]: 2025-03-17 18:28:45.327 [INFO][4986] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Mar 17 18:28:45.339946 env[1216]: 2025-03-17 18:28:45.327 [INFO][4986] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Mar 17 18:28:45.339946 env[1216]: 2025-03-17 18:28:45.335 [WARNING][4986] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="4e127a8801dcc95eef0564f350e374fd79deb924e30287c7f4cbc63f53152ee8" HandleID="k8s-pod-network.4e127a8801dcc95eef0564f350e374fd79deb924e30287c7f4cbc63f53152ee8" Workload="localhost-k8s-coredns--6f6b679f8f--fkzq6-eth0" Mar 17 18:28:45.339946 env[1216]: 2025-03-17 18:28:45.335 [INFO][4986] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="4e127a8801dcc95eef0564f350e374fd79deb924e30287c7f4cbc63f53152ee8" HandleID="k8s-pod-network.4e127a8801dcc95eef0564f350e374fd79deb924e30287c7f4cbc63f53152ee8" Workload="localhost-k8s-coredns--6f6b679f8f--fkzq6-eth0" Mar 17 18:28:45.339946 env[1216]: 2025-03-17 18:28:45.336 [INFO][4986] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Mar 17 18:28:45.339946 env[1216]: 2025-03-17 18:28:45.338 [INFO][4978] cni-plugin/k8s.go 621: Teardown processing complete. ContainerID="4e127a8801dcc95eef0564f350e374fd79deb924e30287c7f4cbc63f53152ee8" Mar 17 18:28:45.340370 env[1216]: time="2025-03-17T18:28:45.339971866Z" level=info msg="TearDown network for sandbox \"4e127a8801dcc95eef0564f350e374fd79deb924e30287c7f4cbc63f53152ee8\" successfully" Mar 17 18:28:45.340370 env[1216]: time="2025-03-17T18:28:45.340001027Z" level=info msg="StopPodSandbox for \"4e127a8801dcc95eef0564f350e374fd79deb924e30287c7f4cbc63f53152ee8\" returns successfully" Mar 17 18:28:45.340532 env[1216]: time="2025-03-17T18:28:45.340430924Z" level=info msg="RemovePodSandbox for \"4e127a8801dcc95eef0564f350e374fd79deb924e30287c7f4cbc63f53152ee8\"" Mar 17 18:28:45.340576 env[1216]: time="2025-03-17T18:28:45.340540649Z" level=info msg="Forcibly stopping sandbox \"4e127a8801dcc95eef0564f350e374fd79deb924e30287c7f4cbc63f53152ee8\"" Mar 17 18:28:45.406117 env[1216]: 2025-03-17 18:28:45.374 [WARNING][5009] cni-plugin/k8s.go 572: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="4e127a8801dcc95eef0564f350e374fd79deb924e30287c7f4cbc63f53152ee8" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-coredns--6f6b679f8f--fkzq6-eth0", GenerateName:"coredns-6f6b679f8f-", Namespace:"kube-system", SelfLink:"", UID:"701122a6-4262-4c31-b9ac-c3483ca8c88f", ResourceVersion:"897", Generation:0, CreationTimestamp:time.Date(2025, time.March, 17, 18, 27, 51, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"k8s-app":"kube-dns", "pod-template-hash":"6f6b679f8f", "projectcalico.org/namespace":"kube-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"coredns"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"cf6711a26f93547fe1c866391060f7f666dc9fd30bf982ada1bbff3c596e5d6b", Pod:"coredns-6f6b679f8f-fkzq6", Endpoint:"eth0", ServiceAccountName:"coredns", IPNetworks:[]string{"192.168.88.132/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.kube-system", "ksa.kube-system.coredns"}, InterfaceName:"caliebe0a51f26e", MAC:"", Ports:[]v3.WorkloadEndpointPort{v3.WorkloadEndpointPort{Name:"dns", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"UDP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"dns-tcp", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"metrics", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x23c1, HostPort:0x0, HostIP:""}}, AllowSpoofedSourcePrefixes:[]string(nil)}} Mar 17 18:28:45.406117 env[1216]: 2025-03-17 18:28:45.374 [INFO][5009] cni-plugin/k8s.go 608: Cleaning up netns ContainerID="4e127a8801dcc95eef0564f350e374fd79deb924e30287c7f4cbc63f53152ee8" Mar 17 18:28:45.406117 env[1216]: 2025-03-17 18:28:45.374 [INFO][5009] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="4e127a8801dcc95eef0564f350e374fd79deb924e30287c7f4cbc63f53152ee8" iface="eth0" netns="" Mar 17 18:28:45.406117 env[1216]: 2025-03-17 18:28:45.374 [INFO][5009] cni-plugin/k8s.go 615: Releasing IP address(es) ContainerID="4e127a8801dcc95eef0564f350e374fd79deb924e30287c7f4cbc63f53152ee8" Mar 17 18:28:45.406117 env[1216]: 2025-03-17 18:28:45.374 [INFO][5009] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="4e127a8801dcc95eef0564f350e374fd79deb924e30287c7f4cbc63f53152ee8" Mar 17 18:28:45.406117 env[1216]: 2025-03-17 18:28:45.392 [INFO][5017] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="4e127a8801dcc95eef0564f350e374fd79deb924e30287c7f4cbc63f53152ee8" HandleID="k8s-pod-network.4e127a8801dcc95eef0564f350e374fd79deb924e30287c7f4cbc63f53152ee8" Workload="localhost-k8s-coredns--6f6b679f8f--fkzq6-eth0" Mar 17 18:28:45.406117 env[1216]: 2025-03-17 18:28:45.393 [INFO][5017] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Mar 17 18:28:45.406117 env[1216]: 2025-03-17 18:28:45.393 [INFO][5017] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Mar 17 18:28:45.406117 env[1216]: 2025-03-17 18:28:45.401 [WARNING][5017] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="4e127a8801dcc95eef0564f350e374fd79deb924e30287c7f4cbc63f53152ee8" HandleID="k8s-pod-network.4e127a8801dcc95eef0564f350e374fd79deb924e30287c7f4cbc63f53152ee8" Workload="localhost-k8s-coredns--6f6b679f8f--fkzq6-eth0" Mar 17 18:28:45.406117 env[1216]: 2025-03-17 18:28:45.401 [INFO][5017] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="4e127a8801dcc95eef0564f350e374fd79deb924e30287c7f4cbc63f53152ee8" HandleID="k8s-pod-network.4e127a8801dcc95eef0564f350e374fd79deb924e30287c7f4cbc63f53152ee8" Workload="localhost-k8s-coredns--6f6b679f8f--fkzq6-eth0" Mar 17 18:28:45.406117 env[1216]: 2025-03-17 18:28:45.402 [INFO][5017] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Mar 17 18:28:45.406117 env[1216]: 2025-03-17 18:28:45.404 [INFO][5009] cni-plugin/k8s.go 621: Teardown processing complete. ContainerID="4e127a8801dcc95eef0564f350e374fd79deb924e30287c7f4cbc63f53152ee8" Mar 17 18:28:45.406663 env[1216]: time="2025-03-17T18:28:45.406629103Z" level=info msg="TearDown network for sandbox \"4e127a8801dcc95eef0564f350e374fd79deb924e30287c7f4cbc63f53152ee8\" successfully" Mar 17 18:28:45.410160 env[1216]: time="2025-03-17T18:28:45.410128522Z" level=info msg="RemovePodSandbox \"4e127a8801dcc95eef0564f350e374fd79deb924e30287c7f4cbc63f53152ee8\" returns successfully" Mar 17 18:28:45.410707 env[1216]: time="2025-03-17T18:28:45.410666063Z" level=info msg="StopPodSandbox for \"ae4beda153f0e8f2215f60f4da7748192f2f0b969b5793e2bc335b672aaa7272\"" Mar 17 18:28:45.475481 env[1216]: 2025-03-17 18:28:45.444 [WARNING][5040] cni-plugin/k8s.go 572: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="ae4beda153f0e8f2215f60f4da7748192f2f0b969b5793e2bc335b672aaa7272" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-csi--node--driver--2brpt-eth0", GenerateName:"csi-node-driver-", Namespace:"calico-system", SelfLink:"", UID:"89bbd71b-c404-4c0b-b107-937675df3164", ResourceVersion:"1015", Generation:0, CreationTimestamp:time.Date(2025, time.March, 17, 18, 27, 58, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"csi-node-driver", "controller-revision-hash":"56747c9949", "k8s-app":"csi-node-driver", "name":"csi-node-driver", "pod-template-generation":"1", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"csi-node-driver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"d6966a7e79563338d5eb4c2d384219225a1d3f028896cec0d7f576a8a0525117", Pod:"csi-node-driver-2brpt", Endpoint:"eth0", ServiceAccountName:"csi-node-driver", IPNetworks:[]string{"192.168.88.131/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.csi-node-driver"}, InterfaceName:"cali06cfa15a03f", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil)}} Mar 17 18:28:45.475481 env[1216]: 2025-03-17 18:28:45.444 [INFO][5040] cni-plugin/k8s.go 608: Cleaning up netns ContainerID="ae4beda153f0e8f2215f60f4da7748192f2f0b969b5793e2bc335b672aaa7272" Mar 17 18:28:45.475481 env[1216]: 2025-03-17 18:28:45.444 [INFO][5040] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="ae4beda153f0e8f2215f60f4da7748192f2f0b969b5793e2bc335b672aaa7272" iface="eth0" netns="" Mar 17 18:28:45.475481 env[1216]: 2025-03-17 18:28:45.444 [INFO][5040] cni-plugin/k8s.go 615: Releasing IP address(es) ContainerID="ae4beda153f0e8f2215f60f4da7748192f2f0b969b5793e2bc335b672aaa7272" Mar 17 18:28:45.475481 env[1216]: 2025-03-17 18:28:45.444 [INFO][5040] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="ae4beda153f0e8f2215f60f4da7748192f2f0b969b5793e2bc335b672aaa7272" Mar 17 18:28:45.475481 env[1216]: 2025-03-17 18:28:45.462 [INFO][5048] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="ae4beda153f0e8f2215f60f4da7748192f2f0b969b5793e2bc335b672aaa7272" HandleID="k8s-pod-network.ae4beda153f0e8f2215f60f4da7748192f2f0b969b5793e2bc335b672aaa7272" Workload="localhost-k8s-csi--node--driver--2brpt-eth0" Mar 17 18:28:45.475481 env[1216]: 2025-03-17 18:28:45.463 [INFO][5048] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Mar 17 18:28:45.475481 env[1216]: 2025-03-17 18:28:45.463 [INFO][5048] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Mar 17 18:28:45.475481 env[1216]: 2025-03-17 18:28:45.470 [WARNING][5048] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="ae4beda153f0e8f2215f60f4da7748192f2f0b969b5793e2bc335b672aaa7272" HandleID="k8s-pod-network.ae4beda153f0e8f2215f60f4da7748192f2f0b969b5793e2bc335b672aaa7272" Workload="localhost-k8s-csi--node--driver--2brpt-eth0" Mar 17 18:28:45.475481 env[1216]: 2025-03-17 18:28:45.470 [INFO][5048] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="ae4beda153f0e8f2215f60f4da7748192f2f0b969b5793e2bc335b672aaa7272" HandleID="k8s-pod-network.ae4beda153f0e8f2215f60f4da7748192f2f0b969b5793e2bc335b672aaa7272" Workload="localhost-k8s-csi--node--driver--2brpt-eth0" Mar 17 18:28:45.475481 env[1216]: 2025-03-17 18:28:45.472 [INFO][5048] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Mar 17 18:28:45.475481 env[1216]: 2025-03-17 18:28:45.473 [INFO][5040] cni-plugin/k8s.go 621: Teardown processing complete. ContainerID="ae4beda153f0e8f2215f60f4da7748192f2f0b969b5793e2bc335b672aaa7272" Mar 17 18:28:45.475914 env[1216]: time="2025-03-17T18:28:45.475501068Z" level=info msg="TearDown network for sandbox \"ae4beda153f0e8f2215f60f4da7748192f2f0b969b5793e2bc335b672aaa7272\" successfully" Mar 17 18:28:45.475914 env[1216]: time="2025-03-17T18:28:45.475531950Z" level=info msg="StopPodSandbox for \"ae4beda153f0e8f2215f60f4da7748192f2f0b969b5793e2bc335b672aaa7272\" returns successfully" Mar 17 18:28:45.475960 env[1216]: time="2025-03-17T18:28:45.475941126Z" level=info msg="RemovePodSandbox for \"ae4beda153f0e8f2215f60f4da7748192f2f0b969b5793e2bc335b672aaa7272\"" Mar 17 18:28:45.476014 env[1216]: time="2025-03-17T18:28:45.475974767Z" level=info msg="Forcibly stopping sandbox \"ae4beda153f0e8f2215f60f4da7748192f2f0b969b5793e2bc335b672aaa7272\"" Mar 17 18:28:45.541133 env[1216]: 2025-03-17 18:28:45.509 [WARNING][5071] cni-plugin/k8s.go 572: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="ae4beda153f0e8f2215f60f4da7748192f2f0b969b5793e2bc335b672aaa7272" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-csi--node--driver--2brpt-eth0", GenerateName:"csi-node-driver-", Namespace:"calico-system", SelfLink:"", UID:"89bbd71b-c404-4c0b-b107-937675df3164", ResourceVersion:"1015", Generation:0, CreationTimestamp:time.Date(2025, time.March, 17, 18, 27, 58, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"csi-node-driver", "controller-revision-hash":"56747c9949", "k8s-app":"csi-node-driver", "name":"csi-node-driver", "pod-template-generation":"1", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"csi-node-driver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"d6966a7e79563338d5eb4c2d384219225a1d3f028896cec0d7f576a8a0525117", Pod:"csi-node-driver-2brpt", Endpoint:"eth0", ServiceAccountName:"csi-node-driver", IPNetworks:[]string{"192.168.88.131/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.csi-node-driver"}, InterfaceName:"cali06cfa15a03f", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil)}} Mar 17 18:28:45.541133 env[1216]: 2025-03-17 18:28:45.509 [INFO][5071] cni-plugin/k8s.go 608: Cleaning up netns ContainerID="ae4beda153f0e8f2215f60f4da7748192f2f0b969b5793e2bc335b672aaa7272" Mar 17 18:28:45.541133 env[1216]: 2025-03-17 18:28:45.509 [INFO][5071] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="ae4beda153f0e8f2215f60f4da7748192f2f0b969b5793e2bc335b672aaa7272" iface="eth0" netns="" Mar 17 18:28:45.541133 env[1216]: 2025-03-17 18:28:45.509 [INFO][5071] cni-plugin/k8s.go 615: Releasing IP address(es) ContainerID="ae4beda153f0e8f2215f60f4da7748192f2f0b969b5793e2bc335b672aaa7272" Mar 17 18:28:45.541133 env[1216]: 2025-03-17 18:28:45.509 [INFO][5071] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="ae4beda153f0e8f2215f60f4da7748192f2f0b969b5793e2bc335b672aaa7272" Mar 17 18:28:45.541133 env[1216]: 2025-03-17 18:28:45.528 [INFO][5078] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="ae4beda153f0e8f2215f60f4da7748192f2f0b969b5793e2bc335b672aaa7272" HandleID="k8s-pod-network.ae4beda153f0e8f2215f60f4da7748192f2f0b969b5793e2bc335b672aaa7272" Workload="localhost-k8s-csi--node--driver--2brpt-eth0" Mar 17 18:28:45.541133 env[1216]: 2025-03-17 18:28:45.528 [INFO][5078] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Mar 17 18:28:45.541133 env[1216]: 2025-03-17 18:28:45.528 [INFO][5078] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Mar 17 18:28:45.541133 env[1216]: 2025-03-17 18:28:45.536 [WARNING][5078] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="ae4beda153f0e8f2215f60f4da7748192f2f0b969b5793e2bc335b672aaa7272" HandleID="k8s-pod-network.ae4beda153f0e8f2215f60f4da7748192f2f0b969b5793e2bc335b672aaa7272" Workload="localhost-k8s-csi--node--driver--2brpt-eth0" Mar 17 18:28:45.541133 env[1216]: 2025-03-17 18:28:45.536 [INFO][5078] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="ae4beda153f0e8f2215f60f4da7748192f2f0b969b5793e2bc335b672aaa7272" HandleID="k8s-pod-network.ae4beda153f0e8f2215f60f4da7748192f2f0b969b5793e2bc335b672aaa7272" Workload="localhost-k8s-csi--node--driver--2brpt-eth0" Mar 17 18:28:45.541133 env[1216]: 2025-03-17 18:28:45.537 [INFO][5078] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Mar 17 18:28:45.541133 env[1216]: 2025-03-17 18:28:45.539 [INFO][5071] cni-plugin/k8s.go 621: Teardown processing complete. ContainerID="ae4beda153f0e8f2215f60f4da7748192f2f0b969b5793e2bc335b672aaa7272" Mar 17 18:28:45.541525 env[1216]: time="2025-03-17T18:28:45.541165746Z" level=info msg="TearDown network for sandbox \"ae4beda153f0e8f2215f60f4da7748192f2f0b969b5793e2bc335b672aaa7272\" successfully" Mar 17 18:28:45.543629 env[1216]: time="2025-03-17T18:28:45.543592802Z" level=info msg="RemovePodSandbox \"ae4beda153f0e8f2215f60f4da7748192f2f0b969b5793e2bc335b672aaa7272\" returns successfully" Mar 17 18:28:45.544180 env[1216]: time="2025-03-17T18:28:45.544146104Z" level=info msg="StopPodSandbox for \"fa5551db9702a4adfa64e435cfdf70e40a3076d4d0a89d993024a38a57de183f\"" Mar 17 18:28:45.613781 env[1216]: 2025-03-17 18:28:45.580 [WARNING][5101] cni-plugin/k8s.go 572: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="fa5551db9702a4adfa64e435cfdf70e40a3076d4d0a89d993024a38a57de183f" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-calico--apiserver--66cb7fb7dc--vzzfc-eth0", GenerateName:"calico-apiserver-66cb7fb7dc-", Namespace:"calico-apiserver", SelfLink:"", UID:"2583581b-be32-4ea5-876e-18fe9067e955", ResourceVersion:"1005", Generation:0, CreationTimestamp:time.Date(2025, time.March, 17, 18, 27, 58, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"apiserver":"true", "app.kubernetes.io/name":"calico-apiserver", "k8s-app":"calico-apiserver", "pod-template-hash":"66cb7fb7dc", "projectcalico.org/namespace":"calico-apiserver", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-apiserver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"f7c91c42a0e01d9502f0d1a3f29ffcf51d26610476dc5f7e2e85d2316693c5e0", Pod:"calico-apiserver-66cb7fb7dc-vzzfc", Endpoint:"eth0", ServiceAccountName:"calico-apiserver", IPNetworks:[]string{"192.168.88.134/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-apiserver", "ksa.calico-apiserver.calico-apiserver"}, InterfaceName:"calie29f3bc36a1", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil)}} Mar 17 18:28:45.613781 env[1216]: 2025-03-17 18:28:45.580 [INFO][5101] cni-plugin/k8s.go 608: Cleaning up netns ContainerID="fa5551db9702a4adfa64e435cfdf70e40a3076d4d0a89d993024a38a57de183f" Mar 17 18:28:45.613781 env[1216]: 2025-03-17 18:28:45.580 [INFO][5101] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="fa5551db9702a4adfa64e435cfdf70e40a3076d4d0a89d993024a38a57de183f" iface="eth0" netns="" Mar 17 18:28:45.613781 env[1216]: 2025-03-17 18:28:45.580 [INFO][5101] cni-plugin/k8s.go 615: Releasing IP address(es) ContainerID="fa5551db9702a4adfa64e435cfdf70e40a3076d4d0a89d993024a38a57de183f" Mar 17 18:28:45.613781 env[1216]: 2025-03-17 18:28:45.580 [INFO][5101] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="fa5551db9702a4adfa64e435cfdf70e40a3076d4d0a89d993024a38a57de183f" Mar 17 18:28:45.613781 env[1216]: 2025-03-17 18:28:45.600 [INFO][5108] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="fa5551db9702a4adfa64e435cfdf70e40a3076d4d0a89d993024a38a57de183f" HandleID="k8s-pod-network.fa5551db9702a4adfa64e435cfdf70e40a3076d4d0a89d993024a38a57de183f" Workload="localhost-k8s-calico--apiserver--66cb7fb7dc--vzzfc-eth0" Mar 17 18:28:45.613781 env[1216]: 2025-03-17 18:28:45.600 [INFO][5108] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Mar 17 18:28:45.613781 env[1216]: 2025-03-17 18:28:45.600 [INFO][5108] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Mar 17 18:28:45.613781 env[1216]: 2025-03-17 18:28:45.608 [WARNING][5108] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="fa5551db9702a4adfa64e435cfdf70e40a3076d4d0a89d993024a38a57de183f" HandleID="k8s-pod-network.fa5551db9702a4adfa64e435cfdf70e40a3076d4d0a89d993024a38a57de183f" Workload="localhost-k8s-calico--apiserver--66cb7fb7dc--vzzfc-eth0" Mar 17 18:28:45.613781 env[1216]: 2025-03-17 18:28:45.608 [INFO][5108] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="fa5551db9702a4adfa64e435cfdf70e40a3076d4d0a89d993024a38a57de183f" HandleID="k8s-pod-network.fa5551db9702a4adfa64e435cfdf70e40a3076d4d0a89d993024a38a57de183f" Workload="localhost-k8s-calico--apiserver--66cb7fb7dc--vzzfc-eth0" Mar 17 18:28:45.613781 env[1216]: 2025-03-17 18:28:45.610 [INFO][5108] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Mar 17 18:28:45.613781 env[1216]: 2025-03-17 18:28:45.612 [INFO][5101] cni-plugin/k8s.go 621: Teardown processing complete. ContainerID="fa5551db9702a4adfa64e435cfdf70e40a3076d4d0a89d993024a38a57de183f" Mar 17 18:28:45.614219 env[1216]: time="2025-03-17T18:28:45.613810741Z" level=info msg="TearDown network for sandbox \"fa5551db9702a4adfa64e435cfdf70e40a3076d4d0a89d993024a38a57de183f\" successfully" Mar 17 18:28:45.614219 env[1216]: time="2025-03-17T18:28:45.613852022Z" level=info msg="StopPodSandbox for \"fa5551db9702a4adfa64e435cfdf70e40a3076d4d0a89d993024a38a57de183f\" returns successfully" Mar 17 18:28:45.614454 env[1216]: time="2025-03-17T18:28:45.614425525Z" level=info msg="RemovePodSandbox for \"fa5551db9702a4adfa64e435cfdf70e40a3076d4d0a89d993024a38a57de183f\"" Mar 17 18:28:45.614562 env[1216]: time="2025-03-17T18:28:45.614525689Z" level=info msg="Forcibly stopping sandbox \"fa5551db9702a4adfa64e435cfdf70e40a3076d4d0a89d993024a38a57de183f\"" Mar 17 18:28:45.678881 env[1216]: 2025-03-17 18:28:45.648 [WARNING][5130] cni-plugin/k8s.go 572: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="fa5551db9702a4adfa64e435cfdf70e40a3076d4d0a89d993024a38a57de183f" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-calico--apiserver--66cb7fb7dc--vzzfc-eth0", GenerateName:"calico-apiserver-66cb7fb7dc-", Namespace:"calico-apiserver", SelfLink:"", UID:"2583581b-be32-4ea5-876e-18fe9067e955", ResourceVersion:"1005", Generation:0, CreationTimestamp:time.Date(2025, time.March, 17, 18, 27, 58, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"apiserver":"true", "app.kubernetes.io/name":"calico-apiserver", "k8s-app":"calico-apiserver", "pod-template-hash":"66cb7fb7dc", "projectcalico.org/namespace":"calico-apiserver", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-apiserver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"f7c91c42a0e01d9502f0d1a3f29ffcf51d26610476dc5f7e2e85d2316693c5e0", Pod:"calico-apiserver-66cb7fb7dc-vzzfc", Endpoint:"eth0", ServiceAccountName:"calico-apiserver", IPNetworks:[]string{"192.168.88.134/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-apiserver", "ksa.calico-apiserver.calico-apiserver"}, InterfaceName:"calie29f3bc36a1", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil)}} Mar 17 18:28:45.678881 env[1216]: 2025-03-17 18:28:45.648 [INFO][5130] cni-plugin/k8s.go 608: Cleaning up netns ContainerID="fa5551db9702a4adfa64e435cfdf70e40a3076d4d0a89d993024a38a57de183f" Mar 17 18:28:45.678881 env[1216]: 2025-03-17 18:28:45.648 [INFO][5130] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="fa5551db9702a4adfa64e435cfdf70e40a3076d4d0a89d993024a38a57de183f" iface="eth0" netns="" Mar 17 18:28:45.678881 env[1216]: 2025-03-17 18:28:45.648 [INFO][5130] cni-plugin/k8s.go 615: Releasing IP address(es) ContainerID="fa5551db9702a4adfa64e435cfdf70e40a3076d4d0a89d993024a38a57de183f" Mar 17 18:28:45.678881 env[1216]: 2025-03-17 18:28:45.648 [INFO][5130] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="fa5551db9702a4adfa64e435cfdf70e40a3076d4d0a89d993024a38a57de183f" Mar 17 18:28:45.678881 env[1216]: 2025-03-17 18:28:45.666 [INFO][5138] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="fa5551db9702a4adfa64e435cfdf70e40a3076d4d0a89d993024a38a57de183f" HandleID="k8s-pod-network.fa5551db9702a4adfa64e435cfdf70e40a3076d4d0a89d993024a38a57de183f" Workload="localhost-k8s-calico--apiserver--66cb7fb7dc--vzzfc-eth0" Mar 17 18:28:45.678881 env[1216]: 2025-03-17 18:28:45.666 [INFO][5138] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Mar 17 18:28:45.678881 env[1216]: 2025-03-17 18:28:45.666 [INFO][5138] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Mar 17 18:28:45.678881 env[1216]: 2025-03-17 18:28:45.674 [WARNING][5138] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="fa5551db9702a4adfa64e435cfdf70e40a3076d4d0a89d993024a38a57de183f" HandleID="k8s-pod-network.fa5551db9702a4adfa64e435cfdf70e40a3076d4d0a89d993024a38a57de183f" Workload="localhost-k8s-calico--apiserver--66cb7fb7dc--vzzfc-eth0" Mar 17 18:28:45.678881 env[1216]: 2025-03-17 18:28:45.674 [INFO][5138] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="fa5551db9702a4adfa64e435cfdf70e40a3076d4d0a89d993024a38a57de183f" HandleID="k8s-pod-network.fa5551db9702a4adfa64e435cfdf70e40a3076d4d0a89d993024a38a57de183f" Workload="localhost-k8s-calico--apiserver--66cb7fb7dc--vzzfc-eth0" Mar 17 18:28:45.678881 env[1216]: 2025-03-17 18:28:45.675 [INFO][5138] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Mar 17 18:28:45.678881 env[1216]: 2025-03-17 18:28:45.677 [INFO][5130] cni-plugin/k8s.go 621: Teardown processing complete. ContainerID="fa5551db9702a4adfa64e435cfdf70e40a3076d4d0a89d993024a38a57de183f" Mar 17 18:28:45.678881 env[1216]: time="2025-03-17T18:28:45.678858274Z" level=info msg="TearDown network for sandbox \"fa5551db9702a4adfa64e435cfdf70e40a3076d4d0a89d993024a38a57de183f\" successfully" Mar 17 18:28:45.681564 env[1216]: time="2025-03-17T18:28:45.681537780Z" level=info msg="RemovePodSandbox \"fa5551db9702a4adfa64e435cfdf70e40a3076d4d0a89d993024a38a57de183f\" returns successfully" Mar 17 18:28:46.216373 systemd[1]: run-containerd-runc-k8s.io-f1c25857df1cd91bbe15c911f7397f1e6c12045917decc7c47be175c06ed69a7-runc.hnRDFU.mount: Deactivated successfully. Mar 17 18:28:48.389000 audit[5174]: NETFILTER_CFG table=filter:119 family=2 entries=20 op=nft_register_rule pid=5174 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Mar 17 18:28:48.392077 kernel: kauditd_printk_skb: 81 callbacks suppressed Mar 17 18:28:48.392133 kernel: audit: type=1325 audit(1742236128.389:1441): table=filter:119 family=2 entries=20 op=nft_register_rule pid=5174 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Mar 17 18:28:48.392160 kernel: audit: type=1300 audit(1742236128.389:1441): arch=c00000b7 syscall=211 success=yes exit=3016 a0=3 a1=ffffdc1f6250 a2=0 a3=1 items=0 ppid=2108 pid=5174 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:28:48.389000 audit[5174]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=3016 a0=3 a1=ffffdc1f6250 a2=0 a3=1 items=0 ppid=2108 pid=5174 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:28:48.389000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Mar 17 18:28:48.396410 kernel: audit: type=1327 audit(1742236128.389:1441): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Mar 17 18:28:48.401000 audit[5174]: NETFILTER_CFG table=nat:120 family=2 entries=106 op=nft_register_chain pid=5174 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Mar 17 18:28:48.401000 audit[5174]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=49452 a0=3 a1=ffffdc1f6250 a2=0 a3=1 items=0 ppid=2108 pid=5174 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:28:48.406981 kernel: audit: type=1325 audit(1742236128.401:1442): table=nat:120 family=2 entries=106 op=nft_register_chain pid=5174 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Mar 17 18:28:48.407018 kernel: audit: type=1300 audit(1742236128.401:1442): arch=c00000b7 syscall=211 success=yes exit=49452 a0=3 a1=ffffdc1f6250 a2=0 a3=1 items=0 ppid=2108 pid=5174 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:28:48.407035 kernel: audit: type=1327 audit(1742236128.401:1442): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Mar 17 18:28:48.401000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Mar 17 18:28:48.550000 audit[1835]: AVC avc: denied { watch } for pid=1835 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=7285 scontext=system_u:system_r:svirt_lxc_net_t:s0:c540,c941 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Mar 17 18:28:48.550000 audit[1835]: AVC avc: denied { watch } for pid=1835 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=7285 scontext=system_u:system_r:svirt_lxc_net_t:s0:c540,c941 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Mar 17 18:28:48.556585 kernel: audit: type=1400 audit(1742236128.550:1445): avc: denied { watch } for pid=1835 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=7285 scontext=system_u:system_r:svirt_lxc_net_t:s0:c540,c941 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Mar 17 18:28:48.556648 kernel: audit: type=1400 audit(1742236128.550:1443): avc: denied { watch } for pid=1835 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=7285 scontext=system_u:system_r:svirt_lxc_net_t:s0:c540,c941 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Mar 17 18:28:48.556675 kernel: audit: type=1400 audit(1742236128.550:1444): avc: denied { watch } for pid=1835 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=7285 scontext=system_u:system_r:svirt_lxc_net_t:s0:c540,c941 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Mar 17 18:28:48.550000 audit[1835]: AVC avc: denied { watch } for pid=1835 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=7285 scontext=system_u:system_r:svirt_lxc_net_t:s0:c540,c941 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Mar 17 18:28:48.550000 audit[1835]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=a a1=400303cf20 a2=fc6 a3=0 items=0 ppid=1674 pid=1835 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c540,c941 key=(null) Mar 17 18:28:48.561750 kernel: audit: type=1300 audit(1742236128.550:1444): arch=c00000b7 syscall=27 success=no exit=-13 a0=a a1=400303cf20 a2=fc6 a3=0 items=0 ppid=1674 pid=1835 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c540,c941 key=(null) Mar 17 18:28:48.550000 audit[1835]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=b a1=400325fd20 a2=fc6 a3=0 items=0 ppid=1674 pid=1835 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c540,c941 key=(null) Mar 17 18:28:48.550000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Mar 17 18:28:48.550000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Mar 17 18:28:48.550000 audit[1835]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=9 a1=4000d22380 a2=fc6 a3=0 items=0 ppid=1674 pid=1835 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c540,c941 key=(null) Mar 17 18:28:48.550000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Mar 17 18:28:48.551000 audit[1835]: AVC avc: denied { watch } for pid=1835 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=7285 scontext=system_u:system_r:svirt_lxc_net_t:s0:c540,c941 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Mar 17 18:28:48.551000 audit[1835]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=9 a1=4000d223e0 a2=fc6 a3=0 items=0 ppid=1674 pid=1835 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c540,c941 key=(null) Mar 17 18:28:48.551000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Mar 17 18:28:48.845000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@19-10.0.0.111:22-10.0.0.1:53572 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:28:48.846201 systemd[1]: Started sshd@19-10.0.0.111:22-10.0.0.1:53572.service. Mar 17 18:28:48.876000 audit[5177]: USER_ACCT pid=5177 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Mar 17 18:28:48.877890 sshd[5177]: Accepted publickey for core from 10.0.0.1 port 53572 ssh2: RSA SHA256:hoQCPKafrT/V1URQ18ch5K7mLY85DMM2OIJJf47c8zQ Mar 17 18:28:48.877000 audit[5177]: CRED_ACQ pid=5177 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Mar 17 18:28:48.877000 audit[5177]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffcae89bb0 a2=3 a3=1 items=0 ppid=1 pid=5177 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=20 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:28:48.877000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Mar 17 18:28:48.878974 sshd[5177]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Mar 17 18:28:48.882022 systemd-logind[1207]: New session 20 of user core. Mar 17 18:28:48.882778 systemd[1]: Started session-20.scope. Mar 17 18:28:48.886000 audit[5177]: USER_START pid=5177 uid=0 auid=500 ses=20 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Mar 17 18:28:48.887000 audit[5179]: CRED_ACQ pid=5179 uid=0 auid=500 ses=20 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Mar 17 18:28:49.000596 sshd[5177]: pam_unix(sshd:session): session closed for user core Mar 17 18:28:49.000000 audit[5177]: USER_END pid=5177 uid=0 auid=500 ses=20 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Mar 17 18:28:49.000000 audit[5177]: CRED_DISP pid=5177 uid=0 auid=500 ses=20 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Mar 17 18:28:49.004051 systemd[1]: sshd@19-10.0.0.111:22-10.0.0.1:53572.service: Deactivated successfully. Mar 17 18:28:49.003000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@19-10.0.0.111:22-10.0.0.1:53572 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:28:49.004788 systemd[1]: session-20.scope: Deactivated successfully. Mar 17 18:28:49.005814 systemd-logind[1207]: Session 20 logged out. Waiting for processes to exit. Mar 17 18:28:49.006653 systemd-logind[1207]: Removed session 20. Mar 17 18:28:51.790854 systemd[1]: run-containerd-runc-k8s.io-f1c25857df1cd91bbe15c911f7397f1e6c12045917decc7c47be175c06ed69a7-runc.tyMz5y.mount: Deactivated successfully. Mar 17 18:28:54.004994 systemd[1]: Started sshd@20-10.0.0.111:22-10.0.0.1:53922.service. Mar 17 18:28:54.004000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@20-10.0.0.111:22-10.0.0.1:53922 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:28:54.007812 kernel: kauditd_printk_skb: 19 callbacks suppressed Mar 17 18:28:54.007871 kernel: audit: type=1130 audit(1742236134.004:1456): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@20-10.0.0.111:22-10.0.0.1:53922 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:28:54.035000 audit[5213]: USER_ACCT pid=5213 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Mar 17 18:28:54.036389 sshd[5213]: Accepted publickey for core from 10.0.0.1 port 53922 ssh2: RSA SHA256:hoQCPKafrT/V1URQ18ch5K7mLY85DMM2OIJJf47c8zQ Mar 17 18:28:54.037492 sshd[5213]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Mar 17 18:28:54.036000 audit[5213]: CRED_ACQ pid=5213 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Mar 17 18:28:54.041174 kernel: audit: type=1101 audit(1742236134.035:1457): pid=5213 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Mar 17 18:28:54.041228 kernel: audit: type=1103 audit(1742236134.036:1458): pid=5213 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Mar 17 18:28:54.041246 kernel: audit: type=1006 audit(1742236134.036:1459): pid=5213 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=21 res=1 Mar 17 18:28:54.041062 systemd-logind[1207]: New session 21 of user core. Mar 17 18:28:54.042344 kernel: audit: type=1300 audit(1742236134.036:1459): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffc9ca3960 a2=3 a3=1 items=0 ppid=1 pid=5213 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=21 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:28:54.036000 audit[5213]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffc9ca3960 a2=3 a3=1 items=0 ppid=1 pid=5213 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=21 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:28:54.041932 systemd[1]: Started session-21.scope. Mar 17 18:28:54.036000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Mar 17 18:28:54.045843 kernel: audit: type=1327 audit(1742236134.036:1459): proctitle=737368643A20636F7265205B707269765D Mar 17 18:28:54.045000 audit[5213]: USER_START pid=5213 uid=0 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Mar 17 18:28:54.049006 kernel: audit: type=1105 audit(1742236134.045:1460): pid=5213 uid=0 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Mar 17 18:28:54.046000 audit[5215]: CRED_ACQ pid=5215 uid=0 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Mar 17 18:28:54.051179 kernel: audit: type=1103 audit(1742236134.046:1461): pid=5215 uid=0 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Mar 17 18:28:54.159813 sshd[5213]: pam_unix(sshd:session): session closed for user core Mar 17 18:28:54.159000 audit[5213]: USER_END pid=5213 uid=0 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Mar 17 18:28:54.162599 systemd[1]: sshd@20-10.0.0.111:22-10.0.0.1:53922.service: Deactivated successfully. Mar 17 18:28:54.159000 audit[5213]: CRED_DISP pid=5213 uid=0 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Mar 17 18:28:54.163370 systemd[1]: session-21.scope: Deactivated successfully. Mar 17 18:28:54.163942 systemd-logind[1207]: Session 21 logged out. Waiting for processes to exit. Mar 17 18:28:54.164569 systemd-logind[1207]: Removed session 21. Mar 17 18:28:54.165434 kernel: audit: type=1106 audit(1742236134.159:1462): pid=5213 uid=0 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Mar 17 18:28:54.165497 kernel: audit: type=1104 audit(1742236134.159:1463): pid=5213 uid=0 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Mar 17 18:28:54.161000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@20-10.0.0.111:22-10.0.0.1:53922 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:28:56.688455 kubelet[1962]: E0317 18:28:56.688143 1962 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Mar 17 18:28:56.703420 kubelet[1962]: I0317 18:28:56.703369 1962 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="calico-system/csi-node-driver-2brpt" podStartSLOduration=52.827870531 podStartE2EDuration="58.703345242s" podCreationTimestamp="2025-03-17 18:27:58 +0000 UTC" firstStartedPulling="2025-03-17 18:28:21.436796023 +0000 UTC m=+36.663101404" lastFinishedPulling="2025-03-17 18:28:27.312270734 +0000 UTC m=+42.538576115" observedRunningTime="2025-03-17 18:28:28.046066125 +0000 UTC m=+43.272371506" watchObservedRunningTime="2025-03-17 18:28:56.703345242 +0000 UTC m=+71.929650623" Mar 17 18:28:59.164732 systemd[1]: Started sshd@21-10.0.0.111:22-10.0.0.1:53926.service. Mar 17 18:28:59.164000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@21-10.0.0.111:22-10.0.0.1:53926 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:28:59.166012 kernel: kauditd_printk_skb: 1 callbacks suppressed Mar 17 18:28:59.166214 kernel: audit: type=1130 audit(1742236139.164:1465): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@21-10.0.0.111:22-10.0.0.1:53926 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:28:59.201000 audit[5248]: USER_ACCT pid=5248 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Mar 17 18:28:59.203669 sshd[5248]: Accepted publickey for core from 10.0.0.1 port 53926 ssh2: RSA SHA256:hoQCPKafrT/V1URQ18ch5K7mLY85DMM2OIJJf47c8zQ Mar 17 18:28:59.204432 sshd[5248]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Mar 17 18:28:59.203000 audit[5248]: CRED_ACQ pid=5248 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Mar 17 18:28:59.207097 kernel: audit: type=1101 audit(1742236139.201:1466): pid=5248 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Mar 17 18:28:59.207174 kernel: audit: type=1103 audit(1742236139.203:1467): pid=5248 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Mar 17 18:28:59.207198 kernel: audit: type=1006 audit(1742236139.203:1468): pid=5248 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=22 res=1 Mar 17 18:28:59.203000 audit[5248]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=fffff3f5a2a0 a2=3 a3=1 items=0 ppid=1 pid=5248 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=22 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:28:59.209899 systemd-logind[1207]: New session 22 of user core. Mar 17 18:28:59.210273 systemd[1]: Started session-22.scope. Mar 17 18:28:59.211200 kernel: audit: type=1300 audit(1742236139.203:1468): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=fffff3f5a2a0 a2=3 a3=1 items=0 ppid=1 pid=5248 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=22 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:28:59.211266 kernel: audit: type=1327 audit(1742236139.203:1468): proctitle=737368643A20636F7265205B707269765D Mar 17 18:28:59.203000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Mar 17 18:28:59.213000 audit[5248]: USER_START pid=5248 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Mar 17 18:28:59.213000 audit[5250]: CRED_ACQ pid=5250 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Mar 17 18:28:59.219252 kernel: audit: type=1105 audit(1742236139.213:1469): pid=5248 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Mar 17 18:28:59.219291 kernel: audit: type=1103 audit(1742236139.213:1470): pid=5250 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Mar 17 18:28:59.336192 sshd[5248]: pam_unix(sshd:session): session closed for user core Mar 17 18:28:59.336000 audit[5248]: USER_END pid=5248 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Mar 17 18:28:59.338672 systemd[1]: sshd@21-10.0.0.111:22-10.0.0.1:53926.service: Deactivated successfully. Mar 17 18:28:59.339443 systemd[1]: session-22.scope: Deactivated successfully. Mar 17 18:28:59.336000 audit[5248]: CRED_DISP pid=5248 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Mar 17 18:28:59.340067 systemd-logind[1207]: Session 22 logged out. Waiting for processes to exit. Mar 17 18:28:59.341046 systemd-logind[1207]: Removed session 22. Mar 17 18:28:59.342193 kernel: audit: type=1106 audit(1742236139.336:1471): pid=5248 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Mar 17 18:28:59.342266 kernel: audit: type=1104 audit(1742236139.336:1472): pid=5248 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Mar 17 18:28:59.338000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@21-10.0.0.111:22-10.0.0.1:53926 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:29:02.869010 kubelet[1962]: E0317 18:29:02.868966 1962 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Mar 17 18:29:04.340731 systemd[1]: Started sshd@22-10.0.0.111:22-10.0.0.1:48972.service. Mar 17 18:29:04.340000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@22-10.0.0.111:22-10.0.0.1:48972 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:29:04.343863 kernel: kauditd_printk_skb: 1 callbacks suppressed Mar 17 18:29:04.343930 kernel: audit: type=1130 audit(1742236144.340:1474): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@22-10.0.0.111:22-10.0.0.1:48972 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:29:04.371000 audit[5262]: USER_ACCT pid=5262 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Mar 17 18:29:04.372246 sshd[5262]: Accepted publickey for core from 10.0.0.1 port 48972 ssh2: RSA SHA256:hoQCPKafrT/V1URQ18ch5K7mLY85DMM2OIJJf47c8zQ Mar 17 18:29:04.373429 sshd[5262]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Mar 17 18:29:04.372000 audit[5262]: CRED_ACQ pid=5262 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Mar 17 18:29:04.376650 kernel: audit: type=1101 audit(1742236144.371:1475): pid=5262 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Mar 17 18:29:04.376707 kernel: audit: type=1103 audit(1742236144.372:1476): pid=5262 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Mar 17 18:29:04.378305 kernel: audit: type=1006 audit(1742236144.372:1477): pid=5262 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=23 res=1 Mar 17 18:29:04.372000 audit[5262]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffdda69ce0 a2=3 a3=1 items=0 ppid=1 pid=5262 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=23 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:29:04.380433 systemd-logind[1207]: New session 23 of user core. Mar 17 18:29:04.380824 systemd[1]: Started session-23.scope. Mar 17 18:29:04.381013 kernel: audit: type=1300 audit(1742236144.372:1477): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffdda69ce0 a2=3 a3=1 items=0 ppid=1 pid=5262 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=23 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:29:04.381042 kernel: audit: type=1327 audit(1742236144.372:1477): proctitle=737368643A20636F7265205B707269765D Mar 17 18:29:04.372000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Mar 17 18:29:04.384000 audit[5262]: USER_START pid=5262 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Mar 17 18:29:04.387000 audit[5264]: CRED_ACQ pid=5264 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Mar 17 18:29:04.390238 kernel: audit: type=1105 audit(1742236144.384:1478): pid=5262 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Mar 17 18:29:04.390282 kernel: audit: type=1103 audit(1742236144.387:1479): pid=5264 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Mar 17 18:29:04.499778 sshd[5262]: pam_unix(sshd:session): session closed for user core Mar 17 18:29:04.499000 audit[5262]: USER_END pid=5262 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Mar 17 18:29:04.501000 audit[5262]: CRED_DISP pid=5262 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Mar 17 18:29:04.503497 systemd-logind[1207]: Session 23 logged out. Waiting for processes to exit. Mar 17 18:29:04.503648 systemd[1]: sshd@22-10.0.0.111:22-10.0.0.1:48972.service: Deactivated successfully. Mar 17 18:29:04.504395 systemd[1]: session-23.scope: Deactivated successfully. Mar 17 18:29:04.505120 systemd-logind[1207]: Removed session 23. Mar 17 18:29:04.505816 kernel: audit: type=1106 audit(1742236144.499:1480): pid=5262 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Mar 17 18:29:04.505908 kernel: audit: type=1104 audit(1742236144.501:1481): pid=5262 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Mar 17 18:29:04.503000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@22-10.0.0.111:22-10.0.0.1:48972 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'