Sep 6 00:19:21.179039 kernel: Linux version 5.15.190-flatcar (build@pony-truck.infra.kinvolk.io) (x86_64-cros-linux-gnu-gcc (Gentoo Hardened 11.3.1_p20221209 p3) 11.3.1 20221209, GNU ld (Gentoo 2.39 p5) 2.39.0) #1 SMP Fri Sep 5 22:53:38 -00 2025 Sep 6 00:19:21.179063 kernel: Command line: BOOT_IMAGE=/flatcar/vmlinuz-a mount.usr=/dev/mapper/usr verity.usr=PARTUUID=7130c94a-213a-4e5a-8e26-6cce9662f132 rootflags=rw mount.usrflags=ro consoleblank=0 root=LABEL=ROOT console=tty1 console=ttyS0,115200n8 earlyprintk=ttyS0,115200 flatcar.first_boot=detected flatcar.oem.id=azure flatcar.autologin verity.usrhash=a807e3b6c1f608bcead7858f1ad5b6908e6d312e2d99c0ec0e5454f978e611a7 Sep 6 00:19:21.179072 kernel: BIOS-provided physical RAM map: Sep 6 00:19:21.179080 kernel: BIOS-e820: [mem 0x0000000000000000-0x000000000009ffff] usable Sep 6 00:19:21.179087 kernel: BIOS-e820: [mem 0x00000000000c0000-0x00000000000fffff] reserved Sep 6 00:19:21.179092 kernel: BIOS-e820: [mem 0x0000000000100000-0x000000003ff40fff] usable Sep 6 00:19:21.179101 kernel: BIOS-e820: [mem 0x000000003ff41000-0x000000003ffc4fff] reserved Sep 6 00:19:21.179107 kernel: BIOS-e820: [mem 0x000000003ffc5000-0x000000003ffd1fff] usable Sep 6 00:19:21.179113 kernel: BIOS-e820: [mem 0x000000003ffd2000-0x000000003fffafff] ACPI data Sep 6 00:19:21.179121 kernel: BIOS-e820: [mem 0x000000003fffb000-0x000000003fffefff] ACPI NVS Sep 6 00:19:21.179136 kernel: BIOS-e820: [mem 0x000000003ffff000-0x000000003fffffff] usable Sep 6 00:19:21.179141 kernel: BIOS-e820: [mem 0x0000000100000000-0x00000002bfffffff] usable Sep 6 00:19:21.179149 kernel: printk: bootconsole [earlyser0] enabled Sep 6 00:19:21.179156 kernel: NX (Execute Disable) protection: active Sep 6 00:19:21.179166 kernel: efi: EFI v2.70 by Microsoft Sep 6 00:19:21.179174 kernel: efi: ACPI=0x3fffa000 ACPI 2.0=0x3fffa014 SMBIOS=0x3ff85000 SMBIOS 3.0=0x3ff83000 MEMATTR=0x3f340a98 RNG=0x3ffd2018 Sep 6 00:19:21.179182 kernel: random: crng init done Sep 6 00:19:21.179188 kernel: SMBIOS 3.1.0 present. Sep 6 00:19:21.179194 kernel: DMI: Microsoft Corporation Virtual Machine/Virtual Machine, BIOS Hyper-V UEFI Release v4.1 09/28/2024 Sep 6 00:19:21.179202 kernel: Hypervisor detected: Microsoft Hyper-V Sep 6 00:19:21.179210 kernel: Hyper-V: privilege flags low 0x2e7f, high 0x3b8030, hints 0x64e24, misc 0xbed7b2 Sep 6 00:19:21.179217 kernel: Hyper-V Host Build:26100-10.0-1-0.1293 Sep 6 00:19:21.179228 kernel: Hyper-V: Nested features: 0x1e0101 Sep 6 00:19:21.179235 kernel: Hyper-V: LAPIC Timer Frequency: 0x30d40 Sep 6 00:19:21.179240 kernel: Hyper-V: Using hypercall for remote TLB flush Sep 6 00:19:21.179250 kernel: clocksource: hyperv_clocksource_tsc_page: mask: 0xffffffffffffffff max_cycles: 0x24e6a1710, max_idle_ns: 440795202120 ns Sep 6 00:19:21.179256 kernel: tsc: Marking TSC unstable due to running on Hyper-V Sep 6 00:19:21.179263 kernel: tsc: Detected 2593.905 MHz processor Sep 6 00:19:21.179270 kernel: e820: update [mem 0x00000000-0x00000fff] usable ==> reserved Sep 6 00:19:21.179279 kernel: e820: remove [mem 0x000a0000-0x000fffff] usable Sep 6 00:19:21.179286 kernel: last_pfn = 0x2c0000 max_arch_pfn = 0x400000000 Sep 6 00:19:21.179292 kernel: x86/PAT: Configuration [0-7]: WB WC UC- UC WB WP UC- WT Sep 6 00:19:21.179303 kernel: e820: update [mem 0x40000000-0xffffffff] usable ==> reserved Sep 6 00:19:21.179310 kernel: last_pfn = 0x40000 max_arch_pfn = 0x400000000 Sep 6 00:19:21.179319 kernel: Using GB pages for direct mapping Sep 6 00:19:21.179327 kernel: Secure boot disabled Sep 6 00:19:21.179333 kernel: ACPI: Early table checksum verification disabled Sep 6 00:19:21.179341 kernel: ACPI: RSDP 0x000000003FFFA014 000024 (v02 VRTUAL) Sep 6 00:19:21.179349 kernel: ACPI: XSDT 0x000000003FFF90E8 00005C (v01 VRTUAL MICROSFT 00000001 MSFT 00000001) Sep 6 00:19:21.179356 kernel: ACPI: FACP 0x000000003FFF8000 000114 (v06 VRTUAL MICROSFT 00000001 MSFT 00000001) Sep 6 00:19:21.179371 kernel: ACPI: DSDT 0x000000003FFD6000 01E11C (v02 MSFTVM DSDT01 00000001 INTL 20230628) Sep 6 00:19:21.179378 kernel: ACPI: FACS 0x000000003FFFE000 000040 Sep 6 00:19:21.179385 kernel: ACPI: OEM0 0x000000003FFF7000 000064 (v01 VRTUAL MICROSFT 00000001 MSFT 00000001) Sep 6 00:19:21.179391 kernel: ACPI: SPCR 0x000000003FFF6000 000050 (v02 VRTUAL MICROSFT 00000001 MSFT 00000001) Sep 6 00:19:21.179398 kernel: ACPI: WAET 0x000000003FFF5000 000028 (v01 VRTUAL MICROSFT 00000001 MSFT 00000001) Sep 6 00:19:21.179406 kernel: ACPI: APIC 0x000000003FFD5000 000058 (v04 VRTUAL MICROSFT 00000001 MSFT 00000001) Sep 6 00:19:21.179417 kernel: ACPI: SRAT 0x000000003FFD4000 0002D0 (v02 VRTUAL MICROSFT 00000001 MSFT 00000001) Sep 6 00:19:21.179425 kernel: ACPI: BGRT 0x000000003FFD3000 000038 (v01 VRTUAL MICROSFT 00000001 MSFT 00000001) Sep 6 00:19:21.179434 kernel: ACPI: Reserving FACP table memory at [mem 0x3fff8000-0x3fff8113] Sep 6 00:19:21.179441 kernel: ACPI: Reserving DSDT table memory at [mem 0x3ffd6000-0x3fff411b] Sep 6 00:19:21.179448 kernel: ACPI: Reserving FACS table memory at [mem 0x3fffe000-0x3fffe03f] Sep 6 00:19:21.179456 kernel: ACPI: Reserving OEM0 table memory at [mem 0x3fff7000-0x3fff7063] Sep 6 00:19:21.179465 kernel: ACPI: Reserving SPCR table memory at [mem 0x3fff6000-0x3fff604f] Sep 6 00:19:21.179472 kernel: ACPI: Reserving WAET table memory at [mem 0x3fff5000-0x3fff5027] Sep 6 00:19:21.179482 kernel: ACPI: Reserving APIC table memory at [mem 0x3ffd5000-0x3ffd5057] Sep 6 00:19:21.179491 kernel: ACPI: Reserving SRAT table memory at [mem 0x3ffd4000-0x3ffd42cf] Sep 6 00:19:21.179497 kernel: ACPI: Reserving BGRT table memory at [mem 0x3ffd3000-0x3ffd3037] Sep 6 00:19:21.179507 kernel: SRAT: PXM 0 -> APIC 0x00 -> Node 0 Sep 6 00:19:21.179514 kernel: SRAT: PXM 0 -> APIC 0x01 -> Node 0 Sep 6 00:19:21.179521 kernel: ACPI: SRAT: Node 0 PXM 0 [mem 0x00000000-0x3fffffff] hotplug Sep 6 00:19:21.179531 kernel: ACPI: SRAT: Node 0 PXM 0 [mem 0x100000000-0x2bfffffff] hotplug Sep 6 00:19:21.179537 kernel: ACPI: SRAT: Node 0 PXM 0 [mem 0x2c0000000-0xfdfffffff] hotplug Sep 6 00:19:21.179544 kernel: ACPI: SRAT: Node 0 PXM 0 [mem 0x1000000000-0xffffffffff] hotplug Sep 6 00:19:21.179553 kernel: ACPI: SRAT: Node 0 PXM 0 [mem 0x10000000000-0x1ffffffffff] hotplug Sep 6 00:19:21.179564 kernel: ACPI: SRAT: Node 0 PXM 0 [mem 0x20000000000-0x3ffffffffff] hotplug Sep 6 00:19:21.179575 kernel: ACPI: SRAT: Node 0 PXM 0 [mem 0x40000000000-0x7ffffffffff] hotplug Sep 6 00:19:21.179582 kernel: ACPI: SRAT: Node 0 PXM 0 [mem 0x80000000000-0xfffffffffff] hotplug Sep 6 00:19:21.179589 kernel: ACPI: SRAT: Node 0 PXM 0 [mem 0x100000000000-0x1fffffffffff] hotplug Sep 6 00:19:21.179598 kernel: ACPI: SRAT: Node 0 PXM 0 [mem 0x200000000000-0x3fffffffffff] hotplug Sep 6 00:19:21.179606 kernel: ACPI: SRAT: Node 0 PXM 0 [mem 0x400000000000-0x7fffffffffff] hotplug Sep 6 00:19:21.179615 kernel: ACPI: SRAT: Node 0 PXM 0 [mem 0x800000000000-0xffffffffffff] hotplug Sep 6 00:19:21.179623 kernel: ACPI: SRAT: Node 0 PXM 0 [mem 0x1000000000000-0x1ffffffffffff] hotplug Sep 6 00:19:21.179632 kernel: ACPI: SRAT: Node 0 PXM 0 [mem 0x2000000000000-0x3ffffffffffff] hotplug Sep 6 00:19:21.179639 kernel: ACPI: SRAT: Node 0 PXM 0 [mem 0x4000000000000-0x7ffffffffffff] hotplug Sep 6 00:19:21.179647 kernel: ACPI: SRAT: Node 0 PXM 0 [mem 0x8000000000000-0xfffffffffffff] hotplug Sep 6 00:19:21.179656 kernel: NUMA: Node 0 [mem 0x00000000-0x3fffffff] + [mem 0x100000000-0x2bfffffff] -> [mem 0x00000000-0x2bfffffff] Sep 6 00:19:21.179663 kernel: NODE_DATA(0) allocated [mem 0x2bfffa000-0x2bfffffff] Sep 6 00:19:21.179673 kernel: Zone ranges: Sep 6 00:19:21.179679 kernel: DMA [mem 0x0000000000001000-0x0000000000ffffff] Sep 6 00:19:21.179686 kernel: DMA32 [mem 0x0000000001000000-0x00000000ffffffff] Sep 6 00:19:21.179696 kernel: Normal [mem 0x0000000100000000-0x00000002bfffffff] Sep 6 00:19:21.179706 kernel: Movable zone start for each node Sep 6 00:19:21.179716 kernel: Early memory node ranges Sep 6 00:19:21.179723 kernel: node 0: [mem 0x0000000000001000-0x000000000009ffff] Sep 6 00:19:21.179730 kernel: node 0: [mem 0x0000000000100000-0x000000003ff40fff] Sep 6 00:19:21.179738 kernel: node 0: [mem 0x000000003ffc5000-0x000000003ffd1fff] Sep 6 00:19:21.179747 kernel: node 0: [mem 0x000000003ffff000-0x000000003fffffff] Sep 6 00:19:21.179754 kernel: node 0: [mem 0x0000000100000000-0x00000002bfffffff] Sep 6 00:19:21.179765 kernel: Initmem setup node 0 [mem 0x0000000000001000-0x00000002bfffffff] Sep 6 00:19:21.179772 kernel: On node 0, zone DMA: 1 pages in unavailable ranges Sep 6 00:19:21.179781 kernel: On node 0, zone DMA: 96 pages in unavailable ranges Sep 6 00:19:21.179788 kernel: On node 0, zone DMA32: 132 pages in unavailable ranges Sep 6 00:19:21.179798 kernel: On node 0, zone DMA32: 45 pages in unavailable ranges Sep 6 00:19:21.179805 kernel: ACPI: PM-Timer IO Port: 0x408 Sep 6 00:19:21.179813 kernel: ACPI: LAPIC_NMI (acpi_id[0x01] dfl dfl lint[0x1]) Sep 6 00:19:21.179822 kernel: IOAPIC[0]: apic_id 2, version 17, address 0xfec00000, GSI 0-23 Sep 6 00:19:21.179829 kernel: ACPI: INT_SRC_OVR (bus 0 bus_irq 9 global_irq 9 high level) Sep 6 00:19:21.179836 kernel: ACPI: Using ACPI (MADT) for SMP configuration information Sep 6 00:19:21.179846 kernel: ACPI: SPCR: console: uart,io,0x3f8,115200 Sep 6 00:19:21.179855 kernel: smpboot: Allowing 2 CPUs, 0 hotplug CPUs Sep 6 00:19:21.179865 kernel: [mem 0x40000000-0xffffffff] available for PCI devices Sep 6 00:19:21.179873 kernel: Booting paravirtualized kernel on Hyper-V Sep 6 00:19:21.179880 kernel: clocksource: refined-jiffies: mask: 0xffffffff max_cycles: 0xffffffff, max_idle_ns: 1910969940391419 ns Sep 6 00:19:21.179889 kernel: setup_percpu: NR_CPUS:512 nr_cpumask_bits:512 nr_cpu_ids:2 nr_node_ids:1 Sep 6 00:19:21.179897 kernel: percpu: Embedded 56 pages/cpu s188696 r8192 d32488 u1048576 Sep 6 00:19:21.179904 kernel: pcpu-alloc: s188696 r8192 d32488 u1048576 alloc=1*2097152 Sep 6 00:19:21.179914 kernel: pcpu-alloc: [0] 0 1 Sep 6 00:19:21.179920 kernel: Hyper-V: PV spinlocks enabled Sep 6 00:19:21.179929 kernel: PV qspinlock hash table entries: 256 (order: 0, 4096 bytes, linear) Sep 6 00:19:21.179936 kernel: Built 1 zonelists, mobility grouping on. Total pages: 2062375 Sep 6 00:19:21.179946 kernel: Policy zone: Normal Sep 6 00:19:21.179954 kernel: Kernel command line: rootflags=rw mount.usrflags=ro BOOT_IMAGE=/flatcar/vmlinuz-a mount.usr=/dev/mapper/usr verity.usr=PARTUUID=7130c94a-213a-4e5a-8e26-6cce9662f132 rootflags=rw mount.usrflags=ro consoleblank=0 root=LABEL=ROOT console=tty1 console=ttyS0,115200n8 earlyprintk=ttyS0,115200 flatcar.first_boot=detected flatcar.oem.id=azure flatcar.autologin verity.usrhash=a807e3b6c1f608bcead7858f1ad5b6908e6d312e2d99c0ec0e5454f978e611a7 Sep 6 00:19:21.179962 kernel: Unknown kernel command line parameters "BOOT_IMAGE=/flatcar/vmlinuz-a", will be passed to user space. Sep 6 00:19:21.179972 kernel: Dentry cache hash table entries: 1048576 (order: 11, 8388608 bytes, linear) Sep 6 00:19:21.179980 kernel: Inode-cache hash table entries: 524288 (order: 10, 4194304 bytes, linear) Sep 6 00:19:21.179986 kernel: mem auto-init: stack:off, heap alloc:off, heap free:off Sep 6 00:19:21.179997 kernel: Memory: 8069176K/8387512K available (12295K kernel code, 2276K rwdata, 13732K rodata, 47492K init, 4088K bss, 318076K reserved, 0K cma-reserved) Sep 6 00:19:21.180007 kernel: SLUB: HWalign=64, Order=0-3, MinObjects=0, CPUs=2, Nodes=1 Sep 6 00:19:21.180024 kernel: ftrace: allocating 34612 entries in 136 pages Sep 6 00:19:21.180034 kernel: ftrace: allocated 136 pages with 2 groups Sep 6 00:19:21.180041 kernel: rcu: Hierarchical RCU implementation. Sep 6 00:19:21.180053 kernel: rcu: RCU event tracing is enabled. Sep 6 00:19:21.180062 kernel: rcu: RCU restricting CPUs from NR_CPUS=512 to nr_cpu_ids=2. Sep 6 00:19:21.180072 kernel: Rude variant of Tasks RCU enabled. Sep 6 00:19:21.180080 kernel: Tracing variant of Tasks RCU enabled. Sep 6 00:19:21.180087 kernel: rcu: RCU calculated value of scheduler-enlistment delay is 100 jiffies. Sep 6 00:19:21.180098 kernel: rcu: Adjusting geometry for rcu_fanout_leaf=16, nr_cpu_ids=2 Sep 6 00:19:21.180106 kernel: Using NULL legacy PIC Sep 6 00:19:21.180119 kernel: NR_IRQS: 33024, nr_irqs: 440, preallocated irqs: 0 Sep 6 00:19:21.180132 kernel: Console: colour dummy device 80x25 Sep 6 00:19:21.180140 kernel: printk: console [tty1] enabled Sep 6 00:19:21.180150 kernel: printk: console [ttyS0] enabled Sep 6 00:19:21.180158 kernel: printk: bootconsole [earlyser0] disabled Sep 6 00:19:21.180170 kernel: ACPI: Core revision 20210730 Sep 6 00:19:21.180177 kernel: Failed to register legacy timer interrupt Sep 6 00:19:21.180185 kernel: APIC: Switch to symmetric I/O mode setup Sep 6 00:19:21.180195 kernel: Hyper-V: Using IPI hypercalls Sep 6 00:19:21.180202 kernel: Calibrating delay loop (skipped), value calculated using timer frequency.. 5187.81 BogoMIPS (lpj=2593905) Sep 6 00:19:21.180210 kernel: Last level iTLB entries: 4KB 64, 2MB 8, 4MB 8 Sep 6 00:19:21.180220 kernel: Last level dTLB entries: 4KB 64, 2MB 32, 4MB 32, 1GB 4 Sep 6 00:19:21.180227 kernel: Spectre V1 : Mitigation: usercopy/swapgs barriers and __user pointer sanitization Sep 6 00:19:21.180234 kernel: Spectre V2 : Mitigation: Retpolines Sep 6 00:19:21.180246 kernel: Spectre V2 : Spectre v2 / SpectreRSB: Filling RSB on context switch and VMEXIT Sep 6 00:19:21.180253 kernel: RETBleed: WARNING: Spectre v2 mitigation leaves CPU vulnerable to RETBleed attacks, data leaks possible! Sep 6 00:19:21.180264 kernel: RETBleed: Vulnerable Sep 6 00:19:21.180271 kernel: Speculative Store Bypass: Vulnerable Sep 6 00:19:21.180278 kernel: TAA: Vulnerable: Clear CPU buffers attempted, no microcode Sep 6 00:19:21.180288 kernel: MMIO Stale Data: Vulnerable: Clear CPU buffers attempted, no microcode Sep 6 00:19:21.180295 kernel: active return thunk: its_return_thunk Sep 6 00:19:21.180306 kernel: ITS: Mitigation: Aligned branch/return thunks Sep 6 00:19:21.180314 kernel: x86/fpu: Supporting XSAVE feature 0x001: 'x87 floating point registers' Sep 6 00:19:21.180321 kernel: x86/fpu: Supporting XSAVE feature 0x002: 'SSE registers' Sep 6 00:19:21.180331 kernel: x86/fpu: Supporting XSAVE feature 0x004: 'AVX registers' Sep 6 00:19:21.180342 kernel: x86/fpu: Supporting XSAVE feature 0x020: 'AVX-512 opmask' Sep 6 00:19:21.180352 kernel: x86/fpu: Supporting XSAVE feature 0x040: 'AVX-512 Hi256' Sep 6 00:19:21.180360 kernel: x86/fpu: Supporting XSAVE feature 0x080: 'AVX-512 ZMM_Hi256' Sep 6 00:19:21.180368 kernel: x86/fpu: xstate_offset[2]: 576, xstate_sizes[2]: 256 Sep 6 00:19:21.180375 kernel: x86/fpu: xstate_offset[5]: 832, xstate_sizes[5]: 64 Sep 6 00:19:21.180385 kernel: x86/fpu: xstate_offset[6]: 896, xstate_sizes[6]: 512 Sep 6 00:19:21.180392 kernel: x86/fpu: xstate_offset[7]: 1408, xstate_sizes[7]: 1024 Sep 6 00:19:21.180403 kernel: x86/fpu: Enabled xstate features 0xe7, context size is 2432 bytes, using 'compacted' format. Sep 6 00:19:21.180411 kernel: Freeing SMP alternatives memory: 32K Sep 6 00:19:21.180418 kernel: pid_max: default: 32768 minimum: 301 Sep 6 00:19:21.180428 kernel: LSM: Security Framework initializing Sep 6 00:19:21.180438 kernel: SELinux: Initializing. Sep 6 00:19:21.180449 kernel: Mount-cache hash table entries: 16384 (order: 5, 131072 bytes, linear) Sep 6 00:19:21.180456 kernel: Mountpoint-cache hash table entries: 16384 (order: 5, 131072 bytes, linear) Sep 6 00:19:21.180463 kernel: smpboot: CPU0: Intel(R) Xeon(R) Platinum 8272CL CPU @ 2.60GHz (family: 0x6, model: 0x55, stepping: 0x7) Sep 6 00:19:21.180473 kernel: Performance Events: unsupported p6 CPU model 85 no PMU driver, software events only. Sep 6 00:19:21.180481 kernel: signal: max sigframe size: 3632 Sep 6 00:19:21.180488 kernel: rcu: Hierarchical SRCU implementation. Sep 6 00:19:21.180500 kernel: NMI watchdog: Perf NMI watchdog permanently disabled Sep 6 00:19:21.180507 kernel: smp: Bringing up secondary CPUs ... Sep 6 00:19:21.180514 kernel: x86: Booting SMP configuration: Sep 6 00:19:21.180526 kernel: .... node #0, CPUs: #1 Sep 6 00:19:21.180535 kernel: Transient Scheduler Attacks: TAA CPU bug present and SMT on, data leak possible. See https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/tsx_async_abort.html for more details. Sep 6 00:19:21.180544 kernel: Transient Scheduler Attacks: MMIO Stale Data CPU bug present and SMT on, data leak possible. See https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/processor_mmio_stale_data.html for more details. Sep 6 00:19:21.180553 kernel: smp: Brought up 1 node, 2 CPUs Sep 6 00:19:21.180560 kernel: smpboot: Max logical packages: 1 Sep 6 00:19:21.180568 kernel: smpboot: Total of 2 processors activated (10375.62 BogoMIPS) Sep 6 00:19:21.180575 kernel: devtmpfs: initialized Sep 6 00:19:21.180582 kernel: x86/mm: Memory block size: 128MB Sep 6 00:19:21.180595 kernel: ACPI: PM: Registering ACPI NVS region [mem 0x3fffb000-0x3fffefff] (16384 bytes) Sep 6 00:19:21.180604 kernel: clocksource: jiffies: mask: 0xffffffff max_cycles: 0xffffffff, max_idle_ns: 1911260446275000 ns Sep 6 00:19:21.180613 kernel: futex hash table entries: 512 (order: 3, 32768 bytes, linear) Sep 6 00:19:21.180620 kernel: pinctrl core: initialized pinctrl subsystem Sep 6 00:19:21.180628 kernel: NET: Registered PF_NETLINK/PF_ROUTE protocol family Sep 6 00:19:21.180638 kernel: audit: initializing netlink subsys (disabled) Sep 6 00:19:21.180646 kernel: audit: type=2000 audit(1757117959.025:1): state=initialized audit_enabled=0 res=1 Sep 6 00:19:21.180655 kernel: thermal_sys: Registered thermal governor 'step_wise' Sep 6 00:19:21.180663 kernel: thermal_sys: Registered thermal governor 'user_space' Sep 6 00:19:21.180673 kernel: cpuidle: using governor menu Sep 6 00:19:21.180682 kernel: ACPI: bus type PCI registered Sep 6 00:19:21.180691 kernel: acpiphp: ACPI Hot Plug PCI Controller Driver version: 0.5 Sep 6 00:19:21.180700 kernel: dca service started, version 1.12.1 Sep 6 00:19:21.180707 kernel: kprobes: kprobe jump-optimization is enabled. All kprobes are optimized if possible. Sep 6 00:19:21.180715 kernel: HugeTLB registered 1.00 GiB page size, pre-allocated 0 pages Sep 6 00:19:21.180725 kernel: HugeTLB registered 2.00 MiB page size, pre-allocated 0 pages Sep 6 00:19:21.180732 kernel: ACPI: Added _OSI(Module Device) Sep 6 00:19:21.180742 kernel: ACPI: Added _OSI(Processor Device) Sep 6 00:19:21.180752 kernel: ACPI: Added _OSI(Processor Aggregator Device) Sep 6 00:19:21.180760 kernel: ACPI: Added _OSI(Linux-Dell-Video) Sep 6 00:19:21.180770 kernel: ACPI: Added _OSI(Linux-Lenovo-NV-HDMI-Audio) Sep 6 00:19:21.180778 kernel: ACPI: Added _OSI(Linux-HPI-Hybrid-Graphics) Sep 6 00:19:21.180787 kernel: ACPI: 1 ACPI AML tables successfully acquired and loaded Sep 6 00:19:21.180795 kernel: ACPI: Interpreter enabled Sep 6 00:19:21.180802 kernel: ACPI: PM: (supports S0 S5) Sep 6 00:19:21.180812 kernel: ACPI: Using IOAPIC for interrupt routing Sep 6 00:19:21.180820 kernel: PCI: Using host bridge windows from ACPI; if necessary, use "pci=nocrs" and report a bug Sep 6 00:19:21.180832 kernel: ACPI: Enabled 1 GPEs in block 00 to 0F Sep 6 00:19:21.180841 kernel: iommu: Default domain type: Translated Sep 6 00:19:21.180848 kernel: iommu: DMA domain TLB invalidation policy: lazy mode Sep 6 00:19:21.180859 kernel: vgaarb: loaded Sep 6 00:19:21.180867 kernel: pps_core: LinuxPPS API ver. 1 registered Sep 6 00:19:21.180878 kernel: pps_core: Software ver. 5.3.6 - Copyright 2005-2007 Rodolfo Giometti Sep 6 00:19:21.180885 kernel: PTP clock support registered Sep 6 00:19:21.180892 kernel: Registered efivars operations Sep 6 00:19:21.180903 kernel: PCI: Using ACPI for IRQ routing Sep 6 00:19:21.180911 kernel: PCI: System does not support PCI Sep 6 00:19:21.180923 kernel: clocksource: Switched to clocksource hyperv_clocksource_tsc_page Sep 6 00:19:21.180931 kernel: VFS: Disk quotas dquot_6.6.0 Sep 6 00:19:21.180941 kernel: VFS: Dquot-cache hash table entries: 512 (order 0, 4096 bytes) Sep 6 00:19:21.180951 kernel: pnp: PnP ACPI init Sep 6 00:19:21.180960 kernel: pnp: PnP ACPI: found 3 devices Sep 6 00:19:21.180967 kernel: clocksource: acpi_pm: mask: 0xffffff max_cycles: 0xffffff, max_idle_ns: 2085701024 ns Sep 6 00:19:21.180974 kernel: NET: Registered PF_INET protocol family Sep 6 00:19:21.180981 kernel: IP idents hash table entries: 131072 (order: 8, 1048576 bytes, linear) Sep 6 00:19:21.180988 kernel: tcp_listen_portaddr_hash hash table entries: 4096 (order: 4, 65536 bytes, linear) Sep 6 00:19:21.180998 kernel: Table-perturb hash table entries: 65536 (order: 6, 262144 bytes, linear) Sep 6 00:19:21.181005 kernel: TCP established hash table entries: 65536 (order: 7, 524288 bytes, linear) Sep 6 00:19:21.181012 kernel: TCP bind hash table entries: 65536 (order: 8, 1048576 bytes, linear) Sep 6 00:19:21.181020 kernel: TCP: Hash tables configured (established 65536 bind 65536) Sep 6 00:19:21.181028 kernel: UDP hash table entries: 4096 (order: 5, 131072 bytes, linear) Sep 6 00:19:21.181041 kernel: UDP-Lite hash table entries: 4096 (order: 5, 131072 bytes, linear) Sep 6 00:19:21.181055 kernel: NET: Registered PF_UNIX/PF_LOCAL protocol family Sep 6 00:19:21.181067 kernel: NET: Registered PF_XDP protocol family Sep 6 00:19:21.181077 kernel: PCI: CLS 0 bytes, default 64 Sep 6 00:19:21.181084 kernel: PCI-DMA: Using software bounce buffering for IO (SWIOTLB) Sep 6 00:19:21.181096 kernel: software IO TLB: mapped [mem 0x000000003aa89000-0x000000003ea89000] (64MB) Sep 6 00:19:21.181111 kernel: RAPL PMU: API unit is 2^-32 Joules, 0 fixed counters, 10737418240 ms ovfl timer Sep 6 00:19:21.181132 kernel: Initialise system trusted keyrings Sep 6 00:19:21.181144 kernel: workingset: timestamp_bits=39 max_order=21 bucket_order=0 Sep 6 00:19:21.181152 kernel: Key type asymmetric registered Sep 6 00:19:21.181159 kernel: Asymmetric key parser 'x509' registered Sep 6 00:19:21.181169 kernel: Block layer SCSI generic (bsg) driver version 0.4 loaded (major 249) Sep 6 00:19:21.181189 kernel: io scheduler mq-deadline registered Sep 6 00:19:21.181203 kernel: io scheduler kyber registered Sep 6 00:19:21.181218 kernel: io scheduler bfq registered Sep 6 00:19:21.181233 kernel: ioatdma: Intel(R) QuickData Technology Driver 5.00 Sep 6 00:19:21.181248 kernel: Serial: 8250/16550 driver, 4 ports, IRQ sharing enabled Sep 6 00:19:21.181260 kernel: 00:00: ttyS0 at I/O 0x3f8 (irq = 4, base_baud = 115200) is a 16550A Sep 6 00:19:21.181269 kernel: 00:01: ttyS1 at I/O 0x2f8 (irq = 3, base_baud = 115200) is a 16550A Sep 6 00:19:21.181276 kernel: i8042: PNP: No PS/2 controller found. Sep 6 00:19:21.181454 kernel: rtc_cmos 00:02: registered as rtc0 Sep 6 00:19:21.181583 kernel: rtc_cmos 00:02: setting system clock to 2025-09-06T00:19:20 UTC (1757117960) Sep 6 00:19:21.181686 kernel: rtc_cmos 00:02: alarms up to one month, 114 bytes nvram Sep 6 00:19:21.181700 kernel: intel_pstate: CPU model not supported Sep 6 00:19:21.181717 kernel: efifb: probing for efifb Sep 6 00:19:21.181733 kernel: efifb: framebuffer at 0x40000000, using 3072k, total 3072k Sep 6 00:19:21.181747 kernel: efifb: mode is 1024x768x32, linelength=4096, pages=1 Sep 6 00:19:21.181761 kernel: efifb: scrolling: redraw Sep 6 00:19:21.181775 kernel: efifb: Truecolor: size=8:8:8:8, shift=24:16:8:0 Sep 6 00:19:21.181791 kernel: Console: switching to colour frame buffer device 128x48 Sep 6 00:19:21.181799 kernel: fb0: EFI VGA frame buffer device Sep 6 00:19:21.181806 kernel: pstore: Registered efi as persistent store backend Sep 6 00:19:21.181818 kernel: NET: Registered PF_INET6 protocol family Sep 6 00:19:21.181831 kernel: Segment Routing with IPv6 Sep 6 00:19:21.181845 kernel: In-situ OAM (IOAM) with IPv6 Sep 6 00:19:21.181860 kernel: NET: Registered PF_PACKET protocol family Sep 6 00:19:21.181874 kernel: Key type dns_resolver registered Sep 6 00:19:21.181888 kernel: IPI shorthand broadcast: enabled Sep 6 00:19:21.181902 kernel: sched_clock: Marking stable (1083059600, 44256400)->(1386919800, -259603800) Sep 6 00:19:21.181911 kernel: registered taskstats version 1 Sep 6 00:19:21.181918 kernel: Loading compiled-in X.509 certificates Sep 6 00:19:21.181931 kernel: Loaded X.509 cert 'Kinvolk GmbH: Module signing key for 5.15.190-flatcar: 59a3efd48c75422889eb056cb9758fbe471623cb' Sep 6 00:19:21.181946 kernel: Key type .fscrypt registered Sep 6 00:19:21.181957 kernel: Key type fscrypt-provisioning registered Sep 6 00:19:21.181965 kernel: pstore: Using crash dump compression: deflate Sep 6 00:19:21.181972 kernel: ima: No TPM chip found, activating TPM-bypass! Sep 6 00:19:21.181983 kernel: ima: Allocated hash algorithm: sha1 Sep 6 00:19:21.182003 kernel: ima: No architecture policies found Sep 6 00:19:21.182022 kernel: clk: Disabling unused clocks Sep 6 00:19:21.182032 kernel: Freeing unused kernel image (initmem) memory: 47492K Sep 6 00:19:21.182040 kernel: Write protecting the kernel read-only data: 28672k Sep 6 00:19:21.182047 kernel: Freeing unused kernel image (text/rodata gap) memory: 2040K Sep 6 00:19:21.182064 kernel: Freeing unused kernel image (rodata/data gap) memory: 604K Sep 6 00:19:21.182080 kernel: Run /init as init process Sep 6 00:19:21.182096 kernel: with arguments: Sep 6 00:19:21.182107 kernel: /init Sep 6 00:19:21.182117 kernel: with environment: Sep 6 00:19:21.182124 kernel: HOME=/ Sep 6 00:19:21.182145 kernel: TERM=linux Sep 6 00:19:21.182160 kernel: BOOT_IMAGE=/flatcar/vmlinuz-a Sep 6 00:19:21.182176 systemd[1]: systemd 252 running in system mode (+PAM +AUDIT +SELINUX -APPARMOR +IMA +SMACK +SECCOMP +GCRYPT -GNUTLS +OPENSSL -ACL +BLKID +CURL -ELFUTILS -FIDO2 +IDN2 -IDN +IPTC +KMOD +LIBCRYPTSETUP +LIBFDISK +PCRE2 -PWQUALITY -P11KIT -QRENCODE -TPM2 +BZIP2 +LZ4 +XZ +ZLIB +ZSTD -BPF_FRAMEWORK -XKBCOMMON +UTMP +SYSVINIT default-hierarchy=unified) Sep 6 00:19:21.182186 systemd[1]: Detected virtualization microsoft. Sep 6 00:19:21.182195 systemd[1]: Detected architecture x86-64. Sep 6 00:19:21.182214 systemd[1]: Running in initrd. Sep 6 00:19:21.182225 systemd[1]: No hostname configured, using default hostname. Sep 6 00:19:21.182233 systemd[1]: Hostname set to . Sep 6 00:19:21.182241 systemd[1]: Initializing machine ID from random generator. Sep 6 00:19:21.182255 systemd[1]: Queued start job for default target initrd.target. Sep 6 00:19:21.182268 systemd[1]: Started systemd-ask-password-console.path. Sep 6 00:19:21.182276 systemd[1]: Reached target cryptsetup.target. Sep 6 00:19:21.182284 systemd[1]: Reached target paths.target. Sep 6 00:19:21.182296 systemd[1]: Reached target slices.target. Sep 6 00:19:21.182314 systemd[1]: Reached target swap.target. Sep 6 00:19:21.182324 systemd[1]: Reached target timers.target. Sep 6 00:19:21.182333 systemd[1]: Listening on iscsid.socket. Sep 6 00:19:21.182341 systemd[1]: Listening on iscsiuio.socket. Sep 6 00:19:21.182348 systemd[1]: Listening on systemd-journald-audit.socket. Sep 6 00:19:21.182356 systemd[1]: Listening on systemd-journald-dev-log.socket. Sep 6 00:19:21.182365 systemd[1]: Listening on systemd-journald.socket. Sep 6 00:19:21.182386 systemd[1]: Listening on systemd-networkd.socket. Sep 6 00:19:21.182398 systemd[1]: Listening on systemd-udevd-control.socket. Sep 6 00:19:21.182406 systemd[1]: Listening on systemd-udevd-kernel.socket. Sep 6 00:19:21.182414 systemd[1]: Reached target sockets.target. Sep 6 00:19:21.182422 systemd[1]: Starting kmod-static-nodes.service... Sep 6 00:19:21.182439 systemd[1]: Finished network-cleanup.service. Sep 6 00:19:21.182449 systemd[1]: Starting systemd-fsck-usr.service... Sep 6 00:19:21.182457 systemd[1]: Starting systemd-journald.service... Sep 6 00:19:21.182465 systemd[1]: Starting systemd-modules-load.service... Sep 6 00:19:21.182485 systemd[1]: Starting systemd-resolved.service... Sep 6 00:19:21.182502 systemd-journald[183]: Journal started Sep 6 00:19:21.182561 systemd-journald[183]: Runtime Journal (/run/log/journal/37141bab74de49df94b964bf8f87cdab) is 8.0M, max 159.0M, 151.0M free. Sep 6 00:19:21.199346 systemd[1]: Starting systemd-vconsole-setup.service... Sep 6 00:19:21.201178 systemd-modules-load[184]: Inserted module 'overlay' Sep 6 00:19:21.221245 systemd[1]: Started systemd-journald.service. Sep 6 00:19:21.221000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-journald comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 00:19:21.243151 kernel: audit: type=1130 audit(1757117961.221:2): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-journald comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 00:19:21.243408 systemd[1]: Finished kmod-static-nodes.service. Sep 6 00:19:21.249752 systemd[1]: Finished systemd-fsck-usr.service. Sep 6 00:19:21.252604 systemd[1]: Finished systemd-vconsole-setup.service. Sep 6 00:19:21.265677 systemd[1]: Starting dracut-cmdline-ask.service... Sep 6 00:19:21.270005 systemd[1]: Starting systemd-tmpfiles-setup-dev.service... Sep 6 00:19:21.249000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=kmod-static-nodes comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 00:19:21.311290 kernel: bridge: filtering via arp/ip/ip6tables is no longer available by default. Update your scripts to load br_netfilter if you need this. Sep 6 00:19:21.311352 kernel: audit: type=1130 audit(1757117961.249:3): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=kmod-static-nodes comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 00:19:21.311370 kernel: audit: type=1130 audit(1757117961.252:4): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-fsck-usr comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 00:19:21.252000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-fsck-usr comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 00:19:21.326159 kernel: audit: type=1130 audit(1757117961.256:5): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-vconsole-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 00:19:21.256000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-vconsole-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 00:19:21.341116 systemd[1]: Finished systemd-tmpfiles-setup-dev.service. Sep 6 00:19:21.353595 kernel: Bridge firewalling registered Sep 6 00:19:21.353669 kernel: audit: type=1130 audit(1757117961.342:6): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-tmpfiles-setup-dev comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 00:19:21.342000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-tmpfiles-setup-dev comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 00:19:21.367582 systemd-modules-load[184]: Inserted module 'br_netfilter' Sep 6 00:19:21.380683 systemd[1]: Finished dracut-cmdline-ask.service. Sep 6 00:19:21.386707 systemd[1]: Starting dracut-cmdline.service... Sep 6 00:19:21.385000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-cmdline-ask comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 00:19:21.413162 kernel: audit: type=1130 audit(1757117961.385:7): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-cmdline-ask comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 00:19:21.414664 systemd-resolved[185]: Positive Trust Anchors: Sep 6 00:19:21.422641 kernel: SCSI subsystem initialized Sep 6 00:19:21.415474 systemd-resolved[185]: . IN DS 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d Sep 6 00:19:21.415509 systemd-resolved[185]: Negative trust anchors: home.arpa 10.in-addr.arpa 16.172.in-addr.arpa 17.172.in-addr.arpa 18.172.in-addr.arpa 19.172.in-addr.arpa 20.172.in-addr.arpa 21.172.in-addr.arpa 22.172.in-addr.arpa 23.172.in-addr.arpa 24.172.in-addr.arpa 25.172.in-addr.arpa 26.172.in-addr.arpa 27.172.in-addr.arpa 28.172.in-addr.arpa 29.172.in-addr.arpa 30.172.in-addr.arpa 31.172.in-addr.arpa 168.192.in-addr.arpa d.f.ip6.arpa corp home internal intranet lan local private test Sep 6 00:19:21.418655 systemd-resolved[185]: Defaulting to hostname 'linux'. Sep 6 00:19:21.458000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-resolved comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 00:19:21.455491 systemd[1]: Started systemd-resolved.service. Sep 6 00:19:21.480467 kernel: audit: type=1130 audit(1757117961.458:8): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-resolved comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 00:19:21.480510 kernel: device-mapper: core: CONFIG_IMA_DISABLE_HTABLE is disabled. Duplicate IMA measurements will not be recorded in the IMA log. Sep 6 00:19:21.459166 systemd[1]: Reached target nss-lookup.target. Sep 6 00:19:21.496403 kernel: device-mapper: uevent: version 1.0.3 Sep 6 00:19:21.496436 dracut-cmdline[201]: dracut-dracut-053 Sep 6 00:19:21.496436 dracut-cmdline[201]: Using kernel command line parameters: rd.driver.pre=btrfs rootflags=rw mount.usrflags=ro BOOT_IMAGE=/flatcar/vmlinuz-a mount.usr=/dev/mapper/usr verity.usr=PARTUUID=7130c94a-213a-4e5a-8e26-6cce9662f132 rootflags=rw mount.usrflags=ro consoleblank=0 root=LABEL=ROOT console=tty1 console=ttyS0,115200n8 earlyprintk=ttyS0,115200 flatcar.first_boot=detected flatcar.oem.id=azure flatcar.autologin verity.usrhash=a807e3b6c1f608bcead7858f1ad5b6908e6d312e2d99c0ec0e5454f978e611a7 Sep 6 00:19:21.529166 kernel: device-mapper: ioctl: 4.45.0-ioctl (2021-03-22) initialised: dm-devel@redhat.com Sep 6 00:19:21.533384 systemd-modules-load[184]: Inserted module 'dm_multipath' Sep 6 00:19:21.536198 systemd[1]: Finished systemd-modules-load.service. Sep 6 00:19:21.547000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-modules-load comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 00:19:21.570881 kernel: audit: type=1130 audit(1757117961.547:9): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-modules-load comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 00:19:21.571102 systemd[1]: Starting systemd-sysctl.service... Sep 6 00:19:21.587545 systemd[1]: Finished systemd-sysctl.service. Sep 6 00:19:21.608569 kernel: audit: type=1130 audit(1757117961.591:10): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-sysctl comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 00:19:21.591000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-sysctl comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 00:19:21.629152 kernel: Loading iSCSI transport class v2.0-870. Sep 6 00:19:21.649158 kernel: iscsi: registered transport (tcp) Sep 6 00:19:21.678506 kernel: iscsi: registered transport (qla4xxx) Sep 6 00:19:21.678598 kernel: QLogic iSCSI HBA Driver Sep 6 00:19:21.709644 systemd[1]: Finished dracut-cmdline.service. Sep 6 00:19:21.715000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-cmdline comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 00:19:21.717102 systemd[1]: Starting dracut-pre-udev.service... Sep 6 00:19:21.770157 kernel: raid6: avx512x4 gen() 17809 MB/s Sep 6 00:19:21.791144 kernel: raid6: avx512x4 xor() 6540 MB/s Sep 6 00:19:21.811145 kernel: raid6: avx512x2 gen() 17594 MB/s Sep 6 00:19:21.832153 kernel: raid6: avx512x2 xor() 28324 MB/s Sep 6 00:19:21.853142 kernel: raid6: avx512x1 gen() 17583 MB/s Sep 6 00:19:21.873142 kernel: raid6: avx512x1 xor() 24319 MB/s Sep 6 00:19:21.894150 kernel: raid6: avx2x4 gen() 17646 MB/s Sep 6 00:19:21.914150 kernel: raid6: avx2x4 xor() 5979 MB/s Sep 6 00:19:21.934143 kernel: raid6: avx2x2 gen() 17481 MB/s Sep 6 00:19:21.956147 kernel: raid6: avx2x2 xor() 20135 MB/s Sep 6 00:19:21.977148 kernel: raid6: avx2x1 gen() 13116 MB/s Sep 6 00:19:21.998145 kernel: raid6: avx2x1 xor() 17624 MB/s Sep 6 00:19:22.021145 kernel: raid6: sse2x4 gen() 10646 MB/s Sep 6 00:19:22.043143 kernel: raid6: sse2x4 xor() 5928 MB/s Sep 6 00:19:22.064145 kernel: raid6: sse2x2 gen() 11786 MB/s Sep 6 00:19:22.085151 kernel: raid6: sse2x2 xor() 6823 MB/s Sep 6 00:19:22.105143 kernel: raid6: sse2x1 gen() 10564 MB/s Sep 6 00:19:22.132785 kernel: raid6: sse2x1 xor() 5390 MB/s Sep 6 00:19:22.132860 kernel: raid6: using algorithm avx512x4 gen() 17809 MB/s Sep 6 00:19:22.132876 kernel: raid6: .... xor() 6540 MB/s, rmw enabled Sep 6 00:19:22.137733 kernel: raid6: using avx512x2 recovery algorithm Sep 6 00:19:22.164164 kernel: xor: automatically using best checksumming function avx Sep 6 00:19:22.262160 kernel: Btrfs loaded, crc32c=crc32c-intel, zoned=no, fsverity=no Sep 6 00:19:22.271494 systemd[1]: Finished dracut-pre-udev.service. Sep 6 00:19:22.278000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-udev comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 00:19:22.278000 audit: BPF prog-id=7 op=LOAD Sep 6 00:19:22.278000 audit: BPF prog-id=8 op=LOAD Sep 6 00:19:22.279257 systemd[1]: Starting systemd-udevd.service... Sep 6 00:19:22.296240 systemd-udevd[384]: Using default interface naming scheme 'v252'. Sep 6 00:19:22.300963 systemd[1]: Started systemd-udevd.service. Sep 6 00:19:22.311000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-udevd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 00:19:22.312563 systemd[1]: Starting dracut-pre-trigger.service... Sep 6 00:19:22.329124 dracut-pre-trigger[403]: rd.md=0: removing MD RAID activation Sep 6 00:19:22.362205 systemd[1]: Finished dracut-pre-trigger.service. Sep 6 00:19:22.369000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-trigger comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 00:19:22.370849 systemd[1]: Starting systemd-udev-trigger.service... Sep 6 00:19:22.408698 systemd[1]: Finished systemd-udev-trigger.service. Sep 6 00:19:22.415000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-udev-trigger comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 00:19:22.466161 kernel: cryptd: max_cpu_qlen set to 1000 Sep 6 00:19:22.505513 kernel: AVX2 version of gcm_enc/dec engaged. Sep 6 00:19:22.505589 kernel: AES CTR mode by8 optimization enabled Sep 6 00:19:22.505618 kernel: hv_vmbus: Vmbus version:5.2 Sep 6 00:19:22.522152 kernel: hv_vmbus: registering driver hyperv_keyboard Sep 6 00:19:22.522220 kernel: input: AT Translated Set 2 keyboard as /devices/LNXSYSTM:00/LNXSYBUS:00/ACPI0004:00/MSFT1000:00/d34b2567-b9b6-42b9-8778-0a4ec0b955bf/serio0/input/input0 Sep 6 00:19:22.543158 kernel: hid: raw HID events driver (C) Jiri Kosina Sep 6 00:19:22.552150 kernel: hv_vmbus: registering driver hv_storvsc Sep 6 00:19:22.562010 kernel: scsi host1: storvsc_host_t Sep 6 00:19:22.562136 kernel: scsi host0: storvsc_host_t Sep 6 00:19:22.570150 kernel: scsi 0:0:0:0: Direct-Access Msft Virtual Disk 1.0 PQ: 0 ANSI: 5 Sep 6 00:19:22.577158 kernel: hv_vmbus: registering driver hv_netvsc Sep 6 00:19:22.577222 kernel: scsi 0:0:0:2: CD-ROM Msft Virtual DVD-ROM 1.0 PQ: 0 ANSI: 5 Sep 6 00:19:22.603160 kernel: hv_vmbus: registering driver hid_hyperv Sep 6 00:19:22.618148 kernel: input: Microsoft Vmbus HID-compliant Mouse as /devices/0006:045E:0621.0001/input/input1 Sep 6 00:19:22.627191 kernel: hid 0006:045E:0621.0001: input: VIRTUAL HID v0.01 Mouse [Microsoft Vmbus HID-compliant Mouse] on Sep 6 00:19:22.644710 kernel: sr 0:0:0:2: [sr0] scsi-1 drive Sep 6 00:19:22.645791 kernel: cdrom: Uniform CD-ROM driver Revision: 3.20 Sep 6 00:19:22.645812 kernel: sr 0:0:0:2: Attached scsi CD-ROM sr0 Sep 6 00:19:22.661665 kernel: sd 0:0:0:0: [sda] 63737856 512-byte logical blocks: (32.6 GB/30.4 GiB) Sep 6 00:19:22.704858 kernel: sd 0:0:0:0: [sda] 4096-byte physical blocks Sep 6 00:19:22.704994 kernel: sd 0:0:0:0: [sda] Write Protect is off Sep 6 00:19:22.705104 kernel: sd 0:0:0:0: [sda] Mode Sense: 0f 00 10 00 Sep 6 00:19:22.705270 kernel: sd 0:0:0:0: [sda] Write cache: disabled, read cache: enabled, supports DPO and FUA Sep 6 00:19:22.705435 kernel: sda: sda1 sda2 sda3 sda4 sda6 sda7 sda9 Sep 6 00:19:22.705453 kernel: hv_storvsc f8b3781a-1e82-4818-a1c3-63d806ec15bb: tag#60 cmd 0x85 status: scsi 0x2 srb 0x6 hv 0xc0000001 Sep 6 00:19:22.705601 kernel: sd 0:0:0:0: [sda] Attached SCSI disk Sep 6 00:19:22.734156 kernel: hv_storvsc f8b3781a-1e82-4818-a1c3-63d806ec15bb: tag#211 cmd 0x85 status: scsi 0x2 srb 0x6 hv 0xc0000001 Sep 6 00:19:22.755163 kernel: hv_netvsc 7ced8d2d-b405-7ced-8d2d-b4057ced8d2d eth0: VF slot 1 added Sep 6 00:19:22.765153 kernel: hv_vmbus: registering driver hv_pci Sep 6 00:19:22.773151 kernel: hv_pci c06aca6a-7780-472b-b465-e2b2b53e9460: PCI VMBus probing: Using version 0x10004 Sep 6 00:19:22.863749 kernel: hv_pci c06aca6a-7780-472b-b465-e2b2b53e9460: PCI host bridge to bus 7780:00 Sep 6 00:19:22.863949 kernel: pci_bus 7780:00: root bus resource [mem 0xfe0000000-0xfe00fffff window] Sep 6 00:19:22.864149 kernel: pci_bus 7780:00: No busn resource found for root bus, will use [bus 00-ff] Sep 6 00:19:22.864323 kernel: pci 7780:00:02.0: [15b3:1016] type 00 class 0x020000 Sep 6 00:19:22.864522 kernel: pci 7780:00:02.0: reg 0x10: [mem 0xfe0000000-0xfe00fffff 64bit pref] Sep 6 00:19:22.864693 kernel: pci 7780:00:02.0: enabling Extended Tags Sep 6 00:19:22.864857 kernel: pci 7780:00:02.0: 0.000 Gb/s available PCIe bandwidth, limited by Unknown x0 link at 7780:00:02.0 (capable of 63.008 Gb/s with 8.0 GT/s PCIe x8 link) Sep 6 00:19:22.865018 kernel: pci_bus 7780:00: busn_res: [bus 00-ff] end is updated to 00 Sep 6 00:19:22.865187 kernel: pci 7780:00:02.0: BAR 0: assigned [mem 0xfe0000000-0xfe00fffff 64bit pref] Sep 6 00:19:22.962519 kernel: mlx5_core 7780:00:02.0: enabling device (0000 -> 0002) Sep 6 00:19:23.266074 kernel: mlx5_core 7780:00:02.0: firmware version: 14.30.5000 Sep 6 00:19:23.266286 kernel: BTRFS: device label OEM devid 1 transid 9 /dev/sda6 scanned by (udev-worker) (438) Sep 6 00:19:23.266307 kernel: mlx5_core 7780:00:02.0: MLX5E: StrdRq(0) RqSz(1024) StrdSz(256) RxCqeCmprss(0) Sep 6 00:19:23.266466 kernel: mlx5_core 7780:00:02.0: Supported tc offload range - chains: 1, prios: 1 Sep 6 00:19:23.266602 kernel: mlx5_core 7780:00:02.0: mlx5e_tc_post_act_init:40:(pid 188): firmware level support is missing Sep 6 00:19:23.266703 kernel: hv_netvsc 7ced8d2d-b405-7ced-8d2d-b4057ced8d2d eth0: VF registering: eth1 Sep 6 00:19:23.266801 kernel: mlx5_core 7780:00:02.0 eth1: joined to eth0 Sep 6 00:19:23.124974 systemd[1]: Found device dev-disk-by\x2dlabel-EFI\x2dSYSTEM.device. Sep 6 00:19:23.145082 systemd[1]: Found device dev-disk-by\x2dlabel-OEM.device. Sep 6 00:19:23.283882 systemd[1]: Found device dev-disk-by\x2dlabel-ROOT.device. Sep 6 00:19:23.291167 kernel: mlx5_core 7780:00:02.0 enP30592s1: renamed from eth1 Sep 6 00:19:23.302811 systemd[1]: Found device dev-disk-by\x2dpartlabel-USR\x2dA.device. Sep 6 00:19:23.312676 systemd[1]: Found device dev-disk-by\x2dpartuuid-7130c94a\x2d213a\x2d4e5a\x2d8e26\x2d6cce9662f132.device. Sep 6 00:19:23.326070 systemd[1]: Starting disk-uuid.service... Sep 6 00:19:23.345178 kernel: sda: sda1 sda2 sda3 sda4 sda6 sda7 sda9 Sep 6 00:19:23.354165 kernel: sda: sda1 sda2 sda3 sda4 sda6 sda7 sda9 Sep 6 00:19:24.362732 disk-uuid[569]: The operation has completed successfully. Sep 6 00:19:24.366165 kernel: sda: sda1 sda2 sda3 sda4 sda6 sda7 sda9 Sep 6 00:19:24.434801 systemd[1]: disk-uuid.service: Deactivated successfully. Sep 6 00:19:24.442000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=disk-uuid comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 00:19:24.442000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=disk-uuid comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 00:19:24.434917 systemd[1]: Finished disk-uuid.service. Sep 6 00:19:24.453286 systemd[1]: Starting verity-setup.service... Sep 6 00:19:24.492153 kernel: device-mapper: verity: sha256 using implementation "sha256-avx2" Sep 6 00:19:24.728760 systemd[1]: Found device dev-mapper-usr.device. Sep 6 00:19:24.733381 systemd[1]: Mounting sysusr-usr.mount... Sep 6 00:19:24.741000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=verity-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 00:19:24.739150 systemd[1]: Finished verity-setup.service. Sep 6 00:19:24.817170 kernel: EXT4-fs (dm-0): mounted filesystem without journal. Opts: norecovery. Quota mode: none. Sep 6 00:19:24.817032 systemd[1]: Mounted sysusr-usr.mount. Sep 6 00:19:24.821695 systemd[1]: afterburn-network-kargs.service was skipped because no trigger condition checks were met. Sep 6 00:19:24.826837 systemd[1]: Starting ignition-setup.service... Sep 6 00:19:24.830258 systemd[1]: Starting parse-ip-for-networkd.service... Sep 6 00:19:24.851777 kernel: BTRFS info (device sda6): using crc32c (crc32c-intel) checksum algorithm Sep 6 00:19:24.851848 kernel: BTRFS info (device sda6): using free space tree Sep 6 00:19:24.851861 kernel: BTRFS info (device sda6): has skinny extents Sep 6 00:19:24.903750 systemd[1]: Finished parse-ip-for-networkd.service. Sep 6 00:19:24.907000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=parse-ip-for-networkd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 00:19:24.911000 audit: BPF prog-id=9 op=LOAD Sep 6 00:19:24.911979 systemd[1]: Starting systemd-networkd.service... Sep 6 00:19:24.943608 systemd-networkd[807]: lo: Link UP Sep 6 00:19:24.943621 systemd-networkd[807]: lo: Gained carrier Sep 6 00:19:24.949000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-networkd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 00:19:24.946573 systemd-networkd[807]: Enumeration completed Sep 6 00:19:24.946711 systemd[1]: Started systemd-networkd.service. Sep 6 00:19:24.950021 systemd[1]: Reached target network.target. Sep 6 00:19:24.950069 systemd-networkd[807]: eth0: Configuring with /usr/lib/systemd/network/zz-default.network. Sep 6 00:19:24.968509 systemd[1]: Starting iscsiuio.service... Sep 6 00:19:24.976281 systemd[1]: Started iscsiuio.service. Sep 6 00:19:24.981000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=iscsiuio comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 00:19:24.983476 systemd[1]: Starting iscsid.service... Sep 6 00:19:24.993508 iscsid[817]: iscsid: can't open InitiatorName configuration file /etc/iscsi/initiatorname.iscsi Sep 6 00:19:24.993508 iscsid[817]: iscsid: Warning: InitiatorName file /etc/iscsi/initiatorname.iscsi does not exist or does not contain a properly formatted InitiatorName. If using software iscsi (iscsi_tcp or ib_iser) or partial offload (bnx2i or cxgbi iscsi), you may not be able to log into or discover targets. Please create a file /etc/iscsi/initiatorname.iscsi that contains a sting with the format: InitiatorName=iqn.yyyy-mm.[:identifier]. Sep 6 00:19:24.993508 iscsid[817]: Example: InitiatorName=iqn.2001-04.com.redhat:fc6. Sep 6 00:19:24.993508 iscsid[817]: If using hardware iscsi like qla4xxx this message can be ignored. Sep 6 00:19:24.993508 iscsid[817]: iscsid: can't open InitiatorAlias configuration file /etc/iscsi/initiatorname.iscsi Sep 6 00:19:24.993508 iscsid[817]: iscsid: can't open iscsid.safe_logout configuration file /etc/iscsi/iscsid.conf Sep 6 00:19:25.044664 kernel: mlx5_core 7780:00:02.0 enP30592s1: Link up Sep 6 00:19:25.029000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=iscsid comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 00:19:24.996438 systemd[1]: mnt-oem.mount: Deactivated successfully. Sep 6 00:19:25.021597 systemd[1]: Started iscsid.service. Sep 6 00:19:25.030477 systemd[1]: Starting dracut-initqueue.service... Sep 6 00:19:25.061393 systemd[1]: Finished dracut-initqueue.service. Sep 6 00:19:25.082687 kernel: hv_netvsc 7ced8d2d-b405-7ced-8d2d-b4057ced8d2d eth0: Data path switched to VF: enP30592s1 Sep 6 00:19:25.082939 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): eth0: link becomes ready Sep 6 00:19:25.071000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-initqueue comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 00:19:25.071396 systemd[1]: Reached target remote-fs-pre.target. Sep 6 00:19:25.078785 systemd-networkd[807]: enP30592s1: Link UP Sep 6 00:19:25.078921 systemd-networkd[807]: eth0: Link UP Sep 6 00:19:25.079157 systemd-networkd[807]: eth0: Gained carrier Sep 6 00:19:25.082683 systemd[1]: Reached target remote-cryptsetup.target. Sep 6 00:19:25.086527 systemd[1]: Reached target remote-fs.target. Sep 6 00:19:25.087412 systemd-networkd[807]: enP30592s1: Gained carrier Sep 6 00:19:25.112113 systemd[1]: Starting dracut-pre-mount.service... Sep 6 00:19:25.124277 systemd-networkd[807]: eth0: DHCPv4 address 10.200.8.38/24, gateway 10.200.8.1 acquired from 168.63.129.16 Sep 6 00:19:25.132777 systemd[1]: Finished dracut-pre-mount.service. Sep 6 00:19:25.138000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-mount comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 00:19:25.144143 kernel: kauditd_printk_skb: 16 callbacks suppressed Sep 6 00:19:25.144178 kernel: audit: type=1130 audit(1757117965.138:27): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-mount comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 00:19:25.162871 systemd[1]: Finished ignition-setup.service. Sep 6 00:19:25.167077 systemd[1]: Starting ignition-fetch-offline.service... Sep 6 00:19:25.187948 kernel: audit: type=1130 audit(1757117965.165:28): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 00:19:25.165000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 00:19:26.596365 systemd-networkd[807]: eth0: Gained IPv6LL Sep 6 00:19:28.105757 ignition[834]: Ignition 2.14.0 Sep 6 00:19:28.105772 ignition[834]: Stage: fetch-offline Sep 6 00:19:28.105869 ignition[834]: reading system config file "/usr/lib/ignition/base.d/base.ign" Sep 6 00:19:28.105920 ignition[834]: parsing config with SHA512: 4824fd4a4e57848da530dc2b56e2d3e9f5f19634d1c84ef29f8fc49255520728d0377a861a375d7c8cb5301ed861ff4ede4b440b074b1d6a86e23be9cefc2f63 Sep 6 00:19:28.211535 ignition[834]: no config dir at "/usr/lib/ignition/base.platform.d/azure" Sep 6 00:19:28.211737 ignition[834]: parsed url from cmdline: "" Sep 6 00:19:28.221000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-fetch-offline comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 00:19:28.213178 systemd[1]: Finished ignition-fetch-offline.service. Sep 6 00:19:28.246078 kernel: audit: type=1130 audit(1757117968.221:29): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-fetch-offline comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 00:19:28.211741 ignition[834]: no config URL provided Sep 6 00:19:28.222605 systemd[1]: Starting ignition-fetch.service... Sep 6 00:19:28.211747 ignition[834]: reading system config file "/usr/lib/ignition/user.ign" Sep 6 00:19:28.211757 ignition[834]: no config at "/usr/lib/ignition/user.ign" Sep 6 00:19:28.211763 ignition[834]: failed to fetch config: resource requires networking Sep 6 00:19:28.211898 ignition[834]: Ignition finished successfully Sep 6 00:19:28.231145 ignition[840]: Ignition 2.14.0 Sep 6 00:19:28.231152 ignition[840]: Stage: fetch Sep 6 00:19:28.231281 ignition[840]: reading system config file "/usr/lib/ignition/base.d/base.ign" Sep 6 00:19:28.231305 ignition[840]: parsing config with SHA512: 4824fd4a4e57848da530dc2b56e2d3e9f5f19634d1c84ef29f8fc49255520728d0377a861a375d7c8cb5301ed861ff4ede4b440b074b1d6a86e23be9cefc2f63 Sep 6 00:19:28.246544 ignition[840]: no config dir at "/usr/lib/ignition/base.platform.d/azure" Sep 6 00:19:28.246708 ignition[840]: parsed url from cmdline: "" Sep 6 00:19:28.246712 ignition[840]: no config URL provided Sep 6 00:19:28.246718 ignition[840]: reading system config file "/usr/lib/ignition/user.ign" Sep 6 00:19:28.246726 ignition[840]: no config at "/usr/lib/ignition/user.ign" Sep 6 00:19:28.246767 ignition[840]: GET http://169.254.169.254/metadata/instance/compute/userData?api-version=2021-01-01&format=text: attempt #1 Sep 6 00:19:28.374343 ignition[840]: GET result: OK Sep 6 00:19:28.374511 ignition[840]: config has been read from IMDS userdata Sep 6 00:19:28.374549 ignition[840]: parsing config with SHA512: 6c591f12f186753bf0a6c17ed0e1ea9a9a73143ada72d3acc182980bc65a20b36ff7f4d7d172e2ab7770835854d72ddb597392308a8cac0cf22b6a54b8a953ec Sep 6 00:19:28.382411 unknown[840]: fetched base config from "system" Sep 6 00:19:28.382428 unknown[840]: fetched base config from "system" Sep 6 00:19:28.382438 unknown[840]: fetched user config from "azure" Sep 6 00:19:28.397000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-fetch comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 00:19:28.389841 ignition[840]: fetch: fetch complete Sep 6 00:19:28.422355 kernel: audit: type=1130 audit(1757117968.397:30): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-fetch comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 00:19:28.394441 systemd[1]: Finished ignition-fetch.service. Sep 6 00:19:28.389854 ignition[840]: fetch: fetch passed Sep 6 00:19:28.398710 systemd[1]: Starting ignition-kargs.service... Sep 6 00:19:28.390384 ignition[840]: Ignition finished successfully Sep 6 00:19:28.429296 ignition[846]: Ignition 2.14.0 Sep 6 00:19:28.429305 ignition[846]: Stage: kargs Sep 6 00:19:28.443000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-kargs comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 00:19:28.429444 ignition[846]: reading system config file "/usr/lib/ignition/base.d/base.ign" Sep 6 00:19:28.467903 kernel: audit: type=1130 audit(1757117968.443:31): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-kargs comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 00:19:28.438861 systemd[1]: Finished ignition-kargs.service. Sep 6 00:19:28.429471 ignition[846]: parsing config with SHA512: 4824fd4a4e57848da530dc2b56e2d3e9f5f19634d1c84ef29f8fc49255520728d0377a861a375d7c8cb5301ed861ff4ede4b440b074b1d6a86e23be9cefc2f63 Sep 6 00:19:28.444332 systemd[1]: Starting ignition-disks.service... Sep 6 00:19:28.435654 ignition[846]: no config dir at "/usr/lib/ignition/base.platform.d/azure" Sep 6 00:19:28.437744 ignition[846]: kargs: kargs passed Sep 6 00:19:28.437804 ignition[846]: Ignition finished successfully Sep 6 00:19:28.452763 ignition[852]: Ignition 2.14.0 Sep 6 00:19:28.452770 ignition[852]: Stage: disks Sep 6 00:19:28.489000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-disks comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 00:19:28.483258 systemd[1]: Finished ignition-disks.service. Sep 6 00:19:28.514710 kernel: audit: type=1130 audit(1757117968.489:32): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-disks comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 00:19:28.452886 ignition[852]: reading system config file "/usr/lib/ignition/base.d/base.ign" Sep 6 00:19:28.489430 systemd[1]: Reached target initrd-root-device.target. Sep 6 00:19:28.452912 ignition[852]: parsing config with SHA512: 4824fd4a4e57848da530dc2b56e2d3e9f5f19634d1c84ef29f8fc49255520728d0377a861a375d7c8cb5301ed861ff4ede4b440b074b1d6a86e23be9cefc2f63 Sep 6 00:19:28.511492 systemd[1]: Reached target local-fs-pre.target. Sep 6 00:19:28.457019 ignition[852]: no config dir at "/usr/lib/ignition/base.platform.d/azure" Sep 6 00:19:28.522233 systemd[1]: Reached target local-fs.target. Sep 6 00:19:28.469624 ignition[852]: disks: disks passed Sep 6 00:19:28.528184 systemd[1]: Reached target sysinit.target. Sep 6 00:19:28.470405 ignition[852]: Ignition finished successfully Sep 6 00:19:28.533302 systemd[1]: Reached target basic.target. Sep 6 00:19:28.536660 systemd[1]: Starting systemd-fsck-root.service... Sep 6 00:19:28.594085 systemd-fsck[860]: ROOT: clean, 629/7326000 files, 481084/7359488 blocks Sep 6 00:19:28.605580 systemd[1]: Finished systemd-fsck-root.service. Sep 6 00:19:28.637919 kernel: audit: type=1130 audit(1757117968.612:33): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-fsck-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 00:19:28.612000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-fsck-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 00:19:28.634714 systemd[1]: Mounting sysroot.mount... Sep 6 00:19:28.658144 kernel: EXT4-fs (sda9): mounted filesystem with ordered data mode. Opts: (null). Quota mode: none. Sep 6 00:19:28.658921 systemd[1]: Mounted sysroot.mount. Sep 6 00:19:28.661381 systemd[1]: Reached target initrd-root-fs.target. Sep 6 00:19:28.695390 systemd[1]: Mounting sysroot-usr.mount... Sep 6 00:19:28.701983 systemd[1]: Starting flatcar-metadata-hostname.service... Sep 6 00:19:28.708214 systemd[1]: ignition-remount-sysroot.service was skipped because of an unmet condition check (ConditionPathIsReadWrite=!/sysroot). Sep 6 00:19:28.713658 systemd[1]: Reached target ignition-diskful.target. Sep 6 00:19:28.720267 systemd[1]: Mounted sysroot-usr.mount. Sep 6 00:19:28.767667 systemd[1]: Mounting sysroot-usr-share-oem.mount... Sep 6 00:19:28.774788 systemd[1]: Starting initrd-setup-root.service... Sep 6 00:19:28.784198 kernel: BTRFS: device label OEM devid 1 transid 11 /dev/sda6 scanned by mount (871) Sep 6 00:19:28.797182 kernel: BTRFS info (device sda6): using crc32c (crc32c-intel) checksum algorithm Sep 6 00:19:28.797256 kernel: BTRFS info (device sda6): using free space tree Sep 6 00:19:28.797269 kernel: BTRFS info (device sda6): has skinny extents Sep 6 00:19:28.805291 systemd[1]: Mounted sysroot-usr-share-oem.mount. Sep 6 00:19:28.810841 initrd-setup-root[876]: cut: /sysroot/etc/passwd: No such file or directory Sep 6 00:19:28.829027 initrd-setup-root[902]: cut: /sysroot/etc/group: No such file or directory Sep 6 00:19:28.851073 initrd-setup-root[910]: cut: /sysroot/etc/shadow: No such file or directory Sep 6 00:19:28.861224 initrd-setup-root[918]: cut: /sysroot/etc/gshadow: No such file or directory Sep 6 00:19:29.283050 systemd[1]: Finished initrd-setup-root.service. Sep 6 00:19:29.286000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-setup-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 00:19:29.287488 systemd[1]: Starting ignition-mount.service... Sep 6 00:19:29.318879 kernel: audit: type=1130 audit(1757117969.286:34): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-setup-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 00:19:29.313733 systemd[1]: Starting sysroot-boot.service... Sep 6 00:19:29.329473 systemd[1]: sysusr-usr-share-oem.mount: Deactivated successfully. Sep 6 00:19:29.334532 systemd[1]: sysroot-usr-share-oem.mount: Deactivated successfully. Sep 6 00:19:29.348404 systemd[1]: Finished sysroot-boot.service. Sep 6 00:19:29.353086 ignition[939]: INFO : Ignition 2.14.0 Sep 6 00:19:29.357039 ignition[939]: INFO : Stage: mount Sep 6 00:19:29.357039 ignition[939]: INFO : reading system config file "/usr/lib/ignition/base.d/base.ign" Sep 6 00:19:29.357039 ignition[939]: DEBUG : parsing config with SHA512: 4824fd4a4e57848da530dc2b56e2d3e9f5f19634d1c84ef29f8fc49255520728d0377a861a375d7c8cb5301ed861ff4ede4b440b074b1d6a86e23be9cefc2f63 Sep 6 00:19:29.389860 kernel: audit: type=1130 audit(1757117969.356:35): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=sysroot-boot comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 00:19:29.356000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=sysroot-boot comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 00:19:29.389966 ignition[939]: INFO : no config dir at "/usr/lib/ignition/base.platform.d/azure" Sep 6 00:19:29.389966 ignition[939]: INFO : mount: mount passed Sep 6 00:19:29.389966 ignition[939]: INFO : Ignition finished successfully Sep 6 00:19:29.395317 systemd[1]: Finished ignition-mount.service. Sep 6 00:19:29.406000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-mount comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 00:19:29.424150 kernel: audit: type=1130 audit(1757117969.406:36): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-mount comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 00:19:30.243916 coreos-metadata[870]: Sep 06 00:19:30.243 INFO Fetching http://168.63.129.16/?comp=versions: Attempt #1 Sep 6 00:19:30.261560 coreos-metadata[870]: Sep 06 00:19:30.261 INFO Fetch successful Sep 6 00:19:30.295785 coreos-metadata[870]: Sep 06 00:19:30.295 INFO Fetching http://169.254.169.254/metadata/instance/compute/name?api-version=2017-08-01&format=text: Attempt #1 Sep 6 00:19:30.313312 coreos-metadata[870]: Sep 06 00:19:30.313 INFO Fetch successful Sep 6 00:19:30.326987 coreos-metadata[870]: Sep 06 00:19:30.326 INFO wrote hostname ci-3510.3.8-n-28804d0655 to /sysroot/etc/hostname Sep 6 00:19:30.335000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=flatcar-metadata-hostname comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 00:19:30.329114 systemd[1]: Finished flatcar-metadata-hostname.service. Sep 6 00:19:30.356060 kernel: audit: type=1130 audit(1757117970.335:37): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=flatcar-metadata-hostname comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 00:19:30.337028 systemd[1]: Starting ignition-files.service... Sep 6 00:19:30.364668 systemd[1]: Mounting sysroot-usr-share-oem.mount... Sep 6 00:19:30.379218 kernel: BTRFS: device label OEM devid 1 transid 12 /dev/sda6 scanned by mount (949) Sep 6 00:19:30.391909 kernel: BTRFS info (device sda6): using crc32c (crc32c-intel) checksum algorithm Sep 6 00:19:30.391984 kernel: BTRFS info (device sda6): using free space tree Sep 6 00:19:30.391996 kernel: BTRFS info (device sda6): has skinny extents Sep 6 00:19:30.401331 systemd[1]: Mounted sysroot-usr-share-oem.mount. Sep 6 00:19:30.417835 ignition[968]: INFO : Ignition 2.14.0 Sep 6 00:19:30.417835 ignition[968]: INFO : Stage: files Sep 6 00:19:30.426575 ignition[968]: INFO : reading system config file "/usr/lib/ignition/base.d/base.ign" Sep 6 00:19:30.426575 ignition[968]: DEBUG : parsing config with SHA512: 4824fd4a4e57848da530dc2b56e2d3e9f5f19634d1c84ef29f8fc49255520728d0377a861a375d7c8cb5301ed861ff4ede4b440b074b1d6a86e23be9cefc2f63 Sep 6 00:19:30.444437 ignition[968]: INFO : no config dir at "/usr/lib/ignition/base.platform.d/azure" Sep 6 00:19:30.464632 ignition[968]: DEBUG : files: compiled without relabeling support, skipping Sep 6 00:19:30.468962 ignition[968]: INFO : files: ensureUsers: op(1): [started] creating or modifying user "core" Sep 6 00:19:30.468962 ignition[968]: DEBUG : files: ensureUsers: op(1): executing: "usermod" "--root" "/sysroot" "core" Sep 6 00:19:30.547142 ignition[968]: INFO : files: ensureUsers: op(1): [finished] creating or modifying user "core" Sep 6 00:19:30.554330 ignition[968]: INFO : files: ensureUsers: op(2): [started] adding ssh keys to user "core" Sep 6 00:19:30.554330 ignition[968]: INFO : files: ensureUsers: op(2): [finished] adding ssh keys to user "core" Sep 6 00:19:30.554330 ignition[968]: INFO : files: createFilesystemsFiles: createFiles: op(3): [started] writing file "/sysroot/opt/helm-v3.13.2-linux-amd64.tar.gz" Sep 6 00:19:30.554330 ignition[968]: INFO : files: createFilesystemsFiles: createFiles: op(3): GET https://get.helm.sh/helm-v3.13.2-linux-amd64.tar.gz: attempt #1 Sep 6 00:19:30.547851 unknown[968]: wrote ssh authorized keys file for user: core Sep 6 00:19:30.619398 ignition[968]: INFO : files: createFilesystemsFiles: createFiles: op(3): GET result: OK Sep 6 00:19:30.813351 ignition[968]: INFO : files: createFilesystemsFiles: createFiles: op(3): [finished] writing file "/sysroot/opt/helm-v3.13.2-linux-amd64.tar.gz" Sep 6 00:19:30.813351 ignition[968]: INFO : files: createFilesystemsFiles: createFiles: op(4): [started] writing file "/sysroot/home/core/install.sh" Sep 6 00:19:30.831599 ignition[968]: INFO : files: createFilesystemsFiles: createFiles: op(4): [finished] writing file "/sysroot/home/core/install.sh" Sep 6 00:19:30.831599 ignition[968]: INFO : files: createFilesystemsFiles: createFiles: op(5): [started] writing file "/sysroot/home/core/nginx.yaml" Sep 6 00:19:30.831599 ignition[968]: INFO : files: createFilesystemsFiles: createFiles: op(5): [finished] writing file "/sysroot/home/core/nginx.yaml" Sep 6 00:19:30.831599 ignition[968]: INFO : files: createFilesystemsFiles: createFiles: op(6): [started] writing file "/sysroot/home/core/nfs-pod.yaml" Sep 6 00:19:30.831599 ignition[968]: INFO : files: createFilesystemsFiles: createFiles: op(6): [finished] writing file "/sysroot/home/core/nfs-pod.yaml" Sep 6 00:19:30.831599 ignition[968]: INFO : files: createFilesystemsFiles: createFiles: op(7): [started] writing file "/sysroot/home/core/nfs-pvc.yaml" Sep 6 00:19:30.831599 ignition[968]: INFO : files: createFilesystemsFiles: createFiles: op(7): [finished] writing file "/sysroot/home/core/nfs-pvc.yaml" Sep 6 00:19:30.831599 ignition[968]: INFO : files: createFilesystemsFiles: createFiles: op(8): [started] writing file "/sysroot/etc/flatcar/update.conf" Sep 6 00:19:30.831599 ignition[968]: INFO : files: createFilesystemsFiles: createFiles: op(8): [finished] writing file "/sysroot/etc/flatcar/update.conf" Sep 6 00:19:30.831599 ignition[968]: INFO : files: createFilesystemsFiles: createFiles: op(9): [started] writing link "/sysroot/etc/extensions/kubernetes.raw" -> "/opt/extensions/kubernetes/kubernetes-v1.31.8-x86-64.raw" Sep 6 00:19:30.831599 ignition[968]: INFO : files: createFilesystemsFiles: createFiles: op(9): [finished] writing link "/sysroot/etc/extensions/kubernetes.raw" -> "/opt/extensions/kubernetes/kubernetes-v1.31.8-x86-64.raw" Sep 6 00:19:30.831599 ignition[968]: INFO : files: createFilesystemsFiles: createFiles: op(a): [started] writing file "/sysroot/etc/systemd/system/waagent.service" Sep 6 00:19:30.831599 ignition[968]: INFO : files: createFilesystemsFiles: createFiles: op(a): oem config not found in "/usr/share/oem", looking on oem partition Sep 6 00:19:30.831599 ignition[968]: INFO : files: createFilesystemsFiles: createFiles: op(a): op(b): [started] mounting "/dev/disk/by-label/OEM" at "/mnt/oem2183796970" Sep 6 00:19:30.831599 ignition[968]: CRITICAL : files: createFilesystemsFiles: createFiles: op(a): op(b): [failed] mounting "/dev/disk/by-label/OEM" at "/mnt/oem2183796970": device or resource busy Sep 6 00:19:30.931775 ignition[968]: ERROR : files: createFilesystemsFiles: createFiles: op(a): failed to mount ext4 device "/dev/disk/by-label/OEM" at "/mnt/oem2183796970", trying btrfs: device or resource busy Sep 6 00:19:30.931775 ignition[968]: INFO : files: createFilesystemsFiles: createFiles: op(a): op(c): [started] mounting "/dev/disk/by-label/OEM" at "/mnt/oem2183796970" Sep 6 00:19:30.931775 ignition[968]: INFO : files: createFilesystemsFiles: createFiles: op(a): op(c): [finished] mounting "/dev/disk/by-label/OEM" at "/mnt/oem2183796970" Sep 6 00:19:30.931775 ignition[968]: INFO : files: createFilesystemsFiles: createFiles: op(a): op(d): [started] unmounting "/mnt/oem2183796970" Sep 6 00:19:30.931775 ignition[968]: INFO : files: createFilesystemsFiles: createFiles: op(a): op(d): [finished] unmounting "/mnt/oem2183796970" Sep 6 00:19:30.931775 ignition[968]: INFO : files: createFilesystemsFiles: createFiles: op(a): [finished] writing file "/sysroot/etc/systemd/system/waagent.service" Sep 6 00:19:30.931775 ignition[968]: INFO : files: createFilesystemsFiles: createFiles: op(e): [started] writing file "/sysroot/etc/systemd/system/nvidia.service" Sep 6 00:19:30.931775 ignition[968]: INFO : files: createFilesystemsFiles: createFiles: op(e): oem config not found in "/usr/share/oem", looking on oem partition Sep 6 00:19:30.931775 ignition[968]: INFO : files: createFilesystemsFiles: createFiles: op(e): op(f): [started] mounting "/dev/disk/by-label/OEM" at "/mnt/oem3417408152" Sep 6 00:19:30.931775 ignition[968]: CRITICAL : files: createFilesystemsFiles: createFiles: op(e): op(f): [failed] mounting "/dev/disk/by-label/OEM" at "/mnt/oem3417408152": device or resource busy Sep 6 00:19:30.931775 ignition[968]: ERROR : files: createFilesystemsFiles: createFiles: op(e): failed to mount ext4 device "/dev/disk/by-label/OEM" at "/mnt/oem3417408152", trying btrfs: device or resource busy Sep 6 00:19:30.931775 ignition[968]: INFO : files: createFilesystemsFiles: createFiles: op(e): op(10): [started] mounting "/dev/disk/by-label/OEM" at "/mnt/oem3417408152" Sep 6 00:19:30.931775 ignition[968]: INFO : files: createFilesystemsFiles: createFiles: op(e): op(10): [finished] mounting "/dev/disk/by-label/OEM" at "/mnt/oem3417408152" Sep 6 00:19:30.931775 ignition[968]: INFO : files: createFilesystemsFiles: createFiles: op(e): op(11): [started] unmounting "/mnt/oem3417408152" Sep 6 00:19:30.931775 ignition[968]: INFO : files: createFilesystemsFiles: createFiles: op(e): op(11): [finished] unmounting "/mnt/oem3417408152" Sep 6 00:19:30.831599 systemd[1]: mnt-oem2183796970.mount: Deactivated successfully. Sep 6 00:19:31.025187 ignition[968]: INFO : files: createFilesystemsFiles: createFiles: op(e): [finished] writing file "/sysroot/etc/systemd/system/nvidia.service" Sep 6 00:19:31.025187 ignition[968]: INFO : files: createFilesystemsFiles: createFiles: op(12): [started] writing file "/sysroot/opt/extensions/kubernetes/kubernetes-v1.31.8-x86-64.raw" Sep 6 00:19:31.025187 ignition[968]: INFO : files: createFilesystemsFiles: createFiles: op(12): GET https://extensions.flatcar.org/extensions/kubernetes-v1.31.8-x86-64.raw: attempt #1 Sep 6 00:19:30.850374 systemd[1]: mnt-oem3417408152.mount: Deactivated successfully. Sep 6 00:19:31.349084 ignition[968]: INFO : files: createFilesystemsFiles: createFiles: op(12): GET result: OK Sep 6 00:19:31.783782 ignition[968]: INFO : files: createFilesystemsFiles: createFiles: op(12): [finished] writing file "/sysroot/opt/extensions/kubernetes/kubernetes-v1.31.8-x86-64.raw" Sep 6 00:19:31.783782 ignition[968]: INFO : files: op(13): [started] processing unit "waagent.service" Sep 6 00:19:31.783782 ignition[968]: INFO : files: op(13): [finished] processing unit "waagent.service" Sep 6 00:19:31.783782 ignition[968]: INFO : files: op(14): [started] processing unit "nvidia.service" Sep 6 00:19:31.783782 ignition[968]: INFO : files: op(14): [finished] processing unit "nvidia.service" Sep 6 00:19:31.783782 ignition[968]: INFO : files: op(15): [started] processing unit "prepare-helm.service" Sep 6 00:19:31.839877 kernel: audit: type=1130 audit(1757117971.799:38): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-files comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 00:19:31.799000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-files comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 00:19:31.792851 systemd[1]: Finished ignition-files.service. Sep 6 00:19:31.843000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-quench comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 00:19:31.843000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-quench comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 00:19:31.878294 ignition[968]: INFO : files: op(15): op(16): [started] writing unit "prepare-helm.service" at "/sysroot/etc/systemd/system/prepare-helm.service" Sep 6 00:19:31.878294 ignition[968]: INFO : files: op(15): op(16): [finished] writing unit "prepare-helm.service" at "/sysroot/etc/systemd/system/prepare-helm.service" Sep 6 00:19:31.878294 ignition[968]: INFO : files: op(15): [finished] processing unit "prepare-helm.service" Sep 6 00:19:31.878294 ignition[968]: INFO : files: op(17): [started] setting preset to enabled for "waagent.service" Sep 6 00:19:31.878294 ignition[968]: INFO : files: op(17): [finished] setting preset to enabled for "waagent.service" Sep 6 00:19:31.878294 ignition[968]: INFO : files: op(18): [started] setting preset to enabled for "nvidia.service" Sep 6 00:19:31.878294 ignition[968]: INFO : files: op(18): [finished] setting preset to enabled for "nvidia.service" Sep 6 00:19:31.878294 ignition[968]: INFO : files: op(19): [started] setting preset to enabled for "prepare-helm.service" Sep 6 00:19:31.878294 ignition[968]: INFO : files: op(19): [finished] setting preset to enabled for "prepare-helm.service" Sep 6 00:19:31.878294 ignition[968]: INFO : files: createResultFile: createFiles: op(1a): [started] writing file "/sysroot/etc/.ignition-result.json" Sep 6 00:19:31.878294 ignition[968]: INFO : files: createResultFile: createFiles: op(1a): [finished] writing file "/sysroot/etc/.ignition-result.json" Sep 6 00:19:31.878294 ignition[968]: INFO : files: files passed Sep 6 00:19:31.878294 ignition[968]: INFO : Ignition finished successfully Sep 6 00:19:31.965440 kernel: audit: type=1130 audit(1757117971.843:39): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-quench comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 00:19:31.965500 kernel: audit: type=1131 audit(1757117971.843:40): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-quench comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 00:19:31.965518 kernel: audit: type=1130 audit(1757117971.889:41): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-setup-root-after-ignition comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 00:19:31.889000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-setup-root-after-ignition comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 00:19:31.818342 systemd[1]: Starting initrd-setup-root-after-ignition.service... Sep 6 00:19:31.821506 systemd[1]: torcx-profile-populate.service was skipped because of an unmet condition check (ConditionPathExists=/sysroot/etc/torcx/next-profile). Sep 6 00:19:31.978063 initrd-setup-root-after-ignition[993]: grep: /sysroot/etc/flatcar/enabled-sysext.conf: No such file or directory Sep 6 00:19:31.831330 systemd[1]: Starting ignition-quench.service... Sep 6 00:19:31.835000 systemd[1]: ignition-quench.service: Deactivated successfully. Sep 6 00:19:31.835103 systemd[1]: Finished ignition-quench.service. Sep 6 00:19:31.880578 systemd[1]: Finished initrd-setup-root-after-ignition.service. Sep 6 00:19:31.890067 systemd[1]: Reached target ignition-complete.target. Sep 6 00:19:31.917318 systemd[1]: Starting initrd-parse-etc.service... Sep 6 00:19:32.019819 systemd[1]: initrd-parse-etc.service: Deactivated successfully. Sep 6 00:19:32.019966 systemd[1]: Finished initrd-parse-etc.service. Sep 6 00:19:32.057512 kernel: audit: type=1130 audit(1757117972.025:42): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-parse-etc comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 00:19:32.057558 kernel: audit: type=1131 audit(1757117972.025:43): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-parse-etc comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 00:19:32.025000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-parse-etc comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 00:19:32.025000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-parse-etc comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 00:19:32.026001 systemd[1]: Reached target initrd-fs.target. Sep 6 00:19:32.057538 systemd[1]: Reached target initrd.target. Sep 6 00:19:32.063000 systemd[1]: dracut-mount.service was skipped because no trigger condition checks were met. Sep 6 00:19:32.069908 systemd[1]: Starting dracut-pre-pivot.service... Sep 6 00:19:32.081646 systemd[1]: Finished dracut-pre-pivot.service. Sep 6 00:19:32.085000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-pivot comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 00:19:32.104161 kernel: audit: type=1130 audit(1757117972.085:44): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-pivot comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 00:19:32.104574 systemd[1]: Starting initrd-cleanup.service... Sep 6 00:19:32.117364 systemd[1]: Stopped target nss-lookup.target. Sep 6 00:19:32.122828 systemd[1]: Stopped target remote-cryptsetup.target. Sep 6 00:19:32.129601 systemd[1]: Stopped target timers.target. Sep 6 00:19:32.135015 systemd[1]: dracut-pre-pivot.service: Deactivated successfully. Sep 6 00:19:32.135221 systemd[1]: Stopped dracut-pre-pivot.service. Sep 6 00:19:32.141000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-pivot comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 00:19:32.157427 systemd[1]: Stopped target initrd.target. Sep 6 00:19:32.162968 kernel: audit: type=1131 audit(1757117972.141:45): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-pivot comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 00:19:32.163103 systemd[1]: Stopped target basic.target. Sep 6 00:19:32.167917 systemd[1]: Stopped target ignition-complete.target. Sep 6 00:19:32.174032 systemd[1]: Stopped target ignition-diskful.target. Sep 6 00:19:32.176924 systemd[1]: Stopped target initrd-root-device.target. Sep 6 00:19:32.182229 systemd[1]: Stopped target remote-fs.target. Sep 6 00:19:32.187264 systemd[1]: Stopped target remote-fs-pre.target. Sep 6 00:19:32.194838 systemd[1]: Stopped target sysinit.target. Sep 6 00:19:32.199505 systemd[1]: Stopped target local-fs.target. Sep 6 00:19:32.204316 systemd[1]: Stopped target local-fs-pre.target. Sep 6 00:19:32.209427 systemd[1]: Stopped target swap.target. Sep 6 00:19:32.213823 systemd[1]: dracut-pre-mount.service: Deactivated successfully. Sep 6 00:19:32.218000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-mount comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 00:19:32.213991 systemd[1]: Stopped dracut-pre-mount.service. Sep 6 00:19:32.239109 kernel: audit: type=1131 audit(1757117972.218:46): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-mount comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 00:19:32.233349 systemd[1]: Stopped target cryptsetup.target. Sep 6 00:19:32.244000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-initqueue comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 00:19:32.239205 systemd[1]: dracut-initqueue.service: Deactivated successfully. Sep 6 00:19:32.239400 systemd[1]: Stopped dracut-initqueue.service. Sep 6 00:19:32.250000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-setup-root-after-ignition comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 00:19:32.244565 systemd[1]: initrd-setup-root-after-ignition.service: Deactivated successfully. Sep 6 00:19:32.255000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-files comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 00:19:32.244734 systemd[1]: Stopped initrd-setup-root-after-ignition.service. Sep 6 00:19:32.262000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=flatcar-metadata-hostname comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 00:19:32.250835 systemd[1]: ignition-files.service: Deactivated successfully. Sep 6 00:19:32.250977 systemd[1]: Stopped ignition-files.service. Sep 6 00:19:32.255758 systemd[1]: flatcar-metadata-hostname.service: Deactivated successfully. Sep 6 00:19:32.255910 systemd[1]: Stopped flatcar-metadata-hostname.service. Sep 6 00:19:32.283142 ignition[1006]: INFO : Ignition 2.14.0 Sep 6 00:19:32.283142 ignition[1006]: INFO : Stage: umount Sep 6 00:19:32.283142 ignition[1006]: INFO : reading system config file "/usr/lib/ignition/base.d/base.ign" Sep 6 00:19:32.283142 ignition[1006]: DEBUG : parsing config with SHA512: 4824fd4a4e57848da530dc2b56e2d3e9f5f19634d1c84ef29f8fc49255520728d0377a861a375d7c8cb5301ed861ff4ede4b440b074b1d6a86e23be9cefc2f63 Sep 6 00:19:32.309000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-udev-trigger comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 00:19:32.265413 systemd[1]: Stopping ignition-mount.service... Sep 6 00:19:32.320538 iscsid[817]: iscsid shutting down. Sep 6 00:19:32.321195 ignition[1006]: INFO : no config dir at "/usr/lib/ignition/base.platform.d/azure" Sep 6 00:19:32.321195 ignition[1006]: INFO : umount: umount passed Sep 6 00:19:32.321195 ignition[1006]: INFO : Ignition finished successfully Sep 6 00:19:32.280757 systemd[1]: Stopping iscsid.service... Sep 6 00:19:32.284261 systemd[1]: Stopping sysroot-boot.service... Sep 6 00:19:32.324000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-trigger comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 00:19:32.324000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=iscsid comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 00:19:32.324000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-mount comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 00:19:32.329000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-cleanup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 00:19:32.329000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-cleanup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 00:19:32.296872 systemd[1]: systemd-udev-trigger.service: Deactivated successfully. Sep 6 00:19:32.297120 systemd[1]: Stopped systemd-udev-trigger.service. Sep 6 00:19:32.354000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-disks comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 00:19:32.310703 systemd[1]: dracut-pre-trigger.service: Deactivated successfully. Sep 6 00:19:32.357000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-kargs comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 00:19:32.357000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-fetch comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 00:19:32.357000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-fetch-offline comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 00:19:32.310868 systemd[1]: Stopped dracut-pre-trigger.service. Sep 6 00:19:32.326393 systemd[1]: iscsid.service: Deactivated successfully. Sep 6 00:19:32.326505 systemd[1]: Stopped iscsid.service. Sep 6 00:19:32.327112 systemd[1]: ignition-mount.service: Deactivated successfully. Sep 6 00:19:32.327204 systemd[1]: Stopped ignition-mount.service. Sep 6 00:19:32.328886 systemd[1]: initrd-cleanup.service: Deactivated successfully. Sep 6 00:19:32.328966 systemd[1]: Finished initrd-cleanup.service. Sep 6 00:19:32.331101 systemd[1]: ignition-disks.service: Deactivated successfully. Sep 6 00:19:32.331159 systemd[1]: Stopped ignition-disks.service. Sep 6 00:19:32.377000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 00:19:32.382000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=iscsiuio comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 00:19:32.356109 systemd[1]: ignition-kargs.service: Deactivated successfully. Sep 6 00:19:32.356178 systemd[1]: Stopped ignition-kargs.service. Sep 6 00:19:32.359263 systemd[1]: ignition-fetch.service: Deactivated successfully. Sep 6 00:19:32.426000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-resolved comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 00:19:32.359314 systemd[1]: Stopped ignition-fetch.service. Sep 6 00:19:32.437000 audit: BPF prog-id=6 op=UNLOAD Sep 6 00:19:32.437000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-networkd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 00:19:32.359737 systemd[1]: ignition-fetch-offline.service: Deactivated successfully. Sep 6 00:19:32.359770 systemd[1]: Stopped ignition-fetch-offline.service. Sep 6 00:19:32.360239 systemd[1]: Stopped target paths.target. Sep 6 00:19:32.450000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=parse-ip-for-networkd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 00:19:32.450000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-sysctl comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 00:19:32.360685 systemd[1]: systemd-ask-password-console.path: Deactivated successfully. Sep 6 00:19:32.368210 systemd[1]: Stopped systemd-ask-password-console.path. Sep 6 00:19:32.377244 systemd[1]: Stopped target slices.target. Sep 6 00:19:32.377721 systemd[1]: Stopped target sockets.target. Sep 6 00:19:32.378354 systemd[1]: iscsid.socket: Deactivated successfully. Sep 6 00:19:32.378408 systemd[1]: Closed iscsid.socket. Sep 6 00:19:32.378956 systemd[1]: ignition-setup.service: Deactivated successfully. Sep 6 00:19:32.378997 systemd[1]: Stopped ignition-setup.service. Sep 6 00:19:32.381903 systemd[1]: Stopping iscsiuio.service... Sep 6 00:19:32.383341 systemd[1]: iscsiuio.service: Deactivated successfully. Sep 6 00:19:32.383450 systemd[1]: Stopped iscsiuio.service. Sep 6 00:19:32.485000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-modules-load comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 00:19:32.383893 systemd[1]: Stopped target network.target. Sep 6 00:19:32.384353 systemd[1]: iscsiuio.socket: Deactivated successfully. Sep 6 00:19:32.501000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-udevd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 00:19:32.384388 systemd[1]: Closed iscsiuio.socket. Sep 6 00:19:32.385099 systemd[1]: Stopping systemd-networkd.service... Sep 6 00:19:32.385522 systemd[1]: Stopping systemd-resolved.service... Sep 6 00:19:32.426555 systemd[1]: systemd-resolved.service: Deactivated successfully. Sep 6 00:19:32.525000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-udev comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 00:19:32.426706 systemd[1]: Stopped systemd-resolved.service. Sep 6 00:19:32.434809 systemd-networkd[807]: eth0: DHCPv6 lease lost Sep 6 00:19:32.531000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-cmdline comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 00:19:32.534000 audit: BPF prog-id=9 op=UNLOAD Sep 6 00:19:32.539000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-cmdline-ask comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 00:19:32.437086 systemd[1]: systemd-networkd.service: Deactivated successfully. Sep 6 00:19:32.437335 systemd[1]: Stopped systemd-networkd.service. Sep 6 00:19:32.440922 systemd[1]: systemd-networkd.socket: Deactivated successfully. Sep 6 00:19:32.440968 systemd[1]: Closed systemd-networkd.socket. Sep 6 00:19:32.443303 systemd[1]: Stopping network-cleanup.service... Sep 6 00:19:32.447330 systemd[1]: parse-ip-for-networkd.service: Deactivated successfully. Sep 6 00:19:32.447804 systemd[1]: Stopped parse-ip-for-networkd.service. Sep 6 00:19:32.452183 systemd[1]: systemd-sysctl.service: Deactivated successfully. Sep 6 00:19:32.570000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-tmpfiles-setup-dev comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 00:19:32.452239 systemd[1]: Stopped systemd-sysctl.service. Sep 6 00:19:32.458175 systemd[1]: systemd-modules-load.service: Deactivated successfully. Sep 6 00:19:32.588680 kernel: hv_netvsc 7ced8d2d-b405-7ced-8d2d-b4057ced8d2d eth0: Data path switched from VF: enP30592s1 Sep 6 00:19:32.588000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=kmod-static-nodes comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 00:19:32.591000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-vconsole-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 00:19:32.458238 systemd[1]: Stopped systemd-modules-load.service. Sep 6 00:19:32.597000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-udevadm-cleanup-db comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 00:19:32.597000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-udevadm-cleanup-db comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 00:19:32.486282 systemd[1]: Stopping systemd-udevd.service... Sep 6 00:19:32.495263 systemd[1]: run-credentials-systemd\x2dsysctl.service.mount: Deactivated successfully. Sep 6 00:19:32.496669 systemd[1]: sysroot-boot.mount: Deactivated successfully. Sep 6 00:19:32.497296 systemd[1]: systemd-udevd.service: Deactivated successfully. Sep 6 00:19:32.497422 systemd[1]: Stopped systemd-udevd.service. Sep 6 00:19:32.618000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=network-cleanup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 00:19:32.506514 systemd[1]: systemd-udevd-control.socket: Deactivated successfully. Sep 6 00:19:32.506564 systemd[1]: Closed systemd-udevd-control.socket. Sep 6 00:19:32.511962 systemd[1]: systemd-udevd-kernel.socket: Deactivated successfully. Sep 6 00:19:32.512005 systemd[1]: Closed systemd-udevd-kernel.socket. Sep 6 00:19:32.518332 systemd[1]: dracut-pre-udev.service: Deactivated successfully. Sep 6 00:19:32.518408 systemd[1]: Stopped dracut-pre-udev.service. Sep 6 00:19:32.527065 systemd[1]: dracut-cmdline.service: Deactivated successfully. Sep 6 00:19:32.527223 systemd[1]: Stopped dracut-cmdline.service. Sep 6 00:19:32.534293 systemd[1]: dracut-cmdline-ask.service: Deactivated successfully. Sep 6 00:19:32.534371 systemd[1]: Stopped dracut-cmdline-ask.service. Sep 6 00:19:32.553260 systemd[1]: Starting initrd-udevadm-cleanup-db.service... Sep 6 00:19:32.564600 systemd[1]: systemd-tmpfiles-setup-dev.service: Deactivated successfully. Sep 6 00:19:32.564700 systemd[1]: Stopped systemd-tmpfiles-setup-dev.service. Sep 6 00:19:32.570839 systemd[1]: kmod-static-nodes.service: Deactivated successfully. Sep 6 00:19:32.573156 systemd[1]: Stopped kmod-static-nodes.service. Sep 6 00:19:32.588754 systemd[1]: systemd-vconsole-setup.service: Deactivated successfully. Sep 6 00:19:32.588849 systemd[1]: Stopped systemd-vconsole-setup.service. Sep 6 00:19:32.593024 systemd[1]: run-credentials-systemd\x2dtmpfiles\x2dsetup\x2ddev.service.mount: Deactivated successfully. Sep 6 00:19:32.593632 systemd[1]: initrd-udevadm-cleanup-db.service: Deactivated successfully. Sep 6 00:19:32.593735 systemd[1]: Finished initrd-udevadm-cleanup-db.service. Sep 6 00:19:32.612101 systemd[1]: network-cleanup.service: Deactivated successfully. Sep 6 00:19:32.612273 systemd[1]: Stopped network-cleanup.service. Sep 6 00:19:33.036456 systemd[1]: sysroot-boot.service: Deactivated successfully. Sep 6 00:19:33.040000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=sysroot-boot comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 00:19:33.042000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-setup-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 00:19:33.036590 systemd[1]: Stopped sysroot-boot.service. Sep 6 00:19:33.040494 systemd[1]: Reached target initrd-switch-root.target. Sep 6 00:19:33.041830 systemd[1]: initrd-setup-root.service: Deactivated successfully. Sep 6 00:19:33.041887 systemd[1]: Stopped initrd-setup-root.service. Sep 6 00:19:33.043372 systemd[1]: Starting initrd-switch-root.service... Sep 6 00:19:33.056448 systemd[1]: Switching root. Sep 6 00:19:33.088897 systemd-journald[183]: Journal stopped Sep 6 00:19:45.695497 systemd-journald[183]: Received SIGTERM from PID 1 (systemd). Sep 6 00:19:45.695529 kernel: SELinux: Class mctp_socket not defined in policy. Sep 6 00:19:45.695541 kernel: SELinux: Class anon_inode not defined in policy. Sep 6 00:19:45.695552 kernel: SELinux: the above unknown classes and permissions will be allowed Sep 6 00:19:45.695562 kernel: SELinux: policy capability network_peer_controls=1 Sep 6 00:19:45.695571 kernel: SELinux: policy capability open_perms=1 Sep 6 00:19:45.695585 kernel: SELinux: policy capability extended_socket_class=1 Sep 6 00:19:45.695593 kernel: SELinux: policy capability always_check_network=0 Sep 6 00:19:45.695604 kernel: SELinux: policy capability cgroup_seclabel=1 Sep 6 00:19:45.695613 kernel: SELinux: policy capability nnp_nosuid_transition=1 Sep 6 00:19:45.695622 kernel: SELinux: policy capability genfs_seclabel_symlinks=0 Sep 6 00:19:45.695630 kernel: SELinux: policy capability ioctl_skip_cloexec=0 Sep 6 00:19:45.695639 systemd[1]: Successfully loaded SELinux policy in 307.425ms. Sep 6 00:19:45.695651 systemd[1]: Relabelled /dev, /dev/shm, /run, /sys/fs/cgroup in 22.635ms. Sep 6 00:19:45.695666 systemd[1]: systemd 252 running in system mode (+PAM +AUDIT +SELINUX -APPARMOR +IMA +SMACK +SECCOMP +GCRYPT -GNUTLS +OPENSSL -ACL +BLKID +CURL -ELFUTILS -FIDO2 +IDN2 -IDN +IPTC +KMOD +LIBCRYPTSETUP +LIBFDISK +PCRE2 -PWQUALITY -P11KIT -QRENCODE -TPM2 +BZIP2 +LZ4 +XZ +ZLIB +ZSTD -BPF_FRAMEWORK -XKBCOMMON +UTMP +SYSVINIT default-hierarchy=unified) Sep 6 00:19:45.695678 systemd[1]: Detected virtualization microsoft. Sep 6 00:19:45.695687 systemd[1]: Detected architecture x86-64. Sep 6 00:19:45.695698 systemd[1]: Detected first boot. Sep 6 00:19:45.695711 systemd[1]: Hostname set to . Sep 6 00:19:45.695721 systemd[1]: Initializing machine ID from random generator. Sep 6 00:19:45.695733 kernel: kauditd_printk_skb: 36 callbacks suppressed Sep 6 00:19:45.695742 kernel: audit: type=1400 audit(1757117975.880:83): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=1 Sep 6 00:19:45.695751 kernel: audit: type=1400 audit(1757117975.880:84): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=1 Sep 6 00:19:45.695764 kernel: audit: type=1334 audit(1757117975.906:85): prog-id=10 op=LOAD Sep 6 00:19:45.695773 kernel: audit: type=1334 audit(1757117975.907:86): prog-id=10 op=UNLOAD Sep 6 00:19:45.695785 kernel: audit: type=1334 audit(1757117975.924:87): prog-id=11 op=LOAD Sep 6 00:19:45.695793 kernel: audit: type=1334 audit(1757117975.924:88): prog-id=11 op=UNLOAD Sep 6 00:19:45.695805 kernel: SELinux: Context system_u:object_r:container_file_t:s0:c1022,c1023 is not valid (left unmapped). Sep 6 00:19:45.695815 kernel: audit: type=1400 audit(1757117977.204:89): avc: denied { associate } for pid=1039 comm="torcx-generator" name="docker" dev="tmpfs" ino=2 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:tmpfs_t:s0 tclass=filesystem permissive=1 srawcon="system_u:object_r:container_file_t:s0:c1022,c1023" Sep 6 00:19:45.695827 kernel: audit: type=1300 audit(1757117977.204:89): arch=c000003e syscall=188 success=yes exit=0 a0=c00018a7cc a1=c00018ea80 a2=c00019ccc0 a3=32 items=0 ppid=1022 pid=1039 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="torcx-generator" exe="/usr/lib/systemd/system-generators/torcx-generator" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:19:45.695838 kernel: audit: type=1327 audit(1757117977.204:89): proctitle=2F7573722F6C69622F73797374656D642F73797374656D2D67656E657261746F72732F746F7263782D67656E657261746F72002F72756E2F73797374656D642F67656E657261746F72002F72756E2F73797374656D642F67656E657261746F722E6561726C79002F72756E2F73797374656D642F67656E657261746F722E6C61 Sep 6 00:19:45.695849 kernel: audit: type=1400 audit(1757117977.214:90): avc: denied { associate } for pid=1039 comm="torcx-generator" name="lib" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:tmpfs_t:s0 tclass=filesystem permissive=1 Sep 6 00:19:45.695859 systemd[1]: Populated /etc with preset unit settings. Sep 6 00:19:45.695873 systemd[1]: /usr/lib/systemd/system/locksmithd.service:8: Unit uses CPUShares=; please use CPUWeight= instead. Support for CPUShares= will be removed soon. Sep 6 00:19:45.695885 systemd[1]: /usr/lib/systemd/system/locksmithd.service:9: Unit uses MemoryLimit=; please use MemoryMax= instead. Support for MemoryLimit= will be removed soon. Sep 6 00:19:45.695899 systemd[1]: /run/systemd/system/docker.socket:8: ListenStream= references a path below legacy directory /var/run/, updating /var/run/docker.sock → /run/docker.sock; please update the unit file accordingly. Sep 6 00:19:45.695909 kernel: kauditd_printk_skb: 5 callbacks suppressed Sep 6 00:19:45.695917 kernel: audit: type=1334 audit(1757117985.023:91): prog-id=12 op=LOAD Sep 6 00:19:45.695925 kernel: audit: type=1334 audit(1757117985.023:92): prog-id=3 op=UNLOAD Sep 6 00:19:45.695941 kernel: audit: type=1334 audit(1757117985.032:93): prog-id=13 op=LOAD Sep 6 00:19:45.695953 kernel: audit: type=1334 audit(1757117985.039:94): prog-id=14 op=LOAD Sep 6 00:19:45.695963 kernel: audit: type=1334 audit(1757117985.039:95): prog-id=4 op=UNLOAD Sep 6 00:19:45.695975 kernel: audit: type=1334 audit(1757117985.039:96): prog-id=5 op=UNLOAD Sep 6 00:19:45.695984 kernel: audit: type=1334 audit(1757117985.047:97): prog-id=15 op=LOAD Sep 6 00:19:45.695997 kernel: audit: type=1334 audit(1757117985.047:98): prog-id=12 op=UNLOAD Sep 6 00:19:45.696006 kernel: audit: type=1334 audit(1757117985.053:99): prog-id=16 op=LOAD Sep 6 00:19:45.696015 kernel: audit: type=1334 audit(1757117985.079:100): prog-id=17 op=LOAD Sep 6 00:19:45.696024 systemd[1]: initrd-switch-root.service: Deactivated successfully. Sep 6 00:19:45.696040 systemd[1]: Stopped initrd-switch-root.service. Sep 6 00:19:45.696054 systemd[1]: systemd-journald.service: Scheduled restart job, restart counter is at 1. Sep 6 00:19:45.696065 systemd[1]: Created slice system-addon\x2dconfig.slice. Sep 6 00:19:45.696078 systemd[1]: Created slice system-addon\x2drun.slice. Sep 6 00:19:45.696087 systemd[1]: Created slice system-getty.slice. Sep 6 00:19:45.696097 systemd[1]: Created slice system-modprobe.slice. Sep 6 00:19:45.696107 systemd[1]: Created slice system-serial\x2dgetty.slice. Sep 6 00:19:45.696123 systemd[1]: Created slice system-system\x2dcloudinit.slice. Sep 6 00:19:45.696153 systemd[1]: Created slice system-systemd\x2dfsck.slice. Sep 6 00:19:45.696166 systemd[1]: Created slice user.slice. Sep 6 00:19:45.696176 systemd[1]: Started systemd-ask-password-console.path. Sep 6 00:19:45.696187 systemd[1]: Started systemd-ask-password-wall.path. Sep 6 00:19:45.696199 systemd[1]: Set up automount boot.automount. Sep 6 00:19:45.696210 systemd[1]: Set up automount proc-sys-fs-binfmt_misc.automount. Sep 6 00:19:45.696223 systemd[1]: Stopped target initrd-switch-root.target. Sep 6 00:19:45.696236 systemd[1]: Stopped target initrd-fs.target. Sep 6 00:19:45.696249 systemd[1]: Stopped target initrd-root-fs.target. Sep 6 00:19:45.696262 systemd[1]: Reached target integritysetup.target. Sep 6 00:19:45.696272 systemd[1]: Reached target remote-cryptsetup.target. Sep 6 00:19:45.696285 systemd[1]: Reached target remote-fs.target. Sep 6 00:19:45.696296 systemd[1]: Reached target slices.target. Sep 6 00:19:45.696308 systemd[1]: Reached target swap.target. Sep 6 00:19:45.696319 systemd[1]: Reached target torcx.target. Sep 6 00:19:45.696333 systemd[1]: Reached target veritysetup.target. Sep 6 00:19:45.696348 systemd[1]: Listening on systemd-coredump.socket. Sep 6 00:19:45.696363 systemd[1]: Listening on systemd-initctl.socket. Sep 6 00:19:45.696376 systemd[1]: Listening on systemd-networkd.socket. Sep 6 00:19:45.696391 systemd[1]: Listening on systemd-udevd-control.socket. Sep 6 00:19:45.696410 systemd[1]: Listening on systemd-udevd-kernel.socket. Sep 6 00:19:45.696425 systemd[1]: Listening on systemd-userdbd.socket. Sep 6 00:19:45.696439 systemd[1]: Mounting dev-hugepages.mount... Sep 6 00:19:45.696453 systemd[1]: Mounting dev-mqueue.mount... Sep 6 00:19:45.696467 systemd[1]: Mounting media.mount... Sep 6 00:19:45.696483 systemd[1]: proc-xen.mount was skipped because of an unmet condition check (ConditionVirtualization=xen). Sep 6 00:19:45.696498 systemd[1]: Mounting sys-kernel-debug.mount... Sep 6 00:19:45.696513 systemd[1]: Mounting sys-kernel-tracing.mount... Sep 6 00:19:45.696530 systemd[1]: Mounting tmp.mount... Sep 6 00:19:45.696548 systemd[1]: Starting flatcar-tmpfiles.service... Sep 6 00:19:45.696563 systemd[1]: ignition-delete-config.service was skipped because no trigger condition checks were met. Sep 6 00:19:45.696579 systemd[1]: Starting kmod-static-nodes.service... Sep 6 00:19:45.696593 systemd[1]: Starting modprobe@configfs.service... Sep 6 00:19:45.696607 systemd[1]: Starting modprobe@dm_mod.service... Sep 6 00:19:45.696622 systemd[1]: Starting modprobe@drm.service... Sep 6 00:19:45.696633 systemd[1]: Starting modprobe@efi_pstore.service... Sep 6 00:19:45.696646 systemd[1]: Starting modprobe@fuse.service... Sep 6 00:19:45.696657 systemd[1]: Starting modprobe@loop.service... Sep 6 00:19:45.696673 systemd[1]: setup-nsswitch.service was skipped because of an unmet condition check (ConditionPathExists=!/etc/nsswitch.conf). Sep 6 00:19:45.696684 systemd[1]: systemd-fsck-root.service: Deactivated successfully. Sep 6 00:19:45.696697 systemd[1]: Stopped systemd-fsck-root.service. Sep 6 00:19:45.696709 systemd[1]: systemd-fsck-usr.service: Deactivated successfully. Sep 6 00:19:45.696723 systemd[1]: Stopped systemd-fsck-usr.service. Sep 6 00:19:45.696735 systemd[1]: Stopped systemd-journald.service. Sep 6 00:19:45.696746 kernel: loop: module loaded Sep 6 00:19:45.696755 systemd[1]: Starting systemd-journald.service... Sep 6 00:19:45.696768 kernel: fuse: init (API version 7.34) Sep 6 00:19:45.696782 systemd[1]: Starting systemd-modules-load.service... Sep 6 00:19:45.696794 systemd[1]: Starting systemd-network-generator.service... Sep 6 00:19:45.696804 systemd[1]: Starting systemd-remount-fs.service... Sep 6 00:19:45.696817 systemd[1]: Starting systemd-udev-trigger.service... Sep 6 00:19:45.696829 systemd[1]: verity-setup.service: Deactivated successfully. Sep 6 00:19:45.696841 systemd[1]: Stopped verity-setup.service. Sep 6 00:19:45.696851 systemd[1]: xenserver-pv-version.service was skipped because of an unmet condition check (ConditionVirtualization=xen). Sep 6 00:19:45.696861 systemd[1]: Mounted dev-hugepages.mount. Sep 6 00:19:45.696870 systemd[1]: Mounted dev-mqueue.mount. Sep 6 00:19:45.696882 systemd[1]: Mounted media.mount. Sep 6 00:19:45.696905 systemd-journald[1149]: Journal started Sep 6 00:19:45.696958 systemd-journald[1149]: Runtime Journal (/run/log/journal/3844bcb9f6c04c9091548136d6bbec0e) is 8.0M, max 159.0M, 151.0M free. Sep 6 00:19:35.292000 audit: MAC_POLICY_LOAD auid=4294967295 ses=4294967295 lsm=selinux res=1 Sep 6 00:19:35.880000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=1 Sep 6 00:19:35.880000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=1 Sep 6 00:19:35.906000 audit: BPF prog-id=10 op=LOAD Sep 6 00:19:35.907000 audit: BPF prog-id=10 op=UNLOAD Sep 6 00:19:35.924000 audit: BPF prog-id=11 op=LOAD Sep 6 00:19:35.924000 audit: BPF prog-id=11 op=UNLOAD Sep 6 00:19:37.204000 audit[1039]: AVC avc: denied { associate } for pid=1039 comm="torcx-generator" name="docker" dev="tmpfs" ino=2 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:tmpfs_t:s0 tclass=filesystem permissive=1 srawcon="system_u:object_r:container_file_t:s0:c1022,c1023" Sep 6 00:19:37.204000 audit[1039]: SYSCALL arch=c000003e syscall=188 success=yes exit=0 a0=c00018a7cc a1=c00018ea80 a2=c00019ccc0 a3=32 items=0 ppid=1022 pid=1039 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="torcx-generator" exe="/usr/lib/systemd/system-generators/torcx-generator" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:19:37.204000 audit: PROCTITLE proctitle=2F7573722F6C69622F73797374656D642F73797374656D2D67656E657261746F72732F746F7263782D67656E657261746F72002F72756E2F73797374656D642F67656E657261746F72002F72756E2F73797374656D642F67656E657261746F722E6561726C79002F72756E2F73797374656D642F67656E657261746F722E6C61 Sep 6 00:19:37.214000 audit[1039]: AVC avc: denied { associate } for pid=1039 comm="torcx-generator" name="lib" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:tmpfs_t:s0 tclass=filesystem permissive=1 Sep 6 00:19:37.214000 audit[1039]: SYSCALL arch=c000003e syscall=258 success=yes exit=0 a0=ffffffffffffff9c a1=c00018a8a5 a2=1ed a3=0 items=2 ppid=1022 pid=1039 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="torcx-generator" exe="/usr/lib/systemd/system-generators/torcx-generator" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:19:37.214000 audit: CWD cwd="/" Sep 6 00:19:37.214000 audit: PATH item=0 name=(null) inode=2 dev=00:1c mode=040755 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:unlabeled_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Sep 6 00:19:37.214000 audit: PATH item=1 name=(null) inode=3 dev=00:1c mode=040755 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:unlabeled_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Sep 6 00:19:37.214000 audit: PROCTITLE proctitle=2F7573722F6C69622F73797374656D642F73797374656D2D67656E657261746F72732F746F7263782D67656E657261746F72002F72756E2F73797374656D642F67656E657261746F72002F72756E2F73797374656D642F67656E657261746F722E6561726C79002F72756E2F73797374656D642F67656E657261746F722E6C61 Sep 6 00:19:45.023000 audit: BPF prog-id=12 op=LOAD Sep 6 00:19:45.023000 audit: BPF prog-id=3 op=UNLOAD Sep 6 00:19:45.032000 audit: BPF prog-id=13 op=LOAD Sep 6 00:19:45.039000 audit: BPF prog-id=14 op=LOAD Sep 6 00:19:45.039000 audit: BPF prog-id=4 op=UNLOAD Sep 6 00:19:45.039000 audit: BPF prog-id=5 op=UNLOAD Sep 6 00:19:45.047000 audit: BPF prog-id=15 op=LOAD Sep 6 00:19:45.047000 audit: BPF prog-id=12 op=UNLOAD Sep 6 00:19:45.053000 audit: BPF prog-id=16 op=LOAD Sep 6 00:19:45.079000 audit: BPF prog-id=17 op=LOAD Sep 6 00:19:45.079000 audit: BPF prog-id=13 op=UNLOAD Sep 6 00:19:45.079000 audit: BPF prog-id=14 op=UNLOAD Sep 6 00:19:45.080000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-journald comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 00:19:45.107000 audit: BPF prog-id=15 op=UNLOAD Sep 6 00:19:45.115000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=initrd-switch-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 00:19:45.115000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=initrd-switch-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 00:19:45.549000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-fsck-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 00:19:45.566000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-fsck-usr comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 00:19:45.573000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-journald comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 00:19:45.573000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-journald comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 00:19:45.575000 audit: BPF prog-id=18 op=LOAD Sep 6 00:19:45.578000 audit: BPF prog-id=19 op=LOAD Sep 6 00:19:45.578000 audit: BPF prog-id=20 op=LOAD Sep 6 00:19:45.578000 audit: BPF prog-id=16 op=UNLOAD Sep 6 00:19:45.578000 audit: BPF prog-id=17 op=UNLOAD Sep 6 00:19:45.667000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=verity-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 00:19:45.692000 audit: CONFIG_CHANGE op=set audit_enabled=1 old=1 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 res=1 Sep 6 00:19:45.692000 audit[1149]: SYSCALL arch=c000003e syscall=46 success=yes exit=60 a0=3 a1=7ffd8661ee30 a2=4000 a3=7ffd8661eecc items=0 ppid=1 pid=1149 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="systemd-journal" exe="/usr/lib/systemd/systemd-journald" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:19:45.692000 audit: PROCTITLE proctitle="/usr/lib/systemd/systemd-journald" Sep 6 00:19:45.022051 systemd[1]: Queued start job for default target multi-user.target. Sep 6 00:19:37.162038 /usr/lib/systemd/system-generators/torcx-generator[1039]: time="2025-09-06T00:19:37Z" level=debug msg="common configuration parsed" base_dir=/var/lib/torcx/ conf_dir=/etc/torcx/ run_dir=/run/torcx/ store_paths="[/usr/share/torcx/store /usr/share/oem/torcx/store/3510.3.8 /usr/share/oem/torcx/store /var/lib/torcx/store/3510.3.8 /var/lib/torcx/store]" Sep 6 00:19:45.022066 systemd[1]: Unnecessary job was removed for dev-sda6.device. Sep 6 00:19:37.175399 /usr/lib/systemd/system-generators/torcx-generator[1039]: time="2025-09-06T00:19:37Z" level=debug msg="profile found" name=docker-1.12-no path=/usr/share/torcx/profiles/docker-1.12-no.json Sep 6 00:19:45.080357 systemd[1]: systemd-journald.service: Deactivated successfully. Sep 6 00:19:37.175428 /usr/lib/systemd/system-generators/torcx-generator[1039]: time="2025-09-06T00:19:37Z" level=debug msg="profile found" name=vendor path=/usr/share/torcx/profiles/vendor.json Sep 6 00:19:37.175477 /usr/lib/systemd/system-generators/torcx-generator[1039]: time="2025-09-06T00:19:37Z" level=info msg="no vendor profile selected by /etc/flatcar/docker-1.12" Sep 6 00:19:37.175488 /usr/lib/systemd/system-generators/torcx-generator[1039]: time="2025-09-06T00:19:37Z" level=debug msg="skipped missing lower profile" missing profile=oem Sep 6 00:19:37.175538 /usr/lib/systemd/system-generators/torcx-generator[1039]: time="2025-09-06T00:19:37Z" level=warning msg="no next profile: unable to read profile file: open /etc/torcx/next-profile: no such file or directory" Sep 6 00:19:37.175560 /usr/lib/systemd/system-generators/torcx-generator[1039]: time="2025-09-06T00:19:37Z" level=debug msg="apply configuration parsed" lower profiles (vendor/oem)="[vendor]" upper profile (user)= Sep 6 00:19:37.175806 /usr/lib/systemd/system-generators/torcx-generator[1039]: time="2025-09-06T00:19:37Z" level=debug msg="mounted tmpfs" target=/run/torcx/unpack Sep 6 00:19:37.175843 /usr/lib/systemd/system-generators/torcx-generator[1039]: time="2025-09-06T00:19:37Z" level=debug msg="profile found" name=docker-1.12-no path=/usr/share/torcx/profiles/docker-1.12-no.json Sep 6 00:19:37.175858 /usr/lib/systemd/system-generators/torcx-generator[1039]: time="2025-09-06T00:19:37Z" level=debug msg="profile found" name=vendor path=/usr/share/torcx/profiles/vendor.json Sep 6 00:19:37.190403 /usr/lib/systemd/system-generators/torcx-generator[1039]: time="2025-09-06T00:19:37Z" level=debug msg="new archive/reference added to cache" format=tgz name=docker path="/usr/share/torcx/store/docker:20.10.torcx.tgz" reference=20.10 Sep 6 00:19:37.190458 /usr/lib/systemd/system-generators/torcx-generator[1039]: time="2025-09-06T00:19:37Z" level=debug msg="new archive/reference added to cache" format=tgz name=docker path="/usr/share/torcx/store/docker:com.coreos.cl.torcx.tgz" reference=com.coreos.cl Sep 6 00:19:37.190503 /usr/lib/systemd/system-generators/torcx-generator[1039]: time="2025-09-06T00:19:37Z" level=info msg="store skipped" err="open /usr/share/oem/torcx/store/3510.3.8: no such file or directory" path=/usr/share/oem/torcx/store/3510.3.8 Sep 6 00:19:37.190523 /usr/lib/systemd/system-generators/torcx-generator[1039]: time="2025-09-06T00:19:37Z" level=info msg="store skipped" err="open /usr/share/oem/torcx/store: no such file or directory" path=/usr/share/oem/torcx/store Sep 6 00:19:37.190551 /usr/lib/systemd/system-generators/torcx-generator[1039]: time="2025-09-06T00:19:37Z" level=info msg="store skipped" err="open /var/lib/torcx/store/3510.3.8: no such file or directory" path=/var/lib/torcx/store/3510.3.8 Sep 6 00:19:37.190565 /usr/lib/systemd/system-generators/torcx-generator[1039]: time="2025-09-06T00:19:37Z" level=info msg="store skipped" err="open /var/lib/torcx/store: no such file or directory" path=/var/lib/torcx/store Sep 6 00:19:43.906359 /usr/lib/systemd/system-generators/torcx-generator[1039]: time="2025-09-06T00:19:43Z" level=debug msg="image unpacked" image=docker path=/run/torcx/unpack/docker reference=com.coreos.cl Sep 6 00:19:43.906620 /usr/lib/systemd/system-generators/torcx-generator[1039]: time="2025-09-06T00:19:43Z" level=debug msg="binaries propagated" assets="[/bin/containerd /bin/containerd-shim /bin/ctr /bin/docker /bin/docker-containerd /bin/docker-containerd-shim /bin/docker-init /bin/docker-proxy /bin/docker-runc /bin/dockerd /bin/runc /bin/tini]" image=docker path=/run/torcx/unpack/docker reference=com.coreos.cl Sep 6 00:19:43.906861 /usr/lib/systemd/system-generators/torcx-generator[1039]: time="2025-09-06T00:19:43Z" level=debug msg="networkd units propagated" assets="[/lib/systemd/network/50-docker.network /lib/systemd/network/90-docker-veth.network]" image=docker path=/run/torcx/unpack/docker reference=com.coreos.cl Sep 6 00:19:43.907370 /usr/lib/systemd/system-generators/torcx-generator[1039]: time="2025-09-06T00:19:43Z" level=debug msg="systemd units propagated" assets="[/lib/systemd/system/containerd.service /lib/systemd/system/docker.service /lib/systemd/system/docker.socket /lib/systemd/system/sockets.target.wants /lib/systemd/system/multi-user.target.wants]" image=docker path=/run/torcx/unpack/docker reference=com.coreos.cl Sep 6 00:19:43.907445 /usr/lib/systemd/system-generators/torcx-generator[1039]: time="2025-09-06T00:19:43Z" level=debug msg="profile applied" sealed profile=/run/torcx/profile.json upper profile= Sep 6 00:19:43.907520 /usr/lib/systemd/system-generators/torcx-generator[1039]: time="2025-09-06T00:19:43Z" level=debug msg="system state sealed" content="[TORCX_LOWER_PROFILES=\"vendor\" TORCX_UPPER_PROFILE=\"\" TORCX_PROFILE_PATH=\"/run/torcx/profile.json\" TORCX_BINDIR=\"/run/torcx/bin\" TORCX_UNPACKDIR=\"/run/torcx/unpack\"]" path=/run/metadata/torcx Sep 6 00:19:45.710697 systemd[1]: Started systemd-journald.service. Sep 6 00:19:45.714000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-journald comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 00:19:45.714977 systemd[1]: Mounted sys-kernel-debug.mount. Sep 6 00:19:45.719011 systemd[1]: Mounted sys-kernel-tracing.mount. Sep 6 00:19:45.723096 systemd[1]: Mounted tmp.mount. Sep 6 00:19:45.727012 systemd[1]: Finished flatcar-tmpfiles.service. Sep 6 00:19:45.731000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=flatcar-tmpfiles comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 00:19:45.731592 systemd[1]: Finished kmod-static-nodes.service. Sep 6 00:19:45.735000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kmod-static-nodes comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 00:19:45.736077 systemd[1]: modprobe@configfs.service: Deactivated successfully. Sep 6 00:19:45.736337 systemd[1]: Finished modprobe@configfs.service. Sep 6 00:19:45.740000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@configfs comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 00:19:45.740000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@configfs comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 00:19:45.741171 systemd[1]: modprobe@dm_mod.service: Deactivated successfully. Sep 6 00:19:45.741358 systemd[1]: Finished modprobe@dm_mod.service. Sep 6 00:19:45.745000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@dm_mod comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 00:19:45.745000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@dm_mod comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 00:19:45.746445 systemd[1]: modprobe@drm.service: Deactivated successfully. Sep 6 00:19:45.746800 systemd[1]: Finished modprobe@drm.service. Sep 6 00:19:45.750000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@drm comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 00:19:45.750000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@drm comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 00:19:45.751641 systemd[1]: modprobe@efi_pstore.service: Deactivated successfully. Sep 6 00:19:45.751982 systemd[1]: Finished modprobe@efi_pstore.service. Sep 6 00:19:45.757000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@efi_pstore comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 00:19:45.757000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@efi_pstore comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 00:19:45.762000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@fuse comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 00:19:45.762000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@fuse comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 00:19:45.758589 systemd[1]: modprobe@fuse.service: Deactivated successfully. Sep 6 00:19:45.768000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@loop comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 00:19:45.768000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@loop comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 00:19:45.758904 systemd[1]: Finished modprobe@fuse.service. Sep 6 00:19:45.762671 systemd[1]: modprobe@loop.service: Deactivated successfully. Sep 6 00:19:45.772000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-modules-load comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 00:19:45.762928 systemd[1]: Finished modprobe@loop.service. Sep 6 00:19:45.768725 systemd[1]: Finished systemd-modules-load.service. Sep 6 00:19:45.773726 systemd[1]: Finished systemd-network-generator.service. Sep 6 00:19:45.778000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-network-generator comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 00:19:45.779447 systemd[1]: Finished systemd-remount-fs.service. Sep 6 00:19:45.783000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-remount-fs comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 00:19:45.784415 systemd[1]: Reached target network-pre.target. Sep 6 00:19:45.791236 systemd[1]: Mounting sys-fs-fuse-connections.mount... Sep 6 00:19:45.796823 systemd[1]: Mounting sys-kernel-config.mount... Sep 6 00:19:45.800089 systemd[1]: remount-root.service was skipped because of an unmet condition check (ConditionPathIsReadWrite=!/). Sep 6 00:19:45.815252 systemd[1]: Starting systemd-hwdb-update.service... Sep 6 00:19:45.820994 systemd[1]: Starting systemd-journal-flush.service... Sep 6 00:19:45.824627 systemd[1]: systemd-pstore.service was skipped because of an unmet condition check (ConditionDirectoryNotEmpty=/sys/fs/pstore). Sep 6 00:19:45.826445 systemd[1]: Starting systemd-random-seed.service... Sep 6 00:19:45.829559 systemd[1]: systemd-repart.service was skipped because no trigger condition checks were met. Sep 6 00:19:45.831485 systemd[1]: Starting systemd-sysctl.service... Sep 6 00:19:45.837332 systemd[1]: Starting systemd-sysusers.service... Sep 6 00:19:45.842503 systemd[1]: Finished systemd-udev-trigger.service. Sep 6 00:19:45.846000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-udev-trigger comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 00:19:45.846360 systemd[1]: Mounted sys-fs-fuse-connections.mount. Sep 6 00:19:45.849690 systemd[1]: Mounted sys-kernel-config.mount. Sep 6 00:19:45.855482 systemd[1]: Starting systemd-udev-settle.service... Sep 6 00:19:45.870897 systemd-journald[1149]: Time spent on flushing to /var/log/journal/3844bcb9f6c04c9091548136d6bbec0e is 36.173ms for 1172 entries. Sep 6 00:19:45.870897 systemd-journald[1149]: System Journal (/var/log/journal/3844bcb9f6c04c9091548136d6bbec0e) is 8.0M, max 2.6G, 2.6G free. Sep 6 00:19:45.962003 systemd-journald[1149]: Received client request to flush runtime journal. Sep 6 00:19:45.889000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-random-seed comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 00:19:45.945000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-sysctl comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 00:19:45.886673 systemd[1]: Finished systemd-random-seed.service. Sep 6 00:19:45.962569 udevadm[1163]: systemd-udev-settle.service is deprecated. Please fix lvm2-activation-early.service, lvm2-activation.service not to pull it in. Sep 6 00:19:45.890294 systemd[1]: Reached target first-boot-complete.target. Sep 6 00:19:45.942233 systemd[1]: Finished systemd-sysctl.service. Sep 6 00:19:45.963427 systemd[1]: Finished systemd-journal-flush.service. Sep 6 00:19:45.966000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-journal-flush comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 00:19:46.295516 systemd[1]: Finished systemd-sysusers.service. Sep 6 00:19:46.298000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-sysusers comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 00:19:46.300557 systemd[1]: Starting systemd-tmpfiles-setup-dev.service... Sep 6 00:19:46.622229 systemd[1]: Finished systemd-tmpfiles-setup-dev.service. Sep 6 00:19:46.629000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-tmpfiles-setup-dev comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 00:19:47.042896 systemd[1]: Finished systemd-hwdb-update.service. Sep 6 00:19:47.046000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-hwdb-update comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 00:19:47.047000 audit: BPF prog-id=21 op=LOAD Sep 6 00:19:47.047000 audit: BPF prog-id=22 op=LOAD Sep 6 00:19:47.047000 audit: BPF prog-id=7 op=UNLOAD Sep 6 00:19:47.047000 audit: BPF prog-id=8 op=UNLOAD Sep 6 00:19:47.048389 systemd[1]: Starting systemd-udevd.service... Sep 6 00:19:47.069045 systemd-udevd[1168]: Using default interface naming scheme 'v252'. Sep 6 00:19:47.237839 systemd[1]: Started systemd-udevd.service. Sep 6 00:19:47.241000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-udevd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 00:19:47.242000 audit: BPF prog-id=23 op=LOAD Sep 6 00:19:47.245231 systemd[1]: Starting systemd-networkd.service... Sep 6 00:19:47.284378 systemd[1]: Condition check resulted in dev-ttyS0.device being skipped. Sep 6 00:19:47.322000 audit: BPF prog-id=24 op=LOAD Sep 6 00:19:47.322000 audit: BPF prog-id=25 op=LOAD Sep 6 00:19:47.322000 audit: BPF prog-id=26 op=LOAD Sep 6 00:19:47.324252 systemd[1]: Starting systemd-userdbd.service... Sep 6 00:19:47.380174 kernel: mousedev: PS/2 mouse device common for all mice Sep 6 00:19:47.406781 systemd[1]: Started systemd-userdbd.service. Sep 6 00:19:47.410000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-userdbd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 00:19:47.456895 kernel: hv_utils: Registering HyperV Utility Driver Sep 6 00:19:47.457022 kernel: hv_vmbus: registering driver hv_utils Sep 6 00:19:47.395000 audit[1181]: AVC avc: denied { confidentiality } for pid=1181 comm="(udev-worker)" lockdown_reason="use of tracefs" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=lockdown permissive=1 Sep 6 00:19:47.470156 kernel: hv_vmbus: registering driver hv_balloon Sep 6 00:19:47.476155 kernel: hv_vmbus: registering driver hyperv_fb Sep 6 00:19:47.503665 kernel: hv_balloon: Using Dynamic Memory protocol version 2.0 Sep 6 00:19:47.503777 kernel: hv_utils: Heartbeat IC version 3.0 Sep 6 00:19:47.503799 kernel: hv_utils: Shutdown IC version 3.2 Sep 6 00:19:47.514148 kernel: hyperv_fb: Synthvid Version major 3, minor 5 Sep 6 00:19:47.514242 kernel: hv_utils: TimeSync IC version 4.0 Sep 6 00:19:47.983052 kernel: hyperv_fb: Screen resolution: 1024x768, Color depth: 32, Frame buffer size: 8388608 Sep 6 00:19:47.993469 kernel: Console: switching to colour dummy device 80x25 Sep 6 00:19:48.005650 kernel: Console: switching to colour frame buffer device 128x48 Sep 6 00:19:47.395000 audit[1181]: SYSCALL arch=c000003e syscall=175 success=yes exit=0 a0=555d51b05630 a1=f83c a2=7f965566dbc5 a3=5 items=12 ppid=1168 pid=1181 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="(udev-worker)" exe="/usr/bin/udevadm" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:19:47.395000 audit: CWD cwd="/" Sep 6 00:19:47.395000 audit: PATH item=0 name=(null) inode=1238 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Sep 6 00:19:47.395000 audit: PATH item=1 name=(null) inode=15423 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Sep 6 00:19:47.395000 audit: PATH item=2 name=(null) inode=15423 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Sep 6 00:19:47.395000 audit: PATH item=3 name=(null) inode=15424 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Sep 6 00:19:47.395000 audit: PATH item=4 name=(null) inode=15423 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Sep 6 00:19:47.395000 audit: PATH item=5 name=(null) inode=15425 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Sep 6 00:19:47.395000 audit: PATH item=6 name=(null) inode=15423 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Sep 6 00:19:47.395000 audit: PATH item=7 name=(null) inode=15426 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Sep 6 00:19:47.395000 audit: PATH item=8 name=(null) inode=15423 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Sep 6 00:19:47.395000 audit: PATH item=9 name=(null) inode=15427 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Sep 6 00:19:47.395000 audit: PATH item=10 name=(null) inode=15423 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Sep 6 00:19:47.395000 audit: PATH item=11 name=(null) inode=15428 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Sep 6 00:19:47.395000 audit: PROCTITLE proctitle="(udev-worker)" Sep 6 00:19:48.050332 kernel: hv_storvsc f8b3781a-1e82-4818-a1c3-63d806ec15bb: tag#245 cmd 0x85 status: scsi 0x2 srb 0x6 hv 0xc0000001 Sep 6 00:19:48.134601 systemd-networkd[1174]: lo: Link UP Sep 6 00:19:48.134617 systemd-networkd[1174]: lo: Gained carrier Sep 6 00:19:48.135345 systemd-networkd[1174]: Enumeration completed Sep 6 00:19:48.135486 systemd[1]: Started systemd-networkd.service. Sep 6 00:19:48.140799 systemd[1]: Starting systemd-networkd-wait-online.service... Sep 6 00:19:48.138000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-networkd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 00:19:48.165456 systemd-networkd[1174]: eth0: Configuring with /usr/lib/systemd/network/zz-default.network. Sep 6 00:19:48.198373 systemd[1]: Found device dev-disk-by\x2dlabel-OEM.device. Sep 6 00:19:48.225468 kernel: mlx5_core 7780:00:02.0 enP30592s1: Link up Sep 6 00:19:48.225872 kernel: KVM: vmx: using Hyper-V Enlightened VMCS Sep 6 00:19:48.251966 kernel: hv_netvsc 7ced8d2d-b405-7ced-8d2d-b4057ced8d2d eth0: Data path switched to VF: enP30592s1 Sep 6 00:19:48.256231 systemd-networkd[1174]: enP30592s1: Link UP Sep 6 00:19:48.256516 systemd-networkd[1174]: eth0: Link UP Sep 6 00:19:48.256618 systemd-networkd[1174]: eth0: Gained carrier Sep 6 00:19:48.261708 systemd-networkd[1174]: enP30592s1: Gained carrier Sep 6 00:19:48.273505 systemd[1]: Finished systemd-udev-settle.service. Sep 6 00:19:48.276000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-udev-settle comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 00:19:48.278886 systemd[1]: Starting lvm2-activation-early.service... Sep 6 00:19:48.283281 systemd-networkd[1174]: eth0: DHCPv4 address 10.200.8.38/24, gateway 10.200.8.1 acquired from 168.63.129.16 Sep 6 00:19:48.552532 lvm[1247]: WARNING: Failed to connect to lvmetad. Falling back to device scanning. Sep 6 00:19:48.580230 systemd[1]: Finished lvm2-activation-early.service. Sep 6 00:19:48.583000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=lvm2-activation-early comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 00:19:48.583865 systemd[1]: Reached target cryptsetup.target. Sep 6 00:19:48.589081 systemd[1]: Starting lvm2-activation.service... Sep 6 00:19:48.596079 lvm[1248]: WARNING: Failed to connect to lvmetad. Falling back to device scanning. Sep 6 00:19:48.619269 systemd[1]: Finished lvm2-activation.service. Sep 6 00:19:48.621000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=lvm2-activation comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 00:19:48.622812 systemd[1]: Reached target local-fs-pre.target. Sep 6 00:19:48.625908 systemd[1]: var-lib-machines.mount was skipped because of an unmet condition check (ConditionPathExists=/var/lib/machines.raw). Sep 6 00:19:48.625988 systemd[1]: Reached target local-fs.target. Sep 6 00:19:48.628554 systemd[1]: Reached target machines.target. Sep 6 00:19:48.632696 systemd[1]: Starting ldconfig.service... Sep 6 00:19:48.635766 systemd[1]: systemd-binfmt.service was skipped because no trigger condition checks were met. Sep 6 00:19:48.635872 systemd[1]: systemd-boot-system-token.service was skipped because of an unmet condition check (ConditionPathExists=/sys/firmware/efi/efivars/LoaderFeatures-4a67b082-0a4c-41cf-b6c7-440b29bb8c4f). Sep 6 00:19:48.637355 systemd[1]: Starting systemd-boot-update.service... Sep 6 00:19:48.641977 systemd[1]: Starting systemd-fsck@dev-disk-by\x2dlabel-OEM.service... Sep 6 00:19:48.647659 systemd[1]: Starting systemd-machine-id-commit.service... Sep 6 00:19:48.652396 systemd[1]: Starting systemd-sysext.service... Sep 6 00:19:49.179529 systemd[1]: boot.automount: Got automount request for /boot, triggered by 1250 (bootctl) Sep 6 00:19:49.181359 systemd[1]: Starting systemd-fsck@dev-disk-by\x2dlabel-EFI\x2dSYSTEM.service... Sep 6 00:19:49.197516 systemd[1]: Unmounting usr-share-oem.mount... Sep 6 00:19:49.247000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-fsck@dev-disk-by\x2dlabel-OEM comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 00:19:49.245494 systemd[1]: Finished systemd-fsck@dev-disk-by\x2dlabel-OEM.service. Sep 6 00:19:49.291502 systemd[1]: usr-share-oem.mount: Deactivated successfully. Sep 6 00:19:49.291759 systemd[1]: Unmounted usr-share-oem.mount. Sep 6 00:19:49.322980 kernel: loop0: detected capacity change from 0 to 221472 Sep 6 00:19:49.368078 kernel: squashfs: version 4.0 (2009/01/31) Phillip Lougher Sep 6 00:19:49.386964 kernel: loop1: detected capacity change from 0 to 221472 Sep 6 00:19:49.392623 (sd-sysext)[1262]: Using extensions 'kubernetes'. Sep 6 00:19:49.393608 (sd-sysext)[1262]: Merged extensions into '/usr'. Sep 6 00:19:49.417071 systemd[1]: proc-xen.mount was skipped because of an unmet condition check (ConditionVirtualization=xen). Sep 6 00:19:49.419061 systemd[1]: Mounting usr-share-oem.mount... Sep 6 00:19:49.425792 systemd[1]: ignition-delete-config.service was skipped because no trigger condition checks were met. Sep 6 00:19:49.427889 systemd[1]: Starting modprobe@dm_mod.service... Sep 6 00:19:49.430984 systemd[1]: Starting modprobe@efi_pstore.service... Sep 6 00:19:49.434797 systemd[1]: Starting modprobe@loop.service... Sep 6 00:19:49.438560 systemd[1]: systemd-binfmt.service was skipped because no trigger condition checks were met. Sep 6 00:19:49.438780 systemd[1]: systemd-boot-system-token.service was skipped because of an unmet condition check (ConditionPathExists=/sys/firmware/efi/efivars/LoaderFeatures-4a67b082-0a4c-41cf-b6c7-440b29bb8c4f). Sep 6 00:19:49.439019 systemd[1]: xenserver-pv-version.service was skipped because of an unmet condition check (ConditionVirtualization=xen). Sep 6 00:19:49.441634 systemd[1]: modprobe@dm_mod.service: Deactivated successfully. Sep 6 00:19:49.441859 systemd[1]: Finished modprobe@dm_mod.service. Sep 6 00:19:49.441000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@dm_mod comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 00:19:49.441000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@dm_mod comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 00:19:49.443603 systemd[1]: modprobe@loop.service: Deactivated successfully. Sep 6 00:19:49.443888 systemd[1]: Finished modprobe@loop.service. Sep 6 00:19:49.441000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@loop comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 00:19:49.441000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@loop comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 00:19:49.444896 systemd[1]: systemd-repart.service was skipped because no trigger condition checks were met. Sep 6 00:19:49.447499 systemd[1]: modprobe@efi_pstore.service: Deactivated successfully. Sep 6 00:19:49.447657 systemd[1]: Finished modprobe@efi_pstore.service. Sep 6 00:19:49.451164 systemd[1]: systemd-pstore.service was skipped because of an unmet condition check (ConditionDirectoryNotEmpty=/sys/fs/pstore). Sep 6 00:19:49.450000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@efi_pstore comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 00:19:49.450000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@efi_pstore comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 00:19:49.461651 systemd[1]: Mounted usr-share-oem.mount. Sep 6 00:19:49.466529 systemd[1]: etc-machine\x2did.mount: Deactivated successfully. Sep 6 00:19:49.467377 systemd[1]: Finished systemd-machine-id-commit.service. Sep 6 00:19:49.470000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-machine-id-commit comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 00:19:49.471351 systemd[1]: Finished systemd-sysext.service. Sep 6 00:19:49.474000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-sysext comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 00:19:49.477029 systemd[1]: Starting ensure-sysext.service... Sep 6 00:19:49.479783 systemd[1]: Starting systemd-tmpfiles-setup.service... Sep 6 00:19:49.493856 systemd[1]: Reloading. Sep 6 00:19:49.500564 systemd-tmpfiles[1269]: /usr/lib/tmpfiles.d/legacy.conf:13: Duplicate line for path "/run/lock", ignoring. Sep 6 00:19:49.518371 systemd-tmpfiles[1269]: /usr/lib/tmpfiles.d/provision.conf:20: Duplicate line for path "/root", ignoring. Sep 6 00:19:49.535510 systemd-tmpfiles[1269]: /usr/lib/tmpfiles.d/systemd.conf:29: Duplicate line for path "/var/lib/systemd", ignoring. Sep 6 00:19:49.574768 /usr/lib/systemd/system-generators/torcx-generator[1288]: time="2025-09-06T00:19:49Z" level=debug msg="common configuration parsed" base_dir=/var/lib/torcx/ conf_dir=/etc/torcx/ run_dir=/run/torcx/ store_paths="[/usr/share/torcx/store /usr/share/oem/torcx/store/3510.3.8 /usr/share/oem/torcx/store /var/lib/torcx/store/3510.3.8 /var/lib/torcx/store]" Sep 6 00:19:49.574813 /usr/lib/systemd/system-generators/torcx-generator[1288]: time="2025-09-06T00:19:49Z" level=info msg="torcx already run" Sep 6 00:19:49.680802 systemd[1]: /usr/lib/systemd/system/locksmithd.service:8: Unit uses CPUShares=; please use CPUWeight= instead. Support for CPUShares= will be removed soon. Sep 6 00:19:49.680826 systemd[1]: /usr/lib/systemd/system/locksmithd.service:9: Unit uses MemoryLimit=; please use MemoryMax= instead. Support for MemoryLimit= will be removed soon. Sep 6 00:19:49.698328 systemd[1]: /run/systemd/system/docker.socket:8: ListenStream= references a path below legacy directory /var/run/, updating /var/run/docker.sock → /run/docker.sock; please update the unit file accordingly. Sep 6 00:19:49.766000 audit: BPF prog-id=27 op=LOAD Sep 6 00:19:49.766000 audit: BPF prog-id=18 op=UNLOAD Sep 6 00:19:49.767000 audit: BPF prog-id=28 op=LOAD Sep 6 00:19:49.767000 audit: BPF prog-id=29 op=LOAD Sep 6 00:19:49.767000 audit: BPF prog-id=19 op=UNLOAD Sep 6 00:19:49.767000 audit: BPF prog-id=20 op=UNLOAD Sep 6 00:19:49.768000 audit: BPF prog-id=30 op=LOAD Sep 6 00:19:49.768000 audit: BPF prog-id=24 op=UNLOAD Sep 6 00:19:49.768000 audit: BPF prog-id=31 op=LOAD Sep 6 00:19:49.768000 audit: BPF prog-id=32 op=LOAD Sep 6 00:19:49.768000 audit: BPF prog-id=25 op=UNLOAD Sep 6 00:19:49.768000 audit: BPF prog-id=26 op=UNLOAD Sep 6 00:19:49.769000 audit: BPF prog-id=33 op=LOAD Sep 6 00:19:49.769000 audit: BPF prog-id=23 op=UNLOAD Sep 6 00:19:49.770000 audit: BPF prog-id=34 op=LOAD Sep 6 00:19:49.770000 audit: BPF prog-id=35 op=LOAD Sep 6 00:19:49.770000 audit: BPF prog-id=21 op=UNLOAD Sep 6 00:19:49.770000 audit: BPF prog-id=22 op=UNLOAD Sep 6 00:19:49.785953 systemd[1]: proc-xen.mount was skipped because of an unmet condition check (ConditionVirtualization=xen). Sep 6 00:19:49.786233 systemd[1]: ignition-delete-config.service was skipped because no trigger condition checks were met. Sep 6 00:19:49.788403 systemd[1]: Starting modprobe@dm_mod.service... Sep 6 00:19:49.792437 systemd[1]: Starting modprobe@efi_pstore.service... Sep 6 00:19:49.796562 systemd[1]: Starting modprobe@loop.service... Sep 6 00:19:49.798487 systemd[1]: systemd-binfmt.service was skipped because no trigger condition checks were met. Sep 6 00:19:49.798887 systemd[1]: systemd-boot-system-token.service was skipped because of an unmet condition check (ConditionPathExists=/sys/firmware/efi/efivars/LoaderFeatures-4a67b082-0a4c-41cf-b6c7-440b29bb8c4f). Sep 6 00:19:49.799221 systemd[1]: xenserver-pv-version.service was skipped because of an unmet condition check (ConditionVirtualization=xen). Sep 6 00:19:49.800983 systemd[1]: modprobe@dm_mod.service: Deactivated successfully. Sep 6 00:19:49.801321 systemd[1]: Finished modprobe@dm_mod.service. Sep 6 00:19:49.802000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@dm_mod comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 00:19:49.802000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@dm_mod comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 00:19:49.808884 systemd[1]: modprobe@efi_pstore.service: Deactivated successfully. Sep 6 00:19:49.809079 systemd[1]: Finished modprobe@efi_pstore.service. Sep 6 00:19:49.809000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@efi_pstore comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 00:19:49.809000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@efi_pstore comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 00:19:49.810000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@loop comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 00:19:49.810000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@loop comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 00:19:49.811073 systemd[1]: modprobe@loop.service: Deactivated successfully. Sep 6 00:19:49.811198 systemd[1]: Finished modprobe@loop.service. Sep 6 00:19:49.812176 systemd[1]: proc-xen.mount was skipped because of an unmet condition check (ConditionVirtualization=xen). Sep 6 00:19:49.812464 systemd[1]: ignition-delete-config.service was skipped because no trigger condition checks were met. Sep 6 00:19:49.815397 systemd[1]: Starting modprobe@dm_mod.service... Sep 6 00:19:49.818677 systemd[1]: Starting modprobe@drm.service... Sep 6 00:19:49.820071 systemd[1]: systemd-binfmt.service was skipped because no trigger condition checks were met. Sep 6 00:19:49.820261 systemd[1]: systemd-boot-system-token.service was skipped because of an unmet condition check (ConditionPathExists=/sys/firmware/efi/efivars/LoaderFeatures-4a67b082-0a4c-41cf-b6c7-440b29bb8c4f). Sep 6 00:19:49.820426 systemd[1]: systemd-pstore.service was skipped because of an unmet condition check (ConditionDirectoryNotEmpty=/sys/fs/pstore). Sep 6 00:19:49.820569 systemd[1]: xenserver-pv-version.service was skipped because of an unmet condition check (ConditionVirtualization=xen). Sep 6 00:19:49.824230 systemd[1]: modprobe@drm.service: Deactivated successfully. Sep 6 00:19:49.824425 systemd[1]: Finished modprobe@drm.service. Sep 6 00:19:49.825000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@drm comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 00:19:49.825000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@drm comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 00:19:49.828000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=ensure-sysext comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 00:19:49.827516 systemd[1]: Finished ensure-sysext.service. Sep 6 00:19:49.830669 systemd[1]: modprobe@dm_mod.service: Deactivated successfully. Sep 6 00:19:49.830840 systemd[1]: Finished modprobe@dm_mod.service. Sep 6 00:19:49.831000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@dm_mod comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 00:19:49.831000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@dm_mod comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 00:19:49.832214 systemd[1]: systemd-repart.service was skipped because no trigger condition checks were met. Sep 6 00:19:49.919711 systemd-fsck[1258]: fsck.fat 4.2 (2021-01-31) Sep 6 00:19:49.919711 systemd-fsck[1258]: /dev/sda1: 790 files, 120761/258078 clusters Sep 6 00:19:49.922382 systemd[1]: Finished systemd-fsck@dev-disk-by\x2dlabel-EFI\x2dSYSTEM.service. Sep 6 00:19:49.925000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-fsck@dev-disk-by\x2dlabel-EFI\x2dSYSTEM comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 00:19:49.928407 systemd[1]: Mounting boot.mount... Sep 6 00:19:49.943838 systemd[1]: Mounted boot.mount. Sep 6 00:19:49.959652 systemd[1]: Finished systemd-boot-update.service. Sep 6 00:19:49.962000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-boot-update comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 00:19:50.218149 systemd-networkd[1174]: eth0: Gained IPv6LL Sep 6 00:19:50.223217 systemd[1]: Finished systemd-networkd-wait-online.service. Sep 6 00:19:50.227000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-networkd-wait-online comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 00:19:50.683145 systemd[1]: Finished systemd-tmpfiles-setup.service. Sep 6 00:19:50.687000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-tmpfiles-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 00:19:50.689268 systemd[1]: Starting audit-rules.service... Sep 6 00:19:50.691967 kernel: kauditd_printk_skb: 115 callbacks suppressed Sep 6 00:19:50.692043 kernel: audit: type=1130 audit(1757117990.687:199): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-tmpfiles-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 00:19:50.715180 systemd[1]: Starting clean-ca-certificates.service... Sep 6 00:19:50.720391 systemd[1]: Starting systemd-journal-catalog-update.service... Sep 6 00:19:50.736149 kernel: audit: type=1334 audit(1757117990.725:200): prog-id=36 op=LOAD Sep 6 00:19:50.725000 audit: BPF prog-id=36 op=LOAD Sep 6 00:19:50.734064 systemd[1]: Starting systemd-resolved.service... Sep 6 00:19:50.738000 audit: BPF prog-id=37 op=LOAD Sep 6 00:19:50.741066 systemd[1]: Starting systemd-timesyncd.service... Sep 6 00:19:50.749161 kernel: audit: type=1334 audit(1757117990.738:201): prog-id=37 op=LOAD Sep 6 00:19:50.751645 systemd[1]: Starting systemd-update-utmp.service... Sep 6 00:19:50.764000 audit[1372]: SYSTEM_BOOT pid=1372 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg=' comm="systemd-update-utmp" exe="/usr/lib/systemd/systemd-update-utmp" hostname=? addr=? terminal=? res=success' Sep 6 00:19:50.767941 systemd[1]: Finished systemd-update-utmp.service. Sep 6 00:19:50.786528 kernel: audit: type=1127 audit(1757117990.764:202): pid=1372 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg=' comm="systemd-update-utmp" exe="/usr/lib/systemd/systemd-update-utmp" hostname=? addr=? terminal=? res=success' Sep 6 00:19:50.786000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-update-utmp comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 00:19:50.801047 kernel: audit: type=1130 audit(1757117990.786:203): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-update-utmp comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 00:19:50.813000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=clean-ca-certificates comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 00:19:50.810080 systemd[1]: Finished clean-ca-certificates.service. Sep 6 00:19:50.814058 systemd[1]: update-ca-certificates.service was skipped because of an unmet condition check (ConditionPathIsSymbolicLink=!/etc/ssl/certs/ca-certificates.crt). Sep 6 00:19:50.829196 kernel: audit: type=1130 audit(1757117990.813:204): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=clean-ca-certificates comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 00:19:50.862000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-journal-catalog-update comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 00:19:50.859437 systemd[1]: Finished systemd-journal-catalog-update.service. Sep 6 00:19:50.880629 kernel: audit: type=1130 audit(1757117990.862:205): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-journal-catalog-update comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 00:19:50.900180 systemd[1]: Started systemd-timesyncd.service. Sep 6 00:19:50.903000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-timesyncd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 00:19:50.903802 systemd[1]: Reached target time-set.target. Sep 6 00:19:50.921784 kernel: audit: type=1130 audit(1757117990.903:206): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-timesyncd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 00:19:50.973395 systemd-resolved[1365]: Positive Trust Anchors: Sep 6 00:19:50.973413 systemd-resolved[1365]: . IN DS 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d Sep 6 00:19:50.973450 systemd-resolved[1365]: Negative trust anchors: home.arpa 10.in-addr.arpa 16.172.in-addr.arpa 17.172.in-addr.arpa 18.172.in-addr.arpa 19.172.in-addr.arpa 20.172.in-addr.arpa 21.172.in-addr.arpa 22.172.in-addr.arpa 23.172.in-addr.arpa 24.172.in-addr.arpa 25.172.in-addr.arpa 26.172.in-addr.arpa 27.172.in-addr.arpa 28.172.in-addr.arpa 29.172.in-addr.arpa 30.172.in-addr.arpa 31.172.in-addr.arpa 168.192.in-addr.arpa d.f.ip6.arpa corp home internal intranet lan local private test Sep 6 00:19:51.041000 audit: CONFIG_CHANGE auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op=add_rule key=(null) list=5 res=1 Sep 6 00:19:51.043109 systemd[1]: Finished audit-rules.service. Sep 6 00:19:51.044243 augenrules[1382]: No rules Sep 6 00:19:51.080835 kernel: audit: type=1305 audit(1757117991.041:207): auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op=add_rule key=(null) list=5 res=1 Sep 6 00:19:51.080998 kernel: audit: type=1300 audit(1757117991.041:207): arch=c000003e syscall=44 success=yes exit=1056 a0=3 a1=7ffebef57000 a2=420 a3=0 items=0 ppid=1361 pid=1382 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auditctl" exe="/usr/sbin/auditctl" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:19:51.041000 audit[1382]: SYSCALL arch=c000003e syscall=44 success=yes exit=1056 a0=3 a1=7ffebef57000 a2=420 a3=0 items=0 ppid=1361 pid=1382 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auditctl" exe="/usr/sbin/auditctl" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:19:51.078380 systemd-resolved[1365]: Using system hostname 'ci-3510.3.8-n-28804d0655'. Sep 6 00:19:51.041000 audit: PROCTITLE proctitle=2F7362696E2F617564697463746C002D52002F6574632F61756469742F61756469742E72756C6573 Sep 6 00:19:51.084023 systemd[1]: Started systemd-resolved.service. Sep 6 00:19:51.087018 systemd[1]: Reached target network.target. Sep 6 00:19:51.090257 systemd[1]: Reached target network-online.target. Sep 6 00:19:51.093309 systemd[1]: Reached target nss-lookup.target. Sep 6 00:19:51.131112 systemd-timesyncd[1368]: Contacted time server 193.1.8.106:123 (0.flatcar.pool.ntp.org). Sep 6 00:19:51.131287 systemd-timesyncd[1368]: Initial clock synchronization to Sat 2025-09-06 00:19:51.130781 UTC. Sep 6 00:19:56.090352 ldconfig[1249]: /sbin/ldconfig: /lib/ld.so.conf is not an ELF file - it has the wrong magic bytes at the start. Sep 6 00:19:56.098840 systemd[1]: Finished ldconfig.service. Sep 6 00:19:56.103578 systemd[1]: Starting systemd-update-done.service... Sep 6 00:19:56.128323 systemd[1]: Finished systemd-update-done.service. Sep 6 00:19:56.131641 systemd[1]: Reached target sysinit.target. Sep 6 00:19:56.134272 systemd[1]: Started motdgen.path. Sep 6 00:19:56.136380 systemd[1]: Started user-cloudinit@var-lib-flatcar\x2dinstall-user_data.path. Sep 6 00:19:56.140396 systemd[1]: Started logrotate.timer. Sep 6 00:19:56.142873 systemd[1]: Started mdadm.timer. Sep 6 00:19:56.144860 systemd[1]: Started systemd-tmpfiles-clean.timer. Sep 6 00:19:56.147890 systemd[1]: update-engine-stub.timer was skipped because of an unmet condition check (ConditionPathExists=/usr/.noupdate). Sep 6 00:19:56.147972 systemd[1]: Reached target paths.target. Sep 6 00:19:56.150086 systemd[1]: Reached target timers.target. Sep 6 00:19:56.153994 systemd[1]: Listening on dbus.socket. Sep 6 00:19:56.158153 systemd[1]: Starting docker.socket... Sep 6 00:19:56.164209 systemd[1]: Listening on sshd.socket. Sep 6 00:19:56.172436 systemd[1]: systemd-pcrphase-sysinit.service was skipped because of an unmet condition check (ConditionPathExists=/sys/firmware/efi/efivars/StubPcrKernelImage-4a67b082-0a4c-41cf-b6c7-440b29bb8c4f). Sep 6 00:19:56.173110 systemd[1]: Listening on docker.socket. Sep 6 00:19:56.175832 systemd[1]: Reached target sockets.target. Sep 6 00:19:56.178365 systemd[1]: Reached target basic.target. Sep 6 00:19:56.180834 systemd[1]: addon-config@usr-share-oem.service was skipped because no trigger condition checks were met. Sep 6 00:19:56.180887 systemd[1]: addon-run@usr-share-oem.service was skipped because no trigger condition checks were met. Sep 6 00:19:56.182292 systemd[1]: Starting containerd.service... Sep 6 00:19:56.186622 systemd[1]: Starting dbus.service... Sep 6 00:19:56.191111 systemd[1]: Starting enable-oem-cloudinit.service... Sep 6 00:19:56.195404 systemd[1]: Starting extend-filesystems.service... Sep 6 00:19:56.199695 systemd[1]: flatcar-setup-environment.service was skipped because of an unmet condition check (ConditionPathExists=/usr/share/oem/bin/flatcar-setup-environment). Sep 6 00:19:56.236470 systemd[1]: Starting kubelet.service... Sep 6 00:19:56.244867 systemd[1]: Starting motdgen.service... Sep 6 00:19:56.250256 systemd[1]: Started nvidia.service. Sep 6 00:19:56.257766 systemd[1]: Starting prepare-helm.service... Sep 6 00:19:56.264063 systemd[1]: Starting ssh-key-proc-cmdline.service... Sep 6 00:19:56.268489 systemd[1]: Starting sshd-keygen.service... Sep 6 00:19:56.277327 systemd[1]: Starting systemd-logind.service... Sep 6 00:19:56.281564 systemd[1]: systemd-pcrphase.service was skipped because of an unmet condition check (ConditionPathExists=/sys/firmware/efi/efivars/StubPcrKernelImage-4a67b082-0a4c-41cf-b6c7-440b29bb8c4f). Sep 6 00:19:56.281671 systemd[1]: tcsd.service was skipped because of an unmet condition check (ConditionPathExists=/dev/tpm0). Sep 6 00:19:56.282376 systemd[1]: cgroup compatibility translation between legacy and unified hierarchy settings activated. See cgroup-compat debug messages for details. Sep 6 00:19:56.284685 systemd[1]: Starting update-engine.service... Sep 6 00:19:56.293062 systemd[1]: Starting update-ssh-keys-after-ignition.service... Sep 6 00:19:56.304101 systemd[1]: ssh-key-proc-cmdline.service: Deactivated successfully. Sep 6 00:19:56.304377 systemd[1]: Finished ssh-key-proc-cmdline.service. Sep 6 00:19:56.329689 jq[1392]: false Sep 6 00:19:56.330075 systemd[1]: enable-oem-cloudinit.service: Skipped due to 'exec-condition'. Sep 6 00:19:56.330302 systemd[1]: Condition check resulted in enable-oem-cloudinit.service being skipped. Sep 6 00:19:56.330810 jq[1417]: true Sep 6 00:19:56.333154 systemd[1]: motdgen.service: Deactivated successfully. Sep 6 00:19:56.333409 systemd[1]: Finished motdgen.service. Sep 6 00:19:56.335066 extend-filesystems[1393]: Found loop1 Sep 6 00:19:56.338802 extend-filesystems[1393]: Found sda Sep 6 00:19:56.338802 extend-filesystems[1393]: Found sda1 Sep 6 00:19:56.338802 extend-filesystems[1393]: Found sda2 Sep 6 00:19:56.338802 extend-filesystems[1393]: Found sda3 Sep 6 00:19:56.338802 extend-filesystems[1393]: Found usr Sep 6 00:19:56.338802 extend-filesystems[1393]: Found sda4 Sep 6 00:19:56.338802 extend-filesystems[1393]: Found sda6 Sep 6 00:19:56.338802 extend-filesystems[1393]: Found sda7 Sep 6 00:19:56.338802 extend-filesystems[1393]: Found sda9 Sep 6 00:19:56.338802 extend-filesystems[1393]: Checking size of /dev/sda9 Sep 6 00:19:56.399949 jq[1423]: true Sep 6 00:19:56.403176 tar[1420]: linux-amd64/helm Sep 6 00:19:56.427687 env[1421]: time="2025-09-06T00:19:56.427619897Z" level=info msg="starting containerd" revision=92b3a9d6f1b3bcc6dc74875cfdea653fe39f09c2 version=1.6.16 Sep 6 00:19:56.466855 extend-filesystems[1393]: Old size kept for /dev/sda9 Sep 6 00:19:56.471323 extend-filesystems[1393]: Found sr0 Sep 6 00:19:56.477221 systemd[1]: extend-filesystems.service: Deactivated successfully. Sep 6 00:19:56.477468 systemd[1]: Finished extend-filesystems.service. Sep 6 00:19:56.494734 dbus-daemon[1391]: [system] SELinux support is enabled Sep 6 00:19:56.494997 systemd[1]: Started dbus.service. Sep 6 00:19:56.501411 systemd[1]: system-cloudinit@usr-share-oem-cloud\x2dconfig.yml.service was skipped because of an unmet condition check (ConditionFileNotEmpty=/usr/share/oem/cloud-config.yml). Sep 6 00:19:56.501457 systemd[1]: Reached target system-config.target. Sep 6 00:19:56.505163 systemd[1]: user-cloudinit-proc-cmdline.service was skipped because of an unmet condition check (ConditionKernelCommandLine=cloud-config-url). Sep 6 00:19:56.505192 systemd[1]: Reached target user-config.target. Sep 6 00:19:56.517461 systemd-logind[1407]: Watching system buttons on /dev/input/event0 (AT Translated Set 2 keyboard) Sep 6 00:19:56.521168 systemd-logind[1407]: New seat seat0. Sep 6 00:19:56.525808 systemd[1]: Started systemd-logind.service. Sep 6 00:19:56.587134 env[1421]: time="2025-09-06T00:19:56.587035736Z" level=info msg="loading plugin \"io.containerd.content.v1.content\"..." type=io.containerd.content.v1 Sep 6 00:19:56.587332 env[1421]: time="2025-09-06T00:19:56.587290833Z" level=info msg="loading plugin \"io.containerd.snapshotter.v1.aufs\"..." type=io.containerd.snapshotter.v1 Sep 6 00:19:56.599454 env[1421]: time="2025-09-06T00:19:56.599385515Z" level=info msg="skip loading plugin \"io.containerd.snapshotter.v1.aufs\"..." error="aufs is not supported (modprobe aufs failed: exit status 1 \"modprobe: FATAL: Module aufs not found in directory /lib/modules/5.15.190-flatcar\\n\"): skip plugin" type=io.containerd.snapshotter.v1 Sep 6 00:19:56.599454 env[1421]: time="2025-09-06T00:19:56.599449014Z" level=info msg="loading plugin \"io.containerd.snapshotter.v1.btrfs\"..." type=io.containerd.snapshotter.v1 Sep 6 00:19:56.599829 env[1421]: time="2025-09-06T00:19:56.599797811Z" level=info msg="skip loading plugin \"io.containerd.snapshotter.v1.btrfs\"..." error="path /var/lib/containerd/io.containerd.snapshotter.v1.btrfs (ext4) must be a btrfs filesystem to be used with the btrfs snapshotter: skip plugin" type=io.containerd.snapshotter.v1 Sep 6 00:19:56.599887 env[1421]: time="2025-09-06T00:19:56.599833411Z" level=info msg="loading plugin \"io.containerd.snapshotter.v1.devmapper\"..." type=io.containerd.snapshotter.v1 Sep 6 00:19:56.599887 env[1421]: time="2025-09-06T00:19:56.599857210Z" level=warning msg="failed to load plugin io.containerd.snapshotter.v1.devmapper" error="devmapper not configured" Sep 6 00:19:56.599887 env[1421]: time="2025-09-06T00:19:56.599874310Z" level=info msg="loading plugin \"io.containerd.snapshotter.v1.native\"..." type=io.containerd.snapshotter.v1 Sep 6 00:19:56.600041 env[1421]: time="2025-09-06T00:19:56.599992209Z" level=info msg="loading plugin \"io.containerd.snapshotter.v1.overlayfs\"..." type=io.containerd.snapshotter.v1 Sep 6 00:19:56.600312 env[1421]: time="2025-09-06T00:19:56.600285806Z" level=info msg="loading plugin \"io.containerd.snapshotter.v1.zfs\"..." type=io.containerd.snapshotter.v1 Sep 6 00:19:56.600534 env[1421]: time="2025-09-06T00:19:56.600501004Z" level=info msg="skip loading plugin \"io.containerd.snapshotter.v1.zfs\"..." error="path /var/lib/containerd/io.containerd.snapshotter.v1.zfs must be a zfs filesystem to be used with the zfs snapshotter: skip plugin" type=io.containerd.snapshotter.v1 Sep 6 00:19:56.600607 env[1421]: time="2025-09-06T00:19:56.600535804Z" level=info msg="loading plugin \"io.containerd.metadata.v1.bolt\"..." type=io.containerd.metadata.v1 Sep 6 00:19:56.600648 env[1421]: time="2025-09-06T00:19:56.600610203Z" level=warning msg="could not use snapshotter devmapper in metadata plugin" error="devmapper not configured" Sep 6 00:19:56.600648 env[1421]: time="2025-09-06T00:19:56.600629203Z" level=info msg="metadata content store policy set" policy=shared Sep 6 00:19:56.616660 env[1421]: time="2025-09-06T00:19:56.616557347Z" level=info msg="loading plugin \"io.containerd.differ.v1.walking\"..." type=io.containerd.differ.v1 Sep 6 00:19:56.616817 env[1421]: time="2025-09-06T00:19:56.616679745Z" level=info msg="loading plugin \"io.containerd.event.v1.exchange\"..." type=io.containerd.event.v1 Sep 6 00:19:56.616817 env[1421]: time="2025-09-06T00:19:56.616701145Z" level=info msg="loading plugin \"io.containerd.gc.v1.scheduler\"..." type=io.containerd.gc.v1 Sep 6 00:19:56.616817 env[1421]: time="2025-09-06T00:19:56.616767145Z" level=info msg="loading plugin \"io.containerd.service.v1.introspection-service\"..." type=io.containerd.service.v1 Sep 6 00:19:56.616817 env[1421]: time="2025-09-06T00:19:56.616787044Z" level=info msg="loading plugin \"io.containerd.service.v1.containers-service\"..." type=io.containerd.service.v1 Sep 6 00:19:56.617038 env[1421]: time="2025-09-06T00:19:56.616805544Z" level=info msg="loading plugin \"io.containerd.service.v1.content-service\"..." type=io.containerd.service.v1 Sep 6 00:19:56.617038 env[1421]: time="2025-09-06T00:19:56.616890643Z" level=info msg="loading plugin \"io.containerd.service.v1.diff-service\"..." type=io.containerd.service.v1 Sep 6 00:19:56.617038 env[1421]: time="2025-09-06T00:19:56.616914043Z" level=info msg="loading plugin \"io.containerd.service.v1.images-service\"..." type=io.containerd.service.v1 Sep 6 00:19:56.617038 env[1421]: time="2025-09-06T00:19:56.616965743Z" level=info msg="loading plugin \"io.containerd.service.v1.leases-service\"..." type=io.containerd.service.v1 Sep 6 00:19:56.617038 env[1421]: time="2025-09-06T00:19:56.616991542Z" level=info msg="loading plugin \"io.containerd.service.v1.namespaces-service\"..." type=io.containerd.service.v1 Sep 6 00:19:56.617038 env[1421]: time="2025-09-06T00:19:56.617022042Z" level=info msg="loading plugin \"io.containerd.service.v1.snapshots-service\"..." type=io.containerd.service.v1 Sep 6 00:19:56.617233 env[1421]: time="2025-09-06T00:19:56.617046842Z" level=info msg="loading plugin \"io.containerd.runtime.v1.linux\"..." type=io.containerd.runtime.v1 Sep 6 00:19:56.617278 env[1421]: time="2025-09-06T00:19:56.617248440Z" level=info msg="loading plugin \"io.containerd.runtime.v2.task\"..." type=io.containerd.runtime.v2 Sep 6 00:19:56.617425 env[1421]: time="2025-09-06T00:19:56.617393238Z" level=info msg="loading plugin \"io.containerd.monitor.v1.cgroups\"..." type=io.containerd.monitor.v1 Sep 6 00:19:56.617972 env[1421]: time="2025-09-06T00:19:56.617922633Z" level=info msg="loading plugin \"io.containerd.service.v1.tasks-service\"..." type=io.containerd.service.v1 Sep 6 00:19:56.618063 env[1421]: time="2025-09-06T00:19:56.617990933Z" level=info msg="loading plugin \"io.containerd.grpc.v1.introspection\"..." type=io.containerd.grpc.v1 Sep 6 00:19:56.618063 env[1421]: time="2025-09-06T00:19:56.618025432Z" level=info msg="loading plugin \"io.containerd.internal.v1.restart\"..." type=io.containerd.internal.v1 Sep 6 00:19:56.618203 env[1421]: time="2025-09-06T00:19:56.618184331Z" level=info msg="loading plugin \"io.containerd.grpc.v1.containers\"..." type=io.containerd.grpc.v1 Sep 6 00:19:56.618250 env[1421]: time="2025-09-06T00:19:56.618214330Z" level=info msg="loading plugin \"io.containerd.grpc.v1.content\"..." type=io.containerd.grpc.v1 Sep 6 00:19:56.618250 env[1421]: time="2025-09-06T00:19:56.618235530Z" level=info msg="loading plugin \"io.containerd.grpc.v1.diff\"..." type=io.containerd.grpc.v1 Sep 6 00:19:56.618325 env[1421]: time="2025-09-06T00:19:56.618269730Z" level=info msg="loading plugin \"io.containerd.grpc.v1.events\"..." type=io.containerd.grpc.v1 Sep 6 00:19:56.618325 env[1421]: time="2025-09-06T00:19:56.618289930Z" level=info msg="loading plugin \"io.containerd.grpc.v1.healthcheck\"..." type=io.containerd.grpc.v1 Sep 6 00:19:56.618325 env[1421]: time="2025-09-06T00:19:56.618309730Z" level=info msg="loading plugin \"io.containerd.grpc.v1.images\"..." type=io.containerd.grpc.v1 Sep 6 00:19:56.618504 env[1421]: time="2025-09-06T00:19:56.618339629Z" level=info msg="loading plugin \"io.containerd.grpc.v1.leases\"..." type=io.containerd.grpc.v1 Sep 6 00:19:56.618504 env[1421]: time="2025-09-06T00:19:56.618361529Z" level=info msg="loading plugin \"io.containerd.grpc.v1.namespaces\"..." type=io.containerd.grpc.v1 Sep 6 00:19:56.618504 env[1421]: time="2025-09-06T00:19:56.618384229Z" level=info msg="loading plugin \"io.containerd.internal.v1.opt\"..." type=io.containerd.internal.v1 Sep 6 00:19:56.618631 env[1421]: time="2025-09-06T00:19:56.618593727Z" level=info msg="loading plugin \"io.containerd.grpc.v1.snapshots\"..." type=io.containerd.grpc.v1 Sep 6 00:19:56.618631 env[1421]: time="2025-09-06T00:19:56.618616627Z" level=info msg="loading plugin \"io.containerd.grpc.v1.tasks\"..." type=io.containerd.grpc.v1 Sep 6 00:19:56.618707 env[1421]: time="2025-09-06T00:19:56.618635226Z" level=info msg="loading plugin \"io.containerd.grpc.v1.version\"..." type=io.containerd.grpc.v1 Sep 6 00:19:56.618707 env[1421]: time="2025-09-06T00:19:56.618666026Z" level=info msg="loading plugin \"io.containerd.tracing.processor.v1.otlp\"..." type=io.containerd.tracing.processor.v1 Sep 6 00:19:56.618707 env[1421]: time="2025-09-06T00:19:56.618690626Z" level=info msg="skip loading plugin \"io.containerd.tracing.processor.v1.otlp\"..." error="no OpenTelemetry endpoint: skip plugin" type=io.containerd.tracing.processor.v1 Sep 6 00:19:56.618815 env[1421]: time="2025-09-06T00:19:56.618707526Z" level=info msg="loading plugin \"io.containerd.internal.v1.tracing\"..." type=io.containerd.internal.v1 Sep 6 00:19:56.618815 env[1421]: time="2025-09-06T00:19:56.618752325Z" level=error msg="failed to initialize a tracing processor \"otlp\"" error="no OpenTelemetry endpoint: skip plugin" Sep 6 00:19:56.618891 env[1421]: time="2025-09-06T00:19:56.618822924Z" level=info msg="loading plugin \"io.containerd.grpc.v1.cri\"..." type=io.containerd.grpc.v1 Sep 6 00:19:56.619271 env[1421]: time="2025-09-06T00:19:56.619190321Z" level=info msg="Start cri plugin with config {PluginConfig:{ContainerdConfig:{Snapshotter:overlayfs DefaultRuntimeName:runc DefaultRuntime:{Type: Path: Engine: PodAnnotations:[] ContainerAnnotations:[] Root: Options:map[] PrivilegedWithoutHostDevices:false BaseRuntimeSpec: NetworkPluginConfDir: NetworkPluginMaxConfNum:0} UntrustedWorkloadRuntime:{Type: Path: Engine: PodAnnotations:[] ContainerAnnotations:[] Root: Options:map[] PrivilegedWithoutHostDevices:false BaseRuntimeSpec: NetworkPluginConfDir: NetworkPluginMaxConfNum:0} Runtimes:map[runc:{Type:io.containerd.runc.v2 Path: Engine: PodAnnotations:[] ContainerAnnotations:[] Root: Options:map[SystemdCgroup:true] PrivilegedWithoutHostDevices:false BaseRuntimeSpec: NetworkPluginConfDir: NetworkPluginMaxConfNum:0}] NoPivot:false DisableSnapshotAnnotations:true DiscardUnpackedLayers:false IgnoreRdtNotEnabledErrors:false} CniConfig:{NetworkPluginBinDir:/opt/cni/bin NetworkPluginConfDir:/etc/cni/net.d NetworkPluginMaxConfNum:1 NetworkPluginConfTemplate: IPPreference:} Registry:{ConfigPath: Mirrors:map[] Configs:map[] Auths:map[] Headers:map[]} ImageDecryption:{KeyModel:node} DisableTCPService:true StreamServerAddress:127.0.0.1 StreamServerPort:0 StreamIdleTimeout:4h0m0s EnableSelinux:true SelinuxCategoryRange:1024 SandboxImage:registry.k8s.io/pause:3.6 StatsCollectPeriod:10 SystemdCgroup:false EnableTLSStreaming:false X509KeyPairStreaming:{TLSCertFile: TLSKeyFile:} MaxContainerLogLineSize:16384 DisableCgroup:false DisableApparmor:false RestrictOOMScoreAdj:false MaxConcurrentDownloads:3 DisableProcMount:false UnsetSeccompProfile: TolerateMissingHugetlbController:true DisableHugetlbController:true DeviceOwnershipFromSecurityContext:false IgnoreImageDefinedVolumes:false NetNSMountsUnderStateDir:false EnableUnprivilegedPorts:false EnableUnprivilegedICMP:false} ContainerdRootDir:/var/lib/containerd ContainerdEndpoint:/run/containerd/containerd.sock RootDir:/var/lib/containerd/io.containerd.grpc.v1.cri StateDir:/run/containerd/io.containerd.grpc.v1.cri}" Sep 6 00:19:56.622610 systemd[1]: Started containerd.service. Sep 6 00:19:56.651365 bash[1451]: Updated "/home/core/.ssh/authorized_keys" Sep 6 00:19:56.651503 env[1421]: time="2025-09-06T00:19:56.619288620Z" level=info msg="Connect containerd service" Sep 6 00:19:56.651503 env[1421]: time="2025-09-06T00:19:56.619352919Z" level=info msg="Get image filesystem path \"/var/lib/containerd/io.containerd.snapshotter.v1.overlayfs\"" Sep 6 00:19:56.651503 env[1421]: time="2025-09-06T00:19:56.620294910Z" level=error msg="failed to load cni during init, please check CRI plugin status before setting up network for pods" error="cni config load failed: no network config found in /etc/cni/net.d: cni plugin not initialized: failed to load cni config" Sep 6 00:19:56.651503 env[1421]: time="2025-09-06T00:19:56.620390809Z" level=info msg="Start subscribing containerd event" Sep 6 00:19:56.651503 env[1421]: time="2025-09-06T00:19:56.620472608Z" level=info msg="Start recovering state" Sep 6 00:19:56.651503 env[1421]: time="2025-09-06T00:19:56.620552308Z" level=info msg="Start event monitor" Sep 6 00:19:56.651503 env[1421]: time="2025-09-06T00:19:56.620579207Z" level=info msg="Start snapshots syncer" Sep 6 00:19:56.651503 env[1421]: time="2025-09-06T00:19:56.620591407Z" level=info msg="Start cni network conf syncer for default" Sep 6 00:19:56.651503 env[1421]: time="2025-09-06T00:19:56.620601107Z" level=info msg="Start streaming server" Sep 6 00:19:56.651503 env[1421]: time="2025-09-06T00:19:56.622264891Z" level=info msg=serving... address=/run/containerd/containerd.sock.ttrpc Sep 6 00:19:56.651503 env[1421]: time="2025-09-06T00:19:56.622418489Z" level=info msg=serving... address=/run/containerd/containerd.sock Sep 6 00:19:56.651503 env[1421]: time="2025-09-06T00:19:56.644142776Z" level=info msg="containerd successfully booted in 0.217817s" Sep 6 00:19:56.644662 systemd[1]: Finished update-ssh-keys-after-ignition.service. Sep 6 00:19:56.716647 systemd[1]: nvidia.service: Deactivated successfully. Sep 6 00:19:57.274516 update_engine[1409]: I0906 00:19:57.273741 1409 main.cc:92] Flatcar Update Engine starting Sep 6 00:19:57.313342 tar[1420]: linux-amd64/LICENSE Sep 6 00:19:57.313629 tar[1420]: linux-amd64/README.md Sep 6 00:19:57.321242 systemd[1]: Finished prepare-helm.service. Sep 6 00:19:57.326618 systemd[1]: Started update-engine.service. Sep 6 00:19:57.337487 update_engine[1409]: I0906 00:19:57.337136 1409 update_check_scheduler.cc:74] Next update check in 6m11s Sep 6 00:19:57.332968 systemd[1]: Started locksmithd.service. Sep 6 00:19:57.828611 systemd[1]: Started kubelet.service. Sep 6 00:19:58.525734 kubelet[1496]: E0906 00:19:58.525657 1496 run.go:72] "command failed" err="failed to load kubelet config file, path: /var/lib/kubelet/config.yaml, error: failed to load Kubelet config file /var/lib/kubelet/config.yaml, error failed to read kubelet config file \"/var/lib/kubelet/config.yaml\", error: open /var/lib/kubelet/config.yaml: no such file or directory" Sep 6 00:19:58.527672 systemd[1]: kubelet.service: Main process exited, code=exited, status=1/FAILURE Sep 6 00:19:58.527833 systemd[1]: kubelet.service: Failed with result 'exit-code'. Sep 6 00:19:58.528153 systemd[1]: kubelet.service: Consumed 1.224s CPU time. Sep 6 00:19:58.767327 locksmithd[1493]: locksmithd starting currentOperation="UPDATE_STATUS_IDLE" strategy="reboot" Sep 6 00:19:59.013298 sshd_keygen[1422]: ssh-keygen: generating new host keys: RSA ECDSA ED25519 Sep 6 00:19:59.035581 systemd[1]: Finished sshd-keygen.service. Sep 6 00:19:59.041324 systemd[1]: Starting issuegen.service... Sep 6 00:19:59.046276 systemd[1]: Started waagent.service. Sep 6 00:19:59.053855 systemd[1]: issuegen.service: Deactivated successfully. Sep 6 00:19:59.054095 systemd[1]: Finished issuegen.service. Sep 6 00:19:59.059286 systemd[1]: Starting systemd-user-sessions.service... Sep 6 00:19:59.088445 systemd[1]: Finished systemd-user-sessions.service. Sep 6 00:19:59.095786 systemd[1]: Started getty@tty1.service. Sep 6 00:19:59.101587 systemd[1]: Started serial-getty@ttyS0.service. Sep 6 00:19:59.105144 systemd[1]: Reached target getty.target. Sep 6 00:19:59.108140 systemd[1]: Reached target multi-user.target. Sep 6 00:19:59.112974 systemd[1]: Starting systemd-update-utmp-runlevel.service... Sep 6 00:19:59.124426 systemd[1]: systemd-update-utmp-runlevel.service: Deactivated successfully. Sep 6 00:19:59.124600 systemd[1]: Finished systemd-update-utmp-runlevel.service. Sep 6 00:19:59.132340 systemd[1]: Startup finished in 1.286s (kernel) + 13.984s (initrd) + 23.924s (userspace) = 39.195s. Sep 6 00:19:59.516545 login[1520]: pam_unix(login:session): session opened for user core(uid=500) by LOGIN(uid=0) Sep 6 00:19:59.518098 login[1521]: pam_unix(login:session): session opened for user core(uid=500) by LOGIN(uid=0) Sep 6 00:19:59.547231 systemd[1]: Created slice user-500.slice. Sep 6 00:19:59.548806 systemd[1]: Starting user-runtime-dir@500.service... Sep 6 00:19:59.552038 systemd-logind[1407]: New session 2 of user core. Sep 6 00:19:59.557836 systemd-logind[1407]: New session 1 of user core. Sep 6 00:19:59.563866 systemd[1]: Finished user-runtime-dir@500.service. Sep 6 00:19:59.566080 systemd[1]: Starting user@500.service... Sep 6 00:19:59.570194 (systemd)[1524]: pam_unix(systemd-user:session): session opened for user core(uid=500) by (uid=0) Sep 6 00:19:59.701569 systemd[1524]: Queued start job for default target default.target. Sep 6 00:19:59.702301 systemd[1524]: Reached target paths.target. Sep 6 00:19:59.702333 systemd[1524]: Reached target sockets.target. Sep 6 00:19:59.702350 systemd[1524]: Reached target timers.target. Sep 6 00:19:59.702366 systemd[1524]: Reached target basic.target. Sep 6 00:19:59.702511 systemd[1]: Started user@500.service. Sep 6 00:19:59.703946 systemd[1]: Started session-1.scope. Sep 6 00:19:59.704800 systemd[1]: Started session-2.scope. Sep 6 00:19:59.705789 systemd[1524]: Reached target default.target. Sep 6 00:19:59.706031 systemd[1524]: Startup finished in 127ms. Sep 6 00:20:08.620248 systemd[1]: kubelet.service: Scheduled restart job, restart counter is at 1. Sep 6 00:20:08.620535 systemd[1]: Stopped kubelet.service. Sep 6 00:20:08.620593 systemd[1]: kubelet.service: Consumed 1.224s CPU time. Sep 6 00:20:08.622563 systemd[1]: Starting kubelet.service... Sep 6 00:20:10.050833 systemd[1]: Started kubelet.service. Sep 6 00:20:10.113522 kubelet[1550]: E0906 00:20:10.113452 1550 run.go:72] "command failed" err="failed to load kubelet config file, path: /var/lib/kubelet/config.yaml, error: failed to load Kubelet config file /var/lib/kubelet/config.yaml, error failed to read kubelet config file \"/var/lib/kubelet/config.yaml\", error: open /var/lib/kubelet/config.yaml: no such file or directory" Sep 6 00:20:10.116555 systemd[1]: kubelet.service: Main process exited, code=exited, status=1/FAILURE Sep 6 00:20:10.116683 systemd[1]: kubelet.service: Failed with result 'exit-code'. Sep 6 00:20:11.751076 waagent[1515]: 2025-09-06T00:20:11.750910Z INFO Daemon Daemon Azure Linux Agent Version:2.6.0.2 Sep 6 00:20:11.767504 waagent[1515]: 2025-09-06T00:20:11.752409Z INFO Daemon Daemon OS: flatcar 3510.3.8 Sep 6 00:20:11.767504 waagent[1515]: 2025-09-06T00:20:11.753559Z INFO Daemon Daemon Python: 3.9.16 Sep 6 00:20:11.767504 waagent[1515]: 2025-09-06T00:20:11.754997Z INFO Daemon Daemon Run daemon Sep 6 00:20:11.767504 waagent[1515]: 2025-09-06T00:20:11.756138Z INFO Daemon Daemon No RDMA handler exists for distro='Flatcar Container Linux by Kinvolk' version='3510.3.8' Sep 6 00:20:11.772878 waagent[1515]: 2025-09-06T00:20:11.772726Z INFO Daemon Daemon Unable to get cloud-init enabled status from systemctl: Command '['systemctl', 'is-enabled', 'cloud-init-local.service']' returned non-zero exit status 1. Sep 6 00:20:11.784271 waagent[1515]: 2025-09-06T00:20:11.784115Z INFO Daemon Daemon Unable to get cloud-init enabled status from service: [Errno 2] No such file or directory: 'service' Sep 6 00:20:11.790612 waagent[1515]: 2025-09-06T00:20:11.790505Z INFO Daemon Daemon cloud-init is enabled: False Sep 6 00:20:11.794014 waagent[1515]: 2025-09-06T00:20:11.793905Z INFO Daemon Daemon Using waagent for provisioning Sep 6 00:20:11.798402 waagent[1515]: 2025-09-06T00:20:11.798315Z INFO Daemon Daemon Activate resource disk Sep 6 00:20:11.802057 waagent[1515]: 2025-09-06T00:20:11.801959Z INFO Daemon Daemon Searching gen1 prefix 00000000-0001 or gen2 f8b3781a-1e82-4818-a1c3-63d806ec15bb Sep 6 00:20:11.813959 waagent[1515]: 2025-09-06T00:20:11.813834Z INFO Daemon Daemon Found device: None Sep 6 00:20:11.819312 waagent[1515]: 2025-09-06T00:20:11.819201Z ERROR Daemon Daemon Failed to mount resource disk [ResourceDiskError] unable to detect disk topology Sep 6 00:20:11.825982 waagent[1515]: 2025-09-06T00:20:11.825848Z ERROR Daemon Daemon Event: name=WALinuxAgent, op=ActivateResourceDisk, message=[ResourceDiskError] unable to detect disk topology, duration=0 Sep 6 00:20:11.835303 waagent[1515]: 2025-09-06T00:20:11.835207Z INFO Daemon Daemon Clean protocol and wireserver endpoint Sep 6 00:20:11.840037 waagent[1515]: 2025-09-06T00:20:11.839947Z INFO Daemon Daemon Running default provisioning handler Sep 6 00:20:11.853202 waagent[1515]: 2025-09-06T00:20:11.853046Z INFO Daemon Daemon Unable to get cloud-init enabled status from systemctl: Command '['systemctl', 'is-enabled', 'cloud-init-local.service']' returned non-zero exit status 1. Sep 6 00:20:11.864101 waagent[1515]: 2025-09-06T00:20:11.863924Z INFO Daemon Daemon Unable to get cloud-init enabled status from service: [Errno 2] No such file or directory: 'service' Sep 6 00:20:11.877369 waagent[1515]: 2025-09-06T00:20:11.864536Z INFO Daemon Daemon cloud-init is enabled: False Sep 6 00:20:11.877369 waagent[1515]: 2025-09-06T00:20:11.865900Z INFO Daemon Daemon Copying ovf-env.xml Sep 6 00:20:11.927127 waagent[1515]: 2025-09-06T00:20:11.926235Z INFO Daemon Daemon Successfully mounted dvd Sep 6 00:20:12.010319 systemd[1]: mnt-cdrom-secure.mount: Deactivated successfully. Sep 6 00:20:12.030738 waagent[1515]: 2025-09-06T00:20:12.030576Z INFO Daemon Daemon Detect protocol endpoint Sep 6 00:20:12.053473 waagent[1515]: 2025-09-06T00:20:12.031296Z INFO Daemon Daemon Clean protocol and wireserver endpoint Sep 6 00:20:12.053473 waagent[1515]: 2025-09-06T00:20:12.032795Z INFO Daemon Daemon WireServer endpoint is not found. Rerun dhcp handler Sep 6 00:20:12.053473 waagent[1515]: 2025-09-06T00:20:12.034040Z INFO Daemon Daemon Test for route to 168.63.129.16 Sep 6 00:20:12.053473 waagent[1515]: 2025-09-06T00:20:12.035420Z INFO Daemon Daemon Route to 168.63.129.16 exists Sep 6 00:20:12.053473 waagent[1515]: 2025-09-06T00:20:12.036463Z INFO Daemon Daemon Wire server endpoint:168.63.129.16 Sep 6 00:20:12.149568 waagent[1515]: 2025-09-06T00:20:12.149473Z INFO Daemon Daemon Fabric preferred wire protocol version:2015-04-05 Sep 6 00:20:12.153998 waagent[1515]: 2025-09-06T00:20:12.150647Z INFO Daemon Daemon Wire protocol version:2012-11-30 Sep 6 00:20:12.153998 waagent[1515]: 2025-09-06T00:20:12.151272Z INFO Daemon Daemon Server preferred version:2015-04-05 Sep 6 00:20:12.577522 waagent[1515]: 2025-09-06T00:20:12.577354Z INFO Daemon Daemon Initializing goal state during protocol detection Sep 6 00:20:12.591598 waagent[1515]: 2025-09-06T00:20:12.591482Z INFO Daemon Daemon Forcing an update of the goal state.. Sep 6 00:20:12.598379 waagent[1515]: 2025-09-06T00:20:12.592088Z INFO Daemon Daemon Fetching goal state [incarnation 1] Sep 6 00:20:12.749000 waagent[1515]: 2025-09-06T00:20:12.748829Z INFO Daemon Daemon Found private key matching thumbprint FB75F7BD3D0D400A2FFCE25BAFCD1769B97AA84F Sep 6 00:20:12.755409 waagent[1515]: 2025-09-06T00:20:12.755287Z INFO Daemon Daemon Fetch goal state completed Sep 6 00:20:12.807617 waagent[1515]: 2025-09-06T00:20:12.807526Z INFO Daemon Daemon Fetched new vmSettings [correlation ID: 291d7c5c-39c7-4fd8-808a-f95c031a22f7 New eTag: 222047171305519675] Sep 6 00:20:12.818075 waagent[1515]: 2025-09-06T00:20:12.817951Z INFO Daemon Daemon Status Blob type 'None' is not valid, assuming BlockBlob Sep 6 00:20:12.876154 waagent[1515]: 2025-09-06T00:20:12.876042Z INFO Daemon Daemon Starting provisioning Sep 6 00:20:12.880104 waagent[1515]: 2025-09-06T00:20:12.879995Z INFO Daemon Daemon Handle ovf-env.xml. Sep 6 00:20:12.883818 waagent[1515]: 2025-09-06T00:20:12.883720Z INFO Daemon Daemon Set hostname [ci-3510.3.8-n-28804d0655] Sep 6 00:20:12.905991 waagent[1515]: 2025-09-06T00:20:12.905817Z INFO Daemon Daemon Publish hostname [ci-3510.3.8-n-28804d0655] Sep 6 00:20:12.911794 waagent[1515]: 2025-09-06T00:20:12.911676Z INFO Daemon Daemon Examine /proc/net/route for primary interface Sep 6 00:20:12.916783 waagent[1515]: 2025-09-06T00:20:12.916677Z INFO Daemon Daemon Primary interface is [eth0] Sep 6 00:20:12.934282 systemd[1]: systemd-networkd-wait-online.service: Deactivated successfully. Sep 6 00:20:12.934555 systemd[1]: Stopped systemd-networkd-wait-online.service. Sep 6 00:20:12.934631 systemd[1]: Stopping systemd-networkd-wait-online.service... Sep 6 00:20:12.935060 systemd[1]: Stopping systemd-networkd.service... Sep 6 00:20:12.939996 systemd-networkd[1174]: eth0: DHCPv6 lease lost Sep 6 00:20:12.941684 systemd[1]: systemd-networkd.service: Deactivated successfully. Sep 6 00:20:12.941942 systemd[1]: Stopped systemd-networkd.service. Sep 6 00:20:12.944692 systemd[1]: Starting systemd-networkd.service... Sep 6 00:20:12.979493 systemd-networkd[1577]: enP30592s1: Link UP Sep 6 00:20:12.979507 systemd-networkd[1577]: enP30592s1: Gained carrier Sep 6 00:20:12.980995 systemd-networkd[1577]: eth0: Link UP Sep 6 00:20:12.981005 systemd-networkd[1577]: eth0: Gained carrier Sep 6 00:20:12.981474 systemd-networkd[1577]: lo: Link UP Sep 6 00:20:12.981484 systemd-networkd[1577]: lo: Gained carrier Sep 6 00:20:12.981825 systemd-networkd[1577]: eth0: Gained IPv6LL Sep 6 00:20:12.982564 systemd-networkd[1577]: Enumeration completed Sep 6 00:20:12.982836 systemd[1]: Started systemd-networkd.service. Sep 6 00:20:12.985756 systemd[1]: Starting systemd-networkd-wait-online.service... Sep 6 00:20:12.992004 waagent[1515]: 2025-09-06T00:20:12.987902Z INFO Daemon Daemon Create user account if not exists Sep 6 00:20:12.994337 waagent[1515]: 2025-09-06T00:20:12.994206Z INFO Daemon Daemon User core already exists, skip useradd Sep 6 00:20:12.995492 systemd-networkd[1577]: eth0: Configuring with /usr/lib/systemd/network/zz-default.network. Sep 6 00:20:12.999279 waagent[1515]: 2025-09-06T00:20:12.999164Z INFO Daemon Daemon Configure sudoer Sep 6 00:20:13.004777 waagent[1515]: 2025-09-06T00:20:13.004675Z INFO Daemon Daemon Configure sshd Sep 6 00:20:13.008766 waagent[1515]: 2025-09-06T00:20:13.008637Z INFO Daemon Daemon Deploy ssh public key. Sep 6 00:20:13.035058 systemd-networkd[1577]: eth0: DHCPv4 address 10.200.8.38/24, gateway 10.200.8.1 acquired from 168.63.129.16 Sep 6 00:20:13.039053 systemd[1]: Finished systemd-networkd-wait-online.service. Sep 6 00:20:14.165903 waagent[1515]: 2025-09-06T00:20:14.165791Z INFO Daemon Daemon Provisioning complete Sep 6 00:20:14.195453 waagent[1515]: 2025-09-06T00:20:14.195356Z INFO Daemon Daemon RDMA capabilities are not enabled, skipping Sep 6 00:20:14.200726 waagent[1515]: 2025-09-06T00:20:14.200620Z INFO Daemon Daemon End of log to /dev/console. The agent will now check for updates and then will process extensions. Sep 6 00:20:14.209236 waagent[1515]: 2025-09-06T00:20:14.209118Z INFO Daemon Daemon Installed Agent WALinuxAgent-2.6.0.2 is the most current agent Sep 6 00:20:14.506351 waagent[1583]: 2025-09-06T00:20:14.506126Z INFO ExtHandler ExtHandler Agent WALinuxAgent-2.6.0.2 is running as the goal state agent Sep 6 00:20:14.507186 waagent[1583]: 2025-09-06T00:20:14.507106Z INFO ExtHandler ExtHandler WireServer endpoint 168.63.129.16 read from file Sep 6 00:20:14.507356 waagent[1583]: 2025-09-06T00:20:14.507295Z INFO ExtHandler ExtHandler Wire server endpoint:168.63.129.16 Sep 6 00:20:14.521112 waagent[1583]: 2025-09-06T00:20:14.521003Z INFO ExtHandler ExtHandler Forcing an update of the goal state.. Sep 6 00:20:14.521349 waagent[1583]: 2025-09-06T00:20:14.521283Z INFO ExtHandler ExtHandler Fetching goal state [incarnation 1] Sep 6 00:20:14.595721 waagent[1583]: 2025-09-06T00:20:14.595570Z INFO ExtHandler ExtHandler Found private key matching thumbprint FB75F7BD3D0D400A2FFCE25BAFCD1769B97AA84F Sep 6 00:20:14.596112 waagent[1583]: 2025-09-06T00:20:14.596041Z INFO ExtHandler ExtHandler Fetch goal state completed Sep 6 00:20:14.617905 waagent[1583]: 2025-09-06T00:20:14.617825Z INFO ExtHandler ExtHandler Fetched new vmSettings [correlation ID: 21142183-c3da-4c56-86ff-773e2c102ba2 New eTag: 222047171305519675] Sep 6 00:20:14.618614 waagent[1583]: 2025-09-06T00:20:14.618539Z INFO ExtHandler ExtHandler Status Blob type 'None' is not valid, assuming BlockBlob Sep 6 00:20:14.713841 waagent[1583]: 2025-09-06T00:20:14.713682Z INFO ExtHandler ExtHandler Distro: flatcar-3510.3.8; OSUtil: CoreOSUtil; AgentService: waagent; Python: 3.9.16; systemd: True; LISDrivers: Absent; logrotate: logrotate 3.20.1; Sep 6 00:20:14.723467 waagent[1583]: 2025-09-06T00:20:14.723357Z INFO ExtHandler ExtHandler WALinuxAgent-2.6.0.2 running as process 1583 Sep 6 00:20:14.727109 waagent[1583]: 2025-09-06T00:20:14.727025Z INFO ExtHandler ExtHandler Cgroup monitoring is not supported on ['flatcar', '3510.3.8', '', 'Flatcar Container Linux by Kinvolk'] Sep 6 00:20:14.728330 waagent[1583]: 2025-09-06T00:20:14.728260Z INFO ExtHandler ExtHandler Starting setup for Persistent firewall rules Sep 6 00:20:14.797832 waagent[1583]: 2025-09-06T00:20:14.797689Z INFO ExtHandler ExtHandler Firewalld service not running/unavailable, trying to set up waagent-network-setup.service Sep 6 00:20:14.798276 waagent[1583]: 2025-09-06T00:20:14.798206Z INFO ExtHandler ExtHandler Successfully updated the Binary file /var/lib/waagent/waagent-network-setup.py for firewall setup Sep 6 00:20:14.807554 waagent[1583]: 2025-09-06T00:20:14.807480Z INFO ExtHandler ExtHandler Service: waagent-network-setup.service not enabled. Adding it now Sep 6 00:20:14.808178 waagent[1583]: 2025-09-06T00:20:14.808108Z ERROR ExtHandler ExtHandler Unable to setup the persistent firewall rules: [Errno 30] Read-only file system: '/lib/systemd/system/waagent-network-setup.service' Sep 6 00:20:14.809367 waagent[1583]: 2025-09-06T00:20:14.809301Z INFO ExtHandler ExtHandler Checking if log collection is allowed at this time [False]. All three conditions must be met: configuration enabled [False], cgroups enabled [False], python supported: [True] Sep 6 00:20:14.810787 waagent[1583]: 2025-09-06T00:20:14.810723Z INFO ExtHandler ExtHandler Starting env monitor service. Sep 6 00:20:14.811510 waagent[1583]: 2025-09-06T00:20:14.811449Z INFO ExtHandler ExtHandler Start SendTelemetryHandler service. Sep 6 00:20:14.811999 waagent[1583]: 2025-09-06T00:20:14.811938Z INFO MonitorHandler ExtHandler WireServer endpoint 168.63.129.16 read from file Sep 6 00:20:14.812102 waagent[1583]: 2025-09-06T00:20:14.812044Z INFO EnvHandler ExtHandler WireServer endpoint 168.63.129.16 read from file Sep 6 00:20:14.812643 waagent[1583]: 2025-09-06T00:20:14.812589Z INFO MonitorHandler ExtHandler Wire server endpoint:168.63.129.16 Sep 6 00:20:14.812785 waagent[1583]: 2025-09-06T00:20:14.812734Z INFO EnvHandler ExtHandler Wire server endpoint:168.63.129.16 Sep 6 00:20:14.813500 waagent[1583]: 2025-09-06T00:20:14.813438Z INFO SendTelemetryHandler ExtHandler Successfully started the SendTelemetryHandler thread Sep 6 00:20:14.813970 waagent[1583]: 2025-09-06T00:20:14.813896Z INFO MonitorHandler ExtHandler Monitor.NetworkConfigurationChanges is disabled. Sep 6 00:20:14.814117 waagent[1583]: 2025-09-06T00:20:14.814062Z INFO ExtHandler ExtHandler Start Extension Telemetry service. Sep 6 00:20:14.814656 waagent[1583]: 2025-09-06T00:20:14.814592Z INFO TelemetryEventsCollector ExtHandler Extension Telemetry pipeline enabled: True Sep 6 00:20:14.814979 waagent[1583]: 2025-09-06T00:20:14.814894Z INFO ExtHandler ExtHandler Goal State Period: 6 sec. This indicates how often the agent checks for new goal states and reports status. Sep 6 00:20:14.816068 waagent[1583]: 2025-09-06T00:20:14.816006Z INFO EnvHandler ExtHandler Configure routes Sep 6 00:20:14.816515 waagent[1583]: 2025-09-06T00:20:14.816445Z INFO TelemetryEventsCollector ExtHandler Successfully started the TelemetryEventsCollector thread Sep 6 00:20:14.817548 waagent[1583]: 2025-09-06T00:20:14.817492Z INFO EnvHandler ExtHandler Gateway:None Sep 6 00:20:14.818189 waagent[1583]: 2025-09-06T00:20:14.818132Z INFO MonitorHandler ExtHandler Routing table from /proc/net/route: Sep 6 00:20:14.818189 waagent[1583]: Iface Destination Gateway Flags RefCnt Use Metric Mask MTU Window IRTT Sep 6 00:20:14.818189 waagent[1583]: eth0 00000000 0108C80A 0003 0 0 1024 00000000 0 0 0 Sep 6 00:20:14.818189 waagent[1583]: eth0 0008C80A 00000000 0001 0 0 1024 00FFFFFF 0 0 0 Sep 6 00:20:14.818189 waagent[1583]: eth0 0108C80A 00000000 0005 0 0 1024 FFFFFFFF 0 0 0 Sep 6 00:20:14.818189 waagent[1583]: eth0 10813FA8 0108C80A 0007 0 0 1024 FFFFFFFF 0 0 0 Sep 6 00:20:14.818189 waagent[1583]: eth0 FEA9FEA9 0108C80A 0007 0 0 1024 FFFFFFFF 0 0 0 Sep 6 00:20:14.818500 waagent[1583]: 2025-09-06T00:20:14.818281Z INFO EnvHandler ExtHandler Routes:None Sep 6 00:20:14.832946 waagent[1583]: 2025-09-06T00:20:14.832849Z INFO ExtHandler ExtHandler Checking for agent updates (family: Prod) Sep 6 00:20:14.833803 waagent[1583]: 2025-09-06T00:20:14.833761Z WARNING ExtHandler ExtHandler Fetch failed: [HttpError] HTTPS is unavailable and required Sep 6 00:20:14.834814 waagent[1583]: 2025-09-06T00:20:14.834766Z INFO ExtHandler ExtHandler [PERIODIC] Request failed using the direct channel. Error: 'NoneType' object has no attribute 'getheaders' Sep 6 00:20:14.854477 waagent[1583]: 2025-09-06T00:20:14.854368Z ERROR EnvHandler ExtHandler Failed to get the PID of the DHCP client: invalid literal for int() with base 10: 'MainPID=1577' Sep 6 00:20:14.879510 waagent[1583]: 2025-09-06T00:20:14.879408Z INFO ExtHandler ExtHandler Default channel changed to HostGA channel. Sep 6 00:20:14.958699 waagent[1583]: 2025-09-06T00:20:14.958563Z INFO MonitorHandler ExtHandler Network interfaces: Sep 6 00:20:14.958699 waagent[1583]: Executing ['ip', '-a', '-o', 'link']: Sep 6 00:20:14.958699 waagent[1583]: 1: lo: mtu 65536 qdisc noqueue state UNKNOWN mode DEFAULT group default qlen 1000\ link/loopback 00:00:00:00:00:00 brd 00:00:00:00:00:00 Sep 6 00:20:14.958699 waagent[1583]: 2: eth0: mtu 1500 qdisc mq state UP mode DEFAULT group default qlen 1000\ link/ether 7c:ed:8d:2d:b4:05 brd ff:ff:ff:ff:ff:ff Sep 6 00:20:14.958699 waagent[1583]: 3: enP30592s1: mtu 1500 qdisc mq master eth0 state UP mode DEFAULT group default qlen 1000\ link/ether 7c:ed:8d:2d:b4:05 brd ff:ff:ff:ff:ff:ff\ altname enP30592p0s2 Sep 6 00:20:14.958699 waagent[1583]: Executing ['ip', '-4', '-a', '-o', 'address']: Sep 6 00:20:14.958699 waagent[1583]: 1: lo inet 127.0.0.1/8 scope host lo\ valid_lft forever preferred_lft forever Sep 6 00:20:14.958699 waagent[1583]: 2: eth0 inet 10.200.8.38/24 metric 1024 brd 10.200.8.255 scope global eth0\ valid_lft forever preferred_lft forever Sep 6 00:20:14.958699 waagent[1583]: Executing ['ip', '-6', '-a', '-o', 'address']: Sep 6 00:20:14.958699 waagent[1583]: 1: lo inet6 ::1/128 scope host \ valid_lft forever preferred_lft forever Sep 6 00:20:14.958699 waagent[1583]: 2: eth0 inet6 fe80::7eed:8dff:fe2d:b405/64 scope link \ valid_lft forever preferred_lft forever Sep 6 00:20:15.199000 waagent[1583]: 2025-09-06T00:20:15.198907Z INFO ExtHandler ExtHandler Agent WALinuxAgent-2.6.0.2 discovered update WALinuxAgent-2.14.0.1 -- exiting Sep 6 00:20:15.199598 waagent[1583]: 2025-09-06T00:20:15.199530Z INFO EnvHandler ExtHandler Successfully added Azure fabric firewall rules Sep 6 00:20:16.214302 waagent[1515]: 2025-09-06T00:20:16.214119Z INFO Daemon Daemon Agent WALinuxAgent-2.6.0.2 launched with command '/usr/share/oem/python/bin/python -u /usr/share/oem/bin/waagent -run-exthandlers' is successfully running Sep 6 00:20:16.220154 waagent[1515]: 2025-09-06T00:20:16.220068Z INFO Daemon Daemon Determined Agent WALinuxAgent-2.14.0.1 to be the latest agent Sep 6 00:20:17.365572 waagent[1618]: 2025-09-06T00:20:17.365420Z INFO ExtHandler ExtHandler Azure Linux Agent (Goal State Agent version 2.14.0.1) Sep 6 00:20:17.366397 waagent[1618]: 2025-09-06T00:20:17.366318Z INFO ExtHandler ExtHandler OS: flatcar 3510.3.8 Sep 6 00:20:17.366564 waagent[1618]: 2025-09-06T00:20:17.366510Z INFO ExtHandler ExtHandler Python: 3.9.16 Sep 6 00:20:17.366736 waagent[1618]: 2025-09-06T00:20:17.366687Z INFO ExtHandler ExtHandler CPU Arch: x86_64 Sep 6 00:20:17.384063 waagent[1618]: 2025-09-06T00:20:17.383908Z INFO ExtHandler ExtHandler Distro: flatcar-3510.3.8; OSUtil: CoreOSUtil; AgentService: waagent; Python: 3.9.16; Arch: x86_64; systemd: True; systemd_version: systemd 252 (252); LISDrivers: Absent; logrotate: logrotate 3.20.1; Sep 6 00:20:17.384571 waagent[1618]: 2025-09-06T00:20:17.384500Z INFO ExtHandler ExtHandler WireServer endpoint 168.63.129.16 read from file Sep 6 00:20:17.384775 waagent[1618]: 2025-09-06T00:20:17.384723Z INFO ExtHandler ExtHandler Wire server endpoint:168.63.129.16 Sep 6 00:20:17.385039 waagent[1618]: 2025-09-06T00:20:17.384987Z INFO ExtHandler ExtHandler Initializing the goal state... Sep 6 00:20:17.398378 waagent[1618]: 2025-09-06T00:20:17.398273Z INFO ExtHandler Fetched a new incarnation for the WireServer goal state [incarnation 1] Sep 6 00:20:17.413584 waagent[1618]: 2025-09-06T00:20:17.413505Z INFO ExtHandler ExtHandler HostGAPlugin version: 1.0.8.175 Sep 6 00:20:17.414714 waagent[1618]: 2025-09-06T00:20:17.414644Z INFO ExtHandler Sep 6 00:20:17.414899 waagent[1618]: 2025-09-06T00:20:17.414842Z INFO ExtHandler Fetched new vmSettings [HostGAPlugin correlation ID: eec2054c-46fe-49f3-8ad9-7a60d944cf24 eTag: 222047171305519675 source: Fabric] Sep 6 00:20:17.415691 waagent[1618]: 2025-09-06T00:20:17.415630Z INFO ExtHandler The vmSettings originated via Fabric; will ignore them. Sep 6 00:20:17.416875 waagent[1618]: 2025-09-06T00:20:17.416812Z INFO ExtHandler Sep 6 00:20:17.417042 waagent[1618]: 2025-09-06T00:20:17.416991Z INFO ExtHandler Fetching full goal state from the WireServer [incarnation 1] Sep 6 00:20:17.425299 waagent[1618]: 2025-09-06T00:20:17.425228Z INFO ExtHandler ExtHandler Downloading artifacts profile blob Sep 6 00:20:17.425877 waagent[1618]: 2025-09-06T00:20:17.425821Z WARNING ExtHandler ExtHandler Fetch failed: [HttpError] HTTPS is unavailable and required Sep 6 00:20:17.454005 waagent[1618]: 2025-09-06T00:20:17.453901Z INFO ExtHandler ExtHandler Default channel changed to HostGAPlugin channel. Sep 6 00:20:17.517832 waagent[1618]: 2025-09-06T00:20:17.517687Z INFO ExtHandler Downloaded certificate {'thumbprint': 'FB75F7BD3D0D400A2FFCE25BAFCD1769B97AA84F', 'hasPrivateKey': True} Sep 6 00:20:17.519271 waagent[1618]: 2025-09-06T00:20:17.519190Z INFO ExtHandler Fetch goal state from WireServer completed Sep 6 00:20:17.520172 waagent[1618]: 2025-09-06T00:20:17.520107Z INFO ExtHandler ExtHandler Goal state initialization completed. Sep 6 00:20:17.549711 waagent[1618]: 2025-09-06T00:20:17.549567Z INFO ExtHandler ExtHandler OpenSSL version: OpenSSL 3.0.15 3 Sep 2024 (Library: OpenSSL 3.0.15 3 Sep 2024) Sep 6 00:20:17.559688 waagent[1618]: 2025-09-06T00:20:17.559560Z INFO ExtHandler ExtHandler Using iptables [version 1.8.8] to manage firewall rules Sep 6 00:20:17.564226 waagent[1618]: 2025-09-06T00:20:17.564098Z INFO ExtHandler ExtHandler Did not find a legacy firewall rule: ['iptables', '-w', '-t', 'security', '-C', 'OUTPUT', '-d', '168.63.129.16', '-p', 'tcp', '-m', 'conntrack', '--ctstate', 'INVALID,NEW', '-j', 'ACCEPT'] Sep 6 00:20:17.564522 waagent[1618]: 2025-09-06T00:20:17.564457Z INFO ExtHandler ExtHandler Checking state of the firewall Sep 6 00:20:17.596312 waagent[1618]: 2025-09-06T00:20:17.596173Z WARNING ExtHandler ExtHandler The firewall rules for Azure Fabric are not setup correctly (the environment thread will fix it): The following rules are missing: ['ACCEPT DNS'] due to: ['iptables: Bad rule (does a matching rule exist in that chain?).\n']. Current state: Sep 6 00:20:17.596312 waagent[1618]: Chain INPUT (policy ACCEPT 0 packets, 0 bytes) Sep 6 00:20:17.596312 waagent[1618]: pkts bytes target prot opt in out source destination Sep 6 00:20:17.596312 waagent[1618]: Chain FORWARD (policy ACCEPT 0 packets, 0 bytes) Sep 6 00:20:17.596312 waagent[1618]: pkts bytes target prot opt in out source destination Sep 6 00:20:17.596312 waagent[1618]: Chain OUTPUT (policy ACCEPT 0 packets, 0 bytes) Sep 6 00:20:17.596312 waagent[1618]: pkts bytes target prot opt in out source destination Sep 6 00:20:17.596312 waagent[1618]: 55 7867 ACCEPT tcp -- * * 0.0.0.0/0 168.63.129.16 owner UID match 0 Sep 6 00:20:17.596312 waagent[1618]: 0 0 DROP tcp -- * * 0.0.0.0/0 168.63.129.16 ctstate INVALID,NEW Sep 6 00:20:17.597743 waagent[1618]: 2025-09-06T00:20:17.597568Z INFO ExtHandler ExtHandler Setting up persistent firewall rules Sep 6 00:20:17.601038 waagent[1618]: 2025-09-06T00:20:17.600902Z INFO ExtHandler ExtHandler The firewalld service is not present on the system Sep 6 00:20:17.601343 waagent[1618]: 2025-09-06T00:20:17.601285Z INFO ExtHandler ExtHandler Firewalld service not running/unavailable, trying to set up waagent-network-setup.service Sep 6 00:20:17.601743 waagent[1618]: 2025-09-06T00:20:17.601688Z INFO ExtHandler ExtHandler Successfully updated the Binary file /var/lib/waagent/waagent-network-setup.py for firewall setup Sep 6 00:20:17.611004 waagent[1618]: 2025-09-06T00:20:17.610912Z INFO ExtHandler ExtHandler Service: waagent-network-setup.service not enabled. Adding it now Sep 6 00:20:17.611608 waagent[1618]: 2025-09-06T00:20:17.611545Z ERROR ExtHandler ExtHandler Unable to setup the persistent firewall rules: [Errno 30] Read-only file system: '/lib/systemd/system/waagent-network-setup.service' Sep 6 00:20:17.619445 waagent[1618]: 2025-09-06T00:20:17.619360Z INFO ExtHandler ExtHandler WALinuxAgent-2.14.0.1 running as process 1618 Sep 6 00:20:17.622761 waagent[1618]: 2025-09-06T00:20:17.622665Z INFO ExtHandler ExtHandler [CGI] Cgroups is not currently supported on ['flatcar', '3510.3.8', '', 'Flatcar Container Linux by Kinvolk'] Sep 6 00:20:17.623664 waagent[1618]: 2025-09-06T00:20:17.623594Z INFO ExtHandler ExtHandler [CGI] Agent will reset the quotas in case cgroup usage went from enabled to disabled Sep 6 00:20:17.624586 waagent[1618]: 2025-09-06T00:20:17.624525Z INFO ExtHandler ExtHandler [CGI] Agent cgroups enabled: False Sep 6 00:20:17.627208 waagent[1618]: 2025-09-06T00:20:17.627143Z INFO ExtHandler ExtHandler Signing certificate written to /var/lib/waagent/microsoft_root_certificate.pem Sep 6 00:20:17.627585 waagent[1618]: 2025-09-06T00:20:17.627522Z INFO ExtHandler ExtHandler Checking if log collection is allowed at this time [False]. All three conditions must be met: 1. configuration enabled [True], 2. cgroups v1 enabled [False] OR cgroups v2 is in use and v2 resource limiting configuration enabled [False], 3. python supported: [True] Sep 6 00:20:17.628999 waagent[1618]: 2025-09-06T00:20:17.628919Z INFO ExtHandler ExtHandler Starting env monitor service. Sep 6 00:20:17.629440 waagent[1618]: 2025-09-06T00:20:17.629381Z INFO MonitorHandler ExtHandler WireServer endpoint 168.63.129.16 read from file Sep 6 00:20:17.629612 waagent[1618]: 2025-09-06T00:20:17.629560Z INFO MonitorHandler ExtHandler Wire server endpoint:168.63.129.16 Sep 6 00:20:17.630201 waagent[1618]: 2025-09-06T00:20:17.630149Z INFO MonitorHandler ExtHandler Monitor.NetworkConfigurationChanges is disabled. Sep 6 00:20:17.630739 waagent[1618]: 2025-09-06T00:20:17.630667Z INFO ExtHandler ExtHandler Start SendTelemetryHandler service. Sep 6 00:20:17.631347 waagent[1618]: 2025-09-06T00:20:17.631289Z INFO MonitorHandler ExtHandler Routing table from /proc/net/route: Sep 6 00:20:17.631347 waagent[1618]: Iface Destination Gateway Flags RefCnt Use Metric Mask MTU Window IRTT Sep 6 00:20:17.631347 waagent[1618]: eth0 00000000 0108C80A 0003 0 0 1024 00000000 0 0 0 Sep 6 00:20:17.631347 waagent[1618]: eth0 0008C80A 00000000 0001 0 0 1024 00FFFFFF 0 0 0 Sep 6 00:20:17.631347 waagent[1618]: eth0 0108C80A 00000000 0005 0 0 1024 FFFFFFFF 0 0 0 Sep 6 00:20:17.631347 waagent[1618]: eth0 10813FA8 0108C80A 0007 0 0 1024 FFFFFFFF 0 0 0 Sep 6 00:20:17.631347 waagent[1618]: eth0 FEA9FEA9 0108C80A 0007 0 0 1024 FFFFFFFF 0 0 0 Sep 6 00:20:17.634150 waagent[1618]: 2025-09-06T00:20:17.634026Z INFO SendTelemetryHandler ExtHandler Successfully started the SendTelemetryHandler thread Sep 6 00:20:17.634559 waagent[1618]: 2025-09-06T00:20:17.634483Z INFO ExtHandler ExtHandler Start Extension Telemetry service. Sep 6 00:20:17.635043 waagent[1618]: 2025-09-06T00:20:17.634963Z INFO EnvHandler ExtHandler WireServer endpoint 168.63.129.16 read from file Sep 6 00:20:17.635570 waagent[1618]: 2025-09-06T00:20:17.635485Z INFO EnvHandler ExtHandler Wire server endpoint:168.63.129.16 Sep 6 00:20:17.636198 waagent[1618]: 2025-09-06T00:20:17.636140Z INFO EnvHandler ExtHandler Configure routes Sep 6 00:20:17.636729 waagent[1618]: 2025-09-06T00:20:17.636675Z INFO TelemetryEventsCollector ExtHandler Extension Telemetry pipeline enabled: True Sep 6 00:20:17.637217 waagent[1618]: 2025-09-06T00:20:17.637164Z INFO ExtHandler ExtHandler Goal State Period: 6 sec. This indicates how often the agent checks for new goal states and reports status. Sep 6 00:20:17.637812 waagent[1618]: 2025-09-06T00:20:17.637751Z INFO EnvHandler ExtHandler Gateway:None Sep 6 00:20:17.640575 waagent[1618]: 2025-09-06T00:20:17.640459Z INFO EnvHandler ExtHandler Routes:None Sep 6 00:20:17.645952 waagent[1618]: 2025-09-06T00:20:17.645835Z INFO TelemetryEventsCollector ExtHandler Successfully started the TelemetryEventsCollector thread Sep 6 00:20:17.666179 waagent[1618]: 2025-09-06T00:20:17.666102Z INFO ExtHandler ExtHandler Downloading agent manifest Sep 6 00:20:17.669098 waagent[1618]: 2025-09-06T00:20:17.669017Z INFO MonitorHandler ExtHandler Network interfaces: Sep 6 00:20:17.669098 waagent[1618]: Executing ['ip', '-a', '-o', 'link']: Sep 6 00:20:17.669098 waagent[1618]: 1: lo: mtu 65536 qdisc noqueue state UNKNOWN mode DEFAULT group default qlen 1000\ link/loopback 00:00:00:00:00:00 brd 00:00:00:00:00:00 Sep 6 00:20:17.669098 waagent[1618]: 2: eth0: mtu 1500 qdisc mq state UP mode DEFAULT group default qlen 1000\ link/ether 7c:ed:8d:2d:b4:05 brd ff:ff:ff:ff:ff:ff Sep 6 00:20:17.669098 waagent[1618]: 3: enP30592s1: mtu 1500 qdisc mq master eth0 state UP mode DEFAULT group default qlen 1000\ link/ether 7c:ed:8d:2d:b4:05 brd ff:ff:ff:ff:ff:ff\ altname enP30592p0s2 Sep 6 00:20:17.669098 waagent[1618]: Executing ['ip', '-4', '-a', '-o', 'address']: Sep 6 00:20:17.669098 waagent[1618]: 1: lo inet 127.0.0.1/8 scope host lo\ valid_lft forever preferred_lft forever Sep 6 00:20:17.669098 waagent[1618]: 2: eth0 inet 10.200.8.38/24 metric 1024 brd 10.200.8.255 scope global eth0\ valid_lft forever preferred_lft forever Sep 6 00:20:17.669098 waagent[1618]: Executing ['ip', '-6', '-a', '-o', 'address']: Sep 6 00:20:17.669098 waagent[1618]: 1: lo inet6 ::1/128 scope host \ valid_lft forever preferred_lft forever Sep 6 00:20:17.669098 waagent[1618]: 2: eth0 inet6 fe80::7eed:8dff:fe2d:b405/64 scope link \ valid_lft forever preferred_lft forever Sep 6 00:20:17.689306 waagent[1618]: 2025-09-06T00:20:17.689218Z INFO EnvHandler ExtHandler Using iptables [version 1.8.8] to manage firewall rules Sep 6 00:20:17.721171 waagent[1618]: 2025-09-06T00:20:17.721085Z INFO ExtHandler ExtHandler Sep 6 00:20:17.722674 waagent[1618]: 2025-09-06T00:20:17.722591Z INFO ExtHandler ExtHandler ProcessExtensionsGoalState started [incarnation_1 channel: WireServer source: Fabric activity: 2447febe-cb5c-4f84-ba32-7e0348b80096 correlation 34fbc564-7494-4338-8f19-75e29da1b1f2 created: 2025-09-06T00:18:39.147881Z] Sep 6 00:20:17.723185 waagent[1618]: 2025-09-06T00:20:17.723121Z WARNING EnvHandler ExtHandler The firewall is not configured correctly. The following rules are missing: ['ACCEPT DNS'] due to: ['iptables: Bad rule (does a matching rule exist in that chain?).\n']. Will reset it. Current state: Sep 6 00:20:17.723185 waagent[1618]: Chain INPUT (policy ACCEPT 0 packets, 0 bytes) Sep 6 00:20:17.723185 waagent[1618]: pkts bytes target prot opt in out source destination Sep 6 00:20:17.723185 waagent[1618]: Chain FORWARD (policy ACCEPT 0 packets, 0 bytes) Sep 6 00:20:17.723185 waagent[1618]: pkts bytes target prot opt in out source destination Sep 6 00:20:17.723185 waagent[1618]: Chain OUTPUT (policy ACCEPT 0 packets, 0 bytes) Sep 6 00:20:17.723185 waagent[1618]: pkts bytes target prot opt in out source destination Sep 6 00:20:17.723185 waagent[1618]: 77 10615 ACCEPT tcp -- * * 0.0.0.0/0 168.63.129.16 owner UID match 0 Sep 6 00:20:17.723185 waagent[1618]: 0 0 DROP tcp -- * * 0.0.0.0/0 168.63.129.16 ctstate INVALID,NEW Sep 6 00:20:17.725338 waagent[1618]: 2025-09-06T00:20:17.725272Z INFO ExtHandler ExtHandler No extension handlers found, not processing anything. Sep 6 00:20:17.733125 waagent[1618]: 2025-09-06T00:20:17.733045Z INFO ExtHandler ExtHandler ProcessExtensionsGoalState completed [incarnation_1 11 ms] Sep 6 00:20:17.768792 waagent[1618]: 2025-09-06T00:20:17.768711Z INFO ExtHandler ExtHandler Looking for existing remote access users. Sep 6 00:20:17.771657 waagent[1618]: 2025-09-06T00:20:17.771581Z INFO ExtHandler ExtHandler [HEARTBEAT] Agent WALinuxAgent-2.14.0.1 is running as the goal state agent [DEBUG HeartbeatCounter: 0;HeartbeatId: 2C16CD4C-7251-4436-94AD-DACC3E5E8A84;UpdateGSErrors: 0;AutoUpdate: 1;UpdateMode: SelfUpdate;] Sep 6 00:20:17.793955 waagent[1618]: 2025-09-06T00:20:17.793819Z INFO EnvHandler ExtHandler The firewall was setup successfully: Sep 6 00:20:17.793955 waagent[1618]: Chain INPUT (policy ACCEPT 0 packets, 0 bytes) Sep 6 00:20:17.793955 waagent[1618]: pkts bytes target prot opt in out source destination Sep 6 00:20:17.793955 waagent[1618]: Chain FORWARD (policy ACCEPT 0 packets, 0 bytes) Sep 6 00:20:17.793955 waagent[1618]: pkts bytes target prot opt in out source destination Sep 6 00:20:17.793955 waagent[1618]: Chain OUTPUT (policy ACCEPT 0 packets, 0 bytes) Sep 6 00:20:17.793955 waagent[1618]: pkts bytes target prot opt in out source destination Sep 6 00:20:17.793955 waagent[1618]: 0 0 ACCEPT tcp -- * * 0.0.0.0/0 168.63.129.16 tcp dpt:53 Sep 6 00:20:17.793955 waagent[1618]: 1 52 ACCEPT tcp -- * * 0.0.0.0/0 168.63.129.16 owner UID match 0 Sep 6 00:20:17.793955 waagent[1618]: 0 0 DROP tcp -- * * 0.0.0.0/0 168.63.129.16 ctstate INVALID,NEW Sep 6 00:20:17.795499 waagent[1618]: 2025-09-06T00:20:17.795436Z INFO EnvHandler ExtHandler Set block dev timeout: sda with timeout: 300 Sep 6 00:20:20.120087 systemd[1]: kubelet.service: Scheduled restart job, restart counter is at 2. Sep 6 00:20:20.120350 systemd[1]: Stopped kubelet.service. Sep 6 00:20:20.122237 systemd[1]: Starting kubelet.service... Sep 6 00:20:20.230045 systemd[1]: Started kubelet.service. Sep 6 00:20:20.907485 kubelet[1668]: E0906 00:20:20.907419 1668 run.go:72] "command failed" err="failed to load kubelet config file, path: /var/lib/kubelet/config.yaml, error: failed to load Kubelet config file /var/lib/kubelet/config.yaml, error failed to read kubelet config file \"/var/lib/kubelet/config.yaml\", error: open /var/lib/kubelet/config.yaml: no such file or directory" Sep 6 00:20:20.909337 systemd[1]: kubelet.service: Main process exited, code=exited, status=1/FAILURE Sep 6 00:20:20.909515 systemd[1]: kubelet.service: Failed with result 'exit-code'. Sep 6 00:20:26.155902 systemd[1]: Created slice system-sshd.slice. Sep 6 00:20:26.158110 systemd[1]: Started sshd@0-10.200.8.38:22-10.200.16.10:46628.service. Sep 6 00:20:26.982101 sshd[1676]: Accepted publickey for core from 10.200.16.10 port 46628 ssh2: RSA SHA256:uuTnLiNcRPm0GiQNxQzV5yeEUYAAoVqCJQ50MkNRqrg Sep 6 00:20:26.983685 sshd[1676]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Sep 6 00:20:26.987697 systemd-logind[1407]: New session 3 of user core. Sep 6 00:20:26.989042 systemd[1]: Started session-3.scope. Sep 6 00:20:27.535595 systemd[1]: Started sshd@1-10.200.8.38:22-10.200.16.10:46640.service. Sep 6 00:20:28.171715 sshd[1681]: Accepted publickey for core from 10.200.16.10 port 46640 ssh2: RSA SHA256:uuTnLiNcRPm0GiQNxQzV5yeEUYAAoVqCJQ50MkNRqrg Sep 6 00:20:28.173722 sshd[1681]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Sep 6 00:20:28.179402 systemd[1]: Started session-4.scope. Sep 6 00:20:28.180164 systemd-logind[1407]: New session 4 of user core. Sep 6 00:20:28.626065 sshd[1681]: pam_unix(sshd:session): session closed for user core Sep 6 00:20:28.629645 systemd[1]: sshd@1-10.200.8.38:22-10.200.16.10:46640.service: Deactivated successfully. Sep 6 00:20:28.630754 systemd[1]: session-4.scope: Deactivated successfully. Sep 6 00:20:28.631488 systemd-logind[1407]: Session 4 logged out. Waiting for processes to exit. Sep 6 00:20:28.632372 systemd-logind[1407]: Removed session 4. Sep 6 00:20:28.740746 systemd[1]: Started sshd@2-10.200.8.38:22-10.200.16.10:46644.service. Sep 6 00:20:29.380173 sshd[1687]: Accepted publickey for core from 10.200.16.10 port 46644 ssh2: RSA SHA256:uuTnLiNcRPm0GiQNxQzV5yeEUYAAoVqCJQ50MkNRqrg Sep 6 00:20:29.381856 sshd[1687]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Sep 6 00:20:29.387295 systemd[1]: Started session-5.scope. Sep 6 00:20:29.387782 systemd-logind[1407]: New session 5 of user core. Sep 6 00:20:29.829275 sshd[1687]: pam_unix(sshd:session): session closed for user core Sep 6 00:20:29.833298 systemd[1]: sshd@2-10.200.8.38:22-10.200.16.10:46644.service: Deactivated successfully. Sep 6 00:20:29.834599 systemd[1]: session-5.scope: Deactivated successfully. Sep 6 00:20:29.835225 systemd-logind[1407]: Session 5 logged out. Waiting for processes to exit. Sep 6 00:20:29.836365 systemd-logind[1407]: Removed session 5. Sep 6 00:20:29.936358 systemd[1]: Started sshd@3-10.200.8.38:22-10.200.16.10:51752.service. Sep 6 00:20:30.574032 sshd[1693]: Accepted publickey for core from 10.200.16.10 port 51752 ssh2: RSA SHA256:uuTnLiNcRPm0GiQNxQzV5yeEUYAAoVqCJQ50MkNRqrg Sep 6 00:20:30.575694 sshd[1693]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Sep 6 00:20:30.580959 systemd[1]: Started session-6.scope. Sep 6 00:20:30.581623 systemd-logind[1407]: New session 6 of user core. Sep 6 00:20:30.924798 systemd[1]: kubelet.service: Scheduled restart job, restart counter is at 3. Sep 6 00:20:30.925058 systemd[1]: Stopped kubelet.service. Sep 6 00:20:30.927083 systemd[1]: Starting kubelet.service... Sep 6 00:20:31.029721 sshd[1693]: pam_unix(sshd:session): session closed for user core Sep 6 00:20:31.036963 systemd[1]: Started kubelet.service. Sep 6 00:20:31.038064 systemd[1]: sshd@3-10.200.8.38:22-10.200.16.10:51752.service: Deactivated successfully. Sep 6 00:20:31.039351 systemd[1]: session-6.scope: Deactivated successfully. Sep 6 00:20:31.040239 systemd-logind[1407]: Session 6 logged out. Waiting for processes to exit. Sep 6 00:20:31.043131 systemd-logind[1407]: Removed session 6. Sep 6 00:20:31.084868 kubelet[1701]: E0906 00:20:31.084807 1701 run.go:72] "command failed" err="failed to load kubelet config file, path: /var/lib/kubelet/config.yaml, error: failed to load Kubelet config file /var/lib/kubelet/config.yaml, error failed to read kubelet config file \"/var/lib/kubelet/config.yaml\", error: open /var/lib/kubelet/config.yaml: no such file or directory" Sep 6 00:20:31.086626 systemd[1]: kubelet.service: Main process exited, code=exited, status=1/FAILURE Sep 6 00:20:31.086803 systemd[1]: kubelet.service: Failed with result 'exit-code'. Sep 6 00:20:31.137342 systemd[1]: Started sshd@4-10.200.8.38:22-10.200.16.10:51766.service. Sep 6 00:20:31.774185 sshd[1709]: Accepted publickey for core from 10.200.16.10 port 51766 ssh2: RSA SHA256:uuTnLiNcRPm0GiQNxQzV5yeEUYAAoVqCJQ50MkNRqrg Sep 6 00:20:31.775769 sshd[1709]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Sep 6 00:20:31.784556 systemd[1]: Started session-7.scope. Sep 6 00:20:31.785119 systemd-logind[1407]: New session 7 of user core. Sep 6 00:20:32.347676 sudo[1712]: core : PWD=/home/core ; USER=root ; COMMAND=/usr/sbin/setenforce 1 Sep 6 00:20:32.348047 sudo[1712]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=500) Sep 6 00:20:32.370213 dbus-daemon[1391]: \xd0\xedLМU: received setenforce notice (enforcing=-933921968) Sep 6 00:20:32.372656 sudo[1712]: pam_unix(sudo:session): session closed for user root Sep 6 00:20:32.490835 sshd[1709]: pam_unix(sshd:session): session closed for user core Sep 6 00:20:32.494465 systemd[1]: sshd@4-10.200.8.38:22-10.200.16.10:51766.service: Deactivated successfully. Sep 6 00:20:32.495512 systemd[1]: session-7.scope: Deactivated successfully. Sep 6 00:20:32.496276 systemd-logind[1407]: Session 7 logged out. Waiting for processes to exit. Sep 6 00:20:32.497216 systemd-logind[1407]: Removed session 7. Sep 6 00:20:32.601218 systemd[1]: Started sshd@5-10.200.8.38:22-10.200.16.10:51782.service. Sep 6 00:20:33.238754 sshd[1716]: Accepted publickey for core from 10.200.16.10 port 51782 ssh2: RSA SHA256:uuTnLiNcRPm0GiQNxQzV5yeEUYAAoVqCJQ50MkNRqrg Sep 6 00:20:33.240399 sshd[1716]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Sep 6 00:20:33.246279 systemd[1]: Started session-8.scope. Sep 6 00:20:33.247195 systemd-logind[1407]: New session 8 of user core. Sep 6 00:20:33.589198 sudo[1720]: core : PWD=/home/core ; USER=root ; COMMAND=/usr/bin/rm -rf /etc/audit/rules.d/80-selinux.rules /etc/audit/rules.d/99-default.rules Sep 6 00:20:33.589525 sudo[1720]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=500) Sep 6 00:20:33.593023 sudo[1720]: pam_unix(sudo:session): session closed for user root Sep 6 00:20:33.598405 sudo[1719]: core : PWD=/home/core ; USER=root ; COMMAND=/usr/bin/systemctl restart audit-rules Sep 6 00:20:33.598720 sudo[1719]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=500) Sep 6 00:20:33.609011 systemd[1]: Stopping audit-rules.service... Sep 6 00:20:33.609000 audit: CONFIG_CHANGE auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op=remove_rule key=(null) list=5 res=1 Sep 6 00:20:33.615210 kernel: kauditd_printk_skb: 1 callbacks suppressed Sep 6 00:20:33.615293 kernel: audit: type=1305 audit(1757118033.609:208): auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op=remove_rule key=(null) list=5 res=1 Sep 6 00:20:33.615317 auditctl[1723]: No rules Sep 6 00:20:33.615818 systemd[1]: audit-rules.service: Deactivated successfully. Sep 6 00:20:33.616011 systemd[1]: Stopped audit-rules.service. Sep 6 00:20:33.626391 systemd[1]: Starting audit-rules.service... Sep 6 00:20:33.609000 audit[1723]: SYSCALL arch=c000003e syscall=44 success=yes exit=1056 a0=3 a1=7ffc1d411a80 a2=420 a3=0 items=0 ppid=1 pid=1723 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auditctl" exe="/usr/sbin/auditctl" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:20:33.609000 audit: PROCTITLE proctitle=2F7362696E2F617564697463746C002D44 Sep 6 00:20:33.654050 augenrules[1740]: No rules Sep 6 00:20:33.655179 systemd[1]: Finished audit-rules.service. Sep 6 00:20:33.658837 kernel: audit: type=1300 audit(1757118033.609:208): arch=c000003e syscall=44 success=yes exit=1056 a0=3 a1=7ffc1d411a80 a2=420 a3=0 items=0 ppid=1 pid=1723 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auditctl" exe="/usr/sbin/auditctl" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:20:33.658923 kernel: audit: type=1327 audit(1757118033.609:208): proctitle=2F7362696E2F617564697463746C002D44 Sep 6 00:20:33.658974 kernel: audit: type=1131 audit(1757118033.614:209): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=audit-rules comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 00:20:33.614000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=audit-rules comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 00:20:33.657800 sudo[1719]: pam_unix(sudo:session): session closed for user root Sep 6 00:20:33.677039 kernel: audit: type=1130 audit(1757118033.654:210): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=audit-rules comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 00:20:33.654000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=audit-rules comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 00:20:33.690008 kernel: audit: type=1106 audit(1757118033.656:211): pid=1719 uid=500 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_limits,pam_env,pam_unix,pam_permit,pam_systemd acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Sep 6 00:20:33.656000 audit[1719]: USER_END pid=1719 uid=500 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_limits,pam_env,pam_unix,pam_permit,pam_systemd acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Sep 6 00:20:33.657000 audit[1719]: CRED_DISP pid=1719 uid=500 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Sep 6 00:20:33.708954 kernel: audit: type=1104 audit(1757118033.657:212): pid=1719 uid=500 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Sep 6 00:20:33.760173 sshd[1716]: pam_unix(sshd:session): session closed for user core Sep 6 00:20:33.760000 audit[1716]: USER_END pid=1716 uid=0 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Sep 6 00:20:33.763479 systemd[1]: sshd@5-10.200.8.38:22-10.200.16.10:51782.service: Deactivated successfully. Sep 6 00:20:33.764392 systemd[1]: session-8.scope: Deactivated successfully. Sep 6 00:20:33.765739 systemd-logind[1407]: Session 8 logged out. Waiting for processes to exit. Sep 6 00:20:33.766723 systemd-logind[1407]: Removed session 8. Sep 6 00:20:33.760000 audit[1716]: CRED_DISP pid=1716 uid=0 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Sep 6 00:20:33.805819 kernel: audit: type=1106 audit(1757118033.760:213): pid=1716 uid=0 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Sep 6 00:20:33.806011 kernel: audit: type=1104 audit(1757118033.760:214): pid=1716 uid=0 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Sep 6 00:20:33.806037 kernel: audit: type=1131 audit(1757118033.760:215): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@5-10.200.8.38:22-10.200.16.10:51782 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 00:20:33.760000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@5-10.200.8.38:22-10.200.16.10:51782 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 00:20:33.867248 systemd[1]: Started sshd@6-10.200.8.38:22-10.200.16.10:51792.service. Sep 6 00:20:33.866000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@6-10.200.8.38:22-10.200.16.10:51792 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 00:20:34.504000 audit[1746]: USER_ACCT pid=1746 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Sep 6 00:20:34.506200 sshd[1746]: Accepted publickey for core from 10.200.16.10 port 51792 ssh2: RSA SHA256:uuTnLiNcRPm0GiQNxQzV5yeEUYAAoVqCJQ50MkNRqrg Sep 6 00:20:34.506000 audit[1746]: CRED_ACQ pid=1746 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Sep 6 00:20:34.506000 audit[1746]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7fffd32443a0 a2=3 a3=0 items=0 ppid=1 pid=1746 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=9 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:20:34.506000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Sep 6 00:20:34.507866 sshd[1746]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Sep 6 00:20:34.513846 systemd[1]: Started session-9.scope. Sep 6 00:20:34.514346 systemd-logind[1407]: New session 9 of user core. Sep 6 00:20:34.518000 audit[1746]: USER_START pid=1746 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Sep 6 00:20:34.519000 audit[1748]: CRED_ACQ pid=1748 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Sep 6 00:20:34.854000 audit[1749]: USER_ACCT pid=1749 uid=500 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Sep 6 00:20:34.855000 audit[1749]: CRED_REFR pid=1749 uid=500 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Sep 6 00:20:34.855924 sudo[1749]: core : PWD=/home/core ; USER=root ; COMMAND=/home/core/install.sh Sep 6 00:20:34.856272 sudo[1749]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=500) Sep 6 00:20:34.857000 audit[1749]: USER_START pid=1749 uid=500 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_limits,pam_env,pam_unix,pam_permit,pam_systemd acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Sep 6 00:20:34.884815 systemd[1]: Starting docker.service... Sep 6 00:20:34.924921 env[1759]: time="2025-09-06T00:20:34.924870296Z" level=info msg="Starting up" Sep 6 00:20:34.926812 env[1759]: time="2025-09-06T00:20:34.926766594Z" level=info msg="parsed scheme: \"unix\"" module=grpc Sep 6 00:20:34.926812 env[1759]: time="2025-09-06T00:20:34.926792594Z" level=info msg="scheme \"unix\" not registered, fallback to default scheme" module=grpc Sep 6 00:20:34.927064 env[1759]: time="2025-09-06T00:20:34.926818094Z" level=info msg="ccResolverWrapper: sending update to cc: {[{unix:///var/run/docker/libcontainerd/docker-containerd.sock 0 }] }" module=grpc Sep 6 00:20:34.927064 env[1759]: time="2025-09-06T00:20:34.926831694Z" level=info msg="ClientConn switching balancer to \"pick_first\"" module=grpc Sep 6 00:20:34.928996 env[1759]: time="2025-09-06T00:20:34.928908092Z" level=info msg="parsed scheme: \"unix\"" module=grpc Sep 6 00:20:34.928996 env[1759]: time="2025-09-06T00:20:34.928943292Z" level=info msg="scheme \"unix\" not registered, fallback to default scheme" module=grpc Sep 6 00:20:34.928996 env[1759]: time="2025-09-06T00:20:34.928963892Z" level=info msg="ccResolverWrapper: sending update to cc: {[{unix:///var/run/docker/libcontainerd/docker-containerd.sock 0 }] }" module=grpc Sep 6 00:20:34.928996 env[1759]: time="2025-09-06T00:20:34.928989092Z" level=info msg="ClientConn switching balancer to \"pick_first\"" module=grpc Sep 6 00:20:34.937584 systemd[1]: var-lib-docker-check\x2doverlayfs\x2dsupport768182812-merged.mount: Deactivated successfully. Sep 6 00:20:35.022476 env[1759]: time="2025-09-06T00:20:35.022423714Z" level=info msg="Loading containers: start." Sep 6 00:20:35.083000 audit[1787]: NETFILTER_CFG table=nat:9 family=2 entries=2 op=nft_register_chain pid=1787 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 6 00:20:35.083000 audit[1787]: SYSCALL arch=c000003e syscall=46 success=yes exit=116 a0=3 a1=7fffb632e380 a2=0 a3=7fffb632e36c items=0 ppid=1759 pid=1787 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:20:35.083000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D74006E6174002D4E00444F434B4552 Sep 6 00:20:35.087000 audit[1789]: NETFILTER_CFG table=filter:10 family=2 entries=2 op=nft_register_chain pid=1789 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 6 00:20:35.087000 audit[1789]: SYSCALL arch=c000003e syscall=46 success=yes exit=124 a0=3 a1=7ffdd7cb84c0 a2=0 a3=7ffdd7cb84ac items=0 ppid=1759 pid=1789 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:20:35.087000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D740066696C746572002D4E00444F434B4552 Sep 6 00:20:35.090000 audit[1791]: NETFILTER_CFG table=filter:11 family=2 entries=1 op=nft_register_chain pid=1791 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 6 00:20:35.090000 audit[1791]: SYSCALL arch=c000003e syscall=46 success=yes exit=112 a0=3 a1=7ffd85117b50 a2=0 a3=7ffd85117b3c items=0 ppid=1759 pid=1791 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:20:35.090000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D740066696C746572002D4E00444F434B45522D49534F4C4154494F4E2D53544147452D31 Sep 6 00:20:35.093000 audit[1793]: NETFILTER_CFG table=filter:12 family=2 entries=1 op=nft_register_chain pid=1793 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 6 00:20:35.093000 audit[1793]: SYSCALL arch=c000003e syscall=46 success=yes exit=112 a0=3 a1=7ffdc6091030 a2=0 a3=7ffdc609101c items=0 ppid=1759 pid=1793 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:20:35.093000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D740066696C746572002D4E00444F434B45522D49534F4C4154494F4E2D53544147452D32 Sep 6 00:20:35.095000 audit[1795]: NETFILTER_CFG table=filter:13 family=2 entries=1 op=nft_register_rule pid=1795 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 6 00:20:35.095000 audit[1795]: SYSCALL arch=c000003e syscall=46 success=yes exit=228 a0=3 a1=7ffd564e4640 a2=0 a3=7ffd564e462c items=0 ppid=1759 pid=1795 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:20:35.095000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4100444F434B45522D49534F4C4154494F4E2D53544147452D31002D6A0052455455524E Sep 6 00:20:35.098000 audit[1797]: NETFILTER_CFG table=filter:14 family=2 entries=1 op=nft_register_rule pid=1797 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 6 00:20:35.098000 audit[1797]: SYSCALL arch=c000003e syscall=46 success=yes exit=228 a0=3 a1=7ffda1f2e6b0 a2=0 a3=7ffda1f2e69c items=0 ppid=1759 pid=1797 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:20:35.098000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4100444F434B45522D49534F4C4154494F4E2D53544147452D32002D6A0052455455524E Sep 6 00:20:35.115000 audit[1799]: NETFILTER_CFG table=filter:15 family=2 entries=1 op=nft_register_chain pid=1799 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 6 00:20:35.115000 audit[1799]: SYSCALL arch=c000003e syscall=46 success=yes exit=96 a0=3 a1=7ffe70e879c0 a2=0 a3=7ffe70e879ac items=0 ppid=1759 pid=1799 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:20:35.115000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D740066696C746572002D4E00444F434B45522D55534552 Sep 6 00:20:35.118000 audit[1801]: NETFILTER_CFG table=filter:16 family=2 entries=1 op=nft_register_rule pid=1801 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 6 00:20:35.118000 audit[1801]: SYSCALL arch=c000003e syscall=46 success=yes exit=212 a0=3 a1=7fff71fe7870 a2=0 a3=7fff71fe785c items=0 ppid=1759 pid=1801 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:20:35.118000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4100444F434B45522D55534552002D6A0052455455524E Sep 6 00:20:35.120000 audit[1803]: NETFILTER_CFG table=filter:17 family=2 entries=2 op=nft_register_chain pid=1803 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 6 00:20:35.120000 audit[1803]: SYSCALL arch=c000003e syscall=46 success=yes exit=308 a0=3 a1=7ffcea240e60 a2=0 a3=7ffcea240e4c items=0 ppid=1759 pid=1803 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:20:35.120000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6A00444F434B45522D55534552 Sep 6 00:20:35.136000 audit[1807]: NETFILTER_CFG table=filter:18 family=2 entries=1 op=nft_unregister_rule pid=1807 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 6 00:20:35.136000 audit[1807]: SYSCALL arch=c000003e syscall=46 success=yes exit=216 a0=3 a1=7ffcf35f5e00 a2=0 a3=7ffcf35f5dec items=0 ppid=1759 pid=1807 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:20:35.136000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4400464F5257415244002D6A00444F434B45522D55534552 Sep 6 00:20:35.142000 audit[1808]: NETFILTER_CFG table=filter:19 family=2 entries=1 op=nft_register_rule pid=1808 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 6 00:20:35.142000 audit[1808]: SYSCALL arch=c000003e syscall=46 success=yes exit=224 a0=3 a1=7ffdd624dee0 a2=0 a3=7ffdd624decc items=0 ppid=1759 pid=1808 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:20:35.142000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6A00444F434B45522D55534552 Sep 6 00:20:35.187248 kernel: Initializing XFRM netlink socket Sep 6 00:20:35.226401 env[1759]: time="2025-09-06T00:20:35.226349353Z" level=info msg="Default bridge (docker0) is assigned with an IP address 172.17.0.0/16. Daemon option --bip can be used to set a preferred IP address" Sep 6 00:20:35.289000 audit[1816]: NETFILTER_CFG table=nat:20 family=2 entries=2 op=nft_register_chain pid=1816 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 6 00:20:35.289000 audit[1816]: SYSCALL arch=c000003e syscall=46 success=yes exit=492 a0=3 a1=7ffc92f0e4c0 a2=0 a3=7ffc92f0e4ac items=0 ppid=1759 pid=1816 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:20:35.289000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D74006E6174002D4900504F5354524F5554494E47002D73003137322E31372E302E302F31360000002D6F00646F636B657230002D6A004D415351554552414445 Sep 6 00:20:35.300000 audit[1819]: NETFILTER_CFG table=nat:21 family=2 entries=1 op=nft_register_rule pid=1819 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 6 00:20:35.300000 audit[1819]: SYSCALL arch=c000003e syscall=46 success=yes exit=288 a0=3 a1=7ffdc56a2500 a2=0 a3=7ffdc56a24ec items=0 ppid=1759 pid=1819 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:20:35.300000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D74006E6174002D4900444F434B4552002D6900646F636B657230002D6A0052455455524E Sep 6 00:20:35.304000 audit[1822]: NETFILTER_CFG table=filter:22 family=2 entries=1 op=nft_register_rule pid=1822 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 6 00:20:35.304000 audit[1822]: SYSCALL arch=c000003e syscall=46 success=yes exit=376 a0=3 a1=7ffdf5b1a7e0 a2=0 a3=7ffdf5b1a7cc items=0 ppid=1759 pid=1822 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:20:35.304000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6900646F636B657230002D6F00646F636B657230002D6A00414343455054 Sep 6 00:20:35.306000 audit[1824]: NETFILTER_CFG table=filter:23 family=2 entries=1 op=nft_register_rule pid=1824 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 6 00:20:35.306000 audit[1824]: SYSCALL arch=c000003e syscall=46 success=yes exit=376 a0=3 a1=7ffe6cc22ed0 a2=0 a3=7ffe6cc22ebc items=0 ppid=1759 pid=1824 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:20:35.306000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6900646F636B6572300000002D6F00646F636B657230002D6A00414343455054 Sep 6 00:20:35.308000 audit[1826]: NETFILTER_CFG table=nat:24 family=2 entries=2 op=nft_register_chain pid=1826 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 6 00:20:35.308000 audit[1826]: SYSCALL arch=c000003e syscall=46 success=yes exit=356 a0=3 a1=7ffc1b443520 a2=0 a3=7ffc1b44350c items=0 ppid=1759 pid=1826 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:20:35.308000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D74006E6174002D4100505245524F5554494E47002D6D006164647274797065002D2D6473742D74797065004C4F43414C002D6A00444F434B4552 Sep 6 00:20:35.311000 audit[1828]: NETFILTER_CFG table=nat:25 family=2 entries=2 op=nft_register_chain pid=1828 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 6 00:20:35.311000 audit[1828]: SYSCALL arch=c000003e syscall=46 success=yes exit=444 a0=3 a1=7ffe2d763970 a2=0 a3=7ffe2d76395c items=0 ppid=1759 pid=1828 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:20:35.311000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D74006E6174002D41004F5554505554002D6D006164647274797065002D2D6473742D74797065004C4F43414C002D6A00444F434B45520000002D2D647374003132372E302E302E302F38 Sep 6 00:20:35.313000 audit[1830]: NETFILTER_CFG table=filter:26 family=2 entries=1 op=nft_register_rule pid=1830 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 6 00:20:35.313000 audit[1830]: SYSCALL arch=c000003e syscall=46 success=yes exit=304 a0=3 a1=7ffe2a38c530 a2=0 a3=7ffe2a38c51c items=0 ppid=1759 pid=1830 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:20:35.313000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6F00646F636B657230002D6A00444F434B4552 Sep 6 00:20:35.315000 audit[1832]: NETFILTER_CFG table=filter:27 family=2 entries=1 op=nft_register_rule pid=1832 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 6 00:20:35.315000 audit[1832]: SYSCALL arch=c000003e syscall=46 success=yes exit=508 a0=3 a1=7ffce42cec60 a2=0 a3=7ffce42cec4c items=0 ppid=1759 pid=1832 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:20:35.315000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6F00646F636B657230002D6D00636F6E6E747261636B002D2D637473746174650052454C415445442C45535441424C4953484544002D6A00414343455054 Sep 6 00:20:35.318000 audit[1834]: NETFILTER_CFG table=filter:28 family=2 entries=1 op=nft_register_rule pid=1834 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 6 00:20:35.318000 audit[1834]: SYSCALL arch=c000003e syscall=46 success=yes exit=240 a0=3 a1=7ffe5a1b4a20 a2=0 a3=7ffe5a1b4a0c items=0 ppid=1759 pid=1834 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:20:35.318000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6A00444F434B45522D49534F4C4154494F4E2D53544147452D31 Sep 6 00:20:35.320000 audit[1836]: NETFILTER_CFG table=filter:29 family=2 entries=1 op=nft_register_rule pid=1836 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 6 00:20:35.320000 audit[1836]: SYSCALL arch=c000003e syscall=46 success=yes exit=428 a0=3 a1=7ffe53685f90 a2=0 a3=7ffe53685f7c items=0 ppid=1759 pid=1836 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:20:35.320000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D740066696C746572002D4900444F434B45522D49534F4C4154494F4E2D53544147452D31002D6900646F636B6572300000002D6F00646F636B657230002D6A00444F434B45522D49534F4C4154494F4E2D53544147452D32 Sep 6 00:20:35.322000 audit[1838]: NETFILTER_CFG table=filter:30 family=2 entries=1 op=nft_register_rule pid=1838 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 6 00:20:35.322000 audit[1838]: SYSCALL arch=c000003e syscall=46 success=yes exit=312 a0=3 a1=7ffd30264210 a2=0 a3=7ffd302641fc items=0 ppid=1759 pid=1838 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:20:35.322000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D740066696C746572002D4900444F434B45522D49534F4C4154494F4E2D53544147452D32002D6F00646F636B657230002D6A0044524F50 Sep 6 00:20:35.324205 systemd-networkd[1577]: docker0: Link UP Sep 6 00:20:35.341000 audit[1842]: NETFILTER_CFG table=filter:31 family=2 entries=1 op=nft_unregister_rule pid=1842 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 6 00:20:35.341000 audit[1842]: SYSCALL arch=c000003e syscall=46 success=yes exit=228 a0=3 a1=7ffcd8ab4180 a2=0 a3=7ffcd8ab416c items=0 ppid=1759 pid=1842 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:20:35.341000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4400464F5257415244002D6A00444F434B45522D55534552 Sep 6 00:20:35.347000 audit[1843]: NETFILTER_CFG table=filter:32 family=2 entries=1 op=nft_register_rule pid=1843 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 6 00:20:35.347000 audit[1843]: SYSCALL arch=c000003e syscall=46 success=yes exit=224 a0=3 a1=7fffc25196a0 a2=0 a3=7fffc251968c items=0 ppid=1759 pid=1843 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:20:35.347000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6A00444F434B45522D55534552 Sep 6 00:20:35.348686 env[1759]: time="2025-09-06T00:20:35.348646457Z" level=info msg="Loading containers: done." Sep 6 00:20:35.362634 systemd[1]: var-lib-docker-overlay2-opaque\x2dbug\x2dcheck3568202424-merged.mount: Deactivated successfully. Sep 6 00:20:35.387793 env[1759]: time="2025-09-06T00:20:35.387729726Z" level=warning msg="Not using native diff for overlay2, this may cause degraded performance for building images: kernel has CONFIG_OVERLAY_FS_REDIRECT_DIR enabled" storage-driver=overlay2 Sep 6 00:20:35.388106 env[1759]: time="2025-09-06T00:20:35.388025225Z" level=info msg="Docker daemon" commit=112bdf3343 graphdriver(s)=overlay2 version=20.10.23 Sep 6 00:20:35.388223 env[1759]: time="2025-09-06T00:20:35.388181625Z" level=info msg="Daemon has completed initialization" Sep 6 00:20:35.421017 systemd[1]: Started docker.service. Sep 6 00:20:35.420000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=docker comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 00:20:35.432864 env[1759]: time="2025-09-06T00:20:35.432789890Z" level=info msg="API listen on /run/docker.sock" Sep 6 00:20:36.089771 kernel: hv_balloon: Max. dynamic memory size: 8192 MB Sep 6 00:20:37.010097 env[1421]: time="2025-09-06T00:20:37.010030093Z" level=info msg="PullImage \"registry.k8s.io/kube-apiserver:v1.31.12\"" Sep 6 00:20:37.795161 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount2442775192.mount: Deactivated successfully. Sep 6 00:20:39.911285 env[1421]: time="2025-09-06T00:20:39.911210298Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-apiserver:v1.31.12,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 6 00:20:39.918039 env[1421]: time="2025-09-06T00:20:39.917979594Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:b1963c5b49c1722b8f408deaf83aafca7f48f47fed0ed14e5c10e93cc55974a7,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 6 00:20:39.922476 env[1421]: time="2025-09-06T00:20:39.922415691Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/kube-apiserver:v1.31.12,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 6 00:20:39.927448 env[1421]: time="2025-09-06T00:20:39.927392488Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-apiserver@sha256:e9011c3bee8c06ecabd7816e119dca4e448c92f7a78acd891de3d2db1dc6c234,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 6 00:20:39.928119 env[1421]: time="2025-09-06T00:20:39.928080187Z" level=info msg="PullImage \"registry.k8s.io/kube-apiserver:v1.31.12\" returns image reference \"sha256:b1963c5b49c1722b8f408deaf83aafca7f48f47fed0ed14e5c10e93cc55974a7\"" Sep 6 00:20:39.929139 env[1421]: time="2025-09-06T00:20:39.929106087Z" level=info msg="PullImage \"registry.k8s.io/kube-controller-manager:v1.31.12\"" Sep 6 00:20:41.119911 systemd[1]: kubelet.service: Scheduled restart job, restart counter is at 4. Sep 6 00:20:41.140564 kernel: kauditd_printk_skb: 84 callbacks suppressed Sep 6 00:20:41.141084 kernel: audit: type=1130 audit(1757118041.119:250): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 00:20:41.119000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 00:20:41.120218 systemd[1]: Stopped kubelet.service. Sep 6 00:20:41.121884 systemd[1]: Starting kubelet.service... Sep 6 00:20:41.119000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 00:20:41.159978 kernel: audit: type=1131 audit(1757118041.119:251): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 00:20:41.242000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 00:20:41.242904 systemd[1]: Started kubelet.service. Sep 6 00:20:41.260978 kernel: audit: type=1130 audit(1757118041.242:252): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 00:20:41.287996 kubelet[1879]: E0906 00:20:41.287914 1879 run.go:72] "command failed" err="failed to load kubelet config file, path: /var/lib/kubelet/config.yaml, error: failed to load Kubelet config file /var/lib/kubelet/config.yaml, error failed to read kubelet config file \"/var/lib/kubelet/config.yaml\", error: open /var/lib/kubelet/config.yaml: no such file or directory" Sep 6 00:20:41.289000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' Sep 6 00:20:41.289790 systemd[1]: kubelet.service: Main process exited, code=exited, status=1/FAILURE Sep 6 00:20:41.289915 systemd[1]: kubelet.service: Failed with result 'exit-code'. Sep 6 00:20:41.311972 kernel: audit: type=1131 audit(1757118041.289:253): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' Sep 6 00:20:42.935496 env[1421]: time="2025-09-06T00:20:42.935425862Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-controller-manager:v1.31.12,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 6 00:20:42.941194 update_engine[1409]: I0906 00:20:42.941141 1409 update_attempter.cc:509] Updating boot flags... Sep 6 00:20:42.942146 env[1421]: time="2025-09-06T00:20:42.942101358Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:200c1a99a6f2b9d3b0a6e9b7362663513589341e0e58bc3b953a373efa735dfd,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 6 00:20:42.946734 env[1421]: time="2025-09-06T00:20:42.946681856Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/kube-controller-manager:v1.31.12,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 6 00:20:42.949924 env[1421]: time="2025-09-06T00:20:42.949877054Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-controller-manager@sha256:d2862f94d87320267fddbd55db26556a267aa802e51d6b60f25786b4c428afc8,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 6 00:20:42.950686 env[1421]: time="2025-09-06T00:20:42.950642554Z" level=info msg="PullImage \"registry.k8s.io/kube-controller-manager:v1.31.12\" returns image reference \"sha256:200c1a99a6f2b9d3b0a6e9b7362663513589341e0e58bc3b953a373efa735dfd\"" Sep 6 00:20:42.951401 env[1421]: time="2025-09-06T00:20:42.951374754Z" level=info msg="PullImage \"registry.k8s.io/kube-scheduler:v1.31.12\"" Sep 6 00:20:44.842946 env[1421]: time="2025-09-06T00:20:44.842878685Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-scheduler:v1.31.12,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 6 00:20:44.849134 env[1421]: time="2025-09-06T00:20:44.849077882Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:bcdd9599681a9460a5539177a986dbdaf880ac56eeb117ab94adb8f37889efba,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 6 00:20:44.854782 env[1421]: time="2025-09-06T00:20:44.854728179Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/kube-scheduler:v1.31.12,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 6 00:20:44.859056 env[1421]: time="2025-09-06T00:20:44.859002677Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-scheduler@sha256:152943b7e30244f4415fd0a5860a2dccd91660fe983d30a28a10edb0cc8f6756,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 6 00:20:44.859777 env[1421]: time="2025-09-06T00:20:44.859727577Z" level=info msg="PullImage \"registry.k8s.io/kube-scheduler:v1.31.12\" returns image reference \"sha256:bcdd9599681a9460a5539177a986dbdaf880ac56eeb117ab94adb8f37889efba\"" Sep 6 00:20:44.860649 env[1421]: time="2025-09-06T00:20:44.860619377Z" level=info msg="PullImage \"registry.k8s.io/kube-proxy:v1.31.12\"" Sep 6 00:20:46.163039 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount2417982570.mount: Deactivated successfully. Sep 6 00:20:46.819814 env[1421]: time="2025-09-06T00:20:46.819744282Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-proxy:v1.31.12,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 6 00:20:46.824961 env[1421]: time="2025-09-06T00:20:46.824867480Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:507cc52f5f78c0cff25e904c76c18e6bfc90982e9cc2aa4dcb19033f21c3f679,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 6 00:20:46.828870 env[1421]: time="2025-09-06T00:20:46.828822078Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/kube-proxy:v1.31.12,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 6 00:20:46.832480 env[1421]: time="2025-09-06T00:20:46.832432977Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-proxy@sha256:90aa6b5f4065937521ff8438bc705317485d0be3f8b00a07145e697d92cc2cc6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 6 00:20:46.832830 env[1421]: time="2025-09-06T00:20:46.832792877Z" level=info msg="PullImage \"registry.k8s.io/kube-proxy:v1.31.12\" returns image reference \"sha256:507cc52f5f78c0cff25e904c76c18e6bfc90982e9cc2aa4dcb19033f21c3f679\"" Sep 6 00:20:46.833680 env[1421]: time="2025-09-06T00:20:46.833635576Z" level=info msg="PullImage \"registry.k8s.io/coredns/coredns:v1.11.3\"" Sep 6 00:20:47.405035 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount926745382.mount: Deactivated successfully. Sep 6 00:20:48.776597 env[1421]: time="2025-09-06T00:20:48.776525881Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/coredns/coredns:v1.11.3,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 6 00:20:48.785458 env[1421]: time="2025-09-06T00:20:48.785396378Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:c69fa2e9cbf5f42dc48af631e956d3f95724c13f91596bc567591790e5e36db6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 6 00:20:48.791075 env[1421]: time="2025-09-06T00:20:48.791015876Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/coredns/coredns:v1.11.3,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 6 00:20:48.795185 env[1421]: time="2025-09-06T00:20:48.795135875Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/coredns/coredns@sha256:9caabbf6238b189a65d0d6e6ac138de60d6a1c419e5a341fbbb7c78382559c6e,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 6 00:20:48.795875 env[1421]: time="2025-09-06T00:20:48.795831474Z" level=info msg="PullImage \"registry.k8s.io/coredns/coredns:v1.11.3\" returns image reference \"sha256:c69fa2e9cbf5f42dc48af631e956d3f95724c13f91596bc567591790e5e36db6\"" Sep 6 00:20:48.796595 env[1421]: time="2025-09-06T00:20:48.796564174Z" level=info msg="PullImage \"registry.k8s.io/pause:3.10\"" Sep 6 00:20:49.316563 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount1989015477.mount: Deactivated successfully. Sep 6 00:20:49.339897 env[1421]: time="2025-09-06T00:20:49.339827595Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/pause:3.10,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 6 00:20:49.348560 env[1421]: time="2025-09-06T00:20:49.348499292Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:873ed75102791e5b0b8a7fcd41606c92fcec98d56d05ead4ac5131650004c136,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 6 00:20:49.353967 env[1421]: time="2025-09-06T00:20:49.353876291Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause:3.10,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 6 00:20:49.358314 env[1421]: time="2025-09-06T00:20:49.358249789Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/pause@sha256:ee6521f290b2168b6e0935a181d4cff9be1ac3f505666ef0e3c98fae8199917a,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 6 00:20:49.358759 env[1421]: time="2025-09-06T00:20:49.358713889Z" level=info msg="PullImage \"registry.k8s.io/pause:3.10\" returns image reference \"sha256:873ed75102791e5b0b8a7fcd41606c92fcec98d56d05ead4ac5131650004c136\"" Sep 6 00:20:49.359353 env[1421]: time="2025-09-06T00:20:49.359320189Z" level=info msg="PullImage \"registry.k8s.io/etcd:3.5.15-0\"" Sep 6 00:20:50.008234 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount2277201062.mount: Deactivated successfully. Sep 6 00:20:51.390319 kernel: audit: type=1130 audit(1757118051.369:254): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 00:20:51.369000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 00:20:51.370218 systemd[1]: kubelet.service: Scheduled restart job, restart counter is at 5. Sep 6 00:20:51.370524 systemd[1]: Stopped kubelet.service. Sep 6 00:20:51.389920 systemd[1]: Starting kubelet.service... Sep 6 00:20:51.369000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 00:20:51.417880 kernel: audit: type=1131 audit(1757118051.369:255): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 00:20:51.566940 systemd[1]: Started kubelet.service. Sep 6 00:20:51.566000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 00:20:51.586078 kernel: audit: type=1130 audit(1757118051.566:256): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 00:20:51.636392 kubelet[1931]: E0906 00:20:51.636338 1931 run.go:72] "command failed" err="failed to load kubelet config file, path: /var/lib/kubelet/config.yaml, error: failed to load Kubelet config file /var/lib/kubelet/config.yaml, error failed to read kubelet config file \"/var/lib/kubelet/config.yaml\", error: open /var/lib/kubelet/config.yaml: no such file or directory" Sep 6 00:20:51.638000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' Sep 6 00:20:51.638826 systemd[1]: kubelet.service: Main process exited, code=exited, status=1/FAILURE Sep 6 00:20:51.639017 systemd[1]: kubelet.service: Failed with result 'exit-code'. Sep 6 00:20:51.659036 kernel: audit: type=1131 audit(1757118051.638:257): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' Sep 6 00:20:53.150293 env[1421]: time="2025-09-06T00:20:53.150224600Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/etcd:3.5.15-0,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 6 00:20:53.176164 env[1421]: time="2025-09-06T00:20:53.176077394Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:2e96e5913fc06e3d26915af3d0f2ca5048cc4b6327e661e80da792cbf8d8d9d4,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 6 00:20:53.323746 env[1421]: time="2025-09-06T00:20:53.323671457Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/etcd:3.5.15-0,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 6 00:20:53.331095 env[1421]: time="2025-09-06T00:20:53.331031955Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/etcd@sha256:a6dc63e6e8cfa0307d7851762fa6b629afb18f28d8aa3fab5a6e91b4af60026a,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 6 00:20:53.332165 env[1421]: time="2025-09-06T00:20:53.332113855Z" level=info msg="PullImage \"registry.k8s.io/etcd:3.5.15-0\" returns image reference \"sha256:2e96e5913fc06e3d26915af3d0f2ca5048cc4b6327e661e80da792cbf8d8d9d4\"" Sep 6 00:20:55.960000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 00:20:55.961280 systemd[1]: Stopped kubelet.service. Sep 6 00:20:55.964566 systemd[1]: Starting kubelet.service... Sep 6 00:20:55.982962 kernel: audit: type=1130 audit(1757118055.960:258): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 00:20:55.960000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 00:20:56.015068 kernel: audit: type=1131 audit(1757118055.960:259): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 00:20:56.046992 systemd[1]: Reloading. Sep 6 00:20:56.161825 /usr/lib/systemd/system-generators/torcx-generator[1981]: time="2025-09-06T00:20:56Z" level=debug msg="common configuration parsed" base_dir=/var/lib/torcx/ conf_dir=/etc/torcx/ run_dir=/run/torcx/ store_paths="[/usr/share/torcx/store /usr/share/oem/torcx/store/3510.3.8 /usr/share/oem/torcx/store /var/lib/torcx/store/3510.3.8 /var/lib/torcx/store]" Sep 6 00:20:56.162386 /usr/lib/systemd/system-generators/torcx-generator[1981]: time="2025-09-06T00:20:56Z" level=info msg="torcx already run" Sep 6 00:20:56.274821 systemd[1]: /usr/lib/systemd/system/locksmithd.service:8: Unit uses CPUShares=; please use CPUWeight= instead. Support for CPUShares= will be removed soon. Sep 6 00:20:56.274846 systemd[1]: /usr/lib/systemd/system/locksmithd.service:9: Unit uses MemoryLimit=; please use MemoryMax= instead. Support for MemoryLimit= will be removed soon. Sep 6 00:20:56.292599 systemd[1]: /run/systemd/system/docker.socket:8: ListenStream= references a path below legacy directory /var/run/, updating /var/run/docker.sock → /run/docker.sock; please update the unit file accordingly. Sep 6 00:20:56.385138 kernel: audit: type=1400 audit(1757118056.365:260): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:20:56.365000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:20:56.402955 kernel: audit: type=1400 audit(1757118056.365:261): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:20:56.365000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:20:56.365000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:20:56.444035 kernel: audit: type=1400 audit(1757118056.365:262): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:20:56.444207 kernel: audit: type=1400 audit(1757118056.365:263): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:20:56.365000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:20:56.445995 kernel: audit: audit_backlog=65 > audit_backlog_limit=64 Sep 6 00:20:56.470460 kernel: audit: type=1400 audit(1757118056.365:264): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:20:56.470609 kernel: audit: audit_lost=1 audit_rate_limit=0 audit_backlog_limit=64 Sep 6 00:20:56.365000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:20:56.495295 kernel: audit: type=1400 audit(1757118056.365:265): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:20:56.495449 kernel: audit: backlog limit exceeded Sep 6 00:20:56.365000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:20:56.517846 kernel: audit: type=1400 audit(1757118056.365:266): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:20:56.365000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:20:56.365000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:20:56.537057 kernel: audit: type=1400 audit(1757118056.365:267): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:20:56.365000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:20:56.383000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:20:56.383000 audit: BPF prog-id=44 op=LOAD Sep 6 00:20:56.384000 audit: BPF prog-id=27 op=UNLOAD Sep 6 00:20:56.384000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:20:56.384000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:20:56.384000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:20:56.384000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:20:56.384000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:20:56.384000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:20:56.384000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:20:56.384000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:20:56.384000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:20:56.384000 audit: BPF prog-id=45 op=LOAD Sep 6 00:20:56.384000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:20:56.384000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:20:56.384000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:20:56.384000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:20:56.384000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:20:56.384000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:20:56.384000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:20:56.384000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:20:56.384000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:20:56.384000 audit: BPF prog-id=46 op=LOAD Sep 6 00:20:56.384000 audit: BPF prog-id=28 op=UNLOAD Sep 6 00:20:56.384000 audit: BPF prog-id=29 op=UNLOAD Sep 6 00:20:56.385000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:20:56.385000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:20:56.385000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:20:56.385000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:20:56.385000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:20:56.385000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:20:56.385000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:20:56.385000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:20:56.385000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:20:56.401000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:20:56.402000 audit: BPF prog-id=47 op=LOAD Sep 6 00:20:56.402000 audit: BPF prog-id=41 op=UNLOAD Sep 6 00:20:56.423000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:20:56.423000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:20:56.423000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:20:56.423000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:20:56.423000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:20:56.423000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:20:56.423000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:20:56.423000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:20:56.423000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:20:56.443000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:20:56.443000 audit: BPF prog-id=48 op=LOAD Sep 6 00:20:56.443000 audit: BPF prog-id=36 op=UNLOAD Sep 6 00:20:56.443000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:20:56.443000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:20:56.443000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:20:56.443000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:20:56.443000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:20:56.443000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:20:56.443000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:20:56.443000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:20:56.443000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:20:56.444000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:20:56.444000 audit: BPF prog-id=49 op=LOAD Sep 6 00:20:56.444000 audit: BPF prog-id=30 op=UNLOAD Sep 6 00:20:56.517000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:20:56.517000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:20:56.517000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:20:56.535000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:20:56.537000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:20:56.537000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:20:56.537000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:20:56.537000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:20:56.537000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:20:56.537000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:20:56.537000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:20:56.537000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:20:56.537000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:20:56.537000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:20:56.537000 audit: BPF prog-id=52 op=LOAD Sep 6 00:20:56.537000 audit: BPF prog-id=37 op=UNLOAD Sep 6 00:20:56.539000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:20:56.539000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:20:56.539000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:20:56.539000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:20:56.539000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:20:56.539000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:20:56.539000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:20:56.539000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:20:56.539000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:20:56.540000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:20:56.540000 audit: BPF prog-id=53 op=LOAD Sep 6 00:20:56.540000 audit: BPF prog-id=38 op=UNLOAD Sep 6 00:20:56.540000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:20:56.540000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:20:56.540000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:20:56.540000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:20:56.540000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:20:56.540000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:20:56.540000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:20:56.540000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:20:56.540000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:20:56.540000 audit: BPF prog-id=54 op=LOAD Sep 6 00:20:56.540000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:20:56.540000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:20:56.540000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:20:56.540000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:20:56.540000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:20:56.540000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:20:56.540000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:20:56.540000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:20:56.540000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:20:56.540000 audit: BPF prog-id=55 op=LOAD Sep 6 00:20:56.540000 audit: BPF prog-id=39 op=UNLOAD Sep 6 00:20:56.540000 audit: BPF prog-id=40 op=UNLOAD Sep 6 00:20:56.542000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:20:56.542000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:20:56.542000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:20:56.542000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:20:56.542000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:20:56.542000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:20:56.542000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:20:56.542000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:20:56.542000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:20:56.542000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:20:56.542000 audit: BPF prog-id=56 op=LOAD Sep 6 00:20:56.542000 audit: BPF prog-id=43 op=UNLOAD Sep 6 00:20:56.543000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:20:56.543000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:20:56.543000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:20:56.543000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:20:56.543000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:20:56.543000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:20:56.543000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:20:56.543000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:20:56.543000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:20:56.543000 audit: BPF prog-id=57 op=LOAD Sep 6 00:20:56.543000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:20:56.543000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:20:56.543000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:20:56.543000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:20:56.543000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:20:56.543000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:20:56.543000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:20:56.543000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:20:56.543000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:20:56.543000 audit: BPF prog-id=58 op=LOAD Sep 6 00:20:56.543000 audit: BPF prog-id=34 op=UNLOAD Sep 6 00:20:56.543000 audit: BPF prog-id=35 op=UNLOAD Sep 6 00:20:56.561313 systemd[1]: Started kubelet.service. Sep 6 00:20:56.560000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 00:20:56.571235 systemd[1]: Stopping kubelet.service... Sep 6 00:20:56.572071 systemd[1]: kubelet.service: Deactivated successfully. Sep 6 00:20:56.571000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 00:20:56.572304 systemd[1]: Stopped kubelet.service. Sep 6 00:20:56.574578 systemd[1]: Starting kubelet.service... Sep 6 00:20:56.778336 systemd[1]: Started kubelet.service. Sep 6 00:20:56.777000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 00:20:56.849984 kubelet[2056]: Flag --container-runtime-endpoint has been deprecated, This parameter should be set via the config file specified by the Kubelet's --config flag. See https://kubernetes.io/docs/tasks/administer-cluster/kubelet-config-file/ for more information. Sep 6 00:20:56.850483 kubelet[2056]: Flag --pod-infra-container-image has been deprecated, will be removed in a future release. Image garbage collector will get sandbox image information from CRI. Sep 6 00:20:56.850542 kubelet[2056]: Flag --volume-plugin-dir has been deprecated, This parameter should be set via the config file specified by the Kubelet's --config flag. See https://kubernetes.io/docs/tasks/administer-cluster/kubelet-config-file/ for more information. Sep 6 00:20:56.850759 kubelet[2056]: I0906 00:20:56.850712 2056 server.go:211] "--pod-infra-container-image will not be pruned by the image garbage collector in kubelet and should also be set in the remote runtime" Sep 6 00:20:57.198750 kubelet[2056]: I0906 00:20:57.198694 2056 server.go:491] "Kubelet version" kubeletVersion="v1.31.8" Sep 6 00:20:57.199012 kubelet[2056]: I0906 00:20:57.198999 2056 server.go:493] "Golang settings" GOGC="" GOMAXPROCS="" GOTRACEBACK="" Sep 6 00:20:57.199532 kubelet[2056]: I0906 00:20:57.199515 2056 server.go:934] "Client rotation is on, will bootstrap in background" Sep 6 00:20:57.719836 kubelet[2056]: I0906 00:20:57.719791 2056 dynamic_cafile_content.go:160] "Starting controller" name="client-ca-bundle::/etc/kubernetes/pki/ca.crt" Sep 6 00:20:57.724174 kubelet[2056]: E0906 00:20:57.724110 2056 certificate_manager.go:562] "Unhandled Error" err="kubernetes.io/kube-apiserver-client-kubelet: Failed while requesting a signed certificate from the control plane: cannot create certificate signing request: Post \"https://10.200.8.38:6443/apis/certificates.k8s.io/v1/certificatesigningrequests\": dial tcp 10.200.8.38:6443: connect: connection refused" logger="UnhandledError" Sep 6 00:20:57.743459 kubelet[2056]: E0906 00:20:57.743391 2056 log.go:32] "RuntimeConfig from runtime service failed" err="rpc error: code = Unimplemented desc = unknown method RuntimeConfig for service runtime.v1.RuntimeService" Sep 6 00:20:57.743459 kubelet[2056]: I0906 00:20:57.743449 2056 server.go:1408] "CRI implementation should be updated to support RuntimeConfig when KubeletCgroupDriverFromCRI feature gate has been enabled. Falling back to using cgroupDriver from kubelet config." Sep 6 00:20:57.748360 kubelet[2056]: I0906 00:20:57.748323 2056 server.go:749] "--cgroups-per-qos enabled, but --cgroup-root was not specified. defaulting to /" Sep 6 00:20:57.748547 kubelet[2056]: I0906 00:20:57.748460 2056 swap_util.go:113] "Swap is on" /proc/swaps contents="Filename\t\t\t\tType\t\tSize\t\tUsed\t\tPriority" Sep 6 00:20:57.748653 kubelet[2056]: I0906 00:20:57.748610 2056 container_manager_linux.go:264] "Container manager verified user specified cgroup-root exists" cgroupRoot=[] Sep 6 00:20:57.748872 kubelet[2056]: I0906 00:20:57.748658 2056 container_manager_linux.go:269] "Creating Container Manager object based on Node Config" nodeConfig={"NodeName":"ci-3510.3.8-n-28804d0655","RuntimeCgroupsName":"","SystemCgroupsName":"","KubeletCgroupsName":"","KubeletOOMScoreAdj":-999,"ContainerRuntime":"","CgroupsPerQOS":true,"CgroupRoot":"/","CgroupDriver":"systemd","KubeletRootDir":"/var/lib/kubelet","ProtectKernelDefaults":false,"KubeReservedCgroupName":"","SystemReservedCgroupName":"","ReservedSystemCPUs":{},"EnforceNodeAllocatable":{"pods":{}},"KubeReserved":null,"SystemReserved":null,"HardEvictionThresholds":[{"Signal":"imagefs.available","Operator":"LessThan","Value":{"Quantity":null,"Percentage":0.15},"GracePeriod":0,"MinReclaim":null},{"Signal":"imagefs.inodesFree","Operator":"LessThan","Value":{"Quantity":null,"Percentage":0.05},"GracePeriod":0,"MinReclaim":null},{"Signal":"memory.available","Operator":"LessThan","Value":{"Quantity":"100Mi","Percentage":0},"GracePeriod":0,"MinReclaim":null},{"Signal":"nodefs.available","Operator":"LessThan","Value":{"Quantity":null,"Percentage":0.1},"GracePeriod":0,"MinReclaim":null},{"Signal":"nodefs.inodesFree","Operator":"LessThan","Value":{"Quantity":null,"Percentage":0.05},"GracePeriod":0,"MinReclaim":null}],"QOSReserved":{},"CPUManagerPolicy":"none","CPUManagerPolicyOptions":null,"TopologyManagerScope":"container","CPUManagerReconcilePeriod":10000000000,"ExperimentalMemoryManagerPolicy":"None","ExperimentalMemoryManagerReservedMemory":null,"PodPidsLimit":-1,"EnforceCPULimits":true,"CPUCFSQuotaPeriod":100000000,"TopologyManagerPolicy":"none","TopologyManagerPolicyOptions":null,"CgroupVersion":2} Sep 6 00:20:57.749037 kubelet[2056]: I0906 00:20:57.748881 2056 topology_manager.go:138] "Creating topology manager with none policy" Sep 6 00:20:57.749037 kubelet[2056]: I0906 00:20:57.748894 2056 container_manager_linux.go:300] "Creating device plugin manager" Sep 6 00:20:57.749139 kubelet[2056]: I0906 00:20:57.749053 2056 state_mem.go:36] "Initialized new in-memory state store" Sep 6 00:20:57.753031 kubelet[2056]: I0906 00:20:57.752998 2056 kubelet.go:408] "Attempting to sync node with API server" Sep 6 00:20:57.753031 kubelet[2056]: I0906 00:20:57.753037 2056 kubelet.go:303] "Adding static pod path" path="/etc/kubernetes/manifests" Sep 6 00:20:57.753216 kubelet[2056]: I0906 00:20:57.753080 2056 kubelet.go:314] "Adding apiserver pod source" Sep 6 00:20:57.753216 kubelet[2056]: I0906 00:20:57.753104 2056 apiserver.go:42] "Waiting for node sync before watching apiserver pods" Sep 6 00:20:57.754429 kubelet[2056]: W0906 00:20:57.754355 2056 reflector.go:561] k8s.io/client-go/informers/factory.go:160: failed to list *v1.Node: Get "https://10.200.8.38:6443/api/v1/nodes?fieldSelector=metadata.name%3Dci-3510.3.8-n-28804d0655&limit=500&resourceVersion=0": dial tcp 10.200.8.38:6443: connect: connection refused Sep 6 00:20:57.754524 kubelet[2056]: E0906 00:20:57.754432 2056 reflector.go:158] "Unhandled Error" err="k8s.io/client-go/informers/factory.go:160: Failed to watch *v1.Node: failed to list *v1.Node: Get \"https://10.200.8.38:6443/api/v1/nodes?fieldSelector=metadata.name%3Dci-3510.3.8-n-28804d0655&limit=500&resourceVersion=0\": dial tcp 10.200.8.38:6443: connect: connection refused" logger="UnhandledError" Sep 6 00:20:57.757557 kubelet[2056]: W0906 00:20:57.757493 2056 reflector.go:561] k8s.io/client-go/informers/factory.go:160: failed to list *v1.Service: Get "https://10.200.8.38:6443/api/v1/services?fieldSelector=spec.clusterIP%21%3DNone&limit=500&resourceVersion=0": dial tcp 10.200.8.38:6443: connect: connection refused Sep 6 00:20:57.757735 kubelet[2056]: E0906 00:20:57.757711 2056 reflector.go:158] "Unhandled Error" err="k8s.io/client-go/informers/factory.go:160: Failed to watch *v1.Service: failed to list *v1.Service: Get \"https://10.200.8.38:6443/api/v1/services?fieldSelector=spec.clusterIP%21%3DNone&limit=500&resourceVersion=0\": dial tcp 10.200.8.38:6443: connect: connection refused" logger="UnhandledError" Sep 6 00:20:57.757917 kubelet[2056]: I0906 00:20:57.757902 2056 kuberuntime_manager.go:262] "Container runtime initialized" containerRuntime="containerd" version="1.6.16" apiVersion="v1" Sep 6 00:20:57.758541 kubelet[2056]: I0906 00:20:57.758520 2056 kubelet.go:837] "Not starting ClusterTrustBundle informer because we are in static kubelet mode" Sep 6 00:20:57.758687 kubelet[2056]: W0906 00:20:57.758662 2056 probe.go:272] Flexvolume plugin directory at /opt/libexec/kubernetes/kubelet-plugins/volume/exec/ does not exist. Recreating. Sep 6 00:20:57.767022 kubelet[2056]: I0906 00:20:57.766994 2056 server.go:1274] "Started kubelet" Sep 6 00:20:57.767000 audit[2056]: AVC avc: denied { mac_admin } for pid=2056 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:20:57.767000 audit: SELINUX_ERR op=setxattr invalid_context="system_u:object_r:container_file_t:s0" Sep 6 00:20:57.767000 audit[2056]: SYSCALL arch=c000003e syscall=188 success=no exit=-22 a0=c000764f90 a1=c00091d7d0 a2=c000764f60 a3=25 items=0 ppid=1 pid=2056 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/usr/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:20:57.767000 audit: PROCTITLE proctitle=2F7573722F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 Sep 6 00:20:57.769317 kubelet[2056]: I0906 00:20:57.769268 2056 kubelet.go:1430] "Unprivileged containerized plugins might not work, could not set selinux context on plugin registration dir" path="/var/lib/kubelet/plugins_registry" err="setxattr /var/lib/kubelet/plugins_registry: invalid argument" Sep 6 00:20:57.768000 audit[2056]: AVC avc: denied { mac_admin } for pid=2056 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:20:57.768000 audit: SELINUX_ERR op=setxattr invalid_context="system_u:object_r:container_file_t:s0" Sep 6 00:20:57.768000 audit[2056]: SYSCALL arch=c000003e syscall=188 success=no exit=-22 a0=c000906100 a1=c00091d7e8 a2=c000765020 a3=25 items=0 ppid=1 pid=2056 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/usr/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:20:57.768000 audit: PROCTITLE proctitle=2F7573722F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 Sep 6 00:20:57.769693 kubelet[2056]: I0906 00:20:57.769544 2056 kubelet.go:1434] "Unprivileged containerized plugins might not work, could not set selinux context on plugins dir" path="/var/lib/kubelet/plugins" err="setxattr /var/lib/kubelet/plugins: invalid argument" Sep 6 00:20:57.769693 kubelet[2056]: I0906 00:20:57.769664 2056 fs_resource_analyzer.go:67] "Starting FS ResourceAnalyzer" Sep 6 00:20:57.774716 kubelet[2056]: E0906 00:20:57.773368 2056 event.go:368] "Unable to write event (may retry after sleeping)" err="Post \"https://10.200.8.38:6443/api/v1/namespaces/default/events\": dial tcp 10.200.8.38:6443: connect: connection refused" event="&Event{ObjectMeta:{ci-3510.3.8-n-28804d0655.186289905d9f9b34 default 0 0001-01-01 00:00:00 +0000 UTC map[] map[] [] [] []},InvolvedObject:ObjectReference{Kind:Node,Namespace:,Name:ci-3510.3.8-n-28804d0655,UID:ci-3510.3.8-n-28804d0655,APIVersion:,ResourceVersion:,FieldPath:,},Reason:Starting,Message:Starting kubelet.,Source:EventSource{Component:kubelet,Host:ci-3510.3.8-n-28804d0655,},FirstTimestamp:2025-09-06 00:20:57.766951732 +0000 UTC m=+0.978535200,LastTimestamp:2025-09-06 00:20:57.766951732 +0000 UTC m=+0.978535200,Count:1,Type:Normal,EventTime:0001-01-01 00:00:00 +0000 UTC,Series:nil,Action:,Related:nil,ReportingController:kubelet,ReportingInstance:ci-3510.3.8-n-28804d0655,}" Sep 6 00:20:57.776721 kubelet[2056]: I0906 00:20:57.776661 2056 server.go:163] "Starting to listen" address="0.0.0.0" port=10250 Sep 6 00:20:57.776000 audit[2067]: NETFILTER_CFG table=mangle:33 family=2 entries=2 op=nft_register_chain pid=2067 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 6 00:20:57.776000 audit[2067]: SYSCALL arch=c000003e syscall=46 success=yes exit=136 a0=3 a1=7ffc8213c340 a2=0 a3=7ffc8213c32c items=0 ppid=2056 pid=2067 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:20:57.776000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D49505441424C45532D48494E54002D74006D616E676C65 Sep 6 00:20:57.778128 kubelet[2056]: I0906 00:20:57.778106 2056 server.go:449] "Adding debug handlers to kubelet server" Sep 6 00:20:57.778000 audit[2068]: NETFILTER_CFG table=filter:34 family=2 entries=1 op=nft_register_chain pid=2068 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 6 00:20:57.778000 audit[2068]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7ffea4cd7e10 a2=0 a3=7ffea4cd7dfc items=0 ppid=2056 pid=2068 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:20:57.778000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D4649524557414C4C002D740066696C746572 Sep 6 00:20:57.780963 kubelet[2056]: I0906 00:20:57.780902 2056 volume_manager.go:289] "Starting Kubelet Volume Manager" Sep 6 00:20:57.781214 kubelet[2056]: E0906 00:20:57.781188 2056 kubelet_node_status.go:453] "Error getting the current node from lister" err="node \"ci-3510.3.8-n-28804d0655\" not found" Sep 6 00:20:57.781818 kubelet[2056]: I0906 00:20:57.781774 2056 ratelimit.go:55] "Setting rate limiting for endpoint" service="podresources" qps=100 burstTokens=10 Sep 6 00:20:57.782096 kubelet[2056]: I0906 00:20:57.782075 2056 server.go:236] "Starting to serve the podresources API" endpoint="unix:/var/lib/kubelet/pod-resources/kubelet.sock" Sep 6 00:20:57.782376 kubelet[2056]: I0906 00:20:57.782352 2056 dynamic_serving_content.go:135] "Starting controller" name="kubelet-server-cert-files::/var/lib/kubelet/pki/kubelet.crt::/var/lib/kubelet/pki/kubelet.key" Sep 6 00:20:57.782000 audit[2070]: NETFILTER_CFG table=filter:35 family=2 entries=2 op=nft_register_chain pid=2070 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 6 00:20:57.782000 audit[2070]: SYSCALL arch=c000003e syscall=46 success=yes exit=312 a0=3 a1=7ffca5cd6540 a2=0 a3=7ffca5cd652c items=0 ppid=2056 pid=2070 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:20:57.782000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D49004F5554505554002D740066696C746572002D6A004B5542452D4649524557414C4C Sep 6 00:20:57.783735 kubelet[2056]: E0906 00:20:57.783706 2056 controller.go:145] "Failed to ensure lease exists, will retry" err="Get \"https://10.200.8.38:6443/apis/coordination.k8s.io/v1/namespaces/kube-node-lease/leases/ci-3510.3.8-n-28804d0655?timeout=10s\": dial tcp 10.200.8.38:6443: connect: connection refused" interval="200ms" Sep 6 00:20:57.784314 kubelet[2056]: I0906 00:20:57.784294 2056 factory.go:221] Registration of the systemd container factory successfully Sep 6 00:20:57.784494 kubelet[2056]: I0906 00:20:57.784474 2056 factory.go:219] Registration of the crio container factory failed: Get "http://%2Fvar%2Frun%2Fcrio%2Fcrio.sock/info": dial unix /var/run/crio/crio.sock: connect: no such file or directory Sep 6 00:20:57.785580 kubelet[2056]: I0906 00:20:57.785566 2056 reconciler.go:26] "Reconciler: start to sync state" Sep 6 00:20:57.785712 kubelet[2056]: I0906 00:20:57.785699 2056 desired_state_of_world_populator.go:147] "Desired state populator starts to run" Sep 6 00:20:57.786305 kubelet[2056]: W0906 00:20:57.786254 2056 reflector.go:561] k8s.io/client-go/informers/factory.go:160: failed to list *v1.CSIDriver: Get "https://10.200.8.38:6443/apis/storage.k8s.io/v1/csidrivers?limit=500&resourceVersion=0": dial tcp 10.200.8.38:6443: connect: connection refused Sep 6 00:20:57.786455 kubelet[2056]: E0906 00:20:57.786433 2056 reflector.go:158] "Unhandled Error" err="k8s.io/client-go/informers/factory.go:160: Failed to watch *v1.CSIDriver: failed to list *v1.CSIDriver: Get \"https://10.200.8.38:6443/apis/storage.k8s.io/v1/csidrivers?limit=500&resourceVersion=0\": dial tcp 10.200.8.38:6443: connect: connection refused" logger="UnhandledError" Sep 6 00:20:57.787062 kubelet[2056]: I0906 00:20:57.787046 2056 factory.go:221] Registration of the containerd container factory successfully Sep 6 00:20:57.786000 audit[2072]: NETFILTER_CFG table=filter:36 family=2 entries=2 op=nft_register_chain pid=2072 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 6 00:20:57.786000 audit[2072]: SYSCALL arch=c000003e syscall=46 success=yes exit=312 a0=3 a1=7fff94e724d0 a2=0 a3=7fff94e724bc items=0 ppid=2056 pid=2072 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:20:57.786000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6A004B5542452D4649524557414C4C Sep 6 00:20:57.791150 kubelet[2056]: E0906 00:20:57.791124 2056 kubelet.go:1478] "Image garbage collection failed once. Stats initialization may not have completed yet" err="invalid capacity 0 on image filesystem" Sep 6 00:20:57.831000 audit[2079]: NETFILTER_CFG table=filter:37 family=2 entries=1 op=nft_register_rule pid=2079 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 6 00:20:57.831000 audit[2079]: SYSCALL arch=c000003e syscall=46 success=yes exit=924 a0=3 a1=7ffccfa5c920 a2=0 a3=7ffccfa5c90c items=0 ppid=2056 pid=2079 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:20:57.831000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D41004B5542452D4649524557414C4C002D740066696C746572002D6D00636F6D6D656E74002D2D636F6D6D656E7400626C6F636B20696E636F6D696E67206C6F63616C6E657420636F6E6E656374696F6E73002D2D647374003132372E302E302E302F38 Sep 6 00:20:57.832853 kubelet[2056]: I0906 00:20:57.832733 2056 kubelet_network_linux.go:50] "Initialized iptables rules." protocol="IPv4" Sep 6 00:20:57.833000 audit[2080]: NETFILTER_CFG table=mangle:38 family=10 entries=2 op=nft_register_chain pid=2080 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Sep 6 00:20:57.833000 audit[2080]: SYSCALL arch=c000003e syscall=46 success=yes exit=136 a0=3 a1=7fffd9f1b430 a2=0 a3=7fffd9f1b41c items=0 ppid=2056 pid=2080 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:20:57.833000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D49505441424C45532D48494E54002D74006D616E676C65 Sep 6 00:20:57.834549 kubelet[2056]: I0906 00:20:57.834519 2056 kubelet_network_linux.go:50] "Initialized iptables rules." protocol="IPv6" Sep 6 00:20:57.834636 kubelet[2056]: I0906 00:20:57.834557 2056 status_manager.go:217] "Starting to sync pod status with apiserver" Sep 6 00:20:57.834636 kubelet[2056]: I0906 00:20:57.834582 2056 kubelet.go:2321] "Starting kubelet main sync loop" Sep 6 00:20:57.834709 kubelet[2056]: E0906 00:20:57.834634 2056 kubelet.go:2345] "Skipping pod synchronization" err="[container runtime status check may not have completed yet, PLEG is not healthy: pleg has yet to be successful]" Sep 6 00:20:57.836313 kubelet[2056]: W0906 00:20:57.836283 2056 reflector.go:561] k8s.io/client-go/informers/factory.go:160: failed to list *v1.RuntimeClass: Get "https://10.200.8.38:6443/apis/node.k8s.io/v1/runtimeclasses?limit=500&resourceVersion=0": dial tcp 10.200.8.38:6443: connect: connection refused Sep 6 00:20:57.836486 kubelet[2056]: E0906 00:20:57.836462 2056 reflector.go:158] "Unhandled Error" err="k8s.io/client-go/informers/factory.go:160: Failed to watch *v1.RuntimeClass: failed to list *v1.RuntimeClass: Get \"https://10.200.8.38:6443/apis/node.k8s.io/v1/runtimeclasses?limit=500&resourceVersion=0\": dial tcp 10.200.8.38:6443: connect: connection refused" logger="UnhandledError" Sep 6 00:20:57.835000 audit[2081]: NETFILTER_CFG table=mangle:39 family=2 entries=1 op=nft_register_chain pid=2081 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 6 00:20:57.835000 audit[2081]: SYSCALL arch=c000003e syscall=46 success=yes exit=104 a0=3 a1=7ffc5043cda0 a2=0 a3=7ffc5043cd8c items=0 ppid=2056 pid=2081 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:20:57.835000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D4B5542454C45542D43414E415259002D74006D616E676C65 Sep 6 00:20:57.837000 audit[2083]: NETFILTER_CFG table=mangle:40 family=10 entries=1 op=nft_register_chain pid=2083 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Sep 6 00:20:57.837000 audit[2085]: NETFILTER_CFG table=nat:41 family=2 entries=1 op=nft_register_chain pid=2085 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 6 00:20:57.837000 audit[2085]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7ffd3d9f94f0 a2=0 a3=10e3 items=0 ppid=2056 pid=2085 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:20:57.837000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D4B5542454C45542D43414E415259002D74006E6174 Sep 6 00:20:57.837000 audit[2083]: SYSCALL arch=c000003e syscall=46 success=yes exit=104 a0=3 a1=7ffe6af55360 a2=0 a3=7ffe6af5534c items=0 ppid=2056 pid=2083 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:20:57.837000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D4B5542454C45542D43414E415259002D74006D616E676C65 Sep 6 00:20:57.838000 audit[2086]: NETFILTER_CFG table=filter:42 family=2 entries=1 op=nft_register_chain pid=2086 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 6 00:20:57.838000 audit[2086]: SYSCALL arch=c000003e syscall=46 success=yes exit=104 a0=3 a1=7ffe5c9ec5d0 a2=0 a3=7ffe5c9ec5bc items=0 ppid=2056 pid=2086 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:20:57.839000 audit[2087]: NETFILTER_CFG table=nat:43 family=10 entries=2 op=nft_register_chain pid=2087 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Sep 6 00:20:57.839000 audit[2087]: SYSCALL arch=c000003e syscall=46 success=yes exit=128 a0=3 a1=7ffe7edee0b0 a2=0 a3=7ffe7edee09c items=0 ppid=2056 pid=2087 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:20:57.839000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D4B5542454C45542D43414E415259002D74006E6174 Sep 6 00:20:57.838000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D4B5542454C45542D43414E415259002D740066696C746572 Sep 6 00:20:57.840000 audit[2088]: NETFILTER_CFG table=filter:44 family=10 entries=2 op=nft_register_chain pid=2088 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Sep 6 00:20:57.840000 audit[2088]: SYSCALL arch=c000003e syscall=46 success=yes exit=136 a0=3 a1=7fff7d1b7470 a2=0 a3=7fff7d1b745c items=0 ppid=2056 pid=2088 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:20:57.840000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D4B5542454C45542D43414E415259002D740066696C746572 Sep 6 00:20:57.881950 kubelet[2056]: E0906 00:20:57.881870 2056 kubelet_node_status.go:453] "Error getting the current node from lister" err="node \"ci-3510.3.8-n-28804d0655\" not found" Sep 6 00:20:57.935397 kubelet[2056]: E0906 00:20:57.935333 2056 kubelet.go:2345] "Skipping pod synchronization" err="container runtime status check may not have completed yet" Sep 6 00:20:57.961654 kubelet[2056]: I0906 00:20:57.961622 2056 cpu_manager.go:214] "Starting CPU manager" policy="none" Sep 6 00:20:57.961868 kubelet[2056]: I0906 00:20:57.961847 2056 cpu_manager.go:215] "Reconciling" reconcilePeriod="10s" Sep 6 00:20:57.961961 kubelet[2056]: I0906 00:20:57.961879 2056 state_mem.go:36] "Initialized new in-memory state store" Sep 6 00:20:57.969131 kubelet[2056]: I0906 00:20:57.969088 2056 policy_none.go:49] "None policy: Start" Sep 6 00:20:57.972601 kubelet[2056]: I0906 00:20:57.969948 2056 memory_manager.go:170] "Starting memorymanager" policy="None" Sep 6 00:20:57.972601 kubelet[2056]: I0906 00:20:57.969982 2056 state_mem.go:35] "Initializing new in-memory state store" Sep 6 00:20:57.982061 kubelet[2056]: E0906 00:20:57.982019 2056 kubelet_node_status.go:453] "Error getting the current node from lister" err="node \"ci-3510.3.8-n-28804d0655\" not found" Sep 6 00:20:57.984266 kubelet[2056]: E0906 00:20:57.984224 2056 controller.go:145] "Failed to ensure lease exists, will retry" err="Get \"https://10.200.8.38:6443/apis/coordination.k8s.io/v1/namespaces/kube-node-lease/leases/ci-3510.3.8-n-28804d0655?timeout=10s\": dial tcp 10.200.8.38:6443: connect: connection refused" interval="400ms" Sep 6 00:20:57.987550 systemd[1]: Created slice kubepods.slice. Sep 6 00:20:57.992694 systemd[1]: Created slice kubepods-burstable.slice. Sep 6 00:20:57.995966 systemd[1]: Created slice kubepods-besteffort.slice. Sep 6 00:20:58.001771 kubelet[2056]: I0906 00:20:58.001733 2056 manager.go:513] "Failed to read data from checkpoint" checkpoint="kubelet_internal_checkpoint" err="checkpoint is not found" Sep 6 00:20:58.000000 audit[2056]: AVC avc: denied { mac_admin } for pid=2056 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:20:58.000000 audit: SELINUX_ERR op=setxattr invalid_context="system_u:object_r:container_file_t:s0" Sep 6 00:20:58.000000 audit[2056]: SYSCALL arch=c000003e syscall=188 success=no exit=-22 a0=c00054fc20 a1=c00091dbf0 a2=c00054fbf0 a3=25 items=0 ppid=1 pid=2056 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/usr/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:20:58.000000 audit: PROCTITLE proctitle=2F7573722F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 Sep 6 00:20:58.002218 kubelet[2056]: I0906 00:20:58.001840 2056 server.go:88] "Unprivileged containerized plugins might not work. Could not set selinux context on socket dir" path="/var/lib/kubelet/device-plugins/" err="setxattr /var/lib/kubelet/device-plugins/: invalid argument" Sep 6 00:20:58.002218 kubelet[2056]: I0906 00:20:58.002029 2056 eviction_manager.go:189] "Eviction manager: starting control loop" Sep 6 00:20:58.002218 kubelet[2056]: I0906 00:20:58.002044 2056 container_log_manager.go:189] "Initializing container log rotate workers" workers=1 monitorPeriod="10s" Sep 6 00:20:58.003670 kubelet[2056]: I0906 00:20:58.002926 2056 plugin_manager.go:118] "Starting Kubelet Plugin Manager" Sep 6 00:20:58.005694 kubelet[2056]: E0906 00:20:58.005624 2056 eviction_manager.go:285] "Eviction manager: failed to get summary stats" err="failed to get node info: node \"ci-3510.3.8-n-28804d0655\" not found" Sep 6 00:20:58.104165 kubelet[2056]: I0906 00:20:58.104102 2056 kubelet_node_status.go:72] "Attempting to register node" node="ci-3510.3.8-n-28804d0655" Sep 6 00:20:58.104600 kubelet[2056]: E0906 00:20:58.104560 2056 kubelet_node_status.go:95] "Unable to register node with API server" err="Post \"https://10.200.8.38:6443/api/v1/nodes\": dial tcp 10.200.8.38:6443: connect: connection refused" node="ci-3510.3.8-n-28804d0655" Sep 6 00:20:58.148704 systemd[1]: Created slice kubepods-burstable-podb8987a8e8fa6b3ad0ea9a28318749831.slice. Sep 6 00:20:58.159131 systemd[1]: Created slice kubepods-burstable-podd699d1c241dae7d271bd934d8d8b9d2f.slice. Sep 6 00:20:58.165053 systemd[1]: Created slice kubepods-burstable-pod81496823a7a559540e12f466273df042.slice. Sep 6 00:20:58.188877 kubelet[2056]: I0906 00:20:58.188814 2056 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"flexvolume-dir\" (UniqueName: \"kubernetes.io/host-path/d699d1c241dae7d271bd934d8d8b9d2f-flexvolume-dir\") pod \"kube-controller-manager-ci-3510.3.8-n-28804d0655\" (UID: \"d699d1c241dae7d271bd934d8d8b9d2f\") " pod="kube-system/kube-controller-manager-ci-3510.3.8-n-28804d0655" Sep 6 00:20:58.189187 kubelet[2056]: I0906 00:20:58.189149 2056 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kubeconfig\" (UniqueName: \"kubernetes.io/host-path/d699d1c241dae7d271bd934d8d8b9d2f-kubeconfig\") pod \"kube-controller-manager-ci-3510.3.8-n-28804d0655\" (UID: \"d699d1c241dae7d271bd934d8d8b9d2f\") " pod="kube-system/kube-controller-manager-ci-3510.3.8-n-28804d0655" Sep 6 00:20:58.189291 kubelet[2056]: I0906 00:20:58.189191 2056 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"usr-share-ca-certificates\" (UniqueName: \"kubernetes.io/host-path/d699d1c241dae7d271bd934d8d8b9d2f-usr-share-ca-certificates\") pod \"kube-controller-manager-ci-3510.3.8-n-28804d0655\" (UID: \"d699d1c241dae7d271bd934d8d8b9d2f\") " pod="kube-system/kube-controller-manager-ci-3510.3.8-n-28804d0655" Sep 6 00:20:58.189291 kubelet[2056]: I0906 00:20:58.189224 2056 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"usr-share-ca-certificates\" (UniqueName: \"kubernetes.io/host-path/b8987a8e8fa6b3ad0ea9a28318749831-usr-share-ca-certificates\") pod \"kube-apiserver-ci-3510.3.8-n-28804d0655\" (UID: \"b8987a8e8fa6b3ad0ea9a28318749831\") " pod="kube-system/kube-apiserver-ci-3510.3.8-n-28804d0655" Sep 6 00:20:58.189291 kubelet[2056]: I0906 00:20:58.189252 2056 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"ca-certs\" (UniqueName: \"kubernetes.io/host-path/d699d1c241dae7d271bd934d8d8b9d2f-ca-certs\") pod \"kube-controller-manager-ci-3510.3.8-n-28804d0655\" (UID: \"d699d1c241dae7d271bd934d8d8b9d2f\") " pod="kube-system/kube-controller-manager-ci-3510.3.8-n-28804d0655" Sep 6 00:20:58.189291 kubelet[2056]: I0906 00:20:58.189277 2056 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"k8s-certs\" (UniqueName: \"kubernetes.io/host-path/d699d1c241dae7d271bd934d8d8b9d2f-k8s-certs\") pod \"kube-controller-manager-ci-3510.3.8-n-28804d0655\" (UID: \"d699d1c241dae7d271bd934d8d8b9d2f\") " pod="kube-system/kube-controller-manager-ci-3510.3.8-n-28804d0655" Sep 6 00:20:58.189463 kubelet[2056]: I0906 00:20:58.189302 2056 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kubeconfig\" (UniqueName: \"kubernetes.io/host-path/81496823a7a559540e12f466273df042-kubeconfig\") pod \"kube-scheduler-ci-3510.3.8-n-28804d0655\" (UID: \"81496823a7a559540e12f466273df042\") " pod="kube-system/kube-scheduler-ci-3510.3.8-n-28804d0655" Sep 6 00:20:58.189463 kubelet[2056]: I0906 00:20:58.189326 2056 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"ca-certs\" (UniqueName: \"kubernetes.io/host-path/b8987a8e8fa6b3ad0ea9a28318749831-ca-certs\") pod \"kube-apiserver-ci-3510.3.8-n-28804d0655\" (UID: \"b8987a8e8fa6b3ad0ea9a28318749831\") " pod="kube-system/kube-apiserver-ci-3510.3.8-n-28804d0655" Sep 6 00:20:58.189463 kubelet[2056]: I0906 00:20:58.189354 2056 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"k8s-certs\" (UniqueName: \"kubernetes.io/host-path/b8987a8e8fa6b3ad0ea9a28318749831-k8s-certs\") pod \"kube-apiserver-ci-3510.3.8-n-28804d0655\" (UID: \"b8987a8e8fa6b3ad0ea9a28318749831\") " pod="kube-system/kube-apiserver-ci-3510.3.8-n-28804d0655" Sep 6 00:20:58.307069 kubelet[2056]: I0906 00:20:58.306920 2056 kubelet_node_status.go:72] "Attempting to register node" node="ci-3510.3.8-n-28804d0655" Sep 6 00:20:58.308502 kubelet[2056]: E0906 00:20:58.308458 2056 kubelet_node_status.go:95] "Unable to register node with API server" err="Post \"https://10.200.8.38:6443/api/v1/nodes\": dial tcp 10.200.8.38:6443: connect: connection refused" node="ci-3510.3.8-n-28804d0655" Sep 6 00:20:58.385256 kubelet[2056]: E0906 00:20:58.385198 2056 controller.go:145] "Failed to ensure lease exists, will retry" err="Get \"https://10.200.8.38:6443/apis/coordination.k8s.io/v1/namespaces/kube-node-lease/leases/ci-3510.3.8-n-28804d0655?timeout=10s\": dial tcp 10.200.8.38:6443: connect: connection refused" interval="800ms" Sep 6 00:20:58.457773 env[1421]: time="2025-09-06T00:20:58.457721346Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-apiserver-ci-3510.3.8-n-28804d0655,Uid:b8987a8e8fa6b3ad0ea9a28318749831,Namespace:kube-system,Attempt:0,}" Sep 6 00:20:58.463522 env[1421]: time="2025-09-06T00:20:58.463476944Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-controller-manager-ci-3510.3.8-n-28804d0655,Uid:d699d1c241dae7d271bd934d8d8b9d2f,Namespace:kube-system,Attempt:0,}" Sep 6 00:20:58.469081 env[1421]: time="2025-09-06T00:20:58.468774935Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-scheduler-ci-3510.3.8-n-28804d0655,Uid:81496823a7a559540e12f466273df042,Namespace:kube-system,Attempt:0,}" Sep 6 00:20:58.711122 kubelet[2056]: I0906 00:20:58.711085 2056 kubelet_node_status.go:72] "Attempting to register node" node="ci-3510.3.8-n-28804d0655" Sep 6 00:20:58.711544 kubelet[2056]: E0906 00:20:58.711507 2056 kubelet_node_status.go:95] "Unable to register node with API server" err="Post \"https://10.200.8.38:6443/api/v1/nodes\": dial tcp 10.200.8.38:6443: connect: connection refused" node="ci-3510.3.8-n-28804d0655" Sep 6 00:20:58.994515 kubelet[2056]: W0906 00:20:58.994369 2056 reflector.go:561] k8s.io/client-go/informers/factory.go:160: failed to list *v1.RuntimeClass: Get "https://10.200.8.38:6443/apis/node.k8s.io/v1/runtimeclasses?limit=500&resourceVersion=0": dial tcp 10.200.8.38:6443: connect: connection refused Sep 6 00:20:58.994515 kubelet[2056]: E0906 00:20:58.994425 2056 reflector.go:158] "Unhandled Error" err="k8s.io/client-go/informers/factory.go:160: Failed to watch *v1.RuntimeClass: failed to list *v1.RuntimeClass: Get \"https://10.200.8.38:6443/apis/node.k8s.io/v1/runtimeclasses?limit=500&resourceVersion=0\": dial tcp 10.200.8.38:6443: connect: connection refused" logger="UnhandledError" Sep 6 00:20:59.017484 kubelet[2056]: W0906 00:20:59.017413 2056 reflector.go:561] k8s.io/client-go/informers/factory.go:160: failed to list *v1.Service: Get "https://10.200.8.38:6443/api/v1/services?fieldSelector=spec.clusterIP%21%3DNone&limit=500&resourceVersion=0": dial tcp 10.200.8.38:6443: connect: connection refused Sep 6 00:20:59.017673 kubelet[2056]: E0906 00:20:59.017492 2056 reflector.go:158] "Unhandled Error" err="k8s.io/client-go/informers/factory.go:160: Failed to watch *v1.Service: failed to list *v1.Service: Get \"https://10.200.8.38:6443/api/v1/services?fieldSelector=spec.clusterIP%21%3DNone&limit=500&resourceVersion=0\": dial tcp 10.200.8.38:6443: connect: connection refused" logger="UnhandledError" Sep 6 00:20:59.043525 kubelet[2056]: W0906 00:20:59.043446 2056 reflector.go:561] k8s.io/client-go/informers/factory.go:160: failed to list *v1.Node: Get "https://10.200.8.38:6443/api/v1/nodes?fieldSelector=metadata.name%3Dci-3510.3.8-n-28804d0655&limit=500&resourceVersion=0": dial tcp 10.200.8.38:6443: connect: connection refused Sep 6 00:20:59.043525 kubelet[2056]: E0906 00:20:59.043532 2056 reflector.go:158] "Unhandled Error" err="k8s.io/client-go/informers/factory.go:160: Failed to watch *v1.Node: failed to list *v1.Node: Get \"https://10.200.8.38:6443/api/v1/nodes?fieldSelector=metadata.name%3Dci-3510.3.8-n-28804d0655&limit=500&resourceVersion=0\": dial tcp 10.200.8.38:6443: connect: connection refused" logger="UnhandledError" Sep 6 00:20:59.186121 kubelet[2056]: E0906 00:20:59.186055 2056 controller.go:145] "Failed to ensure lease exists, will retry" err="Get \"https://10.200.8.38:6443/apis/coordination.k8s.io/v1/namespaces/kube-node-lease/leases/ci-3510.3.8-n-28804d0655?timeout=10s\": dial tcp 10.200.8.38:6443: connect: connection refused" interval="1.6s" Sep 6 00:20:59.271797 kubelet[2056]: W0906 00:20:59.271628 2056 reflector.go:561] k8s.io/client-go/informers/factory.go:160: failed to list *v1.CSIDriver: Get "https://10.200.8.38:6443/apis/storage.k8s.io/v1/csidrivers?limit=500&resourceVersion=0": dial tcp 10.200.8.38:6443: connect: connection refused Sep 6 00:20:59.271797 kubelet[2056]: E0906 00:20:59.271713 2056 reflector.go:158] "Unhandled Error" err="k8s.io/client-go/informers/factory.go:160: Failed to watch *v1.CSIDriver: failed to list *v1.CSIDriver: Get \"https://10.200.8.38:6443/apis/storage.k8s.io/v1/csidrivers?limit=500&resourceVersion=0\": dial tcp 10.200.8.38:6443: connect: connection refused" logger="UnhandledError" Sep 6 00:20:59.514387 kubelet[2056]: I0906 00:20:59.514349 2056 kubelet_node_status.go:72] "Attempting to register node" node="ci-3510.3.8-n-28804d0655" Sep 6 00:20:59.514788 kubelet[2056]: E0906 00:20:59.514752 2056 kubelet_node_status.go:95] "Unable to register node with API server" err="Post \"https://10.200.8.38:6443/api/v1/nodes\": dial tcp 10.200.8.38:6443: connect: connection refused" node="ci-3510.3.8-n-28804d0655" Sep 6 00:20:59.787503 kubelet[2056]: E0906 00:20:59.787453 2056 certificate_manager.go:562] "Unhandled Error" err="kubernetes.io/kube-apiserver-client-kubelet: Failed while requesting a signed certificate from the control plane: cannot create certificate signing request: Post \"https://10.200.8.38:6443/apis/certificates.k8s.io/v1/certificatesigningrequests\": dial tcp 10.200.8.38:6443: connect: connection refused" logger="UnhandledError" Sep 6 00:21:00.885573 kubelet[2056]: E0906 00:21:00.787166 2056 controller.go:145] "Failed to ensure lease exists, will retry" err="Get \"https://10.200.8.38:6443/apis/coordination.k8s.io/v1/namespaces/kube-node-lease/leases/ci-3510.3.8-n-28804d0655?timeout=10s\": dial tcp 10.200.8.38:6443: connect: connection refused" interval="3.2s" Sep 6 00:21:01.117267 kubelet[2056]: I0906 00:21:01.116861 2056 kubelet_node_status.go:72] "Attempting to register node" node="ci-3510.3.8-n-28804d0655" Sep 6 00:21:01.117267 kubelet[2056]: E0906 00:21:01.117231 2056 kubelet_node_status.go:95] "Unable to register node with API server" err="Post \"https://10.200.8.38:6443/api/v1/nodes\": dial tcp 10.200.8.38:6443: connect: connection refused" node="ci-3510.3.8-n-28804d0655" Sep 6 00:21:01.175224 kubelet[2056]: W0906 00:21:01.175071 2056 reflector.go:561] k8s.io/client-go/informers/factory.go:160: failed to list *v1.Service: Get "https://10.200.8.38:6443/api/v1/services?fieldSelector=spec.clusterIP%21%3DNone&limit=500&resourceVersion=0": dial tcp 10.200.8.38:6443: connect: connection refused Sep 6 00:21:01.175224 kubelet[2056]: E0906 00:21:01.175132 2056 reflector.go:158] "Unhandled Error" err="k8s.io/client-go/informers/factory.go:160: Failed to watch *v1.Service: failed to list *v1.Service: Get \"https://10.200.8.38:6443/api/v1/services?fieldSelector=spec.clusterIP%21%3DNone&limit=500&resourceVersion=0\": dial tcp 10.200.8.38:6443: connect: connection refused" logger="UnhandledError" Sep 6 00:21:01.809953 kubelet[2056]: W0906 00:21:01.809871 2056 reflector.go:561] k8s.io/client-go/informers/factory.go:160: failed to list *v1.RuntimeClass: Get "https://10.200.8.38:6443/apis/node.k8s.io/v1/runtimeclasses?limit=500&resourceVersion=0": dial tcp 10.200.8.38:6443: connect: connection refused Sep 6 00:21:01.810206 kubelet[2056]: E0906 00:21:01.809966 2056 reflector.go:158] "Unhandled Error" err="k8s.io/client-go/informers/factory.go:160: Failed to watch *v1.RuntimeClass: failed to list *v1.RuntimeClass: Get \"https://10.200.8.38:6443/apis/node.k8s.io/v1/runtimeclasses?limit=500&resourceVersion=0\": dial tcp 10.200.8.38:6443: connect: connection refused" logger="UnhandledError" Sep 6 00:21:02.037360 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount4266026527.mount: Deactivated successfully. Sep 6 00:21:02.040016 kubelet[2056]: W0906 00:21:02.039973 2056 reflector.go:561] k8s.io/client-go/informers/factory.go:160: failed to list *v1.CSIDriver: Get "https://10.200.8.38:6443/apis/storage.k8s.io/v1/csidrivers?limit=500&resourceVersion=0": dial tcp 10.200.8.38:6443: connect: connection refused Sep 6 00:21:02.040016 kubelet[2056]: E0906 00:21:02.040028 2056 reflector.go:158] "Unhandled Error" err="k8s.io/client-go/informers/factory.go:160: Failed to watch *v1.CSIDriver: failed to list *v1.CSIDriver: Get \"https://10.200.8.38:6443/apis/storage.k8s.io/v1/csidrivers?limit=500&resourceVersion=0\": dial tcp 10.200.8.38:6443: connect: connection refused" logger="UnhandledError" Sep 6 00:21:02.060383 env[1421]: time="2025-09-06T00:21:02.059916811Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/pause:3.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 6 00:21:02.077909 env[1421]: time="2025-09-06T00:21:02.077840485Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause:3.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 6 00:21:02.082376 env[1421]: time="2025-09-06T00:21:02.082314853Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:6270bb605e12e581514ada5fd5b3216f727db55dc87d5889c790e4c760683fee,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 6 00:21:02.086606 env[1421]: time="2025-09-06T00:21:02.086550818Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause:3.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 6 00:21:02.095253 env[1421]: time="2025-09-06T00:21:02.095196850Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause:3.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 6 00:21:02.099548 env[1421]: time="2025-09-06T00:21:02.099488716Z" level=info msg="ImageUpdate event &ImageUpdate{Name:sha256:6270bb605e12e581514ada5fd5b3216f727db55dc87d5889c790e4c760683fee,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 6 00:21:02.104135 env[1421]: time="2025-09-06T00:21:02.104080186Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/pause@sha256:3d380ca8864549e74af4b29c10f9cb0956236dfb01c40ca076fb6c37253234db,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 6 00:21:02.111233 env[1421]: time="2025-09-06T00:21:02.111175795Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause:3.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 6 00:21:02.115450 env[1421]: time="2025-09-06T00:21:02.115400859Z" level=info msg="ImageUpdate event &ImageUpdate{Name:sha256:6270bb605e12e581514ada5fd5b3216f727db55dc87d5889c790e4c760683fee,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 6 00:21:02.120691 env[1421]: time="2025-09-06T00:21:02.120632039Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause@sha256:3d380ca8864549e74af4b29c10f9cb0956236dfb01c40ca076fb6c37253234db,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 6 00:21:02.124185 env[1421]: time="2025-09-06T00:21:02.124137193Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause:3.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 6 00:21:02.135798 env[1421]: time="2025-09-06T00:21:02.135741670Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause@sha256:3d380ca8864549e74af4b29c10f9cb0956236dfb01c40ca076fb6c37253234db,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 6 00:21:02.146600 kubelet[2056]: W0906 00:21:02.146550 2056 reflector.go:561] k8s.io/client-go/informers/factory.go:160: failed to list *v1.Node: Get "https://10.200.8.38:6443/api/v1/nodes?fieldSelector=metadata.name%3Dci-3510.3.8-n-28804d0655&limit=500&resourceVersion=0": dial tcp 10.200.8.38:6443: connect: connection refused Sep 6 00:21:02.146815 kubelet[2056]: E0906 00:21:02.146612 2056 reflector.go:158] "Unhandled Error" err="k8s.io/client-go/informers/factory.go:160: Failed to watch *v1.Node: failed to list *v1.Node: Get \"https://10.200.8.38:6443/api/v1/nodes?fieldSelector=metadata.name%3Dci-3510.3.8-n-28804d0655&limit=500&resourceVersion=0\": dial tcp 10.200.8.38:6443: connect: connection refused" logger="UnhandledError" Sep 6 00:21:02.205637 env[1421]: time="2025-09-06T00:21:02.203508106Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Sep 6 00:21:02.205637 env[1421]: time="2025-09-06T00:21:02.203573507Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Sep 6 00:21:02.205637 env[1421]: time="2025-09-06T00:21:02.203591007Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Sep 6 00:21:02.205637 env[1421]: time="2025-09-06T00:21:02.203760310Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/e0a99108d92662d62f4ec54dfd30307baf3d99f143c0c7dc217b99afdae7187a pid=2096 runtime=io.containerd.runc.v2 Sep 6 00:21:02.230708 systemd[1]: Started cri-containerd-e0a99108d92662d62f4ec54dfd30307baf3d99f143c0c7dc217b99afdae7187a.scope. Sep 6 00:21:02.242970 env[1421]: time="2025-09-06T00:21:02.242855507Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Sep 6 00:21:02.243190 env[1421]: time="2025-09-06T00:21:02.243056310Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Sep 6 00:21:02.243190 env[1421]: time="2025-09-06T00:21:02.243108711Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Sep 6 00:21:02.243429 env[1421]: time="2025-09-06T00:21:02.243372215Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/213f2b39ea89fce6ed4cc1958295b1e56359bb0504fbf1b6c44d7d9a44d9848a pid=2121 runtime=io.containerd.runc.v2 Sep 6 00:21:02.255989 env[1421]: time="2025-09-06T00:21:02.255720204Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Sep 6 00:21:02.255989 env[1421]: time="2025-09-06T00:21:02.255781405Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Sep 6 00:21:02.255989 env[1421]: time="2025-09-06T00:21:02.255798905Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Sep 6 00:21:02.256500 env[1421]: time="2025-09-06T00:21:02.256401814Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/25241f813b01b823d6b214fb19074f6dbf10b9f841a1414c5c02b52e4877cf7c pid=2140 runtime=io.containerd.runc.v2 Sep 6 00:21:02.285172 kernel: kauditd_printk_skb: 248 callbacks suppressed Sep 6 00:21:02.285395 kernel: audit: type=1400 audit(1757118062.258:432): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:02.258000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:02.330021 kernel: audit: type=1400 audit(1757118062.258:433): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:02.258000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:02.258000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:02.352026 kernel: audit: type=1400 audit(1757118062.258:434): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:02.340172 systemd[1]: Started cri-containerd-213f2b39ea89fce6ed4cc1958295b1e56359bb0504fbf1b6c44d7d9a44d9848a.scope. Sep 6 00:21:02.345794 systemd[1]: Started cri-containerd-25241f813b01b823d6b214fb19074f6dbf10b9f841a1414c5c02b52e4877cf7c.scope. Sep 6 00:21:02.258000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:02.382996 kernel: audit: type=1400 audit(1757118062.258:435): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:02.383084 kernel: audit: audit_backlog=65 > audit_backlog_limit=64 Sep 6 00:21:02.395821 kernel: audit: audit_lost=19 audit_rate_limit=0 audit_backlog_limit=64 Sep 6 00:21:02.423133 kernel: audit: backlog limit exceeded Sep 6 00:21:02.423177 kernel: audit: type=1400 audit(1757118062.258:436): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:02.423205 kernel: audit: audit_backlog=65 > audit_backlog_limit=64 Sep 6 00:21:02.258000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:02.448177 kernel: audit: type=1400 audit(1757118062.258:437): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:02.258000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:02.448466 env[1421]: time="2025-09-06T00:21:02.430794080Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-scheduler-ci-3510.3.8-n-28804d0655,Uid:81496823a7a559540e12f466273df042,Namespace:kube-system,Attempt:0,} returns sandbox id \"e0a99108d92662d62f4ec54dfd30307baf3d99f143c0c7dc217b99afdae7187a\"" Sep 6 00:21:02.448466 env[1421]: time="2025-09-06T00:21:02.434420235Z" level=info msg="CreateContainer within sandbox \"e0a99108d92662d62f4ec54dfd30307baf3d99f143c0c7dc217b99afdae7187a\" for container &ContainerMetadata{Name:kube-scheduler,Attempt:0,}" Sep 6 00:21:02.258000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:02.258000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:02.258000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:02.283000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:02.283000 audit: BPF prog-id=59 op=LOAD Sep 6 00:21:02.284000 audit[2112]: AVC avc: denied { bpf } for pid=2112 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:02.284000 audit[2112]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000145c48 a2=10 a3=1c items=0 ppid=2096 pid=2112 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:21:02.284000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6530613939313038643932363632643632663465633534646664333033 Sep 6 00:21:02.284000 audit[2112]: AVC avc: denied { perfmon } for pid=2112 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:02.284000 audit[2112]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001456b0 a2=3c a3=c items=0 ppid=2096 pid=2112 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:21:02.284000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6530613939313038643932363632643632663465633534646664333033 Sep 6 00:21:02.284000 audit[2112]: AVC avc: denied { bpf } for pid=2112 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:02.284000 audit[2112]: AVC avc: denied { bpf } for pid=2112 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:02.284000 audit[2112]: AVC avc: denied { bpf } for pid=2112 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:02.284000 audit[2112]: AVC avc: denied { perfmon } for pid=2112 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:02.284000 audit[2112]: AVC avc: denied { perfmon } for pid=2112 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:02.284000 audit[2112]: AVC avc: denied { perfmon } for pid=2112 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:02.284000 audit[2112]: AVC avc: denied { perfmon } for pid=2112 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:02.284000 audit[2112]: AVC avc: denied { perfmon } for pid=2112 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:02.284000 audit[2112]: AVC avc: denied { bpf } for pid=2112 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:02.284000 audit[2112]: AVC avc: denied { bpf } for pid=2112 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:02.284000 audit: BPF prog-id=60 op=LOAD Sep 6 00:21:02.284000 audit[2112]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001459d8 a2=78 a3=c0003de1a0 items=0 ppid=2096 pid=2112 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:21:02.284000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6530613939313038643932363632643632663465633534646664333033 Sep 6 00:21:02.284000 audit[2112]: AVC avc: denied { bpf } for pid=2112 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:02.284000 audit[2112]: AVC avc: denied { bpf } for pid=2112 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:02.284000 audit[2112]: AVC avc: denied { perfmon } for pid=2112 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:02.284000 audit[2112]: AVC avc: denied { perfmon } for pid=2112 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:02.284000 audit[2112]: AVC avc: denied { perfmon } for pid=2112 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:02.284000 audit[2112]: AVC avc: denied { perfmon } for pid=2112 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:02.284000 audit[2112]: AVC avc: denied { perfmon } for pid=2112 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:02.284000 audit[2112]: AVC avc: denied { bpf } for pid=2112 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:02.284000 audit[2112]: AVC avc: denied { bpf } for pid=2112 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:02.284000 audit: BPF prog-id=61 op=LOAD Sep 6 00:21:02.284000 audit[2112]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000145770 a2=78 a3=c0003de1e8 items=0 ppid=2096 pid=2112 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:21:02.284000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6530613939313038643932363632643632663465633534646664333033 Sep 6 00:21:02.284000 audit: BPF prog-id=61 op=UNLOAD Sep 6 00:21:02.284000 audit: BPF prog-id=60 op=UNLOAD Sep 6 00:21:02.284000 audit[2112]: AVC avc: denied { bpf } for pid=2112 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:02.284000 audit[2112]: AVC avc: denied { bpf } for pid=2112 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:02.284000 audit[2112]: AVC avc: denied { bpf } for pid=2112 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:02.284000 audit[2112]: AVC avc: denied { perfmon } for pid=2112 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:02.284000 audit[2112]: AVC avc: denied { perfmon } for pid=2112 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:02.284000 audit[2112]: AVC avc: denied { perfmon } for pid=2112 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:02.284000 audit[2112]: AVC avc: denied { perfmon } for pid=2112 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:02.284000 audit[2112]: AVC avc: denied { perfmon } for pid=2112 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:02.284000 audit[2112]: AVC avc: denied { bpf } for pid=2112 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:02.284000 audit[2112]: AVC avc: denied { bpf } for pid=2112 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:02.284000 audit: BPF prog-id=62 op=LOAD Sep 6 00:21:02.284000 audit[2112]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000145c30 a2=78 a3=c0003de5f8 items=0 ppid=2096 pid=2112 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:21:02.284000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6530613939313038643932363632643632663465633534646664333033 Sep 6 00:21:02.375000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:02.375000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:02.375000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:02.375000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:02.375000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:02.375000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:02.375000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:02.400000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:02.420000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:02.447000 audit[2165]: AVC avc: denied { bpf } for pid=2165 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:02.447000 audit[2165]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000197c48 a2=10 a3=1c items=0 ppid=2140 pid=2165 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:21:02.447000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3235323431663831336230316238323364366232313466623139303734 Sep 6 00:21:02.447000 audit[2165]: AVC avc: denied { perfmon } for pid=2165 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:02.447000 audit[2165]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001976b0 a2=3c a3=c items=0 ppid=2140 pid=2165 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:21:02.447000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3235323431663831336230316238323364366232313466623139303734 Sep 6 00:21:02.447000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:02.449000 audit[2145]: AVC avc: denied { bpf } for pid=2145 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:02.449000 audit[2145]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c00011fc48 a2=10 a3=1c items=0 ppid=2121 pid=2145 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:21:02.449000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3231336632623339656138396663653665643463633139353832393562 Sep 6 00:21:02.449000 audit[2145]: AVC avc: denied { perfmon } for pid=2145 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:02.449000 audit[2145]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c00011f6b0 a2=3c a3=c items=0 ppid=2121 pid=2145 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:21:02.449000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3231336632623339656138396663653665643463633139353832393562 Sep 6 00:21:02.450000 audit[2145]: AVC avc: denied { bpf } for pid=2145 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:02.450000 audit[2145]: AVC avc: denied { bpf } for pid=2145 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:02.450000 audit[2145]: AVC avc: denied { bpf } for pid=2145 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:02.450000 audit[2145]: AVC avc: denied { perfmon } for pid=2145 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:02.450000 audit[2145]: AVC avc: denied { perfmon } for pid=2145 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:02.450000 audit[2145]: AVC avc: denied { perfmon } for pid=2145 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:02.450000 audit[2145]: AVC avc: denied { perfmon } for pid=2145 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:02.450000 audit[2145]: AVC avc: denied { perfmon } for pid=2145 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:02.450000 audit[2145]: AVC avc: denied { bpf } for pid=2145 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:02.450000 audit[2145]: AVC avc: denied { bpf } for pid=2145 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:02.450000 audit: BPF prog-id=65 op=LOAD Sep 6 00:21:02.450000 audit[2145]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c00011f9d8 a2=78 a3=c0003a5630 items=0 ppid=2121 pid=2145 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:21:02.450000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3231336632623339656138396663653665643463633139353832393562 Sep 6 00:21:02.450000 audit[2145]: AVC avc: denied { bpf } for pid=2145 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:02.450000 audit[2145]: AVC avc: denied { bpf } for pid=2145 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:02.450000 audit[2145]: AVC avc: denied { perfmon } for pid=2145 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:02.450000 audit[2145]: AVC avc: denied { perfmon } for pid=2145 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:02.450000 audit[2145]: AVC avc: denied { perfmon } for pid=2145 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:02.450000 audit[2145]: AVC avc: denied { perfmon } for pid=2145 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:02.450000 audit[2145]: AVC avc: denied { perfmon } for pid=2145 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:02.450000 audit[2145]: AVC avc: denied { bpf } for pid=2145 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:02.450000 audit[2145]: AVC avc: denied { bpf } for pid=2145 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:02.450000 audit: BPF prog-id=66 op=LOAD Sep 6 00:21:02.450000 audit[2145]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c00011f770 a2=78 a3=c0003a5678 items=0 ppid=2121 pid=2145 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:21:02.450000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3231336632623339656138396663653665643463633139353832393562 Sep 6 00:21:02.450000 audit: BPF prog-id=66 op=UNLOAD Sep 6 00:21:02.450000 audit: BPF prog-id=65 op=UNLOAD Sep 6 00:21:02.450000 audit[2145]: AVC avc: denied { bpf } for pid=2145 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:02.450000 audit[2145]: AVC avc: denied { bpf } for pid=2145 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:02.450000 audit[2145]: AVC avc: denied { bpf } for pid=2145 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:02.450000 audit[2145]: AVC avc: denied { perfmon } for pid=2145 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:02.450000 audit[2145]: AVC avc: denied { perfmon } for pid=2145 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:02.450000 audit[2145]: AVC avc: denied { perfmon } for pid=2145 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:02.450000 audit[2145]: AVC avc: denied { perfmon } for pid=2145 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:02.450000 audit[2145]: AVC avc: denied { perfmon } for pid=2145 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:02.450000 audit[2145]: AVC avc: denied { bpf } for pid=2145 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:02.450000 audit[2145]: AVC avc: denied { bpf } for pid=2145 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:02.450000 audit: BPF prog-id=67 op=LOAD Sep 6 00:21:02.450000 audit[2145]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c00011fc30 a2=78 a3=c0003a5a88 items=0 ppid=2121 pid=2145 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:21:02.450000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3231336632623339656138396663653665643463633139353832393562 Sep 6 00:21:02.454000 audit[2165]: AVC avc: denied { bpf } for pid=2165 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:02.454000 audit[2165]: AVC avc: denied { bpf } for pid=2165 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:02.454000 audit[2165]: AVC avc: denied { bpf } for pid=2165 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:02.454000 audit[2165]: AVC avc: denied { perfmon } for pid=2165 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:02.454000 audit[2165]: AVC avc: denied { perfmon } for pid=2165 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:02.454000 audit[2165]: AVC avc: denied { perfmon } for pid=2165 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:02.454000 audit[2165]: AVC avc: denied { perfmon } for pid=2165 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:02.454000 audit[2165]: AVC avc: denied { perfmon } for pid=2165 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:02.454000 audit[2165]: AVC avc: denied { bpf } for pid=2165 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:02.454000 audit[2165]: AVC avc: denied { bpf } for pid=2165 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:02.454000 audit: BPF prog-id=68 op=LOAD Sep 6 00:21:02.454000 audit[2165]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001979d8 a2=78 a3=c0002c9cd0 items=0 ppid=2140 pid=2165 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:21:02.454000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3235323431663831336230316238323364366232313466623139303734 Sep 6 00:21:02.455000 audit[2165]: AVC avc: denied { bpf } for pid=2165 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:02.455000 audit[2165]: AVC avc: denied { bpf } for pid=2165 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:02.455000 audit[2165]: AVC avc: denied { perfmon } for pid=2165 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:02.455000 audit[2165]: AVC avc: denied { perfmon } for pid=2165 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:02.455000 audit[2165]: AVC avc: denied { perfmon } for pid=2165 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:02.455000 audit[2165]: AVC avc: denied { perfmon } for pid=2165 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:02.455000 audit[2165]: AVC avc: denied { perfmon } for pid=2165 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:02.455000 audit[2165]: AVC avc: denied { bpf } for pid=2165 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:02.455000 audit[2165]: AVC avc: denied { bpf } for pid=2165 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:02.455000 audit: BPF prog-id=69 op=LOAD Sep 6 00:21:02.455000 audit[2165]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000197770 a2=78 a3=c0002c9d18 items=0 ppid=2140 pid=2165 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:21:02.455000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3235323431663831336230316238323364366232313466623139303734 Sep 6 00:21:02.456000 audit: BPF prog-id=69 op=UNLOAD Sep 6 00:21:02.456000 audit: BPF prog-id=68 op=UNLOAD Sep 6 00:21:02.456000 audit[2165]: AVC avc: denied { bpf } for pid=2165 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:02.456000 audit[2165]: AVC avc: denied { bpf } for pid=2165 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:02.456000 audit[2165]: AVC avc: denied { bpf } for pid=2165 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:02.456000 audit[2165]: AVC avc: denied { perfmon } for pid=2165 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:02.456000 audit[2165]: AVC avc: denied { perfmon } for pid=2165 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:02.456000 audit[2165]: AVC avc: denied { perfmon } for pid=2165 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:02.456000 audit[2165]: AVC avc: denied { perfmon } for pid=2165 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:02.456000 audit[2165]: AVC avc: denied { perfmon } for pid=2165 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:02.456000 audit[2165]: AVC avc: denied { bpf } for pid=2165 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:02.456000 audit[2165]: AVC avc: denied { bpf } for pid=2165 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:02.456000 audit: BPF prog-id=70 op=LOAD Sep 6 00:21:02.456000 audit[2165]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000197c30 a2=78 a3=c0003ce128 items=0 ppid=2140 pid=2165 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:21:02.456000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3235323431663831336230316238323364366232313466623139303734 Sep 6 00:21:02.495504 env[1421]: time="2025-09-06T00:21:02.495444668Z" level=info msg="CreateContainer within sandbox \"e0a99108d92662d62f4ec54dfd30307baf3d99f143c0c7dc217b99afdae7187a\" for &ContainerMetadata{Name:kube-scheduler,Attempt:0,} returns container id \"c1ef99962591aec2aec7a31d43738dcdd0b46459c01683294d88f8ab06386078\"" Sep 6 00:21:02.496473 env[1421]: time="2025-09-06T00:21:02.496435883Z" level=info msg="StartContainer for \"c1ef99962591aec2aec7a31d43738dcdd0b46459c01683294d88f8ab06386078\"" Sep 6 00:21:02.502430 env[1421]: time="2025-09-06T00:21:02.502378274Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-apiserver-ci-3510.3.8-n-28804d0655,Uid:b8987a8e8fa6b3ad0ea9a28318749831,Namespace:kube-system,Attempt:0,} returns sandbox id \"213f2b39ea89fce6ed4cc1958295b1e56359bb0504fbf1b6c44d7d9a44d9848a\"" Sep 6 00:21:02.505376 env[1421]: time="2025-09-06T00:21:02.505330919Z" level=info msg="CreateContainer within sandbox \"213f2b39ea89fce6ed4cc1958295b1e56359bb0504fbf1b6c44d7d9a44d9848a\" for container &ContainerMetadata{Name:kube-apiserver,Attempt:0,}" Sep 6 00:21:02.519897 env[1421]: time="2025-09-06T00:21:02.519833941Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-controller-manager-ci-3510.3.8-n-28804d0655,Uid:d699d1c241dae7d271bd934d8d8b9d2f,Namespace:kube-system,Attempt:0,} returns sandbox id \"25241f813b01b823d6b214fb19074f6dbf10b9f841a1414c5c02b52e4877cf7c\"" Sep 6 00:21:02.523388 env[1421]: time="2025-09-06T00:21:02.523341594Z" level=info msg="CreateContainer within sandbox \"25241f813b01b823d6b214fb19074f6dbf10b9f841a1414c5c02b52e4877cf7c\" for container &ContainerMetadata{Name:kube-controller-manager,Attempt:0,}" Sep 6 00:21:02.532029 systemd[1]: Started cri-containerd-c1ef99962591aec2aec7a31d43738dcdd0b46459c01683294d88f8ab06386078.scope. Sep 6 00:21:02.553000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:02.553000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:02.553000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:02.553000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:02.553000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:02.553000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:02.553000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:02.553000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:02.553000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:02.554000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:02.554000 audit: BPF prog-id=71 op=LOAD Sep 6 00:21:02.554000 audit[2219]: AVC avc: denied { bpf } for pid=2219 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:02.554000 audit[2219]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c0001cfc48 a2=10 a3=1c items=0 ppid=2096 pid=2219 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:21:02.554000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6331656639393936323539316165633261656337613331643433373338 Sep 6 00:21:02.554000 audit[2219]: AVC avc: denied { perfmon } for pid=2219 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:02.554000 audit[2219]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001cf6b0 a2=3c a3=8 items=0 ppid=2096 pid=2219 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:21:02.554000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6331656639393936323539316165633261656337613331643433373338 Sep 6 00:21:02.554000 audit[2219]: AVC avc: denied { bpf } for pid=2219 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:02.554000 audit[2219]: AVC avc: denied { bpf } for pid=2219 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:02.554000 audit[2219]: AVC avc: denied { bpf } for pid=2219 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:02.554000 audit[2219]: AVC avc: denied { perfmon } for pid=2219 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:02.554000 audit[2219]: AVC avc: denied { perfmon } for pid=2219 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:02.554000 audit[2219]: AVC avc: denied { perfmon } for pid=2219 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:02.554000 audit[2219]: AVC avc: denied { perfmon } for pid=2219 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:02.554000 audit[2219]: AVC avc: denied { perfmon } for pid=2219 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:02.554000 audit[2219]: AVC avc: denied { bpf } for pid=2219 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:02.554000 audit[2219]: AVC avc: denied { bpf } for pid=2219 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:02.554000 audit: BPF prog-id=72 op=LOAD Sep 6 00:21:02.554000 audit[2219]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001cf9d8 a2=78 a3=c000024570 items=0 ppid=2096 pid=2219 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:21:02.554000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6331656639393936323539316165633261656337613331643433373338 Sep 6 00:21:02.555000 audit[2219]: AVC avc: denied { bpf } for pid=2219 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:02.555000 audit[2219]: AVC avc: denied { bpf } for pid=2219 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:02.555000 audit[2219]: AVC avc: denied { perfmon } for pid=2219 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:02.555000 audit[2219]: AVC avc: denied { perfmon } for pid=2219 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:02.555000 audit[2219]: AVC avc: denied { perfmon } for pid=2219 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:02.555000 audit[2219]: AVC avc: denied { perfmon } for pid=2219 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:02.555000 audit[2219]: AVC avc: denied { perfmon } for pid=2219 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:02.555000 audit[2219]: AVC avc: denied { bpf } for pid=2219 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:02.555000 audit[2219]: AVC avc: denied { bpf } for pid=2219 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:02.555000 audit: BPF prog-id=73 op=LOAD Sep 6 00:21:02.555000 audit[2219]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c0001cf770 a2=78 a3=c0000245b8 items=0 ppid=2096 pid=2219 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:21:02.555000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6331656639393936323539316165633261656337613331643433373338 Sep 6 00:21:02.555000 audit: BPF prog-id=73 op=UNLOAD Sep 6 00:21:02.555000 audit: BPF prog-id=72 op=UNLOAD Sep 6 00:21:02.555000 audit[2219]: AVC avc: denied { bpf } for pid=2219 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:02.555000 audit[2219]: AVC avc: denied { bpf } for pid=2219 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:02.555000 audit[2219]: AVC avc: denied { bpf } for pid=2219 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:02.555000 audit[2219]: AVC avc: denied { perfmon } for pid=2219 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:02.555000 audit[2219]: AVC avc: denied { perfmon } for pid=2219 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:02.555000 audit[2219]: AVC avc: denied { perfmon } for pid=2219 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:02.555000 audit[2219]: AVC avc: denied { perfmon } for pid=2219 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:02.555000 audit[2219]: AVC avc: denied { perfmon } for pid=2219 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:02.555000 audit[2219]: AVC avc: denied { bpf } for pid=2219 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:02.555000 audit[2219]: AVC avc: denied { bpf } for pid=2219 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:02.555000 audit: BPF prog-id=74 op=LOAD Sep 6 00:21:02.555000 audit[2219]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001cfc30 a2=78 a3=c0000249c8 items=0 ppid=2096 pid=2219 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:21:02.555000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6331656639393936323539316165633261656337613331643433373338 Sep 6 00:21:02.561171 env[1421]: time="2025-09-06T00:21:02.561127072Z" level=info msg="CreateContainer within sandbox \"213f2b39ea89fce6ed4cc1958295b1e56359bb0504fbf1b6c44d7d9a44d9848a\" for &ContainerMetadata{Name:kube-apiserver,Attempt:0,} returns container id \"8d030817110068d5287053e19b3c861579ec0da43ec204cf406530fd6497da90\"" Sep 6 00:21:02.562046 env[1421]: time="2025-09-06T00:21:02.562014186Z" level=info msg="StartContainer for \"8d030817110068d5287053e19b3c861579ec0da43ec204cf406530fd6497da90\"" Sep 6 00:21:02.580540 env[1421]: time="2025-09-06T00:21:02.580397867Z" level=info msg="CreateContainer within sandbox \"25241f813b01b823d6b214fb19074f6dbf10b9f841a1414c5c02b52e4877cf7c\" for &ContainerMetadata{Name:kube-controller-manager,Attempt:0,} returns container id \"fb76d8a2c8890abd79d73909b5854dc14297ce89d7e8ace0255df2389175c58e\"" Sep 6 00:21:02.582287 env[1421]: time="2025-09-06T00:21:02.582223694Z" level=info msg="StartContainer for \"fb76d8a2c8890abd79d73909b5854dc14297ce89d7e8ace0255df2389175c58e\"" Sep 6 00:21:02.602900 systemd[1]: Started cri-containerd-8d030817110068d5287053e19b3c861579ec0da43ec204cf406530fd6497da90.scope. Sep 6 00:21:02.626634 env[1421]: time="2025-09-06T00:21:02.626577572Z" level=info msg="StartContainer for \"c1ef99962591aec2aec7a31d43738dcdd0b46459c01683294d88f8ab06386078\" returns successfully" Sep 6 00:21:02.635222 systemd[1]: Started cri-containerd-fb76d8a2c8890abd79d73909b5854dc14297ce89d7e8ace0255df2389175c58e.scope. Sep 6 00:21:02.638000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:02.638000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:02.638000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:02.638000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:02.638000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:02.638000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:02.638000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:02.638000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:02.638000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:02.638000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:02.638000 audit: BPF prog-id=75 op=LOAD Sep 6 00:21:02.640000 audit[2245]: AVC avc: denied { bpf } for pid=2245 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:02.640000 audit[2245]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000197c48 a2=10 a3=1c items=0 ppid=2121 pid=2245 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:21:02.640000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3864303330383137313130303638643532383730353365313962336338 Sep 6 00:21:02.641000 audit[2245]: AVC avc: denied { perfmon } for pid=2245 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:02.641000 audit[2245]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001976b0 a2=3c a3=8 items=0 ppid=2121 pid=2245 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:21:02.641000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3864303330383137313130303638643532383730353365313962336338 Sep 6 00:21:02.641000 audit[2245]: AVC avc: denied { bpf } for pid=2245 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:02.641000 audit[2245]: AVC avc: denied { bpf } for pid=2245 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:02.641000 audit[2245]: AVC avc: denied { bpf } for pid=2245 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:02.641000 audit[2245]: AVC avc: denied { perfmon } for pid=2245 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:02.641000 audit[2245]: AVC avc: denied { perfmon } for pid=2245 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:02.641000 audit[2245]: AVC avc: denied { perfmon } for pid=2245 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:02.641000 audit[2245]: AVC avc: denied { perfmon } for pid=2245 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:02.641000 audit[2245]: AVC avc: denied { perfmon } for pid=2245 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:02.641000 audit[2245]: AVC avc: denied { bpf } for pid=2245 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:02.641000 audit[2245]: AVC avc: denied { bpf } for pid=2245 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:02.641000 audit: BPF prog-id=76 op=LOAD Sep 6 00:21:02.641000 audit[2245]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001979d8 a2=78 a3=c000229780 items=0 ppid=2121 pid=2245 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:21:02.641000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3864303330383137313130303638643532383730353365313962336338 Sep 6 00:21:02.642000 audit[2245]: AVC avc: denied { bpf } for pid=2245 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:02.642000 audit[2245]: AVC avc: denied { bpf } for pid=2245 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:02.642000 audit[2245]: AVC avc: denied { perfmon } for pid=2245 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:02.642000 audit[2245]: AVC avc: denied { perfmon } for pid=2245 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:02.642000 audit[2245]: AVC avc: denied { perfmon } for pid=2245 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:02.642000 audit[2245]: AVC avc: denied { perfmon } for pid=2245 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:02.642000 audit[2245]: AVC avc: denied { perfmon } for pid=2245 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:02.642000 audit[2245]: AVC avc: denied { bpf } for pid=2245 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:02.642000 audit[2245]: AVC avc: denied { bpf } for pid=2245 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:02.642000 audit: BPF prog-id=77 op=LOAD Sep 6 00:21:02.642000 audit[2245]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000197770 a2=78 a3=c0002297c8 items=0 ppid=2121 pid=2245 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:21:02.642000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3864303330383137313130303638643532383730353365313962336338 Sep 6 00:21:02.643000 audit: BPF prog-id=77 op=UNLOAD Sep 6 00:21:02.643000 audit: BPF prog-id=76 op=UNLOAD Sep 6 00:21:02.643000 audit[2245]: AVC avc: denied { bpf } for pid=2245 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:02.643000 audit[2245]: AVC avc: denied { bpf } for pid=2245 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:02.643000 audit[2245]: AVC avc: denied { bpf } for pid=2245 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:02.643000 audit[2245]: AVC avc: denied { perfmon } for pid=2245 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:02.643000 audit[2245]: AVC avc: denied { perfmon } for pid=2245 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:02.643000 audit[2245]: AVC avc: denied { perfmon } for pid=2245 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:02.643000 audit[2245]: AVC avc: denied { perfmon } for pid=2245 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:02.643000 audit[2245]: AVC avc: denied { perfmon } for pid=2245 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:02.643000 audit[2245]: AVC avc: denied { bpf } for pid=2245 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:02.643000 audit[2245]: AVC avc: denied { bpf } for pid=2245 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:02.643000 audit: BPF prog-id=78 op=LOAD Sep 6 00:21:02.643000 audit[2245]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000197c30 a2=78 a3=c000229bd8 items=0 ppid=2121 pid=2245 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:21:02.643000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3864303330383137313130303638643532383730353365313962336338 Sep 6 00:21:02.666000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:02.666000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:02.666000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:02.666000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:02.666000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:02.666000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:02.666000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:02.666000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:02.666000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:02.666000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:02.666000 audit: BPF prog-id=79 op=LOAD Sep 6 00:21:02.667000 audit[2257]: AVC avc: denied { bpf } for pid=2257 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:02.667000 audit[2257]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000117c48 a2=10 a3=1c items=0 ppid=2140 pid=2257 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:21:02.667000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6662373664386132633838393061626437396437333930396235383534 Sep 6 00:21:02.668000 audit[2257]: AVC avc: denied { perfmon } for pid=2257 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:02.668000 audit[2257]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001176b0 a2=3c a3=8 items=0 ppid=2140 pid=2257 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:21:02.668000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6662373664386132633838393061626437396437333930396235383534 Sep 6 00:21:02.668000 audit[2257]: AVC avc: denied { bpf } for pid=2257 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:02.668000 audit[2257]: AVC avc: denied { bpf } for pid=2257 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:02.668000 audit[2257]: AVC avc: denied { bpf } for pid=2257 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:02.668000 audit[2257]: AVC avc: denied { perfmon } for pid=2257 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:02.668000 audit[2257]: AVC avc: denied { perfmon } for pid=2257 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:02.668000 audit[2257]: AVC avc: denied { perfmon } for pid=2257 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:02.668000 audit[2257]: AVC avc: denied { perfmon } for pid=2257 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:02.668000 audit[2257]: AVC avc: denied { perfmon } for pid=2257 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:02.668000 audit[2257]: AVC avc: denied { bpf } for pid=2257 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:02.668000 audit[2257]: AVC avc: denied { bpf } for pid=2257 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:02.668000 audit: BPF prog-id=80 op=LOAD Sep 6 00:21:02.668000 audit[2257]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001179d8 a2=78 a3=c0003801c0 items=0 ppid=2140 pid=2257 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:21:02.668000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6662373664386132633838393061626437396437333930396235383534 Sep 6 00:21:02.669000 audit[2257]: AVC avc: denied { bpf } for pid=2257 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:02.669000 audit[2257]: AVC avc: denied { bpf } for pid=2257 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:02.669000 audit[2257]: AVC avc: denied { perfmon } for pid=2257 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:02.669000 audit[2257]: AVC avc: denied { perfmon } for pid=2257 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:02.669000 audit[2257]: AVC avc: denied { perfmon } for pid=2257 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:02.669000 audit[2257]: AVC avc: denied { perfmon } for pid=2257 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:02.669000 audit[2257]: AVC avc: denied { perfmon } for pid=2257 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:02.669000 audit[2257]: AVC avc: denied { bpf } for pid=2257 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:02.669000 audit[2257]: AVC avc: denied { bpf } for pid=2257 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:02.669000 audit: BPF prog-id=81 op=LOAD Sep 6 00:21:02.669000 audit[2257]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000117770 a2=78 a3=c000380208 items=0 ppid=2140 pid=2257 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:21:02.669000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6662373664386132633838393061626437396437333930396235383534 Sep 6 00:21:02.670000 audit: BPF prog-id=81 op=UNLOAD Sep 6 00:21:02.670000 audit: BPF prog-id=80 op=UNLOAD Sep 6 00:21:02.670000 audit[2257]: AVC avc: denied { bpf } for pid=2257 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:02.670000 audit[2257]: AVC avc: denied { bpf } for pid=2257 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:02.670000 audit[2257]: AVC avc: denied { bpf } for pid=2257 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:02.670000 audit[2257]: AVC avc: denied { perfmon } for pid=2257 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:02.670000 audit[2257]: AVC avc: denied { perfmon } for pid=2257 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:02.670000 audit[2257]: AVC avc: denied { perfmon } for pid=2257 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:02.670000 audit[2257]: AVC avc: denied { perfmon } for pid=2257 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:02.670000 audit[2257]: AVC avc: denied { perfmon } for pid=2257 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:02.670000 audit[2257]: AVC avc: denied { bpf } for pid=2257 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:02.670000 audit[2257]: AVC avc: denied { bpf } for pid=2257 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:02.670000 audit: BPF prog-id=82 op=LOAD Sep 6 00:21:02.670000 audit[2257]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000117c30 a2=78 a3=c000380618 items=0 ppid=2140 pid=2257 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:21:02.670000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6662373664386132633838393061626437396437333930396235383534 Sep 6 00:21:02.708254 env[1421]: time="2025-09-06T00:21:02.708187220Z" level=info msg="StartContainer for \"8d030817110068d5287053e19b3c861579ec0da43ec204cf406530fd6497da90\" returns successfully" Sep 6 00:21:02.734744 env[1421]: time="2025-09-06T00:21:02.734679625Z" level=info msg="StartContainer for \"fb76d8a2c8890abd79d73909b5854dc14297ce89d7e8ace0255df2389175c58e\" returns successfully" Sep 6 00:21:04.272000 audit[2289]: AVC avc: denied { watch } for pid=2289 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=520970 scontext=system_u:system_r:svirt_lxc_net_t:s0:c221,c330 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Sep 6 00:21:04.272000 audit[2289]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=7 a1=c00099a4b0 a2=fc6 a3=0 items=0 ppid=2140 pid=2289 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c221,c330 key=(null) Sep 6 00:21:04.272000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Sep 6 00:21:04.273000 audit[2289]: AVC avc: denied { watch } for pid=2289 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=520964 scontext=system_u:system_r:svirt_lxc_net_t:s0:c221,c330 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Sep 6 00:21:04.273000 audit[2289]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=7 a1=c0003a7280 a2=fc6 a3=0 items=0 ppid=2140 pid=2289 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c221,c330 key=(null) Sep 6 00:21:04.273000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Sep 6 00:21:04.320401 kubelet[2056]: I0906 00:21:04.320363 2056 kubelet_node_status.go:72] "Attempting to register node" node="ci-3510.3.8-n-28804d0655" Sep 6 00:21:04.875000 audit[2265]: AVC avc: denied { watch } for pid=2265 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=520970 scontext=system_u:system_r:svirt_lxc_net_t:s0:c452,c579 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Sep 6 00:21:04.875000 audit[2265]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=41 a1=c003ab33e0 a2=fc6 a3=0 items=0 ppid=2121 pid=2265 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c452,c579 key=(null) Sep 6 00:21:04.875000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E382E3338002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265 Sep 6 00:21:04.875000 audit[2265]: AVC avc: denied { watch } for pid=2265 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=520964 scontext=system_u:system_r:svirt_lxc_net_t:s0:c452,c579 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Sep 6 00:21:04.875000 audit[2265]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=41 a1=c006ce2580 a2=fc6 a3=0 items=0 ppid=2121 pid=2265 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c452,c579 key=(null) Sep 6 00:21:04.875000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E382E3338002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265 Sep 6 00:21:04.876000 audit[2265]: AVC avc: denied { watch } for pid=2265 comm="kube-apiserver" path="/etc/kubernetes/pki/apiserver.crt" dev="sda9" ino=520966 scontext=system_u:system_r:svirt_lxc_net_t:s0:c452,c579 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Sep 6 00:21:04.876000 audit[2265]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=41 a1=c00712e060 a2=fc6 a3=0 items=0 ppid=2121 pid=2265 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c452,c579 key=(null) Sep 6 00:21:04.876000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E382E3338002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265 Sep 6 00:21:04.879000 audit[2265]: AVC avc: denied { watch } for pid=2265 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-client.crt" dev="sda9" ino=520972 scontext=system_u:system_r:svirt_lxc_net_t:s0:c452,c579 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Sep 6 00:21:04.879000 audit[2265]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=4a a1=c006ce6900 a2=fc6 a3=0 items=0 ppid=2121 pid=2265 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c452,c579 key=(null) Sep 6 00:21:04.879000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E382E3338002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265 Sep 6 00:21:04.895000 audit[2265]: AVC avc: denied { watch } for pid=2265 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=520964 scontext=system_u:system_r:svirt_lxc_net_t:s0:c452,c579 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Sep 6 00:21:04.895000 audit[2265]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=4c a1=c00722b400 a2=fc6 a3=0 items=0 ppid=2121 pid=2265 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c452,c579 key=(null) Sep 6 00:21:04.895000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E382E3338002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265 Sep 6 00:21:04.898000 audit[2265]: AVC avc: denied { watch } for pid=2265 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=520970 scontext=system_u:system_r:svirt_lxc_net_t:s0:c452,c579 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Sep 6 00:21:04.898000 audit[2265]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=4c a1=c006ce70b0 a2=fc6 a3=0 items=0 ppid=2121 pid=2265 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c452,c579 key=(null) Sep 6 00:21:04.898000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E382E3338002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265 Sep 6 00:21:04.948132 kubelet[2056]: E0906 00:21:04.948079 2056 nodelease.go:49] "Failed to get node when trying to set owner ref to the node lease" err="nodes \"ci-3510.3.8-n-28804d0655\" not found" node="ci-3510.3.8-n-28804d0655" Sep 6 00:21:05.158918 kubelet[2056]: I0906 00:21:05.158767 2056 kubelet_node_status.go:75] "Successfully registered node" node="ci-3510.3.8-n-28804d0655" Sep 6 00:21:05.159331 kubelet[2056]: E0906 00:21:05.159149 2056 kubelet_node_status.go:535] "Error updating node status, will retry" err="error getting node \"ci-3510.3.8-n-28804d0655\": node \"ci-3510.3.8-n-28804d0655\" not found" Sep 6 00:21:05.268238 kubelet[2056]: E0906 00:21:05.268183 2056 kubelet_node_status.go:453] "Error getting the current node from lister" err="node \"ci-3510.3.8-n-28804d0655\" not found" Sep 6 00:21:05.369461 kubelet[2056]: E0906 00:21:05.369358 2056 kubelet_node_status.go:453] "Error getting the current node from lister" err="node \"ci-3510.3.8-n-28804d0655\" not found" Sep 6 00:21:05.470405 kubelet[2056]: E0906 00:21:05.470214 2056 kubelet_node_status.go:453] "Error getting the current node from lister" err="node \"ci-3510.3.8-n-28804d0655\" not found" Sep 6 00:21:05.570843 kubelet[2056]: E0906 00:21:05.570754 2056 kubelet_node_status.go:453] "Error getting the current node from lister" err="node \"ci-3510.3.8-n-28804d0655\" not found" Sep 6 00:21:05.671652 kubelet[2056]: E0906 00:21:05.671581 2056 kubelet_node_status.go:453] "Error getting the current node from lister" err="node \"ci-3510.3.8-n-28804d0655\" not found" Sep 6 00:21:05.772256 kubelet[2056]: E0906 00:21:05.772105 2056 kubelet_node_status.go:453] "Error getting the current node from lister" err="node \"ci-3510.3.8-n-28804d0655\" not found" Sep 6 00:21:05.872508 kubelet[2056]: E0906 00:21:05.872441 2056 kubelet_node_status.go:453] "Error getting the current node from lister" err="node \"ci-3510.3.8-n-28804d0655\" not found" Sep 6 00:21:05.973079 kubelet[2056]: E0906 00:21:05.973018 2056 kubelet_node_status.go:453] "Error getting the current node from lister" err="node \"ci-3510.3.8-n-28804d0655\" not found" Sep 6 00:21:06.074082 kubelet[2056]: E0906 00:21:06.073923 2056 kubelet_node_status.go:453] "Error getting the current node from lister" err="node \"ci-3510.3.8-n-28804d0655\" not found" Sep 6 00:21:06.174623 kubelet[2056]: E0906 00:21:06.174577 2056 kubelet_node_status.go:453] "Error getting the current node from lister" err="node \"ci-3510.3.8-n-28804d0655\" not found" Sep 6 00:21:06.275877 kubelet[2056]: E0906 00:21:06.275831 2056 kubelet_node_status.go:453] "Error getting the current node from lister" err="node \"ci-3510.3.8-n-28804d0655\" not found" Sep 6 00:21:06.376438 kubelet[2056]: E0906 00:21:06.376390 2056 kubelet_node_status.go:453] "Error getting the current node from lister" err="node \"ci-3510.3.8-n-28804d0655\" not found" Sep 6 00:21:06.477649 kubelet[2056]: E0906 00:21:06.477600 2056 kubelet_node_status.go:453] "Error getting the current node from lister" err="node \"ci-3510.3.8-n-28804d0655\" not found" Sep 6 00:21:06.578375 kubelet[2056]: E0906 00:21:06.578324 2056 kubelet_node_status.go:453] "Error getting the current node from lister" err="node \"ci-3510.3.8-n-28804d0655\" not found" Sep 6 00:21:06.679501 kubelet[2056]: E0906 00:21:06.679319 2056 kubelet_node_status.go:453] "Error getting the current node from lister" err="node \"ci-3510.3.8-n-28804d0655\" not found" Sep 6 00:21:06.779705 kubelet[2056]: E0906 00:21:06.779654 2056 kubelet_node_status.go:453] "Error getting the current node from lister" err="node \"ci-3510.3.8-n-28804d0655\" not found" Sep 6 00:21:06.880686 kubelet[2056]: E0906 00:21:06.880630 2056 kubelet_node_status.go:453] "Error getting the current node from lister" err="node \"ci-3510.3.8-n-28804d0655\" not found" Sep 6 00:21:06.981631 kubelet[2056]: E0906 00:21:06.981482 2056 kubelet_node_status.go:453] "Error getting the current node from lister" err="node \"ci-3510.3.8-n-28804d0655\" not found" Sep 6 00:21:07.082111 kubelet[2056]: E0906 00:21:07.082059 2056 kubelet_node_status.go:453] "Error getting the current node from lister" err="node \"ci-3510.3.8-n-28804d0655\" not found" Sep 6 00:21:07.180275 systemd[1]: Reloading. Sep 6 00:21:07.182676 kubelet[2056]: E0906 00:21:07.182638 2056 kubelet_node_status.go:453] "Error getting the current node from lister" err="node \"ci-3510.3.8-n-28804d0655\" not found" Sep 6 00:21:07.275855 /usr/lib/systemd/system-generators/torcx-generator[2346]: time="2025-09-06T00:21:07Z" level=debug msg="common configuration parsed" base_dir=/var/lib/torcx/ conf_dir=/etc/torcx/ run_dir=/run/torcx/ store_paths="[/usr/share/torcx/store /usr/share/oem/torcx/store/3510.3.8 /usr/share/oem/torcx/store /var/lib/torcx/store/3510.3.8 /var/lib/torcx/store]" Sep 6 00:21:07.277099 /usr/lib/systemd/system-generators/torcx-generator[2346]: time="2025-09-06T00:21:07Z" level=info msg="torcx already run" Sep 6 00:21:07.283452 kubelet[2056]: E0906 00:21:07.283409 2056 kubelet_node_status.go:453] "Error getting the current node from lister" err="node \"ci-3510.3.8-n-28804d0655\" not found" Sep 6 00:21:07.386443 systemd[1]: /usr/lib/systemd/system/locksmithd.service:8: Unit uses CPUShares=; please use CPUWeight= instead. Support for CPUShares= will be removed soon. Sep 6 00:21:07.386473 systemd[1]: /usr/lib/systemd/system/locksmithd.service:9: Unit uses MemoryLimit=; please use MemoryMax= instead. Support for MemoryLimit= will be removed soon. Sep 6 00:21:07.404583 systemd[1]: /run/systemd/system/docker.socket:8: ListenStream= references a path below legacy directory /var/run/, updating /var/run/docker.sock → /run/docker.sock; please update the unit file accordingly. Sep 6 00:21:07.512963 kernel: kauditd_printk_skb: 380 callbacks suppressed Sep 6 00:21:07.513189 kernel: audit: type=1400 audit(1757118067.485:536): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:07.485000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:07.545461 kernel: audit: audit_backlog=65 > audit_backlog_limit=64 Sep 6 00:21:07.545627 kernel: audit: type=1400 audit(1757118067.485:537): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:07.545658 kernel: audit: audit_lost=31 audit_rate_limit=0 audit_backlog_limit=64 Sep 6 00:21:07.545679 kernel: audit: backlog limit exceeded Sep 6 00:21:07.545699 kernel: audit: audit_backlog=65 > audit_backlog_limit=64 Sep 6 00:21:07.485000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:07.556605 kernel: audit: type=1400 audit(1757118067.485:538): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:07.556769 kernel: audit: audit_lost=32 audit_rate_limit=0 audit_backlog_limit=64 Sep 6 00:21:07.485000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:07.606658 kernel: audit: type=1400 audit(1757118067.485:539): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:07.606797 kernel: audit: backlog limit exceeded Sep 6 00:21:07.485000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:07.485000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:07.485000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:07.485000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:07.485000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:07.485000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:07.512000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:07.512000 audit: BPF prog-id=83 op=LOAD Sep 6 00:21:07.512000 audit: BPF prog-id=59 op=UNLOAD Sep 6 00:21:07.517000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:07.517000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:07.518000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:07.518000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:07.518000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:07.518000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:07.518000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:07.518000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:07.518000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:07.518000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:07.518000 audit: BPF prog-id=84 op=LOAD Sep 6 00:21:07.518000 audit: BPF prog-id=63 op=UNLOAD Sep 6 00:21:07.518000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:07.518000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:07.518000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:07.518000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:07.518000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:07.518000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:07.518000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:07.518000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:07.518000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:07.518000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:07.519000 audit: BPF prog-id=85 op=LOAD Sep 6 00:21:07.519000 audit: BPF prog-id=64 op=UNLOAD Sep 6 00:21:07.520000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:07.520000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:07.520000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:07.520000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:07.520000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:07.520000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:07.520000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:07.520000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:07.520000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:07.520000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:07.520000 audit: BPF prog-id=86 op=LOAD Sep 6 00:21:07.520000 audit: BPF prog-id=44 op=UNLOAD Sep 6 00:21:07.520000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:07.520000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:07.520000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:07.520000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:07.520000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:07.520000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:07.520000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:07.520000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:07.520000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:07.520000 audit: BPF prog-id=87 op=LOAD Sep 6 00:21:07.520000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:07.520000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:07.520000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:07.520000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:07.520000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:07.520000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:07.520000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:07.520000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:07.520000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:07.562000 audit: BPF prog-id=46 op=UNLOAD Sep 6 00:21:07.563000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:07.605000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:07.608000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:07.608000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:07.609000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:07.609000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:07.609000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:07.609000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:07.609000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:07.609000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:07.609000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:07.609000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:07.609000 audit: BPF prog-id=91 op=LOAD Sep 6 00:21:07.609000 audit: BPF prog-id=48 op=UNLOAD Sep 6 00:21:07.609000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:07.609000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:07.609000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:07.609000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:07.609000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:07.609000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:07.609000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:07.609000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:07.609000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:07.610000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:07.610000 audit: BPF prog-id=92 op=LOAD Sep 6 00:21:07.610000 audit: BPF prog-id=49 op=UNLOAD Sep 6 00:21:07.610000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:07.610000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:07.610000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:07.610000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:07.610000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:07.610000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:07.610000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:07.610000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:07.610000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:07.610000 audit: BPF prog-id=93 op=LOAD Sep 6 00:21:07.610000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:07.610000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:07.610000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:07.610000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:07.610000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:07.610000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:07.610000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:07.610000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:07.610000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:07.610000 audit: BPF prog-id=94 op=LOAD Sep 6 00:21:07.610000 audit: BPF prog-id=50 op=UNLOAD Sep 6 00:21:07.610000 audit: BPF prog-id=51 op=UNLOAD Sep 6 00:21:07.611000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:07.611000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:07.611000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:07.611000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:07.611000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:07.611000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:07.611000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:07.611000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:07.611000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:07.612000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:07.612000 audit: BPF prog-id=95 op=LOAD Sep 6 00:21:07.612000 audit: BPF prog-id=52 op=UNLOAD Sep 6 00:21:07.614000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:07.614000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:07.614000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:07.614000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:07.614000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:07.614000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:07.614000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:07.614000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:07.614000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:07.614000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:07.614000 audit: BPF prog-id=96 op=LOAD Sep 6 00:21:07.614000 audit: BPF prog-id=53 op=UNLOAD Sep 6 00:21:07.614000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:07.614000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:07.614000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:07.614000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:07.614000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:07.614000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:07.614000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:07.614000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:07.614000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:07.614000 audit: BPF prog-id=97 op=LOAD Sep 6 00:21:07.614000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:07.614000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:07.614000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:07.614000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:07.614000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:07.614000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:07.614000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:07.614000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:07.614000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:07.614000 audit: BPF prog-id=98 op=LOAD Sep 6 00:21:07.614000 audit: BPF prog-id=54 op=UNLOAD Sep 6 00:21:07.614000 audit: BPF prog-id=55 op=UNLOAD Sep 6 00:21:07.617000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:07.617000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:07.617000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:07.617000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:07.617000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:07.617000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:07.617000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:07.617000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:07.617000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:07.618000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:07.618000 audit: BPF prog-id=99 op=LOAD Sep 6 00:21:07.618000 audit: BPF prog-id=56 op=UNLOAD Sep 6 00:21:07.619000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:07.619000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:07.619000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:07.619000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:07.619000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:07.619000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:07.619000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:07.619000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:07.619000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:07.619000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:07.619000 audit: BPF prog-id=100 op=LOAD Sep 6 00:21:07.619000 audit: BPF prog-id=71 op=UNLOAD Sep 6 00:21:07.619000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:07.619000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:07.619000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:07.619000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:07.619000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:07.619000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:07.619000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:07.619000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:07.619000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:07.619000 audit: BPF prog-id=101 op=LOAD Sep 6 00:21:07.619000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:07.619000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:07.619000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:07.619000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:07.619000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:07.619000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:07.619000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:07.619000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:07.619000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:07.619000 audit: BPF prog-id=102 op=LOAD Sep 6 00:21:07.619000 audit: BPF prog-id=57 op=UNLOAD Sep 6 00:21:07.619000 audit: BPF prog-id=58 op=UNLOAD Sep 6 00:21:07.621000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:07.621000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:07.621000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:07.621000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:07.621000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:07.621000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:07.621000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:07.621000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:07.621000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:07.622000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:07.622000 audit: BPF prog-id=103 op=LOAD Sep 6 00:21:07.622000 audit: BPF prog-id=79 op=UNLOAD Sep 6 00:21:07.643209 systemd[1]: Stopping kubelet.service... Sep 6 00:21:07.666369 systemd[1]: kubelet.service: Deactivated successfully. Sep 6 00:21:07.666637 systemd[1]: Stopped kubelet.service. Sep 6 00:21:07.665000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 00:21:07.669145 systemd[1]: Starting kubelet.service... Sep 6 00:21:07.824000 audit[2289]: AVC avc: denied { watch } for pid=2289 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=520964 scontext=system_u:system_r:svirt_lxc_net_t:s0:c221,c330 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Sep 6 00:21:07.824000 audit[2289]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=8 a1=c000b1b9a0 a2=fc6 a3=0 items=0 ppid=2140 pid=2289 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c221,c330 key=(null) Sep 6 00:21:07.824000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Sep 6 00:21:07.824000 audit[2289]: AVC avc: denied { watch } for pid=2289 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=520964 scontext=system_u:system_r:svirt_lxc_net_t:s0:c221,c330 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Sep 6 00:21:07.824000 audit[2289]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=8 a1=c000388d00 a2=fc6 a3=0 items=0 ppid=2140 pid=2289 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c221,c330 key=(null) Sep 6 00:21:07.824000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Sep 6 00:21:07.824000 audit[2289]: AVC avc: denied { watch } for pid=2289 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=520964 scontext=system_u:system_r:svirt_lxc_net_t:s0:c221,c330 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Sep 6 00:21:07.824000 audit[2289]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=8 a1=c000388d20 a2=fc6 a3=0 items=0 ppid=2140 pid=2289 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c221,c330 key=(null) Sep 6 00:21:07.824000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Sep 6 00:21:07.825000 audit[2289]: AVC avc: denied { watch } for pid=2289 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=520964 scontext=system_u:system_r:svirt_lxc_net_t:s0:c221,c330 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Sep 6 00:21:07.825000 audit[2289]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=8 a1=c000b1bbc0 a2=fc6 a3=0 items=0 ppid=2140 pid=2289 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c221,c330 key=(null) Sep 6 00:21:07.825000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Sep 6 00:21:08.088327 systemd[1]: Started kubelet.service. Sep 6 00:21:08.088000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 00:21:08.155245 kubelet[2412]: Flag --container-runtime-endpoint has been deprecated, This parameter should be set via the config file specified by the Kubelet's --config flag. See https://kubernetes.io/docs/tasks/administer-cluster/kubelet-config-file/ for more information. Sep 6 00:21:08.155665 kubelet[2412]: Flag --pod-infra-container-image has been deprecated, will be removed in a future release. Image garbage collector will get sandbox image information from CRI. Sep 6 00:21:08.155710 kubelet[2412]: Flag --volume-plugin-dir has been deprecated, This parameter should be set via the config file specified by the Kubelet's --config flag. See https://kubernetes.io/docs/tasks/administer-cluster/kubelet-config-file/ for more information. Sep 6 00:21:08.155841 kubelet[2412]: I0906 00:21:08.155819 2412 server.go:211] "--pod-infra-container-image will not be pruned by the image garbage collector in kubelet and should also be set in the remote runtime" Sep 6 00:21:08.165442 kubelet[2412]: I0906 00:21:08.165403 2412 server.go:491] "Kubelet version" kubeletVersion="v1.31.8" Sep 6 00:21:08.165640 kubelet[2412]: I0906 00:21:08.165631 2412 server.go:493] "Golang settings" GOGC="" GOMAXPROCS="" GOTRACEBACK="" Sep 6 00:21:08.165968 kubelet[2412]: I0906 00:21:08.165949 2412 server.go:934] "Client rotation is on, will bootstrap in background" Sep 6 00:21:08.167415 kubelet[2412]: I0906 00:21:08.167390 2412 certificate_store.go:130] Loading cert/key pair from "/var/lib/kubelet/pki/kubelet-client-current.pem". Sep 6 00:21:08.438450 kubelet[2412]: I0906 00:21:08.438393 2412 dynamic_cafile_content.go:160] "Starting controller" name="client-ca-bundle::/etc/kubernetes/pki/ca.crt" Sep 6 00:21:08.442604 kubelet[2412]: E0906 00:21:08.442560 2412 log.go:32] "RuntimeConfig from runtime service failed" err="rpc error: code = Unimplemented desc = unknown method RuntimeConfig for service runtime.v1.RuntimeService" Sep 6 00:21:08.442604 kubelet[2412]: I0906 00:21:08.442596 2412 server.go:1408] "CRI implementation should be updated to support RuntimeConfig when KubeletCgroupDriverFromCRI feature gate has been enabled. Falling back to using cgroupDriver from kubelet config." Sep 6 00:21:08.448664 kubelet[2412]: I0906 00:21:08.448630 2412 server.go:749] "--cgroups-per-qos enabled, but --cgroup-root was not specified. defaulting to /" Sep 6 00:21:08.449010 kubelet[2412]: I0906 00:21:08.448985 2412 swap_util.go:113] "Swap is on" /proc/swaps contents="Filename\t\t\t\tType\t\tSize\t\tUsed\t\tPriority" Sep 6 00:21:08.449167 kubelet[2412]: I0906 00:21:08.449137 2412 container_manager_linux.go:264] "Container manager verified user specified cgroup-root exists" cgroupRoot=[] Sep 6 00:21:08.449355 kubelet[2412]: I0906 00:21:08.449168 2412 container_manager_linux.go:269] "Creating Container Manager object based on Node Config" nodeConfig={"NodeName":"ci-3510.3.8-n-28804d0655","RuntimeCgroupsName":"","SystemCgroupsName":"","KubeletCgroupsName":"","KubeletOOMScoreAdj":-999,"ContainerRuntime":"","CgroupsPerQOS":true,"CgroupRoot":"/","CgroupDriver":"systemd","KubeletRootDir":"/var/lib/kubelet","ProtectKernelDefaults":false,"KubeReservedCgroupName":"","SystemReservedCgroupName":"","ReservedSystemCPUs":{},"EnforceNodeAllocatable":{"pods":{}},"KubeReserved":null,"SystemReserved":null,"HardEvictionThresholds":[{"Signal":"memory.available","Operator":"LessThan","Value":{"Quantity":"100Mi","Percentage":0},"GracePeriod":0,"MinReclaim":null},{"Signal":"nodefs.available","Operator":"LessThan","Value":{"Quantity":null,"Percentage":0.1},"GracePeriod":0,"MinReclaim":null},{"Signal":"nodefs.inodesFree","Operator":"LessThan","Value":{"Quantity":null,"Percentage":0.05},"GracePeriod":0,"MinReclaim":null},{"Signal":"imagefs.available","Operator":"LessThan","Value":{"Quantity":null,"Percentage":0.15},"GracePeriod":0,"MinReclaim":null},{"Signal":"imagefs.inodesFree","Operator":"LessThan","Value":{"Quantity":null,"Percentage":0.05},"GracePeriod":0,"MinReclaim":null}],"QOSReserved":{},"CPUManagerPolicy":"none","CPUManagerPolicyOptions":null,"TopologyManagerScope":"container","CPUManagerReconcilePeriod":10000000000,"ExperimentalMemoryManagerPolicy":"None","ExperimentalMemoryManagerReservedMemory":null,"PodPidsLimit":-1,"EnforceCPULimits":true,"CPUCFSQuotaPeriod":100000000,"TopologyManagerPolicy":"none","TopologyManagerPolicyOptions":null,"CgroupVersion":2} Sep 6 00:21:08.449534 kubelet[2412]: I0906 00:21:08.449367 2412 topology_manager.go:138] "Creating topology manager with none policy" Sep 6 00:21:08.449534 kubelet[2412]: I0906 00:21:08.449381 2412 container_manager_linux.go:300] "Creating device plugin manager" Sep 6 00:21:08.449534 kubelet[2412]: I0906 00:21:08.449426 2412 state_mem.go:36] "Initialized new in-memory state store" Sep 6 00:21:08.449790 kubelet[2412]: I0906 00:21:08.449575 2412 kubelet.go:408] "Attempting to sync node with API server" Sep 6 00:21:08.449982 kubelet[2412]: I0906 00:21:08.449964 2412 kubelet.go:303] "Adding static pod path" path="/etc/kubernetes/manifests" Sep 6 00:21:08.450128 kubelet[2412]: I0906 00:21:08.450100 2412 kubelet.go:314] "Adding apiserver pod source" Sep 6 00:21:08.450226 kubelet[2412]: I0906 00:21:08.450216 2412 apiserver.go:42] "Waiting for node sync before watching apiserver pods" Sep 6 00:21:08.451377 kubelet[2412]: I0906 00:21:08.451346 2412 kuberuntime_manager.go:262] "Container runtime initialized" containerRuntime="containerd" version="1.6.16" apiVersion="v1" Sep 6 00:21:08.451994 kubelet[2412]: I0906 00:21:08.451973 2412 kubelet.go:837] "Not starting ClusterTrustBundle informer because we are in static kubelet mode" Sep 6 00:21:08.452508 kubelet[2412]: I0906 00:21:08.452485 2412 server.go:1274] "Started kubelet" Sep 6 00:21:08.460523 kubelet[2412]: I0906 00:21:08.460478 2412 server.go:163] "Starting to listen" address="0.0.0.0" port=10250 Sep 6 00:21:08.462121 kubelet[2412]: I0906 00:21:08.462102 2412 server.go:449] "Adding debug handlers to kubelet server" Sep 6 00:21:08.463000 audit[2412]: AVC avc: denied { mac_admin } for pid=2412 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:08.463000 audit: SELINUX_ERR op=setxattr invalid_context="system_u:object_r:container_file_t:s0" Sep 6 00:21:08.463000 audit[2412]: SYSCALL arch=c000003e syscall=188 success=no exit=-22 a0=c0008bb680 a1=c0008dc798 a2=c0008bb650 a3=25 items=0 ppid=1 pid=2412 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/usr/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:21:08.463000 audit: PROCTITLE proctitle=2F7573722F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 Sep 6 00:21:08.465167 kubelet[2412]: I0906 00:21:08.465135 2412 kubelet.go:1430] "Unprivileged containerized plugins might not work, could not set selinux context on plugin registration dir" path="/var/lib/kubelet/plugins_registry" err="setxattr /var/lib/kubelet/plugins_registry: invalid argument" Sep 6 00:21:08.464000 audit[2412]: AVC avc: denied { mac_admin } for pid=2412 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:08.464000 audit: SELINUX_ERR op=setxattr invalid_context="system_u:object_r:container_file_t:s0" Sep 6 00:21:08.464000 audit[2412]: SYSCALL arch=c000003e syscall=188 success=no exit=-22 a0=c0006b5be0 a1=c0008dc7b0 a2=c0008bb710 a3=25 items=0 ppid=1 pid=2412 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/usr/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:21:08.464000 audit: PROCTITLE proctitle=2F7573722F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 Sep 6 00:21:08.465551 kubelet[2412]: I0906 00:21:08.465532 2412 kubelet.go:1434] "Unprivileged containerized plugins might not work, could not set selinux context on plugins dir" path="/var/lib/kubelet/plugins" err="setxattr /var/lib/kubelet/plugins: invalid argument" Sep 6 00:21:08.465645 kubelet[2412]: I0906 00:21:08.465635 2412 fs_resource_analyzer.go:67] "Starting FS ResourceAnalyzer" Sep 6 00:21:08.465849 kubelet[2412]: I0906 00:21:08.465780 2412 ratelimit.go:55] "Setting rate limiting for endpoint" service="podresources" qps=100 burstTokens=10 Sep 6 00:21:08.466094 kubelet[2412]: I0906 00:21:08.466074 2412 server.go:236] "Starting to serve the podresources API" endpoint="unix:/var/lib/kubelet/pod-resources/kubelet.sock" Sep 6 00:21:08.473172 kubelet[2412]: I0906 00:21:08.473136 2412 dynamic_serving_content.go:135] "Starting controller" name="kubelet-server-cert-files::/var/lib/kubelet/pki/kubelet.crt::/var/lib/kubelet/pki/kubelet.key" Sep 6 00:21:08.475579 kubelet[2412]: I0906 00:21:08.475552 2412 volume_manager.go:289] "Starting Kubelet Volume Manager" Sep 6 00:21:08.476083 kubelet[2412]: E0906 00:21:08.476060 2412 kubelet_node_status.go:453] "Error getting the current node from lister" err="node \"ci-3510.3.8-n-28804d0655\" not found" Sep 6 00:21:08.478389 kubelet[2412]: I0906 00:21:08.478364 2412 desired_state_of_world_populator.go:147] "Desired state populator starts to run" Sep 6 00:21:08.478685 kubelet[2412]: I0906 00:21:08.478667 2412 reconciler.go:26] "Reconciler: start to sync state" Sep 6 00:21:08.481185 kubelet[2412]: I0906 00:21:08.481138 2412 kubelet_network_linux.go:50] "Initialized iptables rules." protocol="IPv4" Sep 6 00:21:08.484539 kubelet[2412]: I0906 00:21:08.484506 2412 kubelet_network_linux.go:50] "Initialized iptables rules." protocol="IPv6" Sep 6 00:21:08.484539 kubelet[2412]: I0906 00:21:08.484545 2412 status_manager.go:217] "Starting to sync pod status with apiserver" Sep 6 00:21:08.484879 kubelet[2412]: I0906 00:21:08.484573 2412 kubelet.go:2321] "Starting kubelet main sync loop" Sep 6 00:21:08.484879 kubelet[2412]: E0906 00:21:08.484631 2412 kubelet.go:2345] "Skipping pod synchronization" err="[container runtime status check may not have completed yet, PLEG is not healthy: pleg has yet to be successful]" Sep 6 00:21:08.495840 kubelet[2412]: I0906 00:21:08.495803 2412 factory.go:221] Registration of the systemd container factory successfully Sep 6 00:21:08.496311 kubelet[2412]: I0906 00:21:08.496264 2412 factory.go:219] Registration of the crio container factory failed: Get "http://%2Fvar%2Frun%2Fcrio%2Fcrio.sock/info": dial unix /var/run/crio/crio.sock: connect: no such file or directory Sep 6 00:21:08.505129 kubelet[2412]: I0906 00:21:08.505085 2412 factory.go:221] Registration of the containerd container factory successfully Sep 6 00:21:08.564138 kubelet[2412]: I0906 00:21:08.564105 2412 cpu_manager.go:214] "Starting CPU manager" policy="none" Sep 6 00:21:08.564369 kubelet[2412]: I0906 00:21:08.564355 2412 cpu_manager.go:215] "Reconciling" reconcilePeriod="10s" Sep 6 00:21:08.564448 kubelet[2412]: I0906 00:21:08.564439 2412 state_mem.go:36] "Initialized new in-memory state store" Sep 6 00:21:08.564707 kubelet[2412]: I0906 00:21:08.564690 2412 state_mem.go:88] "Updated default CPUSet" cpuSet="" Sep 6 00:21:08.564821 kubelet[2412]: I0906 00:21:08.564791 2412 state_mem.go:96] "Updated CPUSet assignments" assignments={} Sep 6 00:21:08.564925 kubelet[2412]: I0906 00:21:08.564897 2412 policy_none.go:49] "None policy: Start" Sep 6 00:21:08.566867 kubelet[2412]: I0906 00:21:08.566794 2412 memory_manager.go:170] "Starting memorymanager" policy="None" Sep 6 00:21:08.566867 kubelet[2412]: I0906 00:21:08.566825 2412 state_mem.go:35] "Initializing new in-memory state store" Sep 6 00:21:08.567102 kubelet[2412]: I0906 00:21:08.567083 2412 state_mem.go:75] "Updated machine memory state" Sep 6 00:21:08.574983 kubelet[2412]: I0906 00:21:08.574844 2412 manager.go:513] "Failed to read data from checkpoint" checkpoint="kubelet_internal_checkpoint" err="checkpoint is not found" Sep 6 00:21:08.574000 audit[2412]: AVC avc: denied { mac_admin } for pid=2412 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:08.574000 audit: SELINUX_ERR op=setxattr invalid_context="system_u:object_r:container_file_t:s0" Sep 6 00:21:08.574000 audit[2412]: SYSCALL arch=c000003e syscall=188 success=no exit=-22 a0=c0008ba690 a1=c000b19608 a2=c0008ba660 a3=25 items=0 ppid=1 pid=2412 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/usr/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:21:08.574000 audit: PROCTITLE proctitle=2F7573722F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 Sep 6 00:21:08.575541 kubelet[2412]: I0906 00:21:08.575231 2412 server.go:88] "Unprivileged containerized plugins might not work. Could not set selinux context on socket dir" path="/var/lib/kubelet/device-plugins/" err="setxattr /var/lib/kubelet/device-plugins/: invalid argument" Sep 6 00:21:08.575541 kubelet[2412]: I0906 00:21:08.575430 2412 eviction_manager.go:189] "Eviction manager: starting control loop" Sep 6 00:21:08.575541 kubelet[2412]: I0906 00:21:08.575445 2412 container_log_manager.go:189] "Initializing container log rotate workers" workers=1 monitorPeriod="10s" Sep 6 00:21:08.578247 kubelet[2412]: I0906 00:21:08.576364 2412 plugin_manager.go:118] "Starting Kubelet Plugin Manager" Sep 6 00:21:08.600974 kubelet[2412]: W0906 00:21:08.600917 2412 warnings.go:70] metadata.name: this is used in the Pod's hostname, which can result in surprising behavior; a DNS label is recommended: [must not contain dots] Sep 6 00:21:08.607985 kubelet[2412]: W0906 00:21:08.607667 2412 warnings.go:70] metadata.name: this is used in the Pod's hostname, which can result in surprising behavior; a DNS label is recommended: [must not contain dots] Sep 6 00:21:08.607985 kubelet[2412]: W0906 00:21:08.607761 2412 warnings.go:70] metadata.name: this is used in the Pod's hostname, which can result in surprising behavior; a DNS label is recommended: [must not contain dots] Sep 6 00:21:08.680755 kubelet[2412]: I0906 00:21:08.680694 2412 kubelet_node_status.go:72] "Attempting to register node" node="ci-3510.3.8-n-28804d0655" Sep 6 00:21:08.706719 kubelet[2412]: I0906 00:21:08.706596 2412 kubelet_node_status.go:111] "Node was previously registered" node="ci-3510.3.8-n-28804d0655" Sep 6 00:21:08.707011 kubelet[2412]: I0906 00:21:08.706998 2412 kubelet_node_status.go:75] "Successfully registered node" node="ci-3510.3.8-n-28804d0655" Sep 6 00:21:08.780196 kubelet[2412]: I0906 00:21:08.780112 2412 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"flexvolume-dir\" (UniqueName: \"kubernetes.io/host-path/d699d1c241dae7d271bd934d8d8b9d2f-flexvolume-dir\") pod \"kube-controller-manager-ci-3510.3.8-n-28804d0655\" (UID: \"d699d1c241dae7d271bd934d8d8b9d2f\") " pod="kube-system/kube-controller-manager-ci-3510.3.8-n-28804d0655" Sep 6 00:21:08.780196 kubelet[2412]: I0906 00:21:08.780165 2412 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kubeconfig\" (UniqueName: \"kubernetes.io/host-path/d699d1c241dae7d271bd934d8d8b9d2f-kubeconfig\") pod \"kube-controller-manager-ci-3510.3.8-n-28804d0655\" (UID: \"d699d1c241dae7d271bd934d8d8b9d2f\") " pod="kube-system/kube-controller-manager-ci-3510.3.8-n-28804d0655" Sep 6 00:21:08.780196 kubelet[2412]: I0906 00:21:08.780196 2412 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"usr-share-ca-certificates\" (UniqueName: \"kubernetes.io/host-path/d699d1c241dae7d271bd934d8d8b9d2f-usr-share-ca-certificates\") pod \"kube-controller-manager-ci-3510.3.8-n-28804d0655\" (UID: \"d699d1c241dae7d271bd934d8d8b9d2f\") " pod="kube-system/kube-controller-manager-ci-3510.3.8-n-28804d0655" Sep 6 00:21:08.780521 kubelet[2412]: I0906 00:21:08.780229 2412 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"ca-certs\" (UniqueName: \"kubernetes.io/host-path/b8987a8e8fa6b3ad0ea9a28318749831-ca-certs\") pod \"kube-apiserver-ci-3510.3.8-n-28804d0655\" (UID: \"b8987a8e8fa6b3ad0ea9a28318749831\") " pod="kube-system/kube-apiserver-ci-3510.3.8-n-28804d0655" Sep 6 00:21:08.780521 kubelet[2412]: I0906 00:21:08.780254 2412 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"k8s-certs\" (UniqueName: \"kubernetes.io/host-path/b8987a8e8fa6b3ad0ea9a28318749831-k8s-certs\") pod \"kube-apiserver-ci-3510.3.8-n-28804d0655\" (UID: \"b8987a8e8fa6b3ad0ea9a28318749831\") " pod="kube-system/kube-apiserver-ci-3510.3.8-n-28804d0655" Sep 6 00:21:08.780521 kubelet[2412]: I0906 00:21:08.780273 2412 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"usr-share-ca-certificates\" (UniqueName: \"kubernetes.io/host-path/b8987a8e8fa6b3ad0ea9a28318749831-usr-share-ca-certificates\") pod \"kube-apiserver-ci-3510.3.8-n-28804d0655\" (UID: \"b8987a8e8fa6b3ad0ea9a28318749831\") " pod="kube-system/kube-apiserver-ci-3510.3.8-n-28804d0655" Sep 6 00:21:08.780521 kubelet[2412]: I0906 00:21:08.780291 2412 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"ca-certs\" (UniqueName: \"kubernetes.io/host-path/d699d1c241dae7d271bd934d8d8b9d2f-ca-certs\") pod \"kube-controller-manager-ci-3510.3.8-n-28804d0655\" (UID: \"d699d1c241dae7d271bd934d8d8b9d2f\") " pod="kube-system/kube-controller-manager-ci-3510.3.8-n-28804d0655" Sep 6 00:21:08.780521 kubelet[2412]: I0906 00:21:08.780309 2412 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"k8s-certs\" (UniqueName: \"kubernetes.io/host-path/d699d1c241dae7d271bd934d8d8b9d2f-k8s-certs\") pod \"kube-controller-manager-ci-3510.3.8-n-28804d0655\" (UID: \"d699d1c241dae7d271bd934d8d8b9d2f\") " pod="kube-system/kube-controller-manager-ci-3510.3.8-n-28804d0655" Sep 6 00:21:08.780652 kubelet[2412]: I0906 00:21:08.780332 2412 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kubeconfig\" (UniqueName: \"kubernetes.io/host-path/81496823a7a559540e12f466273df042-kubeconfig\") pod \"kube-scheduler-ci-3510.3.8-n-28804d0655\" (UID: \"81496823a7a559540e12f466273df042\") " pod="kube-system/kube-scheduler-ci-3510.3.8-n-28804d0655" Sep 6 00:21:09.458417 kubelet[2412]: I0906 00:21:09.458370 2412 apiserver.go:52] "Watching apiserver" Sep 6 00:21:09.478729 kubelet[2412]: I0906 00:21:09.478671 2412 desired_state_of_world_populator.go:155] "Finished populating initial desired state of world" Sep 6 00:21:09.560677 kubelet[2412]: W0906 00:21:09.560646 2412 warnings.go:70] metadata.name: this is used in the Pod's hostname, which can result in surprising behavior; a DNS label is recommended: [must not contain dots] Sep 6 00:21:09.561037 kubelet[2412]: E0906 00:21:09.561018 2412 kubelet.go:1915] "Failed creating a mirror pod for" err="pods \"kube-apiserver-ci-3510.3.8-n-28804d0655\" already exists" pod="kube-system/kube-apiserver-ci-3510.3.8-n-28804d0655" Sep 6 00:21:09.599841 kubelet[2412]: I0906 00:21:09.599756 2412 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="kube-system/kube-controller-manager-ci-3510.3.8-n-28804d0655" podStartSLOduration=1.5997270000000001 podStartE2EDuration="1.599727s" podCreationTimestamp="2025-09-06 00:21:08 +0000 UTC" firstStartedPulling="0001-01-01 00:00:00 +0000 UTC" lastFinishedPulling="0001-01-01 00:00:00 +0000 UTC" observedRunningTime="2025-09-06 00:21:09.58470001 +0000 UTC m=+1.490046145" watchObservedRunningTime="2025-09-06 00:21:09.599727 +0000 UTC m=+1.505073035" Sep 6 00:21:09.611913 kubelet[2412]: I0906 00:21:09.611825 2412 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="kube-system/kube-apiserver-ci-3510.3.8-n-28804d0655" podStartSLOduration=1.6117928529999999 podStartE2EDuration="1.611792853s" podCreationTimestamp="2025-09-06 00:21:08 +0000 UTC" firstStartedPulling="0001-01-01 00:00:00 +0000 UTC" lastFinishedPulling="0001-01-01 00:00:00 +0000 UTC" observedRunningTime="2025-09-06 00:21:09.600165706 +0000 UTC m=+1.505511741" watchObservedRunningTime="2025-09-06 00:21:09.611792853 +0000 UTC m=+1.517138888" Sep 6 00:21:09.628743 kubelet[2412]: I0906 00:21:09.628669 2412 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="kube-system/kube-scheduler-ci-3510.3.8-n-28804d0655" podStartSLOduration=1.6286398659999999 podStartE2EDuration="1.628639866s" podCreationTimestamp="2025-09-06 00:21:08 +0000 UTC" firstStartedPulling="0001-01-01 00:00:00 +0000 UTC" lastFinishedPulling="0001-01-01 00:00:00 +0000 UTC" observedRunningTime="2025-09-06 00:21:09.613082269 +0000 UTC m=+1.518428404" watchObservedRunningTime="2025-09-06 00:21:09.628639866 +0000 UTC m=+1.533985901" Sep 6 00:21:11.784000 audit[2289]: AVC avc: denied { watch } for pid=2289 comm="kube-controller" path="/opt/libexec/kubernetes/kubelet-plugins/volume/exec" dev="sda9" ino=7382 scontext=system_u:system_r:svirt_lxc_net_t:s0:c221,c330 tcontext=system_u:object_r:usr_t:s0 tclass=dir permissive=0 Sep 6 00:21:11.784000 audit[2289]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=8 a1=c001048640 a2=fc6 a3=0 items=0 ppid=2140 pid=2289 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c221,c330 key=(null) Sep 6 00:21:11.784000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Sep 6 00:21:12.392993 systemd[1]: Created slice kubepods-besteffort-pod64897af5_0274_4e25_b398_1d97f842c305.slice. Sep 6 00:21:12.408009 kubelet[2412]: I0906 00:21:12.407962 2412 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"lib-modules\" (UniqueName: \"kubernetes.io/host-path/64897af5-0274-4e25-b398-1d97f842c305-lib-modules\") pod \"kube-proxy-sflwv\" (UID: \"64897af5-0274-4e25-b398-1d97f842c305\") " pod="kube-system/kube-proxy-sflwv" Sep 6 00:21:12.408642 kubelet[2412]: I0906 00:21:12.408615 2412 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-kvnb5\" (UniqueName: \"kubernetes.io/projected/64897af5-0274-4e25-b398-1d97f842c305-kube-api-access-kvnb5\") pod \"kube-proxy-sflwv\" (UID: \"64897af5-0274-4e25-b398-1d97f842c305\") " pod="kube-system/kube-proxy-sflwv" Sep 6 00:21:12.408761 kubelet[2412]: I0906 00:21:12.408741 2412 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-proxy\" (UniqueName: \"kubernetes.io/configmap/64897af5-0274-4e25-b398-1d97f842c305-kube-proxy\") pod \"kube-proxy-sflwv\" (UID: \"64897af5-0274-4e25-b398-1d97f842c305\") " pod="kube-system/kube-proxy-sflwv" Sep 6 00:21:12.408860 kubelet[2412]: I0906 00:21:12.408847 2412 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"xtables-lock\" (UniqueName: \"kubernetes.io/host-path/64897af5-0274-4e25-b398-1d97f842c305-xtables-lock\") pod \"kube-proxy-sflwv\" (UID: \"64897af5-0274-4e25-b398-1d97f842c305\") " pod="kube-system/kube-proxy-sflwv" Sep 6 00:21:12.461857 kubelet[2412]: I0906 00:21:12.461815 2412 kuberuntime_manager.go:1635] "Updating runtime config through cri with podcidr" CIDR="192.168.0.0/24" Sep 6 00:21:12.462383 env[1421]: time="2025-09-06T00:21:12.462330050Z" level=info msg="No cni config template is specified, wait for other system components to drop the config." Sep 6 00:21:12.462838 kubelet[2412]: I0906 00:21:12.462684 2412 kubelet_network.go:61] "Updating Pod CIDR" originalPodCIDR="" newPodCIDR="192.168.0.0/24" Sep 6 00:21:12.515685 kubelet[2412]: E0906 00:21:12.515630 2412 projected.go:288] Couldn't get configMap kube-system/kube-root-ca.crt: configmap "kube-root-ca.crt" not found Sep 6 00:21:12.515685 kubelet[2412]: E0906 00:21:12.515671 2412 projected.go:194] Error preparing data for projected volume kube-api-access-kvnb5 for pod kube-system/kube-proxy-sflwv: configmap "kube-root-ca.crt" not found Sep 6 00:21:12.516072 kubelet[2412]: E0906 00:21:12.516049 2412 nestedpendingoperations.go:348] Operation for "{volumeName:kubernetes.io/projected/64897af5-0274-4e25-b398-1d97f842c305-kube-api-access-kvnb5 podName:64897af5-0274-4e25-b398-1d97f842c305 nodeName:}" failed. No retries permitted until 2025-09-06 00:21:13.016018177 +0000 UTC m=+4.921364212 (durationBeforeRetry 500ms). Error: MountVolume.SetUp failed for volume "kube-api-access-kvnb5" (UniqueName: "kubernetes.io/projected/64897af5-0274-4e25-b398-1d97f842c305-kube-api-access-kvnb5") pod "kube-proxy-sflwv" (UID: "64897af5-0274-4e25-b398-1d97f842c305") : configmap "kube-root-ca.crt" not found Sep 6 00:21:13.115540 kubelet[2412]: I0906 00:21:13.115492 2412 swap_util.go:74] "error creating dir to test if tmpfs noswap is enabled. Assuming not supported" mount path="" error="stat /var/lib/kubelet/plugins/kubernetes.io/empty-dir: no such file or directory" Sep 6 00:21:13.302771 env[1421]: time="2025-09-06T00:21:13.302707869Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-proxy-sflwv,Uid:64897af5-0274-4e25-b398-1d97f842c305,Namespace:kube-system,Attempt:0,}" Sep 6 00:21:13.350788 env[1421]: time="2025-09-06T00:21:13.350694215Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Sep 6 00:21:13.351046 env[1421]: time="2025-09-06T00:21:13.350807216Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Sep 6 00:21:13.351046 env[1421]: time="2025-09-06T00:21:13.350838617Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Sep 6 00:21:13.351177 env[1421]: time="2025-09-06T00:21:13.351035019Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/e8e229acbfda1eb5448870bb5adb7812bf9993cafd257dbb986bb17d063a083e pid=2462 runtime=io.containerd.runc.v2 Sep 6 00:21:13.379532 systemd[1]: Started cri-containerd-e8e229acbfda1eb5448870bb5adb7812bf9993cafd257dbb986bb17d063a083e.scope. Sep 6 00:21:13.410331 kernel: kauditd_printk_skb: 311 callbacks suppressed Sep 6 00:21:13.410505 kernel: audit: type=1400 audit(1757118073.394:766): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:13.394000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:13.394000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:13.450544 kernel: audit: type=1400 audit(1757118073.394:767): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:13.394000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:13.471997 kernel: audit: type=1400 audit(1757118073.394:768): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:13.394000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:13.503171 kernel: audit: type=1400 audit(1757118073.394:769): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:13.510180 systemd[1]: Created slice kubepods-besteffort-pod6d0aa486_5db0_4ec6_9cf8_ae8a9cf1f5fa.slice. Sep 6 00:21:13.511817 env[1421]: time="2025-09-06T00:21:13.511677046Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-proxy-sflwv,Uid:64897af5-0274-4e25-b398-1d97f842c305,Namespace:kube-system,Attempt:0,} returns sandbox id \"e8e229acbfda1eb5448870bb5adb7812bf9993cafd257dbb986bb17d063a083e\"" Sep 6 00:21:13.394000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:13.519278 env[1421]: time="2025-09-06T00:21:13.519232331Z" level=info msg="CreateContainer within sandbox \"e8e229acbfda1eb5448870bb5adb7812bf9993cafd257dbb986bb17d063a083e\" for container &ContainerMetadata{Name:kube-proxy,Attempt:0,}" Sep 6 00:21:13.528848 kubelet[2412]: I0906 00:21:13.528799 2412 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"var-lib-calico\" (UniqueName: \"kubernetes.io/host-path/6d0aa486-5db0-4ec6-9cf8-ae8a9cf1f5fa-var-lib-calico\") pod \"tigera-operator-58fc44c59b-2m8h4\" (UID: \"6d0aa486-5db0-4ec6-9cf8-ae8a9cf1f5fa\") " pod="tigera-operator/tigera-operator-58fc44c59b-2m8h4" Sep 6 00:21:13.528848 kubelet[2412]: I0906 00:21:13.528853 2412 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-cztnj\" (UniqueName: \"kubernetes.io/projected/6d0aa486-5db0-4ec6-9cf8-ae8a9cf1f5fa-kube-api-access-cztnj\") pod \"tigera-operator-58fc44c59b-2m8h4\" (UID: \"6d0aa486-5db0-4ec6-9cf8-ae8a9cf1f5fa\") " pod="tigera-operator/tigera-operator-58fc44c59b-2m8h4" Sep 6 00:21:13.529584 kernel: audit: type=1400 audit(1757118073.394:770): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:13.394000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:13.551110 kernel: audit: type=1400 audit(1757118073.394:771): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:13.394000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:13.569180 kernel: audit: type=1400 audit(1757118073.394:772): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:13.394000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:13.394000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:13.608176 kernel: audit: type=1400 audit(1757118073.394:773): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:13.608404 kernel: audit: type=1400 audit(1757118073.394:774): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:13.608975 kernel: audit: type=1400 audit(1757118073.427:775): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:13.427000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:13.427000 audit: BPF prog-id=104 op=LOAD Sep 6 00:21:13.428000 audit[2474]: AVC avc: denied { bpf } for pid=2474 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:13.428000 audit[2474]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c0001bfc48 a2=10 a3=1c items=0 ppid=2462 pid=2474 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:21:13.428000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6538653232396163626664613165623534343838373062623561646237 Sep 6 00:21:13.429000 audit[2474]: AVC avc: denied { perfmon } for pid=2474 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:13.429000 audit[2474]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001bf6b0 a2=3c a3=c items=0 ppid=2462 pid=2474 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:21:13.429000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6538653232396163626664613165623534343838373062623561646237 Sep 6 00:21:13.429000 audit[2474]: AVC avc: denied { bpf } for pid=2474 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:13.429000 audit[2474]: AVC avc: denied { bpf } for pid=2474 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:13.429000 audit[2474]: AVC avc: denied { bpf } for pid=2474 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:13.429000 audit[2474]: AVC avc: denied { perfmon } for pid=2474 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:13.429000 audit[2474]: AVC avc: denied { perfmon } for pid=2474 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:13.429000 audit[2474]: AVC avc: denied { perfmon } for pid=2474 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:13.429000 audit[2474]: AVC avc: denied { perfmon } for pid=2474 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:13.429000 audit[2474]: AVC avc: denied { perfmon } for pid=2474 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:13.429000 audit[2474]: AVC avc: denied { bpf } for pid=2474 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:13.429000 audit[2474]: AVC avc: denied { bpf } for pid=2474 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:13.429000 audit: BPF prog-id=105 op=LOAD Sep 6 00:21:13.429000 audit[2474]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001bf9d8 a2=78 a3=c000388820 items=0 ppid=2462 pid=2474 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:21:13.429000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6538653232396163626664613165623534343838373062623561646237 Sep 6 00:21:13.446000 audit[2474]: AVC avc: denied { bpf } for pid=2474 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:13.446000 audit[2474]: AVC avc: denied { bpf } for pid=2474 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:13.446000 audit[2474]: AVC avc: denied { perfmon } for pid=2474 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:13.446000 audit[2474]: AVC avc: denied { perfmon } for pid=2474 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:13.446000 audit[2474]: AVC avc: denied { perfmon } for pid=2474 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:13.446000 audit[2474]: AVC avc: denied { perfmon } for pid=2474 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:13.446000 audit[2474]: AVC avc: denied { perfmon } for pid=2474 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:13.446000 audit[2474]: AVC avc: denied { bpf } for pid=2474 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:13.446000 audit[2474]: AVC avc: denied { bpf } for pid=2474 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:13.446000 audit: BPF prog-id=106 op=LOAD Sep 6 00:21:13.446000 audit[2474]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c0001bf770 a2=78 a3=c00028d338 items=0 ppid=2462 pid=2474 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:21:13.446000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6538653232396163626664613165623534343838373062623561646237 Sep 6 00:21:13.446000 audit: BPF prog-id=106 op=UNLOAD Sep 6 00:21:13.446000 audit: BPF prog-id=105 op=UNLOAD Sep 6 00:21:13.446000 audit[2474]: AVC avc: denied { bpf } for pid=2474 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:13.446000 audit[2474]: AVC avc: denied { bpf } for pid=2474 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:13.446000 audit[2474]: AVC avc: denied { bpf } for pid=2474 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:13.446000 audit[2474]: AVC avc: denied { perfmon } for pid=2474 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:13.446000 audit[2474]: AVC avc: denied { perfmon } for pid=2474 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:13.446000 audit[2474]: AVC avc: denied { perfmon } for pid=2474 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:13.446000 audit[2474]: AVC avc: denied { perfmon } for pid=2474 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:13.446000 audit[2474]: AVC avc: denied { perfmon } for pid=2474 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:13.446000 audit[2474]: AVC avc: denied { bpf } for pid=2474 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:13.446000 audit[2474]: AVC avc: denied { bpf } for pid=2474 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:13.446000 audit: BPF prog-id=107 op=LOAD Sep 6 00:21:13.446000 audit[2474]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001bfc30 a2=78 a3=c00028d748 items=0 ppid=2462 pid=2474 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:21:13.446000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6538653232396163626664613165623534343838373062623561646237 Sep 6 00:21:13.644400 env[1421]: time="2025-09-06T00:21:13.642787236Z" level=info msg="CreateContainer within sandbox \"e8e229acbfda1eb5448870bb5adb7812bf9993cafd257dbb986bb17d063a083e\" for &ContainerMetadata{Name:kube-proxy,Attempt:0,} returns container id \"5b1216647386a27765d4404d13c5cba59657502bbaaa1d18b290bf6be51fa3f2\"" Sep 6 00:21:13.645689 env[1421]: time="2025-09-06T00:21:13.645643169Z" level=info msg="StartContainer for \"5b1216647386a27765d4404d13c5cba59657502bbaaa1d18b290bf6be51fa3f2\"" Sep 6 00:21:13.665880 systemd[1]: Started cri-containerd-5b1216647386a27765d4404d13c5cba59657502bbaaa1d18b290bf6be51fa3f2.scope. Sep 6 00:21:13.683000 audit[2508]: AVC avc: denied { perfmon } for pid=2508 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:13.683000 audit[2508]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=0 a1=c0001bd6b0 a2=3c a3=7f7f059beab8 items=0 ppid=2462 pid=2508 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:21:13.683000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3562313231363634373338366132373736356434343034643133633563 Sep 6 00:21:13.684000 audit[2508]: AVC avc: denied { bpf } for pid=2508 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:13.684000 audit[2508]: AVC avc: denied { bpf } for pid=2508 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:13.684000 audit[2508]: AVC avc: denied { bpf } for pid=2508 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:13.684000 audit[2508]: AVC avc: denied { perfmon } for pid=2508 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:13.684000 audit[2508]: AVC avc: denied { perfmon } for pid=2508 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:13.684000 audit[2508]: AVC avc: denied { perfmon } for pid=2508 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:13.684000 audit[2508]: AVC avc: denied { perfmon } for pid=2508 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:13.684000 audit[2508]: AVC avc: denied { perfmon } for pid=2508 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:13.684000 audit[2508]: AVC avc: denied { bpf } for pid=2508 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:13.684000 audit[2508]: AVC avc: denied { bpf } for pid=2508 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:13.684000 audit: BPF prog-id=108 op=LOAD Sep 6 00:21:13.684000 audit[2508]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c0001bd9d8 a2=78 a3=c0000a5a58 items=0 ppid=2462 pid=2508 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:21:13.684000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3562313231363634373338366132373736356434343034643133633563 Sep 6 00:21:13.684000 audit[2508]: AVC avc: denied { bpf } for pid=2508 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:13.684000 audit[2508]: AVC avc: denied { bpf } for pid=2508 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:13.684000 audit[2508]: AVC avc: denied { perfmon } for pid=2508 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:13.684000 audit[2508]: AVC avc: denied { perfmon } for pid=2508 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:13.684000 audit[2508]: AVC avc: denied { perfmon } for pid=2508 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:13.684000 audit[2508]: AVC avc: denied { perfmon } for pid=2508 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:13.684000 audit[2508]: AVC avc: denied { perfmon } for pid=2508 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:13.684000 audit[2508]: AVC avc: denied { bpf } for pid=2508 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:13.684000 audit[2508]: AVC avc: denied { bpf } for pid=2508 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:13.684000 audit: BPF prog-id=109 op=LOAD Sep 6 00:21:13.684000 audit[2508]: SYSCALL arch=c000003e syscall=321 success=yes exit=17 a0=5 a1=c0001bd770 a2=78 a3=c0000a5aa8 items=0 ppid=2462 pid=2508 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:21:13.684000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3562313231363634373338366132373736356434343034643133633563 Sep 6 00:21:13.684000 audit: BPF prog-id=109 op=UNLOAD Sep 6 00:21:13.684000 audit: BPF prog-id=108 op=UNLOAD Sep 6 00:21:13.684000 audit[2508]: AVC avc: denied { bpf } for pid=2508 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:13.684000 audit[2508]: AVC avc: denied { bpf } for pid=2508 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:13.684000 audit[2508]: AVC avc: denied { bpf } for pid=2508 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:13.684000 audit[2508]: AVC avc: denied { perfmon } for pid=2508 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:13.684000 audit[2508]: AVC avc: denied { perfmon } for pid=2508 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:13.684000 audit[2508]: AVC avc: denied { perfmon } for pid=2508 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:13.684000 audit[2508]: AVC avc: denied { perfmon } for pid=2508 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:13.684000 audit[2508]: AVC avc: denied { perfmon } for pid=2508 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:13.684000 audit[2508]: AVC avc: denied { bpf } for pid=2508 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:13.684000 audit[2508]: AVC avc: denied { bpf } for pid=2508 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:13.684000 audit: BPF prog-id=110 op=LOAD Sep 6 00:21:13.684000 audit[2508]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c0001bdc30 a2=78 a3=c0000a5b38 items=0 ppid=2462 pid=2508 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:21:13.684000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3562313231363634373338366132373736356434343034643133633563 Sep 6 00:21:13.706553 env[1421]: time="2025-09-06T00:21:13.706465661Z" level=info msg="StartContainer for \"5b1216647386a27765d4404d13c5cba59657502bbaaa1d18b290bf6be51fa3f2\" returns successfully" Sep 6 00:21:13.833533 env[1421]: time="2025-09-06T00:21:13.833471505Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:tigera-operator-58fc44c59b-2m8h4,Uid:6d0aa486-5db0-4ec6-9cf8-ae8a9cf1f5fa,Namespace:tigera-operator,Attempt:0,}" Sep 6 00:21:13.837000 audit[2566]: NETFILTER_CFG table=mangle:45 family=2 entries=1 op=nft_register_chain pid=2566 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 6 00:21:13.837000 audit[2566]: SYSCALL arch=c000003e syscall=46 success=yes exit=104 a0=3 a1=7ffd719978b0 a2=0 a3=7ffd7199789c items=0 ppid=2518 pid=2566 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:21:13.837000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D43414E415259002D74006D616E676C65 Sep 6 00:21:13.839000 audit[2567]: NETFILTER_CFG table=mangle:46 family=10 entries=1 op=nft_register_chain pid=2567 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Sep 6 00:21:13.839000 audit[2567]: SYSCALL arch=c000003e syscall=46 success=yes exit=104 a0=3 a1=7ffd6cfe9420 a2=0 a3=7ffd6cfe940c items=0 ppid=2518 pid=2567 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:21:13.839000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D43414E415259002D74006D616E676C65 Sep 6 00:21:13.841000 audit[2568]: NETFILTER_CFG table=nat:47 family=2 entries=1 op=nft_register_chain pid=2568 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 6 00:21:13.841000 audit[2568]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7fff01884220 a2=0 a3=7fff0188420c items=0 ppid=2518 pid=2568 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:21:13.841000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D43414E415259002D74006E6174 Sep 6 00:21:13.843000 audit[2569]: NETFILTER_CFG table=filter:48 family=2 entries=1 op=nft_register_chain pid=2569 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 6 00:21:13.843000 audit[2569]: SYSCALL arch=c000003e syscall=46 success=yes exit=104 a0=3 a1=7ffdf0288550 a2=0 a3=7ffdf028853c items=0 ppid=2518 pid=2569 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:21:13.843000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D43414E415259002D740066696C746572 Sep 6 00:21:13.845000 audit[2570]: NETFILTER_CFG table=nat:49 family=10 entries=1 op=nft_register_chain pid=2570 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Sep 6 00:21:13.845000 audit[2570]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7fff29daa250 a2=0 a3=7fff29daa23c items=0 ppid=2518 pid=2570 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:21:13.845000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D43414E415259002D74006E6174 Sep 6 00:21:13.850000 audit[2571]: NETFILTER_CFG table=filter:50 family=10 entries=1 op=nft_register_chain pid=2571 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Sep 6 00:21:13.850000 audit[2571]: SYSCALL arch=c000003e syscall=46 success=yes exit=104 a0=3 a1=7ffc32f985b0 a2=0 a3=7ffc32f9859c items=0 ppid=2518 pid=2571 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:21:13.850000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D43414E415259002D740066696C746572 Sep 6 00:21:13.870138 env[1421]: time="2025-09-06T00:21:13.870045621Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Sep 6 00:21:13.870370 env[1421]: time="2025-09-06T00:21:13.870148122Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Sep 6 00:21:13.870370 env[1421]: time="2025-09-06T00:21:13.870176122Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Sep 6 00:21:13.870530 env[1421]: time="2025-09-06T00:21:13.870385325Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/5df8410520630ee69ce9254a479bb904533f68e62f1ef9201eefa4690a3f2f1c pid=2579 runtime=io.containerd.runc.v2 Sep 6 00:21:13.884007 systemd[1]: Started cri-containerd-5df8410520630ee69ce9254a479bb904533f68e62f1ef9201eefa4690a3f2f1c.scope. Sep 6 00:21:13.901000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:13.901000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:13.901000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:13.901000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:13.901000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:13.901000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:13.901000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:13.901000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:13.901000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:13.901000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:13.901000 audit: BPF prog-id=111 op=LOAD Sep 6 00:21:13.902000 audit[2590]: AVC avc: denied { bpf } for pid=2590 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:13.902000 audit[2590]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000197c48 a2=10 a3=1c items=0 ppid=2579 pid=2590 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:21:13.902000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3564663834313035323036333065653639636539323534613437396262 Sep 6 00:21:13.902000 audit[2590]: AVC avc: denied { perfmon } for pid=2590 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:13.902000 audit[2590]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001976b0 a2=3c a3=c items=0 ppid=2579 pid=2590 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:21:13.902000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3564663834313035323036333065653639636539323534613437396262 Sep 6 00:21:13.902000 audit[2590]: AVC avc: denied { bpf } for pid=2590 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:13.902000 audit[2590]: AVC avc: denied { bpf } for pid=2590 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:13.902000 audit[2590]: AVC avc: denied { bpf } for pid=2590 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:13.902000 audit[2590]: AVC avc: denied { perfmon } for pid=2590 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:13.902000 audit[2590]: AVC avc: denied { perfmon } for pid=2590 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:13.902000 audit[2590]: AVC avc: denied { perfmon } for pid=2590 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:13.902000 audit[2590]: AVC avc: denied { perfmon } for pid=2590 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:13.902000 audit[2590]: AVC avc: denied { perfmon } for pid=2590 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:13.902000 audit[2590]: AVC avc: denied { bpf } for pid=2590 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:13.902000 audit[2590]: AVC avc: denied { bpf } for pid=2590 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:13.902000 audit: BPF prog-id=112 op=LOAD Sep 6 00:21:13.902000 audit[2590]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001979d8 a2=78 a3=c0000d7ce0 items=0 ppid=2579 pid=2590 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:21:13.902000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3564663834313035323036333065653639636539323534613437396262 Sep 6 00:21:13.902000 audit[2590]: AVC avc: denied { bpf } for pid=2590 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:13.902000 audit[2590]: AVC avc: denied { bpf } for pid=2590 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:13.902000 audit[2590]: AVC avc: denied { perfmon } for pid=2590 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:13.902000 audit[2590]: AVC avc: denied { perfmon } for pid=2590 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:13.902000 audit[2590]: AVC avc: denied { perfmon } for pid=2590 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:13.902000 audit[2590]: AVC avc: denied { perfmon } for pid=2590 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:13.902000 audit[2590]: AVC avc: denied { perfmon } for pid=2590 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:13.902000 audit[2590]: AVC avc: denied { bpf } for pid=2590 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:13.902000 audit[2590]: AVC avc: denied { bpf } for pid=2590 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:13.902000 audit: BPF prog-id=113 op=LOAD Sep 6 00:21:13.902000 audit[2590]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000197770 a2=78 a3=c0000d7d28 items=0 ppid=2579 pid=2590 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:21:13.902000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3564663834313035323036333065653639636539323534613437396262 Sep 6 00:21:13.902000 audit: BPF prog-id=113 op=UNLOAD Sep 6 00:21:13.902000 audit: BPF prog-id=112 op=UNLOAD Sep 6 00:21:13.902000 audit[2590]: AVC avc: denied { bpf } for pid=2590 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:13.902000 audit[2590]: AVC avc: denied { bpf } for pid=2590 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:13.902000 audit[2590]: AVC avc: denied { bpf } for pid=2590 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:13.902000 audit[2590]: AVC avc: denied { perfmon } for pid=2590 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:13.902000 audit[2590]: AVC avc: denied { perfmon } for pid=2590 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:13.902000 audit[2590]: AVC avc: denied { perfmon } for pid=2590 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:13.902000 audit[2590]: AVC avc: denied { perfmon } for pid=2590 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:13.902000 audit[2590]: AVC avc: denied { perfmon } for pid=2590 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:13.902000 audit[2590]: AVC avc: denied { bpf } for pid=2590 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:13.902000 audit[2590]: AVC avc: denied { bpf } for pid=2590 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:13.902000 audit: BPF prog-id=114 op=LOAD Sep 6 00:21:13.902000 audit[2590]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000197c30 a2=78 a3=c0003d8138 items=0 ppid=2579 pid=2590 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:21:13.902000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3564663834313035323036333065653639636539323534613437396262 Sep 6 00:21:13.933756 env[1421]: time="2025-09-06T00:21:13.933692544Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:tigera-operator-58fc44c59b-2m8h4,Uid:6d0aa486-5db0-4ec6-9cf8-ae8a9cf1f5fa,Namespace:tigera-operator,Attempt:0,} returns sandbox id \"5df8410520630ee69ce9254a479bb904533f68e62f1ef9201eefa4690a3f2f1c\"" Sep 6 00:21:13.936076 env[1421]: time="2025-09-06T00:21:13.936033571Z" level=info msg="PullImage \"quay.io/tigera/operator:v1.38.6\"" Sep 6 00:21:13.942000 audit[2613]: NETFILTER_CFG table=filter:51 family=2 entries=1 op=nft_register_chain pid=2613 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 6 00:21:13.942000 audit[2613]: SYSCALL arch=c000003e syscall=46 success=yes exit=108 a0=3 a1=7ffc31e3f030 a2=0 a3=7ffc31e3f01c items=0 ppid=2518 pid=2613 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:21:13.942000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D45585445524E414C2D5345525649434553002D740066696C746572 Sep 6 00:21:13.946000 audit[2615]: NETFILTER_CFG table=filter:52 family=2 entries=1 op=nft_register_rule pid=2615 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 6 00:21:13.946000 audit[2615]: SYSCALL arch=c000003e syscall=46 success=yes exit=752 a0=3 a1=7ffe65f804e0 a2=0 a3=7ffe65f804cc items=0 ppid=2518 pid=2615 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:21:13.946000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E657465732065787465726E616C6C792D76697369626C652073657276696365 Sep 6 00:21:13.951000 audit[2618]: NETFILTER_CFG table=filter:53 family=2 entries=1 op=nft_register_rule pid=2618 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 6 00:21:13.951000 audit[2618]: SYSCALL arch=c000003e syscall=46 success=yes exit=752 a0=3 a1=7ffd5f857820 a2=0 a3=7ffd5f85780c items=0 ppid=2518 pid=2618 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:21:13.951000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E657465732065787465726E616C6C792D76697369626C65207365727669 Sep 6 00:21:13.952000 audit[2619]: NETFILTER_CFG table=filter:54 family=2 entries=1 op=nft_register_chain pid=2619 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 6 00:21:13.952000 audit[2619]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7fff07a8b450 a2=0 a3=7fff07a8b43c items=0 ppid=2518 pid=2619 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:21:13.952000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D4E4F4445504F525453002D740066696C746572 Sep 6 00:21:13.955000 audit[2621]: NETFILTER_CFG table=filter:55 family=2 entries=1 op=nft_register_rule pid=2621 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 6 00:21:13.955000 audit[2621]: SYSCALL arch=c000003e syscall=46 success=yes exit=528 a0=3 a1=7ffe9db2bc50 a2=0 a3=7ffe9db2bc3c items=0 ppid=2518 pid=2621 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:21:13.955000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206865616C746820636865636B207365727669636520706F727473002D6A004B5542452D4E4F4445504F525453 Sep 6 00:21:13.956000 audit[2622]: NETFILTER_CFG table=filter:56 family=2 entries=1 op=nft_register_chain pid=2622 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 6 00:21:13.956000 audit[2622]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7ffdaf4691f0 a2=0 a3=7ffdaf4691dc items=0 ppid=2518 pid=2622 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:21:13.956000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D5345525649434553002D740066696C746572 Sep 6 00:21:13.960000 audit[2624]: NETFILTER_CFG table=filter:57 family=2 entries=1 op=nft_register_rule pid=2624 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 6 00:21:13.960000 audit[2624]: SYSCALL arch=c000003e syscall=46 success=yes exit=744 a0=3 a1=7fffe2119500 a2=0 a3=7fffe21194ec items=0 ppid=2518 pid=2624 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:21:13.960000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D Sep 6 00:21:13.964000 audit[2627]: NETFILTER_CFG table=filter:58 family=2 entries=1 op=nft_register_rule pid=2627 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 6 00:21:13.964000 audit[2627]: SYSCALL arch=c000003e syscall=46 success=yes exit=744 a0=3 a1=7ffdcf2394f0 a2=0 a3=7ffdcf2394dc items=0 ppid=2518 pid=2627 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:21:13.964000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D49004F5554505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D53 Sep 6 00:21:13.965000 audit[2628]: NETFILTER_CFG table=filter:59 family=2 entries=1 op=nft_register_chain pid=2628 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 6 00:21:13.965000 audit[2628]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7ffd49a991a0 a2=0 a3=7ffd49a9918c items=0 ppid=2518 pid=2628 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:21:13.965000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D464F5257415244002D740066696C746572 Sep 6 00:21:13.968000 audit[2630]: NETFILTER_CFG table=filter:60 family=2 entries=1 op=nft_register_rule pid=2630 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 6 00:21:13.968000 audit[2630]: SYSCALL arch=c000003e syscall=46 success=yes exit=528 a0=3 a1=7fff17a00890 a2=0 a3=7fff17a0087c items=0 ppid=2518 pid=2630 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:21:13.968000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E6574657320666F7277617264696E672072756C6573002D6A004B5542452D464F5257415244 Sep 6 00:21:13.973000 audit[2631]: NETFILTER_CFG table=filter:61 family=2 entries=1 op=nft_register_chain pid=2631 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 6 00:21:13.973000 audit[2631]: SYSCALL arch=c000003e syscall=46 success=yes exit=104 a0=3 a1=7ffd92177700 a2=0 a3=7ffd921776ec items=0 ppid=2518 pid=2631 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:21:13.973000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D4649524557414C4C002D740066696C746572 Sep 6 00:21:13.976000 audit[2633]: NETFILTER_CFG table=filter:62 family=2 entries=1 op=nft_register_rule pid=2633 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 6 00:21:13.976000 audit[2633]: SYSCALL arch=c000003e syscall=46 success=yes exit=748 a0=3 a1=7ffc7b7b1fd0 a2=0 a3=7ffc7b7b1fbc items=0 ppid=2518 pid=2633 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:21:13.976000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206C6F61642062616C616E636572206669726577616C6C002D6A Sep 6 00:21:13.980000 audit[2636]: NETFILTER_CFG table=filter:63 family=2 entries=1 op=nft_register_rule pid=2636 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 6 00:21:13.980000 audit[2636]: SYSCALL arch=c000003e syscall=46 success=yes exit=748 a0=3 a1=7ffc74966710 a2=0 a3=7ffc749666fc items=0 ppid=2518 pid=2636 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:21:13.980000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D49004F5554505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206C6F61642062616C616E636572206669726577616C6C002D6A Sep 6 00:21:13.984000 audit[2639]: NETFILTER_CFG table=filter:64 family=2 entries=1 op=nft_register_rule pid=2639 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 6 00:21:13.984000 audit[2639]: SYSCALL arch=c000003e syscall=46 success=yes exit=748 a0=3 a1=7ffe3f753b10 a2=0 a3=7ffe3f753afc items=0 ppid=2518 pid=2639 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:21:13.984000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206C6F61642062616C616E636572206669726577616C6C002D Sep 6 00:21:13.985000 audit[2640]: NETFILTER_CFG table=nat:65 family=2 entries=1 op=nft_register_chain pid=2640 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 6 00:21:13.985000 audit[2640]: SYSCALL arch=c000003e syscall=46 success=yes exit=96 a0=3 a1=7ffc7b4a0010 a2=0 a3=7ffc7b49fffc items=0 ppid=2518 pid=2640 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:21:13.985000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D5345525649434553002D74006E6174 Sep 6 00:21:13.988000 audit[2642]: NETFILTER_CFG table=nat:66 family=2 entries=1 op=nft_register_rule pid=2642 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 6 00:21:13.988000 audit[2642]: SYSCALL arch=c000003e syscall=46 success=yes exit=524 a0=3 a1=7fff00e3c9e0 a2=0 a3=7fff00e3c9cc items=0 ppid=2518 pid=2642 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:21:13.988000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D49004F5554505554002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D5345525649434553 Sep 6 00:21:13.992000 audit[2645]: NETFILTER_CFG table=nat:67 family=2 entries=1 op=nft_register_rule pid=2645 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 6 00:21:13.992000 audit[2645]: SYSCALL arch=c000003e syscall=46 success=yes exit=528 a0=3 a1=7ffcc046abf0 a2=0 a3=7ffcc046abdc items=0 ppid=2518 pid=2645 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:21:13.992000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900505245524F5554494E47002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D5345525649434553 Sep 6 00:21:13.993000 audit[2646]: NETFILTER_CFG table=nat:68 family=2 entries=1 op=nft_register_chain pid=2646 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 6 00:21:13.993000 audit[2646]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7ffe418c75c0 a2=0 a3=7ffe418c75ac items=0 ppid=2518 pid=2646 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:21:13.993000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D504F5354524F5554494E47002D74006E6174 Sep 6 00:21:13.996000 audit[2648]: NETFILTER_CFG table=nat:69 family=2 entries=1 op=nft_register_rule pid=2648 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 6 00:21:13.996000 audit[2648]: SYSCALL arch=c000003e syscall=46 success=yes exit=532 a0=3 a1=7fff5a163ad0 a2=0 a3=7fff5a163abc items=0 ppid=2518 pid=2648 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:21:13.996000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900504F5354524F5554494E47002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E6574657320706F7374726F7574696E672072756C6573002D6A004B5542452D504F5354524F5554494E47 Sep 6 00:21:14.095000 audit[2654]: NETFILTER_CFG table=filter:70 family=2 entries=8 op=nft_register_rule pid=2654 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Sep 6 00:21:14.095000 audit[2654]: SYSCALL arch=c000003e syscall=46 success=yes exit=5248 a0=3 a1=7ffef8d41040 a2=0 a3=7ffef8d4102c items=0 ppid=2518 pid=2654 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:21:14.095000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Sep 6 00:21:14.105000 audit[2654]: NETFILTER_CFG table=nat:71 family=2 entries=14 op=nft_register_chain pid=2654 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Sep 6 00:21:14.105000 audit[2654]: SYSCALL arch=c000003e syscall=46 success=yes exit=5508 a0=3 a1=7ffef8d41040 a2=0 a3=7ffef8d4102c items=0 ppid=2518 pid=2654 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:21:14.105000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Sep 6 00:21:14.106000 audit[2659]: NETFILTER_CFG table=filter:72 family=10 entries=1 op=nft_register_chain pid=2659 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Sep 6 00:21:14.106000 audit[2659]: SYSCALL arch=c000003e syscall=46 success=yes exit=108 a0=3 a1=7fff2d16a710 a2=0 a3=7fff2d16a6fc items=0 ppid=2518 pid=2659 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:21:14.106000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D45585445524E414C2D5345525649434553002D740066696C746572 Sep 6 00:21:14.110000 audit[2661]: NETFILTER_CFG table=filter:73 family=10 entries=2 op=nft_register_chain pid=2661 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Sep 6 00:21:14.110000 audit[2661]: SYSCALL arch=c000003e syscall=46 success=yes exit=836 a0=3 a1=7ffe366f0720 a2=0 a3=7ffe366f070c items=0 ppid=2518 pid=2661 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:21:14.110000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E657465732065787465726E616C6C792D76697369626C6520736572766963 Sep 6 00:21:14.114000 audit[2664]: NETFILTER_CFG table=filter:74 family=10 entries=2 op=nft_register_chain pid=2664 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Sep 6 00:21:14.114000 audit[2664]: SYSCALL arch=c000003e syscall=46 success=yes exit=836 a0=3 a1=7ffc64990550 a2=0 a3=7ffc6499053c items=0 ppid=2518 pid=2664 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:21:14.114000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E657465732065787465726E616C6C792D76697369626C652073657276 Sep 6 00:21:14.115000 audit[2665]: NETFILTER_CFG table=filter:75 family=10 entries=1 op=nft_register_chain pid=2665 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Sep 6 00:21:14.115000 audit[2665]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7ffd539abca0 a2=0 a3=7ffd539abc8c items=0 ppid=2518 pid=2665 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:21:14.115000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D4E4F4445504F525453002D740066696C746572 Sep 6 00:21:14.125514 systemd[1]: run-containerd-runc-k8s.io-e8e229acbfda1eb5448870bb5adb7812bf9993cafd257dbb986bb17d063a083e-runc.O1nNFh.mount: Deactivated successfully. Sep 6 00:21:14.128000 audit[2667]: NETFILTER_CFG table=filter:76 family=10 entries=1 op=nft_register_rule pid=2667 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Sep 6 00:21:14.128000 audit[2667]: SYSCALL arch=c000003e syscall=46 success=yes exit=528 a0=3 a1=7ffedd9c1450 a2=0 a3=7ffedd9c143c items=0 ppid=2518 pid=2667 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:21:14.128000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206865616C746820636865636B207365727669636520706F727473002D6A004B5542452D4E4F4445504F525453 Sep 6 00:21:14.130000 audit[2668]: NETFILTER_CFG table=filter:77 family=10 entries=1 op=nft_register_chain pid=2668 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Sep 6 00:21:14.130000 audit[2668]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7fffcb2efe30 a2=0 a3=7fffcb2efe1c items=0 ppid=2518 pid=2668 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:21:14.130000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D5345525649434553002D740066696C746572 Sep 6 00:21:14.133000 audit[2670]: NETFILTER_CFG table=filter:78 family=10 entries=1 op=nft_register_rule pid=2670 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Sep 6 00:21:14.133000 audit[2670]: SYSCALL arch=c000003e syscall=46 success=yes exit=744 a0=3 a1=7fffaf57c980 a2=0 a3=7fffaf57c96c items=0 ppid=2518 pid=2670 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:21:14.133000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B554245 Sep 6 00:21:14.137000 audit[2673]: NETFILTER_CFG table=filter:79 family=10 entries=2 op=nft_register_chain pid=2673 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Sep 6 00:21:14.137000 audit[2673]: SYSCALL arch=c000003e syscall=46 success=yes exit=828 a0=3 a1=7ffe4d3739f0 a2=0 a3=7ffe4d3739dc items=0 ppid=2518 pid=2673 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:21:14.137000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D49004F5554505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D Sep 6 00:21:14.139000 audit[2674]: NETFILTER_CFG table=filter:80 family=10 entries=1 op=nft_register_chain pid=2674 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Sep 6 00:21:14.139000 audit[2674]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7ffe999097d0 a2=0 a3=7ffe999097bc items=0 ppid=2518 pid=2674 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:21:14.139000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D464F5257415244002D740066696C746572 Sep 6 00:21:14.141000 audit[2676]: NETFILTER_CFG table=filter:81 family=10 entries=1 op=nft_register_rule pid=2676 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Sep 6 00:21:14.141000 audit[2676]: SYSCALL arch=c000003e syscall=46 success=yes exit=528 a0=3 a1=7ffee89f06f0 a2=0 a3=7ffee89f06dc items=0 ppid=2518 pid=2676 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:21:14.141000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E6574657320666F7277617264696E672072756C6573002D6A004B5542452D464F5257415244 Sep 6 00:21:14.143000 audit[2677]: NETFILTER_CFG table=filter:82 family=10 entries=1 op=nft_register_chain pid=2677 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Sep 6 00:21:14.143000 audit[2677]: SYSCALL arch=c000003e syscall=46 success=yes exit=104 a0=3 a1=7ffdd69fce60 a2=0 a3=7ffdd69fce4c items=0 ppid=2518 pid=2677 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:21:14.143000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D4649524557414C4C002D740066696C746572 Sep 6 00:21:14.145000 audit[2679]: NETFILTER_CFG table=filter:83 family=10 entries=1 op=nft_register_rule pid=2679 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Sep 6 00:21:14.145000 audit[2679]: SYSCALL arch=c000003e syscall=46 success=yes exit=748 a0=3 a1=7fffce278760 a2=0 a3=7fffce27874c items=0 ppid=2518 pid=2679 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:21:14.145000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206C6F61642062616C616E636572206669726577616C6C002D6A Sep 6 00:21:14.149000 audit[2682]: NETFILTER_CFG table=filter:84 family=10 entries=1 op=nft_register_rule pid=2682 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Sep 6 00:21:14.149000 audit[2682]: SYSCALL arch=c000003e syscall=46 success=yes exit=748 a0=3 a1=7ffe0dd8b0b0 a2=0 a3=7ffe0dd8b09c items=0 ppid=2518 pid=2682 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:21:14.149000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D49004F5554505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206C6F61642062616C616E636572206669726577616C6C002D Sep 6 00:21:14.153000 audit[2685]: NETFILTER_CFG table=filter:85 family=10 entries=1 op=nft_register_rule pid=2685 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Sep 6 00:21:14.153000 audit[2685]: SYSCALL arch=c000003e syscall=46 success=yes exit=748 a0=3 a1=7ffefd1038e0 a2=0 a3=7ffefd1038cc items=0 ppid=2518 pid=2685 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:21:14.153000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206C6F61642062616C616E636572206669726577616C6C Sep 6 00:21:14.155000 audit[2686]: NETFILTER_CFG table=nat:86 family=10 entries=1 op=nft_register_chain pid=2686 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Sep 6 00:21:14.155000 audit[2686]: SYSCALL arch=c000003e syscall=46 success=yes exit=96 a0=3 a1=7ffdabecfe00 a2=0 a3=7ffdabecfdec items=0 ppid=2518 pid=2686 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:21:14.155000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D5345525649434553002D74006E6174 Sep 6 00:21:14.159000 audit[2688]: NETFILTER_CFG table=nat:87 family=10 entries=2 op=nft_register_chain pid=2688 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Sep 6 00:21:14.159000 audit[2688]: SYSCALL arch=c000003e syscall=46 success=yes exit=600 a0=3 a1=7ffc45a0dc80 a2=0 a3=7ffc45a0dc6c items=0 ppid=2518 pid=2688 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:21:14.159000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D49004F5554505554002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D5345525649434553 Sep 6 00:21:14.163000 audit[2691]: NETFILTER_CFG table=nat:88 family=10 entries=2 op=nft_register_chain pid=2691 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Sep 6 00:21:14.163000 audit[2691]: SYSCALL arch=c000003e syscall=46 success=yes exit=608 a0=3 a1=7ffd2b260b60 a2=0 a3=7ffd2b260b4c items=0 ppid=2518 pid=2691 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:21:14.163000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900505245524F5554494E47002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D5345525649434553 Sep 6 00:21:14.165000 audit[2692]: NETFILTER_CFG table=nat:89 family=10 entries=1 op=nft_register_chain pid=2692 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Sep 6 00:21:14.165000 audit[2692]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7ffdd30bd370 a2=0 a3=7ffdd30bd35c items=0 ppid=2518 pid=2692 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:21:14.165000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D504F5354524F5554494E47002D74006E6174 Sep 6 00:21:14.167000 audit[2694]: NETFILTER_CFG table=nat:90 family=10 entries=2 op=nft_register_chain pid=2694 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Sep 6 00:21:14.167000 audit[2694]: SYSCALL arch=c000003e syscall=46 success=yes exit=612 a0=3 a1=7ffc020b34e0 a2=0 a3=7ffc020b34cc items=0 ppid=2518 pid=2694 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:21:14.167000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900504F5354524F5554494E47002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E6574657320706F7374726F7574696E672072756C6573002D6A004B5542452D504F5354524F5554494E47 Sep 6 00:21:14.169000 audit[2695]: NETFILTER_CFG table=filter:91 family=10 entries=1 op=nft_register_chain pid=2695 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Sep 6 00:21:14.169000 audit[2695]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7ffd917259b0 a2=0 a3=7ffd9172599c items=0 ppid=2518 pid=2695 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:21:14.169000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D4649524557414C4C002D740066696C746572 Sep 6 00:21:14.171000 audit[2697]: NETFILTER_CFG table=filter:92 family=10 entries=1 op=nft_register_rule pid=2697 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Sep 6 00:21:14.171000 audit[2697]: SYSCALL arch=c000003e syscall=46 success=yes exit=228 a0=3 a1=7ffc925af4b0 a2=0 a3=7ffc925af49c items=0 ppid=2518 pid=2697 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:21:14.171000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6A004B5542452D4649524557414C4C Sep 6 00:21:14.175000 audit[2700]: NETFILTER_CFG table=filter:93 family=10 entries=1 op=nft_register_rule pid=2700 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Sep 6 00:21:14.175000 audit[2700]: SYSCALL arch=c000003e syscall=46 success=yes exit=228 a0=3 a1=7ffd0e0a77a0 a2=0 a3=7ffd0e0a778c items=0 ppid=2518 pid=2700 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:21:14.175000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D49004F5554505554002D740066696C746572002D6A004B5542452D4649524557414C4C Sep 6 00:21:14.178000 audit[2702]: NETFILTER_CFG table=filter:94 family=10 entries=3 op=nft_register_rule pid=2702 subj=system_u:system_r:kernel_t:s0 comm="ip6tables-resto" Sep 6 00:21:14.178000 audit[2702]: SYSCALL arch=c000003e syscall=46 success=yes exit=2088 a0=3 a1=7ffcdf78b7f0 a2=0 a3=7ffcdf78b7dc items=0 ppid=2518 pid=2702 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:21:14.178000 audit: PROCTITLE proctitle=6970367461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Sep 6 00:21:14.179000 audit[2702]: NETFILTER_CFG table=nat:95 family=10 entries=7 op=nft_register_chain pid=2702 subj=system_u:system_r:kernel_t:s0 comm="ip6tables-resto" Sep 6 00:21:14.179000 audit[2702]: SYSCALL arch=c000003e syscall=46 success=yes exit=2056 a0=3 a1=7ffcdf78b7f0 a2=0 a3=7ffcdf78b7dc items=0 ppid=2518 pid=2702 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:21:14.179000 audit: PROCTITLE proctitle=6970367461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Sep 6 00:21:15.471535 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount3982130452.mount: Deactivated successfully. Sep 6 00:21:16.280601 env[1421]: time="2025-09-06T00:21:16.280471824Z" level=info msg="ImageCreate event &ImageCreate{Name:quay.io/tigera/operator:v1.38.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 6 00:21:16.287200 env[1421]: time="2025-09-06T00:21:16.286879791Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:1911afdd8478c6ca3036ff85614050d5d19acc0f0c3f6a5a7b3e34b38dd309c9,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 6 00:21:16.291204 env[1421]: time="2025-09-06T00:21:16.291142936Z" level=info msg="ImageUpdate event &ImageUpdate{Name:quay.io/tigera/operator:v1.38.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 6 00:21:16.294542 env[1421]: time="2025-09-06T00:21:16.294496871Z" level=info msg="ImageCreate event &ImageCreate{Name:quay.io/tigera/operator@sha256:00a7a9b62f9b9a4e0856128b078539783b8352b07f707bff595cb604cc580f6e,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 6 00:21:16.295145 env[1421]: time="2025-09-06T00:21:16.295102578Z" level=info msg="PullImage \"quay.io/tigera/operator:v1.38.6\" returns image reference \"sha256:1911afdd8478c6ca3036ff85614050d5d19acc0f0c3f6a5a7b3e34b38dd309c9\"" Sep 6 00:21:16.298203 env[1421]: time="2025-09-06T00:21:16.298151510Z" level=info msg="CreateContainer within sandbox \"5df8410520630ee69ce9254a479bb904533f68e62f1ef9201eefa4690a3f2f1c\" for container &ContainerMetadata{Name:tigera-operator,Attempt:0,}" Sep 6 00:21:16.329816 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount3619608966.mount: Deactivated successfully. Sep 6 00:21:16.347277 env[1421]: time="2025-09-06T00:21:16.347213926Z" level=info msg="CreateContainer within sandbox \"5df8410520630ee69ce9254a479bb904533f68e62f1ef9201eefa4690a3f2f1c\" for &ContainerMetadata{Name:tigera-operator,Attempt:0,} returns container id \"8196bdf55889c2c72dcd76e1d1b5963550229aa7583c0b729c9ad806490517c3\"" Sep 6 00:21:16.347957 env[1421]: time="2025-09-06T00:21:16.347891833Z" level=info msg="StartContainer for \"8196bdf55889c2c72dcd76e1d1b5963550229aa7583c0b729c9ad806490517c3\"" Sep 6 00:21:16.367659 systemd[1]: Started cri-containerd-8196bdf55889c2c72dcd76e1d1b5963550229aa7583c0b729c9ad806490517c3.scope. Sep 6 00:21:16.382000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:16.382000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:16.382000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:16.382000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:16.382000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:16.382000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:16.382000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:16.382000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:16.382000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:16.382000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:16.382000 audit: BPF prog-id=115 op=LOAD Sep 6 00:21:16.383000 audit[2712]: AVC avc: denied { bpf } for pid=2712 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:16.383000 audit[2712]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000147c48 a2=10 a3=1c items=0 ppid=2579 pid=2712 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:21:16.383000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3831393662646635353838396332633732646364373665316431623539 Sep 6 00:21:16.383000 audit[2712]: AVC avc: denied { perfmon } for pid=2712 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:16.383000 audit[2712]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001476b0 a2=3c a3=8 items=0 ppid=2579 pid=2712 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:21:16.383000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3831393662646635353838396332633732646364373665316431623539 Sep 6 00:21:16.383000 audit[2712]: AVC avc: denied { bpf } for pid=2712 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:16.383000 audit[2712]: AVC avc: denied { bpf } for pid=2712 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:16.383000 audit[2712]: AVC avc: denied { bpf } for pid=2712 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:16.383000 audit[2712]: AVC avc: denied { perfmon } for pid=2712 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:16.383000 audit[2712]: AVC avc: denied { perfmon } for pid=2712 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:16.383000 audit[2712]: AVC avc: denied { perfmon } for pid=2712 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:16.383000 audit[2712]: AVC avc: denied { perfmon } for pid=2712 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:16.383000 audit[2712]: AVC avc: denied { perfmon } for pid=2712 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:16.383000 audit[2712]: AVC avc: denied { bpf } for pid=2712 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:16.383000 audit[2712]: AVC avc: denied { bpf } for pid=2712 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:16.383000 audit: BPF prog-id=116 op=LOAD Sep 6 00:21:16.383000 audit[2712]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001479d8 a2=78 a3=c00032dd20 items=0 ppid=2579 pid=2712 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:21:16.383000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3831393662646635353838396332633732646364373665316431623539 Sep 6 00:21:16.383000 audit[2712]: AVC avc: denied { bpf } for pid=2712 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:16.383000 audit[2712]: AVC avc: denied { bpf } for pid=2712 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:16.383000 audit[2712]: AVC avc: denied { perfmon } for pid=2712 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:16.383000 audit[2712]: AVC avc: denied { perfmon } for pid=2712 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:16.383000 audit[2712]: AVC avc: denied { perfmon } for pid=2712 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:16.383000 audit[2712]: AVC avc: denied { perfmon } for pid=2712 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:16.383000 audit[2712]: AVC avc: denied { perfmon } for pid=2712 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:16.383000 audit[2712]: AVC avc: denied { bpf } for pid=2712 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:16.383000 audit[2712]: AVC avc: denied { bpf } for pid=2712 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:16.383000 audit: BPF prog-id=117 op=LOAD Sep 6 00:21:16.383000 audit[2712]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000147770 a2=78 a3=c00032dd68 items=0 ppid=2579 pid=2712 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:21:16.383000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3831393662646635353838396332633732646364373665316431623539 Sep 6 00:21:16.383000 audit: BPF prog-id=117 op=UNLOAD Sep 6 00:21:16.383000 audit: BPF prog-id=116 op=UNLOAD Sep 6 00:21:16.383000 audit[2712]: AVC avc: denied { bpf } for pid=2712 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:16.383000 audit[2712]: AVC avc: denied { bpf } for pid=2712 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:16.383000 audit[2712]: AVC avc: denied { bpf } for pid=2712 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:16.383000 audit[2712]: AVC avc: denied { perfmon } for pid=2712 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:16.383000 audit[2712]: AVC avc: denied { perfmon } for pid=2712 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:16.383000 audit[2712]: AVC avc: denied { perfmon } for pid=2712 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:16.383000 audit[2712]: AVC avc: denied { perfmon } for pid=2712 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:16.383000 audit[2712]: AVC avc: denied { perfmon } for pid=2712 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:16.383000 audit[2712]: AVC avc: denied { bpf } for pid=2712 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:16.383000 audit[2712]: AVC avc: denied { bpf } for pid=2712 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:16.383000 audit: BPF prog-id=118 op=LOAD Sep 6 00:21:16.383000 audit[2712]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000147c30 a2=78 a3=c000380178 items=0 ppid=2579 pid=2712 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:21:16.383000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3831393662646635353838396332633732646364373665316431623539 Sep 6 00:21:16.406510 env[1421]: time="2025-09-06T00:21:16.406456549Z" level=info msg="StartContainer for \"8196bdf55889c2c72dcd76e1d1b5963550229aa7583c0b729c9ad806490517c3\" returns successfully" Sep 6 00:21:16.584874 kubelet[2412]: I0906 00:21:16.584688 2412 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="kube-system/kube-proxy-sflwv" podStartSLOduration=4.584642724 podStartE2EDuration="4.584642724s" podCreationTimestamp="2025-09-06 00:21:12 +0000 UTC" firstStartedPulling="0001-01-01 00:00:00 +0000 UTC" lastFinishedPulling="0001-01-01 00:00:00 +0000 UTC" observedRunningTime="2025-09-06 00:21:14.574822867 +0000 UTC m=+6.480168902" watchObservedRunningTime="2025-09-06 00:21:16.584642724 +0000 UTC m=+8.489988759" Sep 6 00:21:16.585443 kubelet[2412]: I0906 00:21:16.584905 2412 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="tigera-operator/tigera-operator-58fc44c59b-2m8h4" podStartSLOduration=1.2239723 podStartE2EDuration="3.584894827s" podCreationTimestamp="2025-09-06 00:21:13 +0000 UTC" firstStartedPulling="2025-09-06 00:21:13.935275662 +0000 UTC m=+5.840621697" lastFinishedPulling="2025-09-06 00:21:16.296198089 +0000 UTC m=+8.201544224" observedRunningTime="2025-09-06 00:21:16.584433422 +0000 UTC m=+8.489779457" watchObservedRunningTime="2025-09-06 00:21:16.584894827 +0000 UTC m=+8.490240862" Sep 6 00:21:23.162272 sudo[1749]: pam_unix(sudo:session): session closed for user root Sep 6 00:21:23.180008 kernel: kauditd_printk_skb: 357 callbacks suppressed Sep 6 00:21:23.180134 kernel: audit: type=1106 audit(1757118083.161:877): pid=1749 uid=500 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_limits,pam_env,pam_unix,pam_permit,pam_systemd acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Sep 6 00:21:23.161000 audit[1749]: USER_END pid=1749 uid=500 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_limits,pam_env,pam_unix,pam_permit,pam_systemd acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Sep 6 00:21:23.179000 audit[1749]: CRED_DISP pid=1749 uid=500 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Sep 6 00:21:23.218032 kernel: audit: type=1104 audit(1757118083.179:878): pid=1749 uid=500 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Sep 6 00:21:23.285599 sshd[1746]: pam_unix(sshd:session): session closed for user core Sep 6 00:21:23.287000 audit[1746]: USER_END pid=1746 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Sep 6 00:21:23.310454 systemd[1]: sshd@6-10.200.8.38:22-10.200.16.10:51792.service: Deactivated successfully. Sep 6 00:21:23.313216 systemd-logind[1407]: Session 9 logged out. Waiting for processes to exit. Sep 6 00:21:23.287000 audit[1746]: CRED_DISP pid=1746 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Sep 6 00:21:23.315370 systemd[1]: session-9.scope: Deactivated successfully. Sep 6 00:21:23.315571 systemd[1]: session-9.scope: Consumed 5.104s CPU time. Sep 6 00:21:23.316802 systemd-logind[1407]: Removed session 9. Sep 6 00:21:23.336360 kernel: audit: type=1106 audit(1757118083.287:879): pid=1746 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Sep 6 00:21:23.336519 kernel: audit: type=1104 audit(1757118083.287:880): pid=1746 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Sep 6 00:21:23.309000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@6-10.200.8.38:22-10.200.16.10:51792 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 00:21:23.361962 kernel: audit: type=1131 audit(1757118083.309:881): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@6-10.200.8.38:22-10.200.16.10:51792 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 00:21:24.221000 audit[2792]: NETFILTER_CFG table=filter:96 family=2 entries=15 op=nft_register_rule pid=2792 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Sep 6 00:21:24.236962 kernel: audit: type=1325 audit(1757118084.221:882): table=filter:96 family=2 entries=15 op=nft_register_rule pid=2792 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Sep 6 00:21:24.221000 audit[2792]: SYSCALL arch=c000003e syscall=46 success=yes exit=5992 a0=3 a1=7ffcc4bef920 a2=0 a3=7ffcc4bef90c items=0 ppid=2518 pid=2792 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:21:24.267967 kernel: audit: type=1300 audit(1757118084.221:882): arch=c000003e syscall=46 success=yes exit=5992 a0=3 a1=7ffcc4bef920 a2=0 a3=7ffcc4bef90c items=0 ppid=2518 pid=2792 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:21:24.282292 kernel: audit: type=1327 audit(1757118084.221:882): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Sep 6 00:21:24.221000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Sep 6 00:21:24.267000 audit[2792]: NETFILTER_CFG table=nat:97 family=2 entries=12 op=nft_register_rule pid=2792 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Sep 6 00:21:24.323701 kernel: audit: type=1325 audit(1757118084.267:883): table=nat:97 family=2 entries=12 op=nft_register_rule pid=2792 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Sep 6 00:21:24.323848 kernel: audit: type=1300 audit(1757118084.267:883): arch=c000003e syscall=46 success=yes exit=2700 a0=3 a1=7ffcc4bef920 a2=0 a3=0 items=0 ppid=2518 pid=2792 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:21:24.267000 audit[2792]: SYSCALL arch=c000003e syscall=46 success=yes exit=2700 a0=3 a1=7ffcc4bef920 a2=0 a3=0 items=0 ppid=2518 pid=2792 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:21:24.267000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Sep 6 00:21:24.391000 audit[2794]: NETFILTER_CFG table=filter:98 family=2 entries=16 op=nft_register_rule pid=2794 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Sep 6 00:21:24.391000 audit[2794]: SYSCALL arch=c000003e syscall=46 success=yes exit=5992 a0=3 a1=7ffc3a1b3220 a2=0 a3=7ffc3a1b320c items=0 ppid=2518 pid=2794 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:21:24.391000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Sep 6 00:21:24.398000 audit[2794]: NETFILTER_CFG table=nat:99 family=2 entries=12 op=nft_register_rule pid=2794 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Sep 6 00:21:24.398000 audit[2794]: SYSCALL arch=c000003e syscall=46 success=yes exit=2700 a0=3 a1=7ffc3a1b3220 a2=0 a3=0 items=0 ppid=2518 pid=2794 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:21:24.398000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Sep 6 00:21:27.421000 audit[2796]: NETFILTER_CFG table=filter:100 family=2 entries=17 op=nft_register_rule pid=2796 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Sep 6 00:21:27.421000 audit[2796]: SYSCALL arch=c000003e syscall=46 success=yes exit=6736 a0=3 a1=7ffd64108d90 a2=0 a3=7ffd64108d7c items=0 ppid=2518 pid=2796 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:21:27.421000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Sep 6 00:21:27.426000 audit[2796]: NETFILTER_CFG table=nat:101 family=2 entries=12 op=nft_register_rule pid=2796 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Sep 6 00:21:27.426000 audit[2796]: SYSCALL arch=c000003e syscall=46 success=yes exit=2700 a0=3 a1=7ffd64108d90 a2=0 a3=0 items=0 ppid=2518 pid=2796 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:21:27.426000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Sep 6 00:21:27.448000 audit[2798]: NETFILTER_CFG table=filter:102 family=2 entries=18 op=nft_register_rule pid=2798 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Sep 6 00:21:27.448000 audit[2798]: SYSCALL arch=c000003e syscall=46 success=yes exit=6736 a0=3 a1=7ffe76347fe0 a2=0 a3=7ffe76347fcc items=0 ppid=2518 pid=2798 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:21:27.448000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Sep 6 00:21:27.455000 audit[2798]: NETFILTER_CFG table=nat:103 family=2 entries=12 op=nft_register_rule pid=2798 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Sep 6 00:21:27.455000 audit[2798]: SYSCALL arch=c000003e syscall=46 success=yes exit=2700 a0=3 a1=7ffe76347fe0 a2=0 a3=0 items=0 ppid=2518 pid=2798 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:21:27.455000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Sep 6 00:21:27.620335 systemd[1]: Created slice kubepods-besteffort-poda1b9c051_0c3c_48d4_b758_df6ea188c05a.slice. Sep 6 00:21:27.745746 kubelet[2412]: I0906 00:21:27.745584 2412 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"typha-certs\" (UniqueName: \"kubernetes.io/secret/a1b9c051-0c3c-48d4-b758-df6ea188c05a-typha-certs\") pod \"calico-typha-9f67887d8-sjz72\" (UID: \"a1b9c051-0c3c-48d4-b758-df6ea188c05a\") " pod="calico-system/calico-typha-9f67887d8-sjz72" Sep 6 00:21:27.745746 kubelet[2412]: I0906 00:21:27.745652 2412 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-9ptb7\" (UniqueName: \"kubernetes.io/projected/a1b9c051-0c3c-48d4-b758-df6ea188c05a-kube-api-access-9ptb7\") pod \"calico-typha-9f67887d8-sjz72\" (UID: \"a1b9c051-0c3c-48d4-b758-df6ea188c05a\") " pod="calico-system/calico-typha-9f67887d8-sjz72" Sep 6 00:21:27.745746 kubelet[2412]: I0906 00:21:27.745684 2412 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"tigera-ca-bundle\" (UniqueName: \"kubernetes.io/configmap/a1b9c051-0c3c-48d4-b758-df6ea188c05a-tigera-ca-bundle\") pod \"calico-typha-9f67887d8-sjz72\" (UID: \"a1b9c051-0c3c-48d4-b758-df6ea188c05a\") " pod="calico-system/calico-typha-9f67887d8-sjz72" Sep 6 00:21:27.933382 env[1421]: time="2025-09-06T00:21:27.932753733Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-typha-9f67887d8-sjz72,Uid:a1b9c051-0c3c-48d4-b758-df6ea188c05a,Namespace:calico-system,Attempt:0,}" Sep 6 00:21:27.941344 systemd[1]: Created slice kubepods-besteffort-pod2f9d9f97_553e_4ac0_9d8a_b1acd377155f.slice. Sep 6 00:21:27.976729 env[1421]: time="2025-09-06T00:21:27.976586984Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Sep 6 00:21:27.976729 env[1421]: time="2025-09-06T00:21:27.976646285Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Sep 6 00:21:27.976729 env[1421]: time="2025-09-06T00:21:27.976661485Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Sep 6 00:21:27.978202 env[1421]: time="2025-09-06T00:21:27.977295890Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/b00091ae7c6ec431c9606cb6c570b52eb52af0e70a78768b7a29d26009416f2e pid=2807 runtime=io.containerd.runc.v2 Sep 6 00:21:27.998676 systemd[1]: Started cri-containerd-b00091ae7c6ec431c9606cb6c570b52eb52af0e70a78768b7a29d26009416f2e.scope. Sep 6 00:21:28.034000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:28.034000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:28.034000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:28.034000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:28.034000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:28.034000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:28.034000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:28.034000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:28.034000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:28.034000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:28.034000 audit: BPF prog-id=119 op=LOAD Sep 6 00:21:28.036000 audit[2816]: AVC avc: denied { bpf } for pid=2816 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:28.036000 audit[2816]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000197c48 a2=10 a3=1c items=0 ppid=2807 pid=2816 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:21:28.036000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6230303039316165376336656334333163393630366362366335373062 Sep 6 00:21:28.036000 audit[2816]: AVC avc: denied { perfmon } for pid=2816 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:28.036000 audit[2816]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001976b0 a2=3c a3=c items=0 ppid=2807 pid=2816 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:21:28.036000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6230303039316165376336656334333163393630366362366335373062 Sep 6 00:21:28.036000 audit[2816]: AVC avc: denied { bpf } for pid=2816 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:28.036000 audit[2816]: AVC avc: denied { bpf } for pid=2816 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:28.036000 audit[2816]: AVC avc: denied { bpf } for pid=2816 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:28.036000 audit[2816]: AVC avc: denied { perfmon } for pid=2816 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:28.036000 audit[2816]: AVC avc: denied { perfmon } for pid=2816 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:28.036000 audit[2816]: AVC avc: denied { perfmon } for pid=2816 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:28.036000 audit[2816]: AVC avc: denied { perfmon } for pid=2816 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:28.036000 audit[2816]: AVC avc: denied { perfmon } for pid=2816 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:28.036000 audit[2816]: AVC avc: denied { bpf } for pid=2816 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:28.036000 audit[2816]: AVC avc: denied { bpf } for pid=2816 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:28.036000 audit: BPF prog-id=120 op=LOAD Sep 6 00:21:28.036000 audit[2816]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001979d8 a2=78 a3=c0002fa540 items=0 ppid=2807 pid=2816 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:21:28.036000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6230303039316165376336656334333163393630366362366335373062 Sep 6 00:21:28.036000 audit[2816]: AVC avc: denied { bpf } for pid=2816 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:28.036000 audit[2816]: AVC avc: denied { bpf } for pid=2816 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:28.036000 audit[2816]: AVC avc: denied { perfmon } for pid=2816 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:28.036000 audit[2816]: AVC avc: denied { perfmon } for pid=2816 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:28.036000 audit[2816]: AVC avc: denied { perfmon } for pid=2816 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:28.036000 audit[2816]: AVC avc: denied { perfmon } for pid=2816 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:28.036000 audit[2816]: AVC avc: denied { perfmon } for pid=2816 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:28.036000 audit[2816]: AVC avc: denied { bpf } for pid=2816 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:28.036000 audit[2816]: AVC avc: denied { bpf } for pid=2816 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:28.036000 audit: BPF prog-id=121 op=LOAD Sep 6 00:21:28.036000 audit[2816]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000197770 a2=78 a3=c0002fa588 items=0 ppid=2807 pid=2816 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:21:28.036000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6230303039316165376336656334333163393630366362366335373062 Sep 6 00:21:28.036000 audit: BPF prog-id=121 op=UNLOAD Sep 6 00:21:28.036000 audit: BPF prog-id=120 op=UNLOAD Sep 6 00:21:28.036000 audit[2816]: AVC avc: denied { bpf } for pid=2816 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:28.036000 audit[2816]: AVC avc: denied { bpf } for pid=2816 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:28.036000 audit[2816]: AVC avc: denied { bpf } for pid=2816 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:28.036000 audit[2816]: AVC avc: denied { perfmon } for pid=2816 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:28.036000 audit[2816]: AVC avc: denied { perfmon } for pid=2816 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:28.036000 audit[2816]: AVC avc: denied { perfmon } for pid=2816 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:28.036000 audit[2816]: AVC avc: denied { perfmon } for pid=2816 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:28.036000 audit[2816]: AVC avc: denied { perfmon } for pid=2816 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:28.036000 audit[2816]: AVC avc: denied { bpf } for pid=2816 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:28.036000 audit[2816]: AVC avc: denied { bpf } for pid=2816 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:28.036000 audit: BPF prog-id=122 op=LOAD Sep 6 00:21:28.036000 audit[2816]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000197c30 a2=78 a3=c0002fa998 items=0 ppid=2807 pid=2816 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:21:28.036000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6230303039316165376336656334333163393630366362366335373062 Sep 6 00:21:28.046889 kubelet[2412]: I0906 00:21:28.046509 2412 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"cni-bin-dir\" (UniqueName: \"kubernetes.io/host-path/2f9d9f97-553e-4ac0-9d8a-b1acd377155f-cni-bin-dir\") pod \"calico-node-hxvph\" (UID: \"2f9d9f97-553e-4ac0-9d8a-b1acd377155f\") " pod="calico-system/calico-node-hxvph" Sep 6 00:21:28.046889 kubelet[2412]: I0906 00:21:28.046562 2412 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"cni-net-dir\" (UniqueName: \"kubernetes.io/host-path/2f9d9f97-553e-4ac0-9d8a-b1acd377155f-cni-net-dir\") pod \"calico-node-hxvph\" (UID: \"2f9d9f97-553e-4ac0-9d8a-b1acd377155f\") " pod="calico-system/calico-node-hxvph" Sep 6 00:21:28.046889 kubelet[2412]: I0906 00:21:28.046581 2412 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"cni-log-dir\" (UniqueName: \"kubernetes.io/host-path/2f9d9f97-553e-4ac0-9d8a-b1acd377155f-cni-log-dir\") pod \"calico-node-hxvph\" (UID: \"2f9d9f97-553e-4ac0-9d8a-b1acd377155f\") " pod="calico-system/calico-node-hxvph" Sep 6 00:21:28.046889 kubelet[2412]: I0906 00:21:28.046603 2412 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"var-run-calico\" (UniqueName: \"kubernetes.io/host-path/2f9d9f97-553e-4ac0-9d8a-b1acd377155f-var-run-calico\") pod \"calico-node-hxvph\" (UID: \"2f9d9f97-553e-4ac0-9d8a-b1acd377155f\") " pod="calico-system/calico-node-hxvph" Sep 6 00:21:28.046889 kubelet[2412]: I0906 00:21:28.046638 2412 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"policysync\" (UniqueName: \"kubernetes.io/host-path/2f9d9f97-553e-4ac0-9d8a-b1acd377155f-policysync\") pod \"calico-node-hxvph\" (UID: \"2f9d9f97-553e-4ac0-9d8a-b1acd377155f\") " pod="calico-system/calico-node-hxvph" Sep 6 00:21:28.047221 kubelet[2412]: I0906 00:21:28.046653 2412 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"tigera-ca-bundle\" (UniqueName: \"kubernetes.io/configmap/2f9d9f97-553e-4ac0-9d8a-b1acd377155f-tigera-ca-bundle\") pod \"calico-node-hxvph\" (UID: \"2f9d9f97-553e-4ac0-9d8a-b1acd377155f\") " pod="calico-system/calico-node-hxvph" Sep 6 00:21:28.047221 kubelet[2412]: I0906 00:21:28.046677 2412 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"var-lib-calico\" (UniqueName: \"kubernetes.io/host-path/2f9d9f97-553e-4ac0-9d8a-b1acd377155f-var-lib-calico\") pod \"calico-node-hxvph\" (UID: \"2f9d9f97-553e-4ac0-9d8a-b1acd377155f\") " pod="calico-system/calico-node-hxvph" Sep 6 00:21:28.047221 kubelet[2412]: I0906 00:21:28.046706 2412 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-bqqf8\" (UniqueName: \"kubernetes.io/projected/2f9d9f97-553e-4ac0-9d8a-b1acd377155f-kube-api-access-bqqf8\") pod \"calico-node-hxvph\" (UID: \"2f9d9f97-553e-4ac0-9d8a-b1acd377155f\") " pod="calico-system/calico-node-hxvph" Sep 6 00:21:28.047221 kubelet[2412]: I0906 00:21:28.046725 2412 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"flexvol-driver-host\" (UniqueName: \"kubernetes.io/host-path/2f9d9f97-553e-4ac0-9d8a-b1acd377155f-flexvol-driver-host\") pod \"calico-node-hxvph\" (UID: \"2f9d9f97-553e-4ac0-9d8a-b1acd377155f\") " pod="calico-system/calico-node-hxvph" Sep 6 00:21:28.047221 kubelet[2412]: I0906 00:21:28.046741 2412 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"lib-modules\" (UniqueName: \"kubernetes.io/host-path/2f9d9f97-553e-4ac0-9d8a-b1acd377155f-lib-modules\") pod \"calico-node-hxvph\" (UID: \"2f9d9f97-553e-4ac0-9d8a-b1acd377155f\") " pod="calico-system/calico-node-hxvph" Sep 6 00:21:28.047417 kubelet[2412]: I0906 00:21:28.046762 2412 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"xtables-lock\" (UniqueName: \"kubernetes.io/host-path/2f9d9f97-553e-4ac0-9d8a-b1acd377155f-xtables-lock\") pod \"calico-node-hxvph\" (UID: \"2f9d9f97-553e-4ac0-9d8a-b1acd377155f\") " pod="calico-system/calico-node-hxvph" Sep 6 00:21:28.047417 kubelet[2412]: I0906 00:21:28.046790 2412 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"node-certs\" (UniqueName: \"kubernetes.io/secret/2f9d9f97-553e-4ac0-9d8a-b1acd377155f-node-certs\") pod \"calico-node-hxvph\" (UID: \"2f9d9f97-553e-4ac0-9d8a-b1acd377155f\") " pod="calico-system/calico-node-hxvph" Sep 6 00:21:28.080346 env[1421]: time="2025-09-06T00:21:28.080300300Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-typha-9f67887d8-sjz72,Uid:a1b9c051-0c3c-48d4-b758-df6ea188c05a,Namespace:calico-system,Attempt:0,} returns sandbox id \"b00091ae7c6ec431c9606cb6c570b52eb52af0e70a78768b7a29d26009416f2e\"" Sep 6 00:21:28.084239 env[1421]: time="2025-09-06T00:21:28.084196431Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/typha:v3.30.3\"" Sep 6 00:21:28.155103 kubelet[2412]: E0906 00:21:28.155060 2412 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 6 00:21:28.155103 kubelet[2412]: W0906 00:21:28.155092 2412 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 6 00:21:28.155322 kubelet[2412]: E0906 00:21:28.155135 2412 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 6 00:21:28.164947 kubelet[2412]: E0906 00:21:28.164900 2412 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 6 00:21:28.164947 kubelet[2412]: W0906 00:21:28.164946 2412 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 6 00:21:28.165169 kubelet[2412]: E0906 00:21:28.164977 2412 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 6 00:21:28.208925 kubelet[2412]: E0906 00:21:28.208859 2412 pod_workers.go:1301] "Error syncing pod, skipping" err="network is not ready: container runtime network not ready: NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" pod="calico-system/csi-node-driver-pb785" podUID="1ea5f5bc-3af9-4595-8783-60d58914430c" Sep 6 00:21:28.212039 kubelet[2412]: E0906 00:21:28.211991 2412 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 6 00:21:28.212039 kubelet[2412]: W0906 00:21:28.212038 2412 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 6 00:21:28.212317 kubelet[2412]: E0906 00:21:28.212068 2412 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 6 00:21:28.212442 kubelet[2412]: E0906 00:21:28.212417 2412 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 6 00:21:28.212517 kubelet[2412]: W0906 00:21:28.212443 2412 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 6 00:21:28.212517 kubelet[2412]: E0906 00:21:28.212464 2412 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 6 00:21:28.212712 kubelet[2412]: E0906 00:21:28.212693 2412 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 6 00:21:28.212784 kubelet[2412]: W0906 00:21:28.212722 2412 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 6 00:21:28.212784 kubelet[2412]: E0906 00:21:28.212740 2412 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 6 00:21:28.212989 kubelet[2412]: E0906 00:21:28.212972 2412 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 6 00:21:28.213071 kubelet[2412]: W0906 00:21:28.212994 2412 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 6 00:21:28.213071 kubelet[2412]: E0906 00:21:28.213009 2412 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 6 00:21:28.213259 kubelet[2412]: E0906 00:21:28.213241 2412 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 6 00:21:28.213259 kubelet[2412]: W0906 00:21:28.213258 2412 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 6 00:21:28.213366 kubelet[2412]: E0906 00:21:28.213279 2412 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 6 00:21:28.213497 kubelet[2412]: E0906 00:21:28.213481 2412 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 6 00:21:28.213555 kubelet[2412]: W0906 00:21:28.213497 2412 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 6 00:21:28.213555 kubelet[2412]: E0906 00:21:28.213510 2412 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 6 00:21:28.213735 kubelet[2412]: E0906 00:21:28.213718 2412 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 6 00:21:28.213735 kubelet[2412]: W0906 00:21:28.213734 2412 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 6 00:21:28.213834 kubelet[2412]: E0906 00:21:28.213755 2412 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 6 00:21:28.213993 kubelet[2412]: E0906 00:21:28.213974 2412 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 6 00:21:28.214053 kubelet[2412]: W0906 00:21:28.213993 2412 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 6 00:21:28.214053 kubelet[2412]: E0906 00:21:28.214013 2412 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 6 00:21:28.214249 kubelet[2412]: E0906 00:21:28.214232 2412 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 6 00:21:28.214249 kubelet[2412]: W0906 00:21:28.214249 2412 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 6 00:21:28.214367 kubelet[2412]: E0906 00:21:28.214269 2412 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 6 00:21:28.214490 kubelet[2412]: E0906 00:21:28.214472 2412 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 6 00:21:28.214555 kubelet[2412]: W0906 00:21:28.214490 2412 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 6 00:21:28.214555 kubelet[2412]: E0906 00:21:28.214516 2412 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 6 00:21:28.214738 kubelet[2412]: E0906 00:21:28.214721 2412 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 6 00:21:28.214797 kubelet[2412]: W0906 00:21:28.214741 2412 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 6 00:21:28.214797 kubelet[2412]: E0906 00:21:28.214761 2412 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 6 00:21:28.214989 kubelet[2412]: E0906 00:21:28.214974 2412 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 6 00:21:28.215048 kubelet[2412]: W0906 00:21:28.214990 2412 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 6 00:21:28.215048 kubelet[2412]: E0906 00:21:28.215009 2412 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 6 00:21:28.216757 kubelet[2412]: E0906 00:21:28.216721 2412 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 6 00:21:28.216757 kubelet[2412]: W0906 00:21:28.216752 2412 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 6 00:21:28.216896 kubelet[2412]: E0906 00:21:28.216771 2412 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 6 00:21:28.233291 kubelet[2412]: E0906 00:21:28.233230 2412 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 6 00:21:28.233291 kubelet[2412]: W0906 00:21:28.233279 2412 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 6 00:21:28.233562 kubelet[2412]: E0906 00:21:28.233310 2412 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 6 00:21:28.238971 kubelet[2412]: E0906 00:21:28.238906 2412 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 6 00:21:28.238971 kubelet[2412]: W0906 00:21:28.238962 2412 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 6 00:21:28.239231 kubelet[2412]: E0906 00:21:28.239000 2412 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 6 00:21:28.241488 kubelet[2412]: E0906 00:21:28.241116 2412 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 6 00:21:28.241488 kubelet[2412]: W0906 00:21:28.241138 2412 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 6 00:21:28.241488 kubelet[2412]: E0906 00:21:28.241163 2412 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 6 00:21:28.243138 kubelet[2412]: E0906 00:21:28.243014 2412 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 6 00:21:28.243138 kubelet[2412]: W0906 00:21:28.243029 2412 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 6 00:21:28.243138 kubelet[2412]: E0906 00:21:28.243045 2412 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 6 00:21:28.243482 kubelet[2412]: E0906 00:21:28.243366 2412 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 6 00:21:28.243482 kubelet[2412]: W0906 00:21:28.243377 2412 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 6 00:21:28.243482 kubelet[2412]: E0906 00:21:28.243389 2412 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 6 00:21:28.243775 kubelet[2412]: E0906 00:21:28.243669 2412 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 6 00:21:28.243775 kubelet[2412]: W0906 00:21:28.243681 2412 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 6 00:21:28.243775 kubelet[2412]: E0906 00:21:28.243692 2412 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 6 00:21:28.243973 kubelet[2412]: E0906 00:21:28.243963 2412 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 6 00:21:28.244026 kubelet[2412]: W0906 00:21:28.244017 2412 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 6 00:21:28.244077 kubelet[2412]: E0906 00:21:28.244069 2412 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 6 00:21:28.247628 env[1421]: time="2025-09-06T00:21:28.247570509Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-node-hxvph,Uid:2f9d9f97-553e-4ac0-9d8a-b1acd377155f,Namespace:calico-system,Attempt:0,}" Sep 6 00:21:28.248829 kubelet[2412]: E0906 00:21:28.248803 2412 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 6 00:21:28.248941 kubelet[2412]: W0906 00:21:28.248842 2412 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 6 00:21:28.248941 kubelet[2412]: E0906 00:21:28.248862 2412 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 6 00:21:28.248941 kubelet[2412]: I0906 00:21:28.248893 2412 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-nt6sz\" (UniqueName: \"kubernetes.io/projected/1ea5f5bc-3af9-4595-8783-60d58914430c-kube-api-access-nt6sz\") pod \"csi-node-driver-pb785\" (UID: \"1ea5f5bc-3af9-4595-8783-60d58914430c\") " pod="calico-system/csi-node-driver-pb785" Sep 6 00:21:28.251758 kubelet[2412]: E0906 00:21:28.251730 2412 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 6 00:21:28.251758 kubelet[2412]: W0906 00:21:28.251754 2412 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 6 00:21:28.251922 kubelet[2412]: E0906 00:21:28.251777 2412 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 6 00:21:28.251922 kubelet[2412]: I0906 00:21:28.251823 2412 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"registration-dir\" (UniqueName: \"kubernetes.io/host-path/1ea5f5bc-3af9-4595-8783-60d58914430c-registration-dir\") pod \"csi-node-driver-pb785\" (UID: \"1ea5f5bc-3af9-4595-8783-60d58914430c\") " pod="calico-system/csi-node-driver-pb785" Sep 6 00:21:28.252132 kubelet[2412]: E0906 00:21:28.252112 2412 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 6 00:21:28.252202 kubelet[2412]: W0906 00:21:28.252132 2412 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 6 00:21:28.252202 kubelet[2412]: E0906 00:21:28.252152 2412 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 6 00:21:28.252325 kubelet[2412]: I0906 00:21:28.252178 2412 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kubelet-dir\" (UniqueName: \"kubernetes.io/host-path/1ea5f5bc-3af9-4595-8783-60d58914430c-kubelet-dir\") pod \"csi-node-driver-pb785\" (UID: \"1ea5f5bc-3af9-4595-8783-60d58914430c\") " pod="calico-system/csi-node-driver-pb785" Sep 6 00:21:28.253082 kubelet[2412]: E0906 00:21:28.253061 2412 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 6 00:21:28.253082 kubelet[2412]: W0906 00:21:28.253081 2412 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 6 00:21:28.253201 kubelet[2412]: E0906 00:21:28.253117 2412 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 6 00:21:28.253382 kubelet[2412]: E0906 00:21:28.253364 2412 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 6 00:21:28.253464 kubelet[2412]: W0906 00:21:28.253382 2412 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 6 00:21:28.253464 kubelet[2412]: E0906 00:21:28.253397 2412 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 6 00:21:28.253711 kubelet[2412]: E0906 00:21:28.253692 2412 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 6 00:21:28.253711 kubelet[2412]: W0906 00:21:28.253709 2412 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 6 00:21:28.253828 kubelet[2412]: E0906 00:21:28.253728 2412 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 6 00:21:28.253998 kubelet[2412]: E0906 00:21:28.253981 2412 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 6 00:21:28.253998 kubelet[2412]: W0906 00:21:28.253998 2412 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 6 00:21:28.254112 kubelet[2412]: E0906 00:21:28.254038 2412 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 6 00:21:28.254294 kubelet[2412]: E0906 00:21:28.254276 2412 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 6 00:21:28.254294 kubelet[2412]: W0906 00:21:28.254292 2412 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 6 00:21:28.254408 kubelet[2412]: E0906 00:21:28.254357 2412 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 6 00:21:28.254408 kubelet[2412]: I0906 00:21:28.254384 2412 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"socket-dir\" (UniqueName: \"kubernetes.io/host-path/1ea5f5bc-3af9-4595-8783-60d58914430c-socket-dir\") pod \"csi-node-driver-pb785\" (UID: \"1ea5f5bc-3af9-4595-8783-60d58914430c\") " pod="calico-system/csi-node-driver-pb785" Sep 6 00:21:28.254663 kubelet[2412]: E0906 00:21:28.254644 2412 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 6 00:21:28.254730 kubelet[2412]: W0906 00:21:28.254674 2412 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 6 00:21:28.254730 kubelet[2412]: E0906 00:21:28.254693 2412 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 6 00:21:28.255023 kubelet[2412]: E0906 00:21:28.254919 2412 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 6 00:21:28.255023 kubelet[2412]: W0906 00:21:28.254968 2412 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 6 00:21:28.255023 kubelet[2412]: E0906 00:21:28.254988 2412 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 6 00:21:28.259014 kubelet[2412]: E0906 00:21:28.255204 2412 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 6 00:21:28.259014 kubelet[2412]: W0906 00:21:28.255217 2412 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 6 00:21:28.259014 kubelet[2412]: E0906 00:21:28.255234 2412 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 6 00:21:28.259014 kubelet[2412]: I0906 00:21:28.255262 2412 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"varrun\" (UniqueName: \"kubernetes.io/host-path/1ea5f5bc-3af9-4595-8783-60d58914430c-varrun\") pod \"csi-node-driver-pb785\" (UID: \"1ea5f5bc-3af9-4595-8783-60d58914430c\") " pod="calico-system/csi-node-driver-pb785" Sep 6 00:21:28.259014 kubelet[2412]: E0906 00:21:28.255749 2412 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 6 00:21:28.259014 kubelet[2412]: W0906 00:21:28.255762 2412 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 6 00:21:28.259014 kubelet[2412]: E0906 00:21:28.255780 2412 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 6 00:21:28.259014 kubelet[2412]: E0906 00:21:28.256022 2412 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 6 00:21:28.259014 kubelet[2412]: W0906 00:21:28.256051 2412 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 6 00:21:28.259526 kubelet[2412]: E0906 00:21:28.256069 2412 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 6 00:21:28.259526 kubelet[2412]: E0906 00:21:28.256267 2412 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 6 00:21:28.259526 kubelet[2412]: W0906 00:21:28.256278 2412 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 6 00:21:28.259526 kubelet[2412]: E0906 00:21:28.256290 2412 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 6 00:21:28.259526 kubelet[2412]: E0906 00:21:28.256448 2412 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 6 00:21:28.259526 kubelet[2412]: W0906 00:21:28.256457 2412 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 6 00:21:28.259526 kubelet[2412]: E0906 00:21:28.256470 2412 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 6 00:21:28.293841 env[1421]: time="2025-09-06T00:21:28.293739070Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Sep 6 00:21:28.293841 env[1421]: time="2025-09-06T00:21:28.293839771Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Sep 6 00:21:28.294134 env[1421]: time="2025-09-06T00:21:28.293871671Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Sep 6 00:21:28.294134 env[1421]: time="2025-09-06T00:21:28.294068273Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/67aa735f5981334ff980d8c65aad7da7493ded66176e034f15a559c71ee4b74f pid=2888 runtime=io.containerd.runc.v2 Sep 6 00:21:28.320089 systemd[1]: Started cri-containerd-67aa735f5981334ff980d8c65aad7da7493ded66176e034f15a559c71ee4b74f.scope. Sep 6 00:21:28.374322 kernel: kauditd_printk_skb: 76 callbacks suppressed Sep 6 00:21:28.374483 kernel: audit: type=1400 audit(1757118088.351:908): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:28.351000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:28.374649 kubelet[2412]: E0906 00:21:28.359160 2412 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 6 00:21:28.374649 kubelet[2412]: W0906 00:21:28.359179 2412 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 6 00:21:28.374649 kubelet[2412]: E0906 00:21:28.359204 2412 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 6 00:21:28.374649 kubelet[2412]: E0906 00:21:28.359389 2412 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 6 00:21:28.374649 kubelet[2412]: W0906 00:21:28.359397 2412 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 6 00:21:28.374649 kubelet[2412]: E0906 00:21:28.359407 2412 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 6 00:21:28.374649 kubelet[2412]: E0906 00:21:28.359576 2412 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 6 00:21:28.374649 kubelet[2412]: W0906 00:21:28.359584 2412 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 6 00:21:28.374649 kubelet[2412]: E0906 00:21:28.359595 2412 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 6 00:21:28.374649 kubelet[2412]: E0906 00:21:28.361110 2412 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 6 00:21:28.375165 kubelet[2412]: W0906 00:21:28.361128 2412 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 6 00:21:28.375165 kubelet[2412]: E0906 00:21:28.361147 2412 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 6 00:21:28.375165 kubelet[2412]: E0906 00:21:28.361361 2412 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 6 00:21:28.375165 kubelet[2412]: W0906 00:21:28.361370 2412 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 6 00:21:28.375165 kubelet[2412]: E0906 00:21:28.361382 2412 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 6 00:21:28.375969 kubelet[2412]: E0906 00:21:28.375739 2412 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 6 00:21:28.375969 kubelet[2412]: W0906 00:21:28.375771 2412 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 6 00:21:28.375969 kubelet[2412]: E0906 00:21:28.375806 2412 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 6 00:21:28.378132 kubelet[2412]: E0906 00:21:28.378048 2412 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 6 00:21:28.378132 kubelet[2412]: W0906 00:21:28.378079 2412 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 6 00:21:28.378132 kubelet[2412]: E0906 00:21:28.378122 2412 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 6 00:21:28.378463 kubelet[2412]: E0906 00:21:28.378438 2412 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 6 00:21:28.378463 kubelet[2412]: W0906 00:21:28.378461 2412 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 6 00:21:28.378844 kubelet[2412]: E0906 00:21:28.378575 2412 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 6 00:21:28.378844 kubelet[2412]: E0906 00:21:28.378763 2412 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 6 00:21:28.378844 kubelet[2412]: W0906 00:21:28.378773 2412 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 6 00:21:28.378844 kubelet[2412]: E0906 00:21:28.378808 2412 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 6 00:21:28.379107 kubelet[2412]: E0906 00:21:28.379013 2412 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 6 00:21:28.379107 kubelet[2412]: W0906 00:21:28.379033 2412 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 6 00:21:28.379247 kubelet[2412]: E0906 00:21:28.379235 2412 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 6 00:21:28.379302 kubelet[2412]: W0906 00:21:28.379251 2412 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 6 00:21:28.379352 kubelet[2412]: E0906 00:21:28.379230 2412 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 6 00:21:28.379408 kubelet[2412]: E0906 00:21:28.379360 2412 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 6 00:21:28.380988 kubelet[2412]: E0906 00:21:28.379507 2412 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 6 00:21:28.380988 kubelet[2412]: W0906 00:21:28.379520 2412 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 6 00:21:28.380988 kubelet[2412]: E0906 00:21:28.379661 2412 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 6 00:21:28.380988 kubelet[2412]: E0906 00:21:28.379812 2412 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 6 00:21:28.380988 kubelet[2412]: W0906 00:21:28.379822 2412 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 6 00:21:28.380988 kubelet[2412]: E0906 00:21:28.379837 2412 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 6 00:21:28.380988 kubelet[2412]: E0906 00:21:28.380142 2412 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 6 00:21:28.380988 kubelet[2412]: W0906 00:21:28.380154 2412 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 6 00:21:28.380988 kubelet[2412]: E0906 00:21:28.380181 2412 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 6 00:21:28.380988 kubelet[2412]: E0906 00:21:28.380392 2412 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 6 00:21:28.381407 kubelet[2412]: W0906 00:21:28.380413 2412 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 6 00:21:28.381407 kubelet[2412]: E0906 00:21:28.380431 2412 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 6 00:21:28.382676 kubelet[2412]: E0906 00:21:28.382648 2412 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 6 00:21:28.382676 kubelet[2412]: W0906 00:21:28.382672 2412 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 6 00:21:28.382909 kubelet[2412]: E0906 00:21:28.382858 2412 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 6 00:21:28.382909 kubelet[2412]: E0906 00:21:28.382906 2412 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 6 00:21:28.383044 kubelet[2412]: W0906 00:21:28.382918 2412 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 6 00:21:28.383044 kubelet[2412]: E0906 00:21:28.383031 2412 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 6 00:21:28.383206 kubelet[2412]: E0906 00:21:28.383186 2412 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 6 00:21:28.383206 kubelet[2412]: W0906 00:21:28.383204 2412 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 6 00:21:28.383338 kubelet[2412]: E0906 00:21:28.383294 2412 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 6 00:21:28.384963 kubelet[2412]: E0906 00:21:28.383437 2412 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 6 00:21:28.384963 kubelet[2412]: W0906 00:21:28.383450 2412 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 6 00:21:28.384963 kubelet[2412]: E0906 00:21:28.383542 2412 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 6 00:21:28.384963 kubelet[2412]: E0906 00:21:28.383671 2412 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 6 00:21:28.384963 kubelet[2412]: W0906 00:21:28.383681 2412 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 6 00:21:28.384963 kubelet[2412]: E0906 00:21:28.383696 2412 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 6 00:21:28.384963 kubelet[2412]: E0906 00:21:28.384013 2412 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 6 00:21:28.384963 kubelet[2412]: W0906 00:21:28.384025 2412 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 6 00:21:28.384963 kubelet[2412]: E0906 00:21:28.384043 2412 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 6 00:21:28.384963 kubelet[2412]: E0906 00:21:28.384521 2412 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 6 00:21:28.385417 kubelet[2412]: W0906 00:21:28.384533 2412 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 6 00:21:28.385417 kubelet[2412]: E0906 00:21:28.384552 2412 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 6 00:21:28.385417 kubelet[2412]: E0906 00:21:28.384835 2412 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 6 00:21:28.385417 kubelet[2412]: W0906 00:21:28.384847 2412 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 6 00:21:28.385417 kubelet[2412]: E0906 00:21:28.384943 2412 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 6 00:21:28.385417 kubelet[2412]: E0906 00:21:28.385087 2412 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 6 00:21:28.385417 kubelet[2412]: W0906 00:21:28.385097 2412 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 6 00:21:28.385417 kubelet[2412]: E0906 00:21:28.385121 2412 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 6 00:21:28.385709 kubelet[2412]: E0906 00:21:28.385489 2412 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 6 00:21:28.385709 kubelet[2412]: W0906 00:21:28.385500 2412 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 6 00:21:28.385709 kubelet[2412]: E0906 00:21:28.385512 2412 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 6 00:21:28.352000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:28.407166 kernel: audit: type=1400 audit(1757118088.352:909): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:28.352000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:28.424954 kernel: audit: type=1400 audit(1757118088.352:910): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:28.352000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:28.442189 kubelet[2412]: E0906 00:21:28.429617 2412 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 6 00:21:28.442189 kubelet[2412]: W0906 00:21:28.429641 2412 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 6 00:21:28.442189 kubelet[2412]: E0906 00:21:28.429664 2412 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 6 00:21:28.442964 kernel: audit: type=1400 audit(1757118088.352:911): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:28.352000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:28.459983 kernel: audit: type=1400 audit(1757118088.352:912): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:28.352000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:28.479455 kernel: audit: type=1400 audit(1757118088.352:913): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:28.352000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:28.497029 kernel: audit: type=1400 audit(1757118088.352:914): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:28.352000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:28.515419 env[1421]: time="2025-09-06T00:21:28.502538104Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-node-hxvph,Uid:2f9d9f97-553e-4ac0-9d8a-b1acd377155f,Namespace:calico-system,Attempt:0,} returns sandbox id \"67aa735f5981334ff980d8c65aad7da7493ded66176e034f15a559c71ee4b74f\"" Sep 6 00:21:28.532194 kernel: audit: type=1400 audit(1757118088.352:915): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:28.532346 kernel: audit: type=1400 audit(1757118088.352:916): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:28.352000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:28.352000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:28.551960 kernel: audit: type=1400 audit(1757118088.352:917): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:28.352000 audit: BPF prog-id=123 op=LOAD Sep 6 00:21:28.352000 audit[2897]: AVC avc: denied { bpf } for pid=2897 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:28.352000 audit[2897]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c0001c5c48 a2=10 a3=1c items=0 ppid=2888 pid=2897 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:21:28.352000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3637616137333566353938313333346666393830643863363561616437 Sep 6 00:21:28.352000 audit[2897]: AVC avc: denied { perfmon } for pid=2897 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:28.352000 audit[2897]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001c56b0 a2=3c a3=c items=0 ppid=2888 pid=2897 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:21:28.352000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3637616137333566353938313333346666393830643863363561616437 Sep 6 00:21:28.352000 audit[2897]: AVC avc: denied { bpf } for pid=2897 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:28.352000 audit[2897]: AVC avc: denied { bpf } for pid=2897 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:28.352000 audit[2897]: AVC avc: denied { bpf } for pid=2897 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:28.352000 audit[2897]: AVC avc: denied { perfmon } for pid=2897 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:28.352000 audit[2897]: AVC avc: denied { perfmon } for pid=2897 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:28.352000 audit[2897]: AVC avc: denied { perfmon } for pid=2897 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:28.352000 audit[2897]: AVC avc: denied { perfmon } for pid=2897 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:28.352000 audit[2897]: AVC avc: denied { perfmon } for pid=2897 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:28.352000 audit[2897]: AVC avc: denied { bpf } for pid=2897 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:28.352000 audit[2897]: AVC avc: denied { bpf } for pid=2897 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:28.352000 audit: BPF prog-id=124 op=LOAD Sep 6 00:21:28.352000 audit[2897]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001c59d8 a2=78 a3=c00025ee60 items=0 ppid=2888 pid=2897 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:21:28.352000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3637616137333566353938313333346666393830643863363561616437 Sep 6 00:21:28.374000 audit[2897]: AVC avc: denied { bpf } for pid=2897 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:28.374000 audit[2897]: AVC avc: denied { bpf } for pid=2897 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:28.374000 audit[2897]: AVC avc: denied { perfmon } for pid=2897 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:28.374000 audit[2897]: AVC avc: denied { perfmon } for pid=2897 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:28.374000 audit[2897]: AVC avc: denied { perfmon } for pid=2897 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:28.374000 audit[2897]: AVC avc: denied { perfmon } for pid=2897 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:28.374000 audit[2897]: AVC avc: denied { perfmon } for pid=2897 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:28.374000 audit[2897]: AVC avc: denied { bpf } for pid=2897 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:28.374000 audit[2897]: AVC avc: denied { bpf } for pid=2897 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:28.374000 audit: BPF prog-id=125 op=LOAD Sep 6 00:21:28.374000 audit[2897]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c0001c5770 a2=78 a3=c0000a5618 items=0 ppid=2888 pid=2897 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:21:28.374000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3637616137333566353938313333346666393830643863363561616437 Sep 6 00:21:28.424000 audit: BPF prog-id=125 op=UNLOAD Sep 6 00:21:28.424000 audit: BPF prog-id=124 op=UNLOAD Sep 6 00:21:28.424000 audit[2897]: AVC avc: denied { bpf } for pid=2897 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:28.424000 audit[2897]: AVC avc: denied { bpf } for pid=2897 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:28.424000 audit[2897]: AVC avc: denied { bpf } for pid=2897 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:28.424000 audit[2897]: AVC avc: denied { perfmon } for pid=2897 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:28.424000 audit[2897]: AVC avc: denied { perfmon } for pid=2897 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:28.424000 audit[2897]: AVC avc: denied { perfmon } for pid=2897 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:28.424000 audit[2897]: AVC avc: denied { perfmon } for pid=2897 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:28.424000 audit[2897]: AVC avc: denied { perfmon } for pid=2897 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:28.424000 audit[2897]: AVC avc: denied { bpf } for pid=2897 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:28.424000 audit[2897]: AVC avc: denied { bpf } for pid=2897 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:28.424000 audit: BPF prog-id=126 op=LOAD Sep 6 00:21:28.424000 audit[2897]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001c5c30 a2=78 a3=c0000a5a28 items=0 ppid=2888 pid=2897 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:21:28.424000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3637616137333566353938313333346666393830643863363561616437 Sep 6 00:21:28.489000 audit[2950]: NETFILTER_CFG table=filter:104 family=2 entries=20 op=nft_register_rule pid=2950 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Sep 6 00:21:28.489000 audit[2950]: SYSCALL arch=c000003e syscall=46 success=yes exit=8224 a0=3 a1=7ffc66484cc0 a2=0 a3=7ffc66484cac items=0 ppid=2518 pid=2950 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:21:28.489000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Sep 6 00:21:28.497000 audit[2950]: NETFILTER_CFG table=nat:105 family=2 entries=12 op=nft_register_rule pid=2950 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Sep 6 00:21:28.497000 audit[2950]: SYSCALL arch=c000003e syscall=46 success=yes exit=2700 a0=3 a1=7ffc66484cc0 a2=0 a3=0 items=0 ppid=2518 pid=2950 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:21:28.497000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Sep 6 00:21:28.860541 systemd[1]: run-containerd-runc-k8s.io-b00091ae7c6ec431c9606cb6c570b52eb52af0e70a78768b7a29d26009416f2e-runc.AqtBBQ.mount: Deactivated successfully. Sep 6 00:21:29.485089 kubelet[2412]: E0906 00:21:29.485044 2412 pod_workers.go:1301] "Error syncing pod, skipping" err="network is not ready: container runtime network not ready: NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" pod="calico-system/csi-node-driver-pb785" podUID="1ea5f5bc-3af9-4595-8783-60d58914430c" Sep 6 00:21:29.550541 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount3744144470.mount: Deactivated successfully. Sep 6 00:21:30.994392 env[1421]: time="2025-09-06T00:21:30.994329362Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/typha:v3.30.3,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 6 00:21:31.002011 env[1421]: time="2025-09-06T00:21:31.001955619Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:1d7bb7b0cce2924d35c7c26f6b6600409ea7c9535074c3d2e517ffbb3a0e0b36,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 6 00:21:31.007071 env[1421]: time="2025-09-06T00:21:31.007018055Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/typha:v3.30.3,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 6 00:21:31.011846 env[1421]: time="2025-09-06T00:21:31.011800690Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/typha@sha256:f4a3d61ffda9c98a53adeb412c5af404ca3727a3cc2d0b4ef28d197bdd47ecaa,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 6 00:21:31.012274 env[1421]: time="2025-09-06T00:21:31.012237694Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/typha:v3.30.3\" returns image reference \"sha256:1d7bb7b0cce2924d35c7c26f6b6600409ea7c9535074c3d2e517ffbb3a0e0b36\"" Sep 6 00:21:31.016980 env[1421]: time="2025-09-06T00:21:31.015491617Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/pod2daemon-flexvol:v3.30.3\"" Sep 6 00:21:31.046049 env[1421]: time="2025-09-06T00:21:31.045996940Z" level=info msg="CreateContainer within sandbox \"b00091ae7c6ec431c9606cb6c570b52eb52af0e70a78768b7a29d26009416f2e\" for container &ContainerMetadata{Name:calico-typha,Attempt:0,}" Sep 6 00:21:31.094979 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount3930259621.mount: Deactivated successfully. Sep 6 00:21:31.110488 env[1421]: time="2025-09-06T00:21:31.110426710Z" level=info msg="CreateContainer within sandbox \"b00091ae7c6ec431c9606cb6c570b52eb52af0e70a78768b7a29d26009416f2e\" for &ContainerMetadata{Name:calico-typha,Attempt:0,} returns container id \"9bda28964d58ee1ced7d36fb2a2884e44d66082ac5c2bd3b7248125276d29ce5\"" Sep 6 00:21:31.113225 env[1421]: time="2025-09-06T00:21:31.113172830Z" level=info msg="StartContainer for \"9bda28964d58ee1ced7d36fb2a2884e44d66082ac5c2bd3b7248125276d29ce5\"" Sep 6 00:21:31.148869 systemd[1]: Started cri-containerd-9bda28964d58ee1ced7d36fb2a2884e44d66082ac5c2bd3b7248125276d29ce5.scope. Sep 6 00:21:31.173000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:31.173000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:31.174000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:31.174000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:31.174000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:31.174000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:31.174000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:31.174000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:31.174000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:31.174000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:31.174000 audit: BPF prog-id=127 op=LOAD Sep 6 00:21:31.175000 audit[2961]: AVC avc: denied { bpf } for pid=2961 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:31.175000 audit[2961]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000199c48 a2=10 a3=1c items=0 ppid=2807 pid=2961 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:21:31.175000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3962646132383936346435386565316365643764333666623261323838 Sep 6 00:21:31.176000 audit[2961]: AVC avc: denied { perfmon } for pid=2961 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:31.176000 audit[2961]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001996b0 a2=3c a3=8 items=0 ppid=2807 pid=2961 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:21:31.176000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3962646132383936346435386565316365643764333666623261323838 Sep 6 00:21:31.176000 audit[2961]: AVC avc: denied { bpf } for pid=2961 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:31.176000 audit[2961]: AVC avc: denied { bpf } for pid=2961 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:31.176000 audit[2961]: AVC avc: denied { bpf } for pid=2961 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:31.176000 audit[2961]: AVC avc: denied { perfmon } for pid=2961 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:31.176000 audit[2961]: AVC avc: denied { perfmon } for pid=2961 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:31.176000 audit[2961]: AVC avc: denied { perfmon } for pid=2961 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:31.176000 audit[2961]: AVC avc: denied { perfmon } for pid=2961 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:31.176000 audit[2961]: AVC avc: denied { perfmon } for pid=2961 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:31.176000 audit[2961]: AVC avc: denied { bpf } for pid=2961 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:31.176000 audit[2961]: AVC avc: denied { bpf } for pid=2961 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:31.176000 audit: BPF prog-id=128 op=LOAD Sep 6 00:21:31.176000 audit[2961]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001999d8 a2=78 a3=c0000d3cf0 items=0 ppid=2807 pid=2961 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:21:31.176000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3962646132383936346435386565316365643764333666623261323838 Sep 6 00:21:31.176000 audit[2961]: AVC avc: denied { bpf } for pid=2961 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:31.176000 audit[2961]: AVC avc: denied { bpf } for pid=2961 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:31.176000 audit[2961]: AVC avc: denied { perfmon } for pid=2961 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:31.176000 audit[2961]: AVC avc: denied { perfmon } for pid=2961 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:31.176000 audit[2961]: AVC avc: denied { perfmon } for pid=2961 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:31.176000 audit[2961]: AVC avc: denied { perfmon } for pid=2961 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:31.176000 audit[2961]: AVC avc: denied { perfmon } for pid=2961 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:31.176000 audit[2961]: AVC avc: denied { bpf } for pid=2961 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:31.176000 audit[2961]: AVC avc: denied { bpf } for pid=2961 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:31.176000 audit: BPF prog-id=129 op=LOAD Sep 6 00:21:31.176000 audit[2961]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000199770 a2=78 a3=c0000d3d38 items=0 ppid=2807 pid=2961 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:21:31.176000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3962646132383936346435386565316365643764333666623261323838 Sep 6 00:21:31.176000 audit: BPF prog-id=129 op=UNLOAD Sep 6 00:21:31.177000 audit: BPF prog-id=128 op=UNLOAD Sep 6 00:21:31.177000 audit[2961]: AVC avc: denied { bpf } for pid=2961 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:31.177000 audit[2961]: AVC avc: denied { bpf } for pid=2961 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:31.177000 audit[2961]: AVC avc: denied { bpf } for pid=2961 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:31.177000 audit[2961]: AVC avc: denied { perfmon } for pid=2961 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:31.177000 audit[2961]: AVC avc: denied { perfmon } for pid=2961 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:31.177000 audit[2961]: AVC avc: denied { perfmon } for pid=2961 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:31.177000 audit[2961]: AVC avc: denied { perfmon } for pid=2961 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:31.177000 audit[2961]: AVC avc: denied { perfmon } for pid=2961 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:31.177000 audit[2961]: AVC avc: denied { bpf } for pid=2961 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:31.177000 audit[2961]: AVC avc: denied { bpf } for pid=2961 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:31.177000 audit: BPF prog-id=130 op=LOAD Sep 6 00:21:31.177000 audit[2961]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000199c30 a2=78 a3=c0003d4148 items=0 ppid=2807 pid=2961 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:21:31.177000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3962646132383936346435386565316365643764333666623261323838 Sep 6 00:21:31.225003 env[1421]: time="2025-09-06T00:21:31.224942645Z" level=info msg="StartContainer for \"9bda28964d58ee1ced7d36fb2a2884e44d66082ac5c2bd3b7248125276d29ce5\" returns successfully" Sep 6 00:21:31.485939 kubelet[2412]: E0906 00:21:31.485510 2412 pod_workers.go:1301] "Error syncing pod, skipping" err="network is not ready: container runtime network not ready: NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" pod="calico-system/csi-node-driver-pb785" podUID="1ea5f5bc-3af9-4595-8783-60d58914430c" Sep 6 00:21:31.670591 kubelet[2412]: E0906 00:21:31.670542 2412 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 6 00:21:31.670591 kubelet[2412]: W0906 00:21:31.670582 2412 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 6 00:21:31.670909 kubelet[2412]: E0906 00:21:31.670615 2412 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 6 00:21:31.670909 kubelet[2412]: E0906 00:21:31.670880 2412 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 6 00:21:31.670909 kubelet[2412]: W0906 00:21:31.670894 2412 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 6 00:21:31.670909 kubelet[2412]: E0906 00:21:31.670911 2412 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 6 00:21:31.671156 kubelet[2412]: E0906 00:21:31.671137 2412 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 6 00:21:31.671209 kubelet[2412]: W0906 00:21:31.671158 2412 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 6 00:21:31.671209 kubelet[2412]: E0906 00:21:31.671182 2412 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 6 00:21:31.671424 kubelet[2412]: E0906 00:21:31.671399 2412 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 6 00:21:31.671517 kubelet[2412]: W0906 00:21:31.671431 2412 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 6 00:21:31.671517 kubelet[2412]: E0906 00:21:31.671446 2412 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 6 00:21:31.671698 kubelet[2412]: E0906 00:21:31.671677 2412 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 6 00:21:31.671780 kubelet[2412]: W0906 00:21:31.671698 2412 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 6 00:21:31.671780 kubelet[2412]: E0906 00:21:31.671723 2412 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 6 00:21:31.672042 kubelet[2412]: E0906 00:21:31.672019 2412 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 6 00:21:31.672042 kubelet[2412]: W0906 00:21:31.672041 2412 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 6 00:21:31.672177 kubelet[2412]: E0906 00:21:31.672057 2412 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 6 00:21:31.672296 kubelet[2412]: E0906 00:21:31.672278 2412 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 6 00:21:31.672296 kubelet[2412]: W0906 00:21:31.672296 2412 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 6 00:21:31.672429 kubelet[2412]: E0906 00:21:31.672317 2412 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 6 00:21:31.672548 kubelet[2412]: E0906 00:21:31.672529 2412 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 6 00:21:31.672606 kubelet[2412]: W0906 00:21:31.672548 2412 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 6 00:21:31.672606 kubelet[2412]: E0906 00:21:31.672568 2412 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 6 00:21:31.672810 kubelet[2412]: E0906 00:21:31.672792 2412 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 6 00:21:31.672810 kubelet[2412]: W0906 00:21:31.672808 2412 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 6 00:21:31.672952 kubelet[2412]: E0906 00:21:31.672829 2412 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 6 00:21:31.673064 kubelet[2412]: E0906 00:21:31.673047 2412 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 6 00:21:31.673129 kubelet[2412]: W0906 00:21:31.673064 2412 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 6 00:21:31.673129 kubelet[2412]: E0906 00:21:31.673085 2412 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 6 00:21:31.673336 kubelet[2412]: E0906 00:21:31.673303 2412 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 6 00:21:31.673336 kubelet[2412]: W0906 00:21:31.673321 2412 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 6 00:21:31.673471 kubelet[2412]: E0906 00:21:31.673341 2412 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 6 00:21:31.673570 kubelet[2412]: E0906 00:21:31.673553 2412 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 6 00:21:31.673627 kubelet[2412]: W0906 00:21:31.673569 2412 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 6 00:21:31.673627 kubelet[2412]: E0906 00:21:31.673591 2412 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 6 00:21:31.673834 kubelet[2412]: E0906 00:21:31.673814 2412 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 6 00:21:31.673834 kubelet[2412]: W0906 00:21:31.673832 2412 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 6 00:21:31.673970 kubelet[2412]: E0906 00:21:31.673853 2412 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 6 00:21:31.674117 kubelet[2412]: E0906 00:21:31.674093 2412 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 6 00:21:31.674191 kubelet[2412]: W0906 00:21:31.674117 2412 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 6 00:21:31.674191 kubelet[2412]: E0906 00:21:31.674131 2412 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 6 00:21:31.674433 kubelet[2412]: E0906 00:21:31.674412 2412 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 6 00:21:31.674501 kubelet[2412]: W0906 00:21:31.674438 2412 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 6 00:21:31.674501 kubelet[2412]: E0906 00:21:31.674453 2412 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 6 00:21:31.684994 kubelet[2412]: E0906 00:21:31.684949 2412 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 6 00:21:31.684994 kubelet[2412]: W0906 00:21:31.684985 2412 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 6 00:21:31.685275 kubelet[2412]: E0906 00:21:31.685017 2412 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 6 00:21:31.685397 kubelet[2412]: E0906 00:21:31.685364 2412 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 6 00:21:31.685397 kubelet[2412]: W0906 00:21:31.685383 2412 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 6 00:21:31.685509 kubelet[2412]: E0906 00:21:31.685413 2412 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 6 00:21:31.685735 kubelet[2412]: E0906 00:21:31.685711 2412 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 6 00:21:31.685735 kubelet[2412]: W0906 00:21:31.685731 2412 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 6 00:21:31.685859 kubelet[2412]: E0906 00:21:31.685749 2412 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 6 00:21:31.686045 kubelet[2412]: E0906 00:21:31.686026 2412 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 6 00:21:31.686045 kubelet[2412]: W0906 00:21:31.686045 2412 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 6 00:21:31.686190 kubelet[2412]: E0906 00:21:31.686065 2412 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 6 00:21:31.686309 kubelet[2412]: E0906 00:21:31.686292 2412 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 6 00:21:31.686309 kubelet[2412]: W0906 00:21:31.686308 2412 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 6 00:21:31.686417 kubelet[2412]: E0906 00:21:31.686325 2412 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 6 00:21:31.686551 kubelet[2412]: E0906 00:21:31.686535 2412 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 6 00:21:31.686615 kubelet[2412]: W0906 00:21:31.686551 2412 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 6 00:21:31.686683 kubelet[2412]: E0906 00:21:31.686646 2412 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 6 00:21:31.686826 kubelet[2412]: E0906 00:21:31.686809 2412 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 6 00:21:31.686888 kubelet[2412]: W0906 00:21:31.686826 2412 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 6 00:21:31.686971 kubelet[2412]: E0906 00:21:31.686915 2412 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 6 00:21:31.687096 kubelet[2412]: E0906 00:21:31.687077 2412 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 6 00:21:31.687153 kubelet[2412]: W0906 00:21:31.687103 2412 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 6 00:21:31.687247 kubelet[2412]: E0906 00:21:31.687230 2412 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 6 00:21:31.687386 kubelet[2412]: E0906 00:21:31.687370 2412 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 6 00:21:31.687441 kubelet[2412]: W0906 00:21:31.687387 2412 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 6 00:21:31.687441 kubelet[2412]: E0906 00:21:31.687403 2412 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 6 00:21:31.687885 kubelet[2412]: E0906 00:21:31.687861 2412 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 6 00:21:31.687885 kubelet[2412]: W0906 00:21:31.687881 2412 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 6 00:21:31.688041 kubelet[2412]: E0906 00:21:31.687898 2412 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 6 00:21:31.690233 kubelet[2412]: E0906 00:21:31.690203 2412 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 6 00:21:31.690233 kubelet[2412]: W0906 00:21:31.690226 2412 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 6 00:21:31.690395 kubelet[2412]: E0906 00:21:31.690247 2412 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 6 00:21:31.690484 kubelet[2412]: E0906 00:21:31.690467 2412 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 6 00:21:31.690539 kubelet[2412]: W0906 00:21:31.690488 2412 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 6 00:21:31.690592 kubelet[2412]: E0906 00:21:31.690578 2412 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 6 00:21:31.690736 kubelet[2412]: E0906 00:21:31.690719 2412 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 6 00:21:31.690736 kubelet[2412]: W0906 00:21:31.690736 2412 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 6 00:21:31.690842 kubelet[2412]: E0906 00:21:31.690753 2412 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 6 00:21:31.691142 kubelet[2412]: E0906 00:21:31.691117 2412 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 6 00:21:31.691142 kubelet[2412]: W0906 00:21:31.691139 2412 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 6 00:21:31.691278 kubelet[2412]: E0906 00:21:31.691159 2412 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 6 00:21:31.691430 kubelet[2412]: E0906 00:21:31.691411 2412 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 6 00:21:31.691489 kubelet[2412]: W0906 00:21:31.691429 2412 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 6 00:21:31.691489 kubelet[2412]: E0906 00:21:31.691447 2412 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 6 00:21:31.691895 kubelet[2412]: E0906 00:21:31.691872 2412 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 6 00:21:31.691895 kubelet[2412]: W0906 00:21:31.691892 2412 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 6 00:21:31.692115 kubelet[2412]: E0906 00:21:31.692090 2412 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 6 00:21:31.692370 kubelet[2412]: E0906 00:21:31.692347 2412 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 6 00:21:31.692370 kubelet[2412]: W0906 00:21:31.692367 2412 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 6 00:21:31.692489 kubelet[2412]: E0906 00:21:31.692383 2412 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 6 00:21:31.693633 kubelet[2412]: E0906 00:21:31.693607 2412 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 6 00:21:31.693633 kubelet[2412]: W0906 00:21:31.693628 2412 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 6 00:21:31.693799 kubelet[2412]: E0906 00:21:31.693645 2412 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 6 00:21:32.459179 env[1421]: time="2025-09-06T00:21:32.459113173Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/pod2daemon-flexvol:v3.30.3,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 6 00:21:32.466326 env[1421]: time="2025-09-06T00:21:32.466274024Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:4f2b088ed6fdfc6a97ac0650a4ba8171107d6656ce265c592e4c8423fd10e5c4,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 6 00:21:32.472333 env[1421]: time="2025-09-06T00:21:32.472273567Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/pod2daemon-flexvol:v3.30.3,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 6 00:21:32.476700 env[1421]: time="2025-09-06T00:21:32.476648498Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/pod2daemon-flexvol@sha256:81bdfcd9dbd36624dc35354e8c181c75631ba40e6c7df5820f5f56cea36f0ef9,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 6 00:21:32.477149 env[1421]: time="2025-09-06T00:21:32.477110002Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/pod2daemon-flexvol:v3.30.3\" returns image reference \"sha256:4f2b088ed6fdfc6a97ac0650a4ba8171107d6656ce265c592e4c8423fd10e5c4\"" Sep 6 00:21:32.480594 env[1421]: time="2025-09-06T00:21:32.480557726Z" level=info msg="CreateContainer within sandbox \"67aa735f5981334ff980d8c65aad7da7493ded66176e034f15a559c71ee4b74f\" for container &ContainerMetadata{Name:flexvol-driver,Attempt:0,}" Sep 6 00:21:32.514212 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount3146095440.mount: Deactivated successfully. Sep 6 00:21:32.532899 env[1421]: time="2025-09-06T00:21:32.532833799Z" level=info msg="CreateContainer within sandbox \"67aa735f5981334ff980d8c65aad7da7493ded66176e034f15a559c71ee4b74f\" for &ContainerMetadata{Name:flexvol-driver,Attempt:0,} returns container id \"d4367a451123f6789b2637b2366e3ff3bec15464b096393d914091dfb80424aa\"" Sep 6 00:21:32.534595 env[1421]: time="2025-09-06T00:21:32.533604504Z" level=info msg="StartContainer for \"d4367a451123f6789b2637b2366e3ff3bec15464b096393d914091dfb80424aa\"" Sep 6 00:21:32.573712 systemd[1]: Started cri-containerd-d4367a451123f6789b2637b2366e3ff3bec15464b096393d914091dfb80424aa.scope. Sep 6 00:21:32.591000 audit[3035]: AVC avc: denied { perfmon } for pid=3035 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:32.591000 audit[3035]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=0 a1=c00011f6b0 a2=3c a3=7f44218a81c8 items=0 ppid=2888 pid=3035 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:21:32.591000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6434333637613435313132336636373839623236333762323336366533 Sep 6 00:21:32.592000 audit[3035]: AVC avc: denied { bpf } for pid=3035 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:32.592000 audit[3035]: AVC avc: denied { bpf } for pid=3035 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:32.592000 audit[3035]: AVC avc: denied { bpf } for pid=3035 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:32.592000 audit[3035]: AVC avc: denied { perfmon } for pid=3035 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:32.592000 audit[3035]: AVC avc: denied { perfmon } for pid=3035 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:32.592000 audit[3035]: AVC avc: denied { perfmon } for pid=3035 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:32.592000 audit[3035]: AVC avc: denied { perfmon } for pid=3035 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:32.592000 audit[3035]: AVC avc: denied { perfmon } for pid=3035 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:32.592000 audit[3035]: AVC avc: denied { bpf } for pid=3035 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:32.592000 audit[3035]: AVC avc: denied { bpf } for pid=3035 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:32.592000 audit: BPF prog-id=131 op=LOAD Sep 6 00:21:32.592000 audit[3035]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c00011f9d8 a2=78 a3=c00037c688 items=0 ppid=2888 pid=3035 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:21:32.592000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6434333637613435313132336636373839623236333762323336366533 Sep 6 00:21:32.592000 audit[3035]: AVC avc: denied { bpf } for pid=3035 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:32.592000 audit[3035]: AVC avc: denied { bpf } for pid=3035 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:32.592000 audit[3035]: AVC avc: denied { perfmon } for pid=3035 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:32.592000 audit[3035]: AVC avc: denied { perfmon } for pid=3035 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:32.592000 audit[3035]: AVC avc: denied { perfmon } for pid=3035 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:32.592000 audit[3035]: AVC avc: denied { perfmon } for pid=3035 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:32.592000 audit[3035]: AVC avc: denied { perfmon } for pid=3035 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:32.592000 audit[3035]: AVC avc: denied { bpf } for pid=3035 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:32.592000 audit[3035]: AVC avc: denied { bpf } for pid=3035 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:32.592000 audit: BPF prog-id=132 op=LOAD Sep 6 00:21:32.592000 audit[3035]: SYSCALL arch=c000003e syscall=321 success=yes exit=17 a0=5 a1=c00011f770 a2=78 a3=c00037c6d8 items=0 ppid=2888 pid=3035 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:21:32.592000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6434333637613435313132336636373839623236333762323336366533 Sep 6 00:21:32.592000 audit: BPF prog-id=132 op=UNLOAD Sep 6 00:21:32.592000 audit: BPF prog-id=131 op=UNLOAD Sep 6 00:21:32.592000 audit[3035]: AVC avc: denied { bpf } for pid=3035 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:32.592000 audit[3035]: AVC avc: denied { bpf } for pid=3035 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:32.592000 audit[3035]: AVC avc: denied { bpf } for pid=3035 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:32.592000 audit[3035]: AVC avc: denied { perfmon } for pid=3035 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:32.592000 audit[3035]: AVC avc: denied { perfmon } for pid=3035 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:32.592000 audit[3035]: AVC avc: denied { perfmon } for pid=3035 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:32.592000 audit[3035]: AVC avc: denied { perfmon } for pid=3035 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:32.592000 audit[3035]: AVC avc: denied { perfmon } for pid=3035 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:32.592000 audit[3035]: AVC avc: denied { bpf } for pid=3035 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:32.592000 audit[3035]: AVC avc: denied { bpf } for pid=3035 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:32.592000 audit: BPF prog-id=133 op=LOAD Sep 6 00:21:32.592000 audit[3035]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c00011fc30 a2=78 a3=c00037c768 items=0 ppid=2888 pid=3035 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:21:32.592000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6434333637613435313132336636373839623236333762323336366533 Sep 6 00:21:32.609254 kubelet[2412]: I0906 00:21:32.608684 2412 prober_manager.go:312] "Failed to trigger a manual run" probe="Readiness" Sep 6 00:21:32.615237 env[1421]: time="2025-09-06T00:21:32.615149786Z" level=info msg="StartContainer for \"d4367a451123f6789b2637b2366e3ff3bec15464b096393d914091dfb80424aa\" returns successfully" Sep 6 00:21:32.625285 systemd[1]: cri-containerd-d4367a451123f6789b2637b2366e3ff3bec15464b096393d914091dfb80424aa.scope: Deactivated successfully. Sep 6 00:21:32.627000 audit: BPF prog-id=133 op=UNLOAD Sep 6 00:21:33.021906 systemd[1]: run-containerd-runc-k8s.io-d4367a451123f6789b2637b2366e3ff3bec15464b096393d914091dfb80424aa-runc.8wrCIn.mount: Deactivated successfully. Sep 6 00:21:33.022137 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-d4367a451123f6789b2637b2366e3ff3bec15464b096393d914091dfb80424aa-rootfs.mount: Deactivated successfully. Sep 6 00:21:33.485819 kubelet[2412]: E0906 00:21:33.485751 2412 pod_workers.go:1301] "Error syncing pod, skipping" err="network is not ready: container runtime network not ready: NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" pod="calico-system/csi-node-driver-pb785" podUID="1ea5f5bc-3af9-4595-8783-60d58914430c" Sep 6 00:21:33.630115 kubelet[2412]: I0906 00:21:33.630035 2412 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="calico-system/calico-typha-9f67887d8-sjz72" podStartSLOduration=3.698575833 podStartE2EDuration="6.630007921s" podCreationTimestamp="2025-09-06 00:21:27 +0000 UTC" firstStartedPulling="2025-09-06 00:21:28.082110115 +0000 UTC m=+19.987456250" lastFinishedPulling="2025-09-06 00:21:31.013542303 +0000 UTC m=+22.918888338" observedRunningTime="2025-09-06 00:21:31.62313075 +0000 UTC m=+23.528476785" watchObservedRunningTime="2025-09-06 00:21:33.630007921 +0000 UTC m=+25.535353956" Sep 6 00:21:34.139818 env[1421]: time="2025-09-06T00:21:34.139750153Z" level=info msg="shim disconnected" id=d4367a451123f6789b2637b2366e3ff3bec15464b096393d914091dfb80424aa Sep 6 00:21:34.140462 env[1421]: time="2025-09-06T00:21:34.140429657Z" level=warning msg="cleaning up after shim disconnected" id=d4367a451123f6789b2637b2366e3ff3bec15464b096393d914091dfb80424aa namespace=k8s.io Sep 6 00:21:34.140580 env[1421]: time="2025-09-06T00:21:34.140559658Z" level=info msg="cleaning up dead shim" Sep 6 00:21:34.154075 env[1421]: time="2025-09-06T00:21:34.154017650Z" level=warning msg="cleanup warnings time=\"2025-09-06T00:21:34Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=3077 runtime=io.containerd.runc.v2\n" Sep 6 00:21:34.617622 env[1421]: time="2025-09-06T00:21:34.616977105Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/cni:v3.30.3\"" Sep 6 00:21:35.485634 kubelet[2412]: E0906 00:21:35.485443 2412 pod_workers.go:1301] "Error syncing pod, skipping" err="network is not ready: container runtime network not ready: NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" pod="calico-system/csi-node-driver-pb785" podUID="1ea5f5bc-3af9-4595-8783-60d58914430c" Sep 6 00:21:37.485528 kubelet[2412]: E0906 00:21:37.485467 2412 pod_workers.go:1301] "Error syncing pod, skipping" err="network is not ready: container runtime network not ready: NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" pod="calico-system/csi-node-driver-pb785" podUID="1ea5f5bc-3af9-4595-8783-60d58914430c" Sep 6 00:21:39.029983 env[1421]: time="2025-09-06T00:21:39.029905503Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/cni:v3.30.3,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 6 00:21:39.035818 env[1421]: time="2025-09-06T00:21:39.035766539Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:034822460c2f667e1f4a7679c843cc35ce1bf2c25dec86f04e07fb403df7e458,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 6 00:21:39.039106 env[1421]: time="2025-09-06T00:21:39.039065659Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/cni:v3.30.3,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 6 00:21:39.044566 env[1421]: time="2025-09-06T00:21:39.044521592Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/cni@sha256:73d1e391050490d54e5bee8ff2b1a50a8be1746c98dc530361b00e8c0ab63f87,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 6 00:21:39.045167 env[1421]: time="2025-09-06T00:21:39.045132496Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/cni:v3.30.3\" returns image reference \"sha256:034822460c2f667e1f4a7679c843cc35ce1bf2c25dec86f04e07fb403df7e458\"" Sep 6 00:21:39.048401 env[1421]: time="2025-09-06T00:21:39.048362716Z" level=info msg="CreateContainer within sandbox \"67aa735f5981334ff980d8c65aad7da7493ded66176e034f15a559c71ee4b74f\" for container &ContainerMetadata{Name:install-cni,Attempt:0,}" Sep 6 00:21:39.091169 env[1421]: time="2025-09-06T00:21:39.091108777Z" level=info msg="CreateContainer within sandbox \"67aa735f5981334ff980d8c65aad7da7493ded66176e034f15a559c71ee4b74f\" for &ContainerMetadata{Name:install-cni,Attempt:0,} returns container id \"5e96351afd6790bf8a8fe61237a0d7a078dd8a9d42edb25b46c68891fab084b0\"" Sep 6 00:21:39.093665 env[1421]: time="2025-09-06T00:21:39.091904282Z" level=info msg="StartContainer for \"5e96351afd6790bf8a8fe61237a0d7a078dd8a9d42edb25b46c68891fab084b0\"" Sep 6 00:21:39.126996 systemd[1]: run-containerd-runc-k8s.io-5e96351afd6790bf8a8fe61237a0d7a078dd8a9d42edb25b46c68891fab084b0-runc.3HtGuR.mount: Deactivated successfully. Sep 6 00:21:39.131609 systemd[1]: Started cri-containerd-5e96351afd6790bf8a8fe61237a0d7a078dd8a9d42edb25b46c68891fab084b0.scope. Sep 6 00:21:39.168779 kernel: kauditd_printk_skb: 154 callbacks suppressed Sep 6 00:21:39.169071 kernel: audit: type=1400 audit(1757118099.146:953): avc: denied { perfmon } for pid=3098 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:39.169154 kernel: audit: type=1300 audit(1757118099.146:953): arch=c000003e syscall=321 success=yes exit=15 a0=0 a1=c0001976b0 a2=3c a3=7f22b1d32998 items=0 ppid=2888 pid=3098 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:21:39.146000 audit[3098]: AVC avc: denied { perfmon } for pid=3098 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:39.146000 audit[3098]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=0 a1=c0001976b0 a2=3c a3=7f22b1d32998 items=0 ppid=2888 pid=3098 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:21:39.146000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3565393633353161666436373930626638613866653631323337613064 Sep 6 00:21:39.219017 kernel: audit: type=1327 audit(1757118099.146:953): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3565393633353161666436373930626638613866653631323337613064 Sep 6 00:21:39.146000 audit[3098]: AVC avc: denied { bpf } for pid=3098 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:39.236161 kernel: audit: type=1400 audit(1757118099.146:954): avc: denied { bpf } for pid=3098 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:39.236281 kernel: audit: type=1400 audit(1757118099.146:954): avc: denied { bpf } for pid=3098 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:39.146000 audit[3098]: AVC avc: denied { bpf } for pid=3098 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:39.146000 audit[3098]: AVC avc: denied { bpf } for pid=3098 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:39.269256 kernel: audit: type=1400 audit(1757118099.146:954): avc: denied { bpf } for pid=3098 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:39.273533 env[1421]: time="2025-09-06T00:21:39.273468691Z" level=info msg="StartContainer for \"5e96351afd6790bf8a8fe61237a0d7a078dd8a9d42edb25b46c68891fab084b0\" returns successfully" Sep 6 00:21:39.146000 audit[3098]: AVC avc: denied { perfmon } for pid=3098 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:39.291971 kernel: audit: type=1400 audit(1757118099.146:954): avc: denied { perfmon } for pid=3098 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:39.146000 audit[3098]: AVC avc: denied { perfmon } for pid=3098 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:39.313948 kernel: audit: type=1400 audit(1757118099.146:954): avc: denied { perfmon } for pid=3098 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:39.146000 audit[3098]: AVC avc: denied { perfmon } for pid=3098 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:39.146000 audit[3098]: AVC avc: denied { perfmon } for pid=3098 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:39.352821 kernel: audit: type=1400 audit(1757118099.146:954): avc: denied { perfmon } for pid=3098 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:39.353041 kernel: audit: type=1400 audit(1757118099.146:954): avc: denied { perfmon } for pid=3098 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:39.146000 audit[3098]: AVC avc: denied { perfmon } for pid=3098 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:39.146000 audit[3098]: AVC avc: denied { bpf } for pid=3098 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:39.146000 audit[3098]: AVC avc: denied { bpf } for pid=3098 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:39.146000 audit: BPF prog-id=134 op=LOAD Sep 6 00:21:39.146000 audit[3098]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c0001979d8 a2=78 a3=c0000ae4c8 items=0 ppid=2888 pid=3098 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:21:39.146000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3565393633353161666436373930626638613866653631323337613064 Sep 6 00:21:39.192000 audit[3098]: AVC avc: denied { bpf } for pid=3098 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:39.192000 audit[3098]: AVC avc: denied { bpf } for pid=3098 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:39.192000 audit[3098]: AVC avc: denied { perfmon } for pid=3098 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:39.192000 audit[3098]: AVC avc: denied { perfmon } for pid=3098 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:39.192000 audit[3098]: AVC avc: denied { perfmon } for pid=3098 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:39.192000 audit[3098]: AVC avc: denied { perfmon } for pid=3098 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:39.192000 audit[3098]: AVC avc: denied { perfmon } for pid=3098 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:39.192000 audit[3098]: AVC avc: denied { bpf } for pid=3098 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:39.192000 audit[3098]: AVC avc: denied { bpf } for pid=3098 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:39.192000 audit: BPF prog-id=135 op=LOAD Sep 6 00:21:39.192000 audit[3098]: SYSCALL arch=c000003e syscall=321 success=yes exit=17 a0=5 a1=c000197770 a2=78 a3=c0000ae518 items=0 ppid=2888 pid=3098 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:21:39.192000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3565393633353161666436373930626638613866653631323337613064 Sep 6 00:21:39.192000 audit: BPF prog-id=135 op=UNLOAD Sep 6 00:21:39.192000 audit: BPF prog-id=134 op=UNLOAD Sep 6 00:21:39.192000 audit[3098]: AVC avc: denied { bpf } for pid=3098 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:39.192000 audit[3098]: AVC avc: denied { bpf } for pid=3098 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:39.192000 audit[3098]: AVC avc: denied { bpf } for pid=3098 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:39.192000 audit[3098]: AVC avc: denied { perfmon } for pid=3098 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:39.192000 audit[3098]: AVC avc: denied { perfmon } for pid=3098 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:39.192000 audit[3098]: AVC avc: denied { perfmon } for pid=3098 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:39.192000 audit[3098]: AVC avc: denied { perfmon } for pid=3098 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:39.192000 audit[3098]: AVC avc: denied { perfmon } for pid=3098 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:39.192000 audit[3098]: AVC avc: denied { bpf } for pid=3098 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:39.192000 audit[3098]: AVC avc: denied { bpf } for pid=3098 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:39.192000 audit: BPF prog-id=136 op=LOAD Sep 6 00:21:39.192000 audit[3098]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c000197c30 a2=78 a3=c0000ae5a8 items=0 ppid=2888 pid=3098 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:21:39.192000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3565393633353161666436373930626638613866653631323337613064 Sep 6 00:21:39.486357 kubelet[2412]: E0906 00:21:39.485830 2412 pod_workers.go:1301] "Error syncing pod, skipping" err="network is not ready: container runtime network not ready: NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" pod="calico-system/csi-node-driver-pb785" podUID="1ea5f5bc-3af9-4595-8783-60d58914430c" Sep 6 00:21:39.894455 kubelet[2412]: I0906 00:21:39.894399 2412 prober_manager.go:312] "Failed to trigger a manual run" probe="Readiness" Sep 6 00:21:39.937000 audit[3126]: NETFILTER_CFG table=filter:106 family=2 entries=21 op=nft_register_rule pid=3126 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Sep 6 00:21:39.937000 audit[3126]: SYSCALL arch=c000003e syscall=46 success=yes exit=7480 a0=3 a1=7ffd15d7b1c0 a2=0 a3=7ffd15d7b1ac items=0 ppid=2518 pid=3126 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:21:39.937000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Sep 6 00:21:39.941000 audit[3126]: NETFILTER_CFG table=nat:107 family=2 entries=19 op=nft_register_chain pid=3126 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Sep 6 00:21:39.941000 audit[3126]: SYSCALL arch=c000003e syscall=46 success=yes exit=6276 a0=3 a1=7ffd15d7b1c0 a2=0 a3=7ffd15d7b1ac items=0 ppid=2518 pid=3126 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:21:39.941000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Sep 6 00:21:41.052410 env[1421]: time="2025-09-06T00:21:41.052322317Z" level=error msg="failed to reload cni configuration after receiving fs change event(\"/etc/cni/net.d/calico-kubeconfig\": WRITE)" error="cni config load failed: no network config found in /etc/cni/net.d: cni plugin not initialized: failed to load cni config" Sep 6 00:21:41.055042 systemd[1]: cri-containerd-5e96351afd6790bf8a8fe61237a0d7a078dd8a9d42edb25b46c68891fab084b0.scope: Deactivated successfully. Sep 6 00:21:41.059000 audit: BPF prog-id=136 op=UNLOAD Sep 6 00:21:41.075852 kubelet[2412]: I0906 00:21:41.075818 2412 kubelet_node_status.go:488] "Fast updating node status as it just became ready" Sep 6 00:21:41.085031 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-5e96351afd6790bf8a8fe61237a0d7a078dd8a9d42edb25b46c68891fab084b0-rootfs.mount: Deactivated successfully. Sep 6 00:21:41.136671 systemd[1]: Created slice kubepods-burstable-podbec1259e_53c8_4839_b58b_5ed97b75b668.slice. Sep 6 00:21:41.144787 systemd[1]: Created slice kubepods-burstable-pod240f7b1e_32b7_4339_819b_51a4bef1fd7d.slice. Sep 6 00:21:41.726278 kubelet[2412]: W0906 00:21:41.171006 2412 reflector.go:561] object-"calico-apiserver"/"calico-apiserver-certs": failed to list *v1.Secret: secrets "calico-apiserver-certs" is forbidden: User "system:node:ci-3510.3.8-n-28804d0655" cannot list resource "secrets" in API group "" in the namespace "calico-apiserver": no relationship found between node 'ci-3510.3.8-n-28804d0655' and this object Sep 6 00:21:41.726278 kubelet[2412]: E0906 00:21:41.171059 2412 reflector.go:158] "Unhandled Error" err="object-\"calico-apiserver\"/\"calico-apiserver-certs\": Failed to watch *v1.Secret: failed to list *v1.Secret: secrets \"calico-apiserver-certs\" is forbidden: User \"system:node:ci-3510.3.8-n-28804d0655\" cannot list resource \"secrets\" in API group \"\" in the namespace \"calico-apiserver\": no relationship found between node 'ci-3510.3.8-n-28804d0655' and this object" logger="UnhandledError" Sep 6 00:21:41.726278 kubelet[2412]: I0906 00:21:41.310940 2412 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-jqj7f\" (UniqueName: \"kubernetes.io/projected/bec1259e-53c8-4839-b58b-5ed97b75b668-kube-api-access-jqj7f\") pod \"coredns-7c65d6cfc9-kwxlj\" (UID: \"bec1259e-53c8-4839-b58b-5ed97b75b668\") " pod="kube-system/coredns-7c65d6cfc9-kwxlj" Sep 6 00:21:41.726278 kubelet[2412]: I0906 00:21:41.310985 2412 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-b29hc\" (UniqueName: \"kubernetes.io/projected/61e1e8a3-7e08-42e4-a4e0-f10c5e1b1879-kube-api-access-b29hc\") pod \"calico-kube-controllers-7b6d9948b6-pwxnb\" (UID: \"61e1e8a3-7e08-42e4-a4e0-f10c5e1b1879\") " pod="calico-system/calico-kube-controllers-7b6d9948b6-pwxnb" Sep 6 00:21:41.726278 kubelet[2412]: I0906 00:21:41.311017 2412 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-27nhg\" (UniqueName: \"kubernetes.io/projected/e87f9195-4410-4758-8575-4e170e647a3d-kube-api-access-27nhg\") pod \"goldmane-7988f88666-kvgbx\" (UID: \"e87f9195-4410-4758-8575-4e170e647a3d\") " pod="calico-system/goldmane-7988f88666-kvgbx" Sep 6 00:21:41.155125 systemd[1]: Created slice kubepods-besteffort-pod61e1e8a3_7e08_42e4_a4e0_f10c5e1b1879.slice. Sep 6 00:21:41.727319 kubelet[2412]: I0906 00:21:41.311034 2412 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-2brjg\" (UniqueName: \"kubernetes.io/projected/53243f20-09df-4f15-8545-6e752d797303-kube-api-access-2brjg\") pod \"whisker-6ccc665fcc-vh99p\" (UID: \"53243f20-09df-4f15-8545-6e752d797303\") " pod="calico-system/whisker-6ccc665fcc-vh99p" Sep 6 00:21:41.727319 kubelet[2412]: I0906 00:21:41.311054 2412 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"calico-apiserver-certs\" (UniqueName: \"kubernetes.io/secret/1fd46bfe-b99f-484d-b293-2fbf2d2e8a89-calico-apiserver-certs\") pod \"calico-apiserver-6575dd5656-clp7v\" (UID: \"1fd46bfe-b99f-484d-b293-2fbf2d2e8a89\") " pod="calico-apiserver/calico-apiserver-6575dd5656-clp7v" Sep 6 00:21:41.727319 kubelet[2412]: I0906 00:21:41.311092 2412 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"config\" (UniqueName: \"kubernetes.io/configmap/e87f9195-4410-4758-8575-4e170e647a3d-config\") pod \"goldmane-7988f88666-kvgbx\" (UID: \"e87f9195-4410-4758-8575-4e170e647a3d\") " pod="calico-system/goldmane-7988f88666-kvgbx" Sep 6 00:21:41.727319 kubelet[2412]: I0906 00:21:41.311181 2412 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"goldmane-ca-bundle\" (UniqueName: \"kubernetes.io/configmap/e87f9195-4410-4758-8575-4e170e647a3d-goldmane-ca-bundle\") pod \"goldmane-7988f88666-kvgbx\" (UID: \"e87f9195-4410-4758-8575-4e170e647a3d\") " pod="calico-system/goldmane-7988f88666-kvgbx" Sep 6 00:21:41.727319 kubelet[2412]: I0906 00:21:41.311202 2412 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-ktw55\" (UniqueName: \"kubernetes.io/projected/de9b4ddb-1c06-4bdb-a14b-41494dee8eb6-kube-api-access-ktw55\") pod \"calico-apiserver-6575dd5656-6ft5t\" (UID: \"de9b4ddb-1c06-4bdb-a14b-41494dee8eb6\") " pod="calico-apiserver/calico-apiserver-6575dd5656-6ft5t" Sep 6 00:21:41.161574 systemd[1]: Created slice kubepods-besteffort-podde9b4ddb_1c06_4bdb_a14b_41494dee8eb6.slice. Sep 6 00:21:41.727614 kubelet[2412]: I0906 00:21:41.311228 2412 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"config-volume\" (UniqueName: \"kubernetes.io/configmap/bec1259e-53c8-4839-b58b-5ed97b75b668-config-volume\") pod \"coredns-7c65d6cfc9-kwxlj\" (UID: \"bec1259e-53c8-4839-b58b-5ed97b75b668\") " pod="kube-system/coredns-7c65d6cfc9-kwxlj" Sep 6 00:21:41.727614 kubelet[2412]: I0906 00:21:41.311257 2412 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-dhd6t\" (UniqueName: \"kubernetes.io/projected/1fd46bfe-b99f-484d-b293-2fbf2d2e8a89-kube-api-access-dhd6t\") pod \"calico-apiserver-6575dd5656-clp7v\" (UID: \"1fd46bfe-b99f-484d-b293-2fbf2d2e8a89\") " pod="calico-apiserver/calico-apiserver-6575dd5656-clp7v" Sep 6 00:21:41.727614 kubelet[2412]: I0906 00:21:41.311289 2412 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"whisker-ca-bundle\" (UniqueName: \"kubernetes.io/configmap/53243f20-09df-4f15-8545-6e752d797303-whisker-ca-bundle\") pod \"whisker-6ccc665fcc-vh99p\" (UID: \"53243f20-09df-4f15-8545-6e752d797303\") " pod="calico-system/whisker-6ccc665fcc-vh99p" Sep 6 00:21:41.727614 kubelet[2412]: I0906 00:21:41.311315 2412 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"calico-apiserver-certs\" (UniqueName: \"kubernetes.io/secret/de9b4ddb-1c06-4bdb-a14b-41494dee8eb6-calico-apiserver-certs\") pod \"calico-apiserver-6575dd5656-6ft5t\" (UID: \"de9b4ddb-1c06-4bdb-a14b-41494dee8eb6\") " pod="calico-apiserver/calico-apiserver-6575dd5656-6ft5t" Sep 6 00:21:41.727614 kubelet[2412]: I0906 00:21:41.311334 2412 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"whisker-backend-key-pair\" (UniqueName: \"kubernetes.io/secret/53243f20-09df-4f15-8545-6e752d797303-whisker-backend-key-pair\") pod \"whisker-6ccc665fcc-vh99p\" (UID: \"53243f20-09df-4f15-8545-6e752d797303\") " pod="calico-system/whisker-6ccc665fcc-vh99p" Sep 6 00:21:41.189792 systemd[1]: Created slice kubepods-besteffort-pod53243f20_09df_4f15_8545_6e752d797303.slice. Sep 6 00:21:41.727891 kubelet[2412]: I0906 00:21:41.311348 2412 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-9slps\" (UniqueName: \"kubernetes.io/projected/240f7b1e-32b7-4339-819b-51a4bef1fd7d-kube-api-access-9slps\") pod \"coredns-7c65d6cfc9-p4llr\" (UID: \"240f7b1e-32b7-4339-819b-51a4bef1fd7d\") " pod="kube-system/coredns-7c65d6cfc9-p4llr" Sep 6 00:21:41.727891 kubelet[2412]: I0906 00:21:41.311364 2412 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"tigera-ca-bundle\" (UniqueName: \"kubernetes.io/configmap/61e1e8a3-7e08-42e4-a4e0-f10c5e1b1879-tigera-ca-bundle\") pod \"calico-kube-controllers-7b6d9948b6-pwxnb\" (UID: \"61e1e8a3-7e08-42e4-a4e0-f10c5e1b1879\") " pod="calico-system/calico-kube-controllers-7b6d9948b6-pwxnb" Sep 6 00:21:41.727891 kubelet[2412]: I0906 00:21:41.311385 2412 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"goldmane-key-pair\" (UniqueName: \"kubernetes.io/secret/e87f9195-4410-4758-8575-4e170e647a3d-goldmane-key-pair\") pod \"goldmane-7988f88666-kvgbx\" (UID: \"e87f9195-4410-4758-8575-4e170e647a3d\") " pod="calico-system/goldmane-7988f88666-kvgbx" Sep 6 00:21:41.727891 kubelet[2412]: I0906 00:21:41.311415 2412 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"config-volume\" (UniqueName: \"kubernetes.io/configmap/240f7b1e-32b7-4339-819b-51a4bef1fd7d-config-volume\") pod \"coredns-7c65d6cfc9-p4llr\" (UID: \"240f7b1e-32b7-4339-819b-51a4bef1fd7d\") " pod="kube-system/coredns-7c65d6cfc9-p4llr" Sep 6 00:21:41.197901 systemd[1]: Created slice kubepods-besteffort-pode87f9195_4410_4758_8575_4e170e647a3d.slice. Sep 6 00:21:41.206328 systemd[1]: Created slice kubepods-besteffort-pod1fd46bfe_b99f_484d_b293_2fbf2d2e8a89.slice. Sep 6 00:21:41.491195 systemd[1]: Created slice kubepods-besteffort-pod1ea5f5bc_3af9_4595_8783_60d58914430c.slice. Sep 6 00:21:41.735447 env[1421]: time="2025-09-06T00:21:41.734857415Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:csi-node-driver-pb785,Uid:1ea5f5bc-3af9-4595-8783-60d58914430c,Namespace:calico-system,Attempt:0,}" Sep 6 00:21:42.032578 env[1421]: time="2025-09-06T00:21:42.032412654Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:coredns-7c65d6cfc9-kwxlj,Uid:bec1259e-53c8-4839-b58b-5ed97b75b668,Namespace:kube-system,Attempt:0,}" Sep 6 00:21:42.049472 env[1421]: time="2025-09-06T00:21:42.049420152Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:goldmane-7988f88666-kvgbx,Uid:e87f9195-4410-4758-8575-4e170e647a3d,Namespace:calico-system,Attempt:0,}" Sep 6 00:21:42.055986 env[1421]: time="2025-09-06T00:21:42.055425586Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:coredns-7c65d6cfc9-p4llr,Uid:240f7b1e-32b7-4339-819b-51a4bef1fd7d,Namespace:kube-system,Attempt:0,}" Sep 6 00:21:42.055986 env[1421]: time="2025-09-06T00:21:42.055727088Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-kube-controllers-7b6d9948b6-pwxnb,Uid:61e1e8a3-7e08-42e4-a4e0-f10c5e1b1879,Namespace:calico-system,Attempt:0,}" Sep 6 00:21:42.055986 env[1421]: time="2025-09-06T00:21:42.055804288Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:whisker-6ccc665fcc-vh99p,Uid:53243f20-09df-4f15-8545-6e752d797303,Namespace:calico-system,Attempt:0,}" Sep 6 00:21:42.382431 env[1421]: time="2025-09-06T00:21:42.382360962Z" level=info msg="shim disconnected" id=5e96351afd6790bf8a8fe61237a0d7a078dd8a9d42edb25b46c68891fab084b0 Sep 6 00:21:42.382906 env[1421]: time="2025-09-06T00:21:42.382683263Z" level=warning msg="cleaning up after shim disconnected" id=5e96351afd6790bf8a8fe61237a0d7a078dd8a9d42edb25b46c68891fab084b0 namespace=k8s.io Sep 6 00:21:42.382906 env[1421]: time="2025-09-06T00:21:42.382707164Z" level=info msg="cleaning up dead shim" Sep 6 00:21:42.382906 env[1421]: time="2025-09-06T00:21:42.382773164Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-apiserver-6575dd5656-6ft5t,Uid:de9b4ddb-1c06-4bdb-a14b-41494dee8eb6,Namespace:calico-apiserver,Attempt:0,}" Sep 6 00:21:42.383679 env[1421]: time="2025-09-06T00:21:42.383643769Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-apiserver-6575dd5656-clp7v,Uid:1fd46bfe-b99f-484d-b293-2fbf2d2e8a89,Namespace:calico-apiserver,Attempt:0,}" Sep 6 00:21:42.393018 env[1421]: time="2025-09-06T00:21:42.392970522Z" level=warning msg="cleanup warnings time=\"2025-09-06T00:21:42Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=3174 runtime=io.containerd.runc.v2\n" Sep 6 00:21:42.650848 env[1421]: time="2025-09-06T00:21:42.650675401Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/node:v3.30.3\"" Sep 6 00:21:42.847957 env[1421]: time="2025-09-06T00:21:42.847842332Z" level=error msg="Failed to destroy network for sandbox \"1d336359284437532c303b9404ca2351e29c387f6bfba03d4c9c6526ea69b44e\"" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Sep 6 00:21:42.849259 env[1421]: time="2025-09-06T00:21:42.849197240Z" level=error msg="encountered an error cleaning up failed sandbox \"1d336359284437532c303b9404ca2351e29c387f6bfba03d4c9c6526ea69b44e\", marking sandbox state as SANDBOX_UNKNOWN" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Sep 6 00:21:42.849501 env[1421]: time="2025-09-06T00:21:42.849446041Z" level=error msg="RunPodSandbox for &PodSandboxMetadata{Name:goldmane-7988f88666-kvgbx,Uid:e87f9195-4410-4758-8575-4e170e647a3d,Namespace:calico-system,Attempt:0,} failed, error" error="failed to setup network for sandbox \"1d336359284437532c303b9404ca2351e29c387f6bfba03d4c9c6526ea69b44e\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Sep 6 00:21:42.855597 kubelet[2412]: E0906 00:21:42.854281 2412 log.go:32] "RunPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"1d336359284437532c303b9404ca2351e29c387f6bfba03d4c9c6526ea69b44e\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Sep 6 00:21:42.855597 kubelet[2412]: E0906 00:21:42.854399 2412 kuberuntime_sandbox.go:72] "Failed to create sandbox for pod" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"1d336359284437532c303b9404ca2351e29c387f6bfba03d4c9c6526ea69b44e\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="calico-system/goldmane-7988f88666-kvgbx" Sep 6 00:21:42.855597 kubelet[2412]: E0906 00:21:42.854429 2412 kuberuntime_manager.go:1170] "CreatePodSandbox for pod failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"1d336359284437532c303b9404ca2351e29c387f6bfba03d4c9c6526ea69b44e\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="calico-system/goldmane-7988f88666-kvgbx" Sep 6 00:21:42.857482 kubelet[2412]: E0906 00:21:42.854510 2412 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"CreatePodSandbox\" for \"goldmane-7988f88666-kvgbx_calico-system(e87f9195-4410-4758-8575-4e170e647a3d)\" with CreatePodSandboxError: \"Failed to create sandbox for pod \\\"goldmane-7988f88666-kvgbx_calico-system(e87f9195-4410-4758-8575-4e170e647a3d)\\\": rpc error: code = Unknown desc = failed to setup network for sandbox \\\"1d336359284437532c303b9404ca2351e29c387f6bfba03d4c9c6526ea69b44e\\\": plugin type=\\\"calico\\\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-system/goldmane-7988f88666-kvgbx" podUID="e87f9195-4410-4758-8575-4e170e647a3d" Sep 6 00:21:42.869587 env[1421]: time="2025-09-06T00:21:42.869492456Z" level=error msg="Failed to destroy network for sandbox \"3589c5c844285e0a60626274d5835cedbf9fdc60545aa4feb953e45a8904f94b\"" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Sep 6 00:21:42.870079 env[1421]: time="2025-09-06T00:21:42.870020159Z" level=error msg="encountered an error cleaning up failed sandbox \"3589c5c844285e0a60626274d5835cedbf9fdc60545aa4feb953e45a8904f94b\", marking sandbox state as SANDBOX_UNKNOWN" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Sep 6 00:21:42.870211 env[1421]: time="2025-09-06T00:21:42.870116460Z" level=error msg="RunPodSandbox for &PodSandboxMetadata{Name:csi-node-driver-pb785,Uid:1ea5f5bc-3af9-4595-8783-60d58914430c,Namespace:calico-system,Attempt:0,} failed, error" error="failed to setup network for sandbox \"3589c5c844285e0a60626274d5835cedbf9fdc60545aa4feb953e45a8904f94b\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Sep 6 00:21:42.871881 kubelet[2412]: E0906 00:21:42.870393 2412 log.go:32] "RunPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"3589c5c844285e0a60626274d5835cedbf9fdc60545aa4feb953e45a8904f94b\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Sep 6 00:21:42.871881 kubelet[2412]: E0906 00:21:42.870487 2412 kuberuntime_sandbox.go:72] "Failed to create sandbox for pod" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"3589c5c844285e0a60626274d5835cedbf9fdc60545aa4feb953e45a8904f94b\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="calico-system/csi-node-driver-pb785" Sep 6 00:21:42.871881 kubelet[2412]: E0906 00:21:42.870525 2412 kuberuntime_manager.go:1170] "CreatePodSandbox for pod failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"3589c5c844285e0a60626274d5835cedbf9fdc60545aa4feb953e45a8904f94b\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="calico-system/csi-node-driver-pb785" Sep 6 00:21:42.873342 kubelet[2412]: E0906 00:21:42.870616 2412 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"CreatePodSandbox\" for \"csi-node-driver-pb785_calico-system(1ea5f5bc-3af9-4595-8783-60d58914430c)\" with CreatePodSandboxError: \"Failed to create sandbox for pod \\\"csi-node-driver-pb785_calico-system(1ea5f5bc-3af9-4595-8783-60d58914430c)\\\": rpc error: code = Unknown desc = failed to setup network for sandbox \\\"3589c5c844285e0a60626274d5835cedbf9fdc60545aa4feb953e45a8904f94b\\\": plugin type=\\\"calico\\\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-system/csi-node-driver-pb785" podUID="1ea5f5bc-3af9-4595-8783-60d58914430c" Sep 6 00:21:42.932537 env[1421]: time="2025-09-06T00:21:42.931208510Z" level=error msg="Failed to destroy network for sandbox \"b5644ce4823a63550a6c868ef6f1dba43b75cd58696ab1201a167f45cf216c86\"" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Sep 6 00:21:42.932537 env[1421]: time="2025-09-06T00:21:42.931716413Z" level=error msg="encountered an error cleaning up failed sandbox \"b5644ce4823a63550a6c868ef6f1dba43b75cd58696ab1201a167f45cf216c86\", marking sandbox state as SANDBOX_UNKNOWN" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Sep 6 00:21:42.932537 env[1421]: time="2025-09-06T00:21:42.931806514Z" level=error msg="RunPodSandbox for &PodSandboxMetadata{Name:coredns-7c65d6cfc9-kwxlj,Uid:bec1259e-53c8-4839-b58b-5ed97b75b668,Namespace:kube-system,Attempt:0,} failed, error" error="failed to setup network for sandbox \"b5644ce4823a63550a6c868ef6f1dba43b75cd58696ab1201a167f45cf216c86\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Sep 6 00:21:42.936210 kubelet[2412]: E0906 00:21:42.933066 2412 log.go:32] "RunPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"b5644ce4823a63550a6c868ef6f1dba43b75cd58696ab1201a167f45cf216c86\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Sep 6 00:21:42.936210 kubelet[2412]: E0906 00:21:42.933168 2412 kuberuntime_sandbox.go:72] "Failed to create sandbox for pod" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"b5644ce4823a63550a6c868ef6f1dba43b75cd58696ab1201a167f45cf216c86\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="kube-system/coredns-7c65d6cfc9-kwxlj" Sep 6 00:21:42.936210 kubelet[2412]: E0906 00:21:42.933211 2412 kuberuntime_manager.go:1170] "CreatePodSandbox for pod failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"b5644ce4823a63550a6c868ef6f1dba43b75cd58696ab1201a167f45cf216c86\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="kube-system/coredns-7c65d6cfc9-kwxlj" Sep 6 00:21:42.936560 kubelet[2412]: E0906 00:21:42.935879 2412 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"CreatePodSandbox\" for \"coredns-7c65d6cfc9-kwxlj_kube-system(bec1259e-53c8-4839-b58b-5ed97b75b668)\" with CreatePodSandboxError: \"Failed to create sandbox for pod \\\"coredns-7c65d6cfc9-kwxlj_kube-system(bec1259e-53c8-4839-b58b-5ed97b75b668)\\\": rpc error: code = Unknown desc = failed to setup network for sandbox \\\"b5644ce4823a63550a6c868ef6f1dba43b75cd58696ab1201a167f45cf216c86\\\": plugin type=\\\"calico\\\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="kube-system/coredns-7c65d6cfc9-kwxlj" podUID="bec1259e-53c8-4839-b58b-5ed97b75b668" Sep 6 00:21:42.969439 env[1421]: time="2025-09-06T00:21:42.969359629Z" level=error msg="Failed to destroy network for sandbox \"32857b6d5e13cfdf32617bd9c13b95d2d0faa7b5e3ce285e474befff7ca672f2\"" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Sep 6 00:21:42.969839 env[1421]: time="2025-09-06T00:21:42.969790331Z" level=error msg="encountered an error cleaning up failed sandbox \"32857b6d5e13cfdf32617bd9c13b95d2d0faa7b5e3ce285e474befff7ca672f2\", marking sandbox state as SANDBOX_UNKNOWN" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Sep 6 00:21:42.969949 env[1421]: time="2025-09-06T00:21:42.969872932Z" level=error msg="RunPodSandbox for &PodSandboxMetadata{Name:whisker-6ccc665fcc-vh99p,Uid:53243f20-09df-4f15-8545-6e752d797303,Namespace:calico-system,Attempt:0,} failed, error" error="failed to setup network for sandbox \"32857b6d5e13cfdf32617bd9c13b95d2d0faa7b5e3ce285e474befff7ca672f2\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Sep 6 00:21:42.972677 kubelet[2412]: E0906 00:21:42.970173 2412 log.go:32] "RunPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"32857b6d5e13cfdf32617bd9c13b95d2d0faa7b5e3ce285e474befff7ca672f2\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Sep 6 00:21:42.972677 kubelet[2412]: E0906 00:21:42.970271 2412 kuberuntime_sandbox.go:72] "Failed to create sandbox for pod" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"32857b6d5e13cfdf32617bd9c13b95d2d0faa7b5e3ce285e474befff7ca672f2\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="calico-system/whisker-6ccc665fcc-vh99p" Sep 6 00:21:42.972677 kubelet[2412]: E0906 00:21:42.970297 2412 kuberuntime_manager.go:1170] "CreatePodSandbox for pod failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"32857b6d5e13cfdf32617bd9c13b95d2d0faa7b5e3ce285e474befff7ca672f2\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="calico-system/whisker-6ccc665fcc-vh99p" Sep 6 00:21:42.972920 kubelet[2412]: E0906 00:21:42.970372 2412 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"CreatePodSandbox\" for \"whisker-6ccc665fcc-vh99p_calico-system(53243f20-09df-4f15-8545-6e752d797303)\" with CreatePodSandboxError: \"Failed to create sandbox for pod \\\"whisker-6ccc665fcc-vh99p_calico-system(53243f20-09df-4f15-8545-6e752d797303)\\\": rpc error: code = Unknown desc = failed to setup network for sandbox \\\"32857b6d5e13cfdf32617bd9c13b95d2d0faa7b5e3ce285e474befff7ca672f2\\\": plugin type=\\\"calico\\\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-system/whisker-6ccc665fcc-vh99p" podUID="53243f20-09df-4f15-8545-6e752d797303" Sep 6 00:21:42.985260 env[1421]: time="2025-09-06T00:21:42.985185420Z" level=error msg="Failed to destroy network for sandbox \"0da0f48023f8f0b7a2f1cfb4fe092b51881d3e7712929074c2fbdb5a37da82a1\"" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Sep 6 00:21:42.985710 env[1421]: time="2025-09-06T00:21:42.985653322Z" level=error msg="encountered an error cleaning up failed sandbox \"0da0f48023f8f0b7a2f1cfb4fe092b51881d3e7712929074c2fbdb5a37da82a1\", marking sandbox state as SANDBOX_UNKNOWN" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Sep 6 00:21:42.985872 env[1421]: time="2025-09-06T00:21:42.985740023Z" level=error msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-apiserver-6575dd5656-clp7v,Uid:1fd46bfe-b99f-484d-b293-2fbf2d2e8a89,Namespace:calico-apiserver,Attempt:0,} failed, error" error="failed to setup network for sandbox \"0da0f48023f8f0b7a2f1cfb4fe092b51881d3e7712929074c2fbdb5a37da82a1\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Sep 6 00:21:42.986112 kubelet[2412]: E0906 00:21:42.986070 2412 log.go:32] "RunPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"0da0f48023f8f0b7a2f1cfb4fe092b51881d3e7712929074c2fbdb5a37da82a1\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Sep 6 00:21:42.986218 kubelet[2412]: E0906 00:21:42.986152 2412 kuberuntime_sandbox.go:72] "Failed to create sandbox for pod" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"0da0f48023f8f0b7a2f1cfb4fe092b51881d3e7712929074c2fbdb5a37da82a1\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="calico-apiserver/calico-apiserver-6575dd5656-clp7v" Sep 6 00:21:42.986218 kubelet[2412]: E0906 00:21:42.986181 2412 kuberuntime_manager.go:1170] "CreatePodSandbox for pod failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"0da0f48023f8f0b7a2f1cfb4fe092b51881d3e7712929074c2fbdb5a37da82a1\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="calico-apiserver/calico-apiserver-6575dd5656-clp7v" Sep 6 00:21:42.986317 kubelet[2412]: E0906 00:21:42.986240 2412 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"CreatePodSandbox\" for \"calico-apiserver-6575dd5656-clp7v_calico-apiserver(1fd46bfe-b99f-484d-b293-2fbf2d2e8a89)\" with CreatePodSandboxError: \"Failed to create sandbox for pod \\\"calico-apiserver-6575dd5656-clp7v_calico-apiserver(1fd46bfe-b99f-484d-b293-2fbf2d2e8a89)\\\": rpc error: code = Unknown desc = failed to setup network for sandbox \\\"0da0f48023f8f0b7a2f1cfb4fe092b51881d3e7712929074c2fbdb5a37da82a1\\\": plugin type=\\\"calico\\\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-apiserver/calico-apiserver-6575dd5656-clp7v" podUID="1fd46bfe-b99f-484d-b293-2fbf2d2e8a89" Sep 6 00:21:42.989839 env[1421]: time="2025-09-06T00:21:42.989790946Z" level=error msg="Failed to destroy network for sandbox \"cd674a970846304c2d07a559b71311a27e26be0d693da4182f5694d157bea78d\"" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Sep 6 00:21:42.990182 env[1421]: time="2025-09-06T00:21:42.990143948Z" level=error msg="encountered an error cleaning up failed sandbox \"cd674a970846304c2d07a559b71311a27e26be0d693da4182f5694d157bea78d\", marking sandbox state as SANDBOX_UNKNOWN" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Sep 6 00:21:42.990357 env[1421]: time="2025-09-06T00:21:42.990311349Z" level=error msg="RunPodSandbox for &PodSandboxMetadata{Name:coredns-7c65d6cfc9-p4llr,Uid:240f7b1e-32b7-4339-819b-51a4bef1fd7d,Namespace:kube-system,Attempt:0,} failed, error" error="failed to setup network for sandbox \"cd674a970846304c2d07a559b71311a27e26be0d693da4182f5694d157bea78d\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Sep 6 00:21:42.990785 kubelet[2412]: E0906 00:21:42.990557 2412 log.go:32] "RunPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"cd674a970846304c2d07a559b71311a27e26be0d693da4182f5694d157bea78d\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Sep 6 00:21:42.990785 kubelet[2412]: E0906 00:21:42.990626 2412 kuberuntime_sandbox.go:72] "Failed to create sandbox for pod" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"cd674a970846304c2d07a559b71311a27e26be0d693da4182f5694d157bea78d\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="kube-system/coredns-7c65d6cfc9-p4llr" Sep 6 00:21:42.990785 kubelet[2412]: E0906 00:21:42.990653 2412 kuberuntime_manager.go:1170] "CreatePodSandbox for pod failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"cd674a970846304c2d07a559b71311a27e26be0d693da4182f5694d157bea78d\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="kube-system/coredns-7c65d6cfc9-p4llr" Sep 6 00:21:42.991010 kubelet[2412]: E0906 00:21:42.990720 2412 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"CreatePodSandbox\" for \"coredns-7c65d6cfc9-p4llr_kube-system(240f7b1e-32b7-4339-819b-51a4bef1fd7d)\" with CreatePodSandboxError: \"Failed to create sandbox for pod \\\"coredns-7c65d6cfc9-p4llr_kube-system(240f7b1e-32b7-4339-819b-51a4bef1fd7d)\\\": rpc error: code = Unknown desc = failed to setup network for sandbox \\\"cd674a970846304c2d07a559b71311a27e26be0d693da4182f5694d157bea78d\\\": plugin type=\\\"calico\\\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="kube-system/coredns-7c65d6cfc9-p4llr" podUID="240f7b1e-32b7-4339-819b-51a4bef1fd7d" Sep 6 00:21:42.997588 env[1421]: time="2025-09-06T00:21:42.997517691Z" level=error msg="Failed to destroy network for sandbox \"7ecfcce7d298cb044eef6631149c2b267bd7e716e7909658645cca69f1a75612\"" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Sep 6 00:21:42.998701 env[1421]: time="2025-09-06T00:21:42.997982893Z" level=error msg="encountered an error cleaning up failed sandbox \"7ecfcce7d298cb044eef6631149c2b267bd7e716e7909658645cca69f1a75612\", marking sandbox state as SANDBOX_UNKNOWN" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Sep 6 00:21:42.998701 env[1421]: time="2025-09-06T00:21:42.998071994Z" level=error msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-kube-controllers-7b6d9948b6-pwxnb,Uid:61e1e8a3-7e08-42e4-a4e0-f10c5e1b1879,Namespace:calico-system,Attempt:0,} failed, error" error="failed to setup network for sandbox \"7ecfcce7d298cb044eef6631149c2b267bd7e716e7909658645cca69f1a75612\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Sep 6 00:21:42.998895 kubelet[2412]: E0906 00:21:42.998597 2412 log.go:32] "RunPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"7ecfcce7d298cb044eef6631149c2b267bd7e716e7909658645cca69f1a75612\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Sep 6 00:21:42.998895 kubelet[2412]: E0906 00:21:42.998668 2412 kuberuntime_sandbox.go:72] "Failed to create sandbox for pod" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"7ecfcce7d298cb044eef6631149c2b267bd7e716e7909658645cca69f1a75612\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="calico-system/calico-kube-controllers-7b6d9948b6-pwxnb" Sep 6 00:21:42.998895 kubelet[2412]: E0906 00:21:42.998703 2412 kuberuntime_manager.go:1170] "CreatePodSandbox for pod failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"7ecfcce7d298cb044eef6631149c2b267bd7e716e7909658645cca69f1a75612\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="calico-system/calico-kube-controllers-7b6d9948b6-pwxnb" Sep 6 00:21:43.000284 kubelet[2412]: E0906 00:21:42.998776 2412 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"CreatePodSandbox\" for \"calico-kube-controllers-7b6d9948b6-pwxnb_calico-system(61e1e8a3-7e08-42e4-a4e0-f10c5e1b1879)\" with CreatePodSandboxError: \"Failed to create sandbox for pod \\\"calico-kube-controllers-7b6d9948b6-pwxnb_calico-system(61e1e8a3-7e08-42e4-a4e0-f10c5e1b1879)\\\": rpc error: code = Unknown desc = failed to setup network for sandbox \\\"7ecfcce7d298cb044eef6631149c2b267bd7e716e7909658645cca69f1a75612\\\": plugin type=\\\"calico\\\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-system/calico-kube-controllers-7b6d9948b6-pwxnb" podUID="61e1e8a3-7e08-42e4-a4e0-f10c5e1b1879" Sep 6 00:21:43.003126 env[1421]: time="2025-09-06T00:21:43.003080922Z" level=error msg="Failed to destroy network for sandbox \"f2fc2fea3b942cb104f2fbc53d4c4f32aac387adc5c6778b6509b17e23e23516\"" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Sep 6 00:21:43.003543 env[1421]: time="2025-09-06T00:21:43.003498225Z" level=error msg="encountered an error cleaning up failed sandbox \"f2fc2fea3b942cb104f2fbc53d4c4f32aac387adc5c6778b6509b17e23e23516\", marking sandbox state as SANDBOX_UNKNOWN" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Sep 6 00:21:43.003649 env[1421]: time="2025-09-06T00:21:43.003572025Z" level=error msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-apiserver-6575dd5656-6ft5t,Uid:de9b4ddb-1c06-4bdb-a14b-41494dee8eb6,Namespace:calico-apiserver,Attempt:0,} failed, error" error="failed to setup network for sandbox \"f2fc2fea3b942cb104f2fbc53d4c4f32aac387adc5c6778b6509b17e23e23516\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Sep 6 00:21:43.003913 kubelet[2412]: E0906 00:21:43.003868 2412 log.go:32] "RunPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"f2fc2fea3b942cb104f2fbc53d4c4f32aac387adc5c6778b6509b17e23e23516\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Sep 6 00:21:43.004023 kubelet[2412]: E0906 00:21:43.003956 2412 kuberuntime_sandbox.go:72] "Failed to create sandbox for pod" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"f2fc2fea3b942cb104f2fbc53d4c4f32aac387adc5c6778b6509b17e23e23516\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="calico-apiserver/calico-apiserver-6575dd5656-6ft5t" Sep 6 00:21:43.004023 kubelet[2412]: E0906 00:21:43.003985 2412 kuberuntime_manager.go:1170] "CreatePodSandbox for pod failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"f2fc2fea3b942cb104f2fbc53d4c4f32aac387adc5c6778b6509b17e23e23516\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="calico-apiserver/calico-apiserver-6575dd5656-6ft5t" Sep 6 00:21:43.004115 kubelet[2412]: E0906 00:21:43.004045 2412 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"CreatePodSandbox\" for \"calico-apiserver-6575dd5656-6ft5t_calico-apiserver(de9b4ddb-1c06-4bdb-a14b-41494dee8eb6)\" with CreatePodSandboxError: \"Failed to create sandbox for pod \\\"calico-apiserver-6575dd5656-6ft5t_calico-apiserver(de9b4ddb-1c06-4bdb-a14b-41494dee8eb6)\\\": rpc error: code = Unknown desc = failed to setup network for sandbox \\\"f2fc2fea3b942cb104f2fbc53d4c4f32aac387adc5c6778b6509b17e23e23516\\\": plugin type=\\\"calico\\\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-apiserver/calico-apiserver-6575dd5656-6ft5t" podUID="de9b4ddb-1c06-4bdb-a14b-41494dee8eb6" Sep 6 00:21:43.088472 systemd[1]: run-containerd-io.containerd.grpc.v1.cri-sandboxes-1d336359284437532c303b9404ca2351e29c387f6bfba03d4c9c6526ea69b44e-shm.mount: Deactivated successfully. Sep 6 00:21:43.642211 kubelet[2412]: I0906 00:21:43.642150 2412 pod_container_deletor.go:80] "Container not found in pod's containers" containerID="7ecfcce7d298cb044eef6631149c2b267bd7e716e7909658645cca69f1a75612" Sep 6 00:21:43.643257 env[1421]: time="2025-09-06T00:21:43.643205920Z" level=info msg="StopPodSandbox for \"7ecfcce7d298cb044eef6631149c2b267bd7e716e7909658645cca69f1a75612\"" Sep 6 00:21:43.643724 kubelet[2412]: I0906 00:21:43.643701 2412 pod_container_deletor.go:80] "Container not found in pod's containers" containerID="cd674a970846304c2d07a559b71311a27e26be0d693da4182f5694d157bea78d" Sep 6 00:21:43.645459 env[1421]: time="2025-09-06T00:21:43.645421032Z" level=info msg="StopPodSandbox for \"cd674a970846304c2d07a559b71311a27e26be0d693da4182f5694d157bea78d\"" Sep 6 00:21:43.646900 kubelet[2412]: I0906 00:21:43.646868 2412 pod_container_deletor.go:80] "Container not found in pod's containers" containerID="1d336359284437532c303b9404ca2351e29c387f6bfba03d4c9c6526ea69b44e" Sep 6 00:21:43.647640 env[1421]: time="2025-09-06T00:21:43.647605545Z" level=info msg="StopPodSandbox for \"1d336359284437532c303b9404ca2351e29c387f6bfba03d4c9c6526ea69b44e\"" Sep 6 00:21:43.652086 kubelet[2412]: I0906 00:21:43.652055 2412 pod_container_deletor.go:80] "Container not found in pod's containers" containerID="32857b6d5e13cfdf32617bd9c13b95d2d0faa7b5e3ce285e474befff7ca672f2" Sep 6 00:21:43.652821 env[1421]: time="2025-09-06T00:21:43.652696373Z" level=info msg="StopPodSandbox for \"32857b6d5e13cfdf32617bd9c13b95d2d0faa7b5e3ce285e474befff7ca672f2\"" Sep 6 00:21:43.657058 kubelet[2412]: I0906 00:21:43.656746 2412 pod_container_deletor.go:80] "Container not found in pod's containers" containerID="f2fc2fea3b942cb104f2fbc53d4c4f32aac387adc5c6778b6509b17e23e23516" Sep 6 00:21:43.658754 env[1421]: time="2025-09-06T00:21:43.657914403Z" level=info msg="StopPodSandbox for \"f2fc2fea3b942cb104f2fbc53d4c4f32aac387adc5c6778b6509b17e23e23516\"" Sep 6 00:21:43.659580 kubelet[2412]: I0906 00:21:43.659555 2412 pod_container_deletor.go:80] "Container not found in pod's containers" containerID="b5644ce4823a63550a6c868ef6f1dba43b75cd58696ab1201a167f45cf216c86" Sep 6 00:21:43.660213 env[1421]: time="2025-09-06T00:21:43.660178415Z" level=info msg="StopPodSandbox for \"b5644ce4823a63550a6c868ef6f1dba43b75cd58696ab1201a167f45cf216c86\"" Sep 6 00:21:43.664669 kubelet[2412]: I0906 00:21:43.664639 2412 pod_container_deletor.go:80] "Container not found in pod's containers" containerID="0da0f48023f8f0b7a2f1cfb4fe092b51881d3e7712929074c2fbdb5a37da82a1" Sep 6 00:21:43.665641 env[1421]: time="2025-09-06T00:21:43.665315044Z" level=info msg="StopPodSandbox for \"0da0f48023f8f0b7a2f1cfb4fe092b51881d3e7712929074c2fbdb5a37da82a1\"" Sep 6 00:21:43.668788 kubelet[2412]: I0906 00:21:43.668742 2412 pod_container_deletor.go:80] "Container not found in pod's containers" containerID="3589c5c844285e0a60626274d5835cedbf9fdc60545aa4feb953e45a8904f94b" Sep 6 00:21:43.669493 env[1421]: time="2025-09-06T00:21:43.669461467Z" level=info msg="StopPodSandbox for \"3589c5c844285e0a60626274d5835cedbf9fdc60545aa4feb953e45a8904f94b\"" Sep 6 00:21:43.711312 env[1421]: time="2025-09-06T00:21:43.711239902Z" level=error msg="StopPodSandbox for \"7ecfcce7d298cb044eef6631149c2b267bd7e716e7909658645cca69f1a75612\" failed" error="failed to destroy network for sandbox \"7ecfcce7d298cb044eef6631149c2b267bd7e716e7909658645cca69f1a75612\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Sep 6 00:21:43.711582 kubelet[2412]: E0906 00:21:43.711534 2412 log.go:32] "StopPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to destroy network for sandbox \"7ecfcce7d298cb044eef6631149c2b267bd7e716e7909658645cca69f1a75612\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" podSandboxID="7ecfcce7d298cb044eef6631149c2b267bd7e716e7909658645cca69f1a75612" Sep 6 00:21:43.711685 kubelet[2412]: E0906 00:21:43.711611 2412 kuberuntime_manager.go:1479] "Failed to stop sandbox" podSandboxID={"Type":"containerd","ID":"7ecfcce7d298cb044eef6631149c2b267bd7e716e7909658645cca69f1a75612"} Sep 6 00:21:43.711731 kubelet[2412]: E0906 00:21:43.711695 2412 kuberuntime_manager.go:1079] "killPodWithSyncResult failed" err="failed to \"KillPodSandbox\" for \"61e1e8a3-7e08-42e4-a4e0-f10c5e1b1879\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"7ecfcce7d298cb044eef6631149c2b267bd7e716e7909658645cca69f1a75612\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" Sep 6 00:21:43.711831 kubelet[2412]: E0906 00:21:43.711728 2412 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"KillPodSandbox\" for \"61e1e8a3-7e08-42e4-a4e0-f10c5e1b1879\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"7ecfcce7d298cb044eef6631149c2b267bd7e716e7909658645cca69f1a75612\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-system/calico-kube-controllers-7b6d9948b6-pwxnb" podUID="61e1e8a3-7e08-42e4-a4e0-f10c5e1b1879" Sep 6 00:21:43.768429 env[1421]: time="2025-09-06T00:21:43.768238123Z" level=error msg="StopPodSandbox for \"cd674a970846304c2d07a559b71311a27e26be0d693da4182f5694d157bea78d\" failed" error="failed to destroy network for sandbox \"cd674a970846304c2d07a559b71311a27e26be0d693da4182f5694d157bea78d\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Sep 6 00:21:43.768999 kubelet[2412]: E0906 00:21:43.768943 2412 log.go:32] "StopPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to destroy network for sandbox \"cd674a970846304c2d07a559b71311a27e26be0d693da4182f5694d157bea78d\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" podSandboxID="cd674a970846304c2d07a559b71311a27e26be0d693da4182f5694d157bea78d" Sep 6 00:21:43.769154 kubelet[2412]: E0906 00:21:43.769020 2412 kuberuntime_manager.go:1479] "Failed to stop sandbox" podSandboxID={"Type":"containerd","ID":"cd674a970846304c2d07a559b71311a27e26be0d693da4182f5694d157bea78d"} Sep 6 00:21:43.769154 kubelet[2412]: E0906 00:21:43.769081 2412 kuberuntime_manager.go:1079] "killPodWithSyncResult failed" err="failed to \"KillPodSandbox\" for \"240f7b1e-32b7-4339-819b-51a4bef1fd7d\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"cd674a970846304c2d07a559b71311a27e26be0d693da4182f5694d157bea78d\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" Sep 6 00:21:43.769154 kubelet[2412]: E0906 00:21:43.769115 2412 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"KillPodSandbox\" for \"240f7b1e-32b7-4339-819b-51a4bef1fd7d\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"cd674a970846304c2d07a559b71311a27e26be0d693da4182f5694d157bea78d\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="kube-system/coredns-7c65d6cfc9-p4llr" podUID="240f7b1e-32b7-4339-819b-51a4bef1fd7d" Sep 6 00:21:43.769526 env[1421]: time="2025-09-06T00:21:43.769479530Z" level=error msg="StopPodSandbox for \"1d336359284437532c303b9404ca2351e29c387f6bfba03d4c9c6526ea69b44e\" failed" error="failed to destroy network for sandbox \"1d336359284437532c303b9404ca2351e29c387f6bfba03d4c9c6526ea69b44e\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Sep 6 00:21:43.769882 kubelet[2412]: E0906 00:21:43.769845 2412 log.go:32] "StopPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to destroy network for sandbox \"1d336359284437532c303b9404ca2351e29c387f6bfba03d4c9c6526ea69b44e\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" podSandboxID="1d336359284437532c303b9404ca2351e29c387f6bfba03d4c9c6526ea69b44e" Sep 6 00:21:43.770002 kubelet[2412]: E0906 00:21:43.769897 2412 kuberuntime_manager.go:1479] "Failed to stop sandbox" podSandboxID={"Type":"containerd","ID":"1d336359284437532c303b9404ca2351e29c387f6bfba03d4c9c6526ea69b44e"} Sep 6 00:21:43.770002 kubelet[2412]: E0906 00:21:43.769956 2412 kuberuntime_manager.go:1079] "killPodWithSyncResult failed" err="failed to \"KillPodSandbox\" for \"e87f9195-4410-4758-8575-4e170e647a3d\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"1d336359284437532c303b9404ca2351e29c387f6bfba03d4c9c6526ea69b44e\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" Sep 6 00:21:43.770002 kubelet[2412]: E0906 00:21:43.769985 2412 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"KillPodSandbox\" for \"e87f9195-4410-4758-8575-4e170e647a3d\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"1d336359284437532c303b9404ca2351e29c387f6bfba03d4c9c6526ea69b44e\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-system/goldmane-7988f88666-kvgbx" podUID="e87f9195-4410-4758-8575-4e170e647a3d" Sep 6 00:21:43.841213 env[1421]: time="2025-09-06T00:21:43.841134332Z" level=error msg="StopPodSandbox for \"32857b6d5e13cfdf32617bd9c13b95d2d0faa7b5e3ce285e474befff7ca672f2\" failed" error="failed to destroy network for sandbox \"32857b6d5e13cfdf32617bd9c13b95d2d0faa7b5e3ce285e474befff7ca672f2\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Sep 6 00:21:43.841756 kubelet[2412]: E0906 00:21:43.841704 2412 log.go:32] "StopPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to destroy network for sandbox \"32857b6d5e13cfdf32617bd9c13b95d2d0faa7b5e3ce285e474befff7ca672f2\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" podSandboxID="32857b6d5e13cfdf32617bd9c13b95d2d0faa7b5e3ce285e474befff7ca672f2" Sep 6 00:21:43.841894 kubelet[2412]: E0906 00:21:43.841774 2412 kuberuntime_manager.go:1479] "Failed to stop sandbox" podSandboxID={"Type":"containerd","ID":"32857b6d5e13cfdf32617bd9c13b95d2d0faa7b5e3ce285e474befff7ca672f2"} Sep 6 00:21:43.841894 kubelet[2412]: E0906 00:21:43.841817 2412 kuberuntime_manager.go:1079] "killPodWithSyncResult failed" err="failed to \"KillPodSandbox\" for \"53243f20-09df-4f15-8545-6e752d797303\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"32857b6d5e13cfdf32617bd9c13b95d2d0faa7b5e3ce285e474befff7ca672f2\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" Sep 6 00:21:43.841894 kubelet[2412]: E0906 00:21:43.841851 2412 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"KillPodSandbox\" for \"53243f20-09df-4f15-8545-6e752d797303\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"32857b6d5e13cfdf32617bd9c13b95d2d0faa7b5e3ce285e474befff7ca672f2\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-system/whisker-6ccc665fcc-vh99p" podUID="53243f20-09df-4f15-8545-6e752d797303" Sep 6 00:21:43.844130 env[1421]: time="2025-09-06T00:21:43.844072049Z" level=error msg="StopPodSandbox for \"b5644ce4823a63550a6c868ef6f1dba43b75cd58696ab1201a167f45cf216c86\" failed" error="failed to destroy network for sandbox \"b5644ce4823a63550a6c868ef6f1dba43b75cd58696ab1201a167f45cf216c86\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Sep 6 00:21:43.844489 kubelet[2412]: E0906 00:21:43.844455 2412 log.go:32] "StopPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to destroy network for sandbox \"b5644ce4823a63550a6c868ef6f1dba43b75cd58696ab1201a167f45cf216c86\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" podSandboxID="b5644ce4823a63550a6c868ef6f1dba43b75cd58696ab1201a167f45cf216c86" Sep 6 00:21:43.844598 kubelet[2412]: E0906 00:21:43.844502 2412 kuberuntime_manager.go:1479] "Failed to stop sandbox" podSandboxID={"Type":"containerd","ID":"b5644ce4823a63550a6c868ef6f1dba43b75cd58696ab1201a167f45cf216c86"} Sep 6 00:21:43.844598 kubelet[2412]: E0906 00:21:43.844537 2412 kuberuntime_manager.go:1079] "killPodWithSyncResult failed" err="failed to \"KillPodSandbox\" for \"bec1259e-53c8-4839-b58b-5ed97b75b668\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"b5644ce4823a63550a6c868ef6f1dba43b75cd58696ab1201a167f45cf216c86\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" Sep 6 00:21:43.844598 kubelet[2412]: E0906 00:21:43.844565 2412 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"KillPodSandbox\" for \"bec1259e-53c8-4839-b58b-5ed97b75b668\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"b5644ce4823a63550a6c868ef6f1dba43b75cd58696ab1201a167f45cf216c86\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="kube-system/coredns-7c65d6cfc9-kwxlj" podUID="bec1259e-53c8-4839-b58b-5ed97b75b668" Sep 6 00:21:43.845613 env[1421]: time="2025-09-06T00:21:43.845565557Z" level=error msg="StopPodSandbox for \"f2fc2fea3b942cb104f2fbc53d4c4f32aac387adc5c6778b6509b17e23e23516\" failed" error="failed to destroy network for sandbox \"f2fc2fea3b942cb104f2fbc53d4c4f32aac387adc5c6778b6509b17e23e23516\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Sep 6 00:21:43.846005 kubelet[2412]: E0906 00:21:43.845895 2412 log.go:32] "StopPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to destroy network for sandbox \"f2fc2fea3b942cb104f2fbc53d4c4f32aac387adc5c6778b6509b17e23e23516\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" podSandboxID="f2fc2fea3b942cb104f2fbc53d4c4f32aac387adc5c6778b6509b17e23e23516" Sep 6 00:21:43.846111 kubelet[2412]: E0906 00:21:43.846019 2412 kuberuntime_manager.go:1479] "Failed to stop sandbox" podSandboxID={"Type":"containerd","ID":"f2fc2fea3b942cb104f2fbc53d4c4f32aac387adc5c6778b6509b17e23e23516"} Sep 6 00:21:43.846111 kubelet[2412]: E0906 00:21:43.846054 2412 kuberuntime_manager.go:1079] "killPodWithSyncResult failed" err="failed to \"KillPodSandbox\" for \"de9b4ddb-1c06-4bdb-a14b-41494dee8eb6\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"f2fc2fea3b942cb104f2fbc53d4c4f32aac387adc5c6778b6509b17e23e23516\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" Sep 6 00:21:43.846111 kubelet[2412]: E0906 00:21:43.846081 2412 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"KillPodSandbox\" for \"de9b4ddb-1c06-4bdb-a14b-41494dee8eb6\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"f2fc2fea3b942cb104f2fbc53d4c4f32aac387adc5c6778b6509b17e23e23516\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-apiserver/calico-apiserver-6575dd5656-6ft5t" podUID="de9b4ddb-1c06-4bdb-a14b-41494dee8eb6" Sep 6 00:21:43.851669 env[1421]: time="2025-09-06T00:21:43.851621291Z" level=error msg="StopPodSandbox for \"3589c5c844285e0a60626274d5835cedbf9fdc60545aa4feb953e45a8904f94b\" failed" error="failed to destroy network for sandbox \"3589c5c844285e0a60626274d5835cedbf9fdc60545aa4feb953e45a8904f94b\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Sep 6 00:21:43.852034 kubelet[2412]: E0906 00:21:43.851906 2412 log.go:32] "StopPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to destroy network for sandbox \"3589c5c844285e0a60626274d5835cedbf9fdc60545aa4feb953e45a8904f94b\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" podSandboxID="3589c5c844285e0a60626274d5835cedbf9fdc60545aa4feb953e45a8904f94b" Sep 6 00:21:43.852034 kubelet[2412]: E0906 00:21:43.851978 2412 kuberuntime_manager.go:1479] "Failed to stop sandbox" podSandboxID={"Type":"containerd","ID":"3589c5c844285e0a60626274d5835cedbf9fdc60545aa4feb953e45a8904f94b"} Sep 6 00:21:43.852315 kubelet[2412]: E0906 00:21:43.852193 2412 kuberuntime_manager.go:1079] "killPodWithSyncResult failed" err="failed to \"KillPodSandbox\" for \"1ea5f5bc-3af9-4595-8783-60d58914430c\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"3589c5c844285e0a60626274d5835cedbf9fdc60545aa4feb953e45a8904f94b\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" Sep 6 00:21:43.852315 kubelet[2412]: E0906 00:21:43.852232 2412 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"KillPodSandbox\" for \"1ea5f5bc-3af9-4595-8783-60d58914430c\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"3589c5c844285e0a60626274d5835cedbf9fdc60545aa4feb953e45a8904f94b\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-system/csi-node-driver-pb785" podUID="1ea5f5bc-3af9-4595-8783-60d58914430c" Sep 6 00:21:43.855979 env[1421]: time="2025-09-06T00:21:43.855890515Z" level=error msg="StopPodSandbox for \"0da0f48023f8f0b7a2f1cfb4fe092b51881d3e7712929074c2fbdb5a37da82a1\" failed" error="failed to destroy network for sandbox \"0da0f48023f8f0b7a2f1cfb4fe092b51881d3e7712929074c2fbdb5a37da82a1\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Sep 6 00:21:43.856162 kubelet[2412]: E0906 00:21:43.856128 2412 log.go:32] "StopPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to destroy network for sandbox \"0da0f48023f8f0b7a2f1cfb4fe092b51881d3e7712929074c2fbdb5a37da82a1\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" podSandboxID="0da0f48023f8f0b7a2f1cfb4fe092b51881d3e7712929074c2fbdb5a37da82a1" Sep 6 00:21:43.856495 kubelet[2412]: E0906 00:21:43.856171 2412 kuberuntime_manager.go:1479] "Failed to stop sandbox" podSandboxID={"Type":"containerd","ID":"0da0f48023f8f0b7a2f1cfb4fe092b51881d3e7712929074c2fbdb5a37da82a1"} Sep 6 00:21:43.856495 kubelet[2412]: E0906 00:21:43.856209 2412 kuberuntime_manager.go:1079] "killPodWithSyncResult failed" err="failed to \"KillPodSandbox\" for \"1fd46bfe-b99f-484d-b293-2fbf2d2e8a89\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"0da0f48023f8f0b7a2f1cfb4fe092b51881d3e7712929074c2fbdb5a37da82a1\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" Sep 6 00:21:43.856495 kubelet[2412]: E0906 00:21:43.856237 2412 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"KillPodSandbox\" for \"1fd46bfe-b99f-484d-b293-2fbf2d2e8a89\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"0da0f48023f8f0b7a2f1cfb4fe092b51881d3e7712929074c2fbdb5a37da82a1\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-apiserver/calico-apiserver-6575dd5656-clp7v" podUID="1fd46bfe-b99f-484d-b293-2fbf2d2e8a89" Sep 6 00:21:51.677531 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount1812106125.mount: Deactivated successfully. Sep 6 00:21:51.719615 env[1421]: time="2025-09-06T00:21:51.719548159Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/node:v3.30.3,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 6 00:21:51.727107 env[1421]: time="2025-09-06T00:21:51.727048795Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:ce9c4ac0f175f22c56e80844e65379d9ebe1d8a4e2bbb38dc1db0f53a8826f0f,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 6 00:21:51.731305 env[1421]: time="2025-09-06T00:21:51.731256715Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/node:v3.30.3,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 6 00:21:51.736154 env[1421]: time="2025-09-06T00:21:51.736106638Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/node@sha256:bcb8146fcaeced1e1c88fad3eaa697f1680746bd23c3e7e8d4535bc484c6f2a1,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 6 00:21:51.736704 env[1421]: time="2025-09-06T00:21:51.736665041Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/node:v3.30.3\" returns image reference \"sha256:ce9c4ac0f175f22c56e80844e65379d9ebe1d8a4e2bbb38dc1db0f53a8826f0f\"" Sep 6 00:21:51.758249 env[1421]: time="2025-09-06T00:21:51.758195645Z" level=info msg="CreateContainer within sandbox \"67aa735f5981334ff980d8c65aad7da7493ded66176e034f15a559c71ee4b74f\" for container &ContainerMetadata{Name:calico-node,Attempt:0,}" Sep 6 00:21:51.804516 env[1421]: time="2025-09-06T00:21:51.804457967Z" level=info msg="CreateContainer within sandbox \"67aa735f5981334ff980d8c65aad7da7493ded66176e034f15a559c71ee4b74f\" for &ContainerMetadata{Name:calico-node,Attempt:0,} returns container id \"826fee91051700eb867f0bfafe199995b2395603318e06642d348584985d7186\"" Sep 6 00:21:51.807063 env[1421]: time="2025-09-06T00:21:51.805277371Z" level=info msg="StartContainer for \"826fee91051700eb867f0bfafe199995b2395603318e06642d348584985d7186\"" Sep 6 00:21:51.826198 systemd[1]: Started cri-containerd-826fee91051700eb867f0bfafe199995b2395603318e06642d348584985d7186.scope. Sep 6 00:21:51.850000 audit[3534]: AVC avc: denied { perfmon } for pid=3534 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:51.856739 kernel: kauditd_printk_skb: 40 callbacks suppressed Sep 6 00:21:51.856863 kernel: audit: type=1400 audit(1757118111.850:962): avc: denied { perfmon } for pid=3534 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:51.850000 audit[3534]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=0 a1=c0001bd6b0 a2=3c a3=7f5e786bf6b8 items=0 ppid=2888 pid=3534 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:21:51.897538 kernel: audit: type=1300 audit(1757118111.850:962): arch=c000003e syscall=321 success=yes exit=15 a0=0 a1=c0001bd6b0 a2=3c a3=7f5e786bf6b8 items=0 ppid=2888 pid=3534 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:21:51.921403 kernel: audit: type=1327 audit(1757118111.850:962): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3832366665653931303531373030656238363766306266616665313939 Sep 6 00:21:51.850000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3832366665653931303531373030656238363766306266616665313939 Sep 6 00:21:51.936695 kernel: audit: type=1400 audit(1757118111.850:963): avc: denied { bpf } for pid=3534 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:51.850000 audit[3534]: AVC avc: denied { bpf } for pid=3534 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:51.939123 env[1421]: time="2025-09-06T00:21:51.939062715Z" level=info msg="StartContainer for \"826fee91051700eb867f0bfafe199995b2395603318e06642d348584985d7186\" returns successfully" Sep 6 00:21:51.850000 audit[3534]: AVC avc: denied { bpf } for pid=3534 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:51.850000 audit[3534]: AVC avc: denied { bpf } for pid=3534 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:51.979568 kernel: audit: type=1400 audit(1757118111.850:963): avc: denied { bpf } for pid=3534 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:51.979742 kernel: audit: type=1400 audit(1757118111.850:963): avc: denied { bpf } for pid=3534 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:51.850000 audit[3534]: AVC avc: denied { perfmon } for pid=3534 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:51.979952 kernel: audit: type=1400 audit(1757118111.850:963): avc: denied { perfmon } for pid=3534 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:51.850000 audit[3534]: AVC avc: denied { perfmon } for pid=3534 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:52.017043 kernel: audit: type=1400 audit(1757118111.850:963): avc: denied { perfmon } for pid=3534 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:51.850000 audit[3534]: AVC avc: denied { perfmon } for pid=3534 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:52.035654 kernel: audit: type=1400 audit(1757118111.850:963): avc: denied { perfmon } for pid=3534 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:52.035760 kernel: audit: type=1400 audit(1757118111.850:963): avc: denied { perfmon } for pid=3534 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:51.850000 audit[3534]: AVC avc: denied { perfmon } for pid=3534 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:51.850000 audit[3534]: AVC avc: denied { perfmon } for pid=3534 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:51.850000 audit[3534]: AVC avc: denied { bpf } for pid=3534 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:51.850000 audit[3534]: AVC avc: denied { bpf } for pid=3534 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:51.850000 audit: BPF prog-id=137 op=LOAD Sep 6 00:21:51.850000 audit[3534]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c0001bd9d8 a2=78 a3=c0002887f8 items=0 ppid=2888 pid=3534 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:21:51.850000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3832366665653931303531373030656238363766306266616665313939 Sep 6 00:21:51.850000 audit[3534]: AVC avc: denied { bpf } for pid=3534 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:51.850000 audit[3534]: AVC avc: denied { bpf } for pid=3534 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:51.850000 audit[3534]: AVC avc: denied { perfmon } for pid=3534 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:51.850000 audit[3534]: AVC avc: denied { perfmon } for pid=3534 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:51.850000 audit[3534]: AVC avc: denied { perfmon } for pid=3534 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:51.850000 audit[3534]: AVC avc: denied { perfmon } for pid=3534 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:51.850000 audit[3534]: AVC avc: denied { perfmon } for pid=3534 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:51.850000 audit[3534]: AVC avc: denied { bpf } for pid=3534 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:51.850000 audit[3534]: AVC avc: denied { bpf } for pid=3534 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:51.850000 audit: BPF prog-id=138 op=LOAD Sep 6 00:21:51.850000 audit[3534]: SYSCALL arch=c000003e syscall=321 success=yes exit=17 a0=5 a1=c0001bd770 a2=78 a3=c000288848 items=0 ppid=2888 pid=3534 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:21:51.850000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3832366665653931303531373030656238363766306266616665313939 Sep 6 00:21:51.850000 audit: BPF prog-id=138 op=UNLOAD Sep 6 00:21:51.850000 audit: BPF prog-id=137 op=UNLOAD Sep 6 00:21:51.850000 audit[3534]: AVC avc: denied { bpf } for pid=3534 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:51.850000 audit[3534]: AVC avc: denied { bpf } for pid=3534 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:51.850000 audit[3534]: AVC avc: denied { bpf } for pid=3534 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:51.850000 audit[3534]: AVC avc: denied { perfmon } for pid=3534 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:51.850000 audit[3534]: AVC avc: denied { perfmon } for pid=3534 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:51.850000 audit[3534]: AVC avc: denied { perfmon } for pid=3534 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:51.850000 audit[3534]: AVC avc: denied { perfmon } for pid=3534 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:51.850000 audit[3534]: AVC avc: denied { perfmon } for pid=3534 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:51.850000 audit[3534]: AVC avc: denied { bpf } for pid=3534 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:51.850000 audit[3534]: AVC avc: denied { bpf } for pid=3534 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:51.850000 audit: BPF prog-id=139 op=LOAD Sep 6 00:21:51.850000 audit[3534]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c0001bdc30 a2=78 a3=c0002888d8 items=0 ppid=2888 pid=3534 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:21:51.850000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3832366665653931303531373030656238363766306266616665313939 Sep 6 00:21:52.335184 kernel: wireguard: WireGuard 1.0.0 loaded. See www.wireguard.com for information. Sep 6 00:21:52.335410 kernel: wireguard: Copyright (C) 2015-2019 Jason A. Donenfeld . All Rights Reserved. Sep 6 00:21:52.461734 env[1421]: time="2025-09-06T00:21:52.461674488Z" level=info msg="StopPodSandbox for \"32857b6d5e13cfdf32617bd9c13b95d2d0faa7b5e3ce285e474befff7ca672f2\"" Sep 6 00:21:52.606073 env[1421]: 2025-09-06 00:21:52.546 [INFO][3589] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="32857b6d5e13cfdf32617bd9c13b95d2d0faa7b5e3ce285e474befff7ca672f2" Sep 6 00:21:52.606073 env[1421]: 2025-09-06 00:21:52.546 [INFO][3589] cni-plugin/dataplane_linux.go 559: Deleting workload's device in netns. ContainerID="32857b6d5e13cfdf32617bd9c13b95d2d0faa7b5e3ce285e474befff7ca672f2" iface="eth0" netns="/var/run/netns/cni-8f20378e-11eb-9bca-c7f8-ed8ac0602185" Sep 6 00:21:52.606073 env[1421]: 2025-09-06 00:21:52.546 [INFO][3589] cni-plugin/dataplane_linux.go 570: Entered netns, deleting veth. ContainerID="32857b6d5e13cfdf32617bd9c13b95d2d0faa7b5e3ce285e474befff7ca672f2" iface="eth0" netns="/var/run/netns/cni-8f20378e-11eb-9bca-c7f8-ed8ac0602185" Sep 6 00:21:52.606073 env[1421]: 2025-09-06 00:21:52.546 [INFO][3589] cni-plugin/dataplane_linux.go 597: Workload's veth was already gone. Nothing to do. ContainerID="32857b6d5e13cfdf32617bd9c13b95d2d0faa7b5e3ce285e474befff7ca672f2" iface="eth0" netns="/var/run/netns/cni-8f20378e-11eb-9bca-c7f8-ed8ac0602185" Sep 6 00:21:52.606073 env[1421]: 2025-09-06 00:21:52.546 [INFO][3589] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="32857b6d5e13cfdf32617bd9c13b95d2d0faa7b5e3ce285e474befff7ca672f2" Sep 6 00:21:52.606073 env[1421]: 2025-09-06 00:21:52.546 [INFO][3589] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="32857b6d5e13cfdf32617bd9c13b95d2d0faa7b5e3ce285e474befff7ca672f2" Sep 6 00:21:52.606073 env[1421]: 2025-09-06 00:21:52.590 [INFO][3596] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="32857b6d5e13cfdf32617bd9c13b95d2d0faa7b5e3ce285e474befff7ca672f2" HandleID="k8s-pod-network.32857b6d5e13cfdf32617bd9c13b95d2d0faa7b5e3ce285e474befff7ca672f2" Workload="ci--3510.3.8--n--28804d0655-k8s-whisker--6ccc665fcc--vh99p-eth0" Sep 6 00:21:52.606073 env[1421]: 2025-09-06 00:21:52.590 [INFO][3596] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Sep 6 00:21:52.606073 env[1421]: 2025-09-06 00:21:52.590 [INFO][3596] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Sep 6 00:21:52.606073 env[1421]: 2025-09-06 00:21:52.599 [WARNING][3596] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="32857b6d5e13cfdf32617bd9c13b95d2d0faa7b5e3ce285e474befff7ca672f2" HandleID="k8s-pod-network.32857b6d5e13cfdf32617bd9c13b95d2d0faa7b5e3ce285e474befff7ca672f2" Workload="ci--3510.3.8--n--28804d0655-k8s-whisker--6ccc665fcc--vh99p-eth0" Sep 6 00:21:52.606073 env[1421]: 2025-09-06 00:21:52.599 [INFO][3596] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="32857b6d5e13cfdf32617bd9c13b95d2d0faa7b5e3ce285e474befff7ca672f2" HandleID="k8s-pod-network.32857b6d5e13cfdf32617bd9c13b95d2d0faa7b5e3ce285e474befff7ca672f2" Workload="ci--3510.3.8--n--28804d0655-k8s-whisker--6ccc665fcc--vh99p-eth0" Sep 6 00:21:52.606073 env[1421]: 2025-09-06 00:21:52.601 [INFO][3596] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Sep 6 00:21:52.606073 env[1421]: 2025-09-06 00:21:52.604 [INFO][3589] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="32857b6d5e13cfdf32617bd9c13b95d2d0faa7b5e3ce285e474befff7ca672f2" Sep 6 00:21:52.606730 env[1421]: time="2025-09-06T00:21:52.606217471Z" level=info msg="TearDown network for sandbox \"32857b6d5e13cfdf32617bd9c13b95d2d0faa7b5e3ce285e474befff7ca672f2\" successfully" Sep 6 00:21:52.606730 env[1421]: time="2025-09-06T00:21:52.606261871Z" level=info msg="StopPodSandbox for \"32857b6d5e13cfdf32617bd9c13b95d2d0faa7b5e3ce285e474befff7ca672f2\" returns successfully" Sep 6 00:21:52.675207 systemd[1]: run-netns-cni\x2d8f20378e\x2d11eb\x2d9bca\x2dc7f8\x2ded8ac0602185.mount: Deactivated successfully. Sep 6 00:21:52.802544 kubelet[2412]: I0906 00:21:52.802380 2412 reconciler_common.go:159] "operationExecutor.UnmountVolume started for volume \"whisker-backend-key-pair\" (UniqueName: \"kubernetes.io/secret/53243f20-09df-4f15-8545-6e752d797303-whisker-backend-key-pair\") pod \"53243f20-09df-4f15-8545-6e752d797303\" (UID: \"53243f20-09df-4f15-8545-6e752d797303\") " Sep 6 00:21:52.802544 kubelet[2412]: I0906 00:21:52.802450 2412 reconciler_common.go:159] "operationExecutor.UnmountVolume started for volume \"kube-api-access-2brjg\" (UniqueName: \"kubernetes.io/projected/53243f20-09df-4f15-8545-6e752d797303-kube-api-access-2brjg\") pod \"53243f20-09df-4f15-8545-6e752d797303\" (UID: \"53243f20-09df-4f15-8545-6e752d797303\") " Sep 6 00:21:52.802544 kubelet[2412]: I0906 00:21:52.802478 2412 reconciler_common.go:159] "operationExecutor.UnmountVolume started for volume \"whisker-ca-bundle\" (UniqueName: \"kubernetes.io/configmap/53243f20-09df-4f15-8545-6e752d797303-whisker-ca-bundle\") pod \"53243f20-09df-4f15-8545-6e752d797303\" (UID: \"53243f20-09df-4f15-8545-6e752d797303\") " Sep 6 00:21:52.805063 kubelet[2412]: I0906 00:21:52.805023 2412 operation_generator.go:803] UnmountVolume.TearDown succeeded for volume "kubernetes.io/configmap/53243f20-09df-4f15-8545-6e752d797303-whisker-ca-bundle" (OuterVolumeSpecName: "whisker-ca-bundle") pod "53243f20-09df-4f15-8545-6e752d797303" (UID: "53243f20-09df-4f15-8545-6e752d797303"). InnerVolumeSpecName "whisker-ca-bundle". PluginName "kubernetes.io/configmap", VolumeGidValue "" Sep 6 00:21:52.811625 kubelet[2412]: I0906 00:21:52.811579 2412 operation_generator.go:803] UnmountVolume.TearDown succeeded for volume "kubernetes.io/projected/53243f20-09df-4f15-8545-6e752d797303-kube-api-access-2brjg" (OuterVolumeSpecName: "kube-api-access-2brjg") pod "53243f20-09df-4f15-8545-6e752d797303" (UID: "53243f20-09df-4f15-8545-6e752d797303"). InnerVolumeSpecName "kube-api-access-2brjg". PluginName "kubernetes.io/projected", VolumeGidValue "" Sep 6 00:21:52.812293 systemd[1]: var-lib-kubelet-pods-53243f20\x2d09df\x2d4f15\x2d8545\x2d6e752d797303-volumes-kubernetes.io\x7eprojected-kube\x2dapi\x2daccess\x2d2brjg.mount: Deactivated successfully. Sep 6 00:21:52.816778 kubelet[2412]: I0906 00:21:52.816637 2412 operation_generator.go:803] UnmountVolume.TearDown succeeded for volume "kubernetes.io/secret/53243f20-09df-4f15-8545-6e752d797303-whisker-backend-key-pair" (OuterVolumeSpecName: "whisker-backend-key-pair") pod "53243f20-09df-4f15-8545-6e752d797303" (UID: "53243f20-09df-4f15-8545-6e752d797303"). InnerVolumeSpecName "whisker-backend-key-pair". PluginName "kubernetes.io/secret", VolumeGidValue "" Sep 6 00:21:52.816879 systemd[1]: var-lib-kubelet-pods-53243f20\x2d09df\x2d4f15\x2d8545\x2d6e752d797303-volumes-kubernetes.io\x7esecret-whisker\x2dbackend\x2dkey\x2dpair.mount: Deactivated successfully. Sep 6 00:21:52.903032 kubelet[2412]: I0906 00:21:52.902959 2412 reconciler_common.go:293] "Volume detached for volume \"whisker-backend-key-pair\" (UniqueName: \"kubernetes.io/secret/53243f20-09df-4f15-8545-6e752d797303-whisker-backend-key-pair\") on node \"ci-3510.3.8-n-28804d0655\" DevicePath \"\"" Sep 6 00:21:52.903032 kubelet[2412]: I0906 00:21:52.903019 2412 reconciler_common.go:293] "Volume detached for volume \"kube-api-access-2brjg\" (UniqueName: \"kubernetes.io/projected/53243f20-09df-4f15-8545-6e752d797303-kube-api-access-2brjg\") on node \"ci-3510.3.8-n-28804d0655\" DevicePath \"\"" Sep 6 00:21:52.903032 kubelet[2412]: I0906 00:21:52.903034 2412 reconciler_common.go:293] "Volume detached for volume \"whisker-ca-bundle\" (UniqueName: \"kubernetes.io/configmap/53243f20-09df-4f15-8545-6e752d797303-whisker-ca-bundle\") on node \"ci-3510.3.8-n-28804d0655\" DevicePath \"\"" Sep 6 00:21:53.008370 systemd[1]: Removed slice kubepods-besteffort-pod53243f20_09df_4f15_8545_6e752d797303.slice. Sep 6 00:21:53.027620 kubelet[2412]: I0906 00:21:53.027545 2412 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="calico-system/calico-node-hxvph" podStartSLOduration=2.794276031 podStartE2EDuration="26.027514758s" podCreationTimestamp="2025-09-06 00:21:27 +0000 UTC" firstStartedPulling="2025-09-06 00:21:28.50461742 +0000 UTC m=+20.409963455" lastFinishedPulling="2025-09-06 00:21:51.737856047 +0000 UTC m=+43.643202182" observedRunningTime="2025-09-06 00:21:52.723530325 +0000 UTC m=+44.628876460" watchObservedRunningTime="2025-09-06 00:21:53.027514758 +0000 UTC m=+44.932860893" Sep 6 00:21:53.092509 systemd[1]: Created slice kubepods-besteffort-pod4d2e18e9_e022_43a5_a640_8dc4c8432da8.slice. Sep 6 00:21:53.206174 kubelet[2412]: I0906 00:21:53.206108 2412 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"whisker-ca-bundle\" (UniqueName: \"kubernetes.io/configmap/4d2e18e9-e022-43a5-a640-8dc4c8432da8-whisker-ca-bundle\") pod \"whisker-ccccd4f96-hfwj8\" (UID: \"4d2e18e9-e022-43a5-a640-8dc4c8432da8\") " pod="calico-system/whisker-ccccd4f96-hfwj8" Sep 6 00:21:53.206174 kubelet[2412]: I0906 00:21:53.206178 2412 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"whisker-backend-key-pair\" (UniqueName: \"kubernetes.io/secret/4d2e18e9-e022-43a5-a640-8dc4c8432da8-whisker-backend-key-pair\") pod \"whisker-ccccd4f96-hfwj8\" (UID: \"4d2e18e9-e022-43a5-a640-8dc4c8432da8\") " pod="calico-system/whisker-ccccd4f96-hfwj8" Sep 6 00:21:53.206472 kubelet[2412]: I0906 00:21:53.206215 2412 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-xlvq5\" (UniqueName: \"kubernetes.io/projected/4d2e18e9-e022-43a5-a640-8dc4c8432da8-kube-api-access-xlvq5\") pod \"whisker-ccccd4f96-hfwj8\" (UID: \"4d2e18e9-e022-43a5-a640-8dc4c8432da8\") " pod="calico-system/whisker-ccccd4f96-hfwj8" Sep 6 00:21:53.397532 env[1421]: time="2025-09-06T00:21:53.397472374Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:whisker-ccccd4f96-hfwj8,Uid:4d2e18e9-e022-43a5-a640-8dc4c8432da8,Namespace:calico-system,Attempt:0,}" Sep 6 00:21:53.566601 systemd-networkd[1577]: calie055ecd1653: Link UP Sep 6 00:21:53.580229 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): eth0: link becomes ready Sep 6 00:21:53.580516 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): calie055ecd1653: link becomes ready Sep 6 00:21:53.581145 systemd-networkd[1577]: calie055ecd1653: Gained carrier Sep 6 00:21:53.598725 env[1421]: 2025-09-06 00:21:53.460 [INFO][3617] cni-plugin/utils.go 100: File /var/lib/calico/mtu does not exist Sep 6 00:21:53.598725 env[1421]: 2025-09-06 00:21:53.470 [INFO][3617] cni-plugin/plugin.go 340: Calico CNI found existing endpoint: &{{WorkloadEndpoint projectcalico.org/v3} {ci--3510.3.8--n--28804d0655-k8s-whisker--ccccd4f96--hfwj8-eth0 whisker-ccccd4f96- calico-system 4d2e18e9-e022-43a5-a640-8dc4c8432da8 933 0 2025-09-06 00:21:53 +0000 UTC map[app.kubernetes.io/name:whisker k8s-app:whisker pod-template-hash:ccccd4f96 projectcalico.org/namespace:calico-system projectcalico.org/orchestrator:k8s projectcalico.org/serviceaccount:whisker] map[] [] [] []} {k8s ci-3510.3.8-n-28804d0655 whisker-ccccd4f96-hfwj8 eth0 whisker [] [] [kns.calico-system ksa.calico-system.whisker] calie055ecd1653 [] [] }} ContainerID="6c6fb1bd5cf279c48e23720e823619b877fcb8207314d2d3c0c1237a649487a5" Namespace="calico-system" Pod="whisker-ccccd4f96-hfwj8" WorkloadEndpoint="ci--3510.3.8--n--28804d0655-k8s-whisker--ccccd4f96--hfwj8-" Sep 6 00:21:53.598725 env[1421]: 2025-09-06 00:21:53.471 [INFO][3617] cni-plugin/k8s.go 74: Extracted identifiers for CmdAddK8s ContainerID="6c6fb1bd5cf279c48e23720e823619b877fcb8207314d2d3c0c1237a649487a5" Namespace="calico-system" Pod="whisker-ccccd4f96-hfwj8" WorkloadEndpoint="ci--3510.3.8--n--28804d0655-k8s-whisker--ccccd4f96--hfwj8-eth0" Sep 6 00:21:53.598725 env[1421]: 2025-09-06 00:21:53.502 [INFO][3633] ipam/ipam_plugin.go 225: Calico CNI IPAM request count IPv4=1 IPv6=0 ContainerID="6c6fb1bd5cf279c48e23720e823619b877fcb8207314d2d3c0c1237a649487a5" HandleID="k8s-pod-network.6c6fb1bd5cf279c48e23720e823619b877fcb8207314d2d3c0c1237a649487a5" Workload="ci--3510.3.8--n--28804d0655-k8s-whisker--ccccd4f96--hfwj8-eth0" Sep 6 00:21:53.598725 env[1421]: 2025-09-06 00:21:53.502 [INFO][3633] ipam/ipam_plugin.go 265: Auto assigning IP ContainerID="6c6fb1bd5cf279c48e23720e823619b877fcb8207314d2d3c0c1237a649487a5" HandleID="k8s-pod-network.6c6fb1bd5cf279c48e23720e823619b877fcb8207314d2d3c0c1237a649487a5" Workload="ci--3510.3.8--n--28804d0655-k8s-whisker--ccccd4f96--hfwj8-eth0" assignArgs=ipam.AutoAssignArgs{Num4:1, Num6:0, HandleID:(*string)(0xc0002d4ff0), Attrs:map[string]string{"namespace":"calico-system", "node":"ci-3510.3.8-n-28804d0655", "pod":"whisker-ccccd4f96-hfwj8", "timestamp":"2025-09-06 00:21:53.502467161 +0000 UTC"}, Hostname:"ci-3510.3.8-n-28804d0655", IPv4Pools:[]net.IPNet{}, IPv6Pools:[]net.IPNet{}, MaxBlocksPerHost:0, HostReservedAttrIPv4s:(*ipam.HostReservedAttr)(nil), HostReservedAttrIPv6s:(*ipam.HostReservedAttr)(nil), IntendedUse:"Workload"} Sep 6 00:21:53.598725 env[1421]: 2025-09-06 00:21:53.502 [INFO][3633] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Sep 6 00:21:53.598725 env[1421]: 2025-09-06 00:21:53.502 [INFO][3633] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Sep 6 00:21:53.598725 env[1421]: 2025-09-06 00:21:53.502 [INFO][3633] ipam/ipam.go 110: Auto-assign 1 ipv4, 0 ipv6 addrs for host 'ci-3510.3.8-n-28804d0655' Sep 6 00:21:53.598725 env[1421]: 2025-09-06 00:21:53.509 [INFO][3633] ipam/ipam.go 691: Looking up existing affinities for host handle="k8s-pod-network.6c6fb1bd5cf279c48e23720e823619b877fcb8207314d2d3c0c1237a649487a5" host="ci-3510.3.8-n-28804d0655" Sep 6 00:21:53.598725 env[1421]: 2025-09-06 00:21:53.514 [INFO][3633] ipam/ipam.go 394: Looking up existing affinities for host host="ci-3510.3.8-n-28804d0655" Sep 6 00:21:53.598725 env[1421]: 2025-09-06 00:21:53.519 [INFO][3633] ipam/ipam.go 511: Trying affinity for 192.168.107.64/26 host="ci-3510.3.8-n-28804d0655" Sep 6 00:21:53.598725 env[1421]: 2025-09-06 00:21:53.521 [INFO][3633] ipam/ipam.go 158: Attempting to load block cidr=192.168.107.64/26 host="ci-3510.3.8-n-28804d0655" Sep 6 00:21:53.598725 env[1421]: 2025-09-06 00:21:53.523 [INFO][3633] ipam/ipam.go 235: Affinity is confirmed and block has been loaded cidr=192.168.107.64/26 host="ci-3510.3.8-n-28804d0655" Sep 6 00:21:53.598725 env[1421]: 2025-09-06 00:21:53.523 [INFO][3633] ipam/ipam.go 1220: Attempting to assign 1 addresses from block block=192.168.107.64/26 handle="k8s-pod-network.6c6fb1bd5cf279c48e23720e823619b877fcb8207314d2d3c0c1237a649487a5" host="ci-3510.3.8-n-28804d0655" Sep 6 00:21:53.598725 env[1421]: 2025-09-06 00:21:53.524 [INFO][3633] ipam/ipam.go 1764: Creating new handle: k8s-pod-network.6c6fb1bd5cf279c48e23720e823619b877fcb8207314d2d3c0c1237a649487a5 Sep 6 00:21:53.598725 env[1421]: 2025-09-06 00:21:53.529 [INFO][3633] ipam/ipam.go 1243: Writing block in order to claim IPs block=192.168.107.64/26 handle="k8s-pod-network.6c6fb1bd5cf279c48e23720e823619b877fcb8207314d2d3c0c1237a649487a5" host="ci-3510.3.8-n-28804d0655" Sep 6 00:21:53.598725 env[1421]: 2025-09-06 00:21:53.539 [INFO][3633] ipam/ipam.go 1256: Successfully claimed IPs: [192.168.107.65/26] block=192.168.107.64/26 handle="k8s-pod-network.6c6fb1bd5cf279c48e23720e823619b877fcb8207314d2d3c0c1237a649487a5" host="ci-3510.3.8-n-28804d0655" Sep 6 00:21:53.598725 env[1421]: 2025-09-06 00:21:53.539 [INFO][3633] ipam/ipam.go 878: Auto-assigned 1 out of 1 IPv4s: [192.168.107.65/26] handle="k8s-pod-network.6c6fb1bd5cf279c48e23720e823619b877fcb8207314d2d3c0c1237a649487a5" host="ci-3510.3.8-n-28804d0655" Sep 6 00:21:53.598725 env[1421]: 2025-09-06 00:21:53.539 [INFO][3633] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Sep 6 00:21:53.598725 env[1421]: 2025-09-06 00:21:53.539 [INFO][3633] ipam/ipam_plugin.go 283: Calico CNI IPAM assigned addresses IPv4=[192.168.107.65/26] IPv6=[] ContainerID="6c6fb1bd5cf279c48e23720e823619b877fcb8207314d2d3c0c1237a649487a5" HandleID="k8s-pod-network.6c6fb1bd5cf279c48e23720e823619b877fcb8207314d2d3c0c1237a649487a5" Workload="ci--3510.3.8--n--28804d0655-k8s-whisker--ccccd4f96--hfwj8-eth0" Sep 6 00:21:53.600287 env[1421]: 2025-09-06 00:21:53.541 [INFO][3617] cni-plugin/k8s.go 418: Populated endpoint ContainerID="6c6fb1bd5cf279c48e23720e823619b877fcb8207314d2d3c0c1237a649487a5" Namespace="calico-system" Pod="whisker-ccccd4f96-hfwj8" WorkloadEndpoint="ci--3510.3.8--n--28804d0655-k8s-whisker--ccccd4f96--hfwj8-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ci--3510.3.8--n--28804d0655-k8s-whisker--ccccd4f96--hfwj8-eth0", GenerateName:"whisker-ccccd4f96-", Namespace:"calico-system", SelfLink:"", UID:"4d2e18e9-e022-43a5-a640-8dc4c8432da8", ResourceVersion:"933", Generation:0, CreationTimestamp:time.Date(2025, time.September, 6, 0, 21, 53, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"whisker", "k8s-app":"whisker", "pod-template-hash":"ccccd4f96", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"whisker"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ci-3510.3.8-n-28804d0655", ContainerID:"", Pod:"whisker-ccccd4f96-hfwj8", Endpoint:"eth0", ServiceAccountName:"whisker", IPNetworks:[]string{"192.168.107.65/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.whisker"}, InterfaceName:"calie055ecd1653", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Sep 6 00:21:53.600287 env[1421]: 2025-09-06 00:21:53.541 [INFO][3617] cni-plugin/k8s.go 419: Calico CNI using IPs: [192.168.107.65/32] ContainerID="6c6fb1bd5cf279c48e23720e823619b877fcb8207314d2d3c0c1237a649487a5" Namespace="calico-system" Pod="whisker-ccccd4f96-hfwj8" WorkloadEndpoint="ci--3510.3.8--n--28804d0655-k8s-whisker--ccccd4f96--hfwj8-eth0" Sep 6 00:21:53.600287 env[1421]: 2025-09-06 00:21:53.541 [INFO][3617] cni-plugin/dataplane_linux.go 69: Setting the host side veth name to calie055ecd1653 ContainerID="6c6fb1bd5cf279c48e23720e823619b877fcb8207314d2d3c0c1237a649487a5" Namespace="calico-system" Pod="whisker-ccccd4f96-hfwj8" WorkloadEndpoint="ci--3510.3.8--n--28804d0655-k8s-whisker--ccccd4f96--hfwj8-eth0" Sep 6 00:21:53.600287 env[1421]: 2025-09-06 00:21:53.580 [INFO][3617] cni-plugin/dataplane_linux.go 508: Disabling IPv4 forwarding ContainerID="6c6fb1bd5cf279c48e23720e823619b877fcb8207314d2d3c0c1237a649487a5" Namespace="calico-system" Pod="whisker-ccccd4f96-hfwj8" WorkloadEndpoint="ci--3510.3.8--n--28804d0655-k8s-whisker--ccccd4f96--hfwj8-eth0" Sep 6 00:21:53.600287 env[1421]: 2025-09-06 00:21:53.581 [INFO][3617] cni-plugin/k8s.go 446: Added Mac, interface name, and active container ID to endpoint ContainerID="6c6fb1bd5cf279c48e23720e823619b877fcb8207314d2d3c0c1237a649487a5" Namespace="calico-system" Pod="whisker-ccccd4f96-hfwj8" WorkloadEndpoint="ci--3510.3.8--n--28804d0655-k8s-whisker--ccccd4f96--hfwj8-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ci--3510.3.8--n--28804d0655-k8s-whisker--ccccd4f96--hfwj8-eth0", GenerateName:"whisker-ccccd4f96-", Namespace:"calico-system", SelfLink:"", UID:"4d2e18e9-e022-43a5-a640-8dc4c8432da8", ResourceVersion:"933", Generation:0, CreationTimestamp:time.Date(2025, time.September, 6, 0, 21, 53, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"whisker", "k8s-app":"whisker", "pod-template-hash":"ccccd4f96", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"whisker"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ci-3510.3.8-n-28804d0655", ContainerID:"6c6fb1bd5cf279c48e23720e823619b877fcb8207314d2d3c0c1237a649487a5", Pod:"whisker-ccccd4f96-hfwj8", Endpoint:"eth0", ServiceAccountName:"whisker", IPNetworks:[]string{"192.168.107.65/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.whisker"}, InterfaceName:"calie055ecd1653", MAC:"06:ad:d0:3c:07:0f", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Sep 6 00:21:53.600287 env[1421]: 2025-09-06 00:21:53.595 [INFO][3617] cni-plugin/k8s.go 532: Wrote updated endpoint to datastore ContainerID="6c6fb1bd5cf279c48e23720e823619b877fcb8207314d2d3c0c1237a649487a5" Namespace="calico-system" Pod="whisker-ccccd4f96-hfwj8" WorkloadEndpoint="ci--3510.3.8--n--28804d0655-k8s-whisker--ccccd4f96--hfwj8-eth0" Sep 6 00:21:53.619320 env[1421]: time="2025-09-06T00:21:53.619240702Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Sep 6 00:21:53.619320 env[1421]: time="2025-09-06T00:21:53.619281102Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Sep 6 00:21:53.619320 env[1421]: time="2025-09-06T00:21:53.619295402Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Sep 6 00:21:53.619847 env[1421]: time="2025-09-06T00:21:53.619728404Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/6c6fb1bd5cf279c48e23720e823619b877fcb8207314d2d3c0c1237a649487a5 pid=3654 runtime=io.containerd.runc.v2 Sep 6 00:21:53.634845 systemd[1]: Started cri-containerd-6c6fb1bd5cf279c48e23720e823619b877fcb8207314d2d3c0c1237a649487a5.scope. Sep 6 00:21:53.650000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:53.650000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:53.650000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:53.650000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:53.650000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:53.650000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:53.650000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:53.650000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:53.650000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:53.650000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:53.650000 audit: BPF prog-id=140 op=LOAD Sep 6 00:21:53.652000 audit[3663]: AVC avc: denied { bpf } for pid=3663 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:53.652000 audit[3663]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000151c48 a2=10 a3=1c items=0 ppid=3654 pid=3663 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:21:53.652000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3663366662316264356366323739633438653233373230653832333631 Sep 6 00:21:53.652000 audit[3663]: AVC avc: denied { perfmon } for pid=3663 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:53.652000 audit[3663]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001516b0 a2=3c a3=c items=0 ppid=3654 pid=3663 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:21:53.652000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3663366662316264356366323739633438653233373230653832333631 Sep 6 00:21:53.652000 audit[3663]: AVC avc: denied { bpf } for pid=3663 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:53.652000 audit[3663]: AVC avc: denied { bpf } for pid=3663 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:53.652000 audit[3663]: AVC avc: denied { bpf } for pid=3663 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:53.652000 audit[3663]: AVC avc: denied { perfmon } for pid=3663 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:53.652000 audit[3663]: AVC avc: denied { perfmon } for pid=3663 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:53.652000 audit[3663]: AVC avc: denied { perfmon } for pid=3663 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:53.652000 audit[3663]: AVC avc: denied { perfmon } for pid=3663 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:53.652000 audit[3663]: AVC avc: denied { perfmon } for pid=3663 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:53.652000 audit[3663]: AVC avc: denied { bpf } for pid=3663 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:53.652000 audit[3663]: AVC avc: denied { bpf } for pid=3663 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:53.652000 audit: BPF prog-id=141 op=LOAD Sep 6 00:21:53.652000 audit[3663]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001519d8 a2=78 a3=c000269080 items=0 ppid=3654 pid=3663 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:21:53.652000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3663366662316264356366323739633438653233373230653832333631 Sep 6 00:21:53.653000 audit[3663]: AVC avc: denied { bpf } for pid=3663 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:53.653000 audit[3663]: AVC avc: denied { bpf } for pid=3663 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:53.653000 audit[3663]: AVC avc: denied { perfmon } for pid=3663 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:53.653000 audit[3663]: AVC avc: denied { perfmon } for pid=3663 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:53.653000 audit[3663]: AVC avc: denied { perfmon } for pid=3663 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:53.653000 audit[3663]: AVC avc: denied { perfmon } for pid=3663 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:53.653000 audit[3663]: AVC avc: denied { perfmon } for pid=3663 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:53.653000 audit[3663]: AVC avc: denied { bpf } for pid=3663 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:53.653000 audit[3663]: AVC avc: denied { bpf } for pid=3663 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:53.653000 audit: BPF prog-id=142 op=LOAD Sep 6 00:21:53.653000 audit[3663]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000151770 a2=78 a3=c0002690c8 items=0 ppid=3654 pid=3663 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:21:53.653000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3663366662316264356366323739633438653233373230653832333631 Sep 6 00:21:53.654000 audit: BPF prog-id=142 op=UNLOAD Sep 6 00:21:53.654000 audit: BPF prog-id=141 op=UNLOAD Sep 6 00:21:53.654000 audit[3663]: AVC avc: denied { bpf } for pid=3663 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:53.654000 audit[3663]: AVC avc: denied { bpf } for pid=3663 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:53.654000 audit[3663]: AVC avc: denied { bpf } for pid=3663 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:53.654000 audit[3663]: AVC avc: denied { perfmon } for pid=3663 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:53.654000 audit[3663]: AVC avc: denied { perfmon } for pid=3663 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:53.654000 audit[3663]: AVC avc: denied { perfmon } for pid=3663 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:53.654000 audit[3663]: AVC avc: denied { perfmon } for pid=3663 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:53.654000 audit[3663]: AVC avc: denied { perfmon } for pid=3663 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:53.654000 audit[3663]: AVC avc: denied { bpf } for pid=3663 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:53.654000 audit[3663]: AVC avc: denied { bpf } for pid=3663 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:53.654000 audit: BPF prog-id=143 op=LOAD Sep 6 00:21:53.654000 audit[3663]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000151c30 a2=78 a3=c0002694d8 items=0 ppid=3654 pid=3663 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:21:53.654000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3663366662316264356366323739633438653233373230653832333631 Sep 6 00:21:53.696358 env[1421]: time="2025-09-06T00:21:53.696312159Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:whisker-ccccd4f96-hfwj8,Uid:4d2e18e9-e022-43a5-a640-8dc4c8432da8,Namespace:calico-system,Attempt:0,} returns sandbox id \"6c6fb1bd5cf279c48e23720e823619b877fcb8207314d2d3c0c1237a649487a5\"" Sep 6 00:21:53.698514 env[1421]: time="2025-09-06T00:21:53.698474370Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/whisker:v3.30.3\"" Sep 6 00:21:53.822000 audit[3721]: AVC avc: denied { write } for pid=3721 comm="tee" name="fd" dev="proc" ino=29602 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0 Sep 6 00:21:53.822000 audit[3721]: SYSCALL arch=c000003e syscall=257 success=yes exit=3 a0=ffffff9c a1=7fff9ed457c4 a2=241 a3=1b6 items=1 ppid=3694 pid=3721 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tee" exe="/usr/bin/coreutils" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:21:53.822000 audit: CWD cwd="/etc/service/enabled/bird/log" Sep 6 00:21:53.822000 audit: PATH item=0 name="/dev/fd/63" inode=29574 dev=00:0c mode=010600 ouid=0 ogid=0 rdev=00:00 obj=system_u:system_r:kernel_t:s0 nametype=NORMAL cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Sep 6 00:21:53.822000 audit: PROCTITLE proctitle=2F7573722F62696E2F636F72657574696C73002D2D636F72657574696C732D70726F672D73686562616E673D746565002F7573722F62696E2F746565002F6465762F66642F3633 Sep 6 00:21:53.826000 audit[3740]: AVC avc: denied { write } for pid=3740 comm="tee" name="fd" dev="proc" ino=30247 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0 Sep 6 00:21:53.826000 audit[3733]: AVC avc: denied { write } for pid=3733 comm="tee" name="fd" dev="proc" ino=30250 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0 Sep 6 00:21:53.826000 audit[3740]: SYSCALL arch=c000003e syscall=257 success=yes exit=3 a0=ffffff9c a1=7fff09acf7c3 a2=241 a3=1b6 items=1 ppid=3708 pid=3740 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tee" exe="/usr/bin/coreutils" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:21:53.826000 audit: CWD cwd="/etc/service/enabled/bird6/log" Sep 6 00:21:53.826000 audit: PATH item=0 name="/dev/fd/63" inode=29599 dev=00:0c mode=010600 ouid=0 ogid=0 rdev=00:00 obj=system_u:system_r:kernel_t:s0 nametype=NORMAL cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Sep 6 00:21:53.826000 audit: PROCTITLE proctitle=2F7573722F62696E2F636F72657574696C73002D2D636F72657574696C732D70726F672D73686562616E673D746565002F7573722F62696E2F746565002F6465762F66642F3633 Sep 6 00:21:53.840000 audit[3736]: AVC avc: denied { write } for pid=3736 comm="tee" name="fd" dev="proc" ino=30255 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0 Sep 6 00:21:53.843000 audit[3746]: AVC avc: denied { write } for pid=3746 comm="tee" name="fd" dev="proc" ino=30258 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0 Sep 6 00:21:53.826000 audit[3733]: SYSCALL arch=c000003e syscall=257 success=yes exit=3 a0=ffffff9c a1=7ffc1fa967c3 a2=241 a3=1b6 items=1 ppid=3700 pid=3733 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tee" exe="/usr/bin/coreutils" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:21:53.826000 audit: CWD cwd="/etc/service/enabled/felix/log" Sep 6 00:21:53.826000 audit: PATH item=0 name="/dev/fd/63" inode=29583 dev=00:0c mode=010600 ouid=0 ogid=0 rdev=00:00 obj=system_u:system_r:kernel_t:s0 nametype=NORMAL cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Sep 6 00:21:53.826000 audit: PROCTITLE proctitle=2F7573722F62696E2F636F72657574696C73002D2D636F72657574696C732D70726F672D73686562616E673D746565002F7573722F62696E2F746565002F6465762F66642F3633 Sep 6 00:21:53.843000 audit[3746]: SYSCALL arch=c000003e syscall=257 success=yes exit=3 a0=ffffff9c a1=7fff46a097c5 a2=241 a3=1b6 items=1 ppid=3698 pid=3746 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tee" exe="/usr/bin/coreutils" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:21:53.843000 audit: CWD cwd="/etc/service/enabled/cni/log" Sep 6 00:21:53.843000 audit: PATH item=0 name="/dev/fd/63" inode=29604 dev=00:0c mode=010600 ouid=0 ogid=0 rdev=00:00 obj=system_u:system_r:kernel_t:s0 nametype=NORMAL cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Sep 6 00:21:53.843000 audit: PROCTITLE proctitle=2F7573722F62696E2F636F72657574696C73002D2D636F72657574696C732D70726F672D73686562616E673D746565002F7573722F62696E2F746565002F6465762F66642F3633 Sep 6 00:21:53.840000 audit[3736]: SYSCALL arch=c000003e syscall=257 success=yes exit=3 a0=ffffff9c a1=7fff81fa67b3 a2=241 a3=1b6 items=1 ppid=3695 pid=3736 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tee" exe="/usr/bin/coreutils" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:21:53.840000 audit: CWD cwd="/etc/service/enabled/allocate-tunnel-addrs/log" Sep 6 00:21:53.840000 audit: PATH item=0 name="/dev/fd/63" inode=29594 dev=00:0c mode=010600 ouid=0 ogid=0 rdev=00:00 obj=system_u:system_r:kernel_t:s0 nametype=NORMAL cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Sep 6 00:21:53.840000 audit: PROCTITLE proctitle=2F7573722F62696E2F636F72657574696C73002D2D636F72657574696C732D70726F672D73686562616E673D746565002F7573722F62696E2F746565002F6465762F66642F3633 Sep 6 00:21:53.863000 audit[3764]: AVC avc: denied { write } for pid=3764 comm="tee" name="fd" dev="proc" ino=29611 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0 Sep 6 00:21:53.863000 audit[3764]: SYSCALL arch=c000003e syscall=257 success=yes exit=3 a0=ffffff9c a1=7fff409dd7c3 a2=241 a3=1b6 items=1 ppid=3710 pid=3764 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tee" exe="/usr/bin/coreutils" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:21:53.863000 audit: CWD cwd="/etc/service/enabled/confd/log" Sep 6 00:21:53.863000 audit: PATH item=0 name="/dev/fd/63" inode=30262 dev=00:0c mode=010600 ouid=0 ogid=0 rdev=00:00 obj=system_u:system_r:kernel_t:s0 nametype=NORMAL cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Sep 6 00:21:53.863000 audit: PROCTITLE proctitle=2F7573722F62696E2F636F72657574696C73002D2D636F72657574696C732D70726F672D73686562616E673D746565002F7573722F62696E2F746565002F6465762F66642F3633 Sep 6 00:21:53.872000 audit[3768]: AVC avc: denied { write } for pid=3768 comm="tee" name="fd" dev="proc" ino=30271 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0 Sep 6 00:21:53.872000 audit[3768]: SYSCALL arch=c000003e syscall=257 success=yes exit=3 a0=ffffff9c a1=7fff98a767b4 a2=241 a3=1b6 items=1 ppid=3704 pid=3768 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tee" exe="/usr/bin/coreutils" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:21:53.872000 audit: CWD cwd="/etc/service/enabled/node-status-reporter/log" Sep 6 00:21:53.872000 audit: PATH item=0 name="/dev/fd/63" inode=30266 dev=00:0c mode=010600 ouid=0 ogid=0 rdev=00:00 obj=system_u:system_r:kernel_t:s0 nametype=NORMAL cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Sep 6 00:21:53.872000 audit: PROCTITLE proctitle=2F7573722F62696E2F636F72657574696C73002D2D636F72657574696C732D70726F672D73686562616E673D746565002F7573722F62696E2F746565002F6465762F66642F3633 Sep 6 00:21:54.180000 audit[3803]: AVC avc: denied { bpf } for pid=3803 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:54.180000 audit[3803]: AVC avc: denied { bpf } for pid=3803 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:54.180000 audit[3803]: AVC avc: denied { perfmon } for pid=3803 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:54.180000 audit[3803]: AVC avc: denied { perfmon } for pid=3803 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:54.180000 audit[3803]: AVC avc: denied { perfmon } for pid=3803 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:54.180000 audit[3803]: AVC avc: denied { perfmon } for pid=3803 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:54.180000 audit[3803]: AVC avc: denied { perfmon } for pid=3803 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:54.180000 audit[3803]: AVC avc: denied { bpf } for pid=3803 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:54.180000 audit[3803]: AVC avc: denied { bpf } for pid=3803 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:54.180000 audit: BPF prog-id=144 op=LOAD Sep 6 00:21:54.180000 audit[3803]: SYSCALL arch=c000003e syscall=321 success=yes exit=3 a0=5 a1=7ffd5bdf8830 a2=98 a3=1fffffffffffffff items=0 ppid=3701 pid=3803 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:21:54.180000 audit: PROCTITLE proctitle=627066746F6F6C006D617000637265617465002F7379732F66732F6270662F74632F676C6F62616C732F63616C695F63746C625F70726F677300747970650070726F675F6172726179006B657900340076616C7565003400656E74726965730033006E616D650063616C695F63746C625F70726F677300666C6167730030 Sep 6 00:21:54.181000 audit: BPF prog-id=144 op=UNLOAD Sep 6 00:21:54.181000 audit[3803]: AVC avc: denied { bpf } for pid=3803 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:54.181000 audit[3803]: AVC avc: denied { bpf } for pid=3803 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:54.181000 audit[3803]: AVC avc: denied { perfmon } for pid=3803 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:54.181000 audit[3803]: AVC avc: denied { perfmon } for pid=3803 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:54.181000 audit[3803]: AVC avc: denied { perfmon } for pid=3803 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:54.181000 audit[3803]: AVC avc: denied { perfmon } for pid=3803 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:54.181000 audit[3803]: AVC avc: denied { perfmon } for pid=3803 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:54.181000 audit[3803]: AVC avc: denied { bpf } for pid=3803 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:54.181000 audit[3803]: AVC avc: denied { bpf } for pid=3803 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:54.181000 audit: BPF prog-id=145 op=LOAD Sep 6 00:21:54.181000 audit[3803]: SYSCALL arch=c000003e syscall=321 success=yes exit=3 a0=5 a1=7ffd5bdf8710 a2=94 a3=3 items=0 ppid=3701 pid=3803 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:21:54.181000 audit: PROCTITLE proctitle=627066746F6F6C006D617000637265617465002F7379732F66732F6270662F74632F676C6F62616C732F63616C695F63746C625F70726F677300747970650070726F675F6172726179006B657900340076616C7565003400656E74726965730033006E616D650063616C695F63746C625F70726F677300666C6167730030 Sep 6 00:21:54.181000 audit: BPF prog-id=145 op=UNLOAD Sep 6 00:21:54.181000 audit[3803]: AVC avc: denied { bpf } for pid=3803 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:54.181000 audit[3803]: AVC avc: denied { bpf } for pid=3803 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:54.181000 audit[3803]: AVC avc: denied { perfmon } for pid=3803 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:54.181000 audit[3803]: AVC avc: denied { perfmon } for pid=3803 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:54.181000 audit[3803]: AVC avc: denied { perfmon } for pid=3803 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:54.181000 audit[3803]: AVC avc: denied { perfmon } for pid=3803 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:54.181000 audit[3803]: AVC avc: denied { perfmon } for pid=3803 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:54.181000 audit[3803]: AVC avc: denied { bpf } for pid=3803 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:54.181000 audit[3803]: AVC avc: denied { bpf } for pid=3803 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:54.181000 audit: BPF prog-id=146 op=LOAD Sep 6 00:21:54.181000 audit[3803]: SYSCALL arch=c000003e syscall=321 success=yes exit=3 a0=5 a1=7ffd5bdf8750 a2=94 a3=7ffd5bdf8930 items=0 ppid=3701 pid=3803 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:21:54.181000 audit: PROCTITLE proctitle=627066746F6F6C006D617000637265617465002F7379732F66732F6270662F74632F676C6F62616C732F63616C695F63746C625F70726F677300747970650070726F675F6172726179006B657900340076616C7565003400656E74726965730033006E616D650063616C695F63746C625F70726F677300666C6167730030 Sep 6 00:21:54.181000 audit: BPF prog-id=146 op=UNLOAD Sep 6 00:21:54.181000 audit[3803]: AVC avc: denied { perfmon } for pid=3803 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:54.181000 audit[3803]: SYSCALL arch=c000003e syscall=321 success=yes exit=3 a0=0 a1=7ffd5bdf8820 a2=50 a3=a000000085 items=0 ppid=3701 pid=3803 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:21:54.181000 audit: PROCTITLE proctitle=627066746F6F6C006D617000637265617465002F7379732F66732F6270662F74632F676C6F62616C732F63616C695F63746C625F70726F677300747970650070726F675F6172726179006B657900340076616C7565003400656E74726965730033006E616D650063616C695F63746C625F70726F677300666C6167730030 Sep 6 00:21:54.183000 audit[3804]: AVC avc: denied { bpf } for pid=3804 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:54.183000 audit[3804]: AVC avc: denied { bpf } for pid=3804 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:54.183000 audit[3804]: AVC avc: denied { perfmon } for pid=3804 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:54.183000 audit[3804]: AVC avc: denied { perfmon } for pid=3804 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:54.183000 audit[3804]: AVC avc: denied { perfmon } for pid=3804 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:54.183000 audit[3804]: AVC avc: denied { perfmon } for pid=3804 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:54.183000 audit[3804]: AVC avc: denied { perfmon } for pid=3804 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:54.183000 audit[3804]: AVC avc: denied { bpf } for pid=3804 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:54.183000 audit[3804]: AVC avc: denied { bpf } for pid=3804 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:54.183000 audit: BPF prog-id=147 op=LOAD Sep 6 00:21:54.183000 audit[3804]: SYSCALL arch=c000003e syscall=321 success=yes exit=3 a0=5 a1=7fffb7afedf0 a2=98 a3=3 items=0 ppid=3701 pid=3804 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:21:54.183000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Sep 6 00:21:54.183000 audit: BPF prog-id=147 op=UNLOAD Sep 6 00:21:54.183000 audit[3804]: AVC avc: denied { bpf } for pid=3804 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:54.183000 audit[3804]: AVC avc: denied { bpf } for pid=3804 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:54.183000 audit[3804]: AVC avc: denied { perfmon } for pid=3804 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:54.183000 audit[3804]: AVC avc: denied { perfmon } for pid=3804 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:54.183000 audit[3804]: AVC avc: denied { perfmon } for pid=3804 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:54.183000 audit[3804]: AVC avc: denied { perfmon } for pid=3804 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:54.183000 audit[3804]: AVC avc: denied { perfmon } for pid=3804 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:54.183000 audit[3804]: AVC avc: denied { bpf } for pid=3804 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:54.183000 audit[3804]: AVC avc: denied { bpf } for pid=3804 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:54.183000 audit: BPF prog-id=148 op=LOAD Sep 6 00:21:54.183000 audit[3804]: SYSCALL arch=c000003e syscall=321 success=yes exit=4 a0=5 a1=7fffb7afebe0 a2=94 a3=54428f items=0 ppid=3701 pid=3804 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:21:54.183000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Sep 6 00:21:54.183000 audit: BPF prog-id=148 op=UNLOAD Sep 6 00:21:54.183000 audit[3804]: AVC avc: denied { bpf } for pid=3804 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:54.183000 audit[3804]: AVC avc: denied { bpf } for pid=3804 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:54.183000 audit[3804]: AVC avc: denied { perfmon } for pid=3804 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:54.183000 audit[3804]: AVC avc: denied { perfmon } for pid=3804 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:54.183000 audit[3804]: AVC avc: denied { perfmon } for pid=3804 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:54.183000 audit[3804]: AVC avc: denied { perfmon } for pid=3804 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:54.183000 audit[3804]: AVC avc: denied { perfmon } for pid=3804 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:54.183000 audit[3804]: AVC avc: denied { bpf } for pid=3804 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:54.183000 audit[3804]: AVC avc: denied { bpf } for pid=3804 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:54.183000 audit: BPF prog-id=149 op=LOAD Sep 6 00:21:54.183000 audit[3804]: SYSCALL arch=c000003e syscall=321 success=yes exit=4 a0=5 a1=7fffb7afec10 a2=94 a3=2 items=0 ppid=3701 pid=3804 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:21:54.183000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Sep 6 00:21:54.183000 audit: BPF prog-id=149 op=UNLOAD Sep 6 00:21:54.309000 audit[3804]: AVC avc: denied { bpf } for pid=3804 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:54.309000 audit[3804]: AVC avc: denied { bpf } for pid=3804 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:54.309000 audit[3804]: AVC avc: denied { perfmon } for pid=3804 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:54.309000 audit[3804]: AVC avc: denied { perfmon } for pid=3804 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:54.309000 audit[3804]: AVC avc: denied { perfmon } for pid=3804 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:54.309000 audit[3804]: AVC avc: denied { perfmon } for pid=3804 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:54.309000 audit[3804]: AVC avc: denied { perfmon } for pid=3804 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:54.309000 audit[3804]: AVC avc: denied { bpf } for pid=3804 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:54.309000 audit[3804]: AVC avc: denied { bpf } for pid=3804 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:54.309000 audit: BPF prog-id=150 op=LOAD Sep 6 00:21:54.309000 audit[3804]: SYSCALL arch=c000003e syscall=321 success=yes exit=4 a0=5 a1=7fffb7afead0 a2=94 a3=1 items=0 ppid=3701 pid=3804 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:21:54.309000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Sep 6 00:21:54.309000 audit: BPF prog-id=150 op=UNLOAD Sep 6 00:21:54.309000 audit[3804]: AVC avc: denied { perfmon } for pid=3804 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:54.309000 audit[3804]: SYSCALL arch=c000003e syscall=321 success=yes exit=4 a0=0 a1=7fffb7afeba0 a2=50 a3=7fffb7afec80 items=0 ppid=3701 pid=3804 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:21:54.309000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Sep 6 00:21:54.319000 audit[3804]: AVC avc: denied { bpf } for pid=3804 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:54.319000 audit[3804]: SYSCALL arch=c000003e syscall=321 success=yes exit=4 a0=12 a1=7fffb7afeae0 a2=28 a3=0 items=0 ppid=3701 pid=3804 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:21:54.319000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Sep 6 00:21:54.319000 audit[3804]: AVC avc: denied { bpf } for pid=3804 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:54.319000 audit[3804]: SYSCALL arch=c000003e syscall=321 success=no exit=-22 a0=12 a1=7fffb7afeb10 a2=28 a3=0 items=0 ppid=3701 pid=3804 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:21:54.319000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Sep 6 00:21:54.319000 audit[3804]: AVC avc: denied { bpf } for pid=3804 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:54.319000 audit[3804]: SYSCALL arch=c000003e syscall=321 success=no exit=-22 a0=12 a1=7fffb7afea20 a2=28 a3=0 items=0 ppid=3701 pid=3804 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:21:54.319000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Sep 6 00:21:54.319000 audit[3804]: AVC avc: denied { bpf } for pid=3804 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:54.319000 audit[3804]: SYSCALL arch=c000003e syscall=321 success=yes exit=4 a0=12 a1=7fffb7afeb30 a2=28 a3=0 items=0 ppid=3701 pid=3804 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:21:54.319000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Sep 6 00:21:54.319000 audit[3804]: AVC avc: denied { bpf } for pid=3804 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:54.319000 audit[3804]: SYSCALL arch=c000003e syscall=321 success=yes exit=4 a0=12 a1=7fffb7afeb10 a2=28 a3=0 items=0 ppid=3701 pid=3804 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:21:54.319000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Sep 6 00:21:54.319000 audit[3804]: AVC avc: denied { bpf } for pid=3804 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:54.319000 audit[3804]: SYSCALL arch=c000003e syscall=321 success=yes exit=4 a0=12 a1=7fffb7afeb00 a2=28 a3=0 items=0 ppid=3701 pid=3804 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:21:54.319000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Sep 6 00:21:54.319000 audit[3804]: AVC avc: denied { bpf } for pid=3804 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:54.319000 audit[3804]: SYSCALL arch=c000003e syscall=321 success=yes exit=4 a0=12 a1=7fffb7afeb30 a2=28 a3=0 items=0 ppid=3701 pid=3804 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:21:54.319000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Sep 6 00:21:54.319000 audit[3804]: AVC avc: denied { bpf } for pid=3804 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:54.319000 audit[3804]: SYSCALL arch=c000003e syscall=321 success=no exit=-22 a0=12 a1=7fffb7afeb10 a2=28 a3=0 items=0 ppid=3701 pid=3804 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:21:54.319000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Sep 6 00:21:54.319000 audit[3804]: AVC avc: denied { bpf } for pid=3804 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:54.319000 audit[3804]: SYSCALL arch=c000003e syscall=321 success=no exit=-22 a0=12 a1=7fffb7afeb30 a2=28 a3=0 items=0 ppid=3701 pid=3804 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:21:54.319000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Sep 6 00:21:54.319000 audit[3804]: AVC avc: denied { bpf } for pid=3804 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:54.319000 audit[3804]: SYSCALL arch=c000003e syscall=321 success=no exit=-22 a0=12 a1=7fffb7afeb00 a2=28 a3=0 items=0 ppid=3701 pid=3804 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:21:54.319000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Sep 6 00:21:54.319000 audit[3804]: AVC avc: denied { bpf } for pid=3804 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:54.319000 audit[3804]: SYSCALL arch=c000003e syscall=321 success=yes exit=4 a0=12 a1=7fffb7afeb70 a2=28 a3=0 items=0 ppid=3701 pid=3804 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:21:54.319000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Sep 6 00:21:54.320000 audit[3804]: AVC avc: denied { perfmon } for pid=3804 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:54.320000 audit[3804]: SYSCALL arch=c000003e syscall=321 success=yes exit=5 a0=0 a1=7fffb7afe920 a2=50 a3=1 items=0 ppid=3701 pid=3804 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:21:54.320000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Sep 6 00:21:54.320000 audit[3804]: AVC avc: denied { bpf } for pid=3804 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:54.320000 audit[3804]: AVC avc: denied { bpf } for pid=3804 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:54.320000 audit[3804]: AVC avc: denied { perfmon } for pid=3804 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:54.320000 audit[3804]: AVC avc: denied { perfmon } for pid=3804 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:54.320000 audit[3804]: AVC avc: denied { perfmon } for pid=3804 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:54.320000 audit[3804]: AVC avc: denied { perfmon } for pid=3804 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:54.320000 audit[3804]: AVC avc: denied { perfmon } for pid=3804 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:54.320000 audit[3804]: AVC avc: denied { bpf } for pid=3804 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:54.320000 audit[3804]: AVC avc: denied { bpf } for pid=3804 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:54.320000 audit: BPF prog-id=151 op=LOAD Sep 6 00:21:54.320000 audit[3804]: SYSCALL arch=c000003e syscall=321 success=yes exit=6 a0=5 a1=7fffb7afe920 a2=94 a3=5 items=0 ppid=3701 pid=3804 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:21:54.320000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Sep 6 00:21:54.320000 audit: BPF prog-id=151 op=UNLOAD Sep 6 00:21:54.320000 audit[3804]: AVC avc: denied { perfmon } for pid=3804 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:54.320000 audit[3804]: SYSCALL arch=c000003e syscall=321 success=yes exit=5 a0=0 a1=7fffb7afe9d0 a2=50 a3=1 items=0 ppid=3701 pid=3804 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:21:54.320000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Sep 6 00:21:54.320000 audit[3804]: AVC avc: denied { bpf } for pid=3804 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:54.320000 audit[3804]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=16 a1=7fffb7afeaf0 a2=4 a3=38 items=0 ppid=3701 pid=3804 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:21:54.320000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Sep 6 00:21:54.320000 audit[3804]: AVC avc: denied { bpf } for pid=3804 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:54.320000 audit[3804]: AVC avc: denied { bpf } for pid=3804 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:54.320000 audit[3804]: AVC avc: denied { perfmon } for pid=3804 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:54.320000 audit[3804]: AVC avc: denied { bpf } for pid=3804 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:54.320000 audit[3804]: AVC avc: denied { perfmon } for pid=3804 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:54.320000 audit[3804]: AVC avc: denied { perfmon } for pid=3804 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:54.320000 audit[3804]: AVC avc: denied { perfmon } for pid=3804 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:54.320000 audit[3804]: AVC avc: denied { perfmon } for pid=3804 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:54.320000 audit[3804]: AVC avc: denied { perfmon } for pid=3804 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:54.320000 audit[3804]: AVC avc: denied { bpf } for pid=3804 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:54.320000 audit[3804]: AVC avc: denied { confidentiality } for pid=3804 comm="bpftool" lockdown_reason="use of bpf to read kernel RAM" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=lockdown permissive=0 Sep 6 00:21:54.320000 audit[3804]: SYSCALL arch=c000003e syscall=321 success=no exit=-22 a0=5 a1=7fffb7afeb40 a2=94 a3=6 items=0 ppid=3701 pid=3804 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:21:54.320000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Sep 6 00:21:54.321000 audit[3804]: AVC avc: denied { bpf } for pid=3804 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:54.321000 audit[3804]: AVC avc: denied { bpf } for pid=3804 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:54.321000 audit[3804]: AVC avc: denied { perfmon } for pid=3804 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:54.321000 audit[3804]: AVC avc: denied { bpf } for pid=3804 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:54.321000 audit[3804]: AVC avc: denied { perfmon } for pid=3804 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:54.321000 audit[3804]: AVC avc: denied { perfmon } for pid=3804 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:54.321000 audit[3804]: AVC avc: denied { perfmon } for pid=3804 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:54.321000 audit[3804]: AVC avc: denied { perfmon } for pid=3804 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:54.321000 audit[3804]: AVC avc: denied { perfmon } for pid=3804 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:54.321000 audit[3804]: AVC avc: denied { bpf } for pid=3804 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:54.321000 audit[3804]: AVC avc: denied { confidentiality } for pid=3804 comm="bpftool" lockdown_reason="use of bpf to read kernel RAM" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=lockdown permissive=0 Sep 6 00:21:54.321000 audit[3804]: SYSCALL arch=c000003e syscall=321 success=no exit=-22 a0=5 a1=7fffb7afe2f0 a2=94 a3=88 items=0 ppid=3701 pid=3804 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:21:54.321000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Sep 6 00:21:54.321000 audit[3804]: AVC avc: denied { bpf } for pid=3804 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:54.321000 audit[3804]: AVC avc: denied { bpf } for pid=3804 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:54.321000 audit[3804]: AVC avc: denied { perfmon } for pid=3804 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:54.321000 audit[3804]: AVC avc: denied { bpf } for pid=3804 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:54.321000 audit[3804]: AVC avc: denied { perfmon } for pid=3804 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:54.321000 audit[3804]: AVC avc: denied { perfmon } for pid=3804 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:54.321000 audit[3804]: AVC avc: denied { perfmon } for pid=3804 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:54.321000 audit[3804]: AVC avc: denied { perfmon } for pid=3804 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:54.321000 audit[3804]: AVC avc: denied { perfmon } for pid=3804 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:54.321000 audit[3804]: AVC avc: denied { bpf } for pid=3804 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:54.321000 audit[3804]: AVC avc: denied { confidentiality } for pid=3804 comm="bpftool" lockdown_reason="use of bpf to read kernel RAM" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=lockdown permissive=0 Sep 6 00:21:54.321000 audit[3804]: SYSCALL arch=c000003e syscall=321 success=no exit=-22 a0=5 a1=7fffb7afe2f0 a2=94 a3=88 items=0 ppid=3701 pid=3804 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:21:54.321000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Sep 6 00:21:54.330000 audit[3807]: AVC avc: denied { bpf } for pid=3807 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:54.330000 audit[3807]: AVC avc: denied { bpf } for pid=3807 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:54.330000 audit[3807]: AVC avc: denied { perfmon } for pid=3807 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:54.330000 audit[3807]: AVC avc: denied { perfmon } for pid=3807 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:54.330000 audit[3807]: AVC avc: denied { perfmon } for pid=3807 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:54.330000 audit[3807]: AVC avc: denied { perfmon } for pid=3807 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:54.330000 audit[3807]: AVC avc: denied { perfmon } for pid=3807 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:54.330000 audit[3807]: AVC avc: denied { bpf } for pid=3807 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:54.330000 audit[3807]: AVC avc: denied { bpf } for pid=3807 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:54.330000 audit: BPF prog-id=152 op=LOAD Sep 6 00:21:54.330000 audit[3807]: SYSCALL arch=c000003e syscall=321 success=yes exit=3 a0=5 a1=7ffef7429bd0 a2=98 a3=1999999999999999 items=0 ppid=3701 pid=3807 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:21:54.330000 audit: PROCTITLE proctitle=627066746F6F6C006D617000637265617465002F7379732F66732F6270662F63616C69636F2F63616C69636F5F6661696C736166655F706F7274735F763100747970650068617368006B657900340076616C7565003100656E7472696573003635353335006E616D650063616C69636F5F6661696C736166655F706F7274735F Sep 6 00:21:54.331000 audit: BPF prog-id=152 op=UNLOAD Sep 6 00:21:54.331000 audit[3807]: AVC avc: denied { bpf } for pid=3807 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:54.331000 audit[3807]: AVC avc: denied { bpf } for pid=3807 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:54.331000 audit[3807]: AVC avc: denied { perfmon } for pid=3807 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:54.331000 audit[3807]: AVC avc: denied { perfmon } for pid=3807 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:54.331000 audit[3807]: AVC avc: denied { perfmon } for pid=3807 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:54.331000 audit[3807]: AVC avc: denied { perfmon } for pid=3807 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:54.331000 audit[3807]: AVC avc: denied { perfmon } for pid=3807 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:54.331000 audit[3807]: AVC avc: denied { bpf } for pid=3807 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:54.331000 audit[3807]: AVC avc: denied { bpf } for pid=3807 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:54.331000 audit: BPF prog-id=153 op=LOAD Sep 6 00:21:54.331000 audit[3807]: SYSCALL arch=c000003e syscall=321 success=yes exit=3 a0=5 a1=7ffef7429ab0 a2=94 a3=ffff items=0 ppid=3701 pid=3807 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:21:54.331000 audit: PROCTITLE proctitle=627066746F6F6C006D617000637265617465002F7379732F66732F6270662F63616C69636F2F63616C69636F5F6661696C736166655F706F7274735F763100747970650068617368006B657900340076616C7565003100656E7472696573003635353335006E616D650063616C69636F5F6661696C736166655F706F7274735F Sep 6 00:21:54.331000 audit: BPF prog-id=153 op=UNLOAD Sep 6 00:21:54.331000 audit[3807]: AVC avc: denied { bpf } for pid=3807 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:54.331000 audit[3807]: AVC avc: denied { bpf } for pid=3807 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:54.331000 audit[3807]: AVC avc: denied { perfmon } for pid=3807 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:54.331000 audit[3807]: AVC avc: denied { perfmon } for pid=3807 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:54.331000 audit[3807]: AVC avc: denied { perfmon } for pid=3807 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:54.331000 audit[3807]: AVC avc: denied { perfmon } for pid=3807 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:54.331000 audit[3807]: AVC avc: denied { perfmon } for pid=3807 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:54.331000 audit[3807]: AVC avc: denied { bpf } for pid=3807 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:54.331000 audit[3807]: AVC avc: denied { bpf } for pid=3807 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:54.331000 audit: BPF prog-id=154 op=LOAD Sep 6 00:21:54.331000 audit[3807]: SYSCALL arch=c000003e syscall=321 success=yes exit=3 a0=5 a1=7ffef7429af0 a2=94 a3=7ffef7429cd0 items=0 ppid=3701 pid=3807 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:21:54.331000 audit: PROCTITLE proctitle=627066746F6F6C006D617000637265617465002F7379732F66732F6270662F63616C69636F2F63616C69636F5F6661696C736166655F706F7274735F763100747970650068617368006B657900340076616C7565003100656E7472696573003635353335006E616D650063616C69636F5F6661696C736166655F706F7274735F Sep 6 00:21:54.331000 audit: BPF prog-id=154 op=UNLOAD Sep 6 00:21:54.493140 kubelet[2412]: I0906 00:21:54.488850 2412 kubelet_volumes.go:163] "Cleaned up orphaned pod volumes dir" podUID="53243f20-09df-4f15-8545-6e752d797303" path="/var/lib/kubelet/pods/53243f20-09df-4f15-8545-6e752d797303/volumes" Sep 6 00:21:54.516176 systemd-networkd[1577]: vxlan.calico: Link UP Sep 6 00:21:54.516186 systemd-networkd[1577]: vxlan.calico: Gained carrier Sep 6 00:21:54.545000 audit[3834]: AVC avc: denied { bpf } for pid=3834 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:54.545000 audit[3834]: AVC avc: denied { bpf } for pid=3834 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:54.545000 audit[3834]: AVC avc: denied { perfmon } for pid=3834 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:54.545000 audit[3834]: AVC avc: denied { perfmon } for pid=3834 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:54.545000 audit[3834]: AVC avc: denied { perfmon } for pid=3834 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:54.545000 audit[3834]: AVC avc: denied { perfmon } for pid=3834 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:54.545000 audit[3834]: AVC avc: denied { perfmon } for pid=3834 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:54.545000 audit[3834]: AVC avc: denied { bpf } for pid=3834 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:54.545000 audit[3834]: AVC avc: denied { bpf } for pid=3834 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:54.545000 audit: BPF prog-id=155 op=LOAD Sep 6 00:21:54.545000 audit[3834]: SYSCALL arch=c000003e syscall=321 success=yes exit=3 a0=5 a1=7ffea7a24f70 a2=98 a3=0 items=0 ppid=3701 pid=3834 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:21:54.545000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Sep 6 00:21:54.545000 audit: BPF prog-id=155 op=UNLOAD Sep 6 00:21:54.545000 audit[3834]: AVC avc: denied { bpf } for pid=3834 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:54.545000 audit[3834]: AVC avc: denied { bpf } for pid=3834 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:54.545000 audit[3834]: AVC avc: denied { perfmon } for pid=3834 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:54.545000 audit[3834]: AVC avc: denied { perfmon } for pid=3834 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:54.545000 audit[3834]: AVC avc: denied { perfmon } for pid=3834 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:54.545000 audit[3834]: AVC avc: denied { perfmon } for pid=3834 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:54.545000 audit[3834]: AVC avc: denied { perfmon } for pid=3834 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:54.545000 audit[3834]: AVC avc: denied { bpf } for pid=3834 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:54.545000 audit[3834]: AVC avc: denied { bpf } for pid=3834 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:54.545000 audit: BPF prog-id=156 op=LOAD Sep 6 00:21:54.545000 audit[3834]: SYSCALL arch=c000003e syscall=321 success=yes exit=3 a0=5 a1=7ffea7a24d80 a2=94 a3=54428f items=0 ppid=3701 pid=3834 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:21:54.545000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Sep 6 00:21:54.546000 audit: BPF prog-id=156 op=UNLOAD Sep 6 00:21:54.546000 audit[3834]: AVC avc: denied { bpf } for pid=3834 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:54.546000 audit[3834]: AVC avc: denied { bpf } for pid=3834 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:54.546000 audit[3834]: AVC avc: denied { perfmon } for pid=3834 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:54.546000 audit[3834]: AVC avc: denied { perfmon } for pid=3834 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:54.546000 audit[3834]: AVC avc: denied { perfmon } for pid=3834 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:54.546000 audit[3834]: AVC avc: denied { perfmon } for pid=3834 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:54.546000 audit[3834]: AVC avc: denied { perfmon } for pid=3834 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:54.546000 audit[3834]: AVC avc: denied { bpf } for pid=3834 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:54.546000 audit[3834]: AVC avc: denied { bpf } for pid=3834 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:54.546000 audit: BPF prog-id=157 op=LOAD Sep 6 00:21:54.546000 audit[3834]: SYSCALL arch=c000003e syscall=321 success=yes exit=3 a0=5 a1=7ffea7a24db0 a2=94 a3=2 items=0 ppid=3701 pid=3834 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:21:54.546000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Sep 6 00:21:54.546000 audit: BPF prog-id=157 op=UNLOAD Sep 6 00:21:54.546000 audit[3834]: AVC avc: denied { bpf } for pid=3834 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:54.546000 audit[3834]: SYSCALL arch=c000003e syscall=321 success=yes exit=3 a0=12 a1=7ffea7a24c80 a2=28 a3=0 items=0 ppid=3701 pid=3834 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:21:54.546000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Sep 6 00:21:54.546000 audit[3834]: AVC avc: denied { bpf } for pid=3834 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:54.546000 audit[3834]: SYSCALL arch=c000003e syscall=321 success=no exit=-22 a0=12 a1=7ffea7a24cb0 a2=28 a3=0 items=0 ppid=3701 pid=3834 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:21:54.546000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Sep 6 00:21:54.546000 audit[3834]: AVC avc: denied { bpf } for pid=3834 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:54.546000 audit[3834]: SYSCALL arch=c000003e syscall=321 success=no exit=-22 a0=12 a1=7ffea7a24bc0 a2=28 a3=0 items=0 ppid=3701 pid=3834 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:21:54.546000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Sep 6 00:21:54.546000 audit[3834]: AVC avc: denied { bpf } for pid=3834 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:54.546000 audit[3834]: SYSCALL arch=c000003e syscall=321 success=yes exit=3 a0=12 a1=7ffea7a24cd0 a2=28 a3=0 items=0 ppid=3701 pid=3834 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:21:54.546000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Sep 6 00:21:54.546000 audit[3834]: AVC avc: denied { bpf } for pid=3834 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:54.546000 audit[3834]: SYSCALL arch=c000003e syscall=321 success=yes exit=3 a0=12 a1=7ffea7a24cb0 a2=28 a3=0 items=0 ppid=3701 pid=3834 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:21:54.546000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Sep 6 00:21:54.546000 audit[3834]: AVC avc: denied { bpf } for pid=3834 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:54.546000 audit[3834]: SYSCALL arch=c000003e syscall=321 success=yes exit=3 a0=12 a1=7ffea7a24ca0 a2=28 a3=0 items=0 ppid=3701 pid=3834 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:21:54.546000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Sep 6 00:21:54.546000 audit[3834]: AVC avc: denied { bpf } for pid=3834 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:54.546000 audit[3834]: SYSCALL arch=c000003e syscall=321 success=yes exit=3 a0=12 a1=7ffea7a24cd0 a2=28 a3=0 items=0 ppid=3701 pid=3834 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:21:54.546000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Sep 6 00:21:54.546000 audit[3834]: AVC avc: denied { bpf } for pid=3834 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:54.546000 audit[3834]: SYSCALL arch=c000003e syscall=321 success=no exit=-22 a0=12 a1=7ffea7a24cb0 a2=28 a3=0 items=0 ppid=3701 pid=3834 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:21:54.546000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Sep 6 00:21:54.546000 audit[3834]: AVC avc: denied { bpf } for pid=3834 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:54.546000 audit[3834]: SYSCALL arch=c000003e syscall=321 success=no exit=-22 a0=12 a1=7ffea7a24cd0 a2=28 a3=0 items=0 ppid=3701 pid=3834 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:21:54.546000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Sep 6 00:21:54.546000 audit[3834]: AVC avc: denied { bpf } for pid=3834 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:54.546000 audit[3834]: SYSCALL arch=c000003e syscall=321 success=no exit=-22 a0=12 a1=7ffea7a24ca0 a2=28 a3=0 items=0 ppid=3701 pid=3834 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:21:54.546000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Sep 6 00:21:54.546000 audit[3834]: AVC avc: denied { bpf } for pid=3834 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:54.546000 audit[3834]: SYSCALL arch=c000003e syscall=321 success=yes exit=3 a0=12 a1=7ffea7a24d10 a2=28 a3=0 items=0 ppid=3701 pid=3834 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:21:54.546000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Sep 6 00:21:54.546000 audit[3834]: AVC avc: denied { bpf } for pid=3834 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:54.546000 audit[3834]: AVC avc: denied { bpf } for pid=3834 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:54.546000 audit[3834]: AVC avc: denied { perfmon } for pid=3834 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:54.546000 audit[3834]: AVC avc: denied { perfmon } for pid=3834 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:54.546000 audit[3834]: AVC avc: denied { perfmon } for pid=3834 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:54.546000 audit[3834]: AVC avc: denied { perfmon } for pid=3834 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:54.546000 audit[3834]: AVC avc: denied { perfmon } for pid=3834 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:54.546000 audit[3834]: AVC avc: denied { bpf } for pid=3834 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:54.546000 audit[3834]: AVC avc: denied { bpf } for pid=3834 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:54.546000 audit: BPF prog-id=158 op=LOAD Sep 6 00:21:54.546000 audit[3834]: SYSCALL arch=c000003e syscall=321 success=yes exit=6 a0=5 a1=7ffea7a24b80 a2=94 a3=0 items=0 ppid=3701 pid=3834 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:21:54.546000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Sep 6 00:21:54.546000 audit: BPF prog-id=158 op=UNLOAD Sep 6 00:21:54.547000 audit[3834]: AVC avc: denied { bpf } for pid=3834 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:54.547000 audit[3834]: SYSCALL arch=c000003e syscall=321 success=no exit=-22 a0=0 a1=7ffea7a24b70 a2=50 a3=2800 items=0 ppid=3701 pid=3834 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:21:54.547000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Sep 6 00:21:54.547000 audit[3834]: AVC avc: denied { bpf } for pid=3834 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:54.547000 audit[3834]: SYSCALL arch=c000003e syscall=321 success=yes exit=6 a0=0 a1=7ffea7a24b70 a2=50 a3=2800 items=0 ppid=3701 pid=3834 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:21:54.547000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Sep 6 00:21:54.547000 audit[3834]: AVC avc: denied { bpf } for pid=3834 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:54.547000 audit[3834]: AVC avc: denied { bpf } for pid=3834 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:54.547000 audit[3834]: AVC avc: denied { bpf } for pid=3834 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:54.547000 audit[3834]: AVC avc: denied { perfmon } for pid=3834 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:54.547000 audit[3834]: AVC avc: denied { perfmon } for pid=3834 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:54.547000 audit[3834]: AVC avc: denied { perfmon } for pid=3834 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:54.547000 audit[3834]: AVC avc: denied { perfmon } for pid=3834 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:54.547000 audit[3834]: AVC avc: denied { perfmon } for pid=3834 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:54.547000 audit[3834]: AVC avc: denied { bpf } for pid=3834 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:54.547000 audit[3834]: AVC avc: denied { bpf } for pid=3834 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:54.547000 audit: BPF prog-id=159 op=LOAD Sep 6 00:21:54.547000 audit[3834]: SYSCALL arch=c000003e syscall=321 success=yes exit=6 a0=5 a1=7ffea7a24390 a2=94 a3=2 items=0 ppid=3701 pid=3834 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:21:54.547000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Sep 6 00:21:54.547000 audit: BPF prog-id=159 op=UNLOAD Sep 6 00:21:54.547000 audit[3834]: AVC avc: denied { bpf } for pid=3834 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:54.547000 audit[3834]: AVC avc: denied { bpf } for pid=3834 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:54.547000 audit[3834]: AVC avc: denied { bpf } for pid=3834 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:54.547000 audit[3834]: AVC avc: denied { perfmon } for pid=3834 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:54.547000 audit[3834]: AVC avc: denied { perfmon } for pid=3834 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:54.547000 audit[3834]: AVC avc: denied { perfmon } for pid=3834 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:54.547000 audit[3834]: AVC avc: denied { perfmon } for pid=3834 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:54.547000 audit[3834]: AVC avc: denied { perfmon } for pid=3834 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:54.547000 audit[3834]: AVC avc: denied { bpf } for pid=3834 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:54.547000 audit[3834]: AVC avc: denied { bpf } for pid=3834 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:54.547000 audit: BPF prog-id=160 op=LOAD Sep 6 00:21:54.547000 audit[3834]: SYSCALL arch=c000003e syscall=321 success=yes exit=6 a0=5 a1=7ffea7a24490 a2=94 a3=30 items=0 ppid=3701 pid=3834 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:21:54.547000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Sep 6 00:21:54.553000 audit[3836]: AVC avc: denied { bpf } for pid=3836 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:54.553000 audit[3836]: AVC avc: denied { bpf } for pid=3836 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:54.553000 audit[3836]: AVC avc: denied { perfmon } for pid=3836 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:54.553000 audit[3836]: AVC avc: denied { perfmon } for pid=3836 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:54.553000 audit[3836]: AVC avc: denied { perfmon } for pid=3836 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:54.553000 audit[3836]: AVC avc: denied { perfmon } for pid=3836 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:54.553000 audit[3836]: AVC avc: denied { perfmon } for pid=3836 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:54.553000 audit[3836]: AVC avc: denied { bpf } for pid=3836 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:54.553000 audit[3836]: AVC avc: denied { bpf } for pid=3836 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:54.553000 audit: BPF prog-id=161 op=LOAD Sep 6 00:21:54.553000 audit[3836]: SYSCALL arch=c000003e syscall=321 success=yes exit=3 a0=5 a1=7ffebd4b0940 a2=98 a3=0 items=0 ppid=3701 pid=3836 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:21:54.553000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Sep 6 00:21:54.557000 audit: BPF prog-id=161 op=UNLOAD Sep 6 00:21:54.557000 audit[3836]: AVC avc: denied { bpf } for pid=3836 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:54.557000 audit[3836]: AVC avc: denied { bpf } for pid=3836 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:54.557000 audit[3836]: AVC avc: denied { perfmon } for pid=3836 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:54.557000 audit[3836]: AVC avc: denied { perfmon } for pid=3836 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:54.557000 audit[3836]: AVC avc: denied { perfmon } for pid=3836 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:54.557000 audit[3836]: AVC avc: denied { perfmon } for pid=3836 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:54.557000 audit[3836]: AVC avc: denied { perfmon } for pid=3836 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:54.557000 audit[3836]: AVC avc: denied { bpf } for pid=3836 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:54.557000 audit[3836]: AVC avc: denied { bpf } for pid=3836 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:54.557000 audit: BPF prog-id=162 op=LOAD Sep 6 00:21:54.557000 audit[3836]: SYSCALL arch=c000003e syscall=321 success=yes exit=4 a0=5 a1=7ffebd4b0730 a2=94 a3=54428f items=0 ppid=3701 pid=3836 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:21:54.557000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Sep 6 00:21:54.557000 audit: BPF prog-id=162 op=UNLOAD Sep 6 00:21:54.557000 audit[3836]: AVC avc: denied { bpf } for pid=3836 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:54.557000 audit[3836]: AVC avc: denied { bpf } for pid=3836 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:54.557000 audit[3836]: AVC avc: denied { perfmon } for pid=3836 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:54.557000 audit[3836]: AVC avc: denied { perfmon } for pid=3836 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:54.557000 audit[3836]: AVC avc: denied { perfmon } for pid=3836 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:54.557000 audit[3836]: AVC avc: denied { perfmon } for pid=3836 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:54.557000 audit[3836]: AVC avc: denied { perfmon } for pid=3836 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:54.557000 audit[3836]: AVC avc: denied { bpf } for pid=3836 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:54.557000 audit[3836]: AVC avc: denied { bpf } for pid=3836 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:54.557000 audit: BPF prog-id=163 op=LOAD Sep 6 00:21:54.557000 audit[3836]: SYSCALL arch=c000003e syscall=321 success=yes exit=4 a0=5 a1=7ffebd4b0760 a2=94 a3=2 items=0 ppid=3701 pid=3836 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:21:54.557000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Sep 6 00:21:54.557000 audit: BPF prog-id=163 op=UNLOAD Sep 6 00:21:54.634147 systemd-networkd[1577]: calie055ecd1653: Gained IPv6LL Sep 6 00:21:54.692000 audit[3836]: AVC avc: denied { bpf } for pid=3836 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:54.692000 audit[3836]: AVC avc: denied { bpf } for pid=3836 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:54.692000 audit[3836]: AVC avc: denied { perfmon } for pid=3836 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:54.692000 audit[3836]: AVC avc: denied { perfmon } for pid=3836 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:54.692000 audit[3836]: AVC avc: denied { perfmon } for pid=3836 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:54.692000 audit[3836]: AVC avc: denied { perfmon } for pid=3836 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:54.692000 audit[3836]: AVC avc: denied { perfmon } for pid=3836 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:54.692000 audit[3836]: AVC avc: denied { bpf } for pid=3836 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:54.692000 audit[3836]: AVC avc: denied { bpf } for pid=3836 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:54.692000 audit: BPF prog-id=164 op=LOAD Sep 6 00:21:54.692000 audit[3836]: SYSCALL arch=c000003e syscall=321 success=yes exit=4 a0=5 a1=7ffebd4b0620 a2=94 a3=1 items=0 ppid=3701 pid=3836 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:21:54.692000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Sep 6 00:21:54.692000 audit: BPF prog-id=164 op=UNLOAD Sep 6 00:21:54.692000 audit[3836]: AVC avc: denied { perfmon } for pid=3836 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:54.692000 audit[3836]: SYSCALL arch=c000003e syscall=321 success=yes exit=4 a0=0 a1=7ffebd4b06f0 a2=50 a3=7ffebd4b07d0 items=0 ppid=3701 pid=3836 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:21:54.692000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Sep 6 00:21:54.704000 audit[3836]: AVC avc: denied { bpf } for pid=3836 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:54.704000 audit[3836]: SYSCALL arch=c000003e syscall=321 success=yes exit=4 a0=12 a1=7ffebd4b0630 a2=28 a3=0 items=0 ppid=3701 pid=3836 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:21:54.704000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Sep 6 00:21:54.705000 audit[3836]: AVC avc: denied { bpf } for pid=3836 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:54.705000 audit[3836]: SYSCALL arch=c000003e syscall=321 success=no exit=-22 a0=12 a1=7ffebd4b0660 a2=28 a3=0 items=0 ppid=3701 pid=3836 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:21:54.705000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Sep 6 00:21:54.705000 audit[3836]: AVC avc: denied { bpf } for pid=3836 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:54.705000 audit[3836]: SYSCALL arch=c000003e syscall=321 success=no exit=-22 a0=12 a1=7ffebd4b0570 a2=28 a3=0 items=0 ppid=3701 pid=3836 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:21:54.705000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Sep 6 00:21:54.705000 audit[3836]: AVC avc: denied { bpf } for pid=3836 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:54.705000 audit[3836]: SYSCALL arch=c000003e syscall=321 success=yes exit=4 a0=12 a1=7ffebd4b0680 a2=28 a3=0 items=0 ppid=3701 pid=3836 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:21:54.705000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Sep 6 00:21:54.705000 audit[3836]: AVC avc: denied { bpf } for pid=3836 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:54.705000 audit[3836]: SYSCALL arch=c000003e syscall=321 success=yes exit=4 a0=12 a1=7ffebd4b0660 a2=28 a3=0 items=0 ppid=3701 pid=3836 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:21:54.705000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Sep 6 00:21:54.705000 audit[3836]: AVC avc: denied { bpf } for pid=3836 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:54.705000 audit[3836]: SYSCALL arch=c000003e syscall=321 success=yes exit=4 a0=12 a1=7ffebd4b0650 a2=28 a3=0 items=0 ppid=3701 pid=3836 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:21:54.705000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Sep 6 00:21:54.705000 audit[3836]: AVC avc: denied { bpf } for pid=3836 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:54.705000 audit[3836]: SYSCALL arch=c000003e syscall=321 success=yes exit=4 a0=12 a1=7ffebd4b0680 a2=28 a3=0 items=0 ppid=3701 pid=3836 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:21:54.705000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Sep 6 00:21:54.706000 audit[3836]: AVC avc: denied { bpf } for pid=3836 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:54.706000 audit[3836]: SYSCALL arch=c000003e syscall=321 success=no exit=-22 a0=12 a1=7ffebd4b0660 a2=28 a3=0 items=0 ppid=3701 pid=3836 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:21:54.706000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Sep 6 00:21:54.706000 audit[3836]: AVC avc: denied { bpf } for pid=3836 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:54.706000 audit[3836]: SYSCALL arch=c000003e syscall=321 success=no exit=-22 a0=12 a1=7ffebd4b0680 a2=28 a3=0 items=0 ppid=3701 pid=3836 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:21:54.706000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Sep 6 00:21:54.706000 audit[3836]: AVC avc: denied { bpf } for pid=3836 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:54.706000 audit[3836]: SYSCALL arch=c000003e syscall=321 success=no exit=-22 a0=12 a1=7ffebd4b0650 a2=28 a3=0 items=0 ppid=3701 pid=3836 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:21:54.706000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Sep 6 00:21:54.706000 audit[3836]: AVC avc: denied { bpf } for pid=3836 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:54.706000 audit[3836]: SYSCALL arch=c000003e syscall=321 success=yes exit=4 a0=12 a1=7ffebd4b06c0 a2=28 a3=0 items=0 ppid=3701 pid=3836 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:21:54.706000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Sep 6 00:21:54.706000 audit[3836]: AVC avc: denied { perfmon } for pid=3836 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:54.706000 audit[3836]: SYSCALL arch=c000003e syscall=321 success=yes exit=5 a0=0 a1=7ffebd4b0470 a2=50 a3=1 items=0 ppid=3701 pid=3836 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:21:54.706000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Sep 6 00:21:54.707000 audit[3836]: AVC avc: denied { bpf } for pid=3836 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:54.707000 audit[3836]: AVC avc: denied { bpf } for pid=3836 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:54.707000 audit[3836]: AVC avc: denied { perfmon } for pid=3836 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:54.707000 audit[3836]: AVC avc: denied { perfmon } for pid=3836 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:54.707000 audit[3836]: AVC avc: denied { perfmon } for pid=3836 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:54.707000 audit[3836]: AVC avc: denied { perfmon } for pid=3836 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:54.707000 audit[3836]: AVC avc: denied { perfmon } for pid=3836 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:54.707000 audit[3836]: AVC avc: denied { bpf } for pid=3836 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:54.707000 audit[3836]: AVC avc: denied { bpf } for pid=3836 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:54.707000 audit: BPF prog-id=165 op=LOAD Sep 6 00:21:54.707000 audit[3836]: SYSCALL arch=c000003e syscall=321 success=yes exit=6 a0=5 a1=7ffebd4b0470 a2=94 a3=5 items=0 ppid=3701 pid=3836 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:21:54.707000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Sep 6 00:21:54.707000 audit: BPF prog-id=165 op=UNLOAD Sep 6 00:21:54.707000 audit[3836]: AVC avc: denied { perfmon } for pid=3836 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:54.707000 audit[3836]: SYSCALL arch=c000003e syscall=321 success=yes exit=5 a0=0 a1=7ffebd4b0520 a2=50 a3=1 items=0 ppid=3701 pid=3836 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:21:54.707000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Sep 6 00:21:54.707000 audit[3836]: AVC avc: denied { bpf } for pid=3836 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:54.707000 audit[3836]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=16 a1=7ffebd4b0640 a2=4 a3=38 items=0 ppid=3701 pid=3836 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:21:54.707000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Sep 6 00:21:54.707000 audit[3836]: AVC avc: denied { bpf } for pid=3836 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:54.707000 audit[3836]: AVC avc: denied { bpf } for pid=3836 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:54.707000 audit[3836]: AVC avc: denied { perfmon } for pid=3836 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:54.707000 audit[3836]: AVC avc: denied { bpf } for pid=3836 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:54.707000 audit[3836]: AVC avc: denied { perfmon } for pid=3836 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:54.707000 audit[3836]: AVC avc: denied { perfmon } for pid=3836 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:54.707000 audit[3836]: AVC avc: denied { perfmon } for pid=3836 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:54.707000 audit[3836]: AVC avc: denied { perfmon } for pid=3836 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:54.707000 audit[3836]: AVC avc: denied { perfmon } for pid=3836 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:54.707000 audit[3836]: AVC avc: denied { bpf } for pid=3836 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:54.707000 audit[3836]: AVC avc: denied { confidentiality } for pid=3836 comm="bpftool" lockdown_reason="use of bpf to read kernel RAM" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=lockdown permissive=0 Sep 6 00:21:54.707000 audit[3836]: SYSCALL arch=c000003e syscall=321 success=no exit=-22 a0=5 a1=7ffebd4b0690 a2=94 a3=6 items=0 ppid=3701 pid=3836 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:21:54.707000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Sep 6 00:21:54.708000 audit[3836]: AVC avc: denied { bpf } for pid=3836 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:54.708000 audit[3836]: AVC avc: denied { bpf } for pid=3836 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:54.708000 audit[3836]: AVC avc: denied { perfmon } for pid=3836 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:54.708000 audit[3836]: AVC avc: denied { bpf } for pid=3836 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:54.708000 audit[3836]: AVC avc: denied { perfmon } for pid=3836 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:54.708000 audit[3836]: AVC avc: denied { perfmon } for pid=3836 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:54.708000 audit[3836]: AVC avc: denied { perfmon } for pid=3836 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:54.708000 audit[3836]: AVC avc: denied { perfmon } for pid=3836 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:54.708000 audit[3836]: AVC avc: denied { perfmon } for pid=3836 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:54.708000 audit[3836]: AVC avc: denied { bpf } for pid=3836 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:54.708000 audit[3836]: AVC avc: denied { confidentiality } for pid=3836 comm="bpftool" lockdown_reason="use of bpf to read kernel RAM" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=lockdown permissive=0 Sep 6 00:21:54.708000 audit[3836]: SYSCALL arch=c000003e syscall=321 success=no exit=-22 a0=5 a1=7ffebd4afe40 a2=94 a3=88 items=0 ppid=3701 pid=3836 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:21:54.708000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Sep 6 00:21:54.709000 audit[3836]: AVC avc: denied { bpf } for pid=3836 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:54.709000 audit[3836]: AVC avc: denied { bpf } for pid=3836 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:54.709000 audit[3836]: AVC avc: denied { perfmon } for pid=3836 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:54.709000 audit[3836]: AVC avc: denied { bpf } for pid=3836 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:54.709000 audit[3836]: AVC avc: denied { perfmon } for pid=3836 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:54.709000 audit[3836]: AVC avc: denied { perfmon } for pid=3836 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:54.709000 audit[3836]: AVC avc: denied { perfmon } for pid=3836 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:54.709000 audit[3836]: AVC avc: denied { perfmon } for pid=3836 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:54.709000 audit[3836]: AVC avc: denied { perfmon } for pid=3836 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:54.709000 audit[3836]: AVC avc: denied { bpf } for pid=3836 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:54.709000 audit[3836]: AVC avc: denied { confidentiality } for pid=3836 comm="bpftool" lockdown_reason="use of bpf to read kernel RAM" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=lockdown permissive=0 Sep 6 00:21:54.709000 audit[3836]: SYSCALL arch=c000003e syscall=321 success=no exit=-22 a0=5 a1=7ffebd4afe40 a2=94 a3=88 items=0 ppid=3701 pid=3836 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:21:54.709000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Sep 6 00:21:54.710000 audit[3836]: AVC avc: denied { bpf } for pid=3836 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:54.710000 audit[3836]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=7ffebd4b1870 a2=10 a3=f8f80800 items=0 ppid=3701 pid=3836 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:21:54.710000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Sep 6 00:21:54.710000 audit[3836]: AVC avc: denied { bpf } for pid=3836 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:54.710000 audit[3836]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=7ffebd4b1710 a2=10 a3=3 items=0 ppid=3701 pid=3836 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:21:54.710000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Sep 6 00:21:54.710000 audit[3836]: AVC avc: denied { bpf } for pid=3836 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:54.710000 audit[3836]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=7ffebd4b16b0 a2=10 a3=3 items=0 ppid=3701 pid=3836 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:21:54.710000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Sep 6 00:21:54.710000 audit[3836]: AVC avc: denied { bpf } for pid=3836 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:54.710000 audit[3836]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=7ffebd4b16b0 a2=10 a3=7 items=0 ppid=3701 pid=3836 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:21:54.710000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Sep 6 00:21:54.716000 audit: BPF prog-id=160 op=UNLOAD Sep 6 00:21:54.920000 audit[3866]: NETFILTER_CFG table=mangle:108 family=2 entries=16 op=nft_register_chain pid=3866 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Sep 6 00:21:54.920000 audit[3866]: SYSCALL arch=c000003e syscall=46 success=yes exit=6868 a0=3 a1=7ffee39f5190 a2=0 a3=7ffee39f517c items=0 ppid=3701 pid=3866 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:21:54.920000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Sep 6 00:21:54.933000 audit[3865]: NETFILTER_CFG table=nat:109 family=2 entries=15 op=nft_register_chain pid=3865 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Sep 6 00:21:54.933000 audit[3865]: SYSCALL arch=c000003e syscall=46 success=yes exit=5084 a0=3 a1=7fffeb673030 a2=0 a3=7fffeb67301c items=0 ppid=3701 pid=3865 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:21:54.933000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Sep 6 00:21:54.951000 audit[3864]: NETFILTER_CFG table=raw:110 family=2 entries=21 op=nft_register_chain pid=3864 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Sep 6 00:21:54.951000 audit[3864]: SYSCALL arch=c000003e syscall=46 success=yes exit=8452 a0=3 a1=7ffc5cd18570 a2=0 a3=7ffc5cd1855c items=0 ppid=3701 pid=3864 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:21:54.951000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Sep 6 00:21:55.025000 audit[3868]: NETFILTER_CFG table=filter:111 family=2 entries=94 op=nft_register_chain pid=3868 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Sep 6 00:21:55.025000 audit[3868]: SYSCALL arch=c000003e syscall=46 success=yes exit=53116 a0=3 a1=7ffc78953590 a2=0 a3=7ffc7895357c items=0 ppid=3701 pid=3868 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:21:55.025000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Sep 6 00:21:55.097144 env[1421]: time="2025-09-06T00:21:55.097095558Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/whisker:v3.30.3,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 6 00:21:55.105119 env[1421]: time="2025-09-06T00:21:55.105069794Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:9a4eedeed4a531acefb7f5d0a1b7e3856b1a9a24d9e7d25deef2134d7a734c2d,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 6 00:21:55.110505 env[1421]: time="2025-09-06T00:21:55.110460318Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/whisker:v3.30.3,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 6 00:21:55.115302 env[1421]: time="2025-09-06T00:21:55.115247439Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/whisker@sha256:e7113761fc7633d515882f0d48b5c8d0b8e62f3f9d34823f2ee194bb16d2ec44,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 6 00:21:55.116232 env[1421]: time="2025-09-06T00:21:55.116192744Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/whisker:v3.30.3\" returns image reference \"sha256:9a4eedeed4a531acefb7f5d0a1b7e3856b1a9a24d9e7d25deef2134d7a734c2d\"" Sep 6 00:21:55.120490 env[1421]: time="2025-09-06T00:21:55.120455763Z" level=info msg="CreateContainer within sandbox \"6c6fb1bd5cf279c48e23720e823619b877fcb8207314d2d3c0c1237a649487a5\" for container &ContainerMetadata{Name:whisker,Attempt:0,}" Sep 6 00:21:55.156906 env[1421]: time="2025-09-06T00:21:55.156833625Z" level=info msg="CreateContainer within sandbox \"6c6fb1bd5cf279c48e23720e823619b877fcb8207314d2d3c0c1237a649487a5\" for &ContainerMetadata{Name:whisker,Attempt:0,} returns container id \"81b8e73bea2ed3a46523ee6b2a948605f8552fc7a290c730a6e291625f89a0a8\"" Sep 6 00:21:55.157830 env[1421]: time="2025-09-06T00:21:55.157792230Z" level=info msg="StartContainer for \"81b8e73bea2ed3a46523ee6b2a948605f8552fc7a290c730a6e291625f89a0a8\"" Sep 6 00:21:55.197906 systemd[1]: Started cri-containerd-81b8e73bea2ed3a46523ee6b2a948605f8552fc7a290c730a6e291625f89a0a8.scope. Sep 6 00:21:55.201601 systemd[1]: run-containerd-runc-k8s.io-81b8e73bea2ed3a46523ee6b2a948605f8552fc7a290c730a6e291625f89a0a8-runc.kCBSl2.mount: Deactivated successfully. Sep 6 00:21:55.234000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:55.234000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:55.234000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:55.234000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:55.234000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:55.234000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:55.234000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:55.234000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:55.234000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:55.235000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:55.235000 audit: BPF prog-id=166 op=LOAD Sep 6 00:21:55.236000 audit[3886]: AVC avc: denied { bpf } for pid=3886 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:55.236000 audit[3886]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000117c48 a2=10 a3=1c items=0 ppid=3654 pid=3886 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:21:55.236000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3831623865373362656132656433613436353233656536623261393438 Sep 6 00:21:55.237000 audit[3886]: AVC avc: denied { perfmon } for pid=3886 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:55.237000 audit[3886]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001176b0 a2=3c a3=8 items=0 ppid=3654 pid=3886 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:21:55.237000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3831623865373362656132656433613436353233656536623261393438 Sep 6 00:21:55.237000 audit[3886]: AVC avc: denied { bpf } for pid=3886 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:55.237000 audit[3886]: AVC avc: denied { bpf } for pid=3886 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:55.237000 audit[3886]: AVC avc: denied { bpf } for pid=3886 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:55.237000 audit[3886]: AVC avc: denied { perfmon } for pid=3886 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:55.237000 audit[3886]: AVC avc: denied { perfmon } for pid=3886 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:55.237000 audit[3886]: AVC avc: denied { perfmon } for pid=3886 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:55.237000 audit[3886]: AVC avc: denied { perfmon } for pid=3886 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:55.237000 audit[3886]: AVC avc: denied { perfmon } for pid=3886 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:55.237000 audit[3886]: AVC avc: denied { bpf } for pid=3886 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:55.237000 audit[3886]: AVC avc: denied { bpf } for pid=3886 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:55.237000 audit: BPF prog-id=167 op=LOAD Sep 6 00:21:55.237000 audit[3886]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001179d8 a2=78 a3=c000329080 items=0 ppid=3654 pid=3886 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:21:55.237000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3831623865373362656132656433613436353233656536623261393438 Sep 6 00:21:55.238000 audit[3886]: AVC avc: denied { bpf } for pid=3886 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:55.238000 audit[3886]: AVC avc: denied { bpf } for pid=3886 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:55.238000 audit[3886]: AVC avc: denied { perfmon } for pid=3886 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:55.238000 audit[3886]: AVC avc: denied { perfmon } for pid=3886 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:55.238000 audit[3886]: AVC avc: denied { perfmon } for pid=3886 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:55.238000 audit[3886]: AVC avc: denied { perfmon } for pid=3886 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:55.238000 audit[3886]: AVC avc: denied { perfmon } for pid=3886 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:55.238000 audit[3886]: AVC avc: denied { bpf } for pid=3886 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:55.238000 audit[3886]: AVC avc: denied { bpf } for pid=3886 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:55.238000 audit: BPF prog-id=168 op=LOAD Sep 6 00:21:55.238000 audit[3886]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000117770 a2=78 a3=c0003290c8 items=0 ppid=3654 pid=3886 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:21:55.238000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3831623865373362656132656433613436353233656536623261393438 Sep 6 00:21:55.239000 audit: BPF prog-id=168 op=UNLOAD Sep 6 00:21:55.239000 audit: BPF prog-id=167 op=UNLOAD Sep 6 00:21:55.239000 audit[3886]: AVC avc: denied { bpf } for pid=3886 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:55.239000 audit[3886]: AVC avc: denied { bpf } for pid=3886 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:55.239000 audit[3886]: AVC avc: denied { bpf } for pid=3886 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:55.239000 audit[3886]: AVC avc: denied { perfmon } for pid=3886 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:55.239000 audit[3886]: AVC avc: denied { perfmon } for pid=3886 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:55.239000 audit[3886]: AVC avc: denied { perfmon } for pid=3886 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:55.239000 audit[3886]: AVC avc: denied { perfmon } for pid=3886 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:55.239000 audit[3886]: AVC avc: denied { perfmon } for pid=3886 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:55.239000 audit[3886]: AVC avc: denied { bpf } for pid=3886 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:55.239000 audit[3886]: AVC avc: denied { bpf } for pid=3886 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:55.239000 audit: BPF prog-id=169 op=LOAD Sep 6 00:21:55.239000 audit[3886]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000117c30 a2=78 a3=c0003294d8 items=0 ppid=3654 pid=3886 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:21:55.239000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3831623865373362656132656433613436353233656536623261393438 Sep 6 00:21:55.282515 env[1421]: time="2025-09-06T00:21:55.282454288Z" level=info msg="StartContainer for \"81b8e73bea2ed3a46523ee6b2a948605f8552fc7a290c730a6e291625f89a0a8\" returns successfully" Sep 6 00:21:55.285378 env[1421]: time="2025-09-06T00:21:55.285334901Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/whisker-backend:v3.30.3\"" Sep 6 00:21:55.295000 audit[3897]: AVC avc: denied { search } for pid=3897 comm="nginx" name="crypto" dev="proc" ino=30670 scontext=system_u:system_r:svirt_lxc_net_t:s0:c507,c731 tcontext=system_u:object_r:sysctl_crypto_t:s0 tclass=dir permissive=0 Sep 6 00:21:55.295000 audit[3897]: SYSCALL arch=c000003e syscall=257 success=no exit=-13 a0=ffffff9c a1=7f21f9d71728 a2=0 a3=0 items=0 ppid=3654 pid=3897 auid=4294967295 uid=10001 gid=10001 euid=10001 suid=10001 fsuid=10001 egid=10001 sgid=10001 fsgid=10001 tty=(none) ses=4294967295 comm="nginx" exe="/usr/sbin/nginx" subj=system_u:system_r:svirt_lxc_net_t:s0:c507,c731 key=(null) Sep 6 00:21:55.295000 audit: PROCTITLE proctitle=2F7573722F7362696E2F6E67696E78002D67006461656D6F6E206F66663B Sep 6 00:21:55.486530 env[1421]: time="2025-09-06T00:21:55.486386900Z" level=info msg="StopPodSandbox for \"0da0f48023f8f0b7a2f1cfb4fe092b51881d3e7712929074c2fbdb5a37da82a1\"" Sep 6 00:21:55.595407 env[1421]: 2025-09-06 00:21:55.542 [INFO][3928] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="0da0f48023f8f0b7a2f1cfb4fe092b51881d3e7712929074c2fbdb5a37da82a1" Sep 6 00:21:55.595407 env[1421]: 2025-09-06 00:21:55.543 [INFO][3928] cni-plugin/dataplane_linux.go 559: Deleting workload's device in netns. ContainerID="0da0f48023f8f0b7a2f1cfb4fe092b51881d3e7712929074c2fbdb5a37da82a1" iface="eth0" netns="/var/run/netns/cni-cc01f180-8e63-f93b-ce3f-8602895022c5" Sep 6 00:21:55.595407 env[1421]: 2025-09-06 00:21:55.543 [INFO][3928] cni-plugin/dataplane_linux.go 570: Entered netns, deleting veth. ContainerID="0da0f48023f8f0b7a2f1cfb4fe092b51881d3e7712929074c2fbdb5a37da82a1" iface="eth0" netns="/var/run/netns/cni-cc01f180-8e63-f93b-ce3f-8602895022c5" Sep 6 00:21:55.595407 env[1421]: 2025-09-06 00:21:55.543 [INFO][3928] cni-plugin/dataplane_linux.go 597: Workload's veth was already gone. Nothing to do. ContainerID="0da0f48023f8f0b7a2f1cfb4fe092b51881d3e7712929074c2fbdb5a37da82a1" iface="eth0" netns="/var/run/netns/cni-cc01f180-8e63-f93b-ce3f-8602895022c5" Sep 6 00:21:55.595407 env[1421]: 2025-09-06 00:21:55.543 [INFO][3928] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="0da0f48023f8f0b7a2f1cfb4fe092b51881d3e7712929074c2fbdb5a37da82a1" Sep 6 00:21:55.595407 env[1421]: 2025-09-06 00:21:55.543 [INFO][3928] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="0da0f48023f8f0b7a2f1cfb4fe092b51881d3e7712929074c2fbdb5a37da82a1" Sep 6 00:21:55.595407 env[1421]: 2025-09-06 00:21:55.576 [INFO][3935] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="0da0f48023f8f0b7a2f1cfb4fe092b51881d3e7712929074c2fbdb5a37da82a1" HandleID="k8s-pod-network.0da0f48023f8f0b7a2f1cfb4fe092b51881d3e7712929074c2fbdb5a37da82a1" Workload="ci--3510.3.8--n--28804d0655-k8s-calico--apiserver--6575dd5656--clp7v-eth0" Sep 6 00:21:55.595407 env[1421]: 2025-09-06 00:21:55.577 [INFO][3935] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Sep 6 00:21:55.595407 env[1421]: 2025-09-06 00:21:55.577 [INFO][3935] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Sep 6 00:21:55.595407 env[1421]: 2025-09-06 00:21:55.588 [WARNING][3935] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="0da0f48023f8f0b7a2f1cfb4fe092b51881d3e7712929074c2fbdb5a37da82a1" HandleID="k8s-pod-network.0da0f48023f8f0b7a2f1cfb4fe092b51881d3e7712929074c2fbdb5a37da82a1" Workload="ci--3510.3.8--n--28804d0655-k8s-calico--apiserver--6575dd5656--clp7v-eth0" Sep 6 00:21:55.595407 env[1421]: 2025-09-06 00:21:55.589 [INFO][3935] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="0da0f48023f8f0b7a2f1cfb4fe092b51881d3e7712929074c2fbdb5a37da82a1" HandleID="k8s-pod-network.0da0f48023f8f0b7a2f1cfb4fe092b51881d3e7712929074c2fbdb5a37da82a1" Workload="ci--3510.3.8--n--28804d0655-k8s-calico--apiserver--6575dd5656--clp7v-eth0" Sep 6 00:21:55.595407 env[1421]: 2025-09-06 00:21:55.591 [INFO][3935] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Sep 6 00:21:55.595407 env[1421]: 2025-09-06 00:21:55.592 [INFO][3928] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="0da0f48023f8f0b7a2f1cfb4fe092b51881d3e7712929074c2fbdb5a37da82a1" Sep 6 00:21:55.598898 systemd[1]: run-netns-cni\x2dcc01f180\x2d8e63\x2df93b\x2dce3f\x2d8602895022c5.mount: Deactivated successfully. Sep 6 00:21:55.600416 env[1421]: time="2025-09-06T00:21:55.600330110Z" level=info msg="TearDown network for sandbox \"0da0f48023f8f0b7a2f1cfb4fe092b51881d3e7712929074c2fbdb5a37da82a1\" successfully" Sep 6 00:21:55.600535 env[1421]: time="2025-09-06T00:21:55.600417511Z" level=info msg="StopPodSandbox for \"0da0f48023f8f0b7a2f1cfb4fe092b51881d3e7712929074c2fbdb5a37da82a1\" returns successfully" Sep 6 00:21:55.601624 env[1421]: time="2025-09-06T00:21:55.601582716Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-apiserver-6575dd5656-clp7v,Uid:1fd46bfe-b99f-484d-b293-2fbf2d2e8a89,Namespace:calico-apiserver,Attempt:1,}" Sep 6 00:21:55.759665 systemd-networkd[1577]: calib2ec18b54e0: Link UP Sep 6 00:21:55.772350 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): eth0: link becomes ready Sep 6 00:21:55.779139 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): calib2ec18b54e0: link becomes ready Sep 6 00:21:55.779465 systemd-networkd[1577]: calib2ec18b54e0: Gained carrier Sep 6 00:21:55.797261 env[1421]: 2025-09-06 00:21:55.679 [INFO][3942] cni-plugin/plugin.go 340: Calico CNI found existing endpoint: &{{WorkloadEndpoint projectcalico.org/v3} {ci--3510.3.8--n--28804d0655-k8s-calico--apiserver--6575dd5656--clp7v-eth0 calico-apiserver-6575dd5656- calico-apiserver 1fd46bfe-b99f-484d-b293-2fbf2d2e8a89 949 0 2025-09-06 00:21:24 +0000 UTC map[apiserver:true app.kubernetes.io/name:calico-apiserver k8s-app:calico-apiserver pod-template-hash:6575dd5656 projectcalico.org/namespace:calico-apiserver projectcalico.org/orchestrator:k8s projectcalico.org/serviceaccount:calico-apiserver] map[] [] [] []} {k8s ci-3510.3.8-n-28804d0655 calico-apiserver-6575dd5656-clp7v eth0 calico-apiserver [] [] [kns.calico-apiserver ksa.calico-apiserver.calico-apiserver] calib2ec18b54e0 [] [] }} ContainerID="31f743b440e1d843931af6b5841bd79143d64437876023cac7c57a804880c849" Namespace="calico-apiserver" Pod="calico-apiserver-6575dd5656-clp7v" WorkloadEndpoint="ci--3510.3.8--n--28804d0655-k8s-calico--apiserver--6575dd5656--clp7v-" Sep 6 00:21:55.797261 env[1421]: 2025-09-06 00:21:55.679 [INFO][3942] cni-plugin/k8s.go 74: Extracted identifiers for CmdAddK8s ContainerID="31f743b440e1d843931af6b5841bd79143d64437876023cac7c57a804880c849" Namespace="calico-apiserver" Pod="calico-apiserver-6575dd5656-clp7v" WorkloadEndpoint="ci--3510.3.8--n--28804d0655-k8s-calico--apiserver--6575dd5656--clp7v-eth0" Sep 6 00:21:55.797261 env[1421]: 2025-09-06 00:21:55.717 [INFO][3953] ipam/ipam_plugin.go 225: Calico CNI IPAM request count IPv4=1 IPv6=0 ContainerID="31f743b440e1d843931af6b5841bd79143d64437876023cac7c57a804880c849" HandleID="k8s-pod-network.31f743b440e1d843931af6b5841bd79143d64437876023cac7c57a804880c849" Workload="ci--3510.3.8--n--28804d0655-k8s-calico--apiserver--6575dd5656--clp7v-eth0" Sep 6 00:21:55.797261 env[1421]: 2025-09-06 00:21:55.717 [INFO][3953] ipam/ipam_plugin.go 265: Auto assigning IP ContainerID="31f743b440e1d843931af6b5841bd79143d64437876023cac7c57a804880c849" HandleID="k8s-pod-network.31f743b440e1d843931af6b5841bd79143d64437876023cac7c57a804880c849" Workload="ci--3510.3.8--n--28804d0655-k8s-calico--apiserver--6575dd5656--clp7v-eth0" assignArgs=ipam.AutoAssignArgs{Num4:1, Num6:0, HandleID:(*string)(0xc0002cd600), Attrs:map[string]string{"namespace":"calico-apiserver", "node":"ci-3510.3.8-n-28804d0655", "pod":"calico-apiserver-6575dd5656-clp7v", "timestamp":"2025-09-06 00:21:55.717548335 +0000 UTC"}, Hostname:"ci-3510.3.8-n-28804d0655", IPv4Pools:[]net.IPNet{}, IPv6Pools:[]net.IPNet{}, MaxBlocksPerHost:0, HostReservedAttrIPv4s:(*ipam.HostReservedAttr)(nil), HostReservedAttrIPv6s:(*ipam.HostReservedAttr)(nil), IntendedUse:"Workload"} Sep 6 00:21:55.797261 env[1421]: 2025-09-06 00:21:55.717 [INFO][3953] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Sep 6 00:21:55.797261 env[1421]: 2025-09-06 00:21:55.718 [INFO][3953] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Sep 6 00:21:55.797261 env[1421]: 2025-09-06 00:21:55.718 [INFO][3953] ipam/ipam.go 110: Auto-assign 1 ipv4, 0 ipv6 addrs for host 'ci-3510.3.8-n-28804d0655' Sep 6 00:21:55.797261 env[1421]: 2025-09-06 00:21:55.724 [INFO][3953] ipam/ipam.go 691: Looking up existing affinities for host handle="k8s-pod-network.31f743b440e1d843931af6b5841bd79143d64437876023cac7c57a804880c849" host="ci-3510.3.8-n-28804d0655" Sep 6 00:21:55.797261 env[1421]: 2025-09-06 00:21:55.728 [INFO][3953] ipam/ipam.go 394: Looking up existing affinities for host host="ci-3510.3.8-n-28804d0655" Sep 6 00:21:55.797261 env[1421]: 2025-09-06 00:21:55.733 [INFO][3953] ipam/ipam.go 511: Trying affinity for 192.168.107.64/26 host="ci-3510.3.8-n-28804d0655" Sep 6 00:21:55.797261 env[1421]: 2025-09-06 00:21:55.734 [INFO][3953] ipam/ipam.go 158: Attempting to load block cidr=192.168.107.64/26 host="ci-3510.3.8-n-28804d0655" Sep 6 00:21:55.797261 env[1421]: 2025-09-06 00:21:55.736 [INFO][3953] ipam/ipam.go 235: Affinity is confirmed and block has been loaded cidr=192.168.107.64/26 host="ci-3510.3.8-n-28804d0655" Sep 6 00:21:55.797261 env[1421]: 2025-09-06 00:21:55.736 [INFO][3953] ipam/ipam.go 1220: Attempting to assign 1 addresses from block block=192.168.107.64/26 handle="k8s-pod-network.31f743b440e1d843931af6b5841bd79143d64437876023cac7c57a804880c849" host="ci-3510.3.8-n-28804d0655" Sep 6 00:21:55.797261 env[1421]: 2025-09-06 00:21:55.739 [INFO][3953] ipam/ipam.go 1764: Creating new handle: k8s-pod-network.31f743b440e1d843931af6b5841bd79143d64437876023cac7c57a804880c849 Sep 6 00:21:55.797261 env[1421]: 2025-09-06 00:21:55.744 [INFO][3953] ipam/ipam.go 1243: Writing block in order to claim IPs block=192.168.107.64/26 handle="k8s-pod-network.31f743b440e1d843931af6b5841bd79143d64437876023cac7c57a804880c849" host="ci-3510.3.8-n-28804d0655" Sep 6 00:21:55.797261 env[1421]: 2025-09-06 00:21:55.754 [INFO][3953] ipam/ipam.go 1256: Successfully claimed IPs: [192.168.107.66/26] block=192.168.107.64/26 handle="k8s-pod-network.31f743b440e1d843931af6b5841bd79143d64437876023cac7c57a804880c849" host="ci-3510.3.8-n-28804d0655" Sep 6 00:21:55.797261 env[1421]: 2025-09-06 00:21:55.754 [INFO][3953] ipam/ipam.go 878: Auto-assigned 1 out of 1 IPv4s: [192.168.107.66/26] handle="k8s-pod-network.31f743b440e1d843931af6b5841bd79143d64437876023cac7c57a804880c849" host="ci-3510.3.8-n-28804d0655" Sep 6 00:21:55.797261 env[1421]: 2025-09-06 00:21:55.754 [INFO][3953] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Sep 6 00:21:55.797261 env[1421]: 2025-09-06 00:21:55.754 [INFO][3953] ipam/ipam_plugin.go 283: Calico CNI IPAM assigned addresses IPv4=[192.168.107.66/26] IPv6=[] ContainerID="31f743b440e1d843931af6b5841bd79143d64437876023cac7c57a804880c849" HandleID="k8s-pod-network.31f743b440e1d843931af6b5841bd79143d64437876023cac7c57a804880c849" Workload="ci--3510.3.8--n--28804d0655-k8s-calico--apiserver--6575dd5656--clp7v-eth0" Sep 6 00:21:55.798258 env[1421]: 2025-09-06 00:21:55.756 [INFO][3942] cni-plugin/k8s.go 418: Populated endpoint ContainerID="31f743b440e1d843931af6b5841bd79143d64437876023cac7c57a804880c849" Namespace="calico-apiserver" Pod="calico-apiserver-6575dd5656-clp7v" WorkloadEndpoint="ci--3510.3.8--n--28804d0655-k8s-calico--apiserver--6575dd5656--clp7v-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ci--3510.3.8--n--28804d0655-k8s-calico--apiserver--6575dd5656--clp7v-eth0", GenerateName:"calico-apiserver-6575dd5656-", Namespace:"calico-apiserver", SelfLink:"", UID:"1fd46bfe-b99f-484d-b293-2fbf2d2e8a89", ResourceVersion:"949", Generation:0, CreationTimestamp:time.Date(2025, time.September, 6, 0, 21, 24, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"apiserver":"true", "app.kubernetes.io/name":"calico-apiserver", "k8s-app":"calico-apiserver", "pod-template-hash":"6575dd5656", "projectcalico.org/namespace":"calico-apiserver", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-apiserver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ci-3510.3.8-n-28804d0655", ContainerID:"", Pod:"calico-apiserver-6575dd5656-clp7v", Endpoint:"eth0", ServiceAccountName:"calico-apiserver", IPNetworks:[]string{"192.168.107.66/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-apiserver", "ksa.calico-apiserver.calico-apiserver"}, InterfaceName:"calib2ec18b54e0", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Sep 6 00:21:55.798258 env[1421]: 2025-09-06 00:21:55.756 [INFO][3942] cni-plugin/k8s.go 419: Calico CNI using IPs: [192.168.107.66/32] ContainerID="31f743b440e1d843931af6b5841bd79143d64437876023cac7c57a804880c849" Namespace="calico-apiserver" Pod="calico-apiserver-6575dd5656-clp7v" WorkloadEndpoint="ci--3510.3.8--n--28804d0655-k8s-calico--apiserver--6575dd5656--clp7v-eth0" Sep 6 00:21:55.798258 env[1421]: 2025-09-06 00:21:55.756 [INFO][3942] cni-plugin/dataplane_linux.go 69: Setting the host side veth name to calib2ec18b54e0 ContainerID="31f743b440e1d843931af6b5841bd79143d64437876023cac7c57a804880c849" Namespace="calico-apiserver" Pod="calico-apiserver-6575dd5656-clp7v" WorkloadEndpoint="ci--3510.3.8--n--28804d0655-k8s-calico--apiserver--6575dd5656--clp7v-eth0" Sep 6 00:21:55.798258 env[1421]: 2025-09-06 00:21:55.780 [INFO][3942] cni-plugin/dataplane_linux.go 508: Disabling IPv4 forwarding ContainerID="31f743b440e1d843931af6b5841bd79143d64437876023cac7c57a804880c849" Namespace="calico-apiserver" Pod="calico-apiserver-6575dd5656-clp7v" WorkloadEndpoint="ci--3510.3.8--n--28804d0655-k8s-calico--apiserver--6575dd5656--clp7v-eth0" Sep 6 00:21:55.798258 env[1421]: 2025-09-06 00:21:55.780 [INFO][3942] cni-plugin/k8s.go 446: Added Mac, interface name, and active container ID to endpoint ContainerID="31f743b440e1d843931af6b5841bd79143d64437876023cac7c57a804880c849" Namespace="calico-apiserver" Pod="calico-apiserver-6575dd5656-clp7v" WorkloadEndpoint="ci--3510.3.8--n--28804d0655-k8s-calico--apiserver--6575dd5656--clp7v-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ci--3510.3.8--n--28804d0655-k8s-calico--apiserver--6575dd5656--clp7v-eth0", GenerateName:"calico-apiserver-6575dd5656-", Namespace:"calico-apiserver", SelfLink:"", UID:"1fd46bfe-b99f-484d-b293-2fbf2d2e8a89", ResourceVersion:"949", Generation:0, CreationTimestamp:time.Date(2025, time.September, 6, 0, 21, 24, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"apiserver":"true", "app.kubernetes.io/name":"calico-apiserver", "k8s-app":"calico-apiserver", "pod-template-hash":"6575dd5656", "projectcalico.org/namespace":"calico-apiserver", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-apiserver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ci-3510.3.8-n-28804d0655", ContainerID:"31f743b440e1d843931af6b5841bd79143d64437876023cac7c57a804880c849", Pod:"calico-apiserver-6575dd5656-clp7v", Endpoint:"eth0", ServiceAccountName:"calico-apiserver", IPNetworks:[]string{"192.168.107.66/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-apiserver", "ksa.calico-apiserver.calico-apiserver"}, InterfaceName:"calib2ec18b54e0", MAC:"0a:ef:fa:ee:7d:11", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Sep 6 00:21:55.798258 env[1421]: 2025-09-06 00:21:55.795 [INFO][3942] cni-plugin/k8s.go 532: Wrote updated endpoint to datastore ContainerID="31f743b440e1d843931af6b5841bd79143d64437876023cac7c57a804880c849" Namespace="calico-apiserver" Pod="calico-apiserver-6575dd5656-clp7v" WorkloadEndpoint="ci--3510.3.8--n--28804d0655-k8s-calico--apiserver--6575dd5656--clp7v-eth0" Sep 6 00:21:55.818551 env[1421]: time="2025-09-06T00:21:55.818465187Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Sep 6 00:21:55.818812 env[1421]: time="2025-09-06T00:21:55.818777088Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Sep 6 00:21:55.819011 env[1421]: time="2025-09-06T00:21:55.818980489Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Sep 6 00:21:55.819306 env[1421]: time="2025-09-06T00:21:55.819276290Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/31f743b440e1d843931af6b5841bd79143d64437876023cac7c57a804880c849 pid=3975 runtime=io.containerd.runc.v2 Sep 6 00:21:55.818000 audit[3972]: NETFILTER_CFG table=filter:112 family=2 entries=50 op=nft_register_chain pid=3972 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Sep 6 00:21:55.818000 audit[3972]: SYSCALL arch=c000003e syscall=46 success=yes exit=28208 a0=3 a1=7ffe2a3bf9f0 a2=0 a3=7ffe2a3bf9dc items=0 ppid=3701 pid=3972 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:21:55.818000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Sep 6 00:21:55.840502 systemd[1]: Started cri-containerd-31f743b440e1d843931af6b5841bd79143d64437876023cac7c57a804880c849.scope. Sep 6 00:21:55.856000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:55.856000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:55.856000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:55.856000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:55.856000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:55.856000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:55.856000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:55.856000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:55.856000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:55.856000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:55.856000 audit: BPF prog-id=170 op=LOAD Sep 6 00:21:55.857000 audit[3986]: AVC avc: denied { bpf } for pid=3986 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:55.857000 audit[3986]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c00023dc48 a2=10 a3=1c items=0 ppid=3975 pid=3986 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:21:55.857000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3331663734336234343065316438343339333161663662353834316264 Sep 6 00:21:55.857000 audit[3986]: AVC avc: denied { perfmon } for pid=3986 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:55.857000 audit[3986]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=0 a1=c00023d6b0 a2=3c a3=c items=0 ppid=3975 pid=3986 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:21:55.857000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3331663734336234343065316438343339333161663662353834316264 Sep 6 00:21:55.857000 audit[3986]: AVC avc: denied { bpf } for pid=3986 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:55.857000 audit[3986]: AVC avc: denied { bpf } for pid=3986 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:55.857000 audit[3986]: AVC avc: denied { bpf } for pid=3986 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:55.857000 audit[3986]: AVC avc: denied { perfmon } for pid=3986 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:55.857000 audit[3986]: AVC avc: denied { perfmon } for pid=3986 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:55.857000 audit[3986]: AVC avc: denied { perfmon } for pid=3986 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:55.857000 audit[3986]: AVC avc: denied { perfmon } for pid=3986 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:55.857000 audit[3986]: AVC avc: denied { perfmon } for pid=3986 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:55.857000 audit[3986]: AVC avc: denied { bpf } for pid=3986 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:55.857000 audit[3986]: AVC avc: denied { bpf } for pid=3986 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:55.857000 audit: BPF prog-id=171 op=LOAD Sep 6 00:21:55.857000 audit[3986]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c00023d9d8 a2=78 a3=c000341dc0 items=0 ppid=3975 pid=3986 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:21:55.857000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3331663734336234343065316438343339333161663662353834316264 Sep 6 00:21:55.857000 audit[3986]: AVC avc: denied { bpf } for pid=3986 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:55.857000 audit[3986]: AVC avc: denied { bpf } for pid=3986 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:55.857000 audit[3986]: AVC avc: denied { perfmon } for pid=3986 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:55.857000 audit[3986]: AVC avc: denied { perfmon } for pid=3986 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:55.857000 audit[3986]: AVC avc: denied { perfmon } for pid=3986 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:55.857000 audit[3986]: AVC avc: denied { perfmon } for pid=3986 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:55.857000 audit[3986]: AVC avc: denied { perfmon } for pid=3986 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:55.857000 audit[3986]: AVC avc: denied { bpf } for pid=3986 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:55.857000 audit[3986]: AVC avc: denied { bpf } for pid=3986 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:55.857000 audit: BPF prog-id=172 op=LOAD Sep 6 00:21:55.857000 audit[3986]: SYSCALL arch=c000003e syscall=321 success=yes exit=17 a0=5 a1=c00023d770 a2=78 a3=c000341e08 items=0 ppid=3975 pid=3986 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:21:55.857000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3331663734336234343065316438343339333161663662353834316264 Sep 6 00:21:55.857000 audit: BPF prog-id=172 op=UNLOAD Sep 6 00:21:55.857000 audit: BPF prog-id=171 op=UNLOAD Sep 6 00:21:55.857000 audit[3986]: AVC avc: denied { bpf } for pid=3986 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:55.857000 audit[3986]: AVC avc: denied { bpf } for pid=3986 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:55.857000 audit[3986]: AVC avc: denied { bpf } for pid=3986 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:55.857000 audit[3986]: AVC avc: denied { perfmon } for pid=3986 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:55.857000 audit[3986]: AVC avc: denied { perfmon } for pid=3986 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:55.857000 audit[3986]: AVC avc: denied { perfmon } for pid=3986 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:55.857000 audit[3986]: AVC avc: denied { perfmon } for pid=3986 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:55.857000 audit[3986]: AVC avc: denied { perfmon } for pid=3986 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:55.857000 audit[3986]: AVC avc: denied { bpf } for pid=3986 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:55.857000 audit[3986]: AVC avc: denied { bpf } for pid=3986 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:55.857000 audit: BPF prog-id=173 op=LOAD Sep 6 00:21:55.857000 audit[3986]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c00023dc30 a2=78 a3=c0003ba218 items=0 ppid=3975 pid=3986 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:21:55.857000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3331663734336234343065316438343339333161663662353834316264 Sep 6 00:21:55.888820 env[1421]: time="2025-09-06T00:21:55.888766701Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-apiserver-6575dd5656-clp7v,Uid:1fd46bfe-b99f-484d-b293-2fbf2d2e8a89,Namespace:calico-apiserver,Attempt:1,} returns sandbox id \"31f743b440e1d843931af6b5841bd79143d64437876023cac7c57a804880c849\"" Sep 6 00:21:56.015648 kubelet[2412]: I0906 00:21:56.012801 2412 prober_manager.go:312] "Failed to trigger a manual run" probe="Readiness" Sep 6 00:21:56.106262 systemd-networkd[1577]: vxlan.calico: Gained IPv6LL Sep 6 00:21:57.002166 systemd-networkd[1577]: calib2ec18b54e0: Gained IPv6LL Sep 6 00:21:57.488524 env[1421]: time="2025-09-06T00:21:57.488310110Z" level=info msg="StopPodSandbox for \"3589c5c844285e0a60626274d5835cedbf9fdc60545aa4feb953e45a8904f94b\"" Sep 6 00:21:57.504716 env[1421]: time="2025-09-06T00:21:57.504660880Z" level=info msg="StopPodSandbox for \"f2fc2fea3b942cb104f2fbc53d4c4f32aac387adc5c6778b6509b17e23e23516\"" Sep 6 00:21:57.700187 env[1421]: 2025-09-06 00:21:57.579 [INFO][4067] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="3589c5c844285e0a60626274d5835cedbf9fdc60545aa4feb953e45a8904f94b" Sep 6 00:21:57.700187 env[1421]: 2025-09-06 00:21:57.580 [INFO][4067] cni-plugin/dataplane_linux.go 559: Deleting workload's device in netns. ContainerID="3589c5c844285e0a60626274d5835cedbf9fdc60545aa4feb953e45a8904f94b" iface="eth0" netns="/var/run/netns/cni-f1474506-e02a-e18c-8abf-6cacbeb95bd8" Sep 6 00:21:57.700187 env[1421]: 2025-09-06 00:21:57.582 [INFO][4067] cni-plugin/dataplane_linux.go 570: Entered netns, deleting veth. ContainerID="3589c5c844285e0a60626274d5835cedbf9fdc60545aa4feb953e45a8904f94b" iface="eth0" netns="/var/run/netns/cni-f1474506-e02a-e18c-8abf-6cacbeb95bd8" Sep 6 00:21:57.700187 env[1421]: 2025-09-06 00:21:57.582 [INFO][4067] cni-plugin/dataplane_linux.go 597: Workload's veth was already gone. Nothing to do. ContainerID="3589c5c844285e0a60626274d5835cedbf9fdc60545aa4feb953e45a8904f94b" iface="eth0" netns="/var/run/netns/cni-f1474506-e02a-e18c-8abf-6cacbeb95bd8" Sep 6 00:21:57.700187 env[1421]: 2025-09-06 00:21:57.582 [INFO][4067] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="3589c5c844285e0a60626274d5835cedbf9fdc60545aa4feb953e45a8904f94b" Sep 6 00:21:57.700187 env[1421]: 2025-09-06 00:21:57.582 [INFO][4067] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="3589c5c844285e0a60626274d5835cedbf9fdc60545aa4feb953e45a8904f94b" Sep 6 00:21:57.700187 env[1421]: 2025-09-06 00:21:57.681 [INFO][4082] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="3589c5c844285e0a60626274d5835cedbf9fdc60545aa4feb953e45a8904f94b" HandleID="k8s-pod-network.3589c5c844285e0a60626274d5835cedbf9fdc60545aa4feb953e45a8904f94b" Workload="ci--3510.3.8--n--28804d0655-k8s-csi--node--driver--pb785-eth0" Sep 6 00:21:57.700187 env[1421]: 2025-09-06 00:21:57.683 [INFO][4082] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Sep 6 00:21:57.700187 env[1421]: 2025-09-06 00:21:57.684 [INFO][4082] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Sep 6 00:21:57.700187 env[1421]: 2025-09-06 00:21:57.690 [WARNING][4082] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="3589c5c844285e0a60626274d5835cedbf9fdc60545aa4feb953e45a8904f94b" HandleID="k8s-pod-network.3589c5c844285e0a60626274d5835cedbf9fdc60545aa4feb953e45a8904f94b" Workload="ci--3510.3.8--n--28804d0655-k8s-csi--node--driver--pb785-eth0" Sep 6 00:21:57.700187 env[1421]: 2025-09-06 00:21:57.691 [INFO][4082] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="3589c5c844285e0a60626274d5835cedbf9fdc60545aa4feb953e45a8904f94b" HandleID="k8s-pod-network.3589c5c844285e0a60626274d5835cedbf9fdc60545aa4feb953e45a8904f94b" Workload="ci--3510.3.8--n--28804d0655-k8s-csi--node--driver--pb785-eth0" Sep 6 00:21:57.700187 env[1421]: 2025-09-06 00:21:57.692 [INFO][4082] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Sep 6 00:21:57.700187 env[1421]: 2025-09-06 00:21:57.698 [INFO][4067] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="3589c5c844285e0a60626274d5835cedbf9fdc60545aa4feb953e45a8904f94b" Sep 6 00:21:57.701213 env[1421]: time="2025-09-06T00:21:57.701162530Z" level=info msg="TearDown network for sandbox \"3589c5c844285e0a60626274d5835cedbf9fdc60545aa4feb953e45a8904f94b\" successfully" Sep 6 00:21:57.701345 env[1421]: time="2025-09-06T00:21:57.701322231Z" level=info msg="StopPodSandbox for \"3589c5c844285e0a60626274d5835cedbf9fdc60545aa4feb953e45a8904f94b\" returns successfully" Sep 6 00:21:57.702245 env[1421]: time="2025-09-06T00:21:57.702208034Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:csi-node-driver-pb785,Uid:1ea5f5bc-3af9-4595-8783-60d58914430c,Namespace:calico-system,Attempt:1,}" Sep 6 00:21:57.708961 systemd[1]: run-netns-cni\x2df1474506\x2de02a\x2de18c\x2d8abf\x2d6cacbeb95bd8.mount: Deactivated successfully. Sep 6 00:21:57.767466 env[1421]: 2025-09-06 00:21:57.655 [INFO][4076] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="f2fc2fea3b942cb104f2fbc53d4c4f32aac387adc5c6778b6509b17e23e23516" Sep 6 00:21:57.767466 env[1421]: 2025-09-06 00:21:57.655 [INFO][4076] cni-plugin/dataplane_linux.go 559: Deleting workload's device in netns. ContainerID="f2fc2fea3b942cb104f2fbc53d4c4f32aac387adc5c6778b6509b17e23e23516" iface="eth0" netns="/var/run/netns/cni-69c56bcf-d8ad-c03c-ce2c-e9d371f89900" Sep 6 00:21:57.767466 env[1421]: 2025-09-06 00:21:57.656 [INFO][4076] cni-plugin/dataplane_linux.go 570: Entered netns, deleting veth. ContainerID="f2fc2fea3b942cb104f2fbc53d4c4f32aac387adc5c6778b6509b17e23e23516" iface="eth0" netns="/var/run/netns/cni-69c56bcf-d8ad-c03c-ce2c-e9d371f89900" Sep 6 00:21:57.767466 env[1421]: 2025-09-06 00:21:57.656 [INFO][4076] cni-plugin/dataplane_linux.go 597: Workload's veth was already gone. Nothing to do. ContainerID="f2fc2fea3b942cb104f2fbc53d4c4f32aac387adc5c6778b6509b17e23e23516" iface="eth0" netns="/var/run/netns/cni-69c56bcf-d8ad-c03c-ce2c-e9d371f89900" Sep 6 00:21:57.767466 env[1421]: 2025-09-06 00:21:57.656 [INFO][4076] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="f2fc2fea3b942cb104f2fbc53d4c4f32aac387adc5c6778b6509b17e23e23516" Sep 6 00:21:57.767466 env[1421]: 2025-09-06 00:21:57.656 [INFO][4076] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="f2fc2fea3b942cb104f2fbc53d4c4f32aac387adc5c6778b6509b17e23e23516" Sep 6 00:21:57.767466 env[1421]: 2025-09-06 00:21:57.731 [INFO][4090] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="f2fc2fea3b942cb104f2fbc53d4c4f32aac387adc5c6778b6509b17e23e23516" HandleID="k8s-pod-network.f2fc2fea3b942cb104f2fbc53d4c4f32aac387adc5c6778b6509b17e23e23516" Workload="ci--3510.3.8--n--28804d0655-k8s-calico--apiserver--6575dd5656--6ft5t-eth0" Sep 6 00:21:57.767466 env[1421]: 2025-09-06 00:21:57.732 [INFO][4090] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Sep 6 00:21:57.767466 env[1421]: 2025-09-06 00:21:57.732 [INFO][4090] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Sep 6 00:21:57.767466 env[1421]: 2025-09-06 00:21:57.755 [WARNING][4090] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="f2fc2fea3b942cb104f2fbc53d4c4f32aac387adc5c6778b6509b17e23e23516" HandleID="k8s-pod-network.f2fc2fea3b942cb104f2fbc53d4c4f32aac387adc5c6778b6509b17e23e23516" Workload="ci--3510.3.8--n--28804d0655-k8s-calico--apiserver--6575dd5656--6ft5t-eth0" Sep 6 00:21:57.767466 env[1421]: 2025-09-06 00:21:57.755 [INFO][4090] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="f2fc2fea3b942cb104f2fbc53d4c4f32aac387adc5c6778b6509b17e23e23516" HandleID="k8s-pod-network.f2fc2fea3b942cb104f2fbc53d4c4f32aac387adc5c6778b6509b17e23e23516" Workload="ci--3510.3.8--n--28804d0655-k8s-calico--apiserver--6575dd5656--6ft5t-eth0" Sep 6 00:21:57.767466 env[1421]: 2025-09-06 00:21:57.758 [INFO][4090] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Sep 6 00:21:57.767466 env[1421]: 2025-09-06 00:21:57.760 [INFO][4076] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="f2fc2fea3b942cb104f2fbc53d4c4f32aac387adc5c6778b6509b17e23e23516" Sep 6 00:21:57.772197 systemd[1]: run-netns-cni\x2d69c56bcf\x2dd8ad\x2dc03c\x2dce2c\x2de9d371f89900.mount: Deactivated successfully. Sep 6 00:21:57.775014 env[1421]: time="2025-09-06T00:21:57.774964949Z" level=info msg="TearDown network for sandbox \"f2fc2fea3b942cb104f2fbc53d4c4f32aac387adc5c6778b6509b17e23e23516\" successfully" Sep 6 00:21:57.775160 env[1421]: time="2025-09-06T00:21:57.775140450Z" level=info msg="StopPodSandbox for \"f2fc2fea3b942cb104f2fbc53d4c4f32aac387adc5c6778b6509b17e23e23516\" returns successfully" Sep 6 00:21:57.776197 env[1421]: time="2025-09-06T00:21:57.776162354Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-apiserver-6575dd5656-6ft5t,Uid:de9b4ddb-1c06-4bdb-a14b-41494dee8eb6,Namespace:calico-apiserver,Attempt:1,}" Sep 6 00:21:57.991828 systemd-networkd[1577]: cali5149339e35c: Link UP Sep 6 00:21:58.005104 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): eth0: link becomes ready Sep 6 00:21:58.005236 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): cali5149339e35c: link becomes ready Sep 6 00:21:58.011327 systemd-networkd[1577]: cali5149339e35c: Gained carrier Sep 6 00:21:58.038482 env[1421]: 2025-09-06 00:21:57.829 [INFO][4098] cni-plugin/plugin.go 340: Calico CNI found existing endpoint: &{{WorkloadEndpoint projectcalico.org/v3} {ci--3510.3.8--n--28804d0655-k8s-csi--node--driver--pb785-eth0 csi-node-driver- calico-system 1ea5f5bc-3af9-4595-8783-60d58914430c 964 0 2025-09-06 00:21:28 +0000 UTC map[app.kubernetes.io/name:csi-node-driver controller-revision-hash:856c6b598f k8s-app:csi-node-driver name:csi-node-driver pod-template-generation:1 projectcalico.org/namespace:calico-system projectcalico.org/orchestrator:k8s projectcalico.org/serviceaccount:csi-node-driver] map[] [] [] []} {k8s ci-3510.3.8-n-28804d0655 csi-node-driver-pb785 eth0 csi-node-driver [] [] [kns.calico-system ksa.calico-system.csi-node-driver] cali5149339e35c [] [] }} ContainerID="242b8628b28a14020a4862b19eb09c9477d5c1269c192eab8d02f1670cf18060" Namespace="calico-system" Pod="csi-node-driver-pb785" WorkloadEndpoint="ci--3510.3.8--n--28804d0655-k8s-csi--node--driver--pb785-" Sep 6 00:21:58.038482 env[1421]: 2025-09-06 00:21:57.829 [INFO][4098] cni-plugin/k8s.go 74: Extracted identifiers for CmdAddK8s ContainerID="242b8628b28a14020a4862b19eb09c9477d5c1269c192eab8d02f1670cf18060" Namespace="calico-system" Pod="csi-node-driver-pb785" WorkloadEndpoint="ci--3510.3.8--n--28804d0655-k8s-csi--node--driver--pb785-eth0" Sep 6 00:21:58.038482 env[1421]: 2025-09-06 00:21:57.934 [INFO][4121] ipam/ipam_plugin.go 225: Calico CNI IPAM request count IPv4=1 IPv6=0 ContainerID="242b8628b28a14020a4862b19eb09c9477d5c1269c192eab8d02f1670cf18060" HandleID="k8s-pod-network.242b8628b28a14020a4862b19eb09c9477d5c1269c192eab8d02f1670cf18060" Workload="ci--3510.3.8--n--28804d0655-k8s-csi--node--driver--pb785-eth0" Sep 6 00:21:58.038482 env[1421]: 2025-09-06 00:21:57.934 [INFO][4121] ipam/ipam_plugin.go 265: Auto assigning IP ContainerID="242b8628b28a14020a4862b19eb09c9477d5c1269c192eab8d02f1670cf18060" HandleID="k8s-pod-network.242b8628b28a14020a4862b19eb09c9477d5c1269c192eab8d02f1670cf18060" Workload="ci--3510.3.8--n--28804d0655-k8s-csi--node--driver--pb785-eth0" assignArgs=ipam.AutoAssignArgs{Num4:1, Num6:0, HandleID:(*string)(0xc0003254a0), Attrs:map[string]string{"namespace":"calico-system", "node":"ci-3510.3.8-n-28804d0655", "pod":"csi-node-driver-pb785", "timestamp":"2025-09-06 00:21:57.934584939 +0000 UTC"}, Hostname:"ci-3510.3.8-n-28804d0655", IPv4Pools:[]net.IPNet{}, IPv6Pools:[]net.IPNet{}, MaxBlocksPerHost:0, HostReservedAttrIPv4s:(*ipam.HostReservedAttr)(nil), HostReservedAttrIPv6s:(*ipam.HostReservedAttr)(nil), IntendedUse:"Workload"} Sep 6 00:21:58.038482 env[1421]: 2025-09-06 00:21:57.935 [INFO][4121] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Sep 6 00:21:58.038482 env[1421]: 2025-09-06 00:21:57.935 [INFO][4121] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Sep 6 00:21:58.038482 env[1421]: 2025-09-06 00:21:57.935 [INFO][4121] ipam/ipam.go 110: Auto-assign 1 ipv4, 0 ipv6 addrs for host 'ci-3510.3.8-n-28804d0655' Sep 6 00:21:58.038482 env[1421]: 2025-09-06 00:21:57.943 [INFO][4121] ipam/ipam.go 691: Looking up existing affinities for host handle="k8s-pod-network.242b8628b28a14020a4862b19eb09c9477d5c1269c192eab8d02f1670cf18060" host="ci-3510.3.8-n-28804d0655" Sep 6 00:21:58.038482 env[1421]: 2025-09-06 00:21:57.948 [INFO][4121] ipam/ipam.go 394: Looking up existing affinities for host host="ci-3510.3.8-n-28804d0655" Sep 6 00:21:58.038482 env[1421]: 2025-09-06 00:21:57.958 [INFO][4121] ipam/ipam.go 511: Trying affinity for 192.168.107.64/26 host="ci-3510.3.8-n-28804d0655" Sep 6 00:21:58.038482 env[1421]: 2025-09-06 00:21:57.960 [INFO][4121] ipam/ipam.go 158: Attempting to load block cidr=192.168.107.64/26 host="ci-3510.3.8-n-28804d0655" Sep 6 00:21:58.038482 env[1421]: 2025-09-06 00:21:57.963 [INFO][4121] ipam/ipam.go 235: Affinity is confirmed and block has been loaded cidr=192.168.107.64/26 host="ci-3510.3.8-n-28804d0655" Sep 6 00:21:58.038482 env[1421]: 2025-09-06 00:21:57.963 [INFO][4121] ipam/ipam.go 1220: Attempting to assign 1 addresses from block block=192.168.107.64/26 handle="k8s-pod-network.242b8628b28a14020a4862b19eb09c9477d5c1269c192eab8d02f1670cf18060" host="ci-3510.3.8-n-28804d0655" Sep 6 00:21:58.038482 env[1421]: 2025-09-06 00:21:57.965 [INFO][4121] ipam/ipam.go 1764: Creating new handle: k8s-pod-network.242b8628b28a14020a4862b19eb09c9477d5c1269c192eab8d02f1670cf18060 Sep 6 00:21:58.038482 env[1421]: 2025-09-06 00:21:57.971 [INFO][4121] ipam/ipam.go 1243: Writing block in order to claim IPs block=192.168.107.64/26 handle="k8s-pod-network.242b8628b28a14020a4862b19eb09c9477d5c1269c192eab8d02f1670cf18060" host="ci-3510.3.8-n-28804d0655" Sep 6 00:21:58.038482 env[1421]: 2025-09-06 00:21:57.983 [INFO][4121] ipam/ipam.go 1256: Successfully claimed IPs: [192.168.107.67/26] block=192.168.107.64/26 handle="k8s-pod-network.242b8628b28a14020a4862b19eb09c9477d5c1269c192eab8d02f1670cf18060" host="ci-3510.3.8-n-28804d0655" Sep 6 00:21:58.038482 env[1421]: 2025-09-06 00:21:57.983 [INFO][4121] ipam/ipam.go 878: Auto-assigned 1 out of 1 IPv4s: [192.168.107.67/26] handle="k8s-pod-network.242b8628b28a14020a4862b19eb09c9477d5c1269c192eab8d02f1670cf18060" host="ci-3510.3.8-n-28804d0655" Sep 6 00:21:58.038482 env[1421]: 2025-09-06 00:21:57.983 [INFO][4121] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Sep 6 00:21:58.038482 env[1421]: 2025-09-06 00:21:57.983 [INFO][4121] ipam/ipam_plugin.go 283: Calico CNI IPAM assigned addresses IPv4=[192.168.107.67/26] IPv6=[] ContainerID="242b8628b28a14020a4862b19eb09c9477d5c1269c192eab8d02f1670cf18060" HandleID="k8s-pod-network.242b8628b28a14020a4862b19eb09c9477d5c1269c192eab8d02f1670cf18060" Workload="ci--3510.3.8--n--28804d0655-k8s-csi--node--driver--pb785-eth0" Sep 6 00:21:58.039573 env[1421]: 2025-09-06 00:21:57.987 [INFO][4098] cni-plugin/k8s.go 418: Populated endpoint ContainerID="242b8628b28a14020a4862b19eb09c9477d5c1269c192eab8d02f1670cf18060" Namespace="calico-system" Pod="csi-node-driver-pb785" WorkloadEndpoint="ci--3510.3.8--n--28804d0655-k8s-csi--node--driver--pb785-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ci--3510.3.8--n--28804d0655-k8s-csi--node--driver--pb785-eth0", GenerateName:"csi-node-driver-", Namespace:"calico-system", SelfLink:"", UID:"1ea5f5bc-3af9-4595-8783-60d58914430c", ResourceVersion:"964", Generation:0, CreationTimestamp:time.Date(2025, time.September, 6, 0, 21, 28, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"csi-node-driver", "controller-revision-hash":"856c6b598f", "k8s-app":"csi-node-driver", "name":"csi-node-driver", "pod-template-generation":"1", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"csi-node-driver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ci-3510.3.8-n-28804d0655", ContainerID:"", Pod:"csi-node-driver-pb785", Endpoint:"eth0", ServiceAccountName:"csi-node-driver", IPNetworks:[]string{"192.168.107.67/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.csi-node-driver"}, InterfaceName:"cali5149339e35c", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Sep 6 00:21:58.039573 env[1421]: 2025-09-06 00:21:57.987 [INFO][4098] cni-plugin/k8s.go 419: Calico CNI using IPs: [192.168.107.67/32] ContainerID="242b8628b28a14020a4862b19eb09c9477d5c1269c192eab8d02f1670cf18060" Namespace="calico-system" Pod="csi-node-driver-pb785" WorkloadEndpoint="ci--3510.3.8--n--28804d0655-k8s-csi--node--driver--pb785-eth0" Sep 6 00:21:58.039573 env[1421]: 2025-09-06 00:21:57.987 [INFO][4098] cni-plugin/dataplane_linux.go 69: Setting the host side veth name to cali5149339e35c ContainerID="242b8628b28a14020a4862b19eb09c9477d5c1269c192eab8d02f1670cf18060" Namespace="calico-system" Pod="csi-node-driver-pb785" WorkloadEndpoint="ci--3510.3.8--n--28804d0655-k8s-csi--node--driver--pb785-eth0" Sep 6 00:21:58.039573 env[1421]: 2025-09-06 00:21:58.011 [INFO][4098] cni-plugin/dataplane_linux.go 508: Disabling IPv4 forwarding ContainerID="242b8628b28a14020a4862b19eb09c9477d5c1269c192eab8d02f1670cf18060" Namespace="calico-system" Pod="csi-node-driver-pb785" WorkloadEndpoint="ci--3510.3.8--n--28804d0655-k8s-csi--node--driver--pb785-eth0" Sep 6 00:21:58.039573 env[1421]: 2025-09-06 00:21:58.011 [INFO][4098] cni-plugin/k8s.go 446: Added Mac, interface name, and active container ID to endpoint ContainerID="242b8628b28a14020a4862b19eb09c9477d5c1269c192eab8d02f1670cf18060" Namespace="calico-system" Pod="csi-node-driver-pb785" WorkloadEndpoint="ci--3510.3.8--n--28804d0655-k8s-csi--node--driver--pb785-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ci--3510.3.8--n--28804d0655-k8s-csi--node--driver--pb785-eth0", GenerateName:"csi-node-driver-", Namespace:"calico-system", SelfLink:"", UID:"1ea5f5bc-3af9-4595-8783-60d58914430c", ResourceVersion:"964", Generation:0, CreationTimestamp:time.Date(2025, time.September, 6, 0, 21, 28, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"csi-node-driver", "controller-revision-hash":"856c6b598f", "k8s-app":"csi-node-driver", "name":"csi-node-driver", "pod-template-generation":"1", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"csi-node-driver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ci-3510.3.8-n-28804d0655", ContainerID:"242b8628b28a14020a4862b19eb09c9477d5c1269c192eab8d02f1670cf18060", Pod:"csi-node-driver-pb785", Endpoint:"eth0", ServiceAccountName:"csi-node-driver", IPNetworks:[]string{"192.168.107.67/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.csi-node-driver"}, InterfaceName:"cali5149339e35c", MAC:"4e:9f:58:2a:37:83", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Sep 6 00:21:58.039573 env[1421]: 2025-09-06 00:21:58.033 [INFO][4098] cni-plugin/k8s.go 532: Wrote updated endpoint to datastore ContainerID="242b8628b28a14020a4862b19eb09c9477d5c1269c192eab8d02f1670cf18060" Namespace="calico-system" Pod="csi-node-driver-pb785" WorkloadEndpoint="ci--3510.3.8--n--28804d0655-k8s-csi--node--driver--pb785-eth0" Sep 6 00:21:58.107275 env[1421]: time="2025-09-06T00:21:58.107187778Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Sep 6 00:21:58.107521 env[1421]: time="2025-09-06T00:21:58.107492579Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Sep 6 00:21:58.107639 env[1421]: time="2025-09-06T00:21:58.107613680Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Sep 6 00:21:58.109112 env[1421]: time="2025-09-06T00:21:58.109025286Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/242b8628b28a14020a4862b19eb09c9477d5c1269c192eab8d02f1670cf18060 pid=4153 runtime=io.containerd.runc.v2 Sep 6 00:21:58.126783 systemd-networkd[1577]: calidca511bec55: Link UP Sep 6 00:21:58.137834 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): calidca511bec55: link becomes ready Sep 6 00:21:58.138188 systemd-networkd[1577]: calidca511bec55: Gained carrier Sep 6 00:21:58.144000 audit[4154]: NETFILTER_CFG table=filter:113 family=2 entries=40 op=nft_register_chain pid=4154 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Sep 6 00:21:58.152708 kernel: kauditd_printk_skb: 767 callbacks suppressed Sep 6 00:21:58.152846 kernel: audit: type=1325 audit(1757118118.144:1133): table=filter:113 family=2 entries=40 op=nft_register_chain pid=4154 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Sep 6 00:21:58.195502 systemd[1]: Started cri-containerd-242b8628b28a14020a4862b19eb09c9477d5c1269c192eab8d02f1670cf18060.scope. Sep 6 00:21:58.144000 audit[4154]: SYSCALL arch=c000003e syscall=46 success=yes exit=20764 a0=3 a1=7ffee4823870 a2=0 a3=7ffee482385c items=0 ppid=3701 pid=4154 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:21:58.223058 kernel: audit: type=1300 audit(1757118118.144:1133): arch=c000003e syscall=46 success=yes exit=20764 a0=3 a1=7ffee4823870 a2=0 a3=7ffee482385c items=0 ppid=3701 pid=4154 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:21:58.223429 env[1421]: 2025-09-06 00:21:57.914 [INFO][4109] cni-plugin/plugin.go 340: Calico CNI found existing endpoint: &{{WorkloadEndpoint projectcalico.org/v3} {ci--3510.3.8--n--28804d0655-k8s-calico--apiserver--6575dd5656--6ft5t-eth0 calico-apiserver-6575dd5656- calico-apiserver de9b4ddb-1c06-4bdb-a14b-41494dee8eb6 965 0 2025-09-06 00:21:24 +0000 UTC map[apiserver:true app.kubernetes.io/name:calico-apiserver k8s-app:calico-apiserver pod-template-hash:6575dd5656 projectcalico.org/namespace:calico-apiserver projectcalico.org/orchestrator:k8s projectcalico.org/serviceaccount:calico-apiserver] map[] [] [] []} {k8s ci-3510.3.8-n-28804d0655 calico-apiserver-6575dd5656-6ft5t eth0 calico-apiserver [] [] [kns.calico-apiserver ksa.calico-apiserver.calico-apiserver] calidca511bec55 [] [] }} ContainerID="8dc460b79c3b205c960cf91edc8f210a083b115257c217486a6de4e543579891" Namespace="calico-apiserver" Pod="calico-apiserver-6575dd5656-6ft5t" WorkloadEndpoint="ci--3510.3.8--n--28804d0655-k8s-calico--apiserver--6575dd5656--6ft5t-" Sep 6 00:21:58.223429 env[1421]: 2025-09-06 00:21:57.914 [INFO][4109] cni-plugin/k8s.go 74: Extracted identifiers for CmdAddK8s ContainerID="8dc460b79c3b205c960cf91edc8f210a083b115257c217486a6de4e543579891" Namespace="calico-apiserver" Pod="calico-apiserver-6575dd5656-6ft5t" WorkloadEndpoint="ci--3510.3.8--n--28804d0655-k8s-calico--apiserver--6575dd5656--6ft5t-eth0" Sep 6 00:21:58.223429 env[1421]: 2025-09-06 00:21:58.037 [INFO][4130] ipam/ipam_plugin.go 225: Calico CNI IPAM request count IPv4=1 IPv6=0 ContainerID="8dc460b79c3b205c960cf91edc8f210a083b115257c217486a6de4e543579891" HandleID="k8s-pod-network.8dc460b79c3b205c960cf91edc8f210a083b115257c217486a6de4e543579891" Workload="ci--3510.3.8--n--28804d0655-k8s-calico--apiserver--6575dd5656--6ft5t-eth0" Sep 6 00:21:58.223429 env[1421]: 2025-09-06 00:21:58.038 [INFO][4130] ipam/ipam_plugin.go 265: Auto assigning IP ContainerID="8dc460b79c3b205c960cf91edc8f210a083b115257c217486a6de4e543579891" HandleID="k8s-pod-network.8dc460b79c3b205c960cf91edc8f210a083b115257c217486a6de4e543579891" Workload="ci--3510.3.8--n--28804d0655-k8s-calico--apiserver--6575dd5656--6ft5t-eth0" assignArgs=ipam.AutoAssignArgs{Num4:1, Num6:0, HandleID:(*string)(0xc0002cd6c0), Attrs:map[string]string{"namespace":"calico-apiserver", "node":"ci-3510.3.8-n-28804d0655", "pod":"calico-apiserver-6575dd5656-6ft5t", "timestamp":"2025-09-06 00:21:58.037840283 +0000 UTC"}, Hostname:"ci-3510.3.8-n-28804d0655", IPv4Pools:[]net.IPNet{}, IPv6Pools:[]net.IPNet{}, MaxBlocksPerHost:0, HostReservedAttrIPv4s:(*ipam.HostReservedAttr)(nil), HostReservedAttrIPv6s:(*ipam.HostReservedAttr)(nil), IntendedUse:"Workload"} Sep 6 00:21:58.223429 env[1421]: 2025-09-06 00:21:58.041 [INFO][4130] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Sep 6 00:21:58.223429 env[1421]: 2025-09-06 00:21:58.041 [INFO][4130] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Sep 6 00:21:58.223429 env[1421]: 2025-09-06 00:21:58.041 [INFO][4130] ipam/ipam.go 110: Auto-assign 1 ipv4, 0 ipv6 addrs for host 'ci-3510.3.8-n-28804d0655' Sep 6 00:21:58.223429 env[1421]: 2025-09-06 00:21:58.062 [INFO][4130] ipam/ipam.go 691: Looking up existing affinities for host handle="k8s-pod-network.8dc460b79c3b205c960cf91edc8f210a083b115257c217486a6de4e543579891" host="ci-3510.3.8-n-28804d0655" Sep 6 00:21:58.223429 env[1421]: 2025-09-06 00:21:58.075 [INFO][4130] ipam/ipam.go 394: Looking up existing affinities for host host="ci-3510.3.8-n-28804d0655" Sep 6 00:21:58.223429 env[1421]: 2025-09-06 00:21:58.083 [INFO][4130] ipam/ipam.go 511: Trying affinity for 192.168.107.64/26 host="ci-3510.3.8-n-28804d0655" Sep 6 00:21:58.223429 env[1421]: 2025-09-06 00:21:58.085 [INFO][4130] ipam/ipam.go 158: Attempting to load block cidr=192.168.107.64/26 host="ci-3510.3.8-n-28804d0655" Sep 6 00:21:58.223429 env[1421]: 2025-09-06 00:21:58.088 [INFO][4130] ipam/ipam.go 235: Affinity is confirmed and block has been loaded cidr=192.168.107.64/26 host="ci-3510.3.8-n-28804d0655" Sep 6 00:21:58.223429 env[1421]: 2025-09-06 00:21:58.088 [INFO][4130] ipam/ipam.go 1220: Attempting to assign 1 addresses from block block=192.168.107.64/26 handle="k8s-pod-network.8dc460b79c3b205c960cf91edc8f210a083b115257c217486a6de4e543579891" host="ci-3510.3.8-n-28804d0655" Sep 6 00:21:58.223429 env[1421]: 2025-09-06 00:21:58.093 [INFO][4130] ipam/ipam.go 1764: Creating new handle: k8s-pod-network.8dc460b79c3b205c960cf91edc8f210a083b115257c217486a6de4e543579891 Sep 6 00:21:58.223429 env[1421]: 2025-09-06 00:21:58.102 [INFO][4130] ipam/ipam.go 1243: Writing block in order to claim IPs block=192.168.107.64/26 handle="k8s-pod-network.8dc460b79c3b205c960cf91edc8f210a083b115257c217486a6de4e543579891" host="ci-3510.3.8-n-28804d0655" Sep 6 00:21:58.223429 env[1421]: 2025-09-06 00:21:58.120 [INFO][4130] ipam/ipam.go 1256: Successfully claimed IPs: [192.168.107.68/26] block=192.168.107.64/26 handle="k8s-pod-network.8dc460b79c3b205c960cf91edc8f210a083b115257c217486a6de4e543579891" host="ci-3510.3.8-n-28804d0655" Sep 6 00:21:58.223429 env[1421]: 2025-09-06 00:21:58.120 [INFO][4130] ipam/ipam.go 878: Auto-assigned 1 out of 1 IPv4s: [192.168.107.68/26] handle="k8s-pod-network.8dc460b79c3b205c960cf91edc8f210a083b115257c217486a6de4e543579891" host="ci-3510.3.8-n-28804d0655" Sep 6 00:21:58.223429 env[1421]: 2025-09-06 00:21:58.120 [INFO][4130] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Sep 6 00:21:58.223429 env[1421]: 2025-09-06 00:21:58.120 [INFO][4130] ipam/ipam_plugin.go 283: Calico CNI IPAM assigned addresses IPv4=[192.168.107.68/26] IPv6=[] ContainerID="8dc460b79c3b205c960cf91edc8f210a083b115257c217486a6de4e543579891" HandleID="k8s-pod-network.8dc460b79c3b205c960cf91edc8f210a083b115257c217486a6de4e543579891" Workload="ci--3510.3.8--n--28804d0655-k8s-calico--apiserver--6575dd5656--6ft5t-eth0" Sep 6 00:21:58.224369 env[1421]: 2025-09-06 00:21:58.122 [INFO][4109] cni-plugin/k8s.go 418: Populated endpoint ContainerID="8dc460b79c3b205c960cf91edc8f210a083b115257c217486a6de4e543579891" Namespace="calico-apiserver" Pod="calico-apiserver-6575dd5656-6ft5t" WorkloadEndpoint="ci--3510.3.8--n--28804d0655-k8s-calico--apiserver--6575dd5656--6ft5t-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ci--3510.3.8--n--28804d0655-k8s-calico--apiserver--6575dd5656--6ft5t-eth0", GenerateName:"calico-apiserver-6575dd5656-", Namespace:"calico-apiserver", SelfLink:"", UID:"de9b4ddb-1c06-4bdb-a14b-41494dee8eb6", ResourceVersion:"965", Generation:0, CreationTimestamp:time.Date(2025, time.September, 6, 0, 21, 24, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"apiserver":"true", "app.kubernetes.io/name":"calico-apiserver", "k8s-app":"calico-apiserver", "pod-template-hash":"6575dd5656", "projectcalico.org/namespace":"calico-apiserver", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-apiserver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ci-3510.3.8-n-28804d0655", ContainerID:"", Pod:"calico-apiserver-6575dd5656-6ft5t", Endpoint:"eth0", ServiceAccountName:"calico-apiserver", IPNetworks:[]string{"192.168.107.68/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-apiserver", "ksa.calico-apiserver.calico-apiserver"}, InterfaceName:"calidca511bec55", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Sep 6 00:21:58.224369 env[1421]: 2025-09-06 00:21:58.122 [INFO][4109] cni-plugin/k8s.go 419: Calico CNI using IPs: [192.168.107.68/32] ContainerID="8dc460b79c3b205c960cf91edc8f210a083b115257c217486a6de4e543579891" Namespace="calico-apiserver" Pod="calico-apiserver-6575dd5656-6ft5t" WorkloadEndpoint="ci--3510.3.8--n--28804d0655-k8s-calico--apiserver--6575dd5656--6ft5t-eth0" Sep 6 00:21:58.224369 env[1421]: 2025-09-06 00:21:58.122 [INFO][4109] cni-plugin/dataplane_linux.go 69: Setting the host side veth name to calidca511bec55 ContainerID="8dc460b79c3b205c960cf91edc8f210a083b115257c217486a6de4e543579891" Namespace="calico-apiserver" Pod="calico-apiserver-6575dd5656-6ft5t" WorkloadEndpoint="ci--3510.3.8--n--28804d0655-k8s-calico--apiserver--6575dd5656--6ft5t-eth0" Sep 6 00:21:58.224369 env[1421]: 2025-09-06 00:21:58.146 [INFO][4109] cni-plugin/dataplane_linux.go 508: Disabling IPv4 forwarding ContainerID="8dc460b79c3b205c960cf91edc8f210a083b115257c217486a6de4e543579891" Namespace="calico-apiserver" Pod="calico-apiserver-6575dd5656-6ft5t" WorkloadEndpoint="ci--3510.3.8--n--28804d0655-k8s-calico--apiserver--6575dd5656--6ft5t-eth0" Sep 6 00:21:58.224369 env[1421]: 2025-09-06 00:21:58.147 [INFO][4109] cni-plugin/k8s.go 446: Added Mac, interface name, and active container ID to endpoint ContainerID="8dc460b79c3b205c960cf91edc8f210a083b115257c217486a6de4e543579891" Namespace="calico-apiserver" Pod="calico-apiserver-6575dd5656-6ft5t" WorkloadEndpoint="ci--3510.3.8--n--28804d0655-k8s-calico--apiserver--6575dd5656--6ft5t-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ci--3510.3.8--n--28804d0655-k8s-calico--apiserver--6575dd5656--6ft5t-eth0", GenerateName:"calico-apiserver-6575dd5656-", Namespace:"calico-apiserver", SelfLink:"", UID:"de9b4ddb-1c06-4bdb-a14b-41494dee8eb6", ResourceVersion:"965", Generation:0, CreationTimestamp:time.Date(2025, time.September, 6, 0, 21, 24, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"apiserver":"true", "app.kubernetes.io/name":"calico-apiserver", "k8s-app":"calico-apiserver", "pod-template-hash":"6575dd5656", "projectcalico.org/namespace":"calico-apiserver", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-apiserver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ci-3510.3.8-n-28804d0655", ContainerID:"8dc460b79c3b205c960cf91edc8f210a083b115257c217486a6de4e543579891", Pod:"calico-apiserver-6575dd5656-6ft5t", Endpoint:"eth0", ServiceAccountName:"calico-apiserver", IPNetworks:[]string{"192.168.107.68/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-apiserver", "ksa.calico-apiserver.calico-apiserver"}, InterfaceName:"calidca511bec55", MAC:"ee:7d:6b:6e:46:00", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Sep 6 00:21:58.224369 env[1421]: 2025-09-06 00:21:58.202 [INFO][4109] cni-plugin/k8s.go 532: Wrote updated endpoint to datastore ContainerID="8dc460b79c3b205c960cf91edc8f210a083b115257c217486a6de4e543579891" Namespace="calico-apiserver" Pod="calico-apiserver-6575dd5656-6ft5t" WorkloadEndpoint="ci--3510.3.8--n--28804d0655-k8s-calico--apiserver--6575dd5656--6ft5t-eth0" Sep 6 00:21:58.144000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Sep 6 00:21:58.257480 kernel: audit: type=1327 audit(1757118118.144:1133): proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Sep 6 00:21:58.303944 env[1421]: time="2025-09-06T00:21:58.299826197Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Sep 6 00:21:58.304206 env[1421]: time="2025-09-06T00:21:58.304158515Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Sep 6 00:21:58.304335 env[1421]: time="2025-09-06T00:21:58.304313316Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Sep 6 00:21:58.304770 env[1421]: time="2025-09-06T00:21:58.304712118Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/8dc460b79c3b205c960cf91edc8f210a083b115257c217486a6de4e543579891 pid=4187 runtime=io.containerd.runc.v2 Sep 6 00:21:58.335108 systemd[1]: Started cri-containerd-8dc460b79c3b205c960cf91edc8f210a083b115257c217486a6de4e543579891.scope. Sep 6 00:21:58.397809 systemd[1]: run-containerd-runc-k8s.io-8dc460b79c3b205c960cf91edc8f210a083b115257c217486a6de4e543579891-runc.PbUtNh.mount: Deactivated successfully. Sep 6 00:21:58.490767 env[1421]: time="2025-09-06T00:21:58.490711508Z" level=info msg="StopPodSandbox for \"7ecfcce7d298cb044eef6631149c2b267bd7e716e7909658645cca69f1a75612\"" Sep 6 00:21:58.510195 env[1421]: time="2025-09-06T00:21:58.510136291Z" level=info msg="StopPodSandbox for \"cd674a970846304c2d07a559b71311a27e26be0d693da4182f5694d157bea78d\"" Sep 6 00:21:58.511463 env[1421]: time="2025-09-06T00:21:58.511417497Z" level=info msg="StopPodSandbox for \"b5644ce4823a63550a6c868ef6f1dba43b75cd58696ab1201a167f45cf216c86\"" Sep 6 00:21:58.522479 env[1421]: time="2025-09-06T00:21:58.520787236Z" level=info msg="StopPodSandbox for \"1d336359284437532c303b9404ca2351e29c387f6bfba03d4c9c6526ea69b44e\"" Sep 6 00:21:58.596000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:58.614963 kernel: audit: type=1400 audit(1757118118.596:1134): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:58.596000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:58.637067 kernel: audit: type=1400 audit(1757118118.596:1135): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:58.596000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:58.656985 kernel: audit: type=1400 audit(1757118118.596:1136): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:58.596000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:58.676970 kernel: audit: type=1400 audit(1757118118.596:1137): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:58.596000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:58.596000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:58.722522 kernel: audit: type=1400 audit(1757118118.596:1138): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:58.722698 kernel: audit: type=1400 audit(1757118118.596:1139): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:58.747982 kernel: audit: type=1400 audit(1757118118.596:1140): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:58.596000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:58.596000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:58.596000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:58.640000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:58.640000 audit: BPF prog-id=174 op=LOAD Sep 6 00:21:58.641000 audit[4164]: AVC avc: denied { bpf } for pid=4164 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:58.641000 audit[4164]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c00011fc48 a2=10 a3=1c items=0 ppid=4153 pid=4164 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:21:58.641000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3234326238363238623238613134303230613438363262313965623039 Sep 6 00:21:58.641000 audit[4164]: AVC avc: denied { perfmon } for pid=4164 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:58.641000 audit[4164]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c00011f6b0 a2=3c a3=c items=0 ppid=4153 pid=4164 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:21:58.641000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3234326238363238623238613134303230613438363262313965623039 Sep 6 00:21:58.641000 audit[4164]: AVC avc: denied { bpf } for pid=4164 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:58.641000 audit[4164]: AVC avc: denied { bpf } for pid=4164 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:58.641000 audit[4164]: AVC avc: denied { bpf } for pid=4164 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:58.641000 audit[4164]: AVC avc: denied { perfmon } for pid=4164 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:58.641000 audit[4164]: AVC avc: denied { perfmon } for pid=4164 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:58.641000 audit[4164]: AVC avc: denied { perfmon } for pid=4164 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:58.641000 audit[4164]: AVC avc: denied { perfmon } for pid=4164 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:58.641000 audit[4164]: AVC avc: denied { perfmon } for pid=4164 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:58.641000 audit[4164]: AVC avc: denied { bpf } for pid=4164 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:58.641000 audit[4164]: AVC avc: denied { bpf } for pid=4164 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:58.641000 audit: BPF prog-id=175 op=LOAD Sep 6 00:21:58.641000 audit[4164]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c00011f9d8 a2=78 a3=c000231e50 items=0 ppid=4153 pid=4164 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:21:58.641000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3234326238363238623238613134303230613438363262313965623039 Sep 6 00:21:58.782000 audit[4164]: AVC avc: denied { bpf } for pid=4164 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:58.782000 audit[4164]: AVC avc: denied { bpf } for pid=4164 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:58.782000 audit[4164]: AVC avc: denied { perfmon } for pid=4164 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:58.782000 audit[4164]: AVC avc: denied { perfmon } for pid=4164 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:58.782000 audit[4164]: AVC avc: denied { perfmon } for pid=4164 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:58.782000 audit[4164]: AVC avc: denied { perfmon } for pid=4164 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:58.782000 audit[4164]: AVC avc: denied { perfmon } for pid=4164 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:58.782000 audit[4164]: AVC avc: denied { bpf } for pid=4164 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:58.782000 audit[4164]: AVC avc: denied { bpf } for pid=4164 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:58.782000 audit: BPF prog-id=176 op=LOAD Sep 6 00:21:58.782000 audit[4164]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c00011f770 a2=78 a3=c000231e98 items=0 ppid=4153 pid=4164 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:21:58.782000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3234326238363238623238613134303230613438363262313965623039 Sep 6 00:21:58.783000 audit: BPF prog-id=176 op=UNLOAD Sep 6 00:21:58.783000 audit: BPF prog-id=175 op=UNLOAD Sep 6 00:21:58.783000 audit[4164]: AVC avc: denied { bpf } for pid=4164 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:58.783000 audit[4164]: AVC avc: denied { bpf } for pid=4164 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:58.783000 audit[4164]: AVC avc: denied { bpf } for pid=4164 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:58.783000 audit[4164]: AVC avc: denied { perfmon } for pid=4164 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:58.783000 audit[4164]: AVC avc: denied { perfmon } for pid=4164 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:58.783000 audit[4164]: AVC avc: denied { perfmon } for pid=4164 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:58.783000 audit[4164]: AVC avc: denied { perfmon } for pid=4164 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:58.783000 audit[4164]: AVC avc: denied { perfmon } for pid=4164 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:58.783000 audit[4164]: AVC avc: denied { bpf } for pid=4164 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:58.783000 audit[4164]: AVC avc: denied { bpf } for pid=4164 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:58.783000 audit: BPF prog-id=177 op=LOAD Sep 6 00:21:58.783000 audit[4164]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c00011fc30 a2=78 a3=c0004102a8 items=0 ppid=4153 pid=4164 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:21:58.783000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3234326238363238623238613134303230613438363262313965623039 Sep 6 00:21:58.809000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:58.809000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:58.809000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:58.809000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:58.809000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:58.809000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:58.809000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:58.809000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:58.809000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:58.810000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:58.810000 audit: BPF prog-id=178 op=LOAD Sep 6 00:21:58.811000 audit[4196]: AVC avc: denied { bpf } for pid=4196 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:58.811000 audit[4196]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000117c48 a2=10 a3=1c items=0 ppid=4187 pid=4196 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:21:58.811000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3864633436306237396333623230356339363063663931656463386632 Sep 6 00:21:58.811000 audit[4196]: AVC avc: denied { perfmon } for pid=4196 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:58.811000 audit[4196]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001176b0 a2=3c a3=c items=0 ppid=4187 pid=4196 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:21:58.811000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3864633436306237396333623230356339363063663931656463386632 Sep 6 00:21:58.816000 audit[4283]: NETFILTER_CFG table=filter:114 family=2 entries=45 op=nft_register_chain pid=4283 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Sep 6 00:21:58.816000 audit[4283]: SYSCALL arch=c000003e syscall=46 success=yes exit=24264 a0=3 a1=7ffe15974700 a2=0 a3=7ffe159746ec items=0 ppid=3701 pid=4283 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:21:58.818000 audit[4196]: AVC avc: denied { bpf } for pid=4196 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:58.818000 audit[4196]: AVC avc: denied { bpf } for pid=4196 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:58.818000 audit[4196]: AVC avc: denied { bpf } for pid=4196 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:58.818000 audit[4196]: AVC avc: denied { perfmon } for pid=4196 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:58.818000 audit[4196]: AVC avc: denied { perfmon } for pid=4196 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:58.818000 audit[4196]: AVC avc: denied { perfmon } for pid=4196 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:58.818000 audit[4196]: AVC avc: denied { perfmon } for pid=4196 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:58.818000 audit[4196]: AVC avc: denied { perfmon } for pid=4196 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:58.818000 audit[4196]: AVC avc: denied { bpf } for pid=4196 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:58.818000 audit[4196]: AVC avc: denied { bpf } for pid=4196 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:58.818000 audit: BPF prog-id=179 op=LOAD Sep 6 00:21:58.818000 audit[4196]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001179d8 a2=78 a3=c000304fb0 items=0 ppid=4187 pid=4196 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:21:58.818000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3864633436306237396333623230356339363063663931656463386632 Sep 6 00:21:58.818000 audit[4196]: AVC avc: denied { bpf } for pid=4196 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:58.818000 audit[4196]: AVC avc: denied { bpf } for pid=4196 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:58.818000 audit[4196]: AVC avc: denied { perfmon } for pid=4196 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:58.818000 audit[4196]: AVC avc: denied { perfmon } for pid=4196 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:58.818000 audit[4196]: AVC avc: denied { perfmon } for pid=4196 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:58.818000 audit[4196]: AVC avc: denied { perfmon } for pid=4196 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:58.818000 audit[4196]: AVC avc: denied { perfmon } for pid=4196 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:58.818000 audit[4196]: AVC avc: denied { bpf } for pid=4196 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:58.818000 audit[4196]: AVC avc: denied { bpf } for pid=4196 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:58.818000 audit: BPF prog-id=180 op=LOAD Sep 6 00:21:58.818000 audit[4196]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000117770 a2=78 a3=c000304ff8 items=0 ppid=4187 pid=4196 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:21:58.818000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3864633436306237396333623230356339363063663931656463386632 Sep 6 00:21:58.818000 audit: BPF prog-id=180 op=UNLOAD Sep 6 00:21:58.818000 audit: BPF prog-id=179 op=UNLOAD Sep 6 00:21:58.818000 audit[4196]: AVC avc: denied { bpf } for pid=4196 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:58.818000 audit[4196]: AVC avc: denied { bpf } for pid=4196 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:58.818000 audit[4196]: AVC avc: denied { bpf } for pid=4196 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:58.818000 audit[4196]: AVC avc: denied { perfmon } for pid=4196 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:58.818000 audit[4196]: AVC avc: denied { perfmon } for pid=4196 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:58.818000 audit[4196]: AVC avc: denied { perfmon } for pid=4196 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:58.818000 audit[4196]: AVC avc: denied { perfmon } for pid=4196 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:58.818000 audit[4196]: AVC avc: denied { perfmon } for pid=4196 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:58.818000 audit[4196]: AVC avc: denied { bpf } for pid=4196 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:58.818000 audit[4196]: AVC avc: denied { bpf } for pid=4196 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:58.818000 audit: BPF prog-id=181 op=LOAD Sep 6 00:21:58.818000 audit[4196]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000117c30 a2=78 a3=c000305408 items=0 ppid=4187 pid=4196 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:21:58.818000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3864633436306237396333623230356339363063663931656463386632 Sep 6 00:21:58.816000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Sep 6 00:21:58.867248 env[1421]: time="2025-09-06T00:21:58.867194809Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:csi-node-driver-pb785,Uid:1ea5f5bc-3af9-4595-8783-60d58914430c,Namespace:calico-system,Attempt:1,} returns sandbox id \"242b8628b28a14020a4862b19eb09c9477d5c1269c192eab8d02f1670cf18060\"" Sep 6 00:21:59.081186 env[1421]: time="2025-09-06T00:21:59.081051013Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-apiserver-6575dd5656-6ft5t,Uid:de9b4ddb-1c06-4bdb-a14b-41494dee8eb6,Namespace:calico-apiserver,Attempt:1,} returns sandbox id \"8dc460b79c3b205c960cf91edc8f210a083b115257c217486a6de4e543579891\"" Sep 6 00:21:59.107903 env[1421]: 2025-09-06 00:21:58.849 [INFO][4253] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="7ecfcce7d298cb044eef6631149c2b267bd7e716e7909658645cca69f1a75612" Sep 6 00:21:59.107903 env[1421]: 2025-09-06 00:21:58.849 [INFO][4253] cni-plugin/dataplane_linux.go 559: Deleting workload's device in netns. ContainerID="7ecfcce7d298cb044eef6631149c2b267bd7e716e7909658645cca69f1a75612" iface="eth0" netns="/var/run/netns/cni-c6608bd9-bd18-d35c-223c-40f791b8974e" Sep 6 00:21:59.107903 env[1421]: 2025-09-06 00:21:58.849 [INFO][4253] cni-plugin/dataplane_linux.go 570: Entered netns, deleting veth. ContainerID="7ecfcce7d298cb044eef6631149c2b267bd7e716e7909658645cca69f1a75612" iface="eth0" netns="/var/run/netns/cni-c6608bd9-bd18-d35c-223c-40f791b8974e" Sep 6 00:21:59.107903 env[1421]: 2025-09-06 00:21:58.849 [INFO][4253] cni-plugin/dataplane_linux.go 597: Workload's veth was already gone. Nothing to do. ContainerID="7ecfcce7d298cb044eef6631149c2b267bd7e716e7909658645cca69f1a75612" iface="eth0" netns="/var/run/netns/cni-c6608bd9-bd18-d35c-223c-40f791b8974e" Sep 6 00:21:59.107903 env[1421]: 2025-09-06 00:21:58.849 [INFO][4253] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="7ecfcce7d298cb044eef6631149c2b267bd7e716e7909658645cca69f1a75612" Sep 6 00:21:59.107903 env[1421]: 2025-09-06 00:21:58.849 [INFO][4253] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="7ecfcce7d298cb044eef6631149c2b267bd7e716e7909658645cca69f1a75612" Sep 6 00:21:59.107903 env[1421]: 2025-09-06 00:21:59.045 [INFO][4292] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="7ecfcce7d298cb044eef6631149c2b267bd7e716e7909658645cca69f1a75612" HandleID="k8s-pod-network.7ecfcce7d298cb044eef6631149c2b267bd7e716e7909658645cca69f1a75612" Workload="ci--3510.3.8--n--28804d0655-k8s-calico--kube--controllers--7b6d9948b6--pwxnb-eth0" Sep 6 00:21:59.107903 env[1421]: 2025-09-06 00:21:59.048 [INFO][4292] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Sep 6 00:21:59.107903 env[1421]: 2025-09-06 00:21:59.048 [INFO][4292] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Sep 6 00:21:59.107903 env[1421]: 2025-09-06 00:21:59.083 [WARNING][4292] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="7ecfcce7d298cb044eef6631149c2b267bd7e716e7909658645cca69f1a75612" HandleID="k8s-pod-network.7ecfcce7d298cb044eef6631149c2b267bd7e716e7909658645cca69f1a75612" Workload="ci--3510.3.8--n--28804d0655-k8s-calico--kube--controllers--7b6d9948b6--pwxnb-eth0" Sep 6 00:21:59.107903 env[1421]: 2025-09-06 00:21:59.083 [INFO][4292] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="7ecfcce7d298cb044eef6631149c2b267bd7e716e7909658645cca69f1a75612" HandleID="k8s-pod-network.7ecfcce7d298cb044eef6631149c2b267bd7e716e7909658645cca69f1a75612" Workload="ci--3510.3.8--n--28804d0655-k8s-calico--kube--controllers--7b6d9948b6--pwxnb-eth0" Sep 6 00:21:59.107903 env[1421]: 2025-09-06 00:21:59.097 [INFO][4292] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Sep 6 00:21:59.107903 env[1421]: 2025-09-06 00:21:59.104 [INFO][4253] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="7ecfcce7d298cb044eef6631149c2b267bd7e716e7909658645cca69f1a75612" Sep 6 00:21:59.108923 env[1421]: time="2025-09-06T00:21:59.108866729Z" level=info msg="TearDown network for sandbox \"7ecfcce7d298cb044eef6631149c2b267bd7e716e7909658645cca69f1a75612\" successfully" Sep 6 00:21:59.112315 env[1421]: time="2025-09-06T00:21:59.109052930Z" level=info msg="StopPodSandbox for \"7ecfcce7d298cb044eef6631149c2b267bd7e716e7909658645cca69f1a75612\" returns successfully" Sep 6 00:21:59.113428 env[1421]: time="2025-09-06T00:21:59.113388948Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-kube-controllers-7b6d9948b6-pwxnb,Uid:61e1e8a3-7e08-42e4-a4e0-f10c5e1b1879,Namespace:calico-system,Attempt:1,}" Sep 6 00:21:59.173293 env[1421]: 2025-09-06 00:21:58.968 [INFO][4254] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="cd674a970846304c2d07a559b71311a27e26be0d693da4182f5694d157bea78d" Sep 6 00:21:59.173293 env[1421]: 2025-09-06 00:21:58.968 [INFO][4254] cni-plugin/dataplane_linux.go 559: Deleting workload's device in netns. ContainerID="cd674a970846304c2d07a559b71311a27e26be0d693da4182f5694d157bea78d" iface="eth0" netns="/var/run/netns/cni-0e79efd8-c33b-30b0-af25-3d3001a6059a" Sep 6 00:21:59.173293 env[1421]: 2025-09-06 00:21:58.969 [INFO][4254] cni-plugin/dataplane_linux.go 570: Entered netns, deleting veth. ContainerID="cd674a970846304c2d07a559b71311a27e26be0d693da4182f5694d157bea78d" iface="eth0" netns="/var/run/netns/cni-0e79efd8-c33b-30b0-af25-3d3001a6059a" Sep 6 00:21:59.173293 env[1421]: 2025-09-06 00:21:58.970 [INFO][4254] cni-plugin/dataplane_linux.go 597: Workload's veth was already gone. Nothing to do. ContainerID="cd674a970846304c2d07a559b71311a27e26be0d693da4182f5694d157bea78d" iface="eth0" netns="/var/run/netns/cni-0e79efd8-c33b-30b0-af25-3d3001a6059a" Sep 6 00:21:59.173293 env[1421]: 2025-09-06 00:21:58.970 [INFO][4254] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="cd674a970846304c2d07a559b71311a27e26be0d693da4182f5694d157bea78d" Sep 6 00:21:59.173293 env[1421]: 2025-09-06 00:21:58.970 [INFO][4254] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="cd674a970846304c2d07a559b71311a27e26be0d693da4182f5694d157bea78d" Sep 6 00:21:59.173293 env[1421]: 2025-09-06 00:21:59.136 [INFO][4306] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="cd674a970846304c2d07a559b71311a27e26be0d693da4182f5694d157bea78d" HandleID="k8s-pod-network.cd674a970846304c2d07a559b71311a27e26be0d693da4182f5694d157bea78d" Workload="ci--3510.3.8--n--28804d0655-k8s-coredns--7c65d6cfc9--p4llr-eth0" Sep 6 00:21:59.173293 env[1421]: 2025-09-06 00:21:59.136 [INFO][4306] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Sep 6 00:21:59.173293 env[1421]: 2025-09-06 00:21:59.136 [INFO][4306] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Sep 6 00:21:59.173293 env[1421]: 2025-09-06 00:21:59.151 [WARNING][4306] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="cd674a970846304c2d07a559b71311a27e26be0d693da4182f5694d157bea78d" HandleID="k8s-pod-network.cd674a970846304c2d07a559b71311a27e26be0d693da4182f5694d157bea78d" Workload="ci--3510.3.8--n--28804d0655-k8s-coredns--7c65d6cfc9--p4llr-eth0" Sep 6 00:21:59.173293 env[1421]: 2025-09-06 00:21:59.151 [INFO][4306] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="cd674a970846304c2d07a559b71311a27e26be0d693da4182f5694d157bea78d" HandleID="k8s-pod-network.cd674a970846304c2d07a559b71311a27e26be0d693da4182f5694d157bea78d" Workload="ci--3510.3.8--n--28804d0655-k8s-coredns--7c65d6cfc9--p4llr-eth0" Sep 6 00:21:59.173293 env[1421]: 2025-09-06 00:21:59.156 [INFO][4306] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Sep 6 00:21:59.173293 env[1421]: 2025-09-06 00:21:59.165 [INFO][4254] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="cd674a970846304c2d07a559b71311a27e26be0d693da4182f5694d157bea78d" Sep 6 00:21:59.174380 env[1421]: time="2025-09-06T00:21:59.174295003Z" level=info msg="TearDown network for sandbox \"cd674a970846304c2d07a559b71311a27e26be0d693da4182f5694d157bea78d\" successfully" Sep 6 00:21:59.175094 env[1421]: time="2025-09-06T00:21:59.175063806Z" level=info msg="StopPodSandbox for \"cd674a970846304c2d07a559b71311a27e26be0d693da4182f5694d157bea78d\" returns successfully" Sep 6 00:21:59.190994 env[1421]: time="2025-09-06T00:21:59.190946172Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:coredns-7c65d6cfc9-p4llr,Uid:240f7b1e-32b7-4339-819b-51a4bef1fd7d,Namespace:kube-system,Attempt:1,}" Sep 6 00:21:59.195186 env[1421]: 2025-09-06 00:21:58.985 [INFO][4272] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="b5644ce4823a63550a6c868ef6f1dba43b75cd58696ab1201a167f45cf216c86" Sep 6 00:21:59.195186 env[1421]: 2025-09-06 00:21:58.985 [INFO][4272] cni-plugin/dataplane_linux.go 559: Deleting workload's device in netns. ContainerID="b5644ce4823a63550a6c868ef6f1dba43b75cd58696ab1201a167f45cf216c86" iface="eth0" netns="/var/run/netns/cni-7efc6f47-79ef-dd9c-b769-d92bed8961c6" Sep 6 00:21:59.195186 env[1421]: 2025-09-06 00:21:58.985 [INFO][4272] cni-plugin/dataplane_linux.go 570: Entered netns, deleting veth. ContainerID="b5644ce4823a63550a6c868ef6f1dba43b75cd58696ab1201a167f45cf216c86" iface="eth0" netns="/var/run/netns/cni-7efc6f47-79ef-dd9c-b769-d92bed8961c6" Sep 6 00:21:59.195186 env[1421]: 2025-09-06 00:21:58.985 [INFO][4272] cni-plugin/dataplane_linux.go 597: Workload's veth was already gone. Nothing to do. ContainerID="b5644ce4823a63550a6c868ef6f1dba43b75cd58696ab1201a167f45cf216c86" iface="eth0" netns="/var/run/netns/cni-7efc6f47-79ef-dd9c-b769-d92bed8961c6" Sep 6 00:21:59.195186 env[1421]: 2025-09-06 00:21:58.985 [INFO][4272] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="b5644ce4823a63550a6c868ef6f1dba43b75cd58696ab1201a167f45cf216c86" Sep 6 00:21:59.195186 env[1421]: 2025-09-06 00:21:58.985 [INFO][4272] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="b5644ce4823a63550a6c868ef6f1dba43b75cd58696ab1201a167f45cf216c86" Sep 6 00:21:59.195186 env[1421]: 2025-09-06 00:21:59.155 [INFO][4309] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="b5644ce4823a63550a6c868ef6f1dba43b75cd58696ab1201a167f45cf216c86" HandleID="k8s-pod-network.b5644ce4823a63550a6c868ef6f1dba43b75cd58696ab1201a167f45cf216c86" Workload="ci--3510.3.8--n--28804d0655-k8s-coredns--7c65d6cfc9--kwxlj-eth0" Sep 6 00:21:59.195186 env[1421]: 2025-09-06 00:21:59.161 [INFO][4309] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Sep 6 00:21:59.195186 env[1421]: 2025-09-06 00:21:59.161 [INFO][4309] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Sep 6 00:21:59.195186 env[1421]: 2025-09-06 00:21:59.170 [WARNING][4309] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="b5644ce4823a63550a6c868ef6f1dba43b75cd58696ab1201a167f45cf216c86" HandleID="k8s-pod-network.b5644ce4823a63550a6c868ef6f1dba43b75cd58696ab1201a167f45cf216c86" Workload="ci--3510.3.8--n--28804d0655-k8s-coredns--7c65d6cfc9--kwxlj-eth0" Sep 6 00:21:59.195186 env[1421]: 2025-09-06 00:21:59.170 [INFO][4309] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="b5644ce4823a63550a6c868ef6f1dba43b75cd58696ab1201a167f45cf216c86" HandleID="k8s-pod-network.b5644ce4823a63550a6c868ef6f1dba43b75cd58696ab1201a167f45cf216c86" Workload="ci--3510.3.8--n--28804d0655-k8s-coredns--7c65d6cfc9--kwxlj-eth0" Sep 6 00:21:59.195186 env[1421]: 2025-09-06 00:21:59.174 [INFO][4309] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Sep 6 00:21:59.195186 env[1421]: 2025-09-06 00:21:59.180 [INFO][4272] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="b5644ce4823a63550a6c868ef6f1dba43b75cd58696ab1201a167f45cf216c86" Sep 6 00:21:59.195905 env[1421]: time="2025-09-06T00:21:59.195384191Z" level=info msg="TearDown network for sandbox \"b5644ce4823a63550a6c868ef6f1dba43b75cd58696ab1201a167f45cf216c86\" successfully" Sep 6 00:21:59.195905 env[1421]: time="2025-09-06T00:21:59.195419491Z" level=info msg="StopPodSandbox for \"b5644ce4823a63550a6c868ef6f1dba43b75cd58696ab1201a167f45cf216c86\" returns successfully" Sep 6 00:21:59.199391 env[1421]: time="2025-09-06T00:21:59.199341707Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:coredns-7c65d6cfc9-kwxlj,Uid:bec1259e-53c8-4839-b58b-5ed97b75b668,Namespace:kube-system,Attempt:1,}" Sep 6 00:21:59.241080 env[1421]: 2025-09-06 00:21:58.996 [INFO][4271] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="1d336359284437532c303b9404ca2351e29c387f6bfba03d4c9c6526ea69b44e" Sep 6 00:21:59.241080 env[1421]: 2025-09-06 00:21:58.996 [INFO][4271] cni-plugin/dataplane_linux.go 559: Deleting workload's device in netns. ContainerID="1d336359284437532c303b9404ca2351e29c387f6bfba03d4c9c6526ea69b44e" iface="eth0" netns="/var/run/netns/cni-5c657c8c-42ed-0b30-cd94-fab0eeeed36c" Sep 6 00:21:59.241080 env[1421]: 2025-09-06 00:21:58.996 [INFO][4271] cni-plugin/dataplane_linux.go 570: Entered netns, deleting veth. ContainerID="1d336359284437532c303b9404ca2351e29c387f6bfba03d4c9c6526ea69b44e" iface="eth0" netns="/var/run/netns/cni-5c657c8c-42ed-0b30-cd94-fab0eeeed36c" Sep 6 00:21:59.241080 env[1421]: 2025-09-06 00:21:58.997 [INFO][4271] cni-plugin/dataplane_linux.go 597: Workload's veth was already gone. Nothing to do. ContainerID="1d336359284437532c303b9404ca2351e29c387f6bfba03d4c9c6526ea69b44e" iface="eth0" netns="/var/run/netns/cni-5c657c8c-42ed-0b30-cd94-fab0eeeed36c" Sep 6 00:21:59.241080 env[1421]: 2025-09-06 00:21:58.997 [INFO][4271] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="1d336359284437532c303b9404ca2351e29c387f6bfba03d4c9c6526ea69b44e" Sep 6 00:21:59.241080 env[1421]: 2025-09-06 00:21:58.997 [INFO][4271] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="1d336359284437532c303b9404ca2351e29c387f6bfba03d4c9c6526ea69b44e" Sep 6 00:21:59.241080 env[1421]: 2025-09-06 00:21:59.194 [INFO][4318] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="1d336359284437532c303b9404ca2351e29c387f6bfba03d4c9c6526ea69b44e" HandleID="k8s-pod-network.1d336359284437532c303b9404ca2351e29c387f6bfba03d4c9c6526ea69b44e" Workload="ci--3510.3.8--n--28804d0655-k8s-goldmane--7988f88666--kvgbx-eth0" Sep 6 00:21:59.241080 env[1421]: 2025-09-06 00:21:59.194 [INFO][4318] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Sep 6 00:21:59.241080 env[1421]: 2025-09-06 00:21:59.194 [INFO][4318] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Sep 6 00:21:59.241080 env[1421]: 2025-09-06 00:21:59.220 [WARNING][4318] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="1d336359284437532c303b9404ca2351e29c387f6bfba03d4c9c6526ea69b44e" HandleID="k8s-pod-network.1d336359284437532c303b9404ca2351e29c387f6bfba03d4c9c6526ea69b44e" Workload="ci--3510.3.8--n--28804d0655-k8s-goldmane--7988f88666--kvgbx-eth0" Sep 6 00:21:59.241080 env[1421]: 2025-09-06 00:21:59.220 [INFO][4318] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="1d336359284437532c303b9404ca2351e29c387f6bfba03d4c9c6526ea69b44e" HandleID="k8s-pod-network.1d336359284437532c303b9404ca2351e29c387f6bfba03d4c9c6526ea69b44e" Workload="ci--3510.3.8--n--28804d0655-k8s-goldmane--7988f88666--kvgbx-eth0" Sep 6 00:21:59.241080 env[1421]: 2025-09-06 00:21:59.224 [INFO][4318] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Sep 6 00:21:59.241080 env[1421]: 2025-09-06 00:21:59.238 [INFO][4271] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="1d336359284437532c303b9404ca2351e29c387f6bfba03d4c9c6526ea69b44e" Sep 6 00:21:59.246111 env[1421]: time="2025-09-06T00:21:59.246051703Z" level=info msg="TearDown network for sandbox \"1d336359284437532c303b9404ca2351e29c387f6bfba03d4c9c6526ea69b44e\" successfully" Sep 6 00:21:59.246111 env[1421]: time="2025-09-06T00:21:59.246105803Z" level=info msg="StopPodSandbox for \"1d336359284437532c303b9404ca2351e29c387f6bfba03d4c9c6526ea69b44e\" returns successfully" Sep 6 00:21:59.246981 env[1421]: time="2025-09-06T00:21:59.246917506Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:goldmane-7988f88666-kvgbx,Uid:e87f9195-4410-4758-8575-4e170e647a3d,Namespace:calico-system,Attempt:1,}" Sep 6 00:21:59.365869 systemd[1]: run-containerd-runc-k8s.io-242b8628b28a14020a4862b19eb09c9477d5c1269c192eab8d02f1670cf18060-runc.o2Y7nz.mount: Deactivated successfully. Sep 6 00:21:59.368609 systemd[1]: run-netns-cni\x2dc6608bd9\x2dbd18\x2dd35c\x2d223c\x2d40f791b8974e.mount: Deactivated successfully. Sep 6 00:21:59.368729 systemd[1]: run-netns-cni\x2d0e79efd8\x2dc33b\x2d30b0\x2daf25\x2d3d3001a6059a.mount: Deactivated successfully. Sep 6 00:21:59.368803 systemd[1]: run-netns-cni\x2d7efc6f47\x2d79ef\x2ddd9c\x2db769\x2dd92bed8961c6.mount: Deactivated successfully. Sep 6 00:21:59.368878 systemd[1]: run-netns-cni\x2d5c657c8c\x2d42ed\x2d0b30\x2dcd94\x2dfab0eeeed36c.mount: Deactivated successfully. Sep 6 00:21:59.594982 systemd-networkd[1577]: calibcd2f709e3a: Link UP Sep 6 00:21:59.613395 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): eth0: link becomes ready Sep 6 00:21:59.613534 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): calibcd2f709e3a: link becomes ready Sep 6 00:21:59.621666 systemd-networkd[1577]: calibcd2f709e3a: Gained carrier Sep 6 00:21:59.726063 env[1421]: 2025-09-06 00:21:59.319 [INFO][4332] cni-plugin/plugin.go 340: Calico CNI found existing endpoint: &{{WorkloadEndpoint projectcalico.org/v3} {ci--3510.3.8--n--28804d0655-k8s-calico--kube--controllers--7b6d9948b6--pwxnb-eth0 calico-kube-controllers-7b6d9948b6- calico-system 61e1e8a3-7e08-42e4-a4e0-f10c5e1b1879 978 0 2025-09-06 00:21:28 +0000 UTC map[app.kubernetes.io/name:calico-kube-controllers k8s-app:calico-kube-controllers pod-template-hash:7b6d9948b6 projectcalico.org/namespace:calico-system projectcalico.org/orchestrator:k8s projectcalico.org/serviceaccount:calico-kube-controllers] map[] [] [] []} {k8s ci-3510.3.8-n-28804d0655 calico-kube-controllers-7b6d9948b6-pwxnb eth0 calico-kube-controllers [] [] [kns.calico-system ksa.calico-system.calico-kube-controllers] calibcd2f709e3a [] [] }} ContainerID="f999929bb9810ce86cf66144cdb5da08e1f850a8e7c7ae0fe2ff1f267a7012a6" Namespace="calico-system" Pod="calico-kube-controllers-7b6d9948b6-pwxnb" WorkloadEndpoint="ci--3510.3.8--n--28804d0655-k8s-calico--kube--controllers--7b6d9948b6--pwxnb-" Sep 6 00:21:59.726063 env[1421]: 2025-09-06 00:21:59.319 [INFO][4332] cni-plugin/k8s.go 74: Extracted identifiers for CmdAddK8s ContainerID="f999929bb9810ce86cf66144cdb5da08e1f850a8e7c7ae0fe2ff1f267a7012a6" Namespace="calico-system" Pod="calico-kube-controllers-7b6d9948b6-pwxnb" WorkloadEndpoint="ci--3510.3.8--n--28804d0655-k8s-calico--kube--controllers--7b6d9948b6--pwxnb-eth0" Sep 6 00:21:59.726063 env[1421]: 2025-09-06 00:21:59.461 [INFO][4367] ipam/ipam_plugin.go 225: Calico CNI IPAM request count IPv4=1 IPv6=0 ContainerID="f999929bb9810ce86cf66144cdb5da08e1f850a8e7c7ae0fe2ff1f267a7012a6" HandleID="k8s-pod-network.f999929bb9810ce86cf66144cdb5da08e1f850a8e7c7ae0fe2ff1f267a7012a6" Workload="ci--3510.3.8--n--28804d0655-k8s-calico--kube--controllers--7b6d9948b6--pwxnb-eth0" Sep 6 00:21:59.726063 env[1421]: 2025-09-06 00:21:59.462 [INFO][4367] ipam/ipam_plugin.go 265: Auto assigning IP ContainerID="f999929bb9810ce86cf66144cdb5da08e1f850a8e7c7ae0fe2ff1f267a7012a6" HandleID="k8s-pod-network.f999929bb9810ce86cf66144cdb5da08e1f850a8e7c7ae0fe2ff1f267a7012a6" Workload="ci--3510.3.8--n--28804d0655-k8s-calico--kube--controllers--7b6d9948b6--pwxnb-eth0" assignArgs=ipam.AutoAssignArgs{Num4:1, Num6:0, HandleID:(*string)(0xc00025aff0), Attrs:map[string]string{"namespace":"calico-system", "node":"ci-3510.3.8-n-28804d0655", "pod":"calico-kube-controllers-7b6d9948b6-pwxnb", "timestamp":"2025-09-06 00:21:59.458596891 +0000 UTC"}, Hostname:"ci-3510.3.8-n-28804d0655", IPv4Pools:[]net.IPNet{}, IPv6Pools:[]net.IPNet{}, MaxBlocksPerHost:0, HostReservedAttrIPv4s:(*ipam.HostReservedAttr)(nil), HostReservedAttrIPv6s:(*ipam.HostReservedAttr)(nil), IntendedUse:"Workload"} Sep 6 00:21:59.726063 env[1421]: 2025-09-06 00:21:59.462 [INFO][4367] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Sep 6 00:21:59.726063 env[1421]: 2025-09-06 00:21:59.462 [INFO][4367] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Sep 6 00:21:59.726063 env[1421]: 2025-09-06 00:21:59.462 [INFO][4367] ipam/ipam.go 110: Auto-assign 1 ipv4, 0 ipv6 addrs for host 'ci-3510.3.8-n-28804d0655' Sep 6 00:21:59.726063 env[1421]: 2025-09-06 00:21:59.481 [INFO][4367] ipam/ipam.go 691: Looking up existing affinities for host handle="k8s-pod-network.f999929bb9810ce86cf66144cdb5da08e1f850a8e7c7ae0fe2ff1f267a7012a6" host="ci-3510.3.8-n-28804d0655" Sep 6 00:21:59.726063 env[1421]: 2025-09-06 00:21:59.500 [INFO][4367] ipam/ipam.go 394: Looking up existing affinities for host host="ci-3510.3.8-n-28804d0655" Sep 6 00:21:59.726063 env[1421]: 2025-09-06 00:21:59.528 [INFO][4367] ipam/ipam.go 511: Trying affinity for 192.168.107.64/26 host="ci-3510.3.8-n-28804d0655" Sep 6 00:21:59.726063 env[1421]: 2025-09-06 00:21:59.535 [INFO][4367] ipam/ipam.go 158: Attempting to load block cidr=192.168.107.64/26 host="ci-3510.3.8-n-28804d0655" Sep 6 00:21:59.726063 env[1421]: 2025-09-06 00:21:59.543 [INFO][4367] ipam/ipam.go 235: Affinity is confirmed and block has been loaded cidr=192.168.107.64/26 host="ci-3510.3.8-n-28804d0655" Sep 6 00:21:59.726063 env[1421]: 2025-09-06 00:21:59.543 [INFO][4367] ipam/ipam.go 1220: Attempting to assign 1 addresses from block block=192.168.107.64/26 handle="k8s-pod-network.f999929bb9810ce86cf66144cdb5da08e1f850a8e7c7ae0fe2ff1f267a7012a6" host="ci-3510.3.8-n-28804d0655" Sep 6 00:21:59.726063 env[1421]: 2025-09-06 00:21:59.548 [INFO][4367] ipam/ipam.go 1764: Creating new handle: k8s-pod-network.f999929bb9810ce86cf66144cdb5da08e1f850a8e7c7ae0fe2ff1f267a7012a6 Sep 6 00:21:59.726063 env[1421]: 2025-09-06 00:21:59.557 [INFO][4367] ipam/ipam.go 1243: Writing block in order to claim IPs block=192.168.107.64/26 handle="k8s-pod-network.f999929bb9810ce86cf66144cdb5da08e1f850a8e7c7ae0fe2ff1f267a7012a6" host="ci-3510.3.8-n-28804d0655" Sep 6 00:21:59.726063 env[1421]: 2025-09-06 00:21:59.582 [INFO][4367] ipam/ipam.go 1256: Successfully claimed IPs: [192.168.107.69/26] block=192.168.107.64/26 handle="k8s-pod-network.f999929bb9810ce86cf66144cdb5da08e1f850a8e7c7ae0fe2ff1f267a7012a6" host="ci-3510.3.8-n-28804d0655" Sep 6 00:21:59.726063 env[1421]: 2025-09-06 00:21:59.582 [INFO][4367] ipam/ipam.go 878: Auto-assigned 1 out of 1 IPv4s: [192.168.107.69/26] handle="k8s-pod-network.f999929bb9810ce86cf66144cdb5da08e1f850a8e7c7ae0fe2ff1f267a7012a6" host="ci-3510.3.8-n-28804d0655" Sep 6 00:21:59.726063 env[1421]: 2025-09-06 00:21:59.582 [INFO][4367] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Sep 6 00:21:59.726063 env[1421]: 2025-09-06 00:21:59.582 [INFO][4367] ipam/ipam_plugin.go 283: Calico CNI IPAM assigned addresses IPv4=[192.168.107.69/26] IPv6=[] ContainerID="f999929bb9810ce86cf66144cdb5da08e1f850a8e7c7ae0fe2ff1f267a7012a6" HandleID="k8s-pod-network.f999929bb9810ce86cf66144cdb5da08e1f850a8e7c7ae0fe2ff1f267a7012a6" Workload="ci--3510.3.8--n--28804d0655-k8s-calico--kube--controllers--7b6d9948b6--pwxnb-eth0" Sep 6 00:21:59.727478 env[1421]: 2025-09-06 00:21:59.584 [INFO][4332] cni-plugin/k8s.go 418: Populated endpoint ContainerID="f999929bb9810ce86cf66144cdb5da08e1f850a8e7c7ae0fe2ff1f267a7012a6" Namespace="calico-system" Pod="calico-kube-controllers-7b6d9948b6-pwxnb" WorkloadEndpoint="ci--3510.3.8--n--28804d0655-k8s-calico--kube--controllers--7b6d9948b6--pwxnb-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ci--3510.3.8--n--28804d0655-k8s-calico--kube--controllers--7b6d9948b6--pwxnb-eth0", GenerateName:"calico-kube-controllers-7b6d9948b6-", Namespace:"calico-system", SelfLink:"", UID:"61e1e8a3-7e08-42e4-a4e0-f10c5e1b1879", ResourceVersion:"978", Generation:0, CreationTimestamp:time.Date(2025, time.September, 6, 0, 21, 28, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"calico-kube-controllers", "k8s-app":"calico-kube-controllers", "pod-template-hash":"7b6d9948b6", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-kube-controllers"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ci-3510.3.8-n-28804d0655", ContainerID:"", Pod:"calico-kube-controllers-7b6d9948b6-pwxnb", Endpoint:"eth0", ServiceAccountName:"calico-kube-controllers", IPNetworks:[]string{"192.168.107.69/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.calico-kube-controllers"}, InterfaceName:"calibcd2f709e3a", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Sep 6 00:21:59.727478 env[1421]: 2025-09-06 00:21:59.585 [INFO][4332] cni-plugin/k8s.go 419: Calico CNI using IPs: [192.168.107.69/32] ContainerID="f999929bb9810ce86cf66144cdb5da08e1f850a8e7c7ae0fe2ff1f267a7012a6" Namespace="calico-system" Pod="calico-kube-controllers-7b6d9948b6-pwxnb" WorkloadEndpoint="ci--3510.3.8--n--28804d0655-k8s-calico--kube--controllers--7b6d9948b6--pwxnb-eth0" Sep 6 00:21:59.727478 env[1421]: 2025-09-06 00:21:59.585 [INFO][4332] cni-plugin/dataplane_linux.go 69: Setting the host side veth name to calibcd2f709e3a ContainerID="f999929bb9810ce86cf66144cdb5da08e1f850a8e7c7ae0fe2ff1f267a7012a6" Namespace="calico-system" Pod="calico-kube-controllers-7b6d9948b6-pwxnb" WorkloadEndpoint="ci--3510.3.8--n--28804d0655-k8s-calico--kube--controllers--7b6d9948b6--pwxnb-eth0" Sep 6 00:21:59.727478 env[1421]: 2025-09-06 00:21:59.623 [INFO][4332] cni-plugin/dataplane_linux.go 508: Disabling IPv4 forwarding ContainerID="f999929bb9810ce86cf66144cdb5da08e1f850a8e7c7ae0fe2ff1f267a7012a6" Namespace="calico-system" Pod="calico-kube-controllers-7b6d9948b6-pwxnb" WorkloadEndpoint="ci--3510.3.8--n--28804d0655-k8s-calico--kube--controllers--7b6d9948b6--pwxnb-eth0" Sep 6 00:21:59.727478 env[1421]: 2025-09-06 00:21:59.623 [INFO][4332] cni-plugin/k8s.go 446: Added Mac, interface name, and active container ID to endpoint ContainerID="f999929bb9810ce86cf66144cdb5da08e1f850a8e7c7ae0fe2ff1f267a7012a6" Namespace="calico-system" Pod="calico-kube-controllers-7b6d9948b6-pwxnb" WorkloadEndpoint="ci--3510.3.8--n--28804d0655-k8s-calico--kube--controllers--7b6d9948b6--pwxnb-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ci--3510.3.8--n--28804d0655-k8s-calico--kube--controllers--7b6d9948b6--pwxnb-eth0", GenerateName:"calico-kube-controllers-7b6d9948b6-", Namespace:"calico-system", SelfLink:"", UID:"61e1e8a3-7e08-42e4-a4e0-f10c5e1b1879", ResourceVersion:"978", Generation:0, CreationTimestamp:time.Date(2025, time.September, 6, 0, 21, 28, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"calico-kube-controllers", "k8s-app":"calico-kube-controllers", "pod-template-hash":"7b6d9948b6", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-kube-controllers"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ci-3510.3.8-n-28804d0655", ContainerID:"f999929bb9810ce86cf66144cdb5da08e1f850a8e7c7ae0fe2ff1f267a7012a6", Pod:"calico-kube-controllers-7b6d9948b6-pwxnb", Endpoint:"eth0", ServiceAccountName:"calico-kube-controllers", IPNetworks:[]string{"192.168.107.69/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.calico-kube-controllers"}, InterfaceName:"calibcd2f709e3a", MAC:"c2:0d:5e:90:18:73", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Sep 6 00:21:59.727478 env[1421]: 2025-09-06 00:21:59.709 [INFO][4332] cni-plugin/k8s.go 532: Wrote updated endpoint to datastore ContainerID="f999929bb9810ce86cf66144cdb5da08e1f850a8e7c7ae0fe2ff1f267a7012a6" Namespace="calico-system" Pod="calico-kube-controllers-7b6d9948b6-pwxnb" WorkloadEndpoint="ci--3510.3.8--n--28804d0655-k8s-calico--kube--controllers--7b6d9948b6--pwxnb-eth0" Sep 6 00:21:59.801505 env[1421]: time="2025-09-06T00:21:59.801241524Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Sep 6 00:21:59.801505 env[1421]: time="2025-09-06T00:21:59.801301924Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Sep 6 00:21:59.801505 env[1421]: time="2025-09-06T00:21:59.801317125Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Sep 6 00:21:59.801941 env[1421]: time="2025-09-06T00:21:59.801869027Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/f999929bb9810ce86cf66144cdb5da08e1f850a8e7c7ae0fe2ff1f267a7012a6 pid=4420 runtime=io.containerd.runc.v2 Sep 6 00:21:59.827430 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount3589305059.mount: Deactivated successfully. Sep 6 00:21:59.865683 systemd[1]: Started cri-containerd-f999929bb9810ce86cf66144cdb5da08e1f850a8e7c7ae0fe2ff1f267a7012a6.scope. Sep 6 00:21:59.882219 systemd-networkd[1577]: cali5149339e35c: Gained IPv6LL Sep 6 00:21:59.915099 env[1421]: time="2025-09-06T00:21:59.915047900Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/whisker-backend:v3.30.3,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 6 00:21:59.921000 audit[4441]: NETFILTER_CFG table=filter:115 family=2 entries=54 op=nft_register_chain pid=4441 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Sep 6 00:21:59.921000 audit[4441]: SYSCALL arch=c000003e syscall=46 success=yes exit=25992 a0=3 a1=7ffe97749da0 a2=0 a3=7ffe97749d8c items=0 ppid=3701 pid=4441 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:21:59.921000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Sep 6 00:21:59.925447 env[1421]: time="2025-09-06T00:21:59.925402043Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:7e29b0984d517678aab6ca138482c318989f6f28daf9d3b5dd6e4a5a3115ac16,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 6 00:21:59.932877 env[1421]: time="2025-09-06T00:21:59.932833774Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/whisker-backend:v3.30.3,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 6 00:21:59.939853 env[1421]: time="2025-09-06T00:21:59.939805104Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/whisker-backend@sha256:29becebc47401da9997a2a30f4c25c511a5f379d17275680b048224829af71a5,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 6 00:21:59.940997 env[1421]: time="2025-09-06T00:21:59.940958808Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/whisker-backend:v3.30.3\" returns image reference \"sha256:7e29b0984d517678aab6ca138482c318989f6f28daf9d3b5dd6e4a5a3115ac16\"" Sep 6 00:21:59.944084 env[1421]: time="2025-09-06T00:21:59.944054421Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/apiserver:v3.30.3\"" Sep 6 00:21:59.945682 env[1421]: time="2025-09-06T00:21:59.945650128Z" level=info msg="CreateContainer within sandbox \"6c6fb1bd5cf279c48e23720e823619b877fcb8207314d2d3c0c1237a649487a5\" for container &ContainerMetadata{Name:whisker-backend,Attempt:0,}" Sep 6 00:21:59.982000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:59.982000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:59.982000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:59.982000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:59.982000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:59.982000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:59.982000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:59.982000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:59.982000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:59.982000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:59.982000 audit: BPF prog-id=182 op=LOAD Sep 6 00:21:59.983638 systemd-networkd[1577]: caliaa6c45ad637: Link UP Sep 6 00:21:59.984000 audit[4430]: AVC avc: denied { bpf } for pid=4430 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:59.984000 audit[4430]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000197c48 a2=10 a3=1c items=0 ppid=4420 pid=4430 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:21:59.984000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6639393939323962623938313063653836636636363134346364623564 Sep 6 00:21:59.987000 audit[4430]: AVC avc: denied { perfmon } for pid=4430 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:59.987000 audit[4430]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=0 a1=c0001976b0 a2=3c a3=c items=0 ppid=4420 pid=4430 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:21:59.987000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6639393939323962623938313063653836636636363134346364623564 Sep 6 00:21:59.987000 audit[4430]: AVC avc: denied { bpf } for pid=4430 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:59.987000 audit[4430]: AVC avc: denied { bpf } for pid=4430 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:59.987000 audit[4430]: AVC avc: denied { bpf } for pid=4430 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:59.987000 audit[4430]: AVC avc: denied { perfmon } for pid=4430 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:59.987000 audit[4430]: AVC avc: denied { perfmon } for pid=4430 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:59.987000 audit[4430]: AVC avc: denied { perfmon } for pid=4430 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:59.987000 audit[4430]: AVC avc: denied { perfmon } for pid=4430 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:59.987000 audit[4430]: AVC avc: denied { perfmon } for pid=4430 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:59.987000 audit[4430]: AVC avc: denied { bpf } for pid=4430 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:59.987000 audit[4430]: AVC avc: denied { bpf } for pid=4430 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:59.987000 audit: BPF prog-id=183 op=LOAD Sep 6 00:21:59.987000 audit[4430]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c0001979d8 a2=78 a3=c000189f10 items=0 ppid=4420 pid=4430 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:21:59.987000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6639393939323962623938313063653836636636363134346364623564 Sep 6 00:21:59.989000 audit[4430]: AVC avc: denied { bpf } for pid=4430 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:59.989000 audit[4430]: AVC avc: denied { bpf } for pid=4430 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:59.989000 audit[4430]: AVC avc: denied { perfmon } for pid=4430 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:59.989000 audit[4430]: AVC avc: denied { perfmon } for pid=4430 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:59.989000 audit[4430]: AVC avc: denied { perfmon } for pid=4430 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:59.989000 audit[4430]: AVC avc: denied { perfmon } for pid=4430 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:59.989000 audit[4430]: AVC avc: denied { perfmon } for pid=4430 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:59.989000 audit[4430]: AVC avc: denied { bpf } for pid=4430 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:59.989000 audit[4430]: AVC avc: denied { bpf } for pid=4430 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:59.989000 audit: BPF prog-id=184 op=LOAD Sep 6 00:21:59.989000 audit[4430]: SYSCALL arch=c000003e syscall=321 success=yes exit=17 a0=5 a1=c000197770 a2=78 a3=c000189f58 items=0 ppid=4420 pid=4430 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:21:59.989000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6639393939323962623938313063653836636636363134346364623564 Sep 6 00:21:59.990000 audit: BPF prog-id=184 op=UNLOAD Sep 6 00:21:59.990000 audit: BPF prog-id=183 op=UNLOAD Sep 6 00:21:59.990000 audit[4430]: AVC avc: denied { bpf } for pid=4430 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:59.990000 audit[4430]: AVC avc: denied { bpf } for pid=4430 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:59.990000 audit[4430]: AVC avc: denied { bpf } for pid=4430 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:59.990000 audit[4430]: AVC avc: denied { perfmon } for pid=4430 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:59.990000 audit[4430]: AVC avc: denied { perfmon } for pid=4430 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:59.990000 audit[4430]: AVC avc: denied { perfmon } for pid=4430 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:59.990000 audit[4430]: AVC avc: denied { perfmon } for pid=4430 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:59.990000 audit[4430]: AVC avc: denied { perfmon } for pid=4430 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:59.990000 audit[4430]: AVC avc: denied { bpf } for pid=4430 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:59.990000 audit[4430]: AVC avc: denied { bpf } for pid=4430 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:59.990000 audit: BPF prog-id=185 op=LOAD Sep 6 00:21:59.990000 audit[4430]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c000197c30 a2=78 a3=c0002b6368 items=0 ppid=4420 pid=4430 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:21:59.990000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6639393939323962623938313063653836636636363134346364623564 Sep 6 00:22:00.014998 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): caliaa6c45ad637: link becomes ready Sep 6 00:22:00.015578 systemd-networkd[1577]: caliaa6c45ad637: Gained carrier Sep 6 00:22:00.016987 env[1421]: time="2025-09-06T00:22:00.016940725Z" level=info msg="CreateContainer within sandbox \"6c6fb1bd5cf279c48e23720e823619b877fcb8207314d2d3c0c1237a649487a5\" for &ContainerMetadata{Name:whisker-backend,Attempt:0,} returns container id \"219664f776bf51cb228482a1c427a6c77363dc2490448c117a34bbc0f913af48\"" Sep 6 00:22:00.018203 env[1421]: time="2025-09-06T00:22:00.018170630Z" level=info msg="StartContainer for \"219664f776bf51cb228482a1c427a6c77363dc2490448c117a34bbc0f913af48\"" Sep 6 00:22:00.060777 systemd[1]: Started cri-containerd-219664f776bf51cb228482a1c427a6c77363dc2490448c117a34bbc0f913af48.scope. Sep 6 00:22:00.074123 systemd-networkd[1577]: calidca511bec55: Gained IPv6LL Sep 6 00:22:00.081752 env[1421]: 2025-09-06 00:21:59.401 [INFO][4343] cni-plugin/plugin.go 340: Calico CNI found existing endpoint: &{{WorkloadEndpoint projectcalico.org/v3} {ci--3510.3.8--n--28804d0655-k8s-coredns--7c65d6cfc9--p4llr-eth0 coredns-7c65d6cfc9- kube-system 240f7b1e-32b7-4339-819b-51a4bef1fd7d 980 0 2025-09-06 00:21:13 +0000 UTC map[k8s-app:kube-dns pod-template-hash:7c65d6cfc9 projectcalico.org/namespace:kube-system projectcalico.org/orchestrator:k8s projectcalico.org/serviceaccount:coredns] map[] [] [] []} {k8s ci-3510.3.8-n-28804d0655 coredns-7c65d6cfc9-p4llr eth0 coredns [] [] [kns.kube-system ksa.kube-system.coredns] caliaa6c45ad637 [{dns UDP 53 0 } {dns-tcp TCP 53 0 } {metrics TCP 9153 0 }] [] }} ContainerID="880270580523e2350381b2612475a6827a647cd9c4bd8c96213fde42827730d1" Namespace="kube-system" Pod="coredns-7c65d6cfc9-p4llr" WorkloadEndpoint="ci--3510.3.8--n--28804d0655-k8s-coredns--7c65d6cfc9--p4llr-" Sep 6 00:22:00.081752 env[1421]: 2025-09-06 00:21:59.401 [INFO][4343] cni-plugin/k8s.go 74: Extracted identifiers for CmdAddK8s ContainerID="880270580523e2350381b2612475a6827a647cd9c4bd8c96213fde42827730d1" Namespace="kube-system" Pod="coredns-7c65d6cfc9-p4llr" WorkloadEndpoint="ci--3510.3.8--n--28804d0655-k8s-coredns--7c65d6cfc9--p4llr-eth0" Sep 6 00:22:00.081752 env[1421]: 2025-09-06 00:21:59.619 [INFO][4387] ipam/ipam_plugin.go 225: Calico CNI IPAM request count IPv4=1 IPv6=0 ContainerID="880270580523e2350381b2612475a6827a647cd9c4bd8c96213fde42827730d1" HandleID="k8s-pod-network.880270580523e2350381b2612475a6827a647cd9c4bd8c96213fde42827730d1" Workload="ci--3510.3.8--n--28804d0655-k8s-coredns--7c65d6cfc9--p4llr-eth0" Sep 6 00:22:00.081752 env[1421]: 2025-09-06 00:21:59.619 [INFO][4387] ipam/ipam_plugin.go 265: Auto assigning IP ContainerID="880270580523e2350381b2612475a6827a647cd9c4bd8c96213fde42827730d1" HandleID="k8s-pod-network.880270580523e2350381b2612475a6827a647cd9c4bd8c96213fde42827730d1" Workload="ci--3510.3.8--n--28804d0655-k8s-coredns--7c65d6cfc9--p4llr-eth0" assignArgs=ipam.AutoAssignArgs{Num4:1, Num6:0, HandleID:(*string)(0xc00004fae0), Attrs:map[string]string{"namespace":"kube-system", "node":"ci-3510.3.8-n-28804d0655", "pod":"coredns-7c65d6cfc9-p4llr", "timestamp":"2025-09-06 00:21:59.617392355 +0000 UTC"}, Hostname:"ci-3510.3.8-n-28804d0655", IPv4Pools:[]net.IPNet{}, IPv6Pools:[]net.IPNet{}, MaxBlocksPerHost:0, HostReservedAttrIPv4s:(*ipam.HostReservedAttr)(nil), HostReservedAttrIPv6s:(*ipam.HostReservedAttr)(nil), IntendedUse:"Workload"} Sep 6 00:22:00.081752 env[1421]: 2025-09-06 00:21:59.619 [INFO][4387] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Sep 6 00:22:00.081752 env[1421]: 2025-09-06 00:21:59.619 [INFO][4387] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Sep 6 00:22:00.081752 env[1421]: 2025-09-06 00:21:59.621 [INFO][4387] ipam/ipam.go 110: Auto-assign 1 ipv4, 0 ipv6 addrs for host 'ci-3510.3.8-n-28804d0655' Sep 6 00:22:00.081752 env[1421]: 2025-09-06 00:21:59.739 [INFO][4387] ipam/ipam.go 691: Looking up existing affinities for host handle="k8s-pod-network.880270580523e2350381b2612475a6827a647cd9c4bd8c96213fde42827730d1" host="ci-3510.3.8-n-28804d0655" Sep 6 00:22:00.081752 env[1421]: 2025-09-06 00:21:59.786 [INFO][4387] ipam/ipam.go 394: Looking up existing affinities for host host="ci-3510.3.8-n-28804d0655" Sep 6 00:22:00.081752 env[1421]: 2025-09-06 00:21:59.837 [INFO][4387] ipam/ipam.go 511: Trying affinity for 192.168.107.64/26 host="ci-3510.3.8-n-28804d0655" Sep 6 00:22:00.081752 env[1421]: 2025-09-06 00:21:59.851 [INFO][4387] ipam/ipam.go 158: Attempting to load block cidr=192.168.107.64/26 host="ci-3510.3.8-n-28804d0655" Sep 6 00:22:00.081752 env[1421]: 2025-09-06 00:21:59.879 [INFO][4387] ipam/ipam.go 235: Affinity is confirmed and block has been loaded cidr=192.168.107.64/26 host="ci-3510.3.8-n-28804d0655" Sep 6 00:22:00.081752 env[1421]: 2025-09-06 00:21:59.879 [INFO][4387] ipam/ipam.go 1220: Attempting to assign 1 addresses from block block=192.168.107.64/26 handle="k8s-pod-network.880270580523e2350381b2612475a6827a647cd9c4bd8c96213fde42827730d1" host="ci-3510.3.8-n-28804d0655" Sep 6 00:22:00.081752 env[1421]: 2025-09-06 00:21:59.903 [INFO][4387] ipam/ipam.go 1764: Creating new handle: k8s-pod-network.880270580523e2350381b2612475a6827a647cd9c4bd8c96213fde42827730d1 Sep 6 00:22:00.081752 env[1421]: 2025-09-06 00:21:59.911 [INFO][4387] ipam/ipam.go 1243: Writing block in order to claim IPs block=192.168.107.64/26 handle="k8s-pod-network.880270580523e2350381b2612475a6827a647cd9c4bd8c96213fde42827730d1" host="ci-3510.3.8-n-28804d0655" Sep 6 00:22:00.081752 env[1421]: 2025-09-06 00:21:59.956 [INFO][4387] ipam/ipam.go 1256: Successfully claimed IPs: [192.168.107.70/26] block=192.168.107.64/26 handle="k8s-pod-network.880270580523e2350381b2612475a6827a647cd9c4bd8c96213fde42827730d1" host="ci-3510.3.8-n-28804d0655" Sep 6 00:22:00.081752 env[1421]: 2025-09-06 00:21:59.956 [INFO][4387] ipam/ipam.go 878: Auto-assigned 1 out of 1 IPv4s: [192.168.107.70/26] handle="k8s-pod-network.880270580523e2350381b2612475a6827a647cd9c4bd8c96213fde42827730d1" host="ci-3510.3.8-n-28804d0655" Sep 6 00:22:00.081752 env[1421]: 2025-09-06 00:21:59.956 [INFO][4387] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Sep 6 00:22:00.081752 env[1421]: 2025-09-06 00:21:59.956 [INFO][4387] ipam/ipam_plugin.go 283: Calico CNI IPAM assigned addresses IPv4=[192.168.107.70/26] IPv6=[] ContainerID="880270580523e2350381b2612475a6827a647cd9c4bd8c96213fde42827730d1" HandleID="k8s-pod-network.880270580523e2350381b2612475a6827a647cd9c4bd8c96213fde42827730d1" Workload="ci--3510.3.8--n--28804d0655-k8s-coredns--7c65d6cfc9--p4llr-eth0" Sep 6 00:22:00.082851 env[1421]: 2025-09-06 00:21:59.962 [INFO][4343] cni-plugin/k8s.go 418: Populated endpoint ContainerID="880270580523e2350381b2612475a6827a647cd9c4bd8c96213fde42827730d1" Namespace="kube-system" Pod="coredns-7c65d6cfc9-p4llr" WorkloadEndpoint="ci--3510.3.8--n--28804d0655-k8s-coredns--7c65d6cfc9--p4llr-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ci--3510.3.8--n--28804d0655-k8s-coredns--7c65d6cfc9--p4llr-eth0", GenerateName:"coredns-7c65d6cfc9-", Namespace:"kube-system", SelfLink:"", UID:"240f7b1e-32b7-4339-819b-51a4bef1fd7d", ResourceVersion:"980", Generation:0, CreationTimestamp:time.Date(2025, time.September, 6, 0, 21, 13, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"k8s-app":"kube-dns", "pod-template-hash":"7c65d6cfc9", "projectcalico.org/namespace":"kube-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"coredns"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ci-3510.3.8-n-28804d0655", ContainerID:"", Pod:"coredns-7c65d6cfc9-p4llr", Endpoint:"eth0", ServiceAccountName:"coredns", IPNetworks:[]string{"192.168.107.70/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.kube-system", "ksa.kube-system.coredns"}, InterfaceName:"caliaa6c45ad637", MAC:"", Ports:[]v3.WorkloadEndpointPort{v3.WorkloadEndpointPort{Name:"dns", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"UDP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"dns-tcp", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"metrics", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x23c1, HostPort:0x0, HostIP:""}}, AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Sep 6 00:22:00.082851 env[1421]: 2025-09-06 00:21:59.962 [INFO][4343] cni-plugin/k8s.go 419: Calico CNI using IPs: [192.168.107.70/32] ContainerID="880270580523e2350381b2612475a6827a647cd9c4bd8c96213fde42827730d1" Namespace="kube-system" Pod="coredns-7c65d6cfc9-p4llr" WorkloadEndpoint="ci--3510.3.8--n--28804d0655-k8s-coredns--7c65d6cfc9--p4llr-eth0" Sep 6 00:22:00.082851 env[1421]: 2025-09-06 00:21:59.962 [INFO][4343] cni-plugin/dataplane_linux.go 69: Setting the host side veth name to caliaa6c45ad637 ContainerID="880270580523e2350381b2612475a6827a647cd9c4bd8c96213fde42827730d1" Namespace="kube-system" Pod="coredns-7c65d6cfc9-p4llr" WorkloadEndpoint="ci--3510.3.8--n--28804d0655-k8s-coredns--7c65d6cfc9--p4llr-eth0" Sep 6 00:22:00.082851 env[1421]: 2025-09-06 00:22:00.016 [INFO][4343] cni-plugin/dataplane_linux.go 508: Disabling IPv4 forwarding ContainerID="880270580523e2350381b2612475a6827a647cd9c4bd8c96213fde42827730d1" Namespace="kube-system" Pod="coredns-7c65d6cfc9-p4llr" WorkloadEndpoint="ci--3510.3.8--n--28804d0655-k8s-coredns--7c65d6cfc9--p4llr-eth0" Sep 6 00:22:00.082851 env[1421]: 2025-09-06 00:22:00.016 [INFO][4343] cni-plugin/k8s.go 446: Added Mac, interface name, and active container ID to endpoint ContainerID="880270580523e2350381b2612475a6827a647cd9c4bd8c96213fde42827730d1" Namespace="kube-system" Pod="coredns-7c65d6cfc9-p4llr" WorkloadEndpoint="ci--3510.3.8--n--28804d0655-k8s-coredns--7c65d6cfc9--p4llr-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ci--3510.3.8--n--28804d0655-k8s-coredns--7c65d6cfc9--p4llr-eth0", GenerateName:"coredns-7c65d6cfc9-", Namespace:"kube-system", SelfLink:"", UID:"240f7b1e-32b7-4339-819b-51a4bef1fd7d", ResourceVersion:"980", Generation:0, CreationTimestamp:time.Date(2025, time.September, 6, 0, 21, 13, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"k8s-app":"kube-dns", "pod-template-hash":"7c65d6cfc9", "projectcalico.org/namespace":"kube-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"coredns"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ci-3510.3.8-n-28804d0655", ContainerID:"880270580523e2350381b2612475a6827a647cd9c4bd8c96213fde42827730d1", Pod:"coredns-7c65d6cfc9-p4llr", Endpoint:"eth0", ServiceAccountName:"coredns", IPNetworks:[]string{"192.168.107.70/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.kube-system", "ksa.kube-system.coredns"}, InterfaceName:"caliaa6c45ad637", MAC:"da:cf:56:70:e5:76", Ports:[]v3.WorkloadEndpointPort{v3.WorkloadEndpointPort{Name:"dns", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"UDP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"dns-tcp", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"metrics", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x23c1, HostPort:0x0, HostIP:""}}, AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Sep 6 00:22:00.082851 env[1421]: 2025-09-06 00:22:00.080 [INFO][4343] cni-plugin/k8s.go 532: Wrote updated endpoint to datastore ContainerID="880270580523e2350381b2612475a6827a647cd9c4bd8c96213fde42827730d1" Namespace="kube-system" Pod="coredns-7c65d6cfc9-p4llr" WorkloadEndpoint="ci--3510.3.8--n--28804d0655-k8s-coredns--7c65d6cfc9--p4llr-eth0" Sep 6 00:22:00.111704 env[1421]: time="2025-09-06T00:22:00.111615115Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Sep 6 00:22:00.112403 env[1421]: time="2025-09-06T00:22:00.112352118Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Sep 6 00:22:00.112606 env[1421]: time="2025-09-06T00:22:00.112581919Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Sep 6 00:22:00.113523 env[1421]: time="2025-09-06T00:22:00.113469922Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/880270580523e2350381b2612475a6827a647cd9c4bd8c96213fde42827730d1 pid=4482 runtime=io.containerd.runc.v2 Sep 6 00:22:00.157662 systemd-networkd[1577]: cali0a317fb91e5: Link UP Sep 6 00:22:00.166160 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): cali0a317fb91e5: link becomes ready Sep 6 00:22:00.172447 systemd-networkd[1577]: cali0a317fb91e5: Gained carrier Sep 6 00:22:00.186395 systemd[1]: Started cri-containerd-880270580523e2350381b2612475a6827a647cd9c4bd8c96213fde42827730d1.scope. Sep 6 00:22:00.201806 env[1421]: time="2025-09-06T00:22:00.201749685Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-kube-controllers-7b6d9948b6-pwxnb,Uid:61e1e8a3-7e08-42e4-a4e0-f10c5e1b1879,Namespace:calico-system,Attempt:1,} returns sandbox id \"f999929bb9810ce86cf66144cdb5da08e1f850a8e7c7ae0fe2ff1f267a7012a6\"" Sep 6 00:22:00.210090 env[1421]: 2025-09-06 00:21:59.537 [INFO][4356] cni-plugin/plugin.go 340: Calico CNI found existing endpoint: &{{WorkloadEndpoint projectcalico.org/v3} {ci--3510.3.8--n--28804d0655-k8s-coredns--7c65d6cfc9--kwxlj-eth0 coredns-7c65d6cfc9- kube-system bec1259e-53c8-4839-b58b-5ed97b75b668 981 0 2025-09-06 00:21:13 +0000 UTC map[k8s-app:kube-dns pod-template-hash:7c65d6cfc9 projectcalico.org/namespace:kube-system projectcalico.org/orchestrator:k8s projectcalico.org/serviceaccount:coredns] map[] [] [] []} {k8s ci-3510.3.8-n-28804d0655 coredns-7c65d6cfc9-kwxlj eth0 coredns [] [] [kns.kube-system ksa.kube-system.coredns] cali0a317fb91e5 [{dns UDP 53 0 } {dns-tcp TCP 53 0 } {metrics TCP 9153 0 }] [] }} ContainerID="4ed9a152fdd557580f0987a0c1903011ac946a179594ca611c4b8104d1f85930" Namespace="kube-system" Pod="coredns-7c65d6cfc9-kwxlj" WorkloadEndpoint="ci--3510.3.8--n--28804d0655-k8s-coredns--7c65d6cfc9--kwxlj-" Sep 6 00:22:00.210090 env[1421]: 2025-09-06 00:21:59.537 [INFO][4356] cni-plugin/k8s.go 74: Extracted identifiers for CmdAddK8s ContainerID="4ed9a152fdd557580f0987a0c1903011ac946a179594ca611c4b8104d1f85930" Namespace="kube-system" Pod="coredns-7c65d6cfc9-kwxlj" WorkloadEndpoint="ci--3510.3.8--n--28804d0655-k8s-coredns--7c65d6cfc9--kwxlj-eth0" Sep 6 00:22:00.210090 env[1421]: 2025-09-06 00:21:59.718 [INFO][4396] ipam/ipam_plugin.go 225: Calico CNI IPAM request count IPv4=1 IPv6=0 ContainerID="4ed9a152fdd557580f0987a0c1903011ac946a179594ca611c4b8104d1f85930" HandleID="k8s-pod-network.4ed9a152fdd557580f0987a0c1903011ac946a179594ca611c4b8104d1f85930" Workload="ci--3510.3.8--n--28804d0655-k8s-coredns--7c65d6cfc9--kwxlj-eth0" Sep 6 00:22:00.210090 env[1421]: 2025-09-06 00:21:59.720 [INFO][4396] ipam/ipam_plugin.go 265: Auto assigning IP ContainerID="4ed9a152fdd557580f0987a0c1903011ac946a179594ca611c4b8104d1f85930" HandleID="k8s-pod-network.4ed9a152fdd557580f0987a0c1903011ac946a179594ca611c4b8104d1f85930" Workload="ci--3510.3.8--n--28804d0655-k8s-coredns--7c65d6cfc9--kwxlj-eth0" assignArgs=ipam.AutoAssignArgs{Num4:1, Num6:0, HandleID:(*string)(0xc00004eed0), Attrs:map[string]string{"namespace":"kube-system", "node":"ci-3510.3.8-n-28804d0655", "pod":"coredns-7c65d6cfc9-kwxlj", "timestamp":"2025-09-06 00:21:59.718556578 +0000 UTC"}, Hostname:"ci-3510.3.8-n-28804d0655", IPv4Pools:[]net.IPNet{}, IPv6Pools:[]net.IPNet{}, MaxBlocksPerHost:0, HostReservedAttrIPv4s:(*ipam.HostReservedAttr)(nil), HostReservedAttrIPv6s:(*ipam.HostReservedAttr)(nil), IntendedUse:"Workload"} Sep 6 00:22:00.210090 env[1421]: 2025-09-06 00:21:59.720 [INFO][4396] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Sep 6 00:22:00.210090 env[1421]: 2025-09-06 00:21:59.956 [INFO][4396] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Sep 6 00:22:00.210090 env[1421]: 2025-09-06 00:21:59.956 [INFO][4396] ipam/ipam.go 110: Auto-assign 1 ipv4, 0 ipv6 addrs for host 'ci-3510.3.8-n-28804d0655' Sep 6 00:22:00.210090 env[1421]: 2025-09-06 00:21:59.993 [INFO][4396] ipam/ipam.go 691: Looking up existing affinities for host handle="k8s-pod-network.4ed9a152fdd557580f0987a0c1903011ac946a179594ca611c4b8104d1f85930" host="ci-3510.3.8-n-28804d0655" Sep 6 00:22:00.210090 env[1421]: 2025-09-06 00:22:00.072 [INFO][4396] ipam/ipam.go 394: Looking up existing affinities for host host="ci-3510.3.8-n-28804d0655" Sep 6 00:22:00.210090 env[1421]: 2025-09-06 00:22:00.090 [INFO][4396] ipam/ipam.go 511: Trying affinity for 192.168.107.64/26 host="ci-3510.3.8-n-28804d0655" Sep 6 00:22:00.210090 env[1421]: 2025-09-06 00:22:00.094 [INFO][4396] ipam/ipam.go 158: Attempting to load block cidr=192.168.107.64/26 host="ci-3510.3.8-n-28804d0655" Sep 6 00:22:00.210090 env[1421]: 2025-09-06 00:22:00.104 [INFO][4396] ipam/ipam.go 235: Affinity is confirmed and block has been loaded cidr=192.168.107.64/26 host="ci-3510.3.8-n-28804d0655" Sep 6 00:22:00.210090 env[1421]: 2025-09-06 00:22:00.104 [INFO][4396] ipam/ipam.go 1220: Attempting to assign 1 addresses from block block=192.168.107.64/26 handle="k8s-pod-network.4ed9a152fdd557580f0987a0c1903011ac946a179594ca611c4b8104d1f85930" host="ci-3510.3.8-n-28804d0655" Sep 6 00:22:00.210090 env[1421]: 2025-09-06 00:22:00.107 [INFO][4396] ipam/ipam.go 1764: Creating new handle: k8s-pod-network.4ed9a152fdd557580f0987a0c1903011ac946a179594ca611c4b8104d1f85930 Sep 6 00:22:00.210090 env[1421]: 2025-09-06 00:22:00.121 [INFO][4396] ipam/ipam.go 1243: Writing block in order to claim IPs block=192.168.107.64/26 handle="k8s-pod-network.4ed9a152fdd557580f0987a0c1903011ac946a179594ca611c4b8104d1f85930" host="ci-3510.3.8-n-28804d0655" Sep 6 00:22:00.210090 env[1421]: 2025-09-06 00:22:00.139 [INFO][4396] ipam/ipam.go 1256: Successfully claimed IPs: [192.168.107.71/26] block=192.168.107.64/26 handle="k8s-pod-network.4ed9a152fdd557580f0987a0c1903011ac946a179594ca611c4b8104d1f85930" host="ci-3510.3.8-n-28804d0655" Sep 6 00:22:00.210090 env[1421]: 2025-09-06 00:22:00.139 [INFO][4396] ipam/ipam.go 878: Auto-assigned 1 out of 1 IPv4s: [192.168.107.71/26] handle="k8s-pod-network.4ed9a152fdd557580f0987a0c1903011ac946a179594ca611c4b8104d1f85930" host="ci-3510.3.8-n-28804d0655" Sep 6 00:22:00.210090 env[1421]: 2025-09-06 00:22:00.139 [INFO][4396] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Sep 6 00:22:00.210090 env[1421]: 2025-09-06 00:22:00.140 [INFO][4396] ipam/ipam_plugin.go 283: Calico CNI IPAM assigned addresses IPv4=[192.168.107.71/26] IPv6=[] ContainerID="4ed9a152fdd557580f0987a0c1903011ac946a179594ca611c4b8104d1f85930" HandleID="k8s-pod-network.4ed9a152fdd557580f0987a0c1903011ac946a179594ca611c4b8104d1f85930" Workload="ci--3510.3.8--n--28804d0655-k8s-coredns--7c65d6cfc9--kwxlj-eth0" Sep 6 00:22:00.211139 env[1421]: 2025-09-06 00:22:00.142 [INFO][4356] cni-plugin/k8s.go 418: Populated endpoint ContainerID="4ed9a152fdd557580f0987a0c1903011ac946a179594ca611c4b8104d1f85930" Namespace="kube-system" Pod="coredns-7c65d6cfc9-kwxlj" WorkloadEndpoint="ci--3510.3.8--n--28804d0655-k8s-coredns--7c65d6cfc9--kwxlj-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ci--3510.3.8--n--28804d0655-k8s-coredns--7c65d6cfc9--kwxlj-eth0", GenerateName:"coredns-7c65d6cfc9-", Namespace:"kube-system", SelfLink:"", UID:"bec1259e-53c8-4839-b58b-5ed97b75b668", ResourceVersion:"981", Generation:0, CreationTimestamp:time.Date(2025, time.September, 6, 0, 21, 13, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"k8s-app":"kube-dns", "pod-template-hash":"7c65d6cfc9", "projectcalico.org/namespace":"kube-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"coredns"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ci-3510.3.8-n-28804d0655", ContainerID:"", Pod:"coredns-7c65d6cfc9-kwxlj", Endpoint:"eth0", ServiceAccountName:"coredns", IPNetworks:[]string{"192.168.107.71/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.kube-system", "ksa.kube-system.coredns"}, InterfaceName:"cali0a317fb91e5", MAC:"", Ports:[]v3.WorkloadEndpointPort{v3.WorkloadEndpointPort{Name:"dns", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"UDP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"dns-tcp", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"metrics", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x23c1, HostPort:0x0, HostIP:""}}, AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Sep 6 00:22:00.211139 env[1421]: 2025-09-06 00:22:00.142 [INFO][4356] cni-plugin/k8s.go 419: Calico CNI using IPs: [192.168.107.71/32] ContainerID="4ed9a152fdd557580f0987a0c1903011ac946a179594ca611c4b8104d1f85930" Namespace="kube-system" Pod="coredns-7c65d6cfc9-kwxlj" WorkloadEndpoint="ci--3510.3.8--n--28804d0655-k8s-coredns--7c65d6cfc9--kwxlj-eth0" Sep 6 00:22:00.211139 env[1421]: 2025-09-06 00:22:00.142 [INFO][4356] cni-plugin/dataplane_linux.go 69: Setting the host side veth name to cali0a317fb91e5 ContainerID="4ed9a152fdd557580f0987a0c1903011ac946a179594ca611c4b8104d1f85930" Namespace="kube-system" Pod="coredns-7c65d6cfc9-kwxlj" WorkloadEndpoint="ci--3510.3.8--n--28804d0655-k8s-coredns--7c65d6cfc9--kwxlj-eth0" Sep 6 00:22:00.211139 env[1421]: 2025-09-06 00:22:00.178 [INFO][4356] cni-plugin/dataplane_linux.go 508: Disabling IPv4 forwarding ContainerID="4ed9a152fdd557580f0987a0c1903011ac946a179594ca611c4b8104d1f85930" Namespace="kube-system" Pod="coredns-7c65d6cfc9-kwxlj" WorkloadEndpoint="ci--3510.3.8--n--28804d0655-k8s-coredns--7c65d6cfc9--kwxlj-eth0" Sep 6 00:22:00.211139 env[1421]: 2025-09-06 00:22:00.179 [INFO][4356] cni-plugin/k8s.go 446: Added Mac, interface name, and active container ID to endpoint ContainerID="4ed9a152fdd557580f0987a0c1903011ac946a179594ca611c4b8104d1f85930" Namespace="kube-system" Pod="coredns-7c65d6cfc9-kwxlj" WorkloadEndpoint="ci--3510.3.8--n--28804d0655-k8s-coredns--7c65d6cfc9--kwxlj-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ci--3510.3.8--n--28804d0655-k8s-coredns--7c65d6cfc9--kwxlj-eth0", GenerateName:"coredns-7c65d6cfc9-", Namespace:"kube-system", SelfLink:"", UID:"bec1259e-53c8-4839-b58b-5ed97b75b668", ResourceVersion:"981", Generation:0, CreationTimestamp:time.Date(2025, time.September, 6, 0, 21, 13, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"k8s-app":"kube-dns", "pod-template-hash":"7c65d6cfc9", "projectcalico.org/namespace":"kube-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"coredns"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ci-3510.3.8-n-28804d0655", ContainerID:"4ed9a152fdd557580f0987a0c1903011ac946a179594ca611c4b8104d1f85930", Pod:"coredns-7c65d6cfc9-kwxlj", Endpoint:"eth0", ServiceAccountName:"coredns", IPNetworks:[]string{"192.168.107.71/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.kube-system", "ksa.kube-system.coredns"}, InterfaceName:"cali0a317fb91e5", MAC:"26:09:1c:3b:2e:e2", Ports:[]v3.WorkloadEndpointPort{v3.WorkloadEndpointPort{Name:"dns", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"UDP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"dns-tcp", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"metrics", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x23c1, HostPort:0x0, HostIP:""}}, AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Sep 6 00:22:00.211139 env[1421]: 2025-09-06 00:22:00.208 [INFO][4356] cni-plugin/k8s.go 532: Wrote updated endpoint to datastore ContainerID="4ed9a152fdd557580f0987a0c1903011ac946a179594ca611c4b8104d1f85930" Namespace="kube-system" Pod="coredns-7c65d6cfc9-kwxlj" WorkloadEndpoint="ci--3510.3.8--n--28804d0655-k8s-coredns--7c65d6cfc9--kwxlj-eth0" Sep 6 00:22:00.220000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:00.220000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:00.220000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:00.220000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:00.220000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:00.220000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:00.220000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:00.220000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:00.220000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:00.220000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:00.220000 audit: BPF prog-id=186 op=LOAD Sep 6 00:22:00.222000 audit[4490]: AVC avc: denied { bpf } for pid=4490 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:00.222000 audit[4490]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c00011fc48 a2=10 a3=1c items=0 ppid=4482 pid=4490 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:22:00.222000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3838303237303538303532336532333530333831623236313234373561 Sep 6 00:22:00.223000 audit[4490]: AVC avc: denied { perfmon } for pid=4490 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:00.223000 audit[4490]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c00011f6b0 a2=3c a3=c items=0 ppid=4482 pid=4490 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:22:00.223000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3838303237303538303532336532333530333831623236313234373561 Sep 6 00:22:00.223000 audit[4490]: AVC avc: denied { bpf } for pid=4490 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:00.223000 audit[4490]: AVC avc: denied { bpf } for pid=4490 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:00.223000 audit[4490]: AVC avc: denied { bpf } for pid=4490 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:00.223000 audit[4490]: AVC avc: denied { perfmon } for pid=4490 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:00.223000 audit[4490]: AVC avc: denied { perfmon } for pid=4490 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:00.223000 audit[4490]: AVC avc: denied { perfmon } for pid=4490 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:00.223000 audit[4490]: AVC avc: denied { perfmon } for pid=4490 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:00.223000 audit[4490]: AVC avc: denied { perfmon } for pid=4490 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:00.223000 audit[4490]: AVC avc: denied { bpf } for pid=4490 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:00.223000 audit[4490]: AVC avc: denied { bpf } for pid=4490 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:00.223000 audit: BPF prog-id=187 op=LOAD Sep 6 00:22:00.223000 audit[4490]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c00011f9d8 a2=78 a3=c000218e00 items=0 ppid=4482 pid=4490 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:22:00.223000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3838303237303538303532336532333530333831623236313234373561 Sep 6 00:22:00.228000 audit[4490]: AVC avc: denied { bpf } for pid=4490 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:00.228000 audit[4490]: AVC avc: denied { bpf } for pid=4490 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:00.228000 audit[4490]: AVC avc: denied { perfmon } for pid=4490 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:00.228000 audit[4490]: AVC avc: denied { perfmon } for pid=4490 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:00.228000 audit[4490]: AVC avc: denied { perfmon } for pid=4490 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:00.228000 audit[4490]: AVC avc: denied { perfmon } for pid=4490 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:00.228000 audit[4490]: AVC avc: denied { perfmon } for pid=4490 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:00.228000 audit[4490]: AVC avc: denied { bpf } for pid=4490 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:00.228000 audit[4490]: AVC avc: denied { bpf } for pid=4490 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:00.228000 audit: BPF prog-id=188 op=LOAD Sep 6 00:22:00.228000 audit[4490]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c00011f770 a2=78 a3=c000218e48 items=0 ppid=4482 pid=4490 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:22:00.228000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3838303237303538303532336532333530333831623236313234373561 Sep 6 00:22:00.228000 audit: BPF prog-id=188 op=UNLOAD Sep 6 00:22:00.228000 audit: BPF prog-id=187 op=UNLOAD Sep 6 00:22:00.228000 audit[4490]: AVC avc: denied { bpf } for pid=4490 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:00.228000 audit[4490]: AVC avc: denied { bpf } for pid=4490 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:00.228000 audit[4490]: AVC avc: denied { bpf } for pid=4490 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:00.228000 audit[4490]: AVC avc: denied { perfmon } for pid=4490 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:00.228000 audit[4490]: AVC avc: denied { perfmon } for pid=4490 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:00.228000 audit[4490]: AVC avc: denied { perfmon } for pid=4490 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:00.228000 audit[4490]: AVC avc: denied { perfmon } for pid=4490 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:00.228000 audit[4490]: AVC avc: denied { perfmon } for pid=4490 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:00.228000 audit[4490]: AVC avc: denied { bpf } for pid=4490 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:00.228000 audit[4490]: AVC avc: denied { bpf } for pid=4490 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:00.228000 audit: BPF prog-id=189 op=LOAD Sep 6 00:22:00.228000 audit[4490]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c00011fc30 a2=78 a3=c000219258 items=0 ppid=4482 pid=4490 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:22:00.228000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3838303237303538303532336532333530333831623236313234373561 Sep 6 00:22:00.247186 env[1421]: time="2025-09-06T00:22:00.247113372Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Sep 6 00:22:00.247437 env[1421]: time="2025-09-06T00:22:00.247407873Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Sep 6 00:22:00.247557 env[1421]: time="2025-09-06T00:22:00.247534174Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Sep 6 00:22:00.247812 env[1421]: time="2025-09-06T00:22:00.247779375Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/4ed9a152fdd557580f0987a0c1903011ac946a179594ca611c4b8104d1f85930 pid=4538 runtime=io.containerd.runc.v2 Sep 6 00:22:00.251000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:00.251000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:00.251000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:00.251000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:00.251000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:00.251000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:00.251000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:00.251000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:00.251000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:00.251000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:00.251000 audit: BPF prog-id=190 op=LOAD Sep 6 00:22:00.253000 audit[4459]: AVC avc: denied { bpf } for pid=4459 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:00.253000 audit[4459]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000145c48 a2=10 a3=1c items=0 ppid=3654 pid=4459 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:22:00.253000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3231393636346637373662663531636232323834383261316334323761 Sep 6 00:22:00.254000 audit[4459]: AVC avc: denied { perfmon } for pid=4459 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:00.254000 audit[4459]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001456b0 a2=3c a3=8 items=0 ppid=3654 pid=4459 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:22:00.254000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3231393636346637373662663531636232323834383261316334323761 Sep 6 00:22:00.254000 audit[4459]: AVC avc: denied { bpf } for pid=4459 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:00.254000 audit[4459]: AVC avc: denied { bpf } for pid=4459 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:00.254000 audit[4459]: AVC avc: denied { bpf } for pid=4459 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:00.254000 audit[4459]: AVC avc: denied { perfmon } for pid=4459 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:00.254000 audit[4459]: AVC avc: denied { perfmon } for pid=4459 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:00.254000 audit[4459]: AVC avc: denied { perfmon } for pid=4459 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:00.254000 audit[4459]: AVC avc: denied { perfmon } for pid=4459 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:00.254000 audit[4459]: AVC avc: denied { perfmon } for pid=4459 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:00.254000 audit[4459]: AVC avc: denied { bpf } for pid=4459 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:00.254000 audit[4459]: AVC avc: denied { bpf } for pid=4459 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:00.254000 audit: BPF prog-id=191 op=LOAD Sep 6 00:22:00.254000 audit[4459]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001459d8 a2=78 a3=c00028dc50 items=0 ppid=3654 pid=4459 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:22:00.254000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3231393636346637373662663531636232323834383261316334323761 Sep 6 00:22:00.256000 audit[4459]: AVC avc: denied { bpf } for pid=4459 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:00.256000 audit[4459]: AVC avc: denied { bpf } for pid=4459 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:00.256000 audit[4459]: AVC avc: denied { perfmon } for pid=4459 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:00.256000 audit[4459]: AVC avc: denied { perfmon } for pid=4459 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:00.256000 audit[4459]: AVC avc: denied { perfmon } for pid=4459 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:00.256000 audit[4459]: AVC avc: denied { perfmon } for pid=4459 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:00.256000 audit[4459]: AVC avc: denied { perfmon } for pid=4459 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:00.256000 audit[4459]: AVC avc: denied { bpf } for pid=4459 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:00.256000 audit[4459]: AVC avc: denied { bpf } for pid=4459 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:00.256000 audit: BPF prog-id=192 op=LOAD Sep 6 00:22:00.256000 audit[4459]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000145770 a2=78 a3=c00028dc98 items=0 ppid=3654 pid=4459 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:22:00.256000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3231393636346637373662663531636232323834383261316334323761 Sep 6 00:22:00.257000 audit: BPF prog-id=192 op=UNLOAD Sep 6 00:22:00.257000 audit: BPF prog-id=191 op=UNLOAD Sep 6 00:22:00.257000 audit[4459]: AVC avc: denied { bpf } for pid=4459 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:00.257000 audit[4459]: AVC avc: denied { bpf } for pid=4459 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:00.257000 audit[4459]: AVC avc: denied { bpf } for pid=4459 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:00.257000 audit[4459]: AVC avc: denied { perfmon } for pid=4459 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:00.257000 audit[4459]: AVC avc: denied { perfmon } for pid=4459 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:00.257000 audit[4459]: AVC avc: denied { perfmon } for pid=4459 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:00.257000 audit[4459]: AVC avc: denied { perfmon } for pid=4459 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:00.257000 audit[4459]: AVC avc: denied { perfmon } for pid=4459 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:00.257000 audit[4459]: AVC avc: denied { bpf } for pid=4459 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:00.257000 audit[4459]: AVC avc: denied { bpf } for pid=4459 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:00.257000 audit: BPF prog-id=193 op=LOAD Sep 6 00:22:00.257000 audit[4459]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000145c30 a2=78 a3=c0004060a8 items=0 ppid=3654 pid=4459 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:22:00.257000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3231393636346637373662663531636232323834383261316334323761 Sep 6 00:22:00.280340 systemd[1]: Started cri-containerd-4ed9a152fdd557580f0987a0c1903011ac946a179594ca611c4b8104d1f85930.scope. Sep 6 00:22:00.299603 systemd-networkd[1577]: cali741cc06a3f3: Link UP Sep 6 00:22:00.308956 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): cali741cc06a3f3: link becomes ready Sep 6 00:22:00.313564 systemd-networkd[1577]: cali741cc06a3f3: Gained carrier Sep 6 00:22:00.337000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:00.337000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:00.337000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:00.337000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:00.337000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:00.337000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:00.337000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:00.337000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:00.337000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:00.337000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:00.337000 audit: BPF prog-id=194 op=LOAD Sep 6 00:22:00.345000 audit[4547]: AVC avc: denied { bpf } for pid=4547 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:00.345000 audit[4547]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000117c48 a2=10 a3=1c items=0 ppid=4538 pid=4547 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:22:00.345000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3465643961313532666464353537353830663039383761306331393033 Sep 6 00:22:00.345000 audit[4547]: AVC avc: denied { perfmon } for pid=4547 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:00.345000 audit[4547]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001176b0 a2=3c a3=c items=0 ppid=4538 pid=4547 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:22:00.345000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3465643961313532666464353537353830663039383761306331393033 Sep 6 00:22:00.345000 audit[4547]: AVC avc: denied { bpf } for pid=4547 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:00.345000 audit[4547]: AVC avc: denied { bpf } for pid=4547 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:00.345000 audit[4547]: AVC avc: denied { bpf } for pid=4547 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:00.345000 audit[4547]: AVC avc: denied { perfmon } for pid=4547 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:00.345000 audit[4547]: AVC avc: denied { perfmon } for pid=4547 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:00.345000 audit[4547]: AVC avc: denied { perfmon } for pid=4547 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:00.345000 audit[4547]: AVC avc: denied { perfmon } for pid=4547 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:00.345000 audit[4547]: AVC avc: denied { perfmon } for pid=4547 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:00.345000 audit[4547]: AVC avc: denied { bpf } for pid=4547 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:00.345000 audit[4547]: AVC avc: denied { bpf } for pid=4547 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:00.345000 audit: BPF prog-id=195 op=LOAD Sep 6 00:22:00.345000 audit[4547]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001179d8 a2=78 a3=c0003da9c0 items=0 ppid=4538 pid=4547 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:22:00.345000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3465643961313532666464353537353830663039383761306331393033 Sep 6 00:22:00.345000 audit[4547]: AVC avc: denied { bpf } for pid=4547 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:00.345000 audit[4547]: AVC avc: denied { bpf } for pid=4547 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:00.345000 audit[4547]: AVC avc: denied { perfmon } for pid=4547 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:00.345000 audit[4547]: AVC avc: denied { perfmon } for pid=4547 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:00.345000 audit[4547]: AVC avc: denied { perfmon } for pid=4547 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:00.345000 audit[4547]: AVC avc: denied { perfmon } for pid=4547 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:00.345000 audit[4547]: AVC avc: denied { perfmon } for pid=4547 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:00.345000 audit[4547]: AVC avc: denied { bpf } for pid=4547 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:00.345000 audit[4547]: AVC avc: denied { bpf } for pid=4547 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:00.345000 audit: BPF prog-id=196 op=LOAD Sep 6 00:22:00.345000 audit[4547]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000117770 a2=78 a3=c0003daa08 items=0 ppid=4538 pid=4547 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:22:00.345000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3465643961313532666464353537353830663039383761306331393033 Sep 6 00:22:00.345000 audit: BPF prog-id=196 op=UNLOAD Sep 6 00:22:00.345000 audit: BPF prog-id=195 op=UNLOAD Sep 6 00:22:00.345000 audit[4547]: AVC avc: denied { bpf } for pid=4547 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:00.345000 audit[4547]: AVC avc: denied { bpf } for pid=4547 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:00.345000 audit[4547]: AVC avc: denied { bpf } for pid=4547 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:00.345000 audit[4547]: AVC avc: denied { perfmon } for pid=4547 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:00.345000 audit[4547]: AVC avc: denied { perfmon } for pid=4547 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:00.345000 audit[4547]: AVC avc: denied { perfmon } for pid=4547 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:00.345000 audit[4547]: AVC avc: denied { perfmon } for pid=4547 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:00.345000 audit[4547]: AVC avc: denied { perfmon } for pid=4547 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:00.345000 audit[4547]: AVC avc: denied { bpf } for pid=4547 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:00.345000 audit[4547]: AVC avc: denied { bpf } for pid=4547 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:00.345000 audit: BPF prog-id=197 op=LOAD Sep 6 00:22:00.345000 audit[4547]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000117c30 a2=78 a3=c0003dae18 items=0 ppid=4538 pid=4547 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:22:00.345000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3465643961313532666464353537353830663039383761306331393033 Sep 6 00:22:00.359427 env[1421]: 2025-09-06 00:21:59.536 [INFO][4365] cni-plugin/plugin.go 340: Calico CNI found existing endpoint: &{{WorkloadEndpoint projectcalico.org/v3} {ci--3510.3.8--n--28804d0655-k8s-goldmane--7988f88666--kvgbx-eth0 goldmane-7988f88666- calico-system e87f9195-4410-4758-8575-4e170e647a3d 982 0 2025-09-06 00:21:27 +0000 UTC map[app.kubernetes.io/name:goldmane k8s-app:goldmane pod-template-hash:7988f88666 projectcalico.org/namespace:calico-system projectcalico.org/orchestrator:k8s projectcalico.org/serviceaccount:goldmane] map[] [] [] []} {k8s ci-3510.3.8-n-28804d0655 goldmane-7988f88666-kvgbx eth0 goldmane [] [] [kns.calico-system ksa.calico-system.goldmane] cali741cc06a3f3 [] [] }} ContainerID="3c20de4c5b6deb1bb564d75e0baaa6c47ec09a68bc0cb741a8cdb2bd6ab05ed2" Namespace="calico-system" Pod="goldmane-7988f88666-kvgbx" WorkloadEndpoint="ci--3510.3.8--n--28804d0655-k8s-goldmane--7988f88666--kvgbx-" Sep 6 00:22:00.359427 env[1421]: 2025-09-06 00:21:59.537 [INFO][4365] cni-plugin/k8s.go 74: Extracted identifiers for CmdAddK8s ContainerID="3c20de4c5b6deb1bb564d75e0baaa6c47ec09a68bc0cb741a8cdb2bd6ab05ed2" Namespace="calico-system" Pod="goldmane-7988f88666-kvgbx" WorkloadEndpoint="ci--3510.3.8--n--28804d0655-k8s-goldmane--7988f88666--kvgbx-eth0" Sep 6 00:22:00.359427 env[1421]: 2025-09-06 00:21:59.718 [INFO][4394] ipam/ipam_plugin.go 225: Calico CNI IPAM request count IPv4=1 IPv6=0 ContainerID="3c20de4c5b6deb1bb564d75e0baaa6c47ec09a68bc0cb741a8cdb2bd6ab05ed2" HandleID="k8s-pod-network.3c20de4c5b6deb1bb564d75e0baaa6c47ec09a68bc0cb741a8cdb2bd6ab05ed2" Workload="ci--3510.3.8--n--28804d0655-k8s-goldmane--7988f88666--kvgbx-eth0" Sep 6 00:22:00.359427 env[1421]: 2025-09-06 00:21:59.719 [INFO][4394] ipam/ipam_plugin.go 265: Auto assigning IP ContainerID="3c20de4c5b6deb1bb564d75e0baaa6c47ec09a68bc0cb741a8cdb2bd6ab05ed2" HandleID="k8s-pod-network.3c20de4c5b6deb1bb564d75e0baaa6c47ec09a68bc0cb741a8cdb2bd6ab05ed2" Workload="ci--3510.3.8--n--28804d0655-k8s-goldmane--7988f88666--kvgbx-eth0" assignArgs=ipam.AutoAssignArgs{Num4:1, Num6:0, HandleID:(*string)(0xc000390550), Attrs:map[string]string{"namespace":"calico-system", "node":"ci-3510.3.8-n-28804d0655", "pod":"goldmane-7988f88666-kvgbx", "timestamp":"2025-09-06 00:21:59.714731862 +0000 UTC"}, Hostname:"ci-3510.3.8-n-28804d0655", IPv4Pools:[]net.IPNet{}, IPv6Pools:[]net.IPNet{}, MaxBlocksPerHost:0, HostReservedAttrIPv4s:(*ipam.HostReservedAttr)(nil), HostReservedAttrIPv6s:(*ipam.HostReservedAttr)(nil), IntendedUse:"Workload"} Sep 6 00:22:00.359427 env[1421]: 2025-09-06 00:21:59.720 [INFO][4394] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Sep 6 00:22:00.359427 env[1421]: 2025-09-06 00:22:00.140 [INFO][4394] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Sep 6 00:22:00.359427 env[1421]: 2025-09-06 00:22:00.140 [INFO][4394] ipam/ipam.go 110: Auto-assign 1 ipv4, 0 ipv6 addrs for host 'ci-3510.3.8-n-28804d0655' Sep 6 00:22:00.359427 env[1421]: 2025-09-06 00:22:00.166 [INFO][4394] ipam/ipam.go 691: Looking up existing affinities for host handle="k8s-pod-network.3c20de4c5b6deb1bb564d75e0baaa6c47ec09a68bc0cb741a8cdb2bd6ab05ed2" host="ci-3510.3.8-n-28804d0655" Sep 6 00:22:00.359427 env[1421]: 2025-09-06 00:22:00.178 [INFO][4394] ipam/ipam.go 394: Looking up existing affinities for host host="ci-3510.3.8-n-28804d0655" Sep 6 00:22:00.359427 env[1421]: 2025-09-06 00:22:00.228 [INFO][4394] ipam/ipam.go 511: Trying affinity for 192.168.107.64/26 host="ci-3510.3.8-n-28804d0655" Sep 6 00:22:00.359427 env[1421]: 2025-09-06 00:22:00.232 [INFO][4394] ipam/ipam.go 158: Attempting to load block cidr=192.168.107.64/26 host="ci-3510.3.8-n-28804d0655" Sep 6 00:22:00.359427 env[1421]: 2025-09-06 00:22:00.238 [INFO][4394] ipam/ipam.go 235: Affinity is confirmed and block has been loaded cidr=192.168.107.64/26 host="ci-3510.3.8-n-28804d0655" Sep 6 00:22:00.359427 env[1421]: 2025-09-06 00:22:00.238 [INFO][4394] ipam/ipam.go 1220: Attempting to assign 1 addresses from block block=192.168.107.64/26 handle="k8s-pod-network.3c20de4c5b6deb1bb564d75e0baaa6c47ec09a68bc0cb741a8cdb2bd6ab05ed2" host="ci-3510.3.8-n-28804d0655" Sep 6 00:22:00.359427 env[1421]: 2025-09-06 00:22:00.241 [INFO][4394] ipam/ipam.go 1764: Creating new handle: k8s-pod-network.3c20de4c5b6deb1bb564d75e0baaa6c47ec09a68bc0cb741a8cdb2bd6ab05ed2 Sep 6 00:22:00.359427 env[1421]: 2025-09-06 00:22:00.260 [INFO][4394] ipam/ipam.go 1243: Writing block in order to claim IPs block=192.168.107.64/26 handle="k8s-pod-network.3c20de4c5b6deb1bb564d75e0baaa6c47ec09a68bc0cb741a8cdb2bd6ab05ed2" host="ci-3510.3.8-n-28804d0655" Sep 6 00:22:00.359427 env[1421]: 2025-09-06 00:22:00.291 [INFO][4394] ipam/ipam.go 1256: Successfully claimed IPs: [192.168.107.72/26] block=192.168.107.64/26 handle="k8s-pod-network.3c20de4c5b6deb1bb564d75e0baaa6c47ec09a68bc0cb741a8cdb2bd6ab05ed2" host="ci-3510.3.8-n-28804d0655" Sep 6 00:22:00.359427 env[1421]: 2025-09-06 00:22:00.292 [INFO][4394] ipam/ipam.go 878: Auto-assigned 1 out of 1 IPv4s: [192.168.107.72/26] handle="k8s-pod-network.3c20de4c5b6deb1bb564d75e0baaa6c47ec09a68bc0cb741a8cdb2bd6ab05ed2" host="ci-3510.3.8-n-28804d0655" Sep 6 00:22:00.359427 env[1421]: 2025-09-06 00:22:00.292 [INFO][4394] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Sep 6 00:22:00.359427 env[1421]: 2025-09-06 00:22:00.292 [INFO][4394] ipam/ipam_plugin.go 283: Calico CNI IPAM assigned addresses IPv4=[192.168.107.72/26] IPv6=[] ContainerID="3c20de4c5b6deb1bb564d75e0baaa6c47ec09a68bc0cb741a8cdb2bd6ab05ed2" HandleID="k8s-pod-network.3c20de4c5b6deb1bb564d75e0baaa6c47ec09a68bc0cb741a8cdb2bd6ab05ed2" Workload="ci--3510.3.8--n--28804d0655-k8s-goldmane--7988f88666--kvgbx-eth0" Sep 6 00:22:00.362627 env[1421]: 2025-09-06 00:22:00.294 [INFO][4365] cni-plugin/k8s.go 418: Populated endpoint ContainerID="3c20de4c5b6deb1bb564d75e0baaa6c47ec09a68bc0cb741a8cdb2bd6ab05ed2" Namespace="calico-system" Pod="goldmane-7988f88666-kvgbx" WorkloadEndpoint="ci--3510.3.8--n--28804d0655-k8s-goldmane--7988f88666--kvgbx-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ci--3510.3.8--n--28804d0655-k8s-goldmane--7988f88666--kvgbx-eth0", GenerateName:"goldmane-7988f88666-", Namespace:"calico-system", SelfLink:"", UID:"e87f9195-4410-4758-8575-4e170e647a3d", ResourceVersion:"982", Generation:0, CreationTimestamp:time.Date(2025, time.September, 6, 0, 21, 27, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"goldmane", "k8s-app":"goldmane", "pod-template-hash":"7988f88666", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"goldmane"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ci-3510.3.8-n-28804d0655", ContainerID:"", Pod:"goldmane-7988f88666-kvgbx", Endpoint:"eth0", ServiceAccountName:"goldmane", IPNetworks:[]string{"192.168.107.72/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.goldmane"}, InterfaceName:"cali741cc06a3f3", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Sep 6 00:22:00.362627 env[1421]: 2025-09-06 00:22:00.294 [INFO][4365] cni-plugin/k8s.go 419: Calico CNI using IPs: [192.168.107.72/32] ContainerID="3c20de4c5b6deb1bb564d75e0baaa6c47ec09a68bc0cb741a8cdb2bd6ab05ed2" Namespace="calico-system" Pod="goldmane-7988f88666-kvgbx" WorkloadEndpoint="ci--3510.3.8--n--28804d0655-k8s-goldmane--7988f88666--kvgbx-eth0" Sep 6 00:22:00.362627 env[1421]: 2025-09-06 00:22:00.294 [INFO][4365] cni-plugin/dataplane_linux.go 69: Setting the host side veth name to cali741cc06a3f3 ContainerID="3c20de4c5b6deb1bb564d75e0baaa6c47ec09a68bc0cb741a8cdb2bd6ab05ed2" Namespace="calico-system" Pod="goldmane-7988f88666-kvgbx" WorkloadEndpoint="ci--3510.3.8--n--28804d0655-k8s-goldmane--7988f88666--kvgbx-eth0" Sep 6 00:22:00.362627 env[1421]: 2025-09-06 00:22:00.314 [INFO][4365] cni-plugin/dataplane_linux.go 508: Disabling IPv4 forwarding ContainerID="3c20de4c5b6deb1bb564d75e0baaa6c47ec09a68bc0cb741a8cdb2bd6ab05ed2" Namespace="calico-system" Pod="goldmane-7988f88666-kvgbx" WorkloadEndpoint="ci--3510.3.8--n--28804d0655-k8s-goldmane--7988f88666--kvgbx-eth0" Sep 6 00:22:00.362627 env[1421]: 2025-09-06 00:22:00.315 [INFO][4365] cni-plugin/k8s.go 446: Added Mac, interface name, and active container ID to endpoint ContainerID="3c20de4c5b6deb1bb564d75e0baaa6c47ec09a68bc0cb741a8cdb2bd6ab05ed2" Namespace="calico-system" Pod="goldmane-7988f88666-kvgbx" WorkloadEndpoint="ci--3510.3.8--n--28804d0655-k8s-goldmane--7988f88666--kvgbx-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ci--3510.3.8--n--28804d0655-k8s-goldmane--7988f88666--kvgbx-eth0", GenerateName:"goldmane-7988f88666-", Namespace:"calico-system", SelfLink:"", UID:"e87f9195-4410-4758-8575-4e170e647a3d", ResourceVersion:"982", Generation:0, CreationTimestamp:time.Date(2025, time.September, 6, 0, 21, 27, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"goldmane", "k8s-app":"goldmane", "pod-template-hash":"7988f88666", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"goldmane"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ci-3510.3.8-n-28804d0655", ContainerID:"3c20de4c5b6deb1bb564d75e0baaa6c47ec09a68bc0cb741a8cdb2bd6ab05ed2", Pod:"goldmane-7988f88666-kvgbx", Endpoint:"eth0", ServiceAccountName:"goldmane", IPNetworks:[]string{"192.168.107.72/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.goldmane"}, InterfaceName:"cali741cc06a3f3", MAC:"56:cf:65:e4:62:28", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Sep 6 00:22:00.362627 env[1421]: 2025-09-06 00:22:00.345 [INFO][4365] cni-plugin/k8s.go 532: Wrote updated endpoint to datastore ContainerID="3c20de4c5b6deb1bb564d75e0baaa6c47ec09a68bc0cb741a8cdb2bd6ab05ed2" Namespace="calico-system" Pod="goldmane-7988f88666-kvgbx" WorkloadEndpoint="ci--3510.3.8--n--28804d0655-k8s-goldmane--7988f88666--kvgbx-eth0" Sep 6 00:22:00.361355 systemd[1]: run-containerd-runc-k8s.io-f999929bb9810ce86cf66144cdb5da08e1f850a8e7c7ae0fe2ff1f267a7012a6-runc.7iKfcP.mount: Deactivated successfully. Sep 6 00:22:00.415397 env[1421]: time="2025-09-06T00:22:00.408634036Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:coredns-7c65d6cfc9-p4llr,Uid:240f7b1e-32b7-4339-819b-51a4bef1fd7d,Namespace:kube-system,Attempt:1,} returns sandbox id \"880270580523e2350381b2612475a6827a647cd9c4bd8c96213fde42827730d1\"" Sep 6 00:22:00.419735 env[1421]: time="2025-09-06T00:22:00.418196076Z" level=info msg="CreateContainer within sandbox \"880270580523e2350381b2612475a6827a647cd9c4bd8c96213fde42827730d1\" for container &ContainerMetadata{Name:coredns,Attempt:0,}" Sep 6 00:22:00.437131 env[1421]: time="2025-09-06T00:22:00.437048053Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Sep 6 00:22:00.437453 env[1421]: time="2025-09-06T00:22:00.437417455Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Sep 6 00:22:00.437668 env[1421]: time="2025-09-06T00:22:00.437625856Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Sep 6 00:22:00.440191 env[1421]: time="2025-09-06T00:22:00.440143466Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/3c20de4c5b6deb1bb564d75e0baaa6c47ec09a68bc0cb741a8cdb2bd6ab05ed2 pid=4590 runtime=io.containerd.runc.v2 Sep 6 00:22:00.443103 env[1421]: time="2025-09-06T00:22:00.443061678Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:coredns-7c65d6cfc9-kwxlj,Uid:bec1259e-53c8-4839-b58b-5ed97b75b668,Namespace:kube-system,Attempt:1,} returns sandbox id \"4ed9a152fdd557580f0987a0c1903011ac946a179594ca611c4b8104d1f85930\"" Sep 6 00:22:00.457383 env[1421]: time="2025-09-06T00:22:00.457332737Z" level=info msg="CreateContainer within sandbox \"4ed9a152fdd557580f0987a0c1903011ac946a179594ca611c4b8104d1f85930\" for container &ContainerMetadata{Name:coredns,Attempt:0,}" Sep 6 00:22:00.457752 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount1677313356.mount: Deactivated successfully. Sep 6 00:22:00.479917 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount2991118640.mount: Deactivated successfully. Sep 6 00:22:00.503003 env[1421]: time="2025-09-06T00:22:00.502922124Z" level=info msg="CreateContainer within sandbox \"880270580523e2350381b2612475a6827a647cd9c4bd8c96213fde42827730d1\" for &ContainerMetadata{Name:coredns,Attempt:0,} returns container id \"f2f7877dd90a64bc579deac43a0a63d3c8ce51d9f84a9f738c6da846f637c248\"" Sep 6 00:22:00.504183 env[1421]: time="2025-09-06T00:22:00.504114829Z" level=info msg="StartContainer for \"f2f7877dd90a64bc579deac43a0a63d3c8ce51d9f84a9f738c6da846f637c248\"" Sep 6 00:22:00.527034 env[1421]: time="2025-09-06T00:22:00.526969923Z" level=info msg="CreateContainer within sandbox \"4ed9a152fdd557580f0987a0c1903011ac946a179594ca611c4b8104d1f85930\" for &ContainerMetadata{Name:coredns,Attempt:0,} returns container id \"5ac943f764072250f7907afba72732348ddfb4c2388cbe976ed547f3427ce02c\"" Sep 6 00:22:00.527867 env[1421]: time="2025-09-06T00:22:00.527829127Z" level=info msg="StartContainer for \"5ac943f764072250f7907afba72732348ddfb4c2388cbe976ed547f3427ce02c\"" Sep 6 00:22:00.556711 systemd[1]: Started cri-containerd-3c20de4c5b6deb1bb564d75e0baaa6c47ec09a68bc0cb741a8cdb2bd6ab05ed2.scope. Sep 6 00:22:00.564827 env[1421]: time="2025-09-06T00:22:00.564774579Z" level=info msg="StartContainer for \"219664f776bf51cb228482a1c427a6c77363dc2490448c117a34bbc0f913af48\" returns successfully" Sep 6 00:22:00.599668 systemd[1]: Started cri-containerd-f2f7877dd90a64bc579deac43a0a63d3c8ce51d9f84a9f738c6da846f637c248.scope. Sep 6 00:22:00.607007 systemd[1]: Started cri-containerd-5ac943f764072250f7907afba72732348ddfb4c2388cbe976ed547f3427ce02c.scope. Sep 6 00:22:00.625000 audit[4657]: NETFILTER_CFG table=filter:116 family=2 entries=78 op=nft_register_chain pid=4657 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Sep 6 00:22:00.625000 audit[4657]: SYSCALL arch=c000003e syscall=46 success=yes exit=41168 a0=3 a1=7ffe03988a70 a2=0 a3=7ffe03988a5c items=0 ppid=3701 pid=4657 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:22:00.625000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Sep 6 00:22:00.655000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:00.655000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:00.655000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:00.655000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:00.655000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:00.655000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:00.655000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:00.655000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:00.655000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:00.655000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:00.655000 audit: BPF prog-id=198 op=LOAD Sep 6 00:22:00.655000 audit[4634]: AVC avc: denied { bpf } for pid=4634 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:00.655000 audit[4634]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000147c48 a2=10 a3=1c items=0 ppid=4482 pid=4634 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:22:00.655000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6632663738373764643930613634626335373964656163343361306136 Sep 6 00:22:00.656000 audit[4634]: AVC avc: denied { perfmon } for pid=4634 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:00.656000 audit[4634]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001476b0 a2=3c a3=8 items=0 ppid=4482 pid=4634 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:22:00.656000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6632663738373764643930613634626335373964656163343361306136 Sep 6 00:22:00.656000 audit[4634]: AVC avc: denied { bpf } for pid=4634 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:00.656000 audit[4634]: AVC avc: denied { bpf } for pid=4634 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:00.656000 audit[4634]: AVC avc: denied { bpf } for pid=4634 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:00.656000 audit[4634]: AVC avc: denied { perfmon } for pid=4634 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:00.656000 audit[4634]: AVC avc: denied { perfmon } for pid=4634 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:00.656000 audit[4634]: AVC avc: denied { perfmon } for pid=4634 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:00.656000 audit[4634]: AVC avc: denied { perfmon } for pid=4634 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:00.656000 audit[4634]: AVC avc: denied { perfmon } for pid=4634 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:00.656000 audit[4634]: AVC avc: denied { bpf } for pid=4634 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:00.656000 audit[4634]: AVC avc: denied { bpf } for pid=4634 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:00.656000 audit: BPF prog-id=199 op=LOAD Sep 6 00:22:00.656000 audit[4634]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001479d8 a2=78 a3=c0001d4e90 items=0 ppid=4482 pid=4634 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:22:00.656000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6632663738373764643930613634626335373964656163343361306136 Sep 6 00:22:00.656000 audit[4634]: AVC avc: denied { bpf } for pid=4634 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:00.656000 audit[4634]: AVC avc: denied { bpf } for pid=4634 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:00.656000 audit[4634]: AVC avc: denied { perfmon } for pid=4634 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:00.656000 audit[4634]: AVC avc: denied { perfmon } for pid=4634 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:00.656000 audit[4634]: AVC avc: denied { perfmon } for pid=4634 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:00.656000 audit[4634]: AVC avc: denied { perfmon } for pid=4634 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:00.656000 audit[4634]: AVC avc: denied { perfmon } for pid=4634 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:00.656000 audit[4634]: AVC avc: denied { bpf } for pid=4634 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:00.656000 audit[4634]: AVC avc: denied { bpf } for pid=4634 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:00.656000 audit: BPF prog-id=200 op=LOAD Sep 6 00:22:00.656000 audit[4634]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000147770 a2=78 a3=c0001d4ed8 items=0 ppid=4482 pid=4634 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:22:00.656000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6632663738373764643930613634626335373964656163343361306136 Sep 6 00:22:00.656000 audit: BPF prog-id=200 op=UNLOAD Sep 6 00:22:00.656000 audit: BPF prog-id=199 op=UNLOAD Sep 6 00:22:00.656000 audit[4634]: AVC avc: denied { bpf } for pid=4634 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:00.656000 audit[4634]: AVC avc: denied { bpf } for pid=4634 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:00.656000 audit[4634]: AVC avc: denied { bpf } for pid=4634 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:00.656000 audit[4634]: AVC avc: denied { perfmon } for pid=4634 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:00.656000 audit[4634]: AVC avc: denied { perfmon } for pid=4634 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:00.656000 audit[4634]: AVC avc: denied { perfmon } for pid=4634 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:00.656000 audit[4634]: AVC avc: denied { perfmon } for pid=4634 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:00.656000 audit[4634]: AVC avc: denied { perfmon } for pid=4634 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:00.656000 audit[4634]: AVC avc: denied { bpf } for pid=4634 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:00.656000 audit[4634]: AVC avc: denied { bpf } for pid=4634 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:00.656000 audit: BPF prog-id=201 op=LOAD Sep 6 00:22:00.656000 audit[4634]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000147c30 a2=78 a3=c0001d52e8 items=0 ppid=4482 pid=4634 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:22:00.656000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6632663738373764643930613634626335373964656163343361306136 Sep 6 00:22:00.673000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:00.673000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:00.673000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:00.673000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:00.673000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:00.673000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:00.673000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:00.673000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:00.673000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:00.673000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:00.673000 audit: BPF prog-id=202 op=LOAD Sep 6 00:22:00.674000 audit[4638]: AVC avc: denied { bpf } for pid=4638 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:00.674000 audit[4638]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000145c48 a2=10 a3=1c items=0 ppid=4538 pid=4638 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:22:00.674000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3561633934336637363430373232353066373930376166626137323733 Sep 6 00:22:00.674000 audit[4638]: AVC avc: denied { perfmon } for pid=4638 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:00.674000 audit[4638]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001456b0 a2=3c a3=8 items=0 ppid=4538 pid=4638 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:22:00.674000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3561633934336637363430373232353066373930376166626137323733 Sep 6 00:22:00.674000 audit[4638]: AVC avc: denied { bpf } for pid=4638 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:00.674000 audit[4638]: AVC avc: denied { bpf } for pid=4638 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:00.674000 audit[4638]: AVC avc: denied { bpf } for pid=4638 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:00.674000 audit[4638]: AVC avc: denied { perfmon } for pid=4638 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:00.674000 audit[4638]: AVC avc: denied { perfmon } for pid=4638 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:00.674000 audit[4638]: AVC avc: denied { perfmon } for pid=4638 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:00.674000 audit[4638]: AVC avc: denied { perfmon } for pid=4638 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:00.674000 audit[4638]: AVC avc: denied { perfmon } for pid=4638 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:00.674000 audit[4638]: AVC avc: denied { bpf } for pid=4638 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:00.674000 audit[4638]: AVC avc: denied { bpf } for pid=4638 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:00.674000 audit: BPF prog-id=203 op=LOAD Sep 6 00:22:00.674000 audit[4638]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001459d8 a2=78 a3=c000187260 items=0 ppid=4538 pid=4638 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:22:00.674000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3561633934336637363430373232353066373930376166626137323733 Sep 6 00:22:00.674000 audit[4638]: AVC avc: denied { bpf } for pid=4638 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:00.674000 audit[4638]: AVC avc: denied { bpf } for pid=4638 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:00.674000 audit[4638]: AVC avc: denied { perfmon } for pid=4638 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:00.674000 audit[4638]: AVC avc: denied { perfmon } for pid=4638 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:00.674000 audit[4638]: AVC avc: denied { perfmon } for pid=4638 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:00.674000 audit[4638]: AVC avc: denied { perfmon } for pid=4638 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:00.674000 audit[4638]: AVC avc: denied { perfmon } for pid=4638 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:00.674000 audit[4638]: AVC avc: denied { bpf } for pid=4638 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:00.674000 audit[4638]: AVC avc: denied { bpf } for pid=4638 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:00.674000 audit: BPF prog-id=204 op=LOAD Sep 6 00:22:00.674000 audit[4638]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000145770 a2=78 a3=c0001872a8 items=0 ppid=4538 pid=4638 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:22:00.674000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3561633934336637363430373232353066373930376166626137323733 Sep 6 00:22:00.674000 audit: BPF prog-id=204 op=UNLOAD Sep 6 00:22:00.674000 audit: BPF prog-id=203 op=UNLOAD Sep 6 00:22:00.674000 audit[4638]: AVC avc: denied { bpf } for pid=4638 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:00.674000 audit[4638]: AVC avc: denied { bpf } for pid=4638 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:00.674000 audit[4638]: AVC avc: denied { bpf } for pid=4638 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:00.674000 audit[4638]: AVC avc: denied { perfmon } for pid=4638 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:00.674000 audit[4638]: AVC avc: denied { perfmon } for pid=4638 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:00.674000 audit[4638]: AVC avc: denied { perfmon } for pid=4638 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:00.674000 audit[4638]: AVC avc: denied { perfmon } for pid=4638 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:00.674000 audit[4638]: AVC avc: denied { perfmon } for pid=4638 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:00.674000 audit[4638]: AVC avc: denied { bpf } for pid=4638 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:00.674000 audit[4638]: AVC avc: denied { bpf } for pid=4638 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:00.674000 audit: BPF prog-id=205 op=LOAD Sep 6 00:22:00.674000 audit[4638]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000145c30 a2=78 a3=c0001876b8 items=0 ppid=4538 pid=4638 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:22:00.674000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3561633934336637363430373232353066373930376166626137323733 Sep 6 00:22:00.700404 env[1421]: time="2025-09-06T00:22:00.700339636Z" level=info msg="StartContainer for \"5ac943f764072250f7907afba72732348ddfb4c2388cbe976ed547f3427ce02c\" returns successfully" Sep 6 00:22:00.716358 env[1421]: time="2025-09-06T00:22:00.716301602Z" level=info msg="StartContainer for \"f2f7877dd90a64bc579deac43a0a63d3c8ce51d9f84a9f738c6da846f637c248\" returns successfully" Sep 6 00:22:00.742000 audit[4662]: AVC avc: denied { getattr } for pid=4662 comm="coredns" path="cgroup:[4026532709]" dev="nsfs" ino=4026532709 scontext=system_u:system_r:svirt_lxc_net_t:s0:c374,c712 tcontext=system_u:object_r:nsfs_t:s0 tclass=file permissive=0 Sep 6 00:22:00.742000 audit[4662]: SYSCALL arch=c000003e syscall=262 success=no exit=-13 a0=ffffffffffffff9c a1=c00005aa38 a2=c0000bdbd8 a3=0 items=0 ppid=4482 pid=4662 auid=4294967295 uid=65532 gid=65532 euid=65532 suid=65532 fsuid=65532 egid=65532 sgid=65532 fsgid=65532 tty=(none) ses=4294967295 comm="coredns" exe="/coredns" subj=system_u:system_r:svirt_lxc_net_t:s0:c374,c712 key=(null) Sep 6 00:22:00.742000 audit: PROCTITLE proctitle=2F636F7265646E73002D636F6E66002F6574632F636F7265646E732F436F726566696C65 Sep 6 00:22:00.804000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:00.804000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:00.804000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:00.804000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:00.804000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:00.804000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:00.804000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:00.804000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:00.804000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:00.804000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:00.805000 audit: BPF prog-id=206 op=LOAD Sep 6 00:22:00.805000 audit[4610]: AVC avc: denied { bpf } for pid=4610 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:00.805000 audit[4610]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000195c48 a2=10 a3=1c items=0 ppid=4590 pid=4610 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:22:00.805000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3363323064653463356236646562316262353634643735653062616161 Sep 6 00:22:00.805000 audit[4610]: AVC avc: denied { perfmon } for pid=4610 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:00.805000 audit[4610]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001956b0 a2=3c a3=c items=0 ppid=4590 pid=4610 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:22:00.805000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3363323064653463356236646562316262353634643735653062616161 Sep 6 00:22:00.806000 audit[4610]: AVC avc: denied { bpf } for pid=4610 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:00.806000 audit[4610]: AVC avc: denied { bpf } for pid=4610 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:00.806000 audit[4610]: AVC avc: denied { bpf } for pid=4610 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:00.806000 audit[4610]: AVC avc: denied { perfmon } for pid=4610 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:00.806000 audit[4610]: AVC avc: denied { perfmon } for pid=4610 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:00.806000 audit[4610]: AVC avc: denied { perfmon } for pid=4610 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:00.806000 audit[4610]: AVC avc: denied { perfmon } for pid=4610 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:00.806000 audit[4610]: AVC avc: denied { perfmon } for pid=4610 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:00.806000 audit[4610]: AVC avc: denied { bpf } for pid=4610 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:00.806000 audit[4610]: AVC avc: denied { bpf } for pid=4610 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:00.806000 audit: BPF prog-id=207 op=LOAD Sep 6 00:22:00.806000 audit[4610]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001959d8 a2=78 a3=c0002d3f80 items=0 ppid=4590 pid=4610 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:22:00.806000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3363323064653463356236646562316262353634643735653062616161 Sep 6 00:22:00.806000 audit[4610]: AVC avc: denied { bpf } for pid=4610 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:00.806000 audit[4610]: AVC avc: denied { bpf } for pid=4610 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:00.806000 audit[4610]: AVC avc: denied { perfmon } for pid=4610 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:00.806000 audit[4610]: AVC avc: denied { perfmon } for pid=4610 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:00.806000 audit[4610]: AVC avc: denied { perfmon } for pid=4610 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:00.806000 audit[4610]: AVC avc: denied { perfmon } for pid=4610 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:00.806000 audit[4610]: AVC avc: denied { perfmon } for pid=4610 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:00.806000 audit[4610]: AVC avc: denied { bpf } for pid=4610 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:00.806000 audit[4610]: AVC avc: denied { bpf } for pid=4610 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:00.806000 audit: BPF prog-id=208 op=LOAD Sep 6 00:22:00.806000 audit[4610]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000195770 a2=78 a3=c0002d3fc8 items=0 ppid=4590 pid=4610 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:22:00.806000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3363323064653463356236646562316262353634643735653062616161 Sep 6 00:22:00.806000 audit: BPF prog-id=208 op=UNLOAD Sep 6 00:22:00.806000 audit: BPF prog-id=207 op=UNLOAD Sep 6 00:22:00.806000 audit[4610]: AVC avc: denied { bpf } for pid=4610 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:00.806000 audit[4610]: AVC avc: denied { bpf } for pid=4610 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:00.806000 audit[4610]: AVC avc: denied { bpf } for pid=4610 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:00.806000 audit[4610]: AVC avc: denied { perfmon } for pid=4610 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:00.806000 audit[4610]: AVC avc: denied { perfmon } for pid=4610 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:00.806000 audit[4610]: AVC avc: denied { perfmon } for pid=4610 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:00.806000 audit[4610]: AVC avc: denied { perfmon } for pid=4610 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:00.806000 audit[4610]: AVC avc: denied { perfmon } for pid=4610 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:00.806000 audit[4610]: AVC avc: denied { bpf } for pid=4610 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:00.806000 audit[4610]: AVC avc: denied { bpf } for pid=4610 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:00.806000 audit: BPF prog-id=209 op=LOAD Sep 6 00:22:00.806000 audit[4610]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000195c30 a2=78 a3=c0003523d8 items=0 ppid=4590 pid=4610 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:22:00.806000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3363323064653463356236646562316262353634643735653062616161 Sep 6 00:22:00.820000 audit[4671]: AVC avc: denied { getattr } for pid=4671 comm="coredns" path="cgroup:[4026532715]" dev="nsfs" ino=4026532715 scontext=system_u:system_r:svirt_lxc_net_t:s0:c344,c487 tcontext=system_u:object_r:nsfs_t:s0 tclass=file permissive=0 Sep 6 00:22:00.820000 audit[4671]: SYSCALL arch=c000003e syscall=262 success=no exit=-13 a0=ffffffffffffff9c a1=c00005aa38 a2=c0000c5148 a3=0 items=0 ppid=4538 pid=4671 auid=4294967295 uid=65532 gid=65532 euid=65532 suid=65532 fsuid=65532 egid=65532 sgid=65532 fsgid=65532 tty=(none) ses=4294967295 comm="coredns" exe="/coredns" subj=system_u:system_r:svirt_lxc_net_t:s0:c344,c487 key=(null) Sep 6 00:22:00.820000 audit: PROCTITLE proctitle=2F636F7265646E73002D636F6E66002F6574632F636F7265646E732F436F726566696C65 Sep 6 00:22:00.876000 audit[4720]: NETFILTER_CFG table=filter:117 family=2 entries=20 op=nft_register_rule pid=4720 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Sep 6 00:22:00.876000 audit[4720]: SYSCALL arch=c000003e syscall=46 success=yes exit=7480 a0=3 a1=7ffd9fab7de0 a2=0 a3=7ffd9fab7dcc items=0 ppid=2518 pid=4720 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:22:00.876000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Sep 6 00:22:00.879000 audit[4720]: NETFILTER_CFG table=nat:118 family=2 entries=14 op=nft_register_rule pid=4720 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Sep 6 00:22:00.879000 audit[4720]: SYSCALL arch=c000003e syscall=46 success=yes exit=3468 a0=3 a1=7ffd9fab7de0 a2=0 a3=0 items=0 ppid=2518 pid=4720 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:22:00.879000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Sep 6 00:22:00.886252 kubelet[2412]: I0906 00:22:00.886184 2412 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="kube-system/coredns-7c65d6cfc9-kwxlj" podStartSLOduration=47.886158201 podStartE2EDuration="47.886158201s" podCreationTimestamp="2025-09-06 00:21:13 +0000 UTC" firstStartedPulling="0001-01-01 00:00:00 +0000 UTC" lastFinishedPulling="0001-01-01 00:00:00 +0000 UTC" observedRunningTime="2025-09-06 00:22:00.834579689 +0000 UTC m=+52.739925824" watchObservedRunningTime="2025-09-06 00:22:00.886158201 +0000 UTC m=+52.791504236" Sep 6 00:22:00.920140 env[1421]: time="2025-09-06T00:22:00.920068840Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:goldmane-7988f88666-kvgbx,Uid:e87f9195-4410-4758-8575-4e170e647a3d,Namespace:calico-system,Attempt:1,} returns sandbox id \"3c20de4c5b6deb1bb564d75e0baaa6c47ec09a68bc0cb741a8cdb2bd6ab05ed2\"" Sep 6 00:22:00.942489 kubelet[2412]: I0906 00:22:00.942324 2412 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="kube-system/coredns-7c65d6cfc9-p4llr" podStartSLOduration=47.942300732 podStartE2EDuration="47.942300732s" podCreationTimestamp="2025-09-06 00:21:13 +0000 UTC" firstStartedPulling="0001-01-01 00:00:00 +0000 UTC" lastFinishedPulling="0001-01-01 00:00:00 +0000 UTC" observedRunningTime="2025-09-06 00:22:00.892048925 +0000 UTC m=+52.797394960" watchObservedRunningTime="2025-09-06 00:22:00.942300732 +0000 UTC m=+52.847646867" Sep 6 00:22:01.036000 audit[4727]: NETFILTER_CFG table=filter:119 family=2 entries=19 op=nft_register_rule pid=4727 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Sep 6 00:22:01.036000 audit[4727]: SYSCALL arch=c000003e syscall=46 success=yes exit=6736 a0=3 a1=7ffe76f197e0 a2=0 a3=7ffe76f197cc items=0 ppid=2518 pid=4727 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:22:01.036000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Sep 6 00:22:01.044000 audit[4727]: NETFILTER_CFG table=nat:120 family=2 entries=21 op=nft_register_chain pid=4727 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Sep 6 00:22:01.044000 audit[4727]: SYSCALL arch=c000003e syscall=46 success=yes exit=7044 a0=3 a1=7ffe76f197e0 a2=0 a3=7ffe76f197cc items=0 ppid=2518 pid=4727 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:22:01.044000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Sep 6 00:22:01.050000 audit[4725]: NETFILTER_CFG table=filter:121 family=2 entries=64 op=nft_register_chain pid=4725 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Sep 6 00:22:01.050000 audit[4725]: SYSCALL arch=c000003e syscall=46 success=yes exit=31104 a0=3 a1=7fffe696a600 a2=0 a3=7fffe696a5ec items=0 ppid=3701 pid=4725 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:22:01.050000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Sep 6 00:22:01.290183 systemd-networkd[1577]: calibcd2f709e3a: Gained IPv6LL Sep 6 00:22:01.482160 systemd-networkd[1577]: cali0a317fb91e5: Gained IPv6LL Sep 6 00:22:01.610248 systemd-networkd[1577]: cali741cc06a3f3: Gained IPv6LL Sep 6 00:22:01.791512 kubelet[2412]: I0906 00:22:01.791399 2412 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="calico-system/whisker-ccccd4f96-hfwj8" podStartSLOduration=2.546460923 podStartE2EDuration="8.791372972s" podCreationTimestamp="2025-09-06 00:21:53 +0000 UTC" firstStartedPulling="2025-09-06 00:21:53.697893767 +0000 UTC m=+45.603239802" lastFinishedPulling="2025-09-06 00:21:59.942805816 +0000 UTC m=+51.848151851" observedRunningTime="2025-09-06 00:22:00.961598811 +0000 UTC m=+52.866944946" watchObservedRunningTime="2025-09-06 00:22:01.791372972 +0000 UTC m=+53.696719007" Sep 6 00:22:01.930236 systemd-networkd[1577]: caliaa6c45ad637: Gained IPv6LL Sep 6 00:22:02.064000 audit[4731]: NETFILTER_CFG table=filter:122 family=2 entries=15 op=nft_register_rule pid=4731 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Sep 6 00:22:02.064000 audit[4731]: SYSCALL arch=c000003e syscall=46 success=yes exit=4504 a0=3 a1=7ffd343a4fb0 a2=0 a3=7ffd343a4f9c items=0 ppid=2518 pid=4731 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:22:02.064000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Sep 6 00:22:02.330000 audit[4731]: NETFILTER_CFG table=nat:123 family=2 entries=49 op=nft_register_chain pid=4731 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Sep 6 00:22:02.330000 audit[4731]: SYSCALL arch=c000003e syscall=46 success=yes exit=20628 a0=3 a1=7ffd343a4fb0 a2=0 a3=7ffd343a4f9c items=0 ppid=2518 pid=4731 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:22:02.330000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Sep 6 00:22:03.957207 env[1421]: time="2025-09-06T00:22:03.957155755Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/apiserver:v3.30.3,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 6 00:22:03.964033 env[1421]: time="2025-09-06T00:22:03.963986682Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:879f2443aed0573271114108bfec35d3e76419f98282ef796c646d0986c5ba6a,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 6 00:22:03.969252 env[1421]: time="2025-09-06T00:22:03.969210802Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/apiserver:v3.30.3,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 6 00:22:03.973236 env[1421]: time="2025-09-06T00:22:03.973203118Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/apiserver@sha256:6a24147f11c1edce9d6ba79bdb0c2beadec53853fb43438a287291e67b41e51b,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 6 00:22:03.974020 env[1421]: time="2025-09-06T00:22:03.973974721Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/apiserver:v3.30.3\" returns image reference \"sha256:879f2443aed0573271114108bfec35d3e76419f98282ef796c646d0986c5ba6a\"" Sep 6 00:22:03.976875 env[1421]: time="2025-09-06T00:22:03.976838432Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/csi:v3.30.3\"" Sep 6 00:22:03.978052 env[1421]: time="2025-09-06T00:22:03.978020837Z" level=info msg="CreateContainer within sandbox \"31f743b440e1d843931af6b5841bd79143d64437876023cac7c57a804880c849\" for container &ContainerMetadata{Name:calico-apiserver,Attempt:0,}" Sep 6 00:22:04.023329 env[1421]: time="2025-09-06T00:22:04.023270213Z" level=info msg="CreateContainer within sandbox \"31f743b440e1d843931af6b5841bd79143d64437876023cac7c57a804880c849\" for &ContainerMetadata{Name:calico-apiserver,Attempt:0,} returns container id \"7dea000937c611486ff9d0bde59ae1dedb5be536d754781ab2d038e3cdf686ab\"" Sep 6 00:22:04.023981 env[1421]: time="2025-09-06T00:22:04.023914616Z" level=info msg="StartContainer for \"7dea000937c611486ff9d0bde59ae1dedb5be536d754781ab2d038e3cdf686ab\"" Sep 6 00:22:04.057330 systemd[1]: Started cri-containerd-7dea000937c611486ff9d0bde59ae1dedb5be536d754781ab2d038e3cdf686ab.scope. Sep 6 00:22:04.111073 kernel: kauditd_printk_skb: 542 callbacks suppressed Sep 6 00:22:04.111273 kernel: audit: type=1400 audit(1757118124.089:1308): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:04.089000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:04.089000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:04.089000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:04.144266 kernel: audit: type=1400 audit(1757118124.089:1309): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:04.144411 kernel: audit: type=1400 audit(1757118124.089:1310): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:04.089000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:04.162075 kernel: audit: type=1400 audit(1757118124.089:1311): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:04.089000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:04.178588 kernel: audit: type=1400 audit(1757118124.089:1312): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:04.089000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:04.208241 kernel: audit: type=1400 audit(1757118124.089:1313): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:04.208546 kernel: audit: type=1400 audit(1757118124.089:1314): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:04.089000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:04.224240 kernel: audit: type=1400 audit(1757118124.089:1315): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:04.089000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:04.240774 kernel: audit: type=1400 audit(1757118124.089:1316): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:04.089000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:04.126000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:04.260566 kernel: audit: type=1400 audit(1757118124.126:1317): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:04.126000 audit: BPF prog-id=210 op=LOAD Sep 6 00:22:04.131000 audit[4744]: AVC avc: denied { bpf } for pid=4744 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:04.131000 audit[4744]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c0001c5c48 a2=10 a3=1c items=0 ppid=3975 pid=4744 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:22:04.131000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3764656130303039333763363131343836666639643062646535396165 Sep 6 00:22:04.131000 audit[4744]: AVC avc: denied { perfmon } for pid=4744 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:04.131000 audit[4744]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001c56b0 a2=3c a3=8 items=0 ppid=3975 pid=4744 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:22:04.131000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3764656130303039333763363131343836666639643062646535396165 Sep 6 00:22:04.131000 audit[4744]: AVC avc: denied { bpf } for pid=4744 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:04.131000 audit[4744]: AVC avc: denied { bpf } for pid=4744 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:04.131000 audit[4744]: AVC avc: denied { bpf } for pid=4744 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:04.131000 audit[4744]: AVC avc: denied { perfmon } for pid=4744 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:04.131000 audit[4744]: AVC avc: denied { perfmon } for pid=4744 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:04.131000 audit[4744]: AVC avc: denied { perfmon } for pid=4744 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:04.131000 audit[4744]: AVC avc: denied { perfmon } for pid=4744 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:04.131000 audit[4744]: AVC avc: denied { perfmon } for pid=4744 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:04.131000 audit[4744]: AVC avc: denied { bpf } for pid=4744 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:04.131000 audit[4744]: AVC avc: denied { bpf } for pid=4744 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:04.131000 audit: BPF prog-id=211 op=LOAD Sep 6 00:22:04.131000 audit[4744]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001c59d8 a2=78 a3=c0002dd000 items=0 ppid=3975 pid=4744 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:22:04.131000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3764656130303039333763363131343836666639643062646535396165 Sep 6 00:22:04.148000 audit[4744]: AVC avc: denied { bpf } for pid=4744 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:04.148000 audit[4744]: AVC avc: denied { bpf } for pid=4744 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:04.148000 audit[4744]: AVC avc: denied { perfmon } for pid=4744 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:04.148000 audit[4744]: AVC avc: denied { perfmon } for pid=4744 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:04.148000 audit[4744]: AVC avc: denied { perfmon } for pid=4744 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:04.148000 audit[4744]: AVC avc: denied { perfmon } for pid=4744 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:04.148000 audit[4744]: AVC avc: denied { perfmon } for pid=4744 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:04.148000 audit[4744]: AVC avc: denied { bpf } for pid=4744 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:04.148000 audit[4744]: AVC avc: denied { bpf } for pid=4744 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:04.148000 audit: BPF prog-id=212 op=LOAD Sep 6 00:22:04.148000 audit[4744]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c0001c5770 a2=78 a3=c0002dd048 items=0 ppid=3975 pid=4744 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:22:04.148000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3764656130303039333763363131343836666639643062646535396165 Sep 6 00:22:04.160000 audit: BPF prog-id=212 op=UNLOAD Sep 6 00:22:04.160000 audit: BPF prog-id=211 op=UNLOAD Sep 6 00:22:04.161000 audit[4744]: AVC avc: denied { bpf } for pid=4744 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:04.161000 audit[4744]: AVC avc: denied { bpf } for pid=4744 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:04.161000 audit[4744]: AVC avc: denied { bpf } for pid=4744 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:04.161000 audit[4744]: AVC avc: denied { perfmon } for pid=4744 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:04.161000 audit[4744]: AVC avc: denied { perfmon } for pid=4744 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:04.161000 audit[4744]: AVC avc: denied { perfmon } for pid=4744 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:04.161000 audit[4744]: AVC avc: denied { perfmon } for pid=4744 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:04.161000 audit[4744]: AVC avc: denied { perfmon } for pid=4744 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:04.161000 audit[4744]: AVC avc: denied { bpf } for pid=4744 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:04.161000 audit[4744]: AVC avc: denied { bpf } for pid=4744 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:04.161000 audit: BPF prog-id=213 op=LOAD Sep 6 00:22:04.161000 audit[4744]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001c5c30 a2=78 a3=c0002dd458 items=0 ppid=3975 pid=4744 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:22:04.161000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3764656130303039333763363131343836666639643062646535396165 Sep 6 00:22:04.273000 audit[2289]: AVC avc: denied { watch } for pid=2289 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=520964 scontext=system_u:system_r:svirt_lxc_net_t:s0:c221,c330 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Sep 6 00:22:04.273000 audit[2289]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=9 a1=c000b1a7e0 a2=fc6 a3=0 items=0 ppid=2140 pid=2289 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c221,c330 key=(null) Sep 6 00:22:04.273000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Sep 6 00:22:04.274000 audit[2289]: AVC avc: denied { watch } for pid=2289 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=520970 scontext=system_u:system_r:svirt_lxc_net_t:s0:c221,c330 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Sep 6 00:22:04.274000 audit[2289]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=9 a1=c00115a9f0 a2=fc6 a3=0 items=0 ppid=2140 pid=2289 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c221,c330 key=(null) Sep 6 00:22:04.274000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Sep 6 00:22:04.278212 env[1421]: time="2025-09-06T00:22:04.278160198Z" level=info msg="StartContainer for \"7dea000937c611486ff9d0bde59ae1dedb5be536d754781ab2d038e3cdf686ab\" returns successfully" Sep 6 00:22:04.807618 kubelet[2412]: I0906 00:22:04.807540 2412 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="calico-apiserver/calico-apiserver-6575dd5656-clp7v" podStartSLOduration=32.722236523 podStartE2EDuration="40.807514942s" podCreationTimestamp="2025-09-06 00:21:24 +0000 UTC" firstStartedPulling="2025-09-06 00:21:55.890518409 +0000 UTC m=+47.795864444" lastFinishedPulling="2025-09-06 00:22:03.975796728 +0000 UTC m=+55.881142863" observedRunningTime="2025-09-06 00:22:04.805649435 +0000 UTC m=+56.710995570" watchObservedRunningTime="2025-09-06 00:22:04.807514942 +0000 UTC m=+56.712860977" Sep 6 00:22:04.844000 audit[4776]: NETFILTER_CFG table=filter:124 family=2 entries=12 op=nft_register_rule pid=4776 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Sep 6 00:22:04.844000 audit[4776]: SYSCALL arch=c000003e syscall=46 success=yes exit=4504 a0=3 a1=7ffdabd64c50 a2=0 a3=7ffdabd64c3c items=0 ppid=2518 pid=4776 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:22:04.844000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Sep 6 00:22:04.849000 audit[4776]: NETFILTER_CFG table=nat:125 family=2 entries=22 op=nft_register_rule pid=4776 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Sep 6 00:22:04.849000 audit[4776]: SYSCALL arch=c000003e syscall=46 success=yes exit=6540 a0=3 a1=7ffdabd64c50 a2=0 a3=7ffdabd64c3c items=0 ppid=2518 pid=4776 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:22:04.849000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Sep 6 00:22:04.878000 audit[2265]: AVC avc: denied { watch } for pid=2265 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=520970 scontext=system_u:system_r:svirt_lxc_net_t:s0:c452,c579 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Sep 6 00:22:04.878000 audit[2265]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=6f a1=c007b3f620 a2=fc6 a3=0 items=0 ppid=2121 pid=2265 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c452,c579 key=(null) Sep 6 00:22:04.878000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E382E3338002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265 Sep 6 00:22:04.878000 audit[2265]: AVC avc: denied { watch } for pid=2265 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=520964 scontext=system_u:system_r:svirt_lxc_net_t:s0:c452,c579 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Sep 6 00:22:04.878000 audit[2265]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=6f a1=c009e3d480 a2=fc6 a3=0 items=0 ppid=2121 pid=2265 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c452,c579 key=(null) Sep 6 00:22:04.878000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E382E3338002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265 Sep 6 00:22:04.878000 audit[2265]: AVC avc: denied { watch } for pid=2265 comm="kube-apiserver" path="/etc/kubernetes/pki/apiserver.crt" dev="sda9" ino=520966 scontext=system_u:system_r:svirt_lxc_net_t:s0:c452,c579 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Sep 6 00:22:04.878000 audit[2265]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=6f a1=c007b3f650 a2=fc6 a3=0 items=0 ppid=2121 pid=2265 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c452,c579 key=(null) Sep 6 00:22:04.878000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E382E3338002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265 Sep 6 00:22:04.880000 audit[2265]: AVC avc: denied { watch } for pid=2265 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-client.crt" dev="sda9" ino=520972 scontext=system_u:system_r:svirt_lxc_net_t:s0:c452,c579 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Sep 6 00:22:04.880000 audit[2265]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=6f a1=c00a4cbfb0 a2=fc6 a3=0 items=0 ppid=2121 pid=2265 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c452,c579 key=(null) Sep 6 00:22:04.880000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E382E3338002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265 Sep 6 00:22:04.898000 audit[2265]: AVC avc: denied { watch } for pid=2265 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=520964 scontext=system_u:system_r:svirt_lxc_net_t:s0:c452,c579 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Sep 6 00:22:04.898000 audit[2265]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=6f a1=c007973200 a2=fc6 a3=0 items=0 ppid=2121 pid=2265 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c452,c579 key=(null) Sep 6 00:22:04.898000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E382E3338002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265 Sep 6 00:22:04.898000 audit[2265]: AVC avc: denied { watch } for pid=2265 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=520970 scontext=system_u:system_r:svirt_lxc_net_t:s0:c452,c579 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Sep 6 00:22:04.898000 audit[2265]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=6f a1=c004230990 a2=fc6 a3=0 items=0 ppid=2121 pid=2265 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c452,c579 key=(null) Sep 6 00:22:04.898000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E382E3338002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265 Sep 6 00:22:05.782160 kubelet[2412]: I0906 00:22:05.782061 2412 prober_manager.go:312] "Failed to trigger a manual run" probe="Readiness" Sep 6 00:22:06.231000 audit[4753]: AVC avc: denied { watch } for pid=4753 comm="apiserver" path="/calico-apiserver-certs/..2025_09_06_00_21_42.3164157005/tls.crt" dev="tmpfs" ino=4 scontext=system_u:system_r:svirt_lxc_net_t:s0:c416,c590 tcontext=system_u:object_r:svirt_lxc_file_t:s0:c416,c590 tclass=file permissive=0 Sep 6 00:22:06.231000 audit[4753]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=7 a1=c001014840 a2=fc6 a3=0 items=0 ppid=3975 pid=4753 auid=4294967295 uid=10001 gid=10001 euid=10001 suid=10001 fsuid=10001 egid=10001 sgid=10001 fsgid=10001 tty=(none) ses=4294967295 comm="apiserver" exe="/code/apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c416,c590 key=(null) Sep 6 00:22:06.231000 audit: PROCTITLE proctitle=2F636F64652F617069736572766572002D2D7365637572652D706F72743D35343433002D2D746C732D707269766174652D6B65792D66696C653D2F63616C69636F2D6170697365727665722D63657274732F746C732E6B6579002D2D746C732D636572742D66696C653D2F63616C69636F2D6170697365727665722D63657274 Sep 6 00:22:06.913694 env[1421]: time="2025-09-06T00:22:06.913627815Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/csi:v3.30.3,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 6 00:22:06.923578 env[1421]: time="2025-09-06T00:22:06.923521552Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:666f4e02e75c30547109a06ed75b415a990a970811173aa741379cfaac4d9dd7,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 6 00:22:06.929034 env[1421]: time="2025-09-06T00:22:06.928990973Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/csi:v3.30.3,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 6 00:22:06.934116 env[1421]: time="2025-09-06T00:22:06.934068292Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/csi@sha256:f22c88018d8b58c4ef0052f594b216a13bd6852166ac131a538c5ab2fba23bb2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 6 00:22:06.934902 env[1421]: time="2025-09-06T00:22:06.934860495Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/csi:v3.30.3\" returns image reference \"sha256:666f4e02e75c30547109a06ed75b415a990a970811173aa741379cfaac4d9dd7\"" Sep 6 00:22:06.937560 env[1421]: time="2025-09-06T00:22:06.937518904Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/apiserver:v3.30.3\"" Sep 6 00:22:06.938563 env[1421]: time="2025-09-06T00:22:06.938527108Z" level=info msg="CreateContainer within sandbox \"242b8628b28a14020a4862b19eb09c9477d5c1269c192eab8d02f1670cf18060\" for container &ContainerMetadata{Name:calico-csi,Attempt:0,}" Sep 6 00:22:06.990353 env[1421]: time="2025-09-06T00:22:06.990281402Z" level=info msg="CreateContainer within sandbox \"242b8628b28a14020a4862b19eb09c9477d5c1269c192eab8d02f1670cf18060\" for &ContainerMetadata{Name:calico-csi,Attempt:0,} returns container id \"1d59e6327b2633afbb4cbe6ca3e46f0bffdfe44293bf9ea4e4c4b419e6e9f0d0\"" Sep 6 00:22:06.991224 env[1421]: time="2025-09-06T00:22:06.991181806Z" level=info msg="StartContainer for \"1d59e6327b2633afbb4cbe6ca3e46f0bffdfe44293bf9ea4e4c4b419e6e9f0d0\"" Sep 6 00:22:07.035862 systemd[1]: run-containerd-runc-k8s.io-1d59e6327b2633afbb4cbe6ca3e46f0bffdfe44293bf9ea4e4c4b419e6e9f0d0-runc.KVOTJj.mount: Deactivated successfully. Sep 6 00:22:07.043288 systemd[1]: Started cri-containerd-1d59e6327b2633afbb4cbe6ca3e46f0bffdfe44293bf9ea4e4c4b419e6e9f0d0.scope. Sep 6 00:22:07.158000 audit[4793]: AVC avc: denied { perfmon } for pid=4793 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:07.158000 audit[4793]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=0 a1=c0001c56b0 a2=3c a3=7f961cca17c8 items=0 ppid=4153 pid=4793 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:22:07.158000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3164353965363332376232363333616662623463626536636133653436 Sep 6 00:22:07.159000 audit[4793]: AVC avc: denied { bpf } for pid=4793 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:07.159000 audit[4793]: AVC avc: denied { bpf } for pid=4793 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:07.159000 audit[4793]: AVC avc: denied { bpf } for pid=4793 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:07.159000 audit[4793]: AVC avc: denied { perfmon } for pid=4793 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:07.159000 audit[4793]: AVC avc: denied { perfmon } for pid=4793 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:07.159000 audit[4793]: AVC avc: denied { perfmon } for pid=4793 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:07.159000 audit[4793]: AVC avc: denied { perfmon } for pid=4793 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:07.159000 audit[4793]: AVC avc: denied { perfmon } for pid=4793 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:07.159000 audit[4793]: AVC avc: denied { bpf } for pid=4793 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:07.159000 audit[4793]: AVC avc: denied { bpf } for pid=4793 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:07.159000 audit: BPF prog-id=214 op=LOAD Sep 6 00:22:07.159000 audit[4793]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c0001c59d8 a2=78 a3=c0002b1d98 items=0 ppid=4153 pid=4793 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:22:07.159000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3164353965363332376232363333616662623463626536636133653436 Sep 6 00:22:07.159000 audit[4793]: AVC avc: denied { bpf } for pid=4793 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:07.159000 audit[4793]: AVC avc: denied { bpf } for pid=4793 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:07.159000 audit[4793]: AVC avc: denied { perfmon } for pid=4793 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:07.159000 audit[4793]: AVC avc: denied { perfmon } for pid=4793 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:07.159000 audit[4793]: AVC avc: denied { perfmon } for pid=4793 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:07.159000 audit[4793]: AVC avc: denied { perfmon } for pid=4793 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:07.159000 audit[4793]: AVC avc: denied { perfmon } for pid=4793 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:07.159000 audit[4793]: AVC avc: denied { bpf } for pid=4793 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:07.159000 audit[4793]: AVC avc: denied { bpf } for pid=4793 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:07.159000 audit: BPF prog-id=215 op=LOAD Sep 6 00:22:07.159000 audit[4793]: SYSCALL arch=c000003e syscall=321 success=yes exit=17 a0=5 a1=c0001c5770 a2=78 a3=c0002b1de8 items=0 ppid=4153 pid=4793 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:22:07.159000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3164353965363332376232363333616662623463626536636133653436 Sep 6 00:22:07.159000 audit: BPF prog-id=215 op=UNLOAD Sep 6 00:22:07.159000 audit: BPF prog-id=214 op=UNLOAD Sep 6 00:22:07.159000 audit[4793]: AVC avc: denied { bpf } for pid=4793 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:07.159000 audit[4793]: AVC avc: denied { bpf } for pid=4793 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:07.159000 audit[4793]: AVC avc: denied { bpf } for pid=4793 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:07.159000 audit[4793]: AVC avc: denied { perfmon } for pid=4793 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:07.159000 audit[4793]: AVC avc: denied { perfmon } for pid=4793 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:07.159000 audit[4793]: AVC avc: denied { perfmon } for pid=4793 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:07.159000 audit[4793]: AVC avc: denied { perfmon } for pid=4793 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:07.159000 audit[4793]: AVC avc: denied { perfmon } for pid=4793 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:07.159000 audit[4793]: AVC avc: denied { bpf } for pid=4793 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:07.159000 audit[4793]: AVC avc: denied { bpf } for pid=4793 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:07.159000 audit: BPF prog-id=216 op=LOAD Sep 6 00:22:07.159000 audit[4793]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c0001c5c30 a2=78 a3=c0002b1e78 items=0 ppid=4153 pid=4793 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:22:07.159000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3164353965363332376232363333616662623463626536636133653436 Sep 6 00:22:07.184653 env[1421]: time="2025-09-06T00:22:07.184509120Z" level=info msg="StartContainer for \"1d59e6327b2633afbb4cbe6ca3e46f0bffdfe44293bf9ea4e4c4b419e6e9f0d0\" returns successfully" Sep 6 00:22:07.258978 env[1421]: time="2025-09-06T00:22:07.257677091Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/apiserver:v3.30.3,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 6 00:22:07.267033 env[1421]: time="2025-09-06T00:22:07.266986625Z" level=info msg="ImageUpdate event &ImageUpdate{Name:sha256:879f2443aed0573271114108bfec35d3e76419f98282ef796c646d0986c5ba6a,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 6 00:22:07.274308 env[1421]: time="2025-09-06T00:22:07.274259852Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/apiserver:v3.30.3,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 6 00:22:07.279767 env[1421]: time="2025-09-06T00:22:07.279638272Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/apiserver@sha256:6a24147f11c1edce9d6ba79bdb0c2beadec53853fb43438a287291e67b41e51b,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 6 00:22:07.280019 env[1421]: time="2025-09-06T00:22:07.279983573Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/apiserver:v3.30.3\" returns image reference \"sha256:879f2443aed0573271114108bfec35d3e76419f98282ef796c646d0986c5ba6a\"" Sep 6 00:22:07.282205 env[1421]: time="2025-09-06T00:22:07.282176581Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/kube-controllers:v3.30.3\"" Sep 6 00:22:07.283339 env[1421]: time="2025-09-06T00:22:07.283310085Z" level=info msg="CreateContainer within sandbox \"8dc460b79c3b205c960cf91edc8f210a083b115257c217486a6de4e543579891\" for container &ContainerMetadata{Name:calico-apiserver,Attempt:0,}" Sep 6 00:22:07.327102 env[1421]: time="2025-09-06T00:22:07.327041047Z" level=info msg="CreateContainer within sandbox \"8dc460b79c3b205c960cf91edc8f210a083b115257c217486a6de4e543579891\" for &ContainerMetadata{Name:calico-apiserver,Attempt:0,} returns container id \"4cdf58f5c4c94fa66c83901b8e0ac1b09ef914a426534c21d41d8c4b0f58af43\"" Sep 6 00:22:07.328280 env[1421]: time="2025-09-06T00:22:07.328243351Z" level=info msg="StartContainer for \"4cdf58f5c4c94fa66c83901b8e0ac1b09ef914a426534c21d41d8c4b0f58af43\"" Sep 6 00:22:07.352479 systemd[1]: Started cri-containerd-4cdf58f5c4c94fa66c83901b8e0ac1b09ef914a426534c21d41d8c4b0f58af43.scope. Sep 6 00:22:07.377000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:07.377000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:07.377000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:07.377000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:07.377000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:07.377000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:07.377000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:07.377000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:07.377000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:07.377000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:07.377000 audit: BPF prog-id=217 op=LOAD Sep 6 00:22:07.379000 audit[4825]: AVC avc: denied { bpf } for pid=4825 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:07.379000 audit[4825]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000151c48 a2=10 a3=1c items=0 ppid=4187 pid=4825 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:22:07.379000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3463646635386635633463393466613636633833393031623865306163 Sep 6 00:22:07.379000 audit[4825]: AVC avc: denied { perfmon } for pid=4825 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:07.379000 audit[4825]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001516b0 a2=3c a3=8 items=0 ppid=4187 pid=4825 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:22:07.379000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3463646635386635633463393466613636633833393031623865306163 Sep 6 00:22:07.380000 audit[4825]: AVC avc: denied { bpf } for pid=4825 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:07.380000 audit[4825]: AVC avc: denied { bpf } for pid=4825 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:07.380000 audit[4825]: AVC avc: denied { bpf } for pid=4825 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:07.380000 audit[4825]: AVC avc: denied { perfmon } for pid=4825 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:07.380000 audit[4825]: AVC avc: denied { perfmon } for pid=4825 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:07.380000 audit[4825]: AVC avc: denied { perfmon } for pid=4825 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:07.380000 audit[4825]: AVC avc: denied { perfmon } for pid=4825 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:07.380000 audit[4825]: AVC avc: denied { perfmon } for pid=4825 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:07.380000 audit[4825]: AVC avc: denied { bpf } for pid=4825 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:07.380000 audit[4825]: AVC avc: denied { bpf } for pid=4825 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:07.380000 audit: BPF prog-id=218 op=LOAD Sep 6 00:22:07.380000 audit[4825]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001519d8 a2=78 a3=c000349cf0 items=0 ppid=4187 pid=4825 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:22:07.380000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3463646635386635633463393466613636633833393031623865306163 Sep 6 00:22:07.380000 audit[4825]: AVC avc: denied { bpf } for pid=4825 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:07.380000 audit[4825]: AVC avc: denied { bpf } for pid=4825 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:07.380000 audit[4825]: AVC avc: denied { perfmon } for pid=4825 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:07.380000 audit[4825]: AVC avc: denied { perfmon } for pid=4825 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:07.380000 audit[4825]: AVC avc: denied { perfmon } for pid=4825 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:07.380000 audit[4825]: AVC avc: denied { perfmon } for pid=4825 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:07.380000 audit[4825]: AVC avc: denied { perfmon } for pid=4825 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:07.380000 audit[4825]: AVC avc: denied { bpf } for pid=4825 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:07.380000 audit[4825]: AVC avc: denied { bpf } for pid=4825 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:07.380000 audit: BPF prog-id=219 op=LOAD Sep 6 00:22:07.380000 audit[4825]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000151770 a2=78 a3=c000349d38 items=0 ppid=4187 pid=4825 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:22:07.380000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3463646635386635633463393466613636633833393031623865306163 Sep 6 00:22:07.381000 audit: BPF prog-id=219 op=UNLOAD Sep 6 00:22:07.381000 audit: BPF prog-id=218 op=UNLOAD Sep 6 00:22:07.381000 audit[4825]: AVC avc: denied { bpf } for pid=4825 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:07.381000 audit[4825]: AVC avc: denied { bpf } for pid=4825 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:07.381000 audit[4825]: AVC avc: denied { bpf } for pid=4825 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:07.381000 audit[4825]: AVC avc: denied { perfmon } for pid=4825 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:07.381000 audit[4825]: AVC avc: denied { perfmon } for pid=4825 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:07.381000 audit[4825]: AVC avc: denied { perfmon } for pid=4825 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:07.381000 audit[4825]: AVC avc: denied { perfmon } for pid=4825 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:07.381000 audit[4825]: AVC avc: denied { perfmon } for pid=4825 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:07.381000 audit[4825]: AVC avc: denied { bpf } for pid=4825 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:07.381000 audit[4825]: AVC avc: denied { bpf } for pid=4825 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:07.381000 audit: BPF prog-id=220 op=LOAD Sep 6 00:22:07.381000 audit[4825]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000151c30 a2=78 a3=c0003c0148 items=0 ppid=4187 pid=4825 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:22:07.381000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3463646635386635633463393466613636633833393031623865306163 Sep 6 00:22:07.429565 env[1421]: time="2025-09-06T00:22:07.429494425Z" level=info msg="StartContainer for \"4cdf58f5c4c94fa66c83901b8e0ac1b09ef914a426534c21d41d8c4b0f58af43\" returns successfully" Sep 6 00:22:07.824000 audit[2289]: AVC avc: denied { watch } for pid=2289 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=520964 scontext=system_u:system_r:svirt_lxc_net_t:s0:c221,c330 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Sep 6 00:22:07.824000 audit[2289]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c000b1bae0 a2=fc6 a3=0 items=0 ppid=2140 pid=2289 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c221,c330 key=(null) Sep 6 00:22:07.824000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Sep 6 00:22:07.825000 audit[2289]: AVC avc: denied { watch } for pid=2289 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=520964 scontext=system_u:system_r:svirt_lxc_net_t:s0:c221,c330 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Sep 6 00:22:07.825000 audit[2289]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c000b1bb20 a2=fc6 a3=0 items=0 ppid=2140 pid=2289 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c221,c330 key=(null) Sep 6 00:22:07.825000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Sep 6 00:22:07.825000 audit[2289]: AVC avc: denied { watch } for pid=2289 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=520964 scontext=system_u:system_r:svirt_lxc_net_t:s0:c221,c330 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Sep 6 00:22:07.825000 audit[2289]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=9 a1=c000f12a00 a2=fc6 a3=0 items=0 ppid=2140 pid=2289 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c221,c330 key=(null) Sep 6 00:22:07.825000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Sep 6 00:22:07.825000 audit[2289]: AVC avc: denied { watch } for pid=2289 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=520964 scontext=system_u:system_r:svirt_lxc_net_t:s0:c221,c330 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Sep 6 00:22:07.825000 audit[2289]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=9 a1=c000f12a60 a2=fc6 a3=0 items=0 ppid=2140 pid=2289 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c221,c330 key=(null) Sep 6 00:22:07.825000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Sep 6 00:22:07.868000 audit[4858]: NETFILTER_CFG table=filter:126 family=2 entries=12 op=nft_register_rule pid=4858 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Sep 6 00:22:07.868000 audit[4858]: SYSCALL arch=c000003e syscall=46 success=yes exit=4504 a0=3 a1=7ffc3e266040 a2=0 a3=7ffc3e26602c items=0 ppid=2518 pid=4858 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:22:07.868000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Sep 6 00:22:07.870000 audit[4858]: NETFILTER_CFG table=nat:127 family=2 entries=22 op=nft_register_rule pid=4858 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Sep 6 00:22:07.870000 audit[4858]: SYSCALL arch=c000003e syscall=46 success=yes exit=6540 a0=3 a1=7ffc3e266040 a2=0 a3=7ffc3e26602c items=0 ppid=2518 pid=4858 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:22:07.870000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Sep 6 00:22:08.506567 env[1421]: time="2025-09-06T00:22:08.506513277Z" level=info msg="StopPodSandbox for \"7ecfcce7d298cb044eef6631149c2b267bd7e716e7909658645cca69f1a75612\"" Sep 6 00:22:08.661764 env[1421]: 2025-09-06 00:22:08.595 [WARNING][4869] cni-plugin/k8s.go 604: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="7ecfcce7d298cb044eef6631149c2b267bd7e716e7909658645cca69f1a75612" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ci--3510.3.8--n--28804d0655-k8s-calico--kube--controllers--7b6d9948b6--pwxnb-eth0", GenerateName:"calico-kube-controllers-7b6d9948b6-", Namespace:"calico-system", SelfLink:"", UID:"61e1e8a3-7e08-42e4-a4e0-f10c5e1b1879", ResourceVersion:"988", Generation:0, CreationTimestamp:time.Date(2025, time.September, 6, 0, 21, 28, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"calico-kube-controllers", "k8s-app":"calico-kube-controllers", "pod-template-hash":"7b6d9948b6", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-kube-controllers"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ci-3510.3.8-n-28804d0655", ContainerID:"f999929bb9810ce86cf66144cdb5da08e1f850a8e7c7ae0fe2ff1f267a7012a6", Pod:"calico-kube-controllers-7b6d9948b6-pwxnb", Endpoint:"eth0", ServiceAccountName:"calico-kube-controllers", IPNetworks:[]string{"192.168.107.69/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.calico-kube-controllers"}, InterfaceName:"calibcd2f709e3a", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Sep 6 00:22:08.661764 env[1421]: 2025-09-06 00:22:08.595 [INFO][4869] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="7ecfcce7d298cb044eef6631149c2b267bd7e716e7909658645cca69f1a75612" Sep 6 00:22:08.661764 env[1421]: 2025-09-06 00:22:08.595 [INFO][4869] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="7ecfcce7d298cb044eef6631149c2b267bd7e716e7909658645cca69f1a75612" iface="eth0" netns="" Sep 6 00:22:08.661764 env[1421]: 2025-09-06 00:22:08.595 [INFO][4869] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="7ecfcce7d298cb044eef6631149c2b267bd7e716e7909658645cca69f1a75612" Sep 6 00:22:08.661764 env[1421]: 2025-09-06 00:22:08.595 [INFO][4869] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="7ecfcce7d298cb044eef6631149c2b267bd7e716e7909658645cca69f1a75612" Sep 6 00:22:08.661764 env[1421]: 2025-09-06 00:22:08.645 [INFO][4876] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="7ecfcce7d298cb044eef6631149c2b267bd7e716e7909658645cca69f1a75612" HandleID="k8s-pod-network.7ecfcce7d298cb044eef6631149c2b267bd7e716e7909658645cca69f1a75612" Workload="ci--3510.3.8--n--28804d0655-k8s-calico--kube--controllers--7b6d9948b6--pwxnb-eth0" Sep 6 00:22:08.661764 env[1421]: 2025-09-06 00:22:08.645 [INFO][4876] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Sep 6 00:22:08.661764 env[1421]: 2025-09-06 00:22:08.645 [INFO][4876] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Sep 6 00:22:08.661764 env[1421]: 2025-09-06 00:22:08.656 [WARNING][4876] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="7ecfcce7d298cb044eef6631149c2b267bd7e716e7909658645cca69f1a75612" HandleID="k8s-pod-network.7ecfcce7d298cb044eef6631149c2b267bd7e716e7909658645cca69f1a75612" Workload="ci--3510.3.8--n--28804d0655-k8s-calico--kube--controllers--7b6d9948b6--pwxnb-eth0" Sep 6 00:22:08.661764 env[1421]: 2025-09-06 00:22:08.656 [INFO][4876] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="7ecfcce7d298cb044eef6631149c2b267bd7e716e7909658645cca69f1a75612" HandleID="k8s-pod-network.7ecfcce7d298cb044eef6631149c2b267bd7e716e7909658645cca69f1a75612" Workload="ci--3510.3.8--n--28804d0655-k8s-calico--kube--controllers--7b6d9948b6--pwxnb-eth0" Sep 6 00:22:08.661764 env[1421]: 2025-09-06 00:22:08.658 [INFO][4876] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Sep 6 00:22:08.661764 env[1421]: 2025-09-06 00:22:08.660 [INFO][4869] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="7ecfcce7d298cb044eef6631149c2b267bd7e716e7909658645cca69f1a75612" Sep 6 00:22:08.662688 env[1421]: time="2025-09-06T00:22:08.662630146Z" level=info msg="TearDown network for sandbox \"7ecfcce7d298cb044eef6631149c2b267bd7e716e7909658645cca69f1a75612\" successfully" Sep 6 00:22:08.662801 env[1421]: time="2025-09-06T00:22:08.662782346Z" level=info msg="StopPodSandbox for \"7ecfcce7d298cb044eef6631149c2b267bd7e716e7909658645cca69f1a75612\" returns successfully" Sep 6 00:22:08.663636 env[1421]: time="2025-09-06T00:22:08.663601949Z" level=info msg="RemovePodSandbox for \"7ecfcce7d298cb044eef6631149c2b267bd7e716e7909658645cca69f1a75612\"" Sep 6 00:22:08.663825 env[1421]: time="2025-09-06T00:22:08.663768650Z" level=info msg="Forcibly stopping sandbox \"7ecfcce7d298cb044eef6631149c2b267bd7e716e7909658645cca69f1a75612\"" Sep 6 00:22:08.810413 env[1421]: 2025-09-06 00:22:08.740 [WARNING][4891] cni-plugin/k8s.go 604: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="7ecfcce7d298cb044eef6631149c2b267bd7e716e7909658645cca69f1a75612" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ci--3510.3.8--n--28804d0655-k8s-calico--kube--controllers--7b6d9948b6--pwxnb-eth0", GenerateName:"calico-kube-controllers-7b6d9948b6-", Namespace:"calico-system", SelfLink:"", UID:"61e1e8a3-7e08-42e4-a4e0-f10c5e1b1879", ResourceVersion:"988", Generation:0, CreationTimestamp:time.Date(2025, time.September, 6, 0, 21, 28, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"calico-kube-controllers", "k8s-app":"calico-kube-controllers", "pod-template-hash":"7b6d9948b6", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-kube-controllers"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ci-3510.3.8-n-28804d0655", ContainerID:"f999929bb9810ce86cf66144cdb5da08e1f850a8e7c7ae0fe2ff1f267a7012a6", Pod:"calico-kube-controllers-7b6d9948b6-pwxnb", Endpoint:"eth0", ServiceAccountName:"calico-kube-controllers", IPNetworks:[]string{"192.168.107.69/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.calico-kube-controllers"}, InterfaceName:"calibcd2f709e3a", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Sep 6 00:22:08.810413 env[1421]: 2025-09-06 00:22:08.740 [INFO][4891] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="7ecfcce7d298cb044eef6631149c2b267bd7e716e7909658645cca69f1a75612" Sep 6 00:22:08.810413 env[1421]: 2025-09-06 00:22:08.741 [INFO][4891] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="7ecfcce7d298cb044eef6631149c2b267bd7e716e7909658645cca69f1a75612" iface="eth0" netns="" Sep 6 00:22:08.810413 env[1421]: 2025-09-06 00:22:08.741 [INFO][4891] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="7ecfcce7d298cb044eef6631149c2b267bd7e716e7909658645cca69f1a75612" Sep 6 00:22:08.810413 env[1421]: 2025-09-06 00:22:08.741 [INFO][4891] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="7ecfcce7d298cb044eef6631149c2b267bd7e716e7909658645cca69f1a75612" Sep 6 00:22:08.810413 env[1421]: 2025-09-06 00:22:08.793 [INFO][4898] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="7ecfcce7d298cb044eef6631149c2b267bd7e716e7909658645cca69f1a75612" HandleID="k8s-pod-network.7ecfcce7d298cb044eef6631149c2b267bd7e716e7909658645cca69f1a75612" Workload="ci--3510.3.8--n--28804d0655-k8s-calico--kube--controllers--7b6d9948b6--pwxnb-eth0" Sep 6 00:22:08.810413 env[1421]: 2025-09-06 00:22:08.793 [INFO][4898] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Sep 6 00:22:08.810413 env[1421]: 2025-09-06 00:22:08.793 [INFO][4898] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Sep 6 00:22:08.810413 env[1421]: 2025-09-06 00:22:08.804 [WARNING][4898] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="7ecfcce7d298cb044eef6631149c2b267bd7e716e7909658645cca69f1a75612" HandleID="k8s-pod-network.7ecfcce7d298cb044eef6631149c2b267bd7e716e7909658645cca69f1a75612" Workload="ci--3510.3.8--n--28804d0655-k8s-calico--kube--controllers--7b6d9948b6--pwxnb-eth0" Sep 6 00:22:08.810413 env[1421]: 2025-09-06 00:22:08.804 [INFO][4898] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="7ecfcce7d298cb044eef6631149c2b267bd7e716e7909658645cca69f1a75612" HandleID="k8s-pod-network.7ecfcce7d298cb044eef6631149c2b267bd7e716e7909658645cca69f1a75612" Workload="ci--3510.3.8--n--28804d0655-k8s-calico--kube--controllers--7b6d9948b6--pwxnb-eth0" Sep 6 00:22:08.810413 env[1421]: 2025-09-06 00:22:08.806 [INFO][4898] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Sep 6 00:22:08.810413 env[1421]: 2025-09-06 00:22:08.807 [INFO][4891] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="7ecfcce7d298cb044eef6631149c2b267bd7e716e7909658645cca69f1a75612" Sep 6 00:22:08.811249 env[1421]: time="2025-09-06T00:22:08.811189487Z" level=info msg="TearDown network for sandbox \"7ecfcce7d298cb044eef6631149c2b267bd7e716e7909658645cca69f1a75612\" successfully" Sep 6 00:22:08.819956 kubelet[2412]: I0906 00:22:08.819362 2412 prober_manager.go:312] "Failed to trigger a manual run" probe="Readiness" Sep 6 00:22:08.824691 env[1421]: time="2025-09-06T00:22:08.824602935Z" level=info msg="RemovePodSandbox \"7ecfcce7d298cb044eef6631149c2b267bd7e716e7909658645cca69f1a75612\" returns successfully" Sep 6 00:22:08.825653 env[1421]: time="2025-09-06T00:22:08.825621439Z" level=info msg="StopPodSandbox for \"b5644ce4823a63550a6c868ef6f1dba43b75cd58696ab1201a167f45cf216c86\"" Sep 6 00:22:09.094223 env[1421]: 2025-09-06 00:22:08.969 [WARNING][4913] cni-plugin/k8s.go 604: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="b5644ce4823a63550a6c868ef6f1dba43b75cd58696ab1201a167f45cf216c86" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ci--3510.3.8--n--28804d0655-k8s-coredns--7c65d6cfc9--kwxlj-eth0", GenerateName:"coredns-7c65d6cfc9-", Namespace:"kube-system", SelfLink:"", UID:"bec1259e-53c8-4839-b58b-5ed97b75b668", ResourceVersion:"1036", Generation:0, CreationTimestamp:time.Date(2025, time.September, 6, 0, 21, 13, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"k8s-app":"kube-dns", "pod-template-hash":"7c65d6cfc9", "projectcalico.org/namespace":"kube-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"coredns"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ci-3510.3.8-n-28804d0655", ContainerID:"4ed9a152fdd557580f0987a0c1903011ac946a179594ca611c4b8104d1f85930", Pod:"coredns-7c65d6cfc9-kwxlj", Endpoint:"eth0", ServiceAccountName:"coredns", IPNetworks:[]string{"192.168.107.71/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.kube-system", "ksa.kube-system.coredns"}, InterfaceName:"cali0a317fb91e5", MAC:"", Ports:[]v3.WorkloadEndpointPort{v3.WorkloadEndpointPort{Name:"dns", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"UDP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"dns-tcp", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"metrics", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x23c1, HostPort:0x0, HostIP:""}}, AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Sep 6 00:22:09.094223 env[1421]: 2025-09-06 00:22:08.969 [INFO][4913] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="b5644ce4823a63550a6c868ef6f1dba43b75cd58696ab1201a167f45cf216c86" Sep 6 00:22:09.094223 env[1421]: 2025-09-06 00:22:08.969 [INFO][4913] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="b5644ce4823a63550a6c868ef6f1dba43b75cd58696ab1201a167f45cf216c86" iface="eth0" netns="" Sep 6 00:22:09.094223 env[1421]: 2025-09-06 00:22:08.969 [INFO][4913] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="b5644ce4823a63550a6c868ef6f1dba43b75cd58696ab1201a167f45cf216c86" Sep 6 00:22:09.094223 env[1421]: 2025-09-06 00:22:08.969 [INFO][4913] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="b5644ce4823a63550a6c868ef6f1dba43b75cd58696ab1201a167f45cf216c86" Sep 6 00:22:09.094223 env[1421]: 2025-09-06 00:22:09.072 [INFO][4920] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="b5644ce4823a63550a6c868ef6f1dba43b75cd58696ab1201a167f45cf216c86" HandleID="k8s-pod-network.b5644ce4823a63550a6c868ef6f1dba43b75cd58696ab1201a167f45cf216c86" Workload="ci--3510.3.8--n--28804d0655-k8s-coredns--7c65d6cfc9--kwxlj-eth0" Sep 6 00:22:09.094223 env[1421]: 2025-09-06 00:22:09.073 [INFO][4920] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Sep 6 00:22:09.094223 env[1421]: 2025-09-06 00:22:09.073 [INFO][4920] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Sep 6 00:22:09.094223 env[1421]: 2025-09-06 00:22:09.083 [WARNING][4920] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="b5644ce4823a63550a6c868ef6f1dba43b75cd58696ab1201a167f45cf216c86" HandleID="k8s-pod-network.b5644ce4823a63550a6c868ef6f1dba43b75cd58696ab1201a167f45cf216c86" Workload="ci--3510.3.8--n--28804d0655-k8s-coredns--7c65d6cfc9--kwxlj-eth0" Sep 6 00:22:09.094223 env[1421]: 2025-09-06 00:22:09.083 [INFO][4920] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="b5644ce4823a63550a6c868ef6f1dba43b75cd58696ab1201a167f45cf216c86" HandleID="k8s-pod-network.b5644ce4823a63550a6c868ef6f1dba43b75cd58696ab1201a167f45cf216c86" Workload="ci--3510.3.8--n--28804d0655-k8s-coredns--7c65d6cfc9--kwxlj-eth0" Sep 6 00:22:09.094223 env[1421]: 2025-09-06 00:22:09.085 [INFO][4920] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Sep 6 00:22:09.094223 env[1421]: 2025-09-06 00:22:09.091 [INFO][4913] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="b5644ce4823a63550a6c868ef6f1dba43b75cd58696ab1201a167f45cf216c86" Sep 6 00:22:09.096360 env[1421]: time="2025-09-06T00:22:09.096310720Z" level=info msg="TearDown network for sandbox \"b5644ce4823a63550a6c868ef6f1dba43b75cd58696ab1201a167f45cf216c86\" successfully" Sep 6 00:22:09.096543 env[1421]: time="2025-09-06T00:22:09.096510621Z" level=info msg="StopPodSandbox for \"b5644ce4823a63550a6c868ef6f1dba43b75cd58696ab1201a167f45cf216c86\" returns successfully" Sep 6 00:22:09.102245 env[1421]: time="2025-09-06T00:22:09.102192941Z" level=info msg="RemovePodSandbox for \"b5644ce4823a63550a6c868ef6f1dba43b75cd58696ab1201a167f45cf216c86\"" Sep 6 00:22:09.102428 env[1421]: time="2025-09-06T00:22:09.102254941Z" level=info msg="Forcibly stopping sandbox \"b5644ce4823a63550a6c868ef6f1dba43b75cd58696ab1201a167f45cf216c86\"" Sep 6 00:22:09.330063 env[1421]: 2025-09-06 00:22:09.225 [WARNING][4934] cni-plugin/k8s.go 604: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="b5644ce4823a63550a6c868ef6f1dba43b75cd58696ab1201a167f45cf216c86" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ci--3510.3.8--n--28804d0655-k8s-coredns--7c65d6cfc9--kwxlj-eth0", GenerateName:"coredns-7c65d6cfc9-", Namespace:"kube-system", SelfLink:"", UID:"bec1259e-53c8-4839-b58b-5ed97b75b668", ResourceVersion:"1036", Generation:0, CreationTimestamp:time.Date(2025, time.September, 6, 0, 21, 13, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"k8s-app":"kube-dns", "pod-template-hash":"7c65d6cfc9", "projectcalico.org/namespace":"kube-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"coredns"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ci-3510.3.8-n-28804d0655", ContainerID:"4ed9a152fdd557580f0987a0c1903011ac946a179594ca611c4b8104d1f85930", Pod:"coredns-7c65d6cfc9-kwxlj", Endpoint:"eth0", ServiceAccountName:"coredns", IPNetworks:[]string{"192.168.107.71/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.kube-system", "ksa.kube-system.coredns"}, InterfaceName:"cali0a317fb91e5", MAC:"", Ports:[]v3.WorkloadEndpointPort{v3.WorkloadEndpointPort{Name:"dns", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"UDP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"dns-tcp", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"metrics", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x23c1, HostPort:0x0, HostIP:""}}, AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Sep 6 00:22:09.330063 env[1421]: 2025-09-06 00:22:09.226 [INFO][4934] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="b5644ce4823a63550a6c868ef6f1dba43b75cd58696ab1201a167f45cf216c86" Sep 6 00:22:09.330063 env[1421]: 2025-09-06 00:22:09.226 [INFO][4934] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="b5644ce4823a63550a6c868ef6f1dba43b75cd58696ab1201a167f45cf216c86" iface="eth0" netns="" Sep 6 00:22:09.330063 env[1421]: 2025-09-06 00:22:09.226 [INFO][4934] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="b5644ce4823a63550a6c868ef6f1dba43b75cd58696ab1201a167f45cf216c86" Sep 6 00:22:09.330063 env[1421]: 2025-09-06 00:22:09.226 [INFO][4934] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="b5644ce4823a63550a6c868ef6f1dba43b75cd58696ab1201a167f45cf216c86" Sep 6 00:22:09.330063 env[1421]: 2025-09-06 00:22:09.302 [INFO][4941] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="b5644ce4823a63550a6c868ef6f1dba43b75cd58696ab1201a167f45cf216c86" HandleID="k8s-pod-network.b5644ce4823a63550a6c868ef6f1dba43b75cd58696ab1201a167f45cf216c86" Workload="ci--3510.3.8--n--28804d0655-k8s-coredns--7c65d6cfc9--kwxlj-eth0" Sep 6 00:22:09.330063 env[1421]: 2025-09-06 00:22:09.303 [INFO][4941] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Sep 6 00:22:09.330063 env[1421]: 2025-09-06 00:22:09.303 [INFO][4941] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Sep 6 00:22:09.330063 env[1421]: 2025-09-06 00:22:09.316 [WARNING][4941] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="b5644ce4823a63550a6c868ef6f1dba43b75cd58696ab1201a167f45cf216c86" HandleID="k8s-pod-network.b5644ce4823a63550a6c868ef6f1dba43b75cd58696ab1201a167f45cf216c86" Workload="ci--3510.3.8--n--28804d0655-k8s-coredns--7c65d6cfc9--kwxlj-eth0" Sep 6 00:22:09.330063 env[1421]: 2025-09-06 00:22:09.316 [INFO][4941] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="b5644ce4823a63550a6c868ef6f1dba43b75cd58696ab1201a167f45cf216c86" HandleID="k8s-pod-network.b5644ce4823a63550a6c868ef6f1dba43b75cd58696ab1201a167f45cf216c86" Workload="ci--3510.3.8--n--28804d0655-k8s-coredns--7c65d6cfc9--kwxlj-eth0" Sep 6 00:22:09.330063 env[1421]: 2025-09-06 00:22:09.325 [INFO][4941] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Sep 6 00:22:09.330063 env[1421]: 2025-09-06 00:22:09.328 [INFO][4934] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="b5644ce4823a63550a6c868ef6f1dba43b75cd58696ab1201a167f45cf216c86" Sep 6 00:22:09.330912 env[1421]: time="2025-09-06T00:22:09.330868362Z" level=info msg="TearDown network for sandbox \"b5644ce4823a63550a6c868ef6f1dba43b75cd58696ab1201a167f45cf216c86\" successfully" Sep 6 00:22:09.340986 env[1421]: time="2025-09-06T00:22:09.340895198Z" level=info msg="RemovePodSandbox \"b5644ce4823a63550a6c868ef6f1dba43b75cd58696ab1201a167f45cf216c86\" returns successfully" Sep 6 00:22:09.341888 env[1421]: time="2025-09-06T00:22:09.341855401Z" level=info msg="StopPodSandbox for \"f2fc2fea3b942cb104f2fbc53d4c4f32aac387adc5c6778b6509b17e23e23516\"" Sep 6 00:22:09.514375 env[1421]: 2025-09-06 00:22:09.433 [WARNING][4956] cni-plugin/k8s.go 604: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="f2fc2fea3b942cb104f2fbc53d4c4f32aac387adc5c6778b6509b17e23e23516" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ci--3510.3.8--n--28804d0655-k8s-calico--apiserver--6575dd5656--6ft5t-eth0", GenerateName:"calico-apiserver-6575dd5656-", Namespace:"calico-apiserver", SelfLink:"", UID:"de9b4ddb-1c06-4bdb-a14b-41494dee8eb6", ResourceVersion:"1068", Generation:0, CreationTimestamp:time.Date(2025, time.September, 6, 0, 21, 24, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"apiserver":"true", "app.kubernetes.io/name":"calico-apiserver", "k8s-app":"calico-apiserver", "pod-template-hash":"6575dd5656", "projectcalico.org/namespace":"calico-apiserver", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-apiserver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ci-3510.3.8-n-28804d0655", ContainerID:"8dc460b79c3b205c960cf91edc8f210a083b115257c217486a6de4e543579891", Pod:"calico-apiserver-6575dd5656-6ft5t", Endpoint:"eth0", ServiceAccountName:"calico-apiserver", IPNetworks:[]string{"192.168.107.68/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-apiserver", "ksa.calico-apiserver.calico-apiserver"}, InterfaceName:"calidca511bec55", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Sep 6 00:22:09.514375 env[1421]: 2025-09-06 00:22:09.447 [INFO][4956] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="f2fc2fea3b942cb104f2fbc53d4c4f32aac387adc5c6778b6509b17e23e23516" Sep 6 00:22:09.514375 env[1421]: 2025-09-06 00:22:09.447 [INFO][4956] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="f2fc2fea3b942cb104f2fbc53d4c4f32aac387adc5c6778b6509b17e23e23516" iface="eth0" netns="" Sep 6 00:22:09.514375 env[1421]: 2025-09-06 00:22:09.448 [INFO][4956] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="f2fc2fea3b942cb104f2fbc53d4c4f32aac387adc5c6778b6509b17e23e23516" Sep 6 00:22:09.514375 env[1421]: 2025-09-06 00:22:09.448 [INFO][4956] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="f2fc2fea3b942cb104f2fbc53d4c4f32aac387adc5c6778b6509b17e23e23516" Sep 6 00:22:09.514375 env[1421]: 2025-09-06 00:22:09.499 [INFO][4963] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="f2fc2fea3b942cb104f2fbc53d4c4f32aac387adc5c6778b6509b17e23e23516" HandleID="k8s-pod-network.f2fc2fea3b942cb104f2fbc53d4c4f32aac387adc5c6778b6509b17e23e23516" Workload="ci--3510.3.8--n--28804d0655-k8s-calico--apiserver--6575dd5656--6ft5t-eth0" Sep 6 00:22:09.514375 env[1421]: 2025-09-06 00:22:09.500 [INFO][4963] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Sep 6 00:22:09.514375 env[1421]: 2025-09-06 00:22:09.500 [INFO][4963] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Sep 6 00:22:09.514375 env[1421]: 2025-09-06 00:22:09.508 [WARNING][4963] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="f2fc2fea3b942cb104f2fbc53d4c4f32aac387adc5c6778b6509b17e23e23516" HandleID="k8s-pod-network.f2fc2fea3b942cb104f2fbc53d4c4f32aac387adc5c6778b6509b17e23e23516" Workload="ci--3510.3.8--n--28804d0655-k8s-calico--apiserver--6575dd5656--6ft5t-eth0" Sep 6 00:22:09.514375 env[1421]: 2025-09-06 00:22:09.508 [INFO][4963] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="f2fc2fea3b942cb104f2fbc53d4c4f32aac387adc5c6778b6509b17e23e23516" HandleID="k8s-pod-network.f2fc2fea3b942cb104f2fbc53d4c4f32aac387adc5c6778b6509b17e23e23516" Workload="ci--3510.3.8--n--28804d0655-k8s-calico--apiserver--6575dd5656--6ft5t-eth0" Sep 6 00:22:09.514375 env[1421]: 2025-09-06 00:22:09.510 [INFO][4963] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Sep 6 00:22:09.514375 env[1421]: 2025-09-06 00:22:09.512 [INFO][4956] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="f2fc2fea3b942cb104f2fbc53d4c4f32aac387adc5c6778b6509b17e23e23516" Sep 6 00:22:09.515498 env[1421]: time="2025-09-06T00:22:09.515457525Z" level=info msg="TearDown network for sandbox \"f2fc2fea3b942cb104f2fbc53d4c4f32aac387adc5c6778b6509b17e23e23516\" successfully" Sep 6 00:22:09.515602 env[1421]: time="2025-09-06T00:22:09.515581425Z" level=info msg="StopPodSandbox for \"f2fc2fea3b942cb104f2fbc53d4c4f32aac387adc5c6778b6509b17e23e23516\" returns successfully" Sep 6 00:22:09.518227 env[1421]: time="2025-09-06T00:22:09.518191435Z" level=info msg="RemovePodSandbox for \"f2fc2fea3b942cb104f2fbc53d4c4f32aac387adc5c6778b6509b17e23e23516\"" Sep 6 00:22:09.518785 env[1421]: time="2025-09-06T00:22:09.518716736Z" level=info msg="Forcibly stopping sandbox \"f2fc2fea3b942cb104f2fbc53d4c4f32aac387adc5c6778b6509b17e23e23516\"" Sep 6 00:22:09.731432 env[1421]: 2025-09-06 00:22:09.627 [WARNING][4978] cni-plugin/k8s.go 604: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="f2fc2fea3b942cb104f2fbc53d4c4f32aac387adc5c6778b6509b17e23e23516" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ci--3510.3.8--n--28804d0655-k8s-calico--apiserver--6575dd5656--6ft5t-eth0", GenerateName:"calico-apiserver-6575dd5656-", Namespace:"calico-apiserver", SelfLink:"", UID:"de9b4ddb-1c06-4bdb-a14b-41494dee8eb6", ResourceVersion:"1068", Generation:0, CreationTimestamp:time.Date(2025, time.September, 6, 0, 21, 24, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"apiserver":"true", "app.kubernetes.io/name":"calico-apiserver", "k8s-app":"calico-apiserver", "pod-template-hash":"6575dd5656", "projectcalico.org/namespace":"calico-apiserver", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-apiserver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ci-3510.3.8-n-28804d0655", ContainerID:"8dc460b79c3b205c960cf91edc8f210a083b115257c217486a6de4e543579891", Pod:"calico-apiserver-6575dd5656-6ft5t", Endpoint:"eth0", ServiceAccountName:"calico-apiserver", IPNetworks:[]string{"192.168.107.68/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-apiserver", "ksa.calico-apiserver.calico-apiserver"}, InterfaceName:"calidca511bec55", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Sep 6 00:22:09.731432 env[1421]: 2025-09-06 00:22:09.627 [INFO][4978] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="f2fc2fea3b942cb104f2fbc53d4c4f32aac387adc5c6778b6509b17e23e23516" Sep 6 00:22:09.731432 env[1421]: 2025-09-06 00:22:09.627 [INFO][4978] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="f2fc2fea3b942cb104f2fbc53d4c4f32aac387adc5c6778b6509b17e23e23516" iface="eth0" netns="" Sep 6 00:22:09.731432 env[1421]: 2025-09-06 00:22:09.627 [INFO][4978] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="f2fc2fea3b942cb104f2fbc53d4c4f32aac387adc5c6778b6509b17e23e23516" Sep 6 00:22:09.731432 env[1421]: 2025-09-06 00:22:09.627 [INFO][4978] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="f2fc2fea3b942cb104f2fbc53d4c4f32aac387adc5c6778b6509b17e23e23516" Sep 6 00:22:09.731432 env[1421]: 2025-09-06 00:22:09.696 [INFO][4985] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="f2fc2fea3b942cb104f2fbc53d4c4f32aac387adc5c6778b6509b17e23e23516" HandleID="k8s-pod-network.f2fc2fea3b942cb104f2fbc53d4c4f32aac387adc5c6778b6509b17e23e23516" Workload="ci--3510.3.8--n--28804d0655-k8s-calico--apiserver--6575dd5656--6ft5t-eth0" Sep 6 00:22:09.731432 env[1421]: 2025-09-06 00:22:09.697 [INFO][4985] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Sep 6 00:22:09.731432 env[1421]: 2025-09-06 00:22:09.699 [INFO][4985] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Sep 6 00:22:09.731432 env[1421]: 2025-09-06 00:22:09.718 [WARNING][4985] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="f2fc2fea3b942cb104f2fbc53d4c4f32aac387adc5c6778b6509b17e23e23516" HandleID="k8s-pod-network.f2fc2fea3b942cb104f2fbc53d4c4f32aac387adc5c6778b6509b17e23e23516" Workload="ci--3510.3.8--n--28804d0655-k8s-calico--apiserver--6575dd5656--6ft5t-eth0" Sep 6 00:22:09.731432 env[1421]: 2025-09-06 00:22:09.719 [INFO][4985] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="f2fc2fea3b942cb104f2fbc53d4c4f32aac387adc5c6778b6509b17e23e23516" HandleID="k8s-pod-network.f2fc2fea3b942cb104f2fbc53d4c4f32aac387adc5c6778b6509b17e23e23516" Workload="ci--3510.3.8--n--28804d0655-k8s-calico--apiserver--6575dd5656--6ft5t-eth0" Sep 6 00:22:09.731432 env[1421]: 2025-09-06 00:22:09.723 [INFO][4985] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Sep 6 00:22:09.731432 env[1421]: 2025-09-06 00:22:09.726 [INFO][4978] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="f2fc2fea3b942cb104f2fbc53d4c4f32aac387adc5c6778b6509b17e23e23516" Sep 6 00:22:09.732175 env[1421]: time="2025-09-06T00:22:09.731480800Z" level=info msg="TearDown network for sandbox \"f2fc2fea3b942cb104f2fbc53d4c4f32aac387adc5c6778b6509b17e23e23516\" successfully" Sep 6 00:22:09.888104 env[1421]: time="2025-09-06T00:22:09.888025162Z" level=info msg="RemovePodSandbox \"f2fc2fea3b942cb104f2fbc53d4c4f32aac387adc5c6778b6509b17e23e23516\" returns successfully" Sep 6 00:22:09.889417 env[1421]: time="2025-09-06T00:22:09.889021766Z" level=info msg="StopPodSandbox for \"cd674a970846304c2d07a559b71311a27e26be0d693da4182f5694d157bea78d\"" Sep 6 00:22:10.019435 env[1421]: 2025-09-06 00:22:09.963 [WARNING][5000] cni-plugin/k8s.go 604: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="cd674a970846304c2d07a559b71311a27e26be0d693da4182f5694d157bea78d" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ci--3510.3.8--n--28804d0655-k8s-coredns--7c65d6cfc9--p4llr-eth0", GenerateName:"coredns-7c65d6cfc9-", Namespace:"kube-system", SelfLink:"", UID:"240f7b1e-32b7-4339-819b-51a4bef1fd7d", ResourceVersion:"1032", Generation:0, CreationTimestamp:time.Date(2025, time.September, 6, 0, 21, 13, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"k8s-app":"kube-dns", "pod-template-hash":"7c65d6cfc9", "projectcalico.org/namespace":"kube-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"coredns"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ci-3510.3.8-n-28804d0655", ContainerID:"880270580523e2350381b2612475a6827a647cd9c4bd8c96213fde42827730d1", Pod:"coredns-7c65d6cfc9-p4llr", Endpoint:"eth0", ServiceAccountName:"coredns", IPNetworks:[]string{"192.168.107.70/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.kube-system", "ksa.kube-system.coredns"}, InterfaceName:"caliaa6c45ad637", MAC:"", Ports:[]v3.WorkloadEndpointPort{v3.WorkloadEndpointPort{Name:"dns", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"UDP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"dns-tcp", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"metrics", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x23c1, HostPort:0x0, HostIP:""}}, AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Sep 6 00:22:10.019435 env[1421]: 2025-09-06 00:22:09.964 [INFO][5000] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="cd674a970846304c2d07a559b71311a27e26be0d693da4182f5694d157bea78d" Sep 6 00:22:10.019435 env[1421]: 2025-09-06 00:22:09.965 [INFO][5000] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="cd674a970846304c2d07a559b71311a27e26be0d693da4182f5694d157bea78d" iface="eth0" netns="" Sep 6 00:22:10.019435 env[1421]: 2025-09-06 00:22:09.965 [INFO][5000] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="cd674a970846304c2d07a559b71311a27e26be0d693da4182f5694d157bea78d" Sep 6 00:22:10.019435 env[1421]: 2025-09-06 00:22:09.965 [INFO][5000] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="cd674a970846304c2d07a559b71311a27e26be0d693da4182f5694d157bea78d" Sep 6 00:22:10.019435 env[1421]: 2025-09-06 00:22:10.003 [INFO][5007] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="cd674a970846304c2d07a559b71311a27e26be0d693da4182f5694d157bea78d" HandleID="k8s-pod-network.cd674a970846304c2d07a559b71311a27e26be0d693da4182f5694d157bea78d" Workload="ci--3510.3.8--n--28804d0655-k8s-coredns--7c65d6cfc9--p4llr-eth0" Sep 6 00:22:10.019435 env[1421]: 2025-09-06 00:22:10.003 [INFO][5007] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Sep 6 00:22:10.019435 env[1421]: 2025-09-06 00:22:10.003 [INFO][5007] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Sep 6 00:22:10.019435 env[1421]: 2025-09-06 00:22:10.011 [WARNING][5007] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="cd674a970846304c2d07a559b71311a27e26be0d693da4182f5694d157bea78d" HandleID="k8s-pod-network.cd674a970846304c2d07a559b71311a27e26be0d693da4182f5694d157bea78d" Workload="ci--3510.3.8--n--28804d0655-k8s-coredns--7c65d6cfc9--p4llr-eth0" Sep 6 00:22:10.019435 env[1421]: 2025-09-06 00:22:10.011 [INFO][5007] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="cd674a970846304c2d07a559b71311a27e26be0d693da4182f5694d157bea78d" HandleID="k8s-pod-network.cd674a970846304c2d07a559b71311a27e26be0d693da4182f5694d157bea78d" Workload="ci--3510.3.8--n--28804d0655-k8s-coredns--7c65d6cfc9--p4llr-eth0" Sep 6 00:22:10.019435 env[1421]: 2025-09-06 00:22:10.013 [INFO][5007] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Sep 6 00:22:10.019435 env[1421]: 2025-09-06 00:22:10.015 [INFO][5000] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="cd674a970846304c2d07a559b71311a27e26be0d693da4182f5694d157bea78d" Sep 6 00:22:10.020237 env[1421]: time="2025-09-06T00:22:10.019443933Z" level=info msg="TearDown network for sandbox \"cd674a970846304c2d07a559b71311a27e26be0d693da4182f5694d157bea78d\" successfully" Sep 6 00:22:10.020237 env[1421]: time="2025-09-06T00:22:10.019486933Z" level=info msg="StopPodSandbox for \"cd674a970846304c2d07a559b71311a27e26be0d693da4182f5694d157bea78d\" returns successfully" Sep 6 00:22:10.020237 env[1421]: time="2025-09-06T00:22:10.020221136Z" level=info msg="RemovePodSandbox for \"cd674a970846304c2d07a559b71311a27e26be0d693da4182f5694d157bea78d\"" Sep 6 00:22:10.020358 env[1421]: time="2025-09-06T00:22:10.020261936Z" level=info msg="Forcibly stopping sandbox \"cd674a970846304c2d07a559b71311a27e26be0d693da4182f5694d157bea78d\"" Sep 6 00:22:10.179910 env[1421]: 2025-09-06 00:22:10.104 [WARNING][5023] cni-plugin/k8s.go 604: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="cd674a970846304c2d07a559b71311a27e26be0d693da4182f5694d157bea78d" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ci--3510.3.8--n--28804d0655-k8s-coredns--7c65d6cfc9--p4llr-eth0", GenerateName:"coredns-7c65d6cfc9-", Namespace:"kube-system", SelfLink:"", UID:"240f7b1e-32b7-4339-819b-51a4bef1fd7d", ResourceVersion:"1032", Generation:0, CreationTimestamp:time.Date(2025, time.September, 6, 0, 21, 13, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"k8s-app":"kube-dns", "pod-template-hash":"7c65d6cfc9", "projectcalico.org/namespace":"kube-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"coredns"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ci-3510.3.8-n-28804d0655", ContainerID:"880270580523e2350381b2612475a6827a647cd9c4bd8c96213fde42827730d1", Pod:"coredns-7c65d6cfc9-p4llr", Endpoint:"eth0", ServiceAccountName:"coredns", IPNetworks:[]string{"192.168.107.70/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.kube-system", "ksa.kube-system.coredns"}, InterfaceName:"caliaa6c45ad637", MAC:"", Ports:[]v3.WorkloadEndpointPort{v3.WorkloadEndpointPort{Name:"dns", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"UDP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"dns-tcp", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"metrics", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x23c1, HostPort:0x0, HostIP:""}}, AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Sep 6 00:22:10.179910 env[1421]: 2025-09-06 00:22:10.105 [INFO][5023] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="cd674a970846304c2d07a559b71311a27e26be0d693da4182f5694d157bea78d" Sep 6 00:22:10.179910 env[1421]: 2025-09-06 00:22:10.105 [INFO][5023] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="cd674a970846304c2d07a559b71311a27e26be0d693da4182f5694d157bea78d" iface="eth0" netns="" Sep 6 00:22:10.179910 env[1421]: 2025-09-06 00:22:10.105 [INFO][5023] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="cd674a970846304c2d07a559b71311a27e26be0d693da4182f5694d157bea78d" Sep 6 00:22:10.179910 env[1421]: 2025-09-06 00:22:10.105 [INFO][5023] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="cd674a970846304c2d07a559b71311a27e26be0d693da4182f5694d157bea78d" Sep 6 00:22:10.179910 env[1421]: 2025-09-06 00:22:10.146 [INFO][5030] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="cd674a970846304c2d07a559b71311a27e26be0d693da4182f5694d157bea78d" HandleID="k8s-pod-network.cd674a970846304c2d07a559b71311a27e26be0d693da4182f5694d157bea78d" Workload="ci--3510.3.8--n--28804d0655-k8s-coredns--7c65d6cfc9--p4llr-eth0" Sep 6 00:22:10.179910 env[1421]: 2025-09-06 00:22:10.146 [INFO][5030] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Sep 6 00:22:10.179910 env[1421]: 2025-09-06 00:22:10.147 [INFO][5030] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Sep 6 00:22:10.179910 env[1421]: 2025-09-06 00:22:10.168 [WARNING][5030] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="cd674a970846304c2d07a559b71311a27e26be0d693da4182f5694d157bea78d" HandleID="k8s-pod-network.cd674a970846304c2d07a559b71311a27e26be0d693da4182f5694d157bea78d" Workload="ci--3510.3.8--n--28804d0655-k8s-coredns--7c65d6cfc9--p4llr-eth0" Sep 6 00:22:10.179910 env[1421]: 2025-09-06 00:22:10.168 [INFO][5030] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="cd674a970846304c2d07a559b71311a27e26be0d693da4182f5694d157bea78d" HandleID="k8s-pod-network.cd674a970846304c2d07a559b71311a27e26be0d693da4182f5694d157bea78d" Workload="ci--3510.3.8--n--28804d0655-k8s-coredns--7c65d6cfc9--p4llr-eth0" Sep 6 00:22:10.179910 env[1421]: 2025-09-06 00:22:10.176 [INFO][5030] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Sep 6 00:22:10.179910 env[1421]: 2025-09-06 00:22:10.178 [INFO][5023] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="cd674a970846304c2d07a559b71311a27e26be0d693da4182f5694d157bea78d" Sep 6 00:22:10.182539 env[1421]: time="2025-09-06T00:22:10.182479310Z" level=info msg="TearDown network for sandbox \"cd674a970846304c2d07a559b71311a27e26be0d693da4182f5694d157bea78d\" successfully" Sep 6 00:22:10.296652 env[1421]: time="2025-09-06T00:22:10.296593415Z" level=info msg="RemovePodSandbox \"cd674a970846304c2d07a559b71311a27e26be0d693da4182f5694d157bea78d\" returns successfully" Sep 6 00:22:10.297532 env[1421]: time="2025-09-06T00:22:10.297491718Z" level=info msg="StopPodSandbox for \"32857b6d5e13cfdf32617bd9c13b95d2d0faa7b5e3ce285e474befff7ca672f2\"" Sep 6 00:22:10.505690 env[1421]: 2025-09-06 00:22:10.409 [WARNING][5045] cni-plugin/k8s.go 598: WorkloadEndpoint does not exist in the datastore, moving forward with the clean up ContainerID="32857b6d5e13cfdf32617bd9c13b95d2d0faa7b5e3ce285e474befff7ca672f2" WorkloadEndpoint="ci--3510.3.8--n--28804d0655-k8s-whisker--6ccc665fcc--vh99p-eth0" Sep 6 00:22:10.505690 env[1421]: 2025-09-06 00:22:10.410 [INFO][5045] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="32857b6d5e13cfdf32617bd9c13b95d2d0faa7b5e3ce285e474befff7ca672f2" Sep 6 00:22:10.505690 env[1421]: 2025-09-06 00:22:10.410 [INFO][5045] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="32857b6d5e13cfdf32617bd9c13b95d2d0faa7b5e3ce285e474befff7ca672f2" iface="eth0" netns="" Sep 6 00:22:10.505690 env[1421]: 2025-09-06 00:22:10.410 [INFO][5045] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="32857b6d5e13cfdf32617bd9c13b95d2d0faa7b5e3ce285e474befff7ca672f2" Sep 6 00:22:10.505690 env[1421]: 2025-09-06 00:22:10.410 [INFO][5045] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="32857b6d5e13cfdf32617bd9c13b95d2d0faa7b5e3ce285e474befff7ca672f2" Sep 6 00:22:10.505690 env[1421]: 2025-09-06 00:22:10.480 [INFO][5052] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="32857b6d5e13cfdf32617bd9c13b95d2d0faa7b5e3ce285e474befff7ca672f2" HandleID="k8s-pod-network.32857b6d5e13cfdf32617bd9c13b95d2d0faa7b5e3ce285e474befff7ca672f2" Workload="ci--3510.3.8--n--28804d0655-k8s-whisker--6ccc665fcc--vh99p-eth0" Sep 6 00:22:10.505690 env[1421]: 2025-09-06 00:22:10.480 [INFO][5052] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Sep 6 00:22:10.505690 env[1421]: 2025-09-06 00:22:10.480 [INFO][5052] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Sep 6 00:22:10.505690 env[1421]: 2025-09-06 00:22:10.492 [WARNING][5052] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="32857b6d5e13cfdf32617bd9c13b95d2d0faa7b5e3ce285e474befff7ca672f2" HandleID="k8s-pod-network.32857b6d5e13cfdf32617bd9c13b95d2d0faa7b5e3ce285e474befff7ca672f2" Workload="ci--3510.3.8--n--28804d0655-k8s-whisker--6ccc665fcc--vh99p-eth0" Sep 6 00:22:10.505690 env[1421]: 2025-09-06 00:22:10.492 [INFO][5052] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="32857b6d5e13cfdf32617bd9c13b95d2d0faa7b5e3ce285e474befff7ca672f2" HandleID="k8s-pod-network.32857b6d5e13cfdf32617bd9c13b95d2d0faa7b5e3ce285e474befff7ca672f2" Workload="ci--3510.3.8--n--28804d0655-k8s-whisker--6ccc665fcc--vh99p-eth0" Sep 6 00:22:10.505690 env[1421]: 2025-09-06 00:22:10.495 [INFO][5052] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Sep 6 00:22:10.505690 env[1421]: 2025-09-06 00:22:10.503 [INFO][5045] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="32857b6d5e13cfdf32617bd9c13b95d2d0faa7b5e3ce285e474befff7ca672f2" Sep 6 00:22:10.505690 env[1421]: time="2025-09-06T00:22:10.505016453Z" level=info msg="TearDown network for sandbox \"32857b6d5e13cfdf32617bd9c13b95d2d0faa7b5e3ce285e474befff7ca672f2\" successfully" Sep 6 00:22:10.505690 env[1421]: time="2025-09-06T00:22:10.505059653Z" level=info msg="StopPodSandbox for \"32857b6d5e13cfdf32617bd9c13b95d2d0faa7b5e3ce285e474befff7ca672f2\" returns successfully" Sep 6 00:22:10.507090 env[1421]: time="2025-09-06T00:22:10.507050860Z" level=info msg="RemovePodSandbox for \"32857b6d5e13cfdf32617bd9c13b95d2d0faa7b5e3ce285e474befff7ca672f2\"" Sep 6 00:22:10.507282 env[1421]: time="2025-09-06T00:22:10.507232860Z" level=info msg="Forcibly stopping sandbox \"32857b6d5e13cfdf32617bd9c13b95d2d0faa7b5e3ce285e474befff7ca672f2\"" Sep 6 00:22:10.721796 env[1421]: 2025-09-06 00:22:10.630 [WARNING][5068] cni-plugin/k8s.go 598: WorkloadEndpoint does not exist in the datastore, moving forward with the clean up ContainerID="32857b6d5e13cfdf32617bd9c13b95d2d0faa7b5e3ce285e474befff7ca672f2" WorkloadEndpoint="ci--3510.3.8--n--28804d0655-k8s-whisker--6ccc665fcc--vh99p-eth0" Sep 6 00:22:10.721796 env[1421]: 2025-09-06 00:22:10.630 [INFO][5068] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="32857b6d5e13cfdf32617bd9c13b95d2d0faa7b5e3ce285e474befff7ca672f2" Sep 6 00:22:10.721796 env[1421]: 2025-09-06 00:22:10.630 [INFO][5068] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="32857b6d5e13cfdf32617bd9c13b95d2d0faa7b5e3ce285e474befff7ca672f2" iface="eth0" netns="" Sep 6 00:22:10.721796 env[1421]: 2025-09-06 00:22:10.630 [INFO][5068] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="32857b6d5e13cfdf32617bd9c13b95d2d0faa7b5e3ce285e474befff7ca672f2" Sep 6 00:22:10.721796 env[1421]: 2025-09-06 00:22:10.630 [INFO][5068] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="32857b6d5e13cfdf32617bd9c13b95d2d0faa7b5e3ce285e474befff7ca672f2" Sep 6 00:22:10.721796 env[1421]: 2025-09-06 00:22:10.689 [INFO][5075] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="32857b6d5e13cfdf32617bd9c13b95d2d0faa7b5e3ce285e474befff7ca672f2" HandleID="k8s-pod-network.32857b6d5e13cfdf32617bd9c13b95d2d0faa7b5e3ce285e474befff7ca672f2" Workload="ci--3510.3.8--n--28804d0655-k8s-whisker--6ccc665fcc--vh99p-eth0" Sep 6 00:22:10.721796 env[1421]: 2025-09-06 00:22:10.689 [INFO][5075] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Sep 6 00:22:10.721796 env[1421]: 2025-09-06 00:22:10.691 [INFO][5075] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Sep 6 00:22:10.721796 env[1421]: 2025-09-06 00:22:10.711 [WARNING][5075] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="32857b6d5e13cfdf32617bd9c13b95d2d0faa7b5e3ce285e474befff7ca672f2" HandleID="k8s-pod-network.32857b6d5e13cfdf32617bd9c13b95d2d0faa7b5e3ce285e474befff7ca672f2" Workload="ci--3510.3.8--n--28804d0655-k8s-whisker--6ccc665fcc--vh99p-eth0" Sep 6 00:22:10.721796 env[1421]: 2025-09-06 00:22:10.711 [INFO][5075] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="32857b6d5e13cfdf32617bd9c13b95d2d0faa7b5e3ce285e474befff7ca672f2" HandleID="k8s-pod-network.32857b6d5e13cfdf32617bd9c13b95d2d0faa7b5e3ce285e474befff7ca672f2" Workload="ci--3510.3.8--n--28804d0655-k8s-whisker--6ccc665fcc--vh99p-eth0" Sep 6 00:22:10.721796 env[1421]: 2025-09-06 00:22:10.715 [INFO][5075] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Sep 6 00:22:10.721796 env[1421]: 2025-09-06 00:22:10.720 [INFO][5068] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="32857b6d5e13cfdf32617bd9c13b95d2d0faa7b5e3ce285e474befff7ca672f2" Sep 6 00:22:10.722833 env[1421]: time="2025-09-06T00:22:10.722789024Z" level=info msg="TearDown network for sandbox \"32857b6d5e13cfdf32617bd9c13b95d2d0faa7b5e3ce285e474befff7ca672f2\" successfully" Sep 6 00:22:10.739470 env[1421]: time="2025-09-06T00:22:10.739411882Z" level=info msg="RemovePodSandbox \"32857b6d5e13cfdf32617bd9c13b95d2d0faa7b5e3ce285e474befff7ca672f2\" returns successfully" Sep 6 00:22:10.740327 env[1421]: time="2025-09-06T00:22:10.740290186Z" level=info msg="StopPodSandbox for \"1d336359284437532c303b9404ca2351e29c387f6bfba03d4c9c6526ea69b44e\"" Sep 6 00:22:10.960570 env[1421]: 2025-09-06 00:22:10.862 [WARNING][5090] cni-plugin/k8s.go 604: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="1d336359284437532c303b9404ca2351e29c387f6bfba03d4c9c6526ea69b44e" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ci--3510.3.8--n--28804d0655-k8s-goldmane--7988f88666--kvgbx-eth0", GenerateName:"goldmane-7988f88666-", Namespace:"calico-system", SelfLink:"", UID:"e87f9195-4410-4758-8575-4e170e647a3d", ResourceVersion:"1002", Generation:0, CreationTimestamp:time.Date(2025, time.September, 6, 0, 21, 27, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"goldmane", "k8s-app":"goldmane", "pod-template-hash":"7988f88666", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"goldmane"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ci-3510.3.8-n-28804d0655", ContainerID:"3c20de4c5b6deb1bb564d75e0baaa6c47ec09a68bc0cb741a8cdb2bd6ab05ed2", Pod:"goldmane-7988f88666-kvgbx", Endpoint:"eth0", ServiceAccountName:"goldmane", IPNetworks:[]string{"192.168.107.72/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.goldmane"}, InterfaceName:"cali741cc06a3f3", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Sep 6 00:22:10.960570 env[1421]: 2025-09-06 00:22:10.862 [INFO][5090] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="1d336359284437532c303b9404ca2351e29c387f6bfba03d4c9c6526ea69b44e" Sep 6 00:22:10.960570 env[1421]: 2025-09-06 00:22:10.862 [INFO][5090] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="1d336359284437532c303b9404ca2351e29c387f6bfba03d4c9c6526ea69b44e" iface="eth0" netns="" Sep 6 00:22:10.960570 env[1421]: 2025-09-06 00:22:10.862 [INFO][5090] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="1d336359284437532c303b9404ca2351e29c387f6bfba03d4c9c6526ea69b44e" Sep 6 00:22:10.960570 env[1421]: 2025-09-06 00:22:10.862 [INFO][5090] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="1d336359284437532c303b9404ca2351e29c387f6bfba03d4c9c6526ea69b44e" Sep 6 00:22:10.960570 env[1421]: 2025-09-06 00:22:10.925 [INFO][5097] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="1d336359284437532c303b9404ca2351e29c387f6bfba03d4c9c6526ea69b44e" HandleID="k8s-pod-network.1d336359284437532c303b9404ca2351e29c387f6bfba03d4c9c6526ea69b44e" Workload="ci--3510.3.8--n--28804d0655-k8s-goldmane--7988f88666--kvgbx-eth0" Sep 6 00:22:10.960570 env[1421]: 2025-09-06 00:22:10.931 [INFO][5097] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Sep 6 00:22:10.960570 env[1421]: 2025-09-06 00:22:10.931 [INFO][5097] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Sep 6 00:22:10.960570 env[1421]: 2025-09-06 00:22:10.953 [WARNING][5097] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="1d336359284437532c303b9404ca2351e29c387f6bfba03d4c9c6526ea69b44e" HandleID="k8s-pod-network.1d336359284437532c303b9404ca2351e29c387f6bfba03d4c9c6526ea69b44e" Workload="ci--3510.3.8--n--28804d0655-k8s-goldmane--7988f88666--kvgbx-eth0" Sep 6 00:22:10.960570 env[1421]: 2025-09-06 00:22:10.953 [INFO][5097] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="1d336359284437532c303b9404ca2351e29c387f6bfba03d4c9c6526ea69b44e" HandleID="k8s-pod-network.1d336359284437532c303b9404ca2351e29c387f6bfba03d4c9c6526ea69b44e" Workload="ci--3510.3.8--n--28804d0655-k8s-goldmane--7988f88666--kvgbx-eth0" Sep 6 00:22:10.960570 env[1421]: 2025-09-06 00:22:10.957 [INFO][5097] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Sep 6 00:22:10.960570 env[1421]: 2025-09-06 00:22:10.958 [INFO][5090] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="1d336359284437532c303b9404ca2351e29c387f6bfba03d4c9c6526ea69b44e" Sep 6 00:22:10.961584 env[1421]: time="2025-09-06T00:22:10.961506569Z" level=info msg="TearDown network for sandbox \"1d336359284437532c303b9404ca2351e29c387f6bfba03d4c9c6526ea69b44e\" successfully" Sep 6 00:22:10.961707 env[1421]: time="2025-09-06T00:22:10.961682369Z" level=info msg="StopPodSandbox for \"1d336359284437532c303b9404ca2351e29c387f6bfba03d4c9c6526ea69b44e\" returns successfully" Sep 6 00:22:10.962534 env[1421]: time="2025-09-06T00:22:10.962490472Z" level=info msg="RemovePodSandbox for \"1d336359284437532c303b9404ca2351e29c387f6bfba03d4c9c6526ea69b44e\"" Sep 6 00:22:10.962769 env[1421]: time="2025-09-06T00:22:10.962705673Z" level=info msg="Forcibly stopping sandbox \"1d336359284437532c303b9404ca2351e29c387f6bfba03d4c9c6526ea69b44e\"" Sep 6 00:22:11.230073 env[1421]: 2025-09-06 00:22:11.096 [WARNING][5111] cni-plugin/k8s.go 604: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="1d336359284437532c303b9404ca2351e29c387f6bfba03d4c9c6526ea69b44e" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ci--3510.3.8--n--28804d0655-k8s-goldmane--7988f88666--kvgbx-eth0", GenerateName:"goldmane-7988f88666-", Namespace:"calico-system", SelfLink:"", UID:"e87f9195-4410-4758-8575-4e170e647a3d", ResourceVersion:"1002", Generation:0, CreationTimestamp:time.Date(2025, time.September, 6, 0, 21, 27, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"goldmane", "k8s-app":"goldmane", "pod-template-hash":"7988f88666", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"goldmane"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ci-3510.3.8-n-28804d0655", ContainerID:"3c20de4c5b6deb1bb564d75e0baaa6c47ec09a68bc0cb741a8cdb2bd6ab05ed2", Pod:"goldmane-7988f88666-kvgbx", Endpoint:"eth0", ServiceAccountName:"goldmane", IPNetworks:[]string{"192.168.107.72/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.goldmane"}, InterfaceName:"cali741cc06a3f3", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Sep 6 00:22:11.230073 env[1421]: 2025-09-06 00:22:11.097 [INFO][5111] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="1d336359284437532c303b9404ca2351e29c387f6bfba03d4c9c6526ea69b44e" Sep 6 00:22:11.230073 env[1421]: 2025-09-06 00:22:11.097 [INFO][5111] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="1d336359284437532c303b9404ca2351e29c387f6bfba03d4c9c6526ea69b44e" iface="eth0" netns="" Sep 6 00:22:11.230073 env[1421]: 2025-09-06 00:22:11.097 [INFO][5111] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="1d336359284437532c303b9404ca2351e29c387f6bfba03d4c9c6526ea69b44e" Sep 6 00:22:11.230073 env[1421]: 2025-09-06 00:22:11.097 [INFO][5111] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="1d336359284437532c303b9404ca2351e29c387f6bfba03d4c9c6526ea69b44e" Sep 6 00:22:11.230073 env[1421]: 2025-09-06 00:22:11.166 [INFO][5118] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="1d336359284437532c303b9404ca2351e29c387f6bfba03d4c9c6526ea69b44e" HandleID="k8s-pod-network.1d336359284437532c303b9404ca2351e29c387f6bfba03d4c9c6526ea69b44e" Workload="ci--3510.3.8--n--28804d0655-k8s-goldmane--7988f88666--kvgbx-eth0" Sep 6 00:22:11.230073 env[1421]: 2025-09-06 00:22:11.167 [INFO][5118] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Sep 6 00:22:11.230073 env[1421]: 2025-09-06 00:22:11.167 [INFO][5118] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Sep 6 00:22:11.230073 env[1421]: 2025-09-06 00:22:11.224 [WARNING][5118] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="1d336359284437532c303b9404ca2351e29c387f6bfba03d4c9c6526ea69b44e" HandleID="k8s-pod-network.1d336359284437532c303b9404ca2351e29c387f6bfba03d4c9c6526ea69b44e" Workload="ci--3510.3.8--n--28804d0655-k8s-goldmane--7988f88666--kvgbx-eth0" Sep 6 00:22:11.230073 env[1421]: 2025-09-06 00:22:11.224 [INFO][5118] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="1d336359284437532c303b9404ca2351e29c387f6bfba03d4c9c6526ea69b44e" HandleID="k8s-pod-network.1d336359284437532c303b9404ca2351e29c387f6bfba03d4c9c6526ea69b44e" Workload="ci--3510.3.8--n--28804d0655-k8s-goldmane--7988f88666--kvgbx-eth0" Sep 6 00:22:11.230073 env[1421]: 2025-09-06 00:22:11.226 [INFO][5118] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Sep 6 00:22:11.230073 env[1421]: 2025-09-06 00:22:11.227 [INFO][5111] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="1d336359284437532c303b9404ca2351e29c387f6bfba03d4c9c6526ea69b44e" Sep 6 00:22:11.230855 env[1421]: time="2025-09-06T00:22:11.230807211Z" level=info msg="TearDown network for sandbox \"1d336359284437532c303b9404ca2351e29c387f6bfba03d4c9c6526ea69b44e\" successfully" Sep 6 00:22:11.240347 env[1421]: time="2025-09-06T00:22:11.240295945Z" level=info msg="RemovePodSandbox \"1d336359284437532c303b9404ca2351e29c387f6bfba03d4c9c6526ea69b44e\" returns successfully" Sep 6 00:22:11.241129 env[1421]: time="2025-09-06T00:22:11.241097647Z" level=info msg="StopPodSandbox for \"3589c5c844285e0a60626274d5835cedbf9fdc60545aa4feb953e45a8904f94b\"" Sep 6 00:22:11.476517 env[1421]: 2025-09-06 00:22:11.373 [WARNING][5135] cni-plugin/k8s.go 604: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="3589c5c844285e0a60626274d5835cedbf9fdc60545aa4feb953e45a8904f94b" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ci--3510.3.8--n--28804d0655-k8s-csi--node--driver--pb785-eth0", GenerateName:"csi-node-driver-", Namespace:"calico-system", SelfLink:"", UID:"1ea5f5bc-3af9-4595-8783-60d58914430c", ResourceVersion:"968", Generation:0, CreationTimestamp:time.Date(2025, time.September, 6, 0, 21, 28, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"csi-node-driver", "controller-revision-hash":"856c6b598f", "k8s-app":"csi-node-driver", "name":"csi-node-driver", "pod-template-generation":"1", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"csi-node-driver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ci-3510.3.8-n-28804d0655", ContainerID:"242b8628b28a14020a4862b19eb09c9477d5c1269c192eab8d02f1670cf18060", Pod:"csi-node-driver-pb785", Endpoint:"eth0", ServiceAccountName:"csi-node-driver", IPNetworks:[]string{"192.168.107.67/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.csi-node-driver"}, InterfaceName:"cali5149339e35c", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Sep 6 00:22:11.476517 env[1421]: 2025-09-06 00:22:11.373 [INFO][5135] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="3589c5c844285e0a60626274d5835cedbf9fdc60545aa4feb953e45a8904f94b" Sep 6 00:22:11.476517 env[1421]: 2025-09-06 00:22:11.373 [INFO][5135] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="3589c5c844285e0a60626274d5835cedbf9fdc60545aa4feb953e45a8904f94b" iface="eth0" netns="" Sep 6 00:22:11.476517 env[1421]: 2025-09-06 00:22:11.373 [INFO][5135] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="3589c5c844285e0a60626274d5835cedbf9fdc60545aa4feb953e45a8904f94b" Sep 6 00:22:11.476517 env[1421]: 2025-09-06 00:22:11.373 [INFO][5135] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="3589c5c844285e0a60626274d5835cedbf9fdc60545aa4feb953e45a8904f94b" Sep 6 00:22:11.476517 env[1421]: 2025-09-06 00:22:11.447 [INFO][5143] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="3589c5c844285e0a60626274d5835cedbf9fdc60545aa4feb953e45a8904f94b" HandleID="k8s-pod-network.3589c5c844285e0a60626274d5835cedbf9fdc60545aa4feb953e45a8904f94b" Workload="ci--3510.3.8--n--28804d0655-k8s-csi--node--driver--pb785-eth0" Sep 6 00:22:11.476517 env[1421]: 2025-09-06 00:22:11.448 [INFO][5143] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Sep 6 00:22:11.476517 env[1421]: 2025-09-06 00:22:11.448 [INFO][5143] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Sep 6 00:22:11.476517 env[1421]: 2025-09-06 00:22:11.471 [WARNING][5143] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="3589c5c844285e0a60626274d5835cedbf9fdc60545aa4feb953e45a8904f94b" HandleID="k8s-pod-network.3589c5c844285e0a60626274d5835cedbf9fdc60545aa4feb953e45a8904f94b" Workload="ci--3510.3.8--n--28804d0655-k8s-csi--node--driver--pb785-eth0" Sep 6 00:22:11.476517 env[1421]: 2025-09-06 00:22:11.471 [INFO][5143] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="3589c5c844285e0a60626274d5835cedbf9fdc60545aa4feb953e45a8904f94b" HandleID="k8s-pod-network.3589c5c844285e0a60626274d5835cedbf9fdc60545aa4feb953e45a8904f94b" Workload="ci--3510.3.8--n--28804d0655-k8s-csi--node--driver--pb785-eth0" Sep 6 00:22:11.476517 env[1421]: 2025-09-06 00:22:11.473 [INFO][5143] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Sep 6 00:22:11.476517 env[1421]: 2025-09-06 00:22:11.474 [INFO][5135] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="3589c5c844285e0a60626274d5835cedbf9fdc60545aa4feb953e45a8904f94b" Sep 6 00:22:11.477396 env[1421]: time="2025-09-06T00:22:11.477350673Z" level=info msg="TearDown network for sandbox \"3589c5c844285e0a60626274d5835cedbf9fdc60545aa4feb953e45a8904f94b\" successfully" Sep 6 00:22:11.477490 env[1421]: time="2025-09-06T00:22:11.477471773Z" level=info msg="StopPodSandbox for \"3589c5c844285e0a60626274d5835cedbf9fdc60545aa4feb953e45a8904f94b\" returns successfully" Sep 6 00:22:11.478147 env[1421]: time="2025-09-06T00:22:11.478114575Z" level=info msg="RemovePodSandbox for \"3589c5c844285e0a60626274d5835cedbf9fdc60545aa4feb953e45a8904f94b\"" Sep 6 00:22:11.478336 env[1421]: time="2025-09-06T00:22:11.478290376Z" level=info msg="Forcibly stopping sandbox \"3589c5c844285e0a60626274d5835cedbf9fdc60545aa4feb953e45a8904f94b\"" Sep 6 00:22:11.699247 env[1421]: 2025-09-06 00:22:11.604 [WARNING][5159] cni-plugin/k8s.go 604: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="3589c5c844285e0a60626274d5835cedbf9fdc60545aa4feb953e45a8904f94b" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ci--3510.3.8--n--28804d0655-k8s-csi--node--driver--pb785-eth0", GenerateName:"csi-node-driver-", Namespace:"calico-system", SelfLink:"", UID:"1ea5f5bc-3af9-4595-8783-60d58914430c", ResourceVersion:"968", Generation:0, CreationTimestamp:time.Date(2025, time.September, 6, 0, 21, 28, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"csi-node-driver", "controller-revision-hash":"856c6b598f", "k8s-app":"csi-node-driver", "name":"csi-node-driver", "pod-template-generation":"1", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"csi-node-driver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ci-3510.3.8-n-28804d0655", ContainerID:"242b8628b28a14020a4862b19eb09c9477d5c1269c192eab8d02f1670cf18060", Pod:"csi-node-driver-pb785", Endpoint:"eth0", ServiceAccountName:"csi-node-driver", IPNetworks:[]string{"192.168.107.67/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.csi-node-driver"}, InterfaceName:"cali5149339e35c", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Sep 6 00:22:11.699247 env[1421]: 2025-09-06 00:22:11.604 [INFO][5159] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="3589c5c844285e0a60626274d5835cedbf9fdc60545aa4feb953e45a8904f94b" Sep 6 00:22:11.699247 env[1421]: 2025-09-06 00:22:11.604 [INFO][5159] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="3589c5c844285e0a60626274d5835cedbf9fdc60545aa4feb953e45a8904f94b" iface="eth0" netns="" Sep 6 00:22:11.699247 env[1421]: 2025-09-06 00:22:11.604 [INFO][5159] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="3589c5c844285e0a60626274d5835cedbf9fdc60545aa4feb953e45a8904f94b" Sep 6 00:22:11.699247 env[1421]: 2025-09-06 00:22:11.604 [INFO][5159] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="3589c5c844285e0a60626274d5835cedbf9fdc60545aa4feb953e45a8904f94b" Sep 6 00:22:11.699247 env[1421]: 2025-09-06 00:22:11.668 [INFO][5166] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="3589c5c844285e0a60626274d5835cedbf9fdc60545aa4feb953e45a8904f94b" HandleID="k8s-pod-network.3589c5c844285e0a60626274d5835cedbf9fdc60545aa4feb953e45a8904f94b" Workload="ci--3510.3.8--n--28804d0655-k8s-csi--node--driver--pb785-eth0" Sep 6 00:22:11.699247 env[1421]: 2025-09-06 00:22:11.669 [INFO][5166] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Sep 6 00:22:11.699247 env[1421]: 2025-09-06 00:22:11.669 [INFO][5166] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Sep 6 00:22:11.699247 env[1421]: 2025-09-06 00:22:11.686 [WARNING][5166] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="3589c5c844285e0a60626274d5835cedbf9fdc60545aa4feb953e45a8904f94b" HandleID="k8s-pod-network.3589c5c844285e0a60626274d5835cedbf9fdc60545aa4feb953e45a8904f94b" Workload="ci--3510.3.8--n--28804d0655-k8s-csi--node--driver--pb785-eth0" Sep 6 00:22:11.699247 env[1421]: 2025-09-06 00:22:11.686 [INFO][5166] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="3589c5c844285e0a60626274d5835cedbf9fdc60545aa4feb953e45a8904f94b" HandleID="k8s-pod-network.3589c5c844285e0a60626274d5835cedbf9fdc60545aa4feb953e45a8904f94b" Workload="ci--3510.3.8--n--28804d0655-k8s-csi--node--driver--pb785-eth0" Sep 6 00:22:11.699247 env[1421]: 2025-09-06 00:22:11.692 [INFO][5166] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Sep 6 00:22:11.699247 env[1421]: 2025-09-06 00:22:11.697 [INFO][5159] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="3589c5c844285e0a60626274d5835cedbf9fdc60545aa4feb953e45a8904f94b" Sep 6 00:22:11.700142 env[1421]: time="2025-09-06T00:22:11.700095551Z" level=info msg="TearDown network for sandbox \"3589c5c844285e0a60626274d5835cedbf9fdc60545aa4feb953e45a8904f94b\" successfully" Sep 6 00:22:11.716663 env[1421]: time="2025-09-06T00:22:11.716607608Z" level=info msg="RemovePodSandbox \"3589c5c844285e0a60626274d5835cedbf9fdc60545aa4feb953e45a8904f94b\" returns successfully" Sep 6 00:22:11.717670 env[1421]: time="2025-09-06T00:22:11.717634512Z" level=info msg="StopPodSandbox for \"0da0f48023f8f0b7a2f1cfb4fe092b51881d3e7712929074c2fbdb5a37da82a1\"" Sep 6 00:22:11.897044 env[1421]: 2025-09-06 00:22:11.805 [WARNING][5182] cni-plugin/k8s.go 604: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="0da0f48023f8f0b7a2f1cfb4fe092b51881d3e7712929074c2fbdb5a37da82a1" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ci--3510.3.8--n--28804d0655-k8s-calico--apiserver--6575dd5656--clp7v-eth0", GenerateName:"calico-apiserver-6575dd5656-", Namespace:"calico-apiserver", SelfLink:"", UID:"1fd46bfe-b99f-484d-b293-2fbf2d2e8a89", ResourceVersion:"1050", Generation:0, CreationTimestamp:time.Date(2025, time.September, 6, 0, 21, 24, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"apiserver":"true", "app.kubernetes.io/name":"calico-apiserver", "k8s-app":"calico-apiserver", "pod-template-hash":"6575dd5656", "projectcalico.org/namespace":"calico-apiserver", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-apiserver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ci-3510.3.8-n-28804d0655", ContainerID:"31f743b440e1d843931af6b5841bd79143d64437876023cac7c57a804880c849", Pod:"calico-apiserver-6575dd5656-clp7v", Endpoint:"eth0", ServiceAccountName:"calico-apiserver", IPNetworks:[]string{"192.168.107.66/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-apiserver", "ksa.calico-apiserver.calico-apiserver"}, InterfaceName:"calib2ec18b54e0", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Sep 6 00:22:11.897044 env[1421]: 2025-09-06 00:22:11.805 [INFO][5182] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="0da0f48023f8f0b7a2f1cfb4fe092b51881d3e7712929074c2fbdb5a37da82a1" Sep 6 00:22:11.897044 env[1421]: 2025-09-06 00:22:11.805 [INFO][5182] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="0da0f48023f8f0b7a2f1cfb4fe092b51881d3e7712929074c2fbdb5a37da82a1" iface="eth0" netns="" Sep 6 00:22:11.897044 env[1421]: 2025-09-06 00:22:11.805 [INFO][5182] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="0da0f48023f8f0b7a2f1cfb4fe092b51881d3e7712929074c2fbdb5a37da82a1" Sep 6 00:22:11.897044 env[1421]: 2025-09-06 00:22:11.805 [INFO][5182] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="0da0f48023f8f0b7a2f1cfb4fe092b51881d3e7712929074c2fbdb5a37da82a1" Sep 6 00:22:11.897044 env[1421]: 2025-09-06 00:22:11.878 [INFO][5189] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="0da0f48023f8f0b7a2f1cfb4fe092b51881d3e7712929074c2fbdb5a37da82a1" HandleID="k8s-pod-network.0da0f48023f8f0b7a2f1cfb4fe092b51881d3e7712929074c2fbdb5a37da82a1" Workload="ci--3510.3.8--n--28804d0655-k8s-calico--apiserver--6575dd5656--clp7v-eth0" Sep 6 00:22:11.897044 env[1421]: 2025-09-06 00:22:11.878 [INFO][5189] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Sep 6 00:22:11.897044 env[1421]: 2025-09-06 00:22:11.878 [INFO][5189] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Sep 6 00:22:11.897044 env[1421]: 2025-09-06 00:22:11.887 [WARNING][5189] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="0da0f48023f8f0b7a2f1cfb4fe092b51881d3e7712929074c2fbdb5a37da82a1" HandleID="k8s-pod-network.0da0f48023f8f0b7a2f1cfb4fe092b51881d3e7712929074c2fbdb5a37da82a1" Workload="ci--3510.3.8--n--28804d0655-k8s-calico--apiserver--6575dd5656--clp7v-eth0" Sep 6 00:22:11.897044 env[1421]: 2025-09-06 00:22:11.887 [INFO][5189] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="0da0f48023f8f0b7a2f1cfb4fe092b51881d3e7712929074c2fbdb5a37da82a1" HandleID="k8s-pod-network.0da0f48023f8f0b7a2f1cfb4fe092b51881d3e7712929074c2fbdb5a37da82a1" Workload="ci--3510.3.8--n--28804d0655-k8s-calico--apiserver--6575dd5656--clp7v-eth0" Sep 6 00:22:11.897044 env[1421]: 2025-09-06 00:22:11.893 [INFO][5189] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Sep 6 00:22:11.897044 env[1421]: 2025-09-06 00:22:11.895 [INFO][5182] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="0da0f48023f8f0b7a2f1cfb4fe092b51881d3e7712929074c2fbdb5a37da82a1" Sep 6 00:22:11.898187 env[1421]: time="2025-09-06T00:22:11.898137942Z" level=info msg="TearDown network for sandbox \"0da0f48023f8f0b7a2f1cfb4fe092b51881d3e7712929074c2fbdb5a37da82a1\" successfully" Sep 6 00:22:11.898289 env[1421]: time="2025-09-06T00:22:11.898269543Z" level=info msg="StopPodSandbox for \"0da0f48023f8f0b7a2f1cfb4fe092b51881d3e7712929074c2fbdb5a37da82a1\" returns successfully" Sep 6 00:22:11.898973 env[1421]: time="2025-09-06T00:22:11.898940445Z" level=info msg="RemovePodSandbox for \"0da0f48023f8f0b7a2f1cfb4fe092b51881d3e7712929074c2fbdb5a37da82a1\"" Sep 6 00:22:11.899184 env[1421]: time="2025-09-06T00:22:11.899129846Z" level=info msg="Forcibly stopping sandbox \"0da0f48023f8f0b7a2f1cfb4fe092b51881d3e7712929074c2fbdb5a37da82a1\"" Sep 6 00:22:12.082006 env[1421]: 2025-09-06 00:22:12.005 [WARNING][5204] cni-plugin/k8s.go 604: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="0da0f48023f8f0b7a2f1cfb4fe092b51881d3e7712929074c2fbdb5a37da82a1" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ci--3510.3.8--n--28804d0655-k8s-calico--apiserver--6575dd5656--clp7v-eth0", GenerateName:"calico-apiserver-6575dd5656-", Namespace:"calico-apiserver", SelfLink:"", UID:"1fd46bfe-b99f-484d-b293-2fbf2d2e8a89", ResourceVersion:"1050", Generation:0, CreationTimestamp:time.Date(2025, time.September, 6, 0, 21, 24, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"apiserver":"true", "app.kubernetes.io/name":"calico-apiserver", "k8s-app":"calico-apiserver", "pod-template-hash":"6575dd5656", "projectcalico.org/namespace":"calico-apiserver", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-apiserver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ci-3510.3.8-n-28804d0655", ContainerID:"31f743b440e1d843931af6b5841bd79143d64437876023cac7c57a804880c849", Pod:"calico-apiserver-6575dd5656-clp7v", Endpoint:"eth0", ServiceAccountName:"calico-apiserver", IPNetworks:[]string{"192.168.107.66/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-apiserver", "ksa.calico-apiserver.calico-apiserver"}, InterfaceName:"calib2ec18b54e0", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Sep 6 00:22:12.082006 env[1421]: 2025-09-06 00:22:12.006 [INFO][5204] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="0da0f48023f8f0b7a2f1cfb4fe092b51881d3e7712929074c2fbdb5a37da82a1" Sep 6 00:22:12.082006 env[1421]: 2025-09-06 00:22:12.006 [INFO][5204] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="0da0f48023f8f0b7a2f1cfb4fe092b51881d3e7712929074c2fbdb5a37da82a1" iface="eth0" netns="" Sep 6 00:22:12.082006 env[1421]: 2025-09-06 00:22:12.006 [INFO][5204] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="0da0f48023f8f0b7a2f1cfb4fe092b51881d3e7712929074c2fbdb5a37da82a1" Sep 6 00:22:12.082006 env[1421]: 2025-09-06 00:22:12.006 [INFO][5204] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="0da0f48023f8f0b7a2f1cfb4fe092b51881d3e7712929074c2fbdb5a37da82a1" Sep 6 00:22:12.082006 env[1421]: 2025-09-06 00:22:12.054 [INFO][5211] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="0da0f48023f8f0b7a2f1cfb4fe092b51881d3e7712929074c2fbdb5a37da82a1" HandleID="k8s-pod-network.0da0f48023f8f0b7a2f1cfb4fe092b51881d3e7712929074c2fbdb5a37da82a1" Workload="ci--3510.3.8--n--28804d0655-k8s-calico--apiserver--6575dd5656--clp7v-eth0" Sep 6 00:22:12.082006 env[1421]: 2025-09-06 00:22:12.054 [INFO][5211] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Sep 6 00:22:12.082006 env[1421]: 2025-09-06 00:22:12.055 [INFO][5211] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Sep 6 00:22:12.082006 env[1421]: 2025-09-06 00:22:12.068 [WARNING][5211] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="0da0f48023f8f0b7a2f1cfb4fe092b51881d3e7712929074c2fbdb5a37da82a1" HandleID="k8s-pod-network.0da0f48023f8f0b7a2f1cfb4fe092b51881d3e7712929074c2fbdb5a37da82a1" Workload="ci--3510.3.8--n--28804d0655-k8s-calico--apiserver--6575dd5656--clp7v-eth0" Sep 6 00:22:12.082006 env[1421]: 2025-09-06 00:22:12.068 [INFO][5211] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="0da0f48023f8f0b7a2f1cfb4fe092b51881d3e7712929074c2fbdb5a37da82a1" HandleID="k8s-pod-network.0da0f48023f8f0b7a2f1cfb4fe092b51881d3e7712929074c2fbdb5a37da82a1" Workload="ci--3510.3.8--n--28804d0655-k8s-calico--apiserver--6575dd5656--clp7v-eth0" Sep 6 00:22:12.082006 env[1421]: 2025-09-06 00:22:12.075 [INFO][5211] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Sep 6 00:22:12.082006 env[1421]: 2025-09-06 00:22:12.076 [INFO][5204] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="0da0f48023f8f0b7a2f1cfb4fe092b51881d3e7712929074c2fbdb5a37da82a1" Sep 6 00:22:12.082006 env[1421]: time="2025-09-06T00:22:12.080372375Z" level=info msg="TearDown network for sandbox \"0da0f48023f8f0b7a2f1cfb4fe092b51881d3e7712929074c2fbdb5a37da82a1\" successfully" Sep 6 00:22:12.092006 env[1421]: time="2025-09-06T00:22:12.091943615Z" level=info msg="RemovePodSandbox \"0da0f48023f8f0b7a2f1cfb4fe092b51881d3e7712929074c2fbdb5a37da82a1\" returns successfully" Sep 6 00:22:12.771028 env[1421]: time="2025-09-06T00:22:12.770963155Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/kube-controllers:v3.30.3,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 6 00:22:12.780353 env[1421]: time="2025-09-06T00:22:12.780295287Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:df191a54fb79de3c693f8b1b864a1bd3bd14f63b3fff9d5fa4869c471ce3cd37,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 6 00:22:12.784975 env[1421]: time="2025-09-06T00:22:12.784901103Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/kube-controllers:v3.30.3,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 6 00:22:12.791709 env[1421]: time="2025-09-06T00:22:12.791656227Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/kube-controllers@sha256:27c4187717f08f0a5727019d8beb7597665eb47e69eaa1d7d091a7e28913e577,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 6 00:22:12.792538 env[1421]: time="2025-09-06T00:22:12.792491729Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/kube-controllers:v3.30.3\" returns image reference \"sha256:df191a54fb79de3c693f8b1b864a1bd3bd14f63b3fff9d5fa4869c471ce3cd37\"" Sep 6 00:22:12.812017 env[1421]: time="2025-09-06T00:22:12.800072756Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/goldmane:v3.30.3\"" Sep 6 00:22:12.822958 env[1421]: time="2025-09-06T00:22:12.819874124Z" level=info msg="CreateContainer within sandbox \"f999929bb9810ce86cf66144cdb5da08e1f850a8e7c7ae0fe2ff1f267a7012a6\" for container &ContainerMetadata{Name:calico-kube-controllers,Attempt:0,}" Sep 6 00:22:12.872042 env[1421]: time="2025-09-06T00:22:12.871985303Z" level=info msg="CreateContainer within sandbox \"f999929bb9810ce86cf66144cdb5da08e1f850a8e7c7ae0fe2ff1f267a7012a6\" for &ContainerMetadata{Name:calico-kube-controllers,Attempt:0,} returns container id \"ccc39446b709dfd115193a4cc385e4f6955f060c010b1d48a49d0bfab0dd167b\"" Sep 6 00:22:12.873207 env[1421]: time="2025-09-06T00:22:12.873175008Z" level=info msg="StartContainer for \"ccc39446b709dfd115193a4cc385e4f6955f060c010b1d48a49d0bfab0dd167b\"" Sep 6 00:22:12.876000 audit[4836]: AVC avc: denied { watch } for pid=4836 comm="apiserver" path="/calico-apiserver-certs/..2025_09_06_00_21_42.1453333682/tls.crt" dev="tmpfs" ino=4 scontext=system_u:system_r:svirt_lxc_net_t:s0:c783,c1010 tcontext=system_u:object_r:svirt_lxc_file_t:s0:c783,c1010 tclass=file permissive=0 Sep 6 00:22:12.883167 kernel: kauditd_printk_skb: 198 callbacks suppressed Sep 6 00:22:12.883244 kernel: audit: type=1400 audit(1757118132.876:1367): avc: denied { watch } for pid=4836 comm="apiserver" path="/calico-apiserver-certs/..2025_09_06_00_21_42.1453333682/tls.crt" dev="tmpfs" ino=4 scontext=system_u:system_r:svirt_lxc_net_t:s0:c783,c1010 tcontext=system_u:object_r:svirt_lxc_file_t:s0:c783,c1010 tclass=file permissive=0 Sep 6 00:22:12.876000 audit[4836]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=7 a1=c0009f0400 a2=fc6 a3=0 items=0 ppid=4187 pid=4836 auid=4294967295 uid=10001 gid=10001 euid=10001 suid=10001 fsuid=10001 egid=10001 sgid=10001 fsgid=10001 tty=(none) ses=4294967295 comm="apiserver" exe="/code/apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c783,c1010 key=(null) Sep 6 00:22:12.935973 kernel: audit: type=1300 audit(1757118132.876:1367): arch=c000003e syscall=254 success=no exit=-13 a0=7 a1=c0009f0400 a2=fc6 a3=0 items=0 ppid=4187 pid=4836 auid=4294967295 uid=10001 gid=10001 euid=10001 suid=10001 fsuid=10001 egid=10001 sgid=10001 fsgid=10001 tty=(none) ses=4294967295 comm="apiserver" exe="/code/apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c783,c1010 key=(null) Sep 6 00:22:12.876000 audit: PROCTITLE proctitle=2F636F64652F617069736572766572002D2D7365637572652D706F72743D35343433002D2D746C732D707269766174652D6B65792D66696C653D2F63616C69636F2D6170697365727665722D63657274732F746C732E6B6579002D2D746C732D636572742D66696C653D2F63616C69636F2D6170697365727665722D63657274 Sep 6 00:22:12.968247 systemd[1]: Started cri-containerd-ccc39446b709dfd115193a4cc385e4f6955f060c010b1d48a49d0bfab0dd167b.scope. Sep 6 00:22:12.974968 kernel: audit: type=1327 audit(1757118132.876:1367): proctitle=2F636F64652F617069736572766572002D2D7365637572652D706F72743D35343433002D2D746C732D707269766174652D6B65792D66696C653D2F63616C69636F2D6170697365727665722D63657274732F746C732E6B6579002D2D746C732D636572742D66696C653D2F63616C69636F2D6170697365727665722D63657274 Sep 6 00:22:12.988000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:13.005152 kernel: audit: type=1400 audit(1757118132.988:1368): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:12.988000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:13.023976 kernel: audit: type=1400 audit(1757118132.988:1369): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:12.988000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:13.040944 kernel: audit: type=1400 audit(1757118132.988:1370): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:12.988000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:12.988000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:13.073888 kernel: audit: type=1400 audit(1757118132.988:1371): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:13.074068 kernel: audit: type=1400 audit(1757118132.988:1372): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:12.988000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:13.094712 kernel: audit: type=1400 audit(1757118132.988:1373): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:12.988000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:13.112063 kernel: audit: type=1400 audit(1757118132.988:1374): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:12.988000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:12.988000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:13.004000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:13.004000 audit: BPF prog-id=221 op=LOAD Sep 6 00:22:13.005000 audit[5225]: AVC avc: denied { bpf } for pid=5225 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:13.005000 audit[5225]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000117c48 a2=10 a3=1c items=0 ppid=4420 pid=5225 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:22:13.005000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6363633339343436623730396466643131353139336134636333383565 Sep 6 00:22:13.005000 audit[5225]: AVC avc: denied { perfmon } for pid=5225 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:13.005000 audit[5225]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001176b0 a2=3c a3=8 items=0 ppid=4420 pid=5225 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:22:13.005000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6363633339343436623730396466643131353139336134636333383565 Sep 6 00:22:13.005000 audit[5225]: AVC avc: denied { bpf } for pid=5225 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:13.005000 audit[5225]: AVC avc: denied { bpf } for pid=5225 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:13.005000 audit[5225]: AVC avc: denied { bpf } for pid=5225 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:13.005000 audit[5225]: AVC avc: denied { perfmon } for pid=5225 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:13.005000 audit[5225]: AVC avc: denied { perfmon } for pid=5225 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:13.005000 audit[5225]: AVC avc: denied { perfmon } for pid=5225 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:13.005000 audit[5225]: AVC avc: denied { perfmon } for pid=5225 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:13.005000 audit[5225]: AVC avc: denied { perfmon } for pid=5225 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:13.005000 audit[5225]: AVC avc: denied { bpf } for pid=5225 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:13.005000 audit[5225]: AVC avc: denied { bpf } for pid=5225 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:13.005000 audit: BPF prog-id=222 op=LOAD Sep 6 00:22:13.005000 audit[5225]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001179d8 a2=78 a3=c00027ab00 items=0 ppid=4420 pid=5225 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:22:13.005000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6363633339343436623730396466643131353139336134636333383565 Sep 6 00:22:13.005000 audit[5225]: AVC avc: denied { bpf } for pid=5225 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:13.005000 audit[5225]: AVC avc: denied { bpf } for pid=5225 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:13.005000 audit[5225]: AVC avc: denied { perfmon } for pid=5225 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:13.005000 audit[5225]: AVC avc: denied { perfmon } for pid=5225 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:13.005000 audit[5225]: AVC avc: denied { perfmon } for pid=5225 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:13.005000 audit[5225]: AVC avc: denied { perfmon } for pid=5225 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:13.005000 audit[5225]: AVC avc: denied { perfmon } for pid=5225 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:13.005000 audit[5225]: AVC avc: denied { bpf } for pid=5225 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:13.005000 audit[5225]: AVC avc: denied { bpf } for pid=5225 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:13.005000 audit: BPF prog-id=223 op=LOAD Sep 6 00:22:13.005000 audit[5225]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000117770 a2=78 a3=c00027ab48 items=0 ppid=4420 pid=5225 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:22:13.005000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6363633339343436623730396466643131353139336134636333383565 Sep 6 00:22:13.005000 audit: BPF prog-id=223 op=UNLOAD Sep 6 00:22:13.005000 audit: BPF prog-id=222 op=UNLOAD Sep 6 00:22:13.005000 audit[5225]: AVC avc: denied { bpf } for pid=5225 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:13.005000 audit[5225]: AVC avc: denied { bpf } for pid=5225 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:13.005000 audit[5225]: AVC avc: denied { bpf } for pid=5225 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:13.005000 audit[5225]: AVC avc: denied { perfmon } for pid=5225 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:13.005000 audit[5225]: AVC avc: denied { perfmon } for pid=5225 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:13.005000 audit[5225]: AVC avc: denied { perfmon } for pid=5225 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:13.005000 audit[5225]: AVC avc: denied { perfmon } for pid=5225 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:13.005000 audit[5225]: AVC avc: denied { perfmon } for pid=5225 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:13.005000 audit[5225]: AVC avc: denied { bpf } for pid=5225 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:13.005000 audit[5225]: AVC avc: denied { bpf } for pid=5225 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:13.005000 audit: BPF prog-id=224 op=LOAD Sep 6 00:22:13.005000 audit[5225]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000117c30 a2=78 a3=c00027af58 items=0 ppid=4420 pid=5225 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:22:13.005000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6363633339343436623730396466643131353139336134636333383565 Sep 6 00:22:13.123194 env[1421]: time="2025-09-06T00:22:13.123149864Z" level=info msg="StartContainer for \"ccc39446b709dfd115193a4cc385e4f6955f060c010b1d48a49d0bfab0dd167b\" returns successfully" Sep 6 00:22:13.897600 systemd[1]: run-containerd-runc-k8s.io-ccc39446b709dfd115193a4cc385e4f6955f060c010b1d48a49d0bfab0dd167b-runc.AGl5SD.mount: Deactivated successfully. Sep 6 00:22:13.903448 kubelet[2412]: I0906 00:22:13.902377 2412 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="calico-system/calico-kube-controllers-7b6d9948b6-pwxnb" podStartSLOduration=33.315889689 podStartE2EDuration="45.902322214s" podCreationTimestamp="2025-09-06 00:21:28 +0000 UTC" firstStartedPulling="2025-09-06 00:22:00.20772061 +0000 UTC m=+52.113066745" lastFinishedPulling="2025-09-06 00:22:12.794153135 +0000 UTC m=+64.699499270" observedRunningTime="2025-09-06 00:22:13.901975213 +0000 UTC m=+65.807321348" watchObservedRunningTime="2025-09-06 00:22:13.902322214 +0000 UTC m=+65.807668349" Sep 6 00:22:13.903448 kubelet[2412]: I0906 00:22:13.902815 2412 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="calico-apiserver/calico-apiserver-6575dd5656-6ft5t" podStartSLOduration=41.70451586 podStartE2EDuration="49.902794716s" podCreationTimestamp="2025-09-06 00:21:24 +0000 UTC" firstStartedPulling="2025-09-06 00:21:59.082923821 +0000 UTC m=+50.988269856" lastFinishedPulling="2025-09-06 00:22:07.281202577 +0000 UTC m=+59.186548712" observedRunningTime="2025-09-06 00:22:07.843055453 +0000 UTC m=+59.748401488" watchObservedRunningTime="2025-09-06 00:22:13.902794716 +0000 UTC m=+65.808140751" Sep 6 00:22:19.557253 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount1927527831.mount: Deactivated successfully. Sep 6 00:22:20.672754 env[1421]: time="2025-09-06T00:22:20.672685089Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/goldmane:v3.30.3,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 6 00:22:20.679593 env[1421]: time="2025-09-06T00:22:20.679538410Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:a7d029fd8f6be94c26af980675c1650818e1e6e19dbd2f8c13e6e61963f021e8,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 6 00:22:20.684889 env[1421]: time="2025-09-06T00:22:20.684839927Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/goldmane:v3.30.3,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 6 00:22:20.689365 env[1421]: time="2025-09-06T00:22:20.689314440Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/goldmane@sha256:46297703ab3739331a00a58f0d6a5498c8d3b6523ad947eed68592ee0f3e79f0,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 6 00:22:20.690235 env[1421]: time="2025-09-06T00:22:20.690192043Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/goldmane:v3.30.3\" returns image reference \"sha256:a7d029fd8f6be94c26af980675c1650818e1e6e19dbd2f8c13e6e61963f021e8\"" Sep 6 00:22:20.692925 env[1421]: time="2025-09-06T00:22:20.692885452Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.3\"" Sep 6 00:22:20.693963 env[1421]: time="2025-09-06T00:22:20.693892355Z" level=info msg="CreateContainer within sandbox \"3c20de4c5b6deb1bb564d75e0baaa6c47ec09a68bc0cb741a8cdb2bd6ab05ed2\" for container &ContainerMetadata{Name:goldmane,Attempt:0,}" Sep 6 00:22:20.734196 env[1421]: time="2025-09-06T00:22:20.734130880Z" level=info msg="CreateContainer within sandbox \"3c20de4c5b6deb1bb564d75e0baaa6c47ec09a68bc0cb741a8cdb2bd6ab05ed2\" for &ContainerMetadata{Name:goldmane,Attempt:0,} returns container id \"3eeb0c397e20f5d56411338607774e9dd228c084e9abaebad84a4c53ed7ed108\"" Sep 6 00:22:20.735271 env[1421]: time="2025-09-06T00:22:20.735235284Z" level=info msg="StartContainer for \"3eeb0c397e20f5d56411338607774e9dd228c084e9abaebad84a4c53ed7ed108\"" Sep 6 00:22:20.778898 systemd[1]: Started cri-containerd-3eeb0c397e20f5d56411338607774e9dd228c084e9abaebad84a4c53ed7ed108.scope. Sep 6 00:22:20.837850 kernel: kauditd_printk_skb: 50 callbacks suppressed Sep 6 00:22:20.838016 kernel: audit: type=1400 audit(1757118140.831:1386): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:20.831000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:20.831000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:20.881658 kernel: audit: type=1400 audit(1757118140.831:1387): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:20.831000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:20.908004 kernel: audit: type=1400 audit(1757118140.831:1388): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:20.913696 env[1421]: time="2025-09-06T00:22:20.913640841Z" level=info msg="StartContainer for \"3eeb0c397e20f5d56411338607774e9dd228c084e9abaebad84a4c53ed7ed108\" returns successfully" Sep 6 00:22:20.831000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:20.931967 kernel: audit: type=1400 audit(1757118140.831:1389): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:20.831000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:20.956996 kernel: audit: type=1400 audit(1757118140.831:1390): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:20.831000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:20.831000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:20.991965 kernel: audit: type=1400 audit(1757118140.831:1391): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:20.992134 kernel: audit: type=1400 audit(1757118140.831:1392): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:20.831000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:20.831000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:21.024507 kernel: audit: type=1400 audit(1757118140.831:1393): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:21.024694 kernel: audit: type=1400 audit(1757118140.831:1394): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:20.857000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:20.857000 audit: BPF prog-id=225 op=LOAD Sep 6 00:22:21.042034 kernel: audit: type=1400 audit(1757118140.857:1395): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:20.858000 audit[5303]: AVC avc: denied { bpf } for pid=5303 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:20.858000 audit[5303]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000145c48 a2=10 a3=1c items=0 ppid=4590 pid=5303 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:22:20.858000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3365656230633339376532306635643536343131333338363037373734 Sep 6 00:22:20.858000 audit[5303]: AVC avc: denied { perfmon } for pid=5303 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:20.858000 audit[5303]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001456b0 a2=3c a3=8 items=0 ppid=4590 pid=5303 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:22:20.858000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3365656230633339376532306635643536343131333338363037373734 Sep 6 00:22:20.858000 audit[5303]: AVC avc: denied { bpf } for pid=5303 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:20.858000 audit[5303]: AVC avc: denied { bpf } for pid=5303 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:20.858000 audit[5303]: AVC avc: denied { bpf } for pid=5303 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:20.858000 audit[5303]: AVC avc: denied { perfmon } for pid=5303 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:20.858000 audit[5303]: AVC avc: denied { perfmon } for pid=5303 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:20.858000 audit[5303]: AVC avc: denied { perfmon } for pid=5303 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:20.858000 audit[5303]: AVC avc: denied { perfmon } for pid=5303 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:20.858000 audit[5303]: AVC avc: denied { perfmon } for pid=5303 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:20.858000 audit[5303]: AVC avc: denied { bpf } for pid=5303 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:20.858000 audit[5303]: AVC avc: denied { bpf } for pid=5303 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:20.858000 audit: BPF prog-id=226 op=LOAD Sep 6 00:22:20.858000 audit[5303]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001459d8 a2=78 a3=c000024450 items=0 ppid=4590 pid=5303 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:22:20.858000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3365656230633339376532306635643536343131333338363037373734 Sep 6 00:22:20.858000 audit[5303]: AVC avc: denied { bpf } for pid=5303 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:20.858000 audit[5303]: AVC avc: denied { bpf } for pid=5303 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:20.858000 audit[5303]: AVC avc: denied { perfmon } for pid=5303 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:20.858000 audit[5303]: AVC avc: denied { perfmon } for pid=5303 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:20.858000 audit[5303]: AVC avc: denied { perfmon } for pid=5303 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:20.858000 audit[5303]: AVC avc: denied { perfmon } for pid=5303 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:20.858000 audit[5303]: AVC avc: denied { perfmon } for pid=5303 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:20.858000 audit[5303]: AVC avc: denied { bpf } for pid=5303 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:20.858000 audit[5303]: AVC avc: denied { bpf } for pid=5303 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:20.858000 audit: BPF prog-id=227 op=LOAD Sep 6 00:22:20.858000 audit[5303]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000145770 a2=78 a3=c000024498 items=0 ppid=4590 pid=5303 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:22:20.858000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3365656230633339376532306635643536343131333338363037373734 Sep 6 00:22:20.858000 audit: BPF prog-id=227 op=UNLOAD Sep 6 00:22:20.858000 audit: BPF prog-id=226 op=UNLOAD Sep 6 00:22:20.858000 audit[5303]: AVC avc: denied { bpf } for pid=5303 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:20.858000 audit[5303]: AVC avc: denied { bpf } for pid=5303 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:20.858000 audit[5303]: AVC avc: denied { bpf } for pid=5303 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:20.858000 audit[5303]: AVC avc: denied { perfmon } for pid=5303 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:20.858000 audit[5303]: AVC avc: denied { perfmon } for pid=5303 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:20.858000 audit[5303]: AVC avc: denied { perfmon } for pid=5303 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:20.858000 audit[5303]: AVC avc: denied { perfmon } for pid=5303 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:20.858000 audit[5303]: AVC avc: denied { perfmon } for pid=5303 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:20.858000 audit[5303]: AVC avc: denied { bpf } for pid=5303 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:20.858000 audit[5303]: AVC avc: denied { bpf } for pid=5303 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:20.858000 audit: BPF prog-id=228 op=LOAD Sep 6 00:22:20.858000 audit[5303]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000145c30 a2=78 a3=c0000248a8 items=0 ppid=4590 pid=5303 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:22:20.858000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3365656230633339376532306635643536343131333338363037373734 Sep 6 00:22:21.928686 systemd[1]: run-containerd-runc-k8s.io-3eeb0c397e20f5d56411338607774e9dd228c084e9abaebad84a4c53ed7ed108-runc.iP3hLw.mount: Deactivated successfully. Sep 6 00:22:21.990000 audit[5348]: NETFILTER_CFG table=filter:128 family=2 entries=12 op=nft_register_rule pid=5348 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Sep 6 00:22:21.990000 audit[5348]: SYSCALL arch=c000003e syscall=46 success=yes exit=4504 a0=3 a1=7ffd744c6250 a2=0 a3=7ffd744c623c items=0 ppid=2518 pid=5348 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:22:21.990000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Sep 6 00:22:21.998000 audit[5348]: NETFILTER_CFG table=nat:129 family=2 entries=22 op=nft_register_rule pid=5348 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Sep 6 00:22:21.998000 audit[5348]: SYSCALL arch=c000003e syscall=46 success=yes exit=6540 a0=3 a1=7ffd744c6250 a2=0 a3=7ffd744c623c items=0 ppid=2518 pid=5348 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:22:21.998000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Sep 6 00:22:22.729081 env[1421]: time="2025-09-06T00:22:22.729024427Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/node-driver-registrar:v3.30.3,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 6 00:22:22.735840 env[1421]: time="2025-09-06T00:22:22.735786148Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:b8f31c4fdaed3fa08af64de3d37d65a4c2ea0d9f6f522cb60d2e0cb424f8dd8a,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 6 00:22:22.740405 env[1421]: time="2025-09-06T00:22:22.740355262Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/node-driver-registrar:v3.30.3,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 6 00:22:22.745003 env[1421]: time="2025-09-06T00:22:22.744961076Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/node-driver-registrar@sha256:731ab232ca708102ab332340b1274d5cd656aa896ecc5368ee95850b811df86f,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 6 00:22:22.745589 env[1421]: time="2025-09-06T00:22:22.745543778Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.3\" returns image reference \"sha256:b8f31c4fdaed3fa08af64de3d37d65a4c2ea0d9f6f522cb60d2e0cb424f8dd8a\"" Sep 6 00:22:22.751370 env[1421]: time="2025-09-06T00:22:22.751329396Z" level=info msg="CreateContainer within sandbox \"242b8628b28a14020a4862b19eb09c9477d5c1269c192eab8d02f1670cf18060\" for container &ContainerMetadata{Name:csi-node-driver-registrar,Attempt:0,}" Sep 6 00:22:22.793989 env[1421]: time="2025-09-06T00:22:22.793907926Z" level=info msg="CreateContainer within sandbox \"242b8628b28a14020a4862b19eb09c9477d5c1269c192eab8d02f1670cf18060\" for &ContainerMetadata{Name:csi-node-driver-registrar,Attempt:0,} returns container id \"043eed1d2c6ddea9b07054b3d3f77d66f7a968d6ec0c548d8871ee86981fb4c2\"" Sep 6 00:22:22.795281 env[1421]: time="2025-09-06T00:22:22.795242030Z" level=info msg="StartContainer for \"043eed1d2c6ddea9b07054b3d3f77d66f7a968d6ec0c548d8871ee86981fb4c2\"" Sep 6 00:22:22.842527 systemd[1]: Started cri-containerd-043eed1d2c6ddea9b07054b3d3f77d66f7a968d6ec0c548d8871ee86981fb4c2.scope. Sep 6 00:22:23.155000 audit[5362]: AVC avc: denied { perfmon } for pid=5362 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:23.155000 audit[5362]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=0 a1=c0001176b0 a2=3c a3=7f18429f89b8 items=0 ppid=4153 pid=5362 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:22:23.155000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3034336565643164326336646465613962303730353462336433663737 Sep 6 00:22:23.155000 audit[5362]: AVC avc: denied { bpf } for pid=5362 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:23.155000 audit[5362]: AVC avc: denied { bpf } for pid=5362 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:23.155000 audit[5362]: AVC avc: denied { bpf } for pid=5362 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:23.155000 audit[5362]: AVC avc: denied { perfmon } for pid=5362 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:23.155000 audit[5362]: AVC avc: denied { perfmon } for pid=5362 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:23.155000 audit[5362]: AVC avc: denied { perfmon } for pid=5362 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:23.155000 audit[5362]: AVC avc: denied { perfmon } for pid=5362 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:23.155000 audit[5362]: AVC avc: denied { perfmon } for pid=5362 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:23.155000 audit[5362]: AVC avc: denied { bpf } for pid=5362 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:23.155000 audit[5362]: AVC avc: denied { bpf } for pid=5362 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:23.155000 audit: BPF prog-id=229 op=LOAD Sep 6 00:22:23.155000 audit[5362]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c0001179d8 a2=78 a3=c0002185e8 items=0 ppid=4153 pid=5362 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:22:23.155000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3034336565643164326336646465613962303730353462336433663737 Sep 6 00:22:23.155000 audit[5362]: AVC avc: denied { bpf } for pid=5362 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:23.155000 audit[5362]: AVC avc: denied { bpf } for pid=5362 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:23.155000 audit[5362]: AVC avc: denied { perfmon } for pid=5362 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:23.155000 audit[5362]: AVC avc: denied { perfmon } for pid=5362 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:23.155000 audit[5362]: AVC avc: denied { perfmon } for pid=5362 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:23.155000 audit[5362]: AVC avc: denied { perfmon } for pid=5362 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:23.155000 audit[5362]: AVC avc: denied { perfmon } for pid=5362 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:23.155000 audit[5362]: AVC avc: denied { bpf } for pid=5362 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:23.155000 audit[5362]: AVC avc: denied { bpf } for pid=5362 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:23.155000 audit: BPF prog-id=230 op=LOAD Sep 6 00:22:23.155000 audit[5362]: SYSCALL arch=c000003e syscall=321 success=yes exit=17 a0=5 a1=c000117770 a2=78 a3=c000218638 items=0 ppid=4153 pid=5362 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:22:23.155000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3034336565643164326336646465613962303730353462336433663737 Sep 6 00:22:23.155000 audit: BPF prog-id=230 op=UNLOAD Sep 6 00:22:23.155000 audit: BPF prog-id=229 op=UNLOAD Sep 6 00:22:23.155000 audit[5362]: AVC avc: denied { bpf } for pid=5362 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:23.155000 audit[5362]: AVC avc: denied { bpf } for pid=5362 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:23.155000 audit[5362]: AVC avc: denied { bpf } for pid=5362 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:23.155000 audit[5362]: AVC avc: denied { perfmon } for pid=5362 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:23.155000 audit[5362]: AVC avc: denied { perfmon } for pid=5362 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:23.155000 audit[5362]: AVC avc: denied { perfmon } for pid=5362 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:23.155000 audit[5362]: AVC avc: denied { perfmon } for pid=5362 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:23.155000 audit[5362]: AVC avc: denied { perfmon } for pid=5362 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:23.155000 audit[5362]: AVC avc: denied { bpf } for pid=5362 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:23.155000 audit[5362]: AVC avc: denied { bpf } for pid=5362 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:23.155000 audit: BPF prog-id=231 op=LOAD Sep 6 00:22:23.155000 audit[5362]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c000117c30 a2=78 a3=c0002186c8 items=0 ppid=4153 pid=5362 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:22:23.155000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3034336565643164326336646465613962303730353462336433663737 Sep 6 00:22:23.177831 env[1421]: time="2025-09-06T00:22:23.177768993Z" level=info msg="StartContainer for \"043eed1d2c6ddea9b07054b3d3f77d66f7a968d6ec0c548d8871ee86981fb4c2\" returns successfully" Sep 6 00:22:23.635498 kubelet[2412]: I0906 00:22:23.635451 2412 csi_plugin.go:100] kubernetes.io/csi: Trying to validate a new CSI Driver with name: csi.tigera.io endpoint: /var/lib/kubelet/plugins/csi.tigera.io/csi.sock versions: 1.0.0 Sep 6 00:22:23.635498 kubelet[2412]: I0906 00:22:23.635496 2412 csi_plugin.go:113] kubernetes.io/csi: Register new plugin with name: csi.tigera.io at endpoint: /var/lib/kubelet/plugins/csi.tigera.io/csi.sock Sep 6 00:22:23.935860 kubelet[2412]: I0906 00:22:23.935680 2412 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="calico-system/goldmane-7988f88666-kvgbx" podStartSLOduration=37.166140284 podStartE2EDuration="56.935653783s" podCreationTimestamp="2025-09-06 00:21:27 +0000 UTC" firstStartedPulling="2025-09-06 00:22:00.922315249 +0000 UTC m=+52.827661284" lastFinishedPulling="2025-09-06 00:22:20.691828748 +0000 UTC m=+72.597174783" observedRunningTime="2025-09-06 00:22:21.924387867 +0000 UTC m=+73.829733902" watchObservedRunningTime="2025-09-06 00:22:23.935653783 +0000 UTC m=+75.840999818" Sep 6 00:22:23.953327 systemd[1]: run-containerd-runc-k8s.io-3eeb0c397e20f5d56411338607774e9dd228c084e9abaebad84a4c53ed7ed108-runc.rP0Vqd.mount: Deactivated successfully. Sep 6 00:22:24.874150 kubelet[2412]: I0906 00:22:24.874109 2412 prober_manager.go:312] "Failed to trigger a manual run" probe="Readiness" Sep 6 00:22:24.906828 kubelet[2412]: I0906 00:22:24.906719 2412 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="calico-system/csi-node-driver-pb785" podStartSLOduration=33.028451723 podStartE2EDuration="56.906668689s" podCreationTimestamp="2025-09-06 00:21:28 +0000 UTC" firstStartedPulling="2025-09-06 00:21:58.869178318 +0000 UTC m=+50.774524353" lastFinishedPulling="2025-09-06 00:22:22.747395284 +0000 UTC m=+74.652741319" observedRunningTime="2025-09-06 00:22:23.936362685 +0000 UTC m=+75.841708720" watchObservedRunningTime="2025-09-06 00:22:24.906668689 +0000 UTC m=+76.812014724" Sep 6 00:22:24.948000 audit[5427]: NETFILTER_CFG table=filter:130 family=2 entries=11 op=nft_register_rule pid=5427 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Sep 6 00:22:24.948000 audit[5427]: SYSCALL arch=c000003e syscall=46 success=yes exit=3760 a0=3 a1=7ffe07aef1e0 a2=0 a3=7ffe07aef1cc items=0 ppid=2518 pid=5427 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:22:24.948000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Sep 6 00:22:24.955000 audit[5427]: NETFILTER_CFG table=nat:131 family=2 entries=29 op=nft_register_chain pid=5427 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Sep 6 00:22:24.955000 audit[5427]: SYSCALL arch=c000003e syscall=46 success=yes exit=10116 a0=3 a1=7ffe07aef1e0 a2=0 a3=7ffe07aef1cc items=0 ppid=2518 pid=5427 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:22:24.955000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Sep 6 00:22:33.781061 kubelet[2412]: I0906 00:22:33.781008 2412 prober_manager.go:312] "Failed to trigger a manual run" probe="Readiness" Sep 6 00:22:33.976407 kernel: kauditd_printk_skb: 102 callbacks suppressed Sep 6 00:22:33.976603 kernel: audit: type=1325 audit(1757118153.955:1414): table=filter:132 family=2 entries=10 op=nft_register_rule pid=5450 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Sep 6 00:22:33.955000 audit[5450]: NETFILTER_CFG table=filter:132 family=2 entries=10 op=nft_register_rule pid=5450 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Sep 6 00:22:33.955000 audit[5450]: SYSCALL arch=c000003e syscall=46 success=yes exit=3760 a0=3 a1=7ffd93b16450 a2=0 a3=7ffd93b1643c items=0 ppid=2518 pid=5450 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:22:34.018132 kernel: audit: type=1300 audit(1757118153.955:1414): arch=c000003e syscall=46 success=yes exit=3760 a0=3 a1=7ffd93b16450 a2=0 a3=7ffd93b1643c items=0 ppid=2518 pid=5450 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:22:34.018304 kernel: audit: type=1327 audit(1757118153.955:1414): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Sep 6 00:22:33.955000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Sep 6 00:22:33.977000 audit[5450]: NETFILTER_CFG table=nat:133 family=2 entries=36 op=nft_register_chain pid=5450 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Sep 6 00:22:34.035254 kernel: audit: type=1325 audit(1757118153.977:1415): table=nat:133 family=2 entries=36 op=nft_register_chain pid=5450 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Sep 6 00:22:33.977000 audit[5450]: SYSCALL arch=c000003e syscall=46 success=yes exit=12004 a0=3 a1=7ffd93b16450 a2=0 a3=7ffd93b1643c items=0 ppid=2518 pid=5450 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:22:33.977000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Sep 6 00:22:34.071780 kernel: audit: type=1300 audit(1757118153.977:1415): arch=c000003e syscall=46 success=yes exit=12004 a0=3 a1=7ffd93b16450 a2=0 a3=7ffd93b1643c items=0 ppid=2518 pid=5450 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:22:34.072042 kernel: audit: type=1327 audit(1757118153.977:1415): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Sep 6 00:22:42.277000 audit[5497]: NETFILTER_CFG table=filter:134 family=2 entries=9 op=nft_register_rule pid=5497 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Sep 6 00:22:42.293971 kernel: audit: type=1325 audit(1757118162.277:1416): table=filter:134 family=2 entries=9 op=nft_register_rule pid=5497 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Sep 6 00:22:42.277000 audit[5497]: SYSCALL arch=c000003e syscall=46 success=yes exit=3016 a0=3 a1=7fffdb647fe0 a2=0 a3=7fffdb647fcc items=0 ppid=2518 pid=5497 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:22:42.277000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Sep 6 00:22:42.334460 kernel: audit: type=1300 audit(1757118162.277:1416): arch=c000003e syscall=46 success=yes exit=3016 a0=3 a1=7fffdb647fe0 a2=0 a3=7fffdb647fcc items=0 ppid=2518 pid=5497 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:22:42.334642 kernel: audit: type=1327 audit(1757118162.277:1416): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Sep 6 00:22:42.334677 kernel: audit: type=1325 audit(1757118162.301:1417): table=nat:135 family=2 entries=31 op=nft_register_chain pid=5497 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Sep 6 00:22:42.301000 audit[5497]: NETFILTER_CFG table=nat:135 family=2 entries=31 op=nft_register_chain pid=5497 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Sep 6 00:22:42.301000 audit[5497]: SYSCALL arch=c000003e syscall=46 success=yes exit=10884 a0=3 a1=7fffdb647fe0 a2=0 a3=7fffdb647fcc items=0 ppid=2518 pid=5497 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:22:42.375970 kernel: audit: type=1300 audit(1757118162.301:1417): arch=c000003e syscall=46 success=yes exit=10884 a0=3 a1=7fffdb647fe0 a2=0 a3=7fffdb647fcc items=0 ppid=2518 pid=5497 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:22:42.301000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Sep 6 00:22:42.390945 kernel: audit: type=1327 audit(1757118162.301:1417): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Sep 6 00:22:55.469076 systemd[1]: run-containerd-runc-k8s.io-ccc39446b709dfd115193a4cc385e4f6955f060c010b1d48a49d0bfab0dd167b-runc.yJhn5F.mount: Deactivated successfully. Sep 6 00:22:56.041002 systemd[1]: run-containerd-runc-k8s.io-826fee91051700eb867f0bfafe199995b2395603318e06642d348584985d7186-runc.XAdYIc.mount: Deactivated successfully. Sep 6 00:23:04.275000 audit[2289]: AVC avc: denied { watch } for pid=2289 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=520964 scontext=system_u:system_r:svirt_lxc_net_t:s0:c221,c330 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Sep 6 00:23:04.288000 audit[2289]: AVC avc: denied { watch } for pid=2289 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=520970 scontext=system_u:system_r:svirt_lxc_net_t:s0:c221,c330 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Sep 6 00:23:04.329546 kernel: audit: type=1400 audit(1757118184.275:1418): avc: denied { watch } for pid=2289 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=520964 scontext=system_u:system_r:svirt_lxc_net_t:s0:c221,c330 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Sep 6 00:23:04.330798 kernel: audit: type=1400 audit(1757118184.288:1419): avc: denied { watch } for pid=2289 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=520970 scontext=system_u:system_r:svirt_lxc_net_t:s0:c221,c330 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Sep 6 00:23:04.332014 kernel: audit: type=1300 audit(1757118184.288:1419): arch=c000003e syscall=254 success=no exit=-13 a0=b a1=c00275fd70 a2=fc6 a3=0 items=0 ppid=2140 pid=2289 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c221,c330 key=(null) Sep 6 00:23:04.288000 audit[2289]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=b a1=c00275fd70 a2=fc6 a3=0 items=0 ppid=2140 pid=2289 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c221,c330 key=(null) Sep 6 00:23:04.375318 kernel: audit: type=1327 audit(1757118184.288:1419): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Sep 6 00:23:04.288000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Sep 6 00:23:04.275000 audit[2289]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c000e6e260 a2=fc6 a3=0 items=0 ppid=2140 pid=2289 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c221,c330 key=(null) Sep 6 00:23:04.416283 kernel: audit: type=1300 audit(1757118184.275:1418): arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c000e6e260 a2=fc6 a3=0 items=0 ppid=2140 pid=2289 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c221,c330 key=(null) Sep 6 00:23:04.275000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Sep 6 00:23:04.437352 kernel: audit: type=1327 audit(1757118184.275:1418): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Sep 6 00:23:04.879000 audit[2265]: AVC avc: denied { watch } for pid=2265 comm="kube-apiserver" path="/etc/kubernetes/pki/apiserver.crt" dev="sda9" ino=520966 scontext=system_u:system_r:svirt_lxc_net_t:s0:c452,c579 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Sep 6 00:23:04.879000 audit[2265]: AVC avc: denied { watch } for pid=2265 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=520964 scontext=system_u:system_r:svirt_lxc_net_t:s0:c452,c579 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Sep 6 00:23:04.920139 kernel: audit: type=1400 audit(1757118184.879:1421): avc: denied { watch } for pid=2265 comm="kube-apiserver" path="/etc/kubernetes/pki/apiserver.crt" dev="sda9" ino=520966 scontext=system_u:system_r:svirt_lxc_net_t:s0:c452,c579 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Sep 6 00:23:04.920315 kernel: audit: type=1400 audit(1757118184.879:1420): avc: denied { watch } for pid=2265 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=520964 scontext=system_u:system_r:svirt_lxc_net_t:s0:c452,c579 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Sep 6 00:23:04.920343 kernel: audit: type=1300 audit(1757118184.879:1421): arch=c000003e syscall=254 success=no exit=-13 a0=75 a1=c00cb94e10 a2=fc6 a3=0 items=0 ppid=2121 pid=2265 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c452,c579 key=(null) Sep 6 00:23:04.879000 audit[2265]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=75 a1=c00cb94e10 a2=fc6 a3=0 items=0 ppid=2121 pid=2265 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c452,c579 key=(null) Sep 6 00:23:04.879000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E382E3338002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265 Sep 6 00:23:04.880000 audit[2265]: AVC avc: denied { watch } for pid=2265 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=520970 scontext=system_u:system_r:svirt_lxc_net_t:s0:c452,c579 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Sep 6 00:23:04.880000 audit[2265]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=75 a1=c00cb94f30 a2=fc6 a3=0 items=0 ppid=2121 pid=2265 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c452,c579 key=(null) Sep 6 00:23:04.972032 kernel: audit: type=1327 audit(1757118184.879:1421): proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E382E3338002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265 Sep 6 00:23:04.880000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E382E3338002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265 Sep 6 00:23:04.879000 audit[2265]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=76 a1=c00f59c7e0 a2=fc6 a3=0 items=0 ppid=2121 pid=2265 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c452,c579 key=(null) Sep 6 00:23:04.879000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E382E3338002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265 Sep 6 00:23:04.881000 audit[2265]: AVC avc: denied { watch } for pid=2265 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-client.crt" dev="sda9" ino=520972 scontext=system_u:system_r:svirt_lxc_net_t:s0:c452,c579 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Sep 6 00:23:04.881000 audit[2265]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=75 a1=c00bf32cf0 a2=fc6 a3=0 items=0 ppid=2121 pid=2265 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c452,c579 key=(null) Sep 6 00:23:04.881000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E382E3338002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265 Sep 6 00:23:04.899000 audit[2265]: AVC avc: denied { watch } for pid=2265 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=520964 scontext=system_u:system_r:svirt_lxc_net_t:s0:c452,c579 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Sep 6 00:23:04.899000 audit[2265]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=75 a1=c00eddbaa0 a2=fc6 a3=0 items=0 ppid=2121 pid=2265 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c452,c579 key=(null) Sep 6 00:23:04.899000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E382E3338002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265 Sep 6 00:23:04.899000 audit[2265]: AVC avc: denied { watch } for pid=2265 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=520970 scontext=system_u:system_r:svirt_lxc_net_t:s0:c452,c579 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Sep 6 00:23:04.899000 audit[2265]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=75 a1=c00bf32d20 a2=fc6 a3=0 items=0 ppid=2121 pid=2265 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c452,c579 key=(null) Sep 6 00:23:04.899000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E382E3338002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265 Sep 6 00:23:06.232000 audit[4753]: AVC avc: denied { watch } for pid=4753 comm="apiserver" path="/calico-apiserver-certs/..2025_09_06_00_21_42.3164157005/tls.crt" dev="tmpfs" ino=4 scontext=system_u:system_r:svirt_lxc_net_t:s0:c416,c590 tcontext=system_u:object_r:svirt_lxc_file_t:s0:c416,c590 tclass=file permissive=0 Sep 6 00:23:06.232000 audit[4753]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=9 a1=c001e7ed80 a2=fc6 a3=0 items=0 ppid=3975 pid=4753 auid=4294967295 uid=10001 gid=10001 euid=10001 suid=10001 fsuid=10001 egid=10001 sgid=10001 fsgid=10001 tty=(none) ses=4294967295 comm="apiserver" exe="/code/apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c416,c590 key=(null) Sep 6 00:23:06.232000 audit: PROCTITLE proctitle=2F636F64652F617069736572766572002D2D7365637572652D706F72743D35343433002D2D746C732D707269766174652D6B65792D66696C653D2F63616C69636F2D6170697365727665722D63657274732F746C732E6B6579002D2D746C732D636572742D66696C653D2F63616C69636F2D6170697365727665722D63657274 Sep 6 00:23:07.825000 audit[2289]: AVC avc: denied { watch } for pid=2289 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=520964 scontext=system_u:system_r:svirt_lxc_net_t:s0:c221,c330 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Sep 6 00:23:07.825000 audit[2289]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c0024d4620 a2=fc6 a3=0 items=0 ppid=2140 pid=2289 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c221,c330 key=(null) Sep 6 00:23:07.825000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Sep 6 00:23:07.825000 audit[2289]: AVC avc: denied { watch } for pid=2289 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=520964 scontext=system_u:system_r:svirt_lxc_net_t:s0:c221,c330 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Sep 6 00:23:07.826000 audit[2289]: AVC avc: denied { watch } for pid=2289 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=520964 scontext=system_u:system_r:svirt_lxc_net_t:s0:c221,c330 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Sep 6 00:23:07.826000 audit[2289]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=b a1=c0024d4940 a2=fc6 a3=0 items=0 ppid=2140 pid=2289 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c221,c330 key=(null) Sep 6 00:23:07.826000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Sep 6 00:23:07.826000 audit[2289]: AVC avc: denied { watch } for pid=2289 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=520964 scontext=system_u:system_r:svirt_lxc_net_t:s0:c221,c330 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Sep 6 00:23:07.826000 audit[2289]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=b a1=c0024d4960 a2=fc6 a3=0 items=0 ppid=2140 pid=2289 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c221,c330 key=(null) Sep 6 00:23:07.826000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Sep 6 00:23:07.825000 audit[2289]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c000e6e2e0 a2=fc6 a3=0 items=0 ppid=2140 pid=2289 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c221,c330 key=(null) Sep 6 00:23:07.825000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Sep 6 00:23:12.098699 systemd[1]: run-containerd-runc-k8s.io-3eeb0c397e20f5d56411338607774e9dd228c084e9abaebad84a4c53ed7ed108-runc.xzDEFW.mount: Deactivated successfully. Sep 6 00:23:12.879000 audit[4836]: AVC avc: denied { watch } for pid=4836 comm="apiserver" path="/calico-apiserver-certs/..2025_09_06_00_21_42.1453333682/tls.crt" dev="tmpfs" ino=4 scontext=system_u:system_r:svirt_lxc_net_t:s0:c783,c1010 tcontext=system_u:object_r:svirt_lxc_file_t:s0:c783,c1010 tclass=file permissive=0 Sep 6 00:23:12.886262 kernel: kauditd_printk_skb: 29 callbacks suppressed Sep 6 00:23:12.888167 kernel: audit: type=1400 audit(1757118192.879:1431): avc: denied { watch } for pid=4836 comm="apiserver" path="/calico-apiserver-certs/..2025_09_06_00_21_42.1453333682/tls.crt" dev="tmpfs" ino=4 scontext=system_u:system_r:svirt_lxc_net_t:s0:c783,c1010 tcontext=system_u:object_r:svirt_lxc_file_t:s0:c783,c1010 tclass=file permissive=0 Sep 6 00:23:12.879000 audit[4836]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=7 a1=c002549160 a2=fc6 a3=0 items=0 ppid=4187 pid=4836 auid=4294967295 uid=10001 gid=10001 euid=10001 suid=10001 fsuid=10001 egid=10001 sgid=10001 fsgid=10001 tty=(none) ses=4294967295 comm="apiserver" exe="/code/apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c783,c1010 key=(null) Sep 6 00:23:12.911962 kernel: audit: type=1300 audit(1757118192.879:1431): arch=c000003e syscall=254 success=no exit=-13 a0=7 a1=c002549160 a2=fc6 a3=0 items=0 ppid=4187 pid=4836 auid=4294967295 uid=10001 gid=10001 euid=10001 suid=10001 fsuid=10001 egid=10001 sgid=10001 fsgid=10001 tty=(none) ses=4294967295 comm="apiserver" exe="/code/apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c783,c1010 key=(null) Sep 6 00:23:12.879000 audit: PROCTITLE proctitle=2F636F64652F617069736572766572002D2D7365637572652D706F72743D35343433002D2D746C732D707269766174652D6B65792D66696C653D2F63616C69636F2D6170697365727665722D63657274732F746C732E6B6579002D2D746C732D636572742D66696C653D2F63616C69636F2D6170697365727665722D63657274 Sep 6 00:23:12.959581 kernel: audit: type=1327 audit(1757118192.879:1431): proctitle=2F636F64652F617069736572766572002D2D7365637572652D706F72743D35343433002D2D746C732D707269766174652D6B65792D66696C653D2F63616C69636F2D6170697365727665722D63657274732F746C732E6B6579002D2D746C732D636572742D66696C653D2F63616C69636F2D6170697365727665722D63657274