Sep 6 00:20:40.985711 kernel: Linux version 5.15.190-flatcar (build@pony-truck.infra.kinvolk.io) (x86_64-cros-linux-gnu-gcc (Gentoo Hardened 11.3.1_p20221209 p3) 11.3.1 20221209, GNU ld (Gentoo 2.39 p5) 2.39.0) #1 SMP Fri Sep 5 22:53:38 -00 2025 Sep 6 00:20:40.987002 kernel: Command line: BOOT_IMAGE=/flatcar/vmlinuz-a mount.usr=/dev/mapper/usr verity.usr=PARTUUID=7130c94a-213a-4e5a-8e26-6cce9662f132 rootflags=rw mount.usrflags=ro consoleblank=0 root=LABEL=ROOT console=ttyS0,115200n8 console=tty0 flatcar.first_boot=detected flatcar.oem.id=digitalocean verity.usrhash=a807e3b6c1f608bcead7858f1ad5b6908e6d312e2d99c0ec0e5454f978e611a7 Sep 6 00:20:40.987027 kernel: BIOS-provided physical RAM map: Sep 6 00:20:40.987038 kernel: BIOS-e820: [mem 0x0000000000000000-0x000000000009fbff] usable Sep 6 00:20:40.987049 kernel: BIOS-e820: [mem 0x000000000009fc00-0x000000000009ffff] reserved Sep 6 00:20:40.987059 kernel: BIOS-e820: [mem 0x00000000000f0000-0x00000000000fffff] reserved Sep 6 00:20:40.987073 kernel: BIOS-e820: [mem 0x0000000000100000-0x000000007ffdafff] usable Sep 6 00:20:40.987084 kernel: BIOS-e820: [mem 0x000000007ffdb000-0x000000007fffffff] reserved Sep 6 00:20:40.987098 kernel: BIOS-e820: [mem 0x00000000feffc000-0x00000000feffffff] reserved Sep 6 00:20:40.987109 kernel: BIOS-e820: [mem 0x00000000fffc0000-0x00000000ffffffff] reserved Sep 6 00:20:40.987120 kernel: NX (Execute Disable) protection: active Sep 6 00:20:40.987131 kernel: SMBIOS 2.8 present. Sep 6 00:20:40.987142 kernel: DMI: DigitalOcean Droplet/Droplet, BIOS 20171212 12/12/2017 Sep 6 00:20:40.987154 kernel: Hypervisor detected: KVM Sep 6 00:20:40.987167 kernel: kvm-clock: Using msrs 4b564d01 and 4b564d00 Sep 6 00:20:40.987183 kernel: kvm-clock: cpu 0, msr 1319f001, primary cpu clock Sep 6 00:20:40.987202 kernel: kvm-clock: using sched offset of 3479832101 cycles Sep 6 00:20:40.987216 kernel: clocksource: kvm-clock: mask: 0xffffffffffffffff max_cycles: 0x1cd42e4dffb, max_idle_ns: 881590591483 ns Sep 6 00:20:40.987233 kernel: tsc: Detected 2494.138 MHz processor Sep 6 00:20:40.987245 kernel: e820: update [mem 0x00000000-0x00000fff] usable ==> reserved Sep 6 00:20:40.987262 kernel: e820: remove [mem 0x000a0000-0x000fffff] usable Sep 6 00:20:40.987274 kernel: last_pfn = 0x7ffdb max_arch_pfn = 0x400000000 Sep 6 00:20:40.987286 kernel: x86/PAT: Configuration [0-7]: WB WC UC- UC WB WP UC- WT Sep 6 00:20:40.987301 kernel: ACPI: Early table checksum verification disabled Sep 6 00:20:40.987313 kernel: ACPI: RSDP 0x00000000000F5950 000014 (v00 BOCHS ) Sep 6 00:20:40.987324 kernel: ACPI: RSDT 0x000000007FFE1986 000038 (v01 BOCHS BXPC 00000001 BXPC 00000001) Sep 6 00:20:40.987336 kernel: ACPI: FACP 0x000000007FFE176A 000074 (v01 BOCHS BXPC 00000001 BXPC 00000001) Sep 6 00:20:40.987347 kernel: ACPI: DSDT 0x000000007FFE0040 00172A (v01 BOCHS BXPC 00000001 BXPC 00000001) Sep 6 00:20:40.987358 kernel: ACPI: FACS 0x000000007FFE0000 000040 Sep 6 00:20:40.987375 kernel: ACPI: APIC 0x000000007FFE17DE 000080 (v01 BOCHS BXPC 00000001 BXPC 00000001) Sep 6 00:20:40.987385 kernel: ACPI: HPET 0x000000007FFE185E 000038 (v01 BOCHS BXPC 00000001 BXPC 00000001) Sep 6 00:20:40.987395 kernel: ACPI: SRAT 0x000000007FFE1896 0000C8 (v01 BOCHS BXPC 00000001 BXPC 00000001) Sep 6 00:20:40.987409 kernel: ACPI: WAET 0x000000007FFE195E 000028 (v01 BOCHS BXPC 00000001 BXPC 00000001) Sep 6 00:20:40.987420 kernel: ACPI: Reserving FACP table memory at [mem 0x7ffe176a-0x7ffe17dd] Sep 6 00:20:40.987430 kernel: ACPI: Reserving DSDT table memory at [mem 0x7ffe0040-0x7ffe1769] Sep 6 00:20:40.987440 kernel: ACPI: Reserving FACS table memory at [mem 0x7ffe0000-0x7ffe003f] Sep 6 00:20:40.987450 kernel: ACPI: Reserving APIC table memory at [mem 0x7ffe17de-0x7ffe185d] Sep 6 00:20:40.987460 kernel: ACPI: Reserving HPET table memory at [mem 0x7ffe185e-0x7ffe1895] Sep 6 00:20:40.987470 kernel: ACPI: Reserving SRAT table memory at [mem 0x7ffe1896-0x7ffe195d] Sep 6 00:20:40.987481 kernel: ACPI: Reserving WAET table memory at [mem 0x7ffe195e-0x7ffe1985] Sep 6 00:20:40.987502 kernel: SRAT: PXM 0 -> APIC 0x00 -> Node 0 Sep 6 00:20:40.987512 kernel: SRAT: PXM 0 -> APIC 0x01 -> Node 0 Sep 6 00:20:40.987523 kernel: ACPI: SRAT: Node 0 PXM 0 [mem 0x00000000-0x0009ffff] Sep 6 00:20:40.987536 kernel: ACPI: SRAT: Node 0 PXM 0 [mem 0x00100000-0x7fffffff] Sep 6 00:20:40.987547 kernel: NUMA: Node 0 [mem 0x00000000-0x0009ffff] + [mem 0x00100000-0x7ffdafff] -> [mem 0x00000000-0x7ffdafff] Sep 6 00:20:40.987559 kernel: NODE_DATA(0) allocated [mem 0x7ffd5000-0x7ffdafff] Sep 6 00:20:40.987573 kernel: Zone ranges: Sep 6 00:20:40.987584 kernel: DMA [mem 0x0000000000001000-0x0000000000ffffff] Sep 6 00:20:40.987595 kernel: DMA32 [mem 0x0000000001000000-0x000000007ffdafff] Sep 6 00:20:40.987623 kernel: Normal empty Sep 6 00:20:40.987634 kernel: Movable zone start for each node Sep 6 00:20:40.987654 kernel: Early memory node ranges Sep 6 00:20:40.987665 kernel: node 0: [mem 0x0000000000001000-0x000000000009efff] Sep 6 00:20:40.987677 kernel: node 0: [mem 0x0000000000100000-0x000000007ffdafff] Sep 6 00:20:40.987688 kernel: Initmem setup node 0 [mem 0x0000000000001000-0x000000007ffdafff] Sep 6 00:20:40.987704 kernel: On node 0, zone DMA: 1 pages in unavailable ranges Sep 6 00:20:40.987721 kernel: On node 0, zone DMA: 97 pages in unavailable ranges Sep 6 00:20:40.991770 kernel: On node 0, zone DMA32: 37 pages in unavailable ranges Sep 6 00:20:40.991819 kernel: ACPI: PM-Timer IO Port: 0x608 Sep 6 00:20:40.991835 kernel: ACPI: LAPIC_NMI (acpi_id[0xff] dfl dfl lint[0x1]) Sep 6 00:20:40.991849 kernel: IOAPIC[0]: apic_id 0, version 17, address 0xfec00000, GSI 0-23 Sep 6 00:20:40.991863 kernel: ACPI: INT_SRC_OVR (bus 0 bus_irq 0 global_irq 2 dfl dfl) Sep 6 00:20:40.991878 kernel: ACPI: INT_SRC_OVR (bus 0 bus_irq 5 global_irq 5 high level) Sep 6 00:20:40.991892 kernel: ACPI: INT_SRC_OVR (bus 0 bus_irq 9 global_irq 9 high level) Sep 6 00:20:40.991917 kernel: ACPI: INT_SRC_OVR (bus 0 bus_irq 10 global_irq 10 high level) Sep 6 00:20:40.991940 kernel: ACPI: INT_SRC_OVR (bus 0 bus_irq 11 global_irq 11 high level) Sep 6 00:20:40.991953 kernel: ACPI: Using ACPI (MADT) for SMP configuration information Sep 6 00:20:40.991966 kernel: ACPI: HPET id: 0x8086a201 base: 0xfed00000 Sep 6 00:20:40.991981 kernel: TSC deadline timer available Sep 6 00:20:40.991994 kernel: smpboot: Allowing 2 CPUs, 0 hotplug CPUs Sep 6 00:20:40.992008 kernel: [mem 0x80000000-0xfeffbfff] available for PCI devices Sep 6 00:20:40.992022 kernel: Booting paravirtualized kernel on KVM Sep 6 00:20:40.992036 kernel: clocksource: refined-jiffies: mask: 0xffffffff max_cycles: 0xffffffff, max_idle_ns: 1910969940391419 ns Sep 6 00:20:40.992054 kernel: setup_percpu: NR_CPUS:512 nr_cpumask_bits:512 nr_cpu_ids:2 nr_node_ids:1 Sep 6 00:20:40.992068 kernel: percpu: Embedded 56 pages/cpu s188696 r8192 d32488 u1048576 Sep 6 00:20:40.992082 kernel: pcpu-alloc: s188696 r8192 d32488 u1048576 alloc=1*2097152 Sep 6 00:20:40.992096 kernel: pcpu-alloc: [0] 0 1 Sep 6 00:20:40.992109 kernel: kvm-guest: stealtime: cpu 0, msr 7dc1c0c0 Sep 6 00:20:40.992123 kernel: kvm-guest: PV spinlocks disabled, no host support Sep 6 00:20:40.992137 kernel: Built 1 zonelists, mobility grouping on. Total pages: 515803 Sep 6 00:20:40.992150 kernel: Policy zone: DMA32 Sep 6 00:20:40.992166 kernel: Kernel command line: rootflags=rw mount.usrflags=ro BOOT_IMAGE=/flatcar/vmlinuz-a mount.usr=/dev/mapper/usr verity.usr=PARTUUID=7130c94a-213a-4e5a-8e26-6cce9662f132 rootflags=rw mount.usrflags=ro consoleblank=0 root=LABEL=ROOT console=ttyS0,115200n8 console=tty0 flatcar.first_boot=detected flatcar.oem.id=digitalocean verity.usrhash=a807e3b6c1f608bcead7858f1ad5b6908e6d312e2d99c0ec0e5454f978e611a7 Sep 6 00:20:40.992184 kernel: Unknown kernel command line parameters "BOOT_IMAGE=/flatcar/vmlinuz-a", will be passed to user space. Sep 6 00:20:40.992198 kernel: Dentry cache hash table entries: 262144 (order: 9, 2097152 bytes, linear) Sep 6 00:20:40.992213 kernel: Inode-cache hash table entries: 131072 (order: 8, 1048576 bytes, linear) Sep 6 00:20:40.992227 kernel: mem auto-init: stack:off, heap alloc:off, heap free:off Sep 6 00:20:40.992241 kernel: Memory: 1973276K/2096612K available (12295K kernel code, 2276K rwdata, 13732K rodata, 47492K init, 4088K bss, 123076K reserved, 0K cma-reserved) Sep 6 00:20:40.992255 kernel: SLUB: HWalign=64, Order=0-3, MinObjects=0, CPUs=2, Nodes=1 Sep 6 00:20:40.992268 kernel: Kernel/User page tables isolation: enabled Sep 6 00:20:40.992281 kernel: ftrace: allocating 34612 entries in 136 pages Sep 6 00:20:40.992298 kernel: ftrace: allocated 136 pages with 2 groups Sep 6 00:20:40.992312 kernel: rcu: Hierarchical RCU implementation. Sep 6 00:20:40.992327 kernel: rcu: RCU event tracing is enabled. Sep 6 00:20:40.992341 kernel: rcu: RCU restricting CPUs from NR_CPUS=512 to nr_cpu_ids=2. Sep 6 00:20:40.992356 kernel: Rude variant of Tasks RCU enabled. Sep 6 00:20:40.992376 kernel: Tracing variant of Tasks RCU enabled. Sep 6 00:20:40.992389 kernel: rcu: RCU calculated value of scheduler-enlistment delay is 100 jiffies. Sep 6 00:20:40.992409 kernel: rcu: Adjusting geometry for rcu_fanout_leaf=16, nr_cpu_ids=2 Sep 6 00:20:40.992423 kernel: NR_IRQS: 33024, nr_irqs: 440, preallocated irqs: 16 Sep 6 00:20:40.992439 kernel: random: crng init done Sep 6 00:20:40.992453 kernel: Console: colour VGA+ 80x25 Sep 6 00:20:40.992467 kernel: printk: console [tty0] enabled Sep 6 00:20:40.992485 kernel: printk: console [ttyS0] enabled Sep 6 00:20:40.992499 kernel: ACPI: Core revision 20210730 Sep 6 00:20:40.992518 kernel: clocksource: hpet: mask: 0xffffffff max_cycles: 0xffffffff, max_idle_ns: 19112604467 ns Sep 6 00:20:40.992532 kernel: APIC: Switch to symmetric I/O mode setup Sep 6 00:20:40.992546 kernel: x2apic enabled Sep 6 00:20:40.992559 kernel: Switched APIC routing to physical x2apic. Sep 6 00:20:40.992571 kernel: ..TIMER: vector=0x30 apic1=0 pin1=2 apic2=-1 pin2=-1 Sep 6 00:20:40.992589 kernel: clocksource: tsc-early: mask: 0xffffffffffffffff max_cycles: 0x23f39838d43, max_idle_ns: 440795267131 ns Sep 6 00:20:40.992602 kernel: Calibrating delay loop (skipped) preset value.. 4988.27 BogoMIPS (lpj=2494138) Sep 6 00:20:40.992626 kernel: Last level iTLB entries: 4KB 0, 2MB 0, 4MB 0 Sep 6 00:20:40.992640 kernel: Last level dTLB entries: 4KB 0, 2MB 0, 4MB 0, 1GB 0 Sep 6 00:20:40.992653 kernel: Spectre V1 : Mitigation: usercopy/swapgs barriers and __user pointer sanitization Sep 6 00:20:40.992665 kernel: Spectre V2 : Mitigation: Retpolines Sep 6 00:20:40.992678 kernel: Spectre V2 : Spectre v2 / SpectreRSB: Filling RSB on context switch and VMEXIT Sep 6 00:20:40.992697 kernel: Spectre V2 : Enabling Restricted Speculation for firmware calls Sep 6 00:20:40.992715 kernel: Spectre V2 : mitigation: Enabling conditional Indirect Branch Prediction Barrier Sep 6 00:20:40.992760 kernel: Speculative Store Bypass: Mitigation: Speculative Store Bypass disabled via prctl and seccomp Sep 6 00:20:40.992774 kernel: MDS: Mitigation: Clear CPU buffers Sep 6 00:20:40.992791 kernel: MMIO Stale Data: Vulnerable: Clear CPU buffers attempted, no microcode Sep 6 00:20:40.992810 kernel: active return thunk: its_return_thunk Sep 6 00:20:40.992823 kernel: ITS: Mitigation: Aligned branch/return thunks Sep 6 00:20:40.992836 kernel: x86/fpu: Supporting XSAVE feature 0x001: 'x87 floating point registers' Sep 6 00:20:40.992850 kernel: x86/fpu: Supporting XSAVE feature 0x002: 'SSE registers' Sep 6 00:20:40.992864 kernel: x86/fpu: Supporting XSAVE feature 0x004: 'AVX registers' Sep 6 00:20:40.992878 kernel: x86/fpu: xstate_offset[2]: 576, xstate_sizes[2]: 256 Sep 6 00:20:40.992899 kernel: x86/fpu: Enabled xstate features 0x7, context size is 832 bytes, using 'standard' format. Sep 6 00:20:40.992913 kernel: Freeing SMP alternatives memory: 32K Sep 6 00:20:40.992928 kernel: pid_max: default: 32768 minimum: 301 Sep 6 00:20:40.992942 kernel: LSM: Security Framework initializing Sep 6 00:20:40.992954 kernel: SELinux: Initializing. Sep 6 00:20:40.992966 kernel: Mount-cache hash table entries: 4096 (order: 3, 32768 bytes, linear) Sep 6 00:20:40.992979 kernel: Mountpoint-cache hash table entries: 4096 (order: 3, 32768 bytes, linear) Sep 6 00:20:40.992994 kernel: smpboot: CPU0: Intel DO-Regular (family: 0x6, model: 0x4f, stepping: 0x1) Sep 6 00:20:40.993007 kernel: Performance Events: unsupported p6 CPU model 79 no PMU driver, software events only. Sep 6 00:20:40.993019 kernel: signal: max sigframe size: 1776 Sep 6 00:20:40.993032 kernel: rcu: Hierarchical SRCU implementation. Sep 6 00:20:40.993045 kernel: NMI watchdog: Perf NMI watchdog permanently disabled Sep 6 00:20:40.993057 kernel: smp: Bringing up secondary CPUs ... Sep 6 00:20:40.993071 kernel: x86: Booting SMP configuration: Sep 6 00:20:40.993083 kernel: .... node #0, CPUs: #1 Sep 6 00:20:40.993095 kernel: kvm-clock: cpu 1, msr 1319f041, secondary cpu clock Sep 6 00:20:40.993111 kernel: kvm-guest: stealtime: cpu 1, msr 7dd1c0c0 Sep 6 00:20:40.993124 kernel: smp: Brought up 1 node, 2 CPUs Sep 6 00:20:40.993137 kernel: smpboot: Max logical packages: 1 Sep 6 00:20:40.993156 kernel: smpboot: Total of 2 processors activated (9976.55 BogoMIPS) Sep 6 00:20:40.993168 kernel: devtmpfs: initialized Sep 6 00:20:40.993182 kernel: x86/mm: Memory block size: 128MB Sep 6 00:20:40.993195 kernel: clocksource: jiffies: mask: 0xffffffff max_cycles: 0xffffffff, max_idle_ns: 1911260446275000 ns Sep 6 00:20:40.993210 kernel: futex hash table entries: 512 (order: 3, 32768 bytes, linear) Sep 6 00:20:40.993223 kernel: pinctrl core: initialized pinctrl subsystem Sep 6 00:20:40.993242 kernel: NET: Registered PF_NETLINK/PF_ROUTE protocol family Sep 6 00:20:40.993280 kernel: audit: initializing netlink subsys (disabled) Sep 6 00:20:40.993294 kernel: audit: type=2000 audit(1757118040.295:1): state=initialized audit_enabled=0 res=1 Sep 6 00:20:40.993308 kernel: thermal_sys: Registered thermal governor 'step_wise' Sep 6 00:20:40.993322 kernel: thermal_sys: Registered thermal governor 'user_space' Sep 6 00:20:40.993336 kernel: cpuidle: using governor menu Sep 6 00:20:40.993356 kernel: ACPI: bus type PCI registered Sep 6 00:20:40.993375 kernel: acpiphp: ACPI Hot Plug PCI Controller Driver version: 0.5 Sep 6 00:20:40.993389 kernel: dca service started, version 1.12.1 Sep 6 00:20:40.993408 kernel: PCI: Using configuration type 1 for base access Sep 6 00:20:40.993422 kernel: kprobes: kprobe jump-optimization is enabled. All kprobes are optimized if possible. Sep 6 00:20:40.993437 kernel: HugeTLB registered 2.00 MiB page size, pre-allocated 0 pages Sep 6 00:20:40.993457 kernel: ACPI: Added _OSI(Module Device) Sep 6 00:20:40.993471 kernel: ACPI: Added _OSI(Processor Device) Sep 6 00:20:40.993484 kernel: ACPI: Added _OSI(Processor Aggregator Device) Sep 6 00:20:40.993498 kernel: ACPI: Added _OSI(Linux-Dell-Video) Sep 6 00:20:40.993512 kernel: ACPI: Added _OSI(Linux-Lenovo-NV-HDMI-Audio) Sep 6 00:20:40.993525 kernel: ACPI: Added _OSI(Linux-HPI-Hybrid-Graphics) Sep 6 00:20:40.993544 kernel: ACPI: 1 ACPI AML tables successfully acquired and loaded Sep 6 00:20:40.993557 kernel: ACPI: Interpreter enabled Sep 6 00:20:40.993577 kernel: ACPI: PM: (supports S0 S5) Sep 6 00:20:40.993595 kernel: ACPI: Using IOAPIC for interrupt routing Sep 6 00:20:40.993611 kernel: PCI: Using host bridge windows from ACPI; if necessary, use "pci=nocrs" and report a bug Sep 6 00:20:40.993624 kernel: ACPI: Enabled 2 GPEs in block 00 to 0F Sep 6 00:20:40.993638 kernel: ACPI: PCI Root Bridge [PCI0] (domain 0000 [bus 00-ff]) Sep 6 00:20:40.993981 kernel: acpi PNP0A03:00: _OSC: OS supports [ASPM ClockPM Segments MSI HPX-Type3] Sep 6 00:20:40.994165 kernel: acpi PNP0A03:00: fail to add MMCONFIG information, can't access extended PCI configuration space under this bridge. Sep 6 00:20:40.994187 kernel: acpiphp: Slot [3] registered Sep 6 00:20:40.994202 kernel: acpiphp: Slot [4] registered Sep 6 00:20:40.994217 kernel: acpiphp: Slot [5] registered Sep 6 00:20:40.994231 kernel: acpiphp: Slot [6] registered Sep 6 00:20:40.994245 kernel: acpiphp: Slot [7] registered Sep 6 00:20:40.994259 kernel: acpiphp: Slot [8] registered Sep 6 00:20:40.994273 kernel: acpiphp: Slot [9] registered Sep 6 00:20:40.994286 kernel: acpiphp: Slot [10] registered Sep 6 00:20:40.994304 kernel: acpiphp: Slot [11] registered Sep 6 00:20:40.994319 kernel: acpiphp: Slot [12] registered Sep 6 00:20:40.994333 kernel: acpiphp: Slot [13] registered Sep 6 00:20:40.994348 kernel: acpiphp: Slot [14] registered Sep 6 00:20:40.994361 kernel: acpiphp: Slot [15] registered Sep 6 00:20:40.994375 kernel: acpiphp: Slot [16] registered Sep 6 00:20:40.994389 kernel: acpiphp: Slot [17] registered Sep 6 00:20:40.994403 kernel: acpiphp: Slot [18] registered Sep 6 00:20:40.994417 kernel: acpiphp: Slot [19] registered Sep 6 00:20:40.994434 kernel: acpiphp: Slot [20] registered Sep 6 00:20:40.994459 kernel: acpiphp: Slot [21] registered Sep 6 00:20:40.994477 kernel: acpiphp: Slot [22] registered Sep 6 00:20:40.994491 kernel: acpiphp: Slot [23] registered Sep 6 00:20:40.994510 kernel: acpiphp: Slot [24] registered Sep 6 00:20:40.994524 kernel: acpiphp: Slot [25] registered Sep 6 00:20:40.994538 kernel: acpiphp: Slot [26] registered Sep 6 00:20:40.994552 kernel: acpiphp: Slot [27] registered Sep 6 00:20:40.994566 kernel: acpiphp: Slot [28] registered Sep 6 00:20:40.994581 kernel: acpiphp: Slot [29] registered Sep 6 00:20:40.994599 kernel: acpiphp: Slot [30] registered Sep 6 00:20:40.994614 kernel: acpiphp: Slot [31] registered Sep 6 00:20:40.994628 kernel: PCI host bridge to bus 0000:00 Sep 6 00:20:40.994837 kernel: pci_bus 0000:00: root bus resource [io 0x0000-0x0cf7 window] Sep 6 00:20:40.994982 kernel: pci_bus 0000:00: root bus resource [io 0x0d00-0xffff window] Sep 6 00:20:40.995122 kernel: pci_bus 0000:00: root bus resource [mem 0x000a0000-0x000bffff window] Sep 6 00:20:40.995268 kernel: pci_bus 0000:00: root bus resource [mem 0x80000000-0xfebfffff window] Sep 6 00:20:40.995472 kernel: pci_bus 0000:00: root bus resource [mem 0x100000000-0x17fffffff window] Sep 6 00:20:40.995770 kernel: pci_bus 0000:00: root bus resource [bus 00-ff] Sep 6 00:20:40.996010 kernel: pci 0000:00:00.0: [8086:1237] type 00 class 0x060000 Sep 6 00:20:40.997179 kernel: pci 0000:00:01.0: [8086:7000] type 00 class 0x060100 Sep 6 00:20:40.997459 kernel: pci 0000:00:01.1: [8086:7010] type 00 class 0x010180 Sep 6 00:20:40.997654 kernel: pci 0000:00:01.1: reg 0x20: [io 0xc1e0-0xc1ef] Sep 6 00:20:40.997866 kernel: pci 0000:00:01.1: legacy IDE quirk: reg 0x10: [io 0x01f0-0x01f7] Sep 6 00:20:40.998041 kernel: pci 0000:00:01.1: legacy IDE quirk: reg 0x14: [io 0x03f6] Sep 6 00:20:40.998220 kernel: pci 0000:00:01.1: legacy IDE quirk: reg 0x18: [io 0x0170-0x0177] Sep 6 00:20:40.998384 kernel: pci 0000:00:01.1: legacy IDE quirk: reg 0x1c: [io 0x0376] Sep 6 00:20:40.998566 kernel: pci 0000:00:01.2: [8086:7020] type 00 class 0x0c0300 Sep 6 00:20:40.998716 kernel: pci 0000:00:01.2: reg 0x20: [io 0xc180-0xc19f] Sep 6 00:20:41.001005 kernel: pci 0000:00:01.3: [8086:7113] type 00 class 0x068000 Sep 6 00:20:41.001191 kernel: pci 0000:00:01.3: quirk: [io 0x0600-0x063f] claimed by PIIX4 ACPI Sep 6 00:20:41.001361 kernel: pci 0000:00:01.3: quirk: [io 0x0700-0x070f] claimed by PIIX4 SMB Sep 6 00:20:41.001526 kernel: pci 0000:00:02.0: [1af4:1050] type 00 class 0x030000 Sep 6 00:20:41.001683 kernel: pci 0000:00:02.0: reg 0x10: [mem 0xfe000000-0xfe7fffff pref] Sep 6 00:20:41.003974 kernel: pci 0000:00:02.0: reg 0x18: [mem 0xfe800000-0xfe803fff 64bit pref] Sep 6 00:20:41.004164 kernel: pci 0000:00:02.0: reg 0x20: [mem 0xfebf0000-0xfebf0fff] Sep 6 00:20:41.004325 kernel: pci 0000:00:02.0: reg 0x30: [mem 0xfebe0000-0xfebeffff pref] Sep 6 00:20:41.004484 kernel: pci 0000:00:02.0: Video device with shadowed ROM at [mem 0x000c0000-0x000dffff] Sep 6 00:20:41.004637 kernel: pci 0000:00:03.0: [1af4:1000] type 00 class 0x020000 Sep 6 00:20:41.004834 kernel: pci 0000:00:03.0: reg 0x10: [io 0xc1a0-0xc1bf] Sep 6 00:20:41.004974 kernel: pci 0000:00:03.0: reg 0x14: [mem 0xfebf1000-0xfebf1fff] Sep 6 00:20:41.005110 kernel: pci 0000:00:03.0: reg 0x20: [mem 0xfe804000-0xfe807fff 64bit pref] Sep 6 00:20:41.005258 kernel: pci 0000:00:04.0: [1af4:1000] type 00 class 0x020000 Sep 6 00:20:41.005409 kernel: pci 0000:00:04.0: reg 0x10: [io 0xc1c0-0xc1df] Sep 6 00:20:41.005547 kernel: pci 0000:00:04.0: reg 0x14: [mem 0xfebf2000-0xfebf2fff] Sep 6 00:20:41.005690 kernel: pci 0000:00:04.0: reg 0x20: [mem 0xfe808000-0xfe80bfff 64bit pref] Sep 6 00:20:41.011043 kernel: pci 0000:00:05.0: [1af4:1004] type 00 class 0x010000 Sep 6 00:20:41.011233 kernel: pci 0000:00:05.0: reg 0x10: [io 0xc100-0xc13f] Sep 6 00:20:41.011391 kernel: pci 0000:00:05.0: reg 0x14: [mem 0xfebf3000-0xfebf3fff] Sep 6 00:20:41.011539 kernel: pci 0000:00:05.0: reg 0x20: [mem 0xfe80c000-0xfe80ffff 64bit pref] Sep 6 00:20:41.011708 kernel: pci 0000:00:06.0: [1af4:1001] type 00 class 0x010000 Sep 6 00:20:41.011919 kernel: pci 0000:00:06.0: reg 0x10: [io 0xc000-0xc07f] Sep 6 00:20:41.012073 kernel: pci 0000:00:06.0: reg 0x14: [mem 0xfebf4000-0xfebf4fff] Sep 6 00:20:41.012230 kernel: pci 0000:00:06.0: reg 0x20: [mem 0xfe810000-0xfe813fff 64bit pref] Sep 6 00:20:41.012397 kernel: pci 0000:00:07.0: [1af4:1001] type 00 class 0x010000 Sep 6 00:20:41.012551 kernel: pci 0000:00:07.0: reg 0x10: [io 0xc080-0xc0ff] Sep 6 00:20:41.012697 kernel: pci 0000:00:07.0: reg 0x14: [mem 0xfebf5000-0xfebf5fff] Sep 6 00:20:41.012927 kernel: pci 0000:00:07.0: reg 0x20: [mem 0xfe814000-0xfe817fff 64bit pref] Sep 6 00:20:41.013110 kernel: pci 0000:00:08.0: [1af4:1002] type 00 class 0x00ff00 Sep 6 00:20:41.013258 kernel: pci 0000:00:08.0: reg 0x10: [io 0xc140-0xc17f] Sep 6 00:20:41.013406 kernel: pci 0000:00:08.0: reg 0x20: [mem 0xfe818000-0xfe81bfff 64bit pref] Sep 6 00:20:41.013427 kernel: ACPI: PCI: Interrupt link LNKA configured for IRQ 10 Sep 6 00:20:41.013442 kernel: ACPI: PCI: Interrupt link LNKB configured for IRQ 10 Sep 6 00:20:41.013457 kernel: ACPI: PCI: Interrupt link LNKC configured for IRQ 11 Sep 6 00:20:41.013488 kernel: ACPI: PCI: Interrupt link LNKD configured for IRQ 11 Sep 6 00:20:41.013502 kernel: ACPI: PCI: Interrupt link LNKS configured for IRQ 9 Sep 6 00:20:41.013523 kernel: iommu: Default domain type: Translated Sep 6 00:20:41.013538 kernel: iommu: DMA domain TLB invalidation policy: lazy mode Sep 6 00:20:41.013696 kernel: pci 0000:00:02.0: vgaarb: setting as boot VGA device Sep 6 00:20:41.014014 kernel: pci 0000:00:02.0: vgaarb: VGA device added: decodes=io+mem,owns=io+mem,locks=none Sep 6 00:20:41.014191 kernel: pci 0000:00:02.0: vgaarb: bridge control possible Sep 6 00:20:41.014213 kernel: vgaarb: loaded Sep 6 00:20:41.014229 kernel: pps_core: LinuxPPS API ver. 1 registered Sep 6 00:20:41.014252 kernel: pps_core: Software ver. 5.3.6 - Copyright 2005-2007 Rodolfo Giometti Sep 6 00:20:41.014267 kernel: PTP clock support registered Sep 6 00:20:41.014281 kernel: PCI: Using ACPI for IRQ routing Sep 6 00:20:41.014302 kernel: PCI: pci_cache_line_size set to 64 bytes Sep 6 00:20:41.014316 kernel: e820: reserve RAM buffer [mem 0x0009fc00-0x0009ffff] Sep 6 00:20:41.014331 kernel: e820: reserve RAM buffer [mem 0x7ffdb000-0x7fffffff] Sep 6 00:20:41.014343 kernel: hpet0: at MMIO 0xfed00000, IRQs 2, 8, 0 Sep 6 00:20:41.014358 kernel: hpet0: 3 comparators, 64-bit 100.000000 MHz counter Sep 6 00:20:41.014372 kernel: clocksource: Switched to clocksource kvm-clock Sep 6 00:20:41.014391 kernel: VFS: Disk quotas dquot_6.6.0 Sep 6 00:20:41.014405 kernel: VFS: Dquot-cache hash table entries: 512 (order 0, 4096 bytes) Sep 6 00:20:41.014418 kernel: pnp: PnP ACPI init Sep 6 00:20:41.014431 kernel: pnp: PnP ACPI: found 4 devices Sep 6 00:20:41.014445 kernel: clocksource: acpi_pm: mask: 0xffffff max_cycles: 0xffffff, max_idle_ns: 2085701024 ns Sep 6 00:20:41.014460 kernel: NET: Registered PF_INET protocol family Sep 6 00:20:41.014475 kernel: IP idents hash table entries: 32768 (order: 6, 262144 bytes, linear) Sep 6 00:20:41.014490 kernel: tcp_listen_portaddr_hash hash table entries: 1024 (order: 2, 16384 bytes, linear) Sep 6 00:20:41.014514 kernel: Table-perturb hash table entries: 65536 (order: 6, 262144 bytes, linear) Sep 6 00:20:41.014527 kernel: TCP established hash table entries: 16384 (order: 5, 131072 bytes, linear) Sep 6 00:20:41.014539 kernel: TCP bind hash table entries: 16384 (order: 6, 262144 bytes, linear) Sep 6 00:20:41.014553 kernel: TCP: Hash tables configured (established 16384 bind 16384) Sep 6 00:20:41.014567 kernel: UDP hash table entries: 1024 (order: 3, 32768 bytes, linear) Sep 6 00:20:41.014581 kernel: UDP-Lite hash table entries: 1024 (order: 3, 32768 bytes, linear) Sep 6 00:20:41.014596 kernel: NET: Registered PF_UNIX/PF_LOCAL protocol family Sep 6 00:20:41.014610 kernel: NET: Registered PF_XDP protocol family Sep 6 00:20:41.014800 kernel: pci_bus 0000:00: resource 4 [io 0x0000-0x0cf7 window] Sep 6 00:20:41.014944 kernel: pci_bus 0000:00: resource 5 [io 0x0d00-0xffff window] Sep 6 00:20:41.015077 kernel: pci_bus 0000:00: resource 6 [mem 0x000a0000-0x000bffff window] Sep 6 00:20:41.015230 kernel: pci_bus 0000:00: resource 7 [mem 0x80000000-0xfebfffff window] Sep 6 00:20:41.015365 kernel: pci_bus 0000:00: resource 8 [mem 0x100000000-0x17fffffff window] Sep 6 00:20:41.015528 kernel: pci 0000:00:01.0: PIIX3: Enabling Passive Release Sep 6 00:20:41.015691 kernel: pci 0000:00:00.0: Limiting direct PCI/PCI transfers Sep 6 00:20:41.016935 kernel: pci 0000:00:01.0: Activating ISA DMA hang workarounds Sep 6 00:20:41.016968 kernel: ACPI: \_SB_.LNKD: Enabled at IRQ 11 Sep 6 00:20:41.017136 kernel: pci 0000:00:01.2: quirk_usb_early_handoff+0x0/0x740 took 31551 usecs Sep 6 00:20:41.017157 kernel: PCI: CLS 0 bytes, default 64 Sep 6 00:20:41.017173 kernel: RAPL PMU: API unit is 2^-32 Joules, 0 fixed counters, 10737418240 ms ovfl timer Sep 6 00:20:41.017231 kernel: clocksource: tsc: mask: 0xffffffffffffffff max_cycles: 0x23f39838d43, max_idle_ns: 440795267131 ns Sep 6 00:20:41.017257 kernel: Initialise system trusted keyrings Sep 6 00:20:41.017273 kernel: workingset: timestamp_bits=39 max_order=19 bucket_order=0 Sep 6 00:20:41.017297 kernel: Key type asymmetric registered Sep 6 00:20:41.017311 kernel: Asymmetric key parser 'x509' registered Sep 6 00:20:41.017325 kernel: Block layer SCSI generic (bsg) driver version 0.4 loaded (major 249) Sep 6 00:20:41.017345 kernel: io scheduler mq-deadline registered Sep 6 00:20:41.017366 kernel: io scheduler kyber registered Sep 6 00:20:41.017380 kernel: io scheduler bfq registered Sep 6 00:20:41.017393 kernel: ioatdma: Intel(R) QuickData Technology Driver 5.00 Sep 6 00:20:41.017408 kernel: ACPI: \_SB_.LNKB: Enabled at IRQ 10 Sep 6 00:20:41.017423 kernel: ACPI: \_SB_.LNKC: Enabled at IRQ 11 Sep 6 00:20:41.017437 kernel: ACPI: \_SB_.LNKA: Enabled at IRQ 10 Sep 6 00:20:41.017452 kernel: Serial: 8250/16550 driver, 4 ports, IRQ sharing enabled Sep 6 00:20:41.017475 kernel: 00:00: ttyS0 at I/O 0x3f8 (irq = 4, base_baud = 115200) is a 16550A Sep 6 00:20:41.017494 kernel: i8042: PNP: PS/2 Controller [PNP0303:KBD,PNP0f13:MOU] at 0x60,0x64 irq 1,12 Sep 6 00:20:41.017509 kernel: serio: i8042 KBD port at 0x60,0x64 irq 1 Sep 6 00:20:41.017523 kernel: serio: i8042 AUX port at 0x60,0x64 irq 12 Sep 6 00:20:41.017538 kernel: input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input0 Sep 6 00:20:41.024839 kernel: rtc_cmos 00:03: RTC can wake from S4 Sep 6 00:20:41.025071 kernel: rtc_cmos 00:03: registered as rtc0 Sep 6 00:20:41.025216 kernel: rtc_cmos 00:03: setting system clock to 2025-09-06T00:20:40 UTC (1757118040) Sep 6 00:20:41.025353 kernel: rtc_cmos 00:03: alarms up to one day, y3k, 242 bytes nvram Sep 6 00:20:41.025390 kernel: intel_pstate: CPU model not supported Sep 6 00:20:41.025404 kernel: NET: Registered PF_INET6 protocol family Sep 6 00:20:41.025418 kernel: Segment Routing with IPv6 Sep 6 00:20:41.025432 kernel: In-situ OAM (IOAM) with IPv6 Sep 6 00:20:41.025450 kernel: NET: Registered PF_PACKET protocol family Sep 6 00:20:41.025467 kernel: Key type dns_resolver registered Sep 6 00:20:41.025480 kernel: IPI shorthand broadcast: enabled Sep 6 00:20:41.025494 kernel: sched_clock: Marking stable (618001716, 80654452)->(808581651, -109925483) Sep 6 00:20:41.025508 kernel: registered taskstats version 1 Sep 6 00:20:41.025526 kernel: Loading compiled-in X.509 certificates Sep 6 00:20:41.025539 kernel: Loaded X.509 cert 'Kinvolk GmbH: Module signing key for 5.15.190-flatcar: 59a3efd48c75422889eb056cb9758fbe471623cb' Sep 6 00:20:41.025553 kernel: Key type .fscrypt registered Sep 6 00:20:41.025567 kernel: Key type fscrypt-provisioning registered Sep 6 00:20:41.025582 kernel: ima: No TPM chip found, activating TPM-bypass! Sep 6 00:20:41.025596 kernel: ima: Allocated hash algorithm: sha1 Sep 6 00:20:41.025610 kernel: ima: No architecture policies found Sep 6 00:20:41.025625 kernel: clk: Disabling unused clocks Sep 6 00:20:41.025643 kernel: Freeing unused kernel image (initmem) memory: 47492K Sep 6 00:20:41.025657 kernel: Write protecting the kernel read-only data: 28672k Sep 6 00:20:41.025671 kernel: Freeing unused kernel image (text/rodata gap) memory: 2040K Sep 6 00:20:41.025686 kernel: Freeing unused kernel image (rodata/data gap) memory: 604K Sep 6 00:20:41.025701 kernel: Run /init as init process Sep 6 00:20:41.025716 kernel: with arguments: Sep 6 00:20:41.025798 kernel: /init Sep 6 00:20:41.025818 kernel: with environment: Sep 6 00:20:41.025832 kernel: HOME=/ Sep 6 00:20:41.025850 kernel: TERM=linux Sep 6 00:20:41.025865 kernel: BOOT_IMAGE=/flatcar/vmlinuz-a Sep 6 00:20:41.025898 systemd[1]: systemd 252 running in system mode (+PAM +AUDIT +SELINUX -APPARMOR +IMA +SMACK +SECCOMP +GCRYPT -GNUTLS +OPENSSL -ACL +BLKID +CURL -ELFUTILS -FIDO2 +IDN2 -IDN +IPTC +KMOD +LIBCRYPTSETUP +LIBFDISK +PCRE2 -PWQUALITY -P11KIT -QRENCODE -TPM2 +BZIP2 +LZ4 +XZ +ZLIB +ZSTD -BPF_FRAMEWORK -XKBCOMMON +UTMP +SYSVINIT default-hierarchy=unified) Sep 6 00:20:41.025917 systemd[1]: Detected virtualization kvm. Sep 6 00:20:41.025939 systemd[1]: Detected architecture x86-64. Sep 6 00:20:41.025955 systemd[1]: Running in initrd. Sep 6 00:20:41.025970 systemd[1]: No hostname configured, using default hostname. Sep 6 00:20:41.025986 systemd[1]: Hostname set to . Sep 6 00:20:41.026013 systemd[1]: Initializing machine ID from VM UUID. Sep 6 00:20:41.026030 systemd[1]: Queued start job for default target initrd.target. Sep 6 00:20:41.026046 systemd[1]: Started systemd-ask-password-console.path. Sep 6 00:20:41.026062 systemd[1]: Reached target cryptsetup.target. Sep 6 00:20:41.026078 systemd[1]: Reached target paths.target. Sep 6 00:20:41.026093 systemd[1]: Reached target slices.target. Sep 6 00:20:41.026109 systemd[1]: Reached target swap.target. Sep 6 00:20:41.026124 systemd[1]: Reached target timers.target. Sep 6 00:20:41.026145 systemd[1]: Listening on iscsid.socket. Sep 6 00:20:41.026162 systemd[1]: Listening on iscsiuio.socket. Sep 6 00:20:41.026178 systemd[1]: Listening on systemd-journald-audit.socket. Sep 6 00:20:41.026194 systemd[1]: Listening on systemd-journald-dev-log.socket. Sep 6 00:20:41.026210 systemd[1]: Listening on systemd-journald.socket. Sep 6 00:20:41.026226 systemd[1]: Listening on systemd-networkd.socket. Sep 6 00:20:41.026242 systemd[1]: Listening on systemd-udevd-control.socket. Sep 6 00:20:41.026258 systemd[1]: Listening on systemd-udevd-kernel.socket. Sep 6 00:20:41.026280 systemd[1]: Reached target sockets.target. Sep 6 00:20:41.026302 systemd[1]: Starting kmod-static-nodes.service... Sep 6 00:20:41.026323 systemd[1]: Finished network-cleanup.service. Sep 6 00:20:41.026339 systemd[1]: Starting systemd-fsck-usr.service... Sep 6 00:20:41.026359 systemd[1]: Starting systemd-journald.service... Sep 6 00:20:41.026378 systemd[1]: Starting systemd-modules-load.service... Sep 6 00:20:41.026394 systemd[1]: Starting systemd-resolved.service... Sep 6 00:20:41.026409 systemd[1]: Starting systemd-vconsole-setup.service... Sep 6 00:20:41.026424 systemd[1]: Finished kmod-static-nodes.service. Sep 6 00:20:41.026440 systemd[1]: Finished systemd-fsck-usr.service. Sep 6 00:20:41.026467 systemd[1]: Starting systemd-tmpfiles-setup-dev.service... Sep 6 00:20:41.026490 systemd-journald[184]: Journal started Sep 6 00:20:41.026588 systemd-journald[184]: Runtime Journal (/run/log/journal/7563ec67c8ea422880d8c9a6295924d9) is 4.9M, max 39.5M, 34.5M free. Sep 6 00:20:40.997056 systemd-modules-load[185]: Inserted module 'overlay' Sep 6 00:20:41.040122 systemd[1]: Started systemd-journald.service. Sep 6 00:20:41.031832 systemd-resolved[186]: Positive Trust Anchors: Sep 6 00:20:41.050170 kernel: audit: type=1130 audit(1757118041.039:2): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-journald comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 00:20:41.050212 kernel: audit: type=1130 audit(1757118041.043:3): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-resolved comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 00:20:41.050233 kernel: audit: type=1130 audit(1757118041.044:4): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-vconsole-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 00:20:41.050251 kernel: audit: type=1130 audit(1757118041.045:5): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-tmpfiles-setup-dev comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 00:20:41.039000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-journald comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 00:20:41.043000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-resolved comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 00:20:41.044000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-vconsole-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 00:20:41.045000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-tmpfiles-setup-dev comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 00:20:41.031844 systemd-resolved[186]: . IN DS 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d Sep 6 00:20:41.058843 kernel: bridge: filtering via arp/ip/ip6tables is no longer available by default. Update your scripts to load br_netfilter if you need this. Sep 6 00:20:41.031916 systemd-resolved[186]: Negative trust anchors: home.arpa 10.in-addr.arpa 16.172.in-addr.arpa 17.172.in-addr.arpa 18.172.in-addr.arpa 19.172.in-addr.arpa 20.172.in-addr.arpa 21.172.in-addr.arpa 22.172.in-addr.arpa 23.172.in-addr.arpa 24.172.in-addr.arpa 25.172.in-addr.arpa 26.172.in-addr.arpa 27.172.in-addr.arpa 28.172.in-addr.arpa 29.172.in-addr.arpa 30.172.in-addr.arpa 31.172.in-addr.arpa 168.192.in-addr.arpa d.f.ip6.arpa corp home internal intranet lan local private test Sep 6 00:20:41.036285 systemd-resolved[186]: Defaulting to hostname 'linux'. Sep 6 00:20:41.040535 systemd[1]: Started systemd-resolved.service. Sep 6 00:20:41.044670 systemd[1]: Finished systemd-vconsole-setup.service. Sep 6 00:20:41.064306 kernel: Bridge firewalling registered Sep 6 00:20:41.045353 systemd[1]: Finished systemd-tmpfiles-setup-dev.service. Sep 6 00:20:41.045976 systemd[1]: Reached target nss-lookup.target. Sep 6 00:20:41.064110 systemd-modules-load[185]: Inserted module 'br_netfilter' Sep 6 00:20:41.066189 systemd[1]: Starting dracut-cmdline-ask.service... Sep 6 00:20:41.086000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-cmdline-ask comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 00:20:41.087191 systemd[1]: Finished dracut-cmdline-ask.service. Sep 6 00:20:41.090754 kernel: audit: type=1130 audit(1757118041.086:6): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-cmdline-ask comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 00:20:41.091137 systemd[1]: Starting dracut-cmdline.service... Sep 6 00:20:41.094775 kernel: SCSI subsystem initialized Sep 6 00:20:41.105337 dracut-cmdline[201]: dracut-dracut-053 Sep 6 00:20:41.106304 dracut-cmdline[201]: Using kernel command line parameters: rd.driver.pre=btrfs rootflags=rw mount.usrflags=ro BOOT_IMAGE=/flatcar/vmlinuz-a mount.usr=/dev/mapper/usr verity.usr=PARTUUID=7130c94a-213a-4e5a-8e26-6cce9662f132 rootflags=rw mount.usrflags=ro consoleblank=0 root=LABEL=ROOT console=ttyS0,115200n8 console=tty0 flatcar.first_boot=detected flatcar.oem.id=digitalocean verity.usrhash=a807e3b6c1f608bcead7858f1ad5b6908e6d312e2d99c0ec0e5454f978e611a7 Sep 6 00:20:41.114763 kernel: device-mapper: core: CONFIG_IMA_DISABLE_HTABLE is disabled. Duplicate IMA measurements will not be recorded in the IMA log. Sep 6 00:20:41.114837 kernel: device-mapper: uevent: version 1.0.3 Sep 6 00:20:41.124913 kernel: device-mapper: ioctl: 4.45.0-ioctl (2021-03-22) initialised: dm-devel@redhat.com Sep 6 00:20:41.129424 systemd-modules-load[185]: Inserted module 'dm_multipath' Sep 6 00:20:41.130000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-modules-load comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 00:20:41.131227 systemd[1]: Finished systemd-modules-load.service. Sep 6 00:20:41.135256 kernel: audit: type=1130 audit(1757118041.130:7): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-modules-load comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 00:20:41.135462 systemd[1]: Starting systemd-sysctl.service... Sep 6 00:20:41.147000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-sysctl comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 00:20:41.148016 systemd[1]: Finished systemd-sysctl.service. Sep 6 00:20:41.151762 kernel: audit: type=1130 audit(1757118041.147:8): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-sysctl comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 00:20:41.198773 kernel: Loading iSCSI transport class v2.0-870. Sep 6 00:20:41.219769 kernel: iscsi: registered transport (tcp) Sep 6 00:20:41.248980 kernel: iscsi: registered transport (qla4xxx) Sep 6 00:20:41.249078 kernel: QLogic iSCSI HBA Driver Sep 6 00:20:41.299105 kernel: audit: type=1130 audit(1757118041.295:9): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-cmdline comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 00:20:41.295000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-cmdline comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 00:20:41.296070 systemd[1]: Finished dracut-cmdline.service. Sep 6 00:20:41.297467 systemd[1]: Starting dracut-pre-udev.service... Sep 6 00:20:41.357798 kernel: raid6: avx2x4 gen() 14160 MB/s Sep 6 00:20:41.374804 kernel: raid6: avx2x4 xor() 6436 MB/s Sep 6 00:20:41.391823 kernel: raid6: avx2x2 gen() 17816 MB/s Sep 6 00:20:41.408794 kernel: raid6: avx2x2 xor() 20304 MB/s Sep 6 00:20:41.425803 kernel: raid6: avx2x1 gen() 13186 MB/s Sep 6 00:20:41.442802 kernel: raid6: avx2x1 xor() 17911 MB/s Sep 6 00:20:41.459789 kernel: raid6: sse2x4 gen() 12392 MB/s Sep 6 00:20:41.476793 kernel: raid6: sse2x4 xor() 6648 MB/s Sep 6 00:20:41.493825 kernel: raid6: sse2x2 gen() 12537 MB/s Sep 6 00:20:41.510802 kernel: raid6: sse2x2 xor() 8036 MB/s Sep 6 00:20:41.527793 kernel: raid6: sse2x1 gen() 12165 MB/s Sep 6 00:20:41.545094 kernel: raid6: sse2x1 xor() 5941 MB/s Sep 6 00:20:41.545174 kernel: raid6: using algorithm avx2x2 gen() 17816 MB/s Sep 6 00:20:41.545208 kernel: raid6: .... xor() 20304 MB/s, rmw enabled Sep 6 00:20:41.546239 kernel: raid6: using avx2x2 recovery algorithm Sep 6 00:20:41.559767 kernel: xor: automatically using best checksumming function avx Sep 6 00:20:41.668784 kernel: Btrfs loaded, crc32c=crc32c-intel, zoned=no, fsverity=no Sep 6 00:20:41.678904 systemd[1]: Finished dracut-pre-udev.service. Sep 6 00:20:41.678000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-udev comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 00:20:41.682801 systemd[1]: Starting systemd-udevd.service... Sep 6 00:20:41.684205 kernel: audit: type=1130 audit(1757118041.678:10): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-udev comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 00:20:41.679000 audit: BPF prog-id=7 op=LOAD Sep 6 00:20:41.679000 audit: BPF prog-id=8 op=LOAD Sep 6 00:20:41.698099 systemd-udevd[383]: Using default interface naming scheme 'v252'. Sep 6 00:20:41.703599 systemd[1]: Started systemd-udevd.service. Sep 6 00:20:41.703000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-udevd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 00:20:41.705039 systemd[1]: Starting dracut-pre-trigger.service... Sep 6 00:20:41.722439 dracut-pre-trigger[384]: rd.md=0: removing MD RAID activation Sep 6 00:20:41.761372 systemd[1]: Finished dracut-pre-trigger.service. Sep 6 00:20:41.761000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-trigger comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 00:20:41.762808 systemd[1]: Starting systemd-udev-trigger.service... Sep 6 00:20:41.823000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-udev-trigger comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 00:20:41.824277 systemd[1]: Finished systemd-udev-trigger.service. Sep 6 00:20:41.884811 kernel: virtio_blk virtio4: [vda] 125829120 512-byte logical blocks (64.4 GB/60.0 GiB) Sep 6 00:20:41.931703 kernel: GPT:Primary header thinks Alt. header is not at the end of the disk. Sep 6 00:20:41.931741 kernel: GPT:9289727 != 125829119 Sep 6 00:20:41.931761 kernel: GPT:Alternate GPT header not at the end of the disk. Sep 6 00:20:41.931773 kernel: GPT:9289727 != 125829119 Sep 6 00:20:41.931783 kernel: GPT: Use GNU Parted to correct GPT errors. Sep 6 00:20:41.931796 kernel: vda: vda1 vda2 vda3 vda4 vda6 vda7 vda9 Sep 6 00:20:41.931812 kernel: scsi host0: Virtio SCSI HBA Sep 6 00:20:41.932003 kernel: cryptd: max_cpu_qlen set to 1000 Sep 6 00:20:41.934225 kernel: virtio_blk virtio5: [vdb] 980 512-byte logical blocks (502 kB/490 KiB) Sep 6 00:20:41.957763 kernel: ACPI: bus type USB registered Sep 6 00:20:41.963130 kernel: usbcore: registered new interface driver usbfs Sep 6 00:20:41.963202 kernel: usbcore: registered new interface driver hub Sep 6 00:20:41.963217 kernel: usbcore: registered new device driver usb Sep 6 00:20:41.976764 kernel: BTRFS: device label OEM devid 1 transid 9 /dev/vda6 scanned by (udev-worker) (431) Sep 6 00:20:41.981822 kernel: AVX2 version of gcm_enc/dec engaged. Sep 6 00:20:41.983963 systemd[1]: Found device dev-disk-by\x2dlabel-EFI\x2dSYSTEM.device. Sep 6 00:20:41.986754 kernel: ehci_hcd: USB 2.0 'Enhanced' Host Controller (EHCI) Driver Sep 6 00:20:41.988758 kernel: ehci-pci: EHCI PCI platform driver Sep 6 00:20:41.993761 kernel: uhci_hcd: USB Universal Host Controller Interface driver Sep 6 00:20:41.993910 systemd[1]: Found device dev-disk-by\x2dpartuuid-7130c94a\x2d213a\x2d4e5a\x2d8e26\x2d6cce9662f132.device. Sep 6 00:20:41.994948 systemd[1]: Found device dev-disk-by\x2dpartlabel-USR\x2dA.device. Sep 6 00:20:41.996875 systemd[1]: Starting disk-uuid.service... Sep 6 00:20:42.003286 disk-uuid[452]: Primary Header is updated. Sep 6 00:20:42.003286 disk-uuid[452]: Secondary Entries is updated. Sep 6 00:20:42.003286 disk-uuid[452]: Secondary Header is updated. Sep 6 00:20:42.010575 kernel: AES CTR mode by8 optimization enabled Sep 6 00:20:42.007456 systemd[1]: Found device dev-disk-by\x2dlabel-ROOT.device. Sep 6 00:20:42.029761 kernel: uhci_hcd 0000:00:01.2: UHCI Host Controller Sep 6 00:20:42.030679 kernel: uhci_hcd 0000:00:01.2: new USB bus registered, assigned bus number 1 Sep 6 00:20:42.030871 kernel: uhci_hcd 0000:00:01.2: detected 2 ports Sep 6 00:20:42.030973 kernel: uhci_hcd 0000:00:01.2: irq 11, io base 0x0000c180 Sep 6 00:20:42.031070 kernel: hub 1-0:1.0: USB hub found Sep 6 00:20:42.031197 kernel: hub 1-0:1.0: 2 ports detected Sep 6 00:20:42.041757 kernel: libata version 3.00 loaded. Sep 6 00:20:42.049325 systemd[1]: Found device dev-disk-by\x2dlabel-OEM.device. Sep 6 00:20:42.129213 kernel: ata_piix 0000:00:01.1: version 2.13 Sep 6 00:20:42.129412 kernel: scsi host1: ata_piix Sep 6 00:20:42.129543 kernel: scsi host2: ata_piix Sep 6 00:20:42.129676 kernel: ata1: PATA max MWDMA2 cmd 0x1f0 ctl 0x3f6 bmdma 0xc1e0 irq 14 Sep 6 00:20:42.129690 kernel: ata2: PATA max MWDMA2 cmd 0x170 ctl 0x376 bmdma 0xc1e8 irq 15 Sep 6 00:20:43.015114 disk-uuid[453]: The operation has completed successfully. Sep 6 00:20:43.015821 kernel: vda: vda1 vda2 vda3 vda4 vda6 vda7 vda9 Sep 6 00:20:43.059350 systemd[1]: disk-uuid.service: Deactivated successfully. Sep 6 00:20:43.060214 systemd[1]: Finished disk-uuid.service. Sep 6 00:20:43.060000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=disk-uuid comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 00:20:43.060000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=disk-uuid comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 00:20:43.068638 systemd[1]: Starting verity-setup.service... Sep 6 00:20:43.088530 kernel: device-mapper: verity: sha256 using implementation "sha256-avx2" Sep 6 00:20:43.138448 systemd[1]: Found device dev-mapper-usr.device. Sep 6 00:20:43.140824 systemd[1]: Finished verity-setup.service. Sep 6 00:20:43.140000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=verity-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 00:20:43.142857 systemd[1]: Mounting sysusr-usr.mount... Sep 6 00:20:43.235989 kernel: EXT4-fs (dm-0): mounted filesystem without journal. Opts: norecovery. Quota mode: none. Sep 6 00:20:43.236585 systemd[1]: Mounted sysusr-usr.mount. Sep 6 00:20:43.237078 systemd[1]: afterburn-network-kargs.service was skipped because no trigger condition checks were met. Sep 6 00:20:43.238238 systemd[1]: Starting ignition-setup.service... Sep 6 00:20:43.239752 systemd[1]: Starting parse-ip-for-networkd.service... Sep 6 00:20:43.256394 kernel: BTRFS info (device vda6): using crc32c (crc32c-intel) checksum algorithm Sep 6 00:20:43.256470 kernel: BTRFS info (device vda6): using free space tree Sep 6 00:20:43.256490 kernel: BTRFS info (device vda6): has skinny extents Sep 6 00:20:43.272018 systemd[1]: mnt-oem.mount: Deactivated successfully. Sep 6 00:20:43.281022 systemd[1]: Finished ignition-setup.service. Sep 6 00:20:43.280000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 00:20:43.282912 systemd[1]: Starting ignition-fetch-offline.service... Sep 6 00:20:43.416000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=parse-ip-for-networkd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 00:20:43.417064 systemd[1]: Finished parse-ip-for-networkd.service. Sep 6 00:20:43.418000 audit: BPF prog-id=9 op=LOAD Sep 6 00:20:43.420533 systemd[1]: Starting systemd-networkd.service... Sep 6 00:20:43.458720 systemd-networkd[688]: lo: Link UP Sep 6 00:20:43.458741 systemd-networkd[688]: lo: Gained carrier Sep 6 00:20:43.460111 systemd-networkd[688]: Enumeration completed Sep 6 00:20:43.460247 systemd[1]: Started systemd-networkd.service. Sep 6 00:20:43.461000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-networkd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 00:20:43.461214 systemd-networkd[688]: eth1: Configuring with /usr/lib/systemd/network/zz-default.network. Sep 6 00:20:43.462332 systemd[1]: Reached target network.target. Sep 6 00:20:43.463261 systemd-networkd[688]: eth0: Configuring with /usr/lib/systemd/network/yy-digitalocean.network. Sep 6 00:20:43.465830 systemd-networkd[688]: eth1: Link UP Sep 6 00:20:43.465836 systemd-networkd[688]: eth1: Gained carrier Sep 6 00:20:43.474174 ignition[602]: Ignition 2.14.0 Sep 6 00:20:43.466296 systemd[1]: Starting iscsiuio.service... Sep 6 00:20:43.474186 ignition[602]: Stage: fetch-offline Sep 6 00:20:43.478151 systemd-networkd[688]: eth0: Link UP Sep 6 00:20:43.474299 ignition[602]: reading system config file "/usr/lib/ignition/base.d/base.ign" Sep 6 00:20:43.484000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-fetch-offline comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 00:20:43.489000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=iscsiuio comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 00:20:43.478156 systemd-networkd[688]: eth0: Gained carrier Sep 6 00:20:43.474349 ignition[602]: parsing config with SHA512: 865c03baa79b8c74023d13a0b3666474fa06a165421a1e05731b76e0f557d42c5c89d4870a0b9c4182ad7d4d8209de20dca9c9da63d637e0410fbd60314cac6c Sep 6 00:20:43.485216 systemd[1]: Finished ignition-fetch-offline.service. Sep 6 00:20:43.480684 ignition[602]: no config dir at "/usr/lib/ignition/base.platform.d/digitalocean" Sep 6 00:20:43.487184 systemd[1]: Starting ignition-fetch.service... Sep 6 00:20:43.502681 iscsid[694]: iscsid: can't open InitiatorName configuration file /etc/iscsi/initiatorname.iscsi Sep 6 00:20:43.502681 iscsid[694]: iscsid: Warning: InitiatorName file /etc/iscsi/initiatorname.iscsi does not exist or does not contain a properly formatted InitiatorName. If using software iscsi (iscsi_tcp or ib_iser) or partial offload (bnx2i or cxgbi iscsi), you may not be able to log Sep 6 00:20:43.502681 iscsid[694]: into or discover targets. Please create a file /etc/iscsi/initiatorname.iscsi that contains a sting with the format: InitiatorName=iqn.yyyy-mm.[:identifier]. Sep 6 00:20:43.502681 iscsid[694]: Example: InitiatorName=iqn.2001-04.com.redhat:fc6. Sep 6 00:20:43.502681 iscsid[694]: If using hardware iscsi like qla4xxx this message can be ignored. Sep 6 00:20:43.502681 iscsid[694]: iscsid: can't open InitiatorAlias configuration file /etc/iscsi/initiatorname.iscsi Sep 6 00:20:43.502681 iscsid[694]: iscsid: can't open iscsid.safe_logout configuration file /etc/iscsi/iscsid.conf Sep 6 00:20:43.503000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=iscsid comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 00:20:43.480911 ignition[602]: parsed url from cmdline: "" Sep 6 00:20:43.489948 systemd[1]: Started iscsiuio.service. Sep 6 00:20:43.480917 ignition[602]: no config URL provided Sep 6 00:20:43.492101 systemd[1]: Starting iscsid.service... Sep 6 00:20:43.480927 ignition[602]: reading system config file "/usr/lib/ignition/user.ign" Sep 6 00:20:43.502945 systemd-networkd[688]: eth1: DHCPv4 address 10.124.0.31/20 acquired from 169.254.169.253 Sep 6 00:20:43.480942 ignition[602]: no config at "/usr/lib/ignition/user.ign" Sep 6 00:20:43.504030 systemd[1]: Started iscsid.service. Sep 6 00:20:43.480951 ignition[602]: failed to fetch config: resource requires networking Sep 6 00:20:43.504883 systemd-networkd[688]: eth0: DHCPv4 address 147.182.198.71/20, gateway 147.182.192.1 acquired from 169.254.169.253 Sep 6 00:20:43.481138 ignition[602]: Ignition finished successfully Sep 6 00:20:43.506258 systemd[1]: Starting dracut-initqueue.service... Sep 6 00:20:43.523343 ignition[692]: Ignition 2.14.0 Sep 6 00:20:43.524011 ignition[692]: Stage: fetch Sep 6 00:20:43.524508 ignition[692]: reading system config file "/usr/lib/ignition/base.d/base.ign" Sep 6 00:20:43.525043 ignition[692]: parsing config with SHA512: 865c03baa79b8c74023d13a0b3666474fa06a165421a1e05731b76e0f557d42c5c89d4870a0b9c4182ad7d4d8209de20dca9c9da63d637e0410fbd60314cac6c Sep 6 00:20:43.527018 systemd[1]: Finished dracut-initqueue.service. Sep 6 00:20:43.526000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-initqueue comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 00:20:43.527706 systemd[1]: Reached target remote-fs-pre.target. Sep 6 00:20:43.527487 ignition[692]: no config dir at "/usr/lib/ignition/base.platform.d/digitalocean" Sep 6 00:20:43.528316 systemd[1]: Reached target remote-cryptsetup.target. Sep 6 00:20:43.528812 ignition[692]: parsed url from cmdline: "" Sep 6 00:20:43.529167 systemd[1]: Reached target remote-fs.target. Sep 6 00:20:43.528817 ignition[692]: no config URL provided Sep 6 00:20:43.528825 ignition[692]: reading system config file "/usr/lib/ignition/user.ign" Sep 6 00:20:43.528837 ignition[692]: no config at "/usr/lib/ignition/user.ign" Sep 6 00:20:43.528873 ignition[692]: GET http://169.254.169.254/metadata/v1/user-data: attempt #1 Sep 6 00:20:43.532274 systemd[1]: Starting dracut-pre-mount.service... Sep 6 00:20:43.547780 systemd[1]: Finished dracut-pre-mount.service. Sep 6 00:20:43.548000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-mount comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 00:20:43.551643 ignition[692]: GET result: OK Sep 6 00:20:43.551954 ignition[692]: parsing config with SHA512: efa091e436bd3a7336ca3360cb420523ce8a68177823463d7fe8ccde8f347ee18f08b71977dc5fe40a3f03a073254e89d7dee64a6eef604021240f18b4c0ebbb Sep 6 00:20:43.561602 unknown[692]: fetched base config from "system" Sep 6 00:20:43.562488 unknown[692]: fetched base config from "system" Sep 6 00:20:43.563118 unknown[692]: fetched user config from "digitalocean" Sep 6 00:20:43.564424 ignition[692]: fetch: fetch complete Sep 6 00:20:43.564438 ignition[692]: fetch: fetch passed Sep 6 00:20:43.564530 ignition[692]: Ignition finished successfully Sep 6 00:20:43.566000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-fetch comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 00:20:43.567265 systemd[1]: Finished ignition-fetch.service. Sep 6 00:20:43.569138 systemd[1]: Starting ignition-kargs.service... Sep 6 00:20:43.585014 ignition[713]: Ignition 2.14.0 Sep 6 00:20:43.585650 ignition[713]: Stage: kargs Sep 6 00:20:43.586215 ignition[713]: reading system config file "/usr/lib/ignition/base.d/base.ign" Sep 6 00:20:43.586726 ignition[713]: parsing config with SHA512: 865c03baa79b8c74023d13a0b3666474fa06a165421a1e05731b76e0f557d42c5c89d4870a0b9c4182ad7d4d8209de20dca9c9da63d637e0410fbd60314cac6c Sep 6 00:20:43.588980 ignition[713]: no config dir at "/usr/lib/ignition/base.platform.d/digitalocean" Sep 6 00:20:43.591519 ignition[713]: kargs: kargs passed Sep 6 00:20:43.592060 ignition[713]: Ignition finished successfully Sep 6 00:20:43.594047 systemd[1]: Finished ignition-kargs.service. Sep 6 00:20:43.593000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-kargs comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 00:20:43.595927 systemd[1]: Starting ignition-disks.service... Sep 6 00:20:43.607990 ignition[719]: Ignition 2.14.0 Sep 6 00:20:43.608869 ignition[719]: Stage: disks Sep 6 00:20:43.609599 ignition[719]: reading system config file "/usr/lib/ignition/base.d/base.ign" Sep 6 00:20:43.610395 ignition[719]: parsing config with SHA512: 865c03baa79b8c74023d13a0b3666474fa06a165421a1e05731b76e0f557d42c5c89d4870a0b9c4182ad7d4d8209de20dca9c9da63d637e0410fbd60314cac6c Sep 6 00:20:43.613374 ignition[719]: no config dir at "/usr/lib/ignition/base.platform.d/digitalocean" Sep 6 00:20:43.617087 ignition[719]: disks: disks passed Sep 6 00:20:43.617205 ignition[719]: Ignition finished successfully Sep 6 00:20:43.618000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-disks comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 00:20:43.618793 systemd[1]: Finished ignition-disks.service. Sep 6 00:20:43.619496 systemd[1]: Reached target initrd-root-device.target. Sep 6 00:20:43.620003 systemd[1]: Reached target local-fs-pre.target. Sep 6 00:20:43.620850 systemd[1]: Reached target local-fs.target. Sep 6 00:20:43.621608 systemd[1]: Reached target sysinit.target. Sep 6 00:20:43.622310 systemd[1]: Reached target basic.target. Sep 6 00:20:43.624755 systemd[1]: Starting systemd-fsck-root.service... Sep 6 00:20:43.642795 systemd-fsck[727]: ROOT: clean, 629/553520 files, 56028/553472 blocks Sep 6 00:20:43.647511 systemd[1]: Finished systemd-fsck-root.service. Sep 6 00:20:43.648960 systemd[1]: Mounting sysroot.mount... Sep 6 00:20:43.647000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-fsck-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 00:20:43.657763 kernel: EXT4-fs (vda9): mounted filesystem with ordered data mode. Opts: (null). Quota mode: none. Sep 6 00:20:43.658468 systemd[1]: Mounted sysroot.mount. Sep 6 00:20:43.659665 systemd[1]: Reached target initrd-root-fs.target. Sep 6 00:20:43.662509 systemd[1]: Mounting sysroot-usr.mount... Sep 6 00:20:43.664989 systemd[1]: Starting flatcar-digitalocean-network.service... Sep 6 00:20:43.667405 systemd[1]: Starting flatcar-metadata-hostname.service... Sep 6 00:20:43.667813 systemd[1]: ignition-remount-sysroot.service was skipped because of an unmet condition check (ConditionPathIsReadWrite=!/sysroot). Sep 6 00:20:43.667861 systemd[1]: Reached target ignition-diskful.target. Sep 6 00:20:43.669537 systemd[1]: Mounted sysroot-usr.mount. Sep 6 00:20:43.673566 systemd[1]: Starting initrd-setup-root.service... Sep 6 00:20:43.682321 initrd-setup-root[739]: cut: /sysroot/etc/passwd: No such file or directory Sep 6 00:20:43.700760 initrd-setup-root[747]: cut: /sysroot/etc/group: No such file or directory Sep 6 00:20:43.710703 initrd-setup-root[755]: cut: /sysroot/etc/shadow: No such file or directory Sep 6 00:20:43.720285 initrd-setup-root[765]: cut: /sysroot/etc/gshadow: No such file or directory Sep 6 00:20:43.799019 coreos-metadata[734]: Sep 06 00:20:43.798 INFO Fetching http://169.254.169.254/metadata/v1.json: Attempt #1 Sep 6 00:20:43.803000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-setup-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 00:20:43.804265 systemd[1]: Finished initrd-setup-root.service. Sep 6 00:20:43.805643 systemd[1]: Starting ignition-mount.service... Sep 6 00:20:43.808107 systemd[1]: Starting sysroot-boot.service... Sep 6 00:20:43.814896 coreos-metadata[734]: Sep 06 00:20:43.814 INFO Fetch successful Sep 6 00:20:43.818942 coreos-metadata[734]: Sep 06 00:20:43.818 INFO wrote hostname ci-3510.3.8-n-86fdecb492 to /sysroot/etc/hostname Sep 6 00:20:43.820000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=flatcar-metadata-hostname comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 00:20:43.820228 systemd[1]: Finished flatcar-metadata-hostname.service. Sep 6 00:20:43.824295 bash[784]: umount: /sysroot/usr/share/oem: not mounted. Sep 6 00:20:43.837092 coreos-metadata[733]: Sep 06 00:20:43.837 INFO Fetching http://169.254.169.254/metadata/v1.json: Attempt #1 Sep 6 00:20:43.843024 ignition[786]: INFO : Ignition 2.14.0 Sep 6 00:20:43.843024 ignition[786]: INFO : Stage: mount Sep 6 00:20:43.844003 ignition[786]: INFO : reading system config file "/usr/lib/ignition/base.d/base.ign" Sep 6 00:20:43.844003 ignition[786]: DEBUG : parsing config with SHA512: 865c03baa79b8c74023d13a0b3666474fa06a165421a1e05731b76e0f557d42c5c89d4870a0b9c4182ad7d4d8209de20dca9c9da63d637e0410fbd60314cac6c Sep 6 00:20:43.845080 ignition[786]: INFO : no config dir at "/usr/lib/ignition/base.platform.d/digitalocean" Sep 6 00:20:43.847811 ignition[786]: INFO : mount: mount passed Sep 6 00:20:43.848800 ignition[786]: INFO : Ignition finished successfully Sep 6 00:20:43.851769 coreos-metadata[733]: Sep 06 00:20:43.849 INFO Fetch successful Sep 6 00:20:43.852000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-mount comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 00:20:43.852623 systemd[1]: Finished ignition-mount.service. Sep 6 00:20:43.857413 systemd[1]: flatcar-digitalocean-network.service: Deactivated successfully. Sep 6 00:20:43.857000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=flatcar-digitalocean-network comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 00:20:43.857000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=flatcar-digitalocean-network comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 00:20:43.857624 systemd[1]: Finished flatcar-digitalocean-network.service. Sep 6 00:20:43.858000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=sysroot-boot comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 00:20:43.858611 systemd[1]: Finished sysroot-boot.service. Sep 6 00:20:44.160712 systemd[1]: Mounting sysroot-usr-share-oem.mount... Sep 6 00:20:44.169774 kernel: BTRFS: device label OEM devid 1 transid 11 /dev/vda6 scanned by mount (796) Sep 6 00:20:44.172221 kernel: BTRFS info (device vda6): using crc32c (crc32c-intel) checksum algorithm Sep 6 00:20:44.172268 kernel: BTRFS info (device vda6): using free space tree Sep 6 00:20:44.172280 kernel: BTRFS info (device vda6): has skinny extents Sep 6 00:20:44.183966 systemd[1]: Mounted sysroot-usr-share-oem.mount. Sep 6 00:20:44.186332 systemd[1]: Starting ignition-files.service... Sep 6 00:20:44.206725 ignition[816]: INFO : Ignition 2.14.0 Sep 6 00:20:44.206725 ignition[816]: INFO : Stage: files Sep 6 00:20:44.207972 ignition[816]: INFO : reading system config file "/usr/lib/ignition/base.d/base.ign" Sep 6 00:20:44.207972 ignition[816]: DEBUG : parsing config with SHA512: 865c03baa79b8c74023d13a0b3666474fa06a165421a1e05731b76e0f557d42c5c89d4870a0b9c4182ad7d4d8209de20dca9c9da63d637e0410fbd60314cac6c Sep 6 00:20:44.209112 ignition[816]: INFO : no config dir at "/usr/lib/ignition/base.platform.d/digitalocean" Sep 6 00:20:44.212511 ignition[816]: DEBUG : files: compiled without relabeling support, skipping Sep 6 00:20:44.213523 ignition[816]: INFO : files: ensureUsers: op(1): [started] creating or modifying user "core" Sep 6 00:20:44.213523 ignition[816]: DEBUG : files: ensureUsers: op(1): executing: "usermod" "--root" "/sysroot" "core" Sep 6 00:20:44.218995 ignition[816]: INFO : files: ensureUsers: op(1): [finished] creating or modifying user "core" Sep 6 00:20:44.220693 ignition[816]: INFO : files: ensureUsers: op(2): [started] adding ssh keys to user "core" Sep 6 00:20:44.222926 unknown[816]: wrote ssh authorized keys file for user: core Sep 6 00:20:44.223621 ignition[816]: INFO : files: ensureUsers: op(2): [finished] adding ssh keys to user "core" Sep 6 00:20:44.224871 ignition[816]: INFO : files: createFilesystemsFiles: createFiles: op(3): [started] writing file "/sysroot/opt/helm-v3.13.2-linux-amd64.tar.gz" Sep 6 00:20:44.225621 ignition[816]: INFO : files: createFilesystemsFiles: createFiles: op(3): GET https://get.helm.sh/helm-v3.13.2-linux-amd64.tar.gz: attempt #1 Sep 6 00:20:44.428753 ignition[816]: INFO : files: createFilesystemsFiles: createFiles: op(3): GET result: OK Sep 6 00:20:44.505064 systemd-networkd[688]: eth1: Gained IPv6LL Sep 6 00:20:44.569058 systemd-networkd[688]: eth0: Gained IPv6LL Sep 6 00:20:45.007983 ignition[816]: INFO : files: createFilesystemsFiles: createFiles: op(3): [finished] writing file "/sysroot/opt/helm-v3.13.2-linux-amd64.tar.gz" Sep 6 00:20:45.008874 ignition[816]: INFO : files: createFilesystemsFiles: createFiles: op(4): [started] writing file "/sysroot/home/core/install.sh" Sep 6 00:20:45.009612 ignition[816]: INFO : files: createFilesystemsFiles: createFiles: op(4): [finished] writing file "/sysroot/home/core/install.sh" Sep 6 00:20:45.009612 ignition[816]: INFO : files: createFilesystemsFiles: createFiles: op(5): [started] writing file "/sysroot/home/core/nginx.yaml" Sep 6 00:20:45.009612 ignition[816]: INFO : files: createFilesystemsFiles: createFiles: op(5): [finished] writing file "/sysroot/home/core/nginx.yaml" Sep 6 00:20:45.009612 ignition[816]: INFO : files: createFilesystemsFiles: createFiles: op(6): [started] writing file "/sysroot/home/core/nfs-pod.yaml" Sep 6 00:20:45.009612 ignition[816]: INFO : files: createFilesystemsFiles: createFiles: op(6): [finished] writing file "/sysroot/home/core/nfs-pod.yaml" Sep 6 00:20:45.009612 ignition[816]: INFO : files: createFilesystemsFiles: createFiles: op(7): [started] writing file "/sysroot/home/core/nfs-pvc.yaml" Sep 6 00:20:45.009612 ignition[816]: INFO : files: createFilesystemsFiles: createFiles: op(7): [finished] writing file "/sysroot/home/core/nfs-pvc.yaml" Sep 6 00:20:45.014016 ignition[816]: INFO : files: createFilesystemsFiles: createFiles: op(8): [started] writing file "/sysroot/etc/flatcar/update.conf" Sep 6 00:20:45.014016 ignition[816]: INFO : files: createFilesystemsFiles: createFiles: op(8): [finished] writing file "/sysroot/etc/flatcar/update.conf" Sep 6 00:20:45.014016 ignition[816]: INFO : files: createFilesystemsFiles: createFiles: op(9): [started] writing link "/sysroot/etc/extensions/kubernetes.raw" -> "/opt/extensions/kubernetes/kubernetes-v1.31.8-x86-64.raw" Sep 6 00:20:45.014016 ignition[816]: INFO : files: createFilesystemsFiles: createFiles: op(9): [finished] writing link "/sysroot/etc/extensions/kubernetes.raw" -> "/opt/extensions/kubernetes/kubernetes-v1.31.8-x86-64.raw" Sep 6 00:20:45.014016 ignition[816]: INFO : files: createFilesystemsFiles: createFiles: op(a): [started] writing file "/sysroot/opt/extensions/kubernetes/kubernetes-v1.31.8-x86-64.raw" Sep 6 00:20:45.014016 ignition[816]: INFO : files: createFilesystemsFiles: createFiles: op(a): GET https://extensions.flatcar.org/extensions/kubernetes-v1.31.8-x86-64.raw: attempt #1 Sep 6 00:20:45.435414 ignition[816]: INFO : files: createFilesystemsFiles: createFiles: op(a): GET result: OK Sep 6 00:20:46.312340 ignition[816]: INFO : files: createFilesystemsFiles: createFiles: op(a): [finished] writing file "/sysroot/opt/extensions/kubernetes/kubernetes-v1.31.8-x86-64.raw" Sep 6 00:20:46.313321 ignition[816]: INFO : files: op(b): [started] processing unit "coreos-metadata-sshkeys@.service" Sep 6 00:20:46.313927 ignition[816]: INFO : files: op(b): [finished] processing unit "coreos-metadata-sshkeys@.service" Sep 6 00:20:46.314453 ignition[816]: INFO : files: op(c): [started] processing unit "prepare-helm.service" Sep 6 00:20:46.315271 ignition[816]: INFO : files: op(c): op(d): [started] writing unit "prepare-helm.service" at "/sysroot/etc/systemd/system/prepare-helm.service" Sep 6 00:20:46.316240 ignition[816]: INFO : files: op(c): op(d): [finished] writing unit "prepare-helm.service" at "/sysroot/etc/systemd/system/prepare-helm.service" Sep 6 00:20:46.317008 ignition[816]: INFO : files: op(c): [finished] processing unit "prepare-helm.service" Sep 6 00:20:46.317556 ignition[816]: INFO : files: op(e): [started] setting preset to enabled for "coreos-metadata-sshkeys@.service " Sep 6 00:20:46.318185 ignition[816]: INFO : files: op(e): [finished] setting preset to enabled for "coreos-metadata-sshkeys@.service " Sep 6 00:20:46.318185 ignition[816]: INFO : files: op(f): [started] setting preset to enabled for "prepare-helm.service" Sep 6 00:20:46.318185 ignition[816]: INFO : files: op(f): [finished] setting preset to enabled for "prepare-helm.service" Sep 6 00:20:46.327256 ignition[816]: INFO : files: createResultFile: createFiles: op(10): [started] writing file "/sysroot/etc/.ignition-result.json" Sep 6 00:20:46.327256 ignition[816]: INFO : files: createResultFile: createFiles: op(10): [finished] writing file "/sysroot/etc/.ignition-result.json" Sep 6 00:20:46.327256 ignition[816]: INFO : files: files passed Sep 6 00:20:46.327256 ignition[816]: INFO : Ignition finished successfully Sep 6 00:20:46.330231 systemd[1]: Finished ignition-files.service. Sep 6 00:20:46.337643 kernel: kauditd_printk_skb: 27 callbacks suppressed Sep 6 00:20:46.337671 kernel: audit: type=1130 audit(1757118046.330:38): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-files comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 00:20:46.330000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-files comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 00:20:46.332979 systemd[1]: Starting initrd-setup-root-after-ignition.service... Sep 6 00:20:46.335296 systemd[1]: torcx-profile-populate.service was skipped because of an unmet condition check (ConditionPathExists=/sysroot/etc/torcx/next-profile). Sep 6 00:20:46.340000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-quench comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 00:20:46.336285 systemd[1]: Starting ignition-quench.service... Sep 6 00:20:46.346873 kernel: audit: type=1130 audit(1757118046.340:39): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-quench comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 00:20:46.346902 kernel: audit: type=1131 audit(1757118046.340:40): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-quench comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 00:20:46.340000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-quench comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 00:20:46.341179 systemd[1]: ignition-quench.service: Deactivated successfully. Sep 6 00:20:46.341277 systemd[1]: Finished ignition-quench.service. Sep 6 00:20:46.348586 initrd-setup-root-after-ignition[841]: grep: /sysroot/etc/flatcar/enabled-sysext.conf: No such file or directory Sep 6 00:20:46.349238 systemd[1]: Finished initrd-setup-root-after-ignition.service. Sep 6 00:20:46.352804 kernel: audit: type=1130 audit(1757118046.349:41): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-setup-root-after-ignition comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 00:20:46.349000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-setup-root-after-ignition comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 00:20:46.350020 systemd[1]: Reached target ignition-complete.target. Sep 6 00:20:46.354057 systemd[1]: Starting initrd-parse-etc.service... Sep 6 00:20:46.371427 systemd[1]: initrd-parse-etc.service: Deactivated successfully. Sep 6 00:20:46.371532 systemd[1]: Finished initrd-parse-etc.service. Sep 6 00:20:46.376832 kernel: audit: type=1130 audit(1757118046.371:42): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-parse-etc comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 00:20:46.376871 kernel: audit: type=1131 audit(1757118046.371:43): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-parse-etc comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 00:20:46.371000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-parse-etc comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 00:20:46.371000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-parse-etc comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 00:20:46.372505 systemd[1]: Reached target initrd-fs.target. Sep 6 00:20:46.377112 systemd[1]: Reached target initrd.target. Sep 6 00:20:46.377806 systemd[1]: dracut-mount.service was skipped because no trigger condition checks were met. Sep 6 00:20:46.379206 systemd[1]: Starting dracut-pre-pivot.service... Sep 6 00:20:46.395079 systemd[1]: Finished dracut-pre-pivot.service. Sep 6 00:20:46.394000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-pivot comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 00:20:46.396654 systemd[1]: Starting initrd-cleanup.service... Sep 6 00:20:46.399957 kernel: audit: type=1130 audit(1757118046.394:44): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-pivot comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 00:20:46.408811 systemd[1]: Stopped target nss-lookup.target. Sep 6 00:20:46.409263 systemd[1]: Stopped target remote-cryptsetup.target. Sep 6 00:20:46.409950 systemd[1]: Stopped target timers.target. Sep 6 00:20:46.410486 systemd[1]: dracut-pre-pivot.service: Deactivated successfully. Sep 6 00:20:46.413673 kernel: audit: type=1131 audit(1757118046.410:45): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-pivot comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 00:20:46.410000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-pivot comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 00:20:46.410605 systemd[1]: Stopped dracut-pre-pivot.service. Sep 6 00:20:46.411167 systemd[1]: Stopped target initrd.target. Sep 6 00:20:46.414188 systemd[1]: Stopped target basic.target. Sep 6 00:20:46.414650 systemd[1]: Stopped target ignition-complete.target. Sep 6 00:20:46.415276 systemd[1]: Stopped target ignition-diskful.target. Sep 6 00:20:46.421871 systemd[1]: Stopped target initrd-root-device.target. Sep 6 00:20:46.422474 systemd[1]: Stopped target remote-fs.target. Sep 6 00:20:46.423118 systemd[1]: Stopped target remote-fs-pre.target. Sep 6 00:20:46.423727 systemd[1]: Stopped target sysinit.target. Sep 6 00:20:46.424221 systemd[1]: Stopped target local-fs.target. Sep 6 00:20:46.424723 systemd[1]: Stopped target local-fs-pre.target. Sep 6 00:20:46.425313 systemd[1]: Stopped target swap.target. Sep 6 00:20:46.428768 kernel: audit: type=1131 audit(1757118046.425:46): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-mount comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 00:20:46.425000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-mount comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 00:20:46.425815 systemd[1]: dracut-pre-mount.service: Deactivated successfully. Sep 6 00:20:46.426036 systemd[1]: Stopped dracut-pre-mount.service. Sep 6 00:20:46.432262 kernel: audit: type=1131 audit(1757118046.428:47): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-initqueue comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 00:20:46.428000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-initqueue comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 00:20:46.426588 systemd[1]: Stopped target cryptsetup.target. Sep 6 00:20:46.431000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-setup-root-after-ignition comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 00:20:46.429126 systemd[1]: dracut-initqueue.service: Deactivated successfully. Sep 6 00:20:46.429283 systemd[1]: Stopped dracut-initqueue.service. Sep 6 00:20:46.432000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-files comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 00:20:46.429924 systemd[1]: initrd-setup-root-after-ignition.service: Deactivated successfully. Sep 6 00:20:46.430155 systemd[1]: Stopped initrd-setup-root-after-ignition.service. Sep 6 00:20:46.434000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=flatcar-metadata-hostname comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 00:20:46.432785 systemd[1]: ignition-files.service: Deactivated successfully. Sep 6 00:20:46.432937 systemd[1]: Stopped ignition-files.service. Sep 6 00:20:46.433705 systemd[1]: flatcar-metadata-hostname.service: Deactivated successfully. Sep 6 00:20:46.433852 systemd[1]: Stopped flatcar-metadata-hostname.service. Sep 6 00:20:46.437059 iscsid[694]: iscsid shutting down. Sep 6 00:20:46.436015 systemd[1]: Stopping ignition-mount.service... Sep 6 00:20:46.442000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-udev-trigger comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 00:20:46.443000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-trigger comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 00:20:46.440966 systemd[1]: Stopping iscsid.service... Sep 6 00:20:46.442349 systemd[1]: Stopping sysroot-boot.service... Sep 6 00:20:46.442704 systemd[1]: systemd-udev-trigger.service: Deactivated successfully. Sep 6 00:20:46.442905 systemd[1]: Stopped systemd-udev-trigger.service. Sep 6 00:20:46.443456 systemd[1]: dracut-pre-trigger.service: Deactivated successfully. Sep 6 00:20:46.443579 systemd[1]: Stopped dracut-pre-trigger.service. Sep 6 00:20:46.445926 systemd[1]: iscsid.service: Deactivated successfully. Sep 6 00:20:46.453000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=iscsid comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 00:20:46.446068 systemd[1]: Stopped iscsid.service. Sep 6 00:20:46.455801 systemd[1]: initrd-cleanup.service: Deactivated successfully. Sep 6 00:20:46.455893 systemd[1]: Finished initrd-cleanup.service. Sep 6 00:20:46.459000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-cleanup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 00:20:46.459000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-cleanup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 00:20:46.460478 ignition[854]: INFO : Ignition 2.14.0 Sep 6 00:20:46.460478 ignition[854]: INFO : Stage: umount Sep 6 00:20:46.460478 ignition[854]: INFO : reading system config file "/usr/lib/ignition/base.d/base.ign" Sep 6 00:20:46.460478 ignition[854]: DEBUG : parsing config with SHA512: 865c03baa79b8c74023d13a0b3666474fa06a165421a1e05731b76e0f557d42c5c89d4870a0b9c4182ad7d4d8209de20dca9c9da63d637e0410fbd60314cac6c Sep 6 00:20:46.463936 systemd[1]: Stopping iscsiuio.service... Sep 6 00:20:46.466374 systemd[1]: iscsiuio.service: Deactivated successfully. Sep 6 00:20:46.466000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=iscsiuio comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 00:20:46.467172 ignition[854]: INFO : no config dir at "/usr/lib/ignition/base.platform.d/digitalocean" Sep 6 00:20:46.466474 systemd[1]: Stopped iscsiuio.service. Sep 6 00:20:46.468288 ignition[854]: INFO : umount: umount passed Sep 6 00:20:46.468762 ignition[854]: INFO : Ignition finished successfully Sep 6 00:20:46.470124 systemd[1]: ignition-mount.service: Deactivated successfully. Sep 6 00:20:46.470232 systemd[1]: Stopped ignition-mount.service. Sep 6 00:20:46.470000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-mount comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 00:20:46.471049 systemd[1]: ignition-disks.service: Deactivated successfully. Sep 6 00:20:46.470000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-disks comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 00:20:46.471102 systemd[1]: Stopped ignition-disks.service. Sep 6 00:20:46.471000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-kargs comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 00:20:46.471496 systemd[1]: ignition-kargs.service: Deactivated successfully. Sep 6 00:20:46.471000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-fetch comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 00:20:46.471539 systemd[1]: Stopped ignition-kargs.service. Sep 6 00:20:46.472151 systemd[1]: ignition-fetch.service: Deactivated successfully. Sep 6 00:20:46.473000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-fetch-offline comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 00:20:46.472189 systemd[1]: Stopped ignition-fetch.service. Sep 6 00:20:46.472725 systemd[1]: Stopped target network.target. Sep 6 00:20:46.473298 systemd[1]: ignition-fetch-offline.service: Deactivated successfully. Sep 6 00:20:46.473345 systemd[1]: Stopped ignition-fetch-offline.service. Sep 6 00:20:46.473963 systemd[1]: Stopped target paths.target. Sep 6 00:20:46.474651 systemd[1]: systemd-ask-password-console.path: Deactivated successfully. Sep 6 00:20:46.480195 systemd[1]: Stopped systemd-ask-password-console.path. Sep 6 00:20:46.484656 systemd[1]: Stopped target slices.target. Sep 6 00:20:46.490305 systemd[1]: Stopped target sockets.target. Sep 6 00:20:46.491026 systemd[1]: iscsid.socket: Deactivated successfully. Sep 6 00:20:46.491102 systemd[1]: Closed iscsid.socket. Sep 6 00:20:46.493341 systemd[1]: iscsiuio.socket: Deactivated successfully. Sep 6 00:20:46.495000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 00:20:46.493412 systemd[1]: Closed iscsiuio.socket. Sep 6 00:20:46.495100 systemd[1]: ignition-setup.service: Deactivated successfully. Sep 6 00:20:46.495169 systemd[1]: Stopped ignition-setup.service. Sep 6 00:20:46.497662 systemd[1]: Stopping systemd-networkd.service... Sep 6 00:20:46.499640 systemd[1]: Stopping systemd-resolved.service... Sep 6 00:20:46.502810 systemd-networkd[688]: eth0: DHCPv6 lease lost Sep 6 00:20:46.504834 systemd[1]: sysroot-boot.mount: Deactivated successfully. Sep 6 00:20:46.507058 systemd-networkd[688]: eth1: DHCPv6 lease lost Sep 6 00:20:46.509000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-resolved comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 00:20:46.510086 systemd[1]: systemd-resolved.service: Deactivated successfully. Sep 6 00:20:46.510219 systemd[1]: Stopped systemd-resolved.service. Sep 6 00:20:46.511154 systemd[1]: systemd-networkd.service: Deactivated successfully. Sep 6 00:20:46.510000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-networkd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 00:20:46.511253 systemd[1]: Stopped systemd-networkd.service. Sep 6 00:20:46.511947 systemd[1]: sysroot-boot.service: Deactivated successfully. Sep 6 00:20:46.512000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=sysroot-boot comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 00:20:46.512035 systemd[1]: Stopped sysroot-boot.service. Sep 6 00:20:46.513000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-setup-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 00:20:46.513209 systemd[1]: systemd-networkd.socket: Deactivated successfully. Sep 6 00:20:46.513241 systemd[1]: Closed systemd-networkd.socket. Sep 6 00:20:46.513562 systemd[1]: initrd-setup-root.service: Deactivated successfully. Sep 6 00:20:46.513602 systemd[1]: Stopped initrd-setup-root.service. Sep 6 00:20:46.515000 audit: BPF prog-id=6 op=UNLOAD Sep 6 00:20:46.515000 audit: BPF prog-id=9 op=UNLOAD Sep 6 00:20:46.515015 systemd[1]: Stopping network-cleanup.service... Sep 6 00:20:46.515583 systemd[1]: parse-ip-for-networkd.service: Deactivated successfully. Sep 6 00:20:46.515647 systemd[1]: Stopped parse-ip-for-networkd.service. Sep 6 00:20:46.517000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=parse-ip-for-networkd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 00:20:46.518075 systemd[1]: systemd-sysctl.service: Deactivated successfully. Sep 6 00:20:46.518124 systemd[1]: Stopped systemd-sysctl.service. Sep 6 00:20:46.517000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-sysctl comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 00:20:46.518925 systemd[1]: systemd-modules-load.service: Deactivated successfully. Sep 6 00:20:46.518000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-modules-load comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 00:20:46.518964 systemd[1]: Stopped systemd-modules-load.service. Sep 6 00:20:46.519476 systemd[1]: Stopping systemd-udevd.service... Sep 6 00:20:46.525292 systemd[1]: run-credentials-systemd\x2dsysctl.service.mount: Deactivated successfully. Sep 6 00:20:46.528288 systemd[1]: network-cleanup.service: Deactivated successfully. Sep 6 00:20:46.528901 systemd[1]: Stopped network-cleanup.service. Sep 6 00:20:46.528000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=network-cleanup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 00:20:46.530139 systemd[1]: systemd-udevd.service: Deactivated successfully. Sep 6 00:20:46.530685 systemd[1]: Stopped systemd-udevd.service. Sep 6 00:20:46.530000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-udevd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 00:20:46.531835 systemd[1]: systemd-udevd-control.socket: Deactivated successfully. Sep 6 00:20:46.532391 systemd[1]: Closed systemd-udevd-control.socket. Sep 6 00:20:46.533103 systemd[1]: systemd-udevd-kernel.socket: Deactivated successfully. Sep 6 00:20:46.533581 systemd[1]: Closed systemd-udevd-kernel.socket. Sep 6 00:20:46.534445 systemd[1]: dracut-pre-udev.service: Deactivated successfully. Sep 6 00:20:46.534903 systemd[1]: Stopped dracut-pre-udev.service. Sep 6 00:20:46.534000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-udev comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 00:20:46.535699 systemd[1]: dracut-cmdline.service: Deactivated successfully. Sep 6 00:20:46.536152 systemd[1]: Stopped dracut-cmdline.service. Sep 6 00:20:46.536000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-cmdline comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 00:20:46.536893 systemd[1]: dracut-cmdline-ask.service: Deactivated successfully. Sep 6 00:20:46.537323 systemd[1]: Stopped dracut-cmdline-ask.service. Sep 6 00:20:46.537000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-cmdline-ask comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 00:20:46.538889 systemd[1]: Starting initrd-udevadm-cleanup-db.service... Sep 6 00:20:46.545978 systemd[1]: systemd-tmpfiles-setup-dev.service: Deactivated successfully. Sep 6 00:20:46.546000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-tmpfiles-setup-dev comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 00:20:46.546083 systemd[1]: Stopped systemd-tmpfiles-setup-dev.service. Sep 6 00:20:46.547000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=kmod-static-nodes comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 00:20:46.547355 systemd[1]: kmod-static-nodes.service: Deactivated successfully. Sep 6 00:20:46.547000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-vconsole-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 00:20:46.547425 systemd[1]: Stopped kmod-static-nodes.service. Sep 6 00:20:46.548053 systemd[1]: systemd-vconsole-setup.service: Deactivated successfully. Sep 6 00:20:46.548114 systemd[1]: Stopped systemd-vconsole-setup.service. Sep 6 00:20:46.550512 systemd[1]: run-credentials-systemd\x2dtmpfiles\x2dsetup\x2ddev.service.mount: Deactivated successfully. Sep 6 00:20:46.551248 systemd[1]: initrd-udevadm-cleanup-db.service: Deactivated successfully. Sep 6 00:20:46.551379 systemd[1]: Finished initrd-udevadm-cleanup-db.service. Sep 6 00:20:46.551000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-udevadm-cleanup-db comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 00:20:46.551000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-udevadm-cleanup-db comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 00:20:46.552363 systemd[1]: Reached target initrd-switch-root.target. Sep 6 00:20:46.554271 systemd[1]: Starting initrd-switch-root.service... Sep 6 00:20:46.567670 systemd[1]: Switching root. Sep 6 00:20:46.585647 systemd-journald[184]: Journal stopped Sep 6 00:20:49.807113 systemd-journald[184]: Received SIGTERM from PID 1 (systemd). Sep 6 00:20:49.807195 kernel: SELinux: Class mctp_socket not defined in policy. Sep 6 00:20:49.807211 kernel: SELinux: Class anon_inode not defined in policy. Sep 6 00:20:49.807224 kernel: SELinux: the above unknown classes and permissions will be allowed Sep 6 00:20:49.807235 kernel: SELinux: policy capability network_peer_controls=1 Sep 6 00:20:49.807246 kernel: SELinux: policy capability open_perms=1 Sep 6 00:20:49.807266 kernel: SELinux: policy capability extended_socket_class=1 Sep 6 00:20:49.807278 kernel: SELinux: policy capability always_check_network=0 Sep 6 00:20:49.807289 kernel: SELinux: policy capability cgroup_seclabel=1 Sep 6 00:20:49.807301 kernel: SELinux: policy capability nnp_nosuid_transition=1 Sep 6 00:20:49.807312 kernel: SELinux: policy capability genfs_seclabel_symlinks=0 Sep 6 00:20:49.807324 kernel: SELinux: policy capability ioctl_skip_cloexec=0 Sep 6 00:20:49.807345 systemd[1]: Successfully loaded SELinux policy in 44.132ms. Sep 6 00:20:49.807372 systemd[1]: Relabelled /dev, /dev/shm, /run, /sys/fs/cgroup in 11.236ms. Sep 6 00:20:49.807389 systemd[1]: systemd 252 running in system mode (+PAM +AUDIT +SELINUX -APPARMOR +IMA +SMACK +SECCOMP +GCRYPT -GNUTLS +OPENSSL -ACL +BLKID +CURL -ELFUTILS -FIDO2 +IDN2 -IDN +IPTC +KMOD +LIBCRYPTSETUP +LIBFDISK +PCRE2 -PWQUALITY -P11KIT -QRENCODE -TPM2 +BZIP2 +LZ4 +XZ +ZLIB +ZSTD -BPF_FRAMEWORK -XKBCOMMON +UTMP +SYSVINIT default-hierarchy=unified) Sep 6 00:20:49.807402 systemd[1]: Detected virtualization kvm. Sep 6 00:20:49.807415 systemd[1]: Detected architecture x86-64. Sep 6 00:20:49.807432 systemd[1]: Detected first boot. Sep 6 00:20:49.807456 systemd[1]: Hostname set to . Sep 6 00:20:49.807491 systemd[1]: Initializing machine ID from VM UUID. Sep 6 00:20:49.807504 kernel: SELinux: Context system_u:object_r:container_file_t:s0:c1022,c1023 is not valid (left unmapped). Sep 6 00:20:49.807523 systemd[1]: Populated /etc with preset unit settings. Sep 6 00:20:49.807553 systemd[1]: /usr/lib/systemd/system/locksmithd.service:8: Unit uses CPUShares=; please use CPUWeight= instead. Support for CPUShares= will be removed soon. Sep 6 00:20:49.807575 systemd[1]: /usr/lib/systemd/system/locksmithd.service:9: Unit uses MemoryLimit=; please use MemoryMax= instead. Support for MemoryLimit= will be removed soon. Sep 6 00:20:49.807593 systemd[1]: /run/systemd/system/docker.socket:8: ListenStream= references a path below legacy directory /var/run/, updating /var/run/docker.sock → /run/docker.sock; please update the unit file accordingly. Sep 6 00:20:49.807612 systemd[1]: initrd-switch-root.service: Deactivated successfully. Sep 6 00:20:49.807628 systemd[1]: Stopped initrd-switch-root.service. Sep 6 00:20:49.807647 systemd[1]: systemd-journald.service: Scheduled restart job, restart counter is at 1. Sep 6 00:20:49.807665 systemd[1]: Created slice system-addon\x2dconfig.slice. Sep 6 00:20:49.807687 systemd[1]: Created slice system-addon\x2drun.slice. Sep 6 00:20:49.807704 systemd[1]: Created slice system-coreos\x2dmetadata\x2dsshkeys.slice. Sep 6 00:20:49.807722 systemd[1]: Created slice system-getty.slice. Sep 6 00:20:49.807818 systemd[1]: Created slice system-modprobe.slice. Sep 6 00:20:49.807842 systemd[1]: Created slice system-serial\x2dgetty.slice. Sep 6 00:20:49.807859 systemd[1]: Created slice system-system\x2dcloudinit.slice. Sep 6 00:20:49.807877 systemd[1]: Created slice system-systemd\x2dfsck.slice. Sep 6 00:20:49.807894 systemd[1]: Created slice user.slice. Sep 6 00:20:49.807913 systemd[1]: Started systemd-ask-password-console.path. Sep 6 00:20:49.807937 systemd[1]: Started systemd-ask-password-wall.path. Sep 6 00:20:49.807957 systemd[1]: Set up automount boot.automount. Sep 6 00:20:49.807975 systemd[1]: Set up automount proc-sys-fs-binfmt_misc.automount. Sep 6 00:20:49.807993 systemd[1]: Stopped target initrd-switch-root.target. Sep 6 00:20:49.808015 systemd[1]: Stopped target initrd-fs.target. Sep 6 00:20:49.808033 systemd[1]: Stopped target initrd-root-fs.target. Sep 6 00:20:49.808050 systemd[1]: Reached target integritysetup.target. Sep 6 00:20:49.808063 systemd[1]: Reached target remote-cryptsetup.target. Sep 6 00:20:49.808076 systemd[1]: Reached target remote-fs.target. Sep 6 00:20:49.808091 systemd[1]: Reached target slices.target. Sep 6 00:20:49.808104 systemd[1]: Reached target swap.target. Sep 6 00:20:49.808116 systemd[1]: Reached target torcx.target. Sep 6 00:20:49.808128 systemd[1]: Reached target veritysetup.target. Sep 6 00:20:49.808140 systemd[1]: Listening on systemd-coredump.socket. Sep 6 00:20:49.808153 systemd[1]: Listening on systemd-initctl.socket. Sep 6 00:20:49.808166 systemd[1]: Listening on systemd-networkd.socket. Sep 6 00:20:49.808189 systemd[1]: Listening on systemd-udevd-control.socket. Sep 6 00:20:49.808203 systemd[1]: Listening on systemd-udevd-kernel.socket. Sep 6 00:20:49.808232 systemd[1]: Listening on systemd-userdbd.socket. Sep 6 00:20:49.808245 systemd[1]: Mounting dev-hugepages.mount... Sep 6 00:20:49.808259 systemd[1]: Mounting dev-mqueue.mount... Sep 6 00:20:49.808271 systemd[1]: Mounting media.mount... Sep 6 00:20:49.808284 systemd[1]: proc-xen.mount was skipped because of an unmet condition check (ConditionVirtualization=xen). Sep 6 00:20:49.808301 systemd[1]: Mounting sys-kernel-debug.mount... Sep 6 00:20:49.808318 systemd[1]: Mounting sys-kernel-tracing.mount... Sep 6 00:20:49.808334 systemd[1]: Mounting tmp.mount... Sep 6 00:20:49.808347 systemd[1]: Starting flatcar-tmpfiles.service... Sep 6 00:20:49.808361 systemd[1]: ignition-delete-config.service was skipped because no trigger condition checks were met. Sep 6 00:20:49.808374 systemd[1]: Starting kmod-static-nodes.service... Sep 6 00:20:49.808387 systemd[1]: Starting modprobe@configfs.service... Sep 6 00:20:49.808399 systemd[1]: Starting modprobe@dm_mod.service... Sep 6 00:20:49.808412 systemd[1]: Starting modprobe@drm.service... Sep 6 00:20:49.808424 systemd[1]: Starting modprobe@efi_pstore.service... Sep 6 00:20:49.808440 systemd[1]: Starting modprobe@fuse.service... Sep 6 00:20:49.808456 systemd[1]: Starting modprobe@loop.service... Sep 6 00:20:49.808469 systemd[1]: setup-nsswitch.service was skipped because of an unmet condition check (ConditionPathExists=!/etc/nsswitch.conf). Sep 6 00:20:49.808482 systemd[1]: systemd-fsck-root.service: Deactivated successfully. Sep 6 00:20:49.808496 systemd[1]: Stopped systemd-fsck-root.service. Sep 6 00:20:49.808508 systemd[1]: systemd-fsck-usr.service: Deactivated successfully. Sep 6 00:20:49.808527 systemd[1]: Stopped systemd-fsck-usr.service. Sep 6 00:20:49.808539 systemd[1]: Stopped systemd-journald.service. Sep 6 00:20:49.808551 systemd[1]: Starting systemd-journald.service... Sep 6 00:20:49.808563 kernel: loop: module loaded Sep 6 00:20:49.808579 kernel: fuse: init (API version 7.34) Sep 6 00:20:49.808592 systemd[1]: Starting systemd-modules-load.service... Sep 6 00:20:49.808604 systemd[1]: Starting systemd-network-generator.service... Sep 6 00:20:49.808617 systemd[1]: Starting systemd-remount-fs.service... Sep 6 00:20:49.808631 systemd[1]: Starting systemd-udev-trigger.service... Sep 6 00:20:49.808643 systemd[1]: verity-setup.service: Deactivated successfully. Sep 6 00:20:49.808656 systemd[1]: Stopped verity-setup.service. Sep 6 00:20:49.808668 systemd[1]: xenserver-pv-version.service was skipped because of an unmet condition check (ConditionVirtualization=xen). Sep 6 00:20:49.808680 systemd[1]: Mounted dev-hugepages.mount. Sep 6 00:20:49.808695 systemd[1]: Mounted dev-mqueue.mount. Sep 6 00:20:49.808708 systemd[1]: Mounted media.mount. Sep 6 00:20:49.808725 systemd[1]: Mounted sys-kernel-debug.mount. Sep 6 00:20:49.808750 systemd[1]: Mounted sys-kernel-tracing.mount. Sep 6 00:20:49.808763 systemd[1]: Mounted tmp.mount. Sep 6 00:20:49.808776 systemd[1]: Finished kmod-static-nodes.service. Sep 6 00:20:49.808789 systemd[1]: modprobe@configfs.service: Deactivated successfully. Sep 6 00:20:49.808805 systemd[1]: Finished modprobe@configfs.service. Sep 6 00:20:49.808824 systemd[1]: modprobe@dm_mod.service: Deactivated successfully. Sep 6 00:20:49.808841 systemd[1]: Finished modprobe@dm_mod.service. Sep 6 00:20:49.808854 systemd[1]: modprobe@drm.service: Deactivated successfully. Sep 6 00:20:49.808866 systemd[1]: Finished modprobe@drm.service. Sep 6 00:20:49.808886 systemd-journald[955]: Journal started Sep 6 00:20:49.808957 systemd-journald[955]: Runtime Journal (/run/log/journal/7563ec67c8ea422880d8c9a6295924d9) is 4.9M, max 39.5M, 34.5M free. Sep 6 00:20:46.726000 audit: MAC_POLICY_LOAD auid=4294967295 ses=4294967295 lsm=selinux res=1 Sep 6 00:20:46.777000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=1 Sep 6 00:20:46.777000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=1 Sep 6 00:20:46.777000 audit: BPF prog-id=10 op=LOAD Sep 6 00:20:46.777000 audit: BPF prog-id=10 op=UNLOAD Sep 6 00:20:46.777000 audit: BPF prog-id=11 op=LOAD Sep 6 00:20:46.777000 audit: BPF prog-id=11 op=UNLOAD Sep 6 00:20:46.885000 audit[886]: AVC avc: denied { associate } for pid=886 comm="torcx-generator" name="docker" dev="tmpfs" ino=2 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:tmpfs_t:s0 tclass=filesystem permissive=1 srawcon="system_u:object_r:container_file_t:s0:c1022,c1023" Sep 6 00:20:46.885000 audit[886]: SYSCALL arch=c000003e syscall=188 success=yes exit=0 a0=c00014d88c a1=c0000cedf8 a2=c0000d70c0 a3=32 items=0 ppid=869 pid=886 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="torcx-generator" exe="/usr/lib/systemd/system-generators/torcx-generator" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:20:46.885000 audit: PROCTITLE proctitle=2F7573722F6C69622F73797374656D642F73797374656D2D67656E657261746F72732F746F7263782D67656E657261746F72002F72756E2F73797374656D642F67656E657261746F72002F72756E2F73797374656D642F67656E657261746F722E6561726C79002F72756E2F73797374656D642F67656E657261746F722E6C61 Sep 6 00:20:46.887000 audit[886]: AVC avc: denied { associate } for pid=886 comm="torcx-generator" name="lib" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:tmpfs_t:s0 tclass=filesystem permissive=1 Sep 6 00:20:46.887000 audit[886]: SYSCALL arch=c000003e syscall=258 success=yes exit=0 a0=ffffffffffffff9c a1=c00014d965 a2=1ed a3=0 items=2 ppid=869 pid=886 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="torcx-generator" exe="/usr/lib/systemd/system-generators/torcx-generator" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:20:46.887000 audit: CWD cwd="/" Sep 6 00:20:46.887000 audit: PATH item=0 name=(null) inode=2 dev=00:1a mode=040755 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:unlabeled_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Sep 6 00:20:46.887000 audit: PATH item=1 name=(null) inode=3 dev=00:1a mode=040755 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:unlabeled_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Sep 6 00:20:46.887000 audit: PROCTITLE proctitle=2F7573722F6C69622F73797374656D642F73797374656D2D67656E657261746F72732F746F7263782D67656E657261746F72002F72756E2F73797374656D642F67656E657261746F72002F72756E2F73797374656D642F67656E657261746F722E6561726C79002F72756E2F73797374656D642F67656E657261746F722E6C61 Sep 6 00:20:49.604000 audit: BPF prog-id=12 op=LOAD Sep 6 00:20:49.604000 audit: BPF prog-id=3 op=UNLOAD Sep 6 00:20:49.604000 audit: BPF prog-id=13 op=LOAD Sep 6 00:20:49.604000 audit: BPF prog-id=14 op=LOAD Sep 6 00:20:49.604000 audit: BPF prog-id=4 op=UNLOAD Sep 6 00:20:49.604000 audit: BPF prog-id=5 op=UNLOAD Sep 6 00:20:49.605000 audit: BPF prog-id=15 op=LOAD Sep 6 00:20:49.605000 audit: BPF prog-id=12 op=UNLOAD Sep 6 00:20:49.605000 audit: BPF prog-id=16 op=LOAD Sep 6 00:20:49.605000 audit: BPF prog-id=17 op=LOAD Sep 6 00:20:49.605000 audit: BPF prog-id=13 op=UNLOAD Sep 6 00:20:49.605000 audit: BPF prog-id=14 op=UNLOAD Sep 6 00:20:49.606000 audit: BPF prog-id=18 op=LOAD Sep 6 00:20:49.606000 audit: BPF prog-id=15 op=UNLOAD Sep 6 00:20:49.606000 audit: BPF prog-id=19 op=LOAD Sep 6 00:20:49.606000 audit: BPF prog-id=20 op=LOAD Sep 6 00:20:49.813065 systemd[1]: modprobe@efi_pstore.service: Deactivated successfully. Sep 6 00:20:49.813101 systemd[1]: Finished modprobe@efi_pstore.service. Sep 6 00:20:49.606000 audit: BPF prog-id=16 op=UNLOAD Sep 6 00:20:49.606000 audit: BPF prog-id=17 op=UNLOAD Sep 6 00:20:49.607000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-journald comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 00:20:49.610000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=initrd-switch-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 00:20:49.610000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=initrd-switch-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 00:20:49.612000 audit: BPF prog-id=18 op=UNLOAD Sep 6 00:20:49.728000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-fsck-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 00:20:49.731000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-fsck-usr comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 00:20:49.734000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-journald comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 00:20:49.734000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-journald comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 00:20:49.735000 audit: BPF prog-id=21 op=LOAD Sep 6 00:20:49.735000 audit: BPF prog-id=22 op=LOAD Sep 6 00:20:49.735000 audit: BPF prog-id=23 op=LOAD Sep 6 00:20:49.735000 audit: BPF prog-id=19 op=UNLOAD Sep 6 00:20:49.735000 audit: BPF prog-id=20 op=UNLOAD Sep 6 00:20:49.774000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=verity-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 00:20:49.795000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kmod-static-nodes comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 00:20:49.800000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@configfs comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 00:20:49.800000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@configfs comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 00:20:49.803000 audit: CONFIG_CHANGE op=set audit_enabled=1 old=1 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 res=1 Sep 6 00:20:49.803000 audit[955]: SYSCALL arch=c000003e syscall=46 success=yes exit=60 a0=4 a1=7ffce4941920 a2=4000 a3=7ffce49419bc items=0 ppid=1 pid=955 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="systemd-journal" exe="/usr/lib/systemd/systemd-journald" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:20:49.803000 audit: PROCTITLE proctitle="/usr/lib/systemd/systemd-journald" Sep 6 00:20:49.805000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@dm_mod comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 00:20:49.805000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@dm_mod comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 00:20:49.814947 systemd[1]: Started systemd-journald.service. Sep 6 00:20:49.809000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@drm comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 00:20:49.809000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@drm comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 00:20:49.813000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@efi_pstore comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 00:20:49.813000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@efi_pstore comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 00:20:46.882455 /usr/lib/systemd/system-generators/torcx-generator[886]: time="2025-09-06T00:20:46Z" level=debug msg="common configuration parsed" base_dir=/var/lib/torcx/ conf_dir=/etc/torcx/ run_dir=/run/torcx/ store_paths="[/usr/share/torcx/store /usr/share/oem/torcx/store/3510.3.8 /usr/share/oem/torcx/store /var/lib/torcx/store/3510.3.8 /var/lib/torcx/store]" Sep 6 00:20:49.602915 systemd[1]: Queued start job for default target multi-user.target. Sep 6 00:20:46.882998 /usr/lib/systemd/system-generators/torcx-generator[886]: time="2025-09-06T00:20:46Z" level=debug msg="profile found" name=docker-1.12-no path=/usr/share/torcx/profiles/docker-1.12-no.json Sep 6 00:20:49.602930 systemd[1]: Unnecessary job was removed for dev-vda6.device. Sep 6 00:20:46.883065 /usr/lib/systemd/system-generators/torcx-generator[886]: time="2025-09-06T00:20:46Z" level=debug msg="profile found" name=vendor path=/usr/share/torcx/profiles/vendor.json Sep 6 00:20:49.607643 systemd[1]: systemd-journald.service: Deactivated successfully. Sep 6 00:20:46.883112 /usr/lib/systemd/system-generators/torcx-generator[886]: time="2025-09-06T00:20:46Z" level=info msg="no vendor profile selected by /etc/flatcar/docker-1.12" Sep 6 00:20:49.815000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-journald comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 00:20:46.883131 /usr/lib/systemd/system-generators/torcx-generator[886]: time="2025-09-06T00:20:46Z" level=debug msg="skipped missing lower profile" missing profile=oem Sep 6 00:20:46.883181 /usr/lib/systemd/system-generators/torcx-generator[886]: time="2025-09-06T00:20:46Z" level=warning msg="no next profile: unable to read profile file: open /etc/torcx/next-profile: no such file or directory" Sep 6 00:20:46.883201 /usr/lib/systemd/system-generators/torcx-generator[886]: time="2025-09-06T00:20:46Z" level=debug msg="apply configuration parsed" lower profiles (vendor/oem)="[vendor]" upper profile (user)= Sep 6 00:20:46.883512 /usr/lib/systemd/system-generators/torcx-generator[886]: time="2025-09-06T00:20:46Z" level=debug msg="mounted tmpfs" target=/run/torcx/unpack Sep 6 00:20:46.883579 /usr/lib/systemd/system-generators/torcx-generator[886]: time="2025-09-06T00:20:46Z" level=debug msg="profile found" name=docker-1.12-no path=/usr/share/torcx/profiles/docker-1.12-no.json Sep 6 00:20:46.883601 /usr/lib/systemd/system-generators/torcx-generator[886]: time="2025-09-06T00:20:46Z" level=debug msg="profile found" name=vendor path=/usr/share/torcx/profiles/vendor.json Sep 6 00:20:49.816669 systemd[1]: modprobe@fuse.service: Deactivated successfully. Sep 6 00:20:46.885409 /usr/lib/systemd/system-generators/torcx-generator[886]: time="2025-09-06T00:20:46Z" level=debug msg="new archive/reference added to cache" format=tgz name=docker path="/usr/share/torcx/store/docker:20.10.torcx.tgz" reference=20.10 Sep 6 00:20:49.817628 systemd[1]: Finished modprobe@fuse.service. Sep 6 00:20:46.885470 /usr/lib/systemd/system-generators/torcx-generator[886]: time="2025-09-06T00:20:46Z" level=debug msg="new archive/reference added to cache" format=tgz name=docker path="/usr/share/torcx/store/docker:com.coreos.cl.torcx.tgz" reference=com.coreos.cl Sep 6 00:20:49.817000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@fuse comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 00:20:49.817000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@fuse comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 00:20:46.885500 /usr/lib/systemd/system-generators/torcx-generator[886]: time="2025-09-06T00:20:46Z" level=info msg="store skipped" err="open /usr/share/oem/torcx/store/3510.3.8: no such file or directory" path=/usr/share/oem/torcx/store/3510.3.8 Sep 6 00:20:46.885525 /usr/lib/systemd/system-generators/torcx-generator[886]: time="2025-09-06T00:20:46Z" level=info msg="store skipped" err="open /usr/share/oem/torcx/store: no such file or directory" path=/usr/share/oem/torcx/store Sep 6 00:20:46.885559 /usr/lib/systemd/system-generators/torcx-generator[886]: time="2025-09-06T00:20:46Z" level=info msg="store skipped" err="open /var/lib/torcx/store/3510.3.8: no such file or directory" path=/var/lib/torcx/store/3510.3.8 Sep 6 00:20:46.885591 /usr/lib/systemd/system-generators/torcx-generator[886]: time="2025-09-06T00:20:46Z" level=info msg="store skipped" err="open /var/lib/torcx/store: no such file or directory" path=/var/lib/torcx/store Sep 6 00:20:49.187967 /usr/lib/systemd/system-generators/torcx-generator[886]: time="2025-09-06T00:20:49Z" level=debug msg="image unpacked" image=docker path=/run/torcx/unpack/docker reference=com.coreos.cl Sep 6 00:20:49.818973 systemd[1]: modprobe@loop.service: Deactivated successfully. Sep 6 00:20:49.818000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@loop comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 00:20:49.818000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@loop comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 00:20:49.188316 /usr/lib/systemd/system-generators/torcx-generator[886]: time="2025-09-06T00:20:49Z" level=debug msg="binaries propagated" assets="[/bin/containerd /bin/containerd-shim /bin/ctr /bin/docker /bin/docker-containerd /bin/docker-containerd-shim /bin/docker-init /bin/docker-proxy /bin/docker-runc /bin/dockerd /bin/runc /bin/tini]" image=docker path=/run/torcx/unpack/docker reference=com.coreos.cl Sep 6 00:20:49.819162 systemd[1]: Finished modprobe@loop.service. Sep 6 00:20:49.188458 /usr/lib/systemd/system-generators/torcx-generator[886]: time="2025-09-06T00:20:49Z" level=debug msg="networkd units propagated" assets="[/lib/systemd/network/50-docker.network /lib/systemd/network/90-docker-veth.network]" image=docker path=/run/torcx/unpack/docker reference=com.coreos.cl Sep 6 00:20:49.820385 systemd[1]: Finished systemd-modules-load.service. Sep 6 00:20:49.820000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-modules-load comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 00:20:49.821000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-network-generator comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 00:20:49.188682 /usr/lib/systemd/system-generators/torcx-generator[886]: time="2025-09-06T00:20:49Z" level=debug msg="systemd units propagated" assets="[/lib/systemd/system/containerd.service /lib/systemd/system/docker.service /lib/systemd/system/docker.socket /lib/systemd/system/sockets.target.wants /lib/systemd/system/multi-user.target.wants]" image=docker path=/run/torcx/unpack/docker reference=com.coreos.cl Sep 6 00:20:49.822128 systemd[1]: Finished systemd-network-generator.service. Sep 6 00:20:49.188745 /usr/lib/systemd/system-generators/torcx-generator[886]: time="2025-09-06T00:20:49Z" level=debug msg="profile applied" sealed profile=/run/torcx/profile.json upper profile= Sep 6 00:20:49.822767 systemd[1]: Finished systemd-remount-fs.service. Sep 6 00:20:49.188820 /usr/lib/systemd/system-generators/torcx-generator[886]: time="2025-09-06T00:20:49Z" level=debug msg="system state sealed" content="[TORCX_LOWER_PROFILES=\"vendor\" TORCX_UPPER_PROFILE=\"\" TORCX_PROFILE_PATH=\"/run/torcx/profile.json\" TORCX_BINDIR=\"/run/torcx/bin\" TORCX_UNPACKDIR=\"/run/torcx/unpack\"]" path=/run/metadata/torcx Sep 6 00:20:49.822000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-remount-fs comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 00:20:49.823649 systemd[1]: Reached target network-pre.target. Sep 6 00:20:49.831817 systemd[1]: Mounting sys-fs-fuse-connections.mount... Sep 6 00:20:49.833590 systemd[1]: Mounting sys-kernel-config.mount... Sep 6 00:20:49.834041 systemd[1]: remount-root.service was skipped because of an unmet condition check (ConditionPathIsReadWrite=!/). Sep 6 00:20:49.839224 systemd[1]: Starting systemd-hwdb-update.service... Sep 6 00:20:49.841383 systemd[1]: Starting systemd-journal-flush.service... Sep 6 00:20:49.842066 systemd[1]: systemd-pstore.service was skipped because of an unmet condition check (ConditionDirectoryNotEmpty=/sys/fs/pstore). Sep 6 00:20:49.843533 systemd[1]: Starting systemd-random-seed.service... Sep 6 00:20:49.843981 systemd[1]: systemd-repart.service was skipped because no trigger condition checks were met. Sep 6 00:20:49.845661 systemd[1]: Starting systemd-sysctl.service... Sep 6 00:20:49.850153 systemd[1]: Mounted sys-fs-fuse-connections.mount. Sep 6 00:20:49.850652 systemd[1]: Mounted sys-kernel-config.mount. Sep 6 00:20:49.860142 systemd[1]: Finished systemd-random-seed.service. Sep 6 00:20:49.860608 systemd[1]: Reached target first-boot-complete.target. Sep 6 00:20:49.859000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-random-seed comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 00:20:49.862627 systemd-journald[955]: Time spent on flushing to /var/log/journal/7563ec67c8ea422880d8c9a6295924d9 is 61.362ms for 1156 entries. Sep 6 00:20:49.862627 systemd-journald[955]: System Journal (/var/log/journal/7563ec67c8ea422880d8c9a6295924d9) is 8.0M, max 195.6M, 187.6M free. Sep 6 00:20:49.929469 systemd-journald[955]: Received client request to flush runtime journal. Sep 6 00:20:49.887000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-sysctl comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 00:20:49.914000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=flatcar-tmpfiles comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 00:20:49.887793 systemd[1]: Finished systemd-sysctl.service. Sep 6 00:20:49.914826 systemd[1]: Finished flatcar-tmpfiles.service. Sep 6 00:20:49.916600 systemd[1]: Starting systemd-sysusers.service... Sep 6 00:20:49.930592 systemd[1]: Finished systemd-journal-flush.service. Sep 6 00:20:49.930000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-journal-flush comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 00:20:49.946659 systemd[1]: Finished systemd-sysusers.service. Sep 6 00:20:49.948538 systemd[1]: Starting systemd-tmpfiles-setup-dev.service... Sep 6 00:20:49.946000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-sysusers comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 00:20:49.957972 systemd[1]: Finished systemd-udev-trigger.service. Sep 6 00:20:49.957000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-udev-trigger comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 00:20:49.960440 systemd[1]: Starting systemd-udev-settle.service... Sep 6 00:20:49.971437 udevadm[997]: systemd-udev-settle.service is deprecated. Please fix lvm2-activation-early.service, lvm2-activation.service not to pull it in. Sep 6 00:20:49.992506 systemd[1]: Finished systemd-tmpfiles-setup-dev.service. Sep 6 00:20:49.992000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-tmpfiles-setup-dev comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 00:20:50.622342 systemd[1]: Finished systemd-hwdb-update.service. Sep 6 00:20:50.622000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-hwdb-update comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 00:20:50.622000 audit: BPF prog-id=24 op=LOAD Sep 6 00:20:50.622000 audit: BPF prog-id=25 op=LOAD Sep 6 00:20:50.622000 audit: BPF prog-id=7 op=UNLOAD Sep 6 00:20:50.622000 audit: BPF prog-id=8 op=UNLOAD Sep 6 00:20:50.624365 systemd[1]: Starting systemd-udevd.service... Sep 6 00:20:50.647428 systemd-udevd[998]: Using default interface naming scheme 'v252'. Sep 6 00:20:50.672000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-udevd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 00:20:50.673000 audit: BPF prog-id=26 op=LOAD Sep 6 00:20:50.672837 systemd[1]: Started systemd-udevd.service. Sep 6 00:20:50.675228 systemd[1]: Starting systemd-networkd.service... Sep 6 00:20:50.684000 audit: BPF prog-id=27 op=LOAD Sep 6 00:20:50.684000 audit: BPF prog-id=28 op=LOAD Sep 6 00:20:50.685000 audit: BPF prog-id=29 op=LOAD Sep 6 00:20:50.686775 systemd[1]: Starting systemd-userdbd.service... Sep 6 00:20:50.735000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-userdbd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 00:20:50.735695 systemd[1]: Started systemd-userdbd.service. Sep 6 00:20:50.737952 systemd[1]: Condition check resulted in dev-ttyS0.device being skipped. Sep 6 00:20:50.744669 systemd[1]: proc-xen.mount was skipped because of an unmet condition check (ConditionVirtualization=xen). Sep 6 00:20:50.744908 systemd[1]: ignition-delete-config.service was skipped because no trigger condition checks were met. Sep 6 00:20:50.746223 systemd[1]: Starting modprobe@dm_mod.service... Sep 6 00:20:50.748586 systemd[1]: Starting modprobe@efi_pstore.service... Sep 6 00:20:50.752000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@efi_pstore comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 00:20:50.752000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@efi_pstore comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 00:20:50.752030 systemd[1]: Starting modprobe@loop.service... Sep 6 00:20:50.752452 systemd[1]: remount-root.service was skipped because of an unmet condition check (ConditionPathIsReadWrite=!/). Sep 6 00:20:50.752534 systemd[1]: setup-nsswitch.service was skipped because of an unmet condition check (ConditionPathExists=!/etc/nsswitch.conf). Sep 6 00:20:50.752643 systemd[1]: xenserver-pv-version.service was skipped because of an unmet condition check (ConditionVirtualization=xen). Sep 6 00:20:50.753170 systemd[1]: modprobe@efi_pstore.service: Deactivated successfully. Sep 6 00:20:50.753325 systemd[1]: Finished modprobe@efi_pstore.service. Sep 6 00:20:50.754040 systemd[1]: systemd-pstore.service was skipped because of an unmet condition check (ConditionDirectoryNotEmpty=/sys/fs/pstore). Sep 6 00:20:50.756000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@dm_mod comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 00:20:50.756000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@dm_mod comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 00:20:50.756485 systemd[1]: modprobe@dm_mod.service: Deactivated successfully. Sep 6 00:20:50.756619 systemd[1]: Finished modprobe@dm_mod.service. Sep 6 00:20:50.757000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@loop comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 00:20:50.757000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@loop comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 00:20:50.758086 systemd[1]: modprobe@loop.service: Deactivated successfully. Sep 6 00:20:50.758221 systemd[1]: Finished modprobe@loop.service. Sep 6 00:20:50.759346 systemd[1]: systemd-repart.service was skipped because no trigger condition checks were met. Sep 6 00:20:50.845604 systemd-networkd[1004]: lo: Link UP Sep 6 00:20:50.846000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-networkd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 00:20:50.845953 systemd-networkd[1004]: lo: Gained carrier Sep 6 00:20:50.846574 systemd-networkd[1004]: Enumeration completed Sep 6 00:20:50.846691 systemd[1]: Started systemd-networkd.service. Sep 6 00:20:50.847660 systemd-networkd[1004]: eth1: Configuring with /run/systemd/network/10-02:c4:60:9e:70:a8.network. Sep 6 00:20:50.849447 systemd-networkd[1004]: eth0: Configuring with /run/systemd/network/10-46:97:38:be:94:60.network. Sep 6 00:20:50.850243 systemd-networkd[1004]: eth1: Link UP Sep 6 00:20:50.850336 systemd-networkd[1004]: eth1: Gained carrier Sep 6 00:20:50.855084 systemd-networkd[1004]: eth0: Link UP Sep 6 00:20:50.855093 systemd-networkd[1004]: eth0: Gained carrier Sep 6 00:20:50.858756 kernel: input: Power Button as /devices/LNXSYSTM:00/LNXPWRBN:00/input/input2 Sep 6 00:20:50.881764 kernel: ACPI: button: Power Button [PWRF] Sep 6 00:20:50.875000 audit[1010]: AVC avc: denied { confidentiality } for pid=1010 comm="(udev-worker)" lockdown_reason="use of tracefs" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=lockdown permissive=1 Sep 6 00:20:50.875000 audit[1010]: SYSCALL arch=c000003e syscall=175 success=yes exit=0 a0=561518c71090 a1=338ec a2=7f3669addbc5 a3=5 items=110 ppid=998 pid=1010 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="(udev-worker)" exe="/usr/bin/udevadm" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:20:50.875000 audit: CWD cwd="/" Sep 6 00:20:50.875000 audit: PATH item=0 name=(null) inode=45 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Sep 6 00:20:50.875000 audit: PATH item=1 name=(null) inode=13252 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Sep 6 00:20:50.875000 audit: PATH item=2 name=(null) inode=13252 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Sep 6 00:20:50.875000 audit: PATH item=3 name=(null) inode=13253 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Sep 6 00:20:50.875000 audit: PATH item=4 name=(null) inode=13252 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Sep 6 00:20:50.875000 audit: PATH item=5 name=(null) inode=13254 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Sep 6 00:20:50.875000 audit: PATH item=6 name=(null) inode=13252 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Sep 6 00:20:50.875000 audit: PATH item=7 name=(null) inode=13255 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Sep 6 00:20:50.875000 audit: PATH item=8 name=(null) inode=13255 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Sep 6 00:20:50.875000 audit: PATH item=9 name=(null) inode=13256 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Sep 6 00:20:50.875000 audit: PATH item=10 name=(null) inode=13255 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Sep 6 00:20:50.875000 audit: PATH item=11 name=(null) inode=13257 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Sep 6 00:20:50.875000 audit: PATH item=12 name=(null) inode=13255 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Sep 6 00:20:50.875000 audit: PATH item=13 name=(null) inode=13258 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Sep 6 00:20:50.875000 audit: PATH item=14 name=(null) inode=13255 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Sep 6 00:20:50.875000 audit: PATH item=15 name=(null) inode=13259 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Sep 6 00:20:50.875000 audit: PATH item=16 name=(null) inode=13255 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Sep 6 00:20:50.875000 audit: PATH item=17 name=(null) inode=13260 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Sep 6 00:20:50.875000 audit: PATH item=18 name=(null) inode=13252 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Sep 6 00:20:50.875000 audit: PATH item=19 name=(null) inode=13261 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Sep 6 00:20:50.875000 audit: PATH item=20 name=(null) inode=13261 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Sep 6 00:20:50.875000 audit: PATH item=21 name=(null) inode=13262 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Sep 6 00:20:50.875000 audit: PATH item=22 name=(null) inode=13261 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Sep 6 00:20:50.875000 audit: PATH item=23 name=(null) inode=13263 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Sep 6 00:20:50.875000 audit: PATH item=24 name=(null) inode=13261 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Sep 6 00:20:50.875000 audit: PATH item=25 name=(null) inode=13264 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Sep 6 00:20:50.875000 audit: PATH item=26 name=(null) inode=13261 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Sep 6 00:20:50.875000 audit: PATH item=27 name=(null) inode=13265 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Sep 6 00:20:50.875000 audit: PATH item=28 name=(null) inode=13261 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Sep 6 00:20:50.875000 audit: PATH item=29 name=(null) inode=13266 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Sep 6 00:20:50.875000 audit: PATH item=30 name=(null) inode=13252 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Sep 6 00:20:50.875000 audit: PATH item=31 name=(null) inode=13267 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Sep 6 00:20:50.875000 audit: PATH item=32 name=(null) inode=13267 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Sep 6 00:20:50.875000 audit: PATH item=33 name=(null) inode=13268 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Sep 6 00:20:50.875000 audit: PATH item=34 name=(null) inode=13267 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Sep 6 00:20:50.875000 audit: PATH item=35 name=(null) inode=13269 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Sep 6 00:20:50.875000 audit: PATH item=36 name=(null) inode=13267 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Sep 6 00:20:50.875000 audit: PATH item=37 name=(null) inode=13270 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Sep 6 00:20:50.875000 audit: PATH item=38 name=(null) inode=13267 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Sep 6 00:20:50.875000 audit: PATH item=39 name=(null) inode=13271 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Sep 6 00:20:50.875000 audit: PATH item=40 name=(null) inode=13267 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Sep 6 00:20:50.875000 audit: PATH item=41 name=(null) inode=13272 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Sep 6 00:20:50.875000 audit: PATH item=42 name=(null) inode=13252 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Sep 6 00:20:50.907798 kernel: input: ImExPS/2 Generic Explorer Mouse as /devices/platform/i8042/serio1/input/input3 Sep 6 00:20:50.875000 audit: PATH item=43 name=(null) inode=13273 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Sep 6 00:20:50.875000 audit: PATH item=44 name=(null) inode=13273 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Sep 6 00:20:50.875000 audit: PATH item=45 name=(null) inode=13274 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Sep 6 00:20:50.875000 audit: PATH item=46 name=(null) inode=13273 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Sep 6 00:20:50.875000 audit: PATH item=47 name=(null) inode=13275 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Sep 6 00:20:50.875000 audit: PATH item=48 name=(null) inode=13273 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Sep 6 00:20:50.875000 audit: PATH item=49 name=(null) inode=13276 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Sep 6 00:20:50.875000 audit: PATH item=50 name=(null) inode=13273 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Sep 6 00:20:50.875000 audit: PATH item=51 name=(null) inode=13277 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Sep 6 00:20:50.875000 audit: PATH item=52 name=(null) inode=13273 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Sep 6 00:20:50.875000 audit: PATH item=53 name=(null) inode=13278 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Sep 6 00:20:50.875000 audit: PATH item=54 name=(null) inode=45 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Sep 6 00:20:50.875000 audit: PATH item=55 name=(null) inode=13279 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Sep 6 00:20:50.875000 audit: PATH item=56 name=(null) inode=13279 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Sep 6 00:20:50.875000 audit: PATH item=57 name=(null) inode=13280 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Sep 6 00:20:50.875000 audit: PATH item=58 name=(null) inode=13279 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Sep 6 00:20:50.875000 audit: PATH item=59 name=(null) inode=13281 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Sep 6 00:20:50.875000 audit: PATH item=60 name=(null) inode=13279 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Sep 6 00:20:50.875000 audit: PATH item=61 name=(null) inode=13282 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Sep 6 00:20:50.875000 audit: PATH item=62 name=(null) inode=13282 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Sep 6 00:20:50.875000 audit: PATH item=63 name=(null) inode=13283 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Sep 6 00:20:50.875000 audit: PATH item=64 name=(null) inode=13282 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Sep 6 00:20:50.875000 audit: PATH item=65 name=(null) inode=13284 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Sep 6 00:20:50.875000 audit: PATH item=66 name=(null) inode=13282 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Sep 6 00:20:50.875000 audit: PATH item=67 name=(null) inode=13285 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Sep 6 00:20:50.875000 audit: PATH item=68 name=(null) inode=13282 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Sep 6 00:20:50.875000 audit: PATH item=69 name=(null) inode=13286 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Sep 6 00:20:50.875000 audit: PATH item=70 name=(null) inode=13282 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Sep 6 00:20:50.875000 audit: PATH item=71 name=(null) inode=13287 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Sep 6 00:20:50.875000 audit: PATH item=72 name=(null) inode=13279 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Sep 6 00:20:50.875000 audit: PATH item=73 name=(null) inode=13288 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Sep 6 00:20:50.875000 audit: PATH item=74 name=(null) inode=13288 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Sep 6 00:20:50.875000 audit: PATH item=75 name=(null) inode=13289 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Sep 6 00:20:50.875000 audit: PATH item=76 name=(null) inode=13288 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Sep 6 00:20:50.875000 audit: PATH item=77 name=(null) inode=13290 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Sep 6 00:20:50.875000 audit: PATH item=78 name=(null) inode=13288 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Sep 6 00:20:50.875000 audit: PATH item=79 name=(null) inode=13291 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Sep 6 00:20:50.875000 audit: PATH item=80 name=(null) inode=13288 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Sep 6 00:20:50.875000 audit: PATH item=81 name=(null) inode=13292 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Sep 6 00:20:50.875000 audit: PATH item=82 name=(null) inode=13288 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Sep 6 00:20:50.875000 audit: PATH item=83 name=(null) inode=13293 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Sep 6 00:20:50.875000 audit: PATH item=84 name=(null) inode=13279 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Sep 6 00:20:50.875000 audit: PATH item=85 name=(null) inode=13294 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Sep 6 00:20:50.875000 audit: PATH item=86 name=(null) inode=13294 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Sep 6 00:20:50.875000 audit: PATH item=87 name=(null) inode=13295 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Sep 6 00:20:50.875000 audit: PATH item=88 name=(null) inode=13294 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Sep 6 00:20:50.875000 audit: PATH item=89 name=(null) inode=13296 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Sep 6 00:20:50.875000 audit: PATH item=90 name=(null) inode=13294 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Sep 6 00:20:50.875000 audit: PATH item=91 name=(null) inode=13297 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Sep 6 00:20:50.875000 audit: PATH item=92 name=(null) inode=13294 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Sep 6 00:20:50.875000 audit: PATH item=93 name=(null) inode=13298 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Sep 6 00:20:50.875000 audit: PATH item=94 name=(null) inode=13294 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Sep 6 00:20:50.875000 audit: PATH item=95 name=(null) inode=13299 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Sep 6 00:20:50.875000 audit: PATH item=96 name=(null) inode=13279 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Sep 6 00:20:50.875000 audit: PATH item=97 name=(null) inode=13300 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Sep 6 00:20:50.875000 audit: PATH item=98 name=(null) inode=13300 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Sep 6 00:20:50.875000 audit: PATH item=99 name=(null) inode=13301 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Sep 6 00:20:50.875000 audit: PATH item=100 name=(null) inode=13300 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Sep 6 00:20:50.875000 audit: PATH item=101 name=(null) inode=13302 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Sep 6 00:20:50.875000 audit: PATH item=102 name=(null) inode=13300 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Sep 6 00:20:50.875000 audit: PATH item=103 name=(null) inode=13303 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Sep 6 00:20:50.875000 audit: PATH item=104 name=(null) inode=13300 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Sep 6 00:20:50.875000 audit: PATH item=105 name=(null) inode=13304 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Sep 6 00:20:50.875000 audit: PATH item=106 name=(null) inode=13300 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Sep 6 00:20:50.875000 audit: PATH item=107 name=(null) inode=13305 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Sep 6 00:20:50.875000 audit: PATH item=108 name=(null) inode=1 dev=00:07 mode=040700 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:debugfs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Sep 6 00:20:50.875000 audit: PATH item=109 name=(null) inode=13306 dev=00:07 mode=040755 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:debugfs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Sep 6 00:20:50.875000 audit: PROCTITLE proctitle="(udev-worker)" Sep 6 00:20:50.915752 kernel: piix4_smbus 0000:00:01.3: SMBus Host Controller at 0x700, revision 0 Sep 6 00:20:50.923615 systemd[1]: Found device dev-disk-by\x2dlabel-OEM.device. Sep 6 00:20:50.937769 kernel: mousedev: PS/2 mouse device common for all mice Sep 6 00:20:51.067796 kernel: EDAC MC: Ver: 3.0.0 Sep 6 00:20:51.096536 systemd[1]: Finished systemd-udev-settle.service. Sep 6 00:20:51.096000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-udev-settle comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 00:20:51.099108 systemd[1]: Starting lvm2-activation-early.service... Sep 6 00:20:51.125660 lvm[1036]: WARNING: Failed to connect to lvmetad. Falling back to device scanning. Sep 6 00:20:51.155126 systemd[1]: Finished lvm2-activation-early.service. Sep 6 00:20:51.154000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=lvm2-activation-early comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 00:20:51.155925 systemd[1]: Reached target cryptsetup.target. Sep 6 00:20:51.158412 systemd[1]: Starting lvm2-activation.service... Sep 6 00:20:51.165011 lvm[1037]: WARNING: Failed to connect to lvmetad. Falling back to device scanning. Sep 6 00:20:51.193288 systemd[1]: Finished lvm2-activation.service. Sep 6 00:20:51.194000 systemd[1]: Reached target local-fs-pre.target. Sep 6 00:20:51.193000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=lvm2-activation comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 00:20:51.196276 systemd[1]: Mounting media-configdrive.mount... Sep 6 00:20:51.196679 systemd[1]: var-lib-machines.mount was skipped because of an unmet condition check (ConditionPathExists=/var/lib/machines.raw). Sep 6 00:20:51.196773 systemd[1]: Reached target machines.target. Sep 6 00:20:51.198897 systemd[1]: Starting systemd-fsck@dev-disk-by\x2dlabel-OEM.service... Sep 6 00:20:51.218305 kernel: ISO 9660 Extensions: RRIP_1991A Sep 6 00:20:51.219745 systemd[1]: Mounted media-configdrive.mount. Sep 6 00:20:51.220725 systemd[1]: Finished systemd-fsck@dev-disk-by\x2dlabel-OEM.service. Sep 6 00:20:51.220000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-fsck@dev-disk-by\x2dlabel-OEM comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 00:20:51.221774 systemd[1]: Reached target local-fs.target. Sep 6 00:20:51.224609 systemd[1]: Starting ldconfig.service... Sep 6 00:20:51.226696 systemd[1]: systemd-binfmt.service was skipped because no trigger condition checks were met. Sep 6 00:20:51.227038 systemd[1]: systemd-boot-system-token.service was skipped because of an unmet condition check (ConditionPathExists=/sys/firmware/efi/efivars/LoaderFeatures-4a67b082-0a4c-41cf-b6c7-440b29bb8c4f). Sep 6 00:20:51.229027 systemd[1]: Starting systemd-boot-update.service... Sep 6 00:20:51.233188 systemd[1]: Starting systemd-machine-id-commit.service... Sep 6 00:20:51.238005 systemd[1]: Starting systemd-sysext.service... Sep 6 00:20:51.247941 systemd[1]: boot.automount: Got automount request for /boot, triggered by 1043 (bootctl) Sep 6 00:20:51.249578 systemd[1]: Starting systemd-fsck@dev-disk-by\x2dlabel-EFI\x2dSYSTEM.service... Sep 6 00:20:51.266697 systemd[1]: Unmounting usr-share-oem.mount... Sep 6 00:20:51.277128 systemd[1]: usr-share-oem.mount: Deactivated successfully. Sep 6 00:20:51.277411 systemd[1]: Unmounted usr-share-oem.mount. Sep 6 00:20:51.289450 systemd[1]: etc-machine\x2did.mount: Deactivated successfully. Sep 6 00:20:51.292000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-machine-id-commit comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 00:20:51.292528 systemd[1]: Finished systemd-machine-id-commit.service. Sep 6 00:20:51.298767 kernel: loop0: detected capacity change from 0 to 221472 Sep 6 00:20:51.325217 kernel: squashfs: version 4.0 (2009/01/31) Phillip Lougher Sep 6 00:20:51.341930 kernel: loop1: detected capacity change from 0 to 221472 Sep 6 00:20:51.357635 (sd-sysext)[1054]: Using extensions 'kubernetes'. Sep 6 00:20:51.358669 (sd-sysext)[1054]: Merged extensions into '/usr'. Sep 6 00:20:51.383430 systemd-fsck[1050]: fsck.fat 4.2 (2021-01-31) Sep 6 00:20:51.383430 systemd-fsck[1050]: /dev/vda1: 790 files, 120761/258078 clusters Sep 6 00:20:51.389667 systemd[1]: proc-xen.mount was skipped because of an unmet condition check (ConditionVirtualization=xen). Sep 6 00:20:51.391439 systemd[1]: Mounting usr-share-oem.mount... Sep 6 00:20:51.394447 systemd[1]: ignition-delete-config.service was skipped because no trigger condition checks were met. Sep 6 00:20:51.396512 systemd[1]: Starting modprobe@dm_mod.service... Sep 6 00:20:51.399338 systemd[1]: Starting modprobe@efi_pstore.service... Sep 6 00:20:51.402312 systemd[1]: Starting modprobe@loop.service... Sep 6 00:20:51.402793 systemd[1]: systemd-binfmt.service was skipped because no trigger condition checks were met. Sep 6 00:20:51.402951 systemd[1]: systemd-boot-system-token.service was skipped because of an unmet condition check (ConditionPathExists=/sys/firmware/efi/efivars/LoaderFeatures-4a67b082-0a4c-41cf-b6c7-440b29bb8c4f). Sep 6 00:20:51.403119 systemd[1]: xenserver-pv-version.service was skipped because of an unmet condition check (ConditionVirtualization=xen). Sep 6 00:20:51.404620 systemd[1]: Finished systemd-fsck@dev-disk-by\x2dlabel-EFI\x2dSYSTEM.service. Sep 6 00:20:51.405000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-fsck@dev-disk-by\x2dlabel-EFI\x2dSYSTEM comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 00:20:51.407313 kernel: kauditd_printk_skb: 246 callbacks suppressed Sep 6 00:20:51.407393 kernel: audit: type=1130 audit(1757118051.405:172): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-fsck@dev-disk-by\x2dlabel-EFI\x2dSYSTEM comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 00:20:51.411395 systemd[1]: modprobe@dm_mod.service: Deactivated successfully. Sep 6 00:20:51.412121 systemd[1]: Finished modprobe@dm_mod.service. Sep 6 00:20:51.413000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@dm_mod comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 00:20:51.416000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@dm_mod comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 00:20:51.420481 kernel: audit: type=1130 audit(1757118051.413:173): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@dm_mod comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 00:20:51.420606 kernel: audit: type=1131 audit(1757118051.416:174): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@dm_mod comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 00:20:51.420839 systemd[1]: modprobe@efi_pstore.service: Deactivated successfully. Sep 6 00:20:51.421035 systemd[1]: Finished modprobe@efi_pstore.service. Sep 6 00:20:51.421000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@efi_pstore comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 00:20:51.422396 systemd[1]: modprobe@loop.service: Deactivated successfully. Sep 6 00:20:51.425302 systemd[1]: Finished modprobe@loop.service. Sep 6 00:20:51.425760 kernel: audit: type=1130 audit(1757118051.421:175): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@efi_pstore comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 00:20:51.428766 kernel: audit: type=1131 audit(1757118051.421:176): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@efi_pstore comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 00:20:51.421000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@efi_pstore comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 00:20:51.428613 systemd[1]: Mounted usr-share-oem.mount. Sep 6 00:20:51.425000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@loop comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 00:20:51.432903 kernel: audit: type=1130 audit(1757118051.425:177): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@loop comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 00:20:51.425000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@loop comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 00:20:51.436534 systemd[1]: Mounting boot.mount... Sep 6 00:20:51.436755 kernel: audit: type=1131 audit(1757118051.425:178): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@loop comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 00:20:51.437354 systemd[1]: systemd-pstore.service was skipped because of an unmet condition check (ConditionDirectoryNotEmpty=/sys/fs/pstore). Sep 6 00:20:51.437471 systemd[1]: systemd-repart.service was skipped because no trigger condition checks were met. Sep 6 00:20:51.438920 systemd[1]: Finished systemd-sysext.service. Sep 6 00:20:51.438000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-sysext comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 00:20:51.446778 kernel: audit: type=1130 audit(1757118051.438:179): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-sysext comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 00:20:51.442377 systemd[1]: Starting ensure-sysext.service... Sep 6 00:20:51.444218 systemd[1]: Starting systemd-tmpfiles-setup.service... Sep 6 00:20:51.454265 systemd[1]: Mounted boot.mount. Sep 6 00:20:51.458077 systemd[1]: Reloading. Sep 6 00:20:51.472259 systemd-tmpfiles[1062]: /usr/lib/tmpfiles.d/legacy.conf:13: Duplicate line for path "/run/lock", ignoring. Sep 6 00:20:51.475756 systemd-tmpfiles[1062]: /usr/lib/tmpfiles.d/provision.conf:20: Duplicate line for path "/root", ignoring. Sep 6 00:20:51.479097 systemd-tmpfiles[1062]: /usr/lib/tmpfiles.d/systemd.conf:29: Duplicate line for path "/var/lib/systemd", ignoring. Sep 6 00:20:51.579234 /usr/lib/systemd/system-generators/torcx-generator[1084]: time="2025-09-06T00:20:51Z" level=debug msg="common configuration parsed" base_dir=/var/lib/torcx/ conf_dir=/etc/torcx/ run_dir=/run/torcx/ store_paths="[/usr/share/torcx/store /usr/share/oem/torcx/store/3510.3.8 /usr/share/oem/torcx/store /var/lib/torcx/store/3510.3.8 /var/lib/torcx/store]" Sep 6 00:20:51.580268 /usr/lib/systemd/system-generators/torcx-generator[1084]: time="2025-09-06T00:20:51Z" level=info msg="torcx already run" Sep 6 00:20:51.685665 ldconfig[1042]: /sbin/ldconfig: /lib/ld.so.conf is not an ELF file - it has the wrong magic bytes at the start. Sep 6 00:20:51.717779 systemd[1]: /usr/lib/systemd/system/locksmithd.service:8: Unit uses CPUShares=; please use CPUWeight= instead. Support for CPUShares= will be removed soon. Sep 6 00:20:51.717799 systemd[1]: /usr/lib/systemd/system/locksmithd.service:9: Unit uses MemoryLimit=; please use MemoryMax= instead. Support for MemoryLimit= will be removed soon. Sep 6 00:20:51.740437 systemd[1]: /run/systemd/system/docker.socket:8: ListenStream= references a path below legacy directory /var/run/, updating /var/run/docker.sock → /run/docker.sock; please update the unit file accordingly. Sep 6 00:20:51.815000 audit: BPF prog-id=30 op=LOAD Sep 6 00:20:51.817000 audit: BPF prog-id=26 op=UNLOAD Sep 6 00:20:51.818264 kernel: audit: type=1334 audit(1757118051.815:180): prog-id=30 op=LOAD Sep 6 00:20:51.818315 kernel: audit: type=1334 audit(1757118051.817:181): prog-id=26 op=UNLOAD Sep 6 00:20:51.820000 audit: BPF prog-id=31 op=LOAD Sep 6 00:20:51.820000 audit: BPF prog-id=21 op=UNLOAD Sep 6 00:20:51.820000 audit: BPF prog-id=32 op=LOAD Sep 6 00:20:51.820000 audit: BPF prog-id=33 op=LOAD Sep 6 00:20:51.820000 audit: BPF prog-id=22 op=UNLOAD Sep 6 00:20:51.820000 audit: BPF prog-id=23 op=UNLOAD Sep 6 00:20:51.821000 audit: BPF prog-id=34 op=LOAD Sep 6 00:20:51.821000 audit: BPF prog-id=27 op=UNLOAD Sep 6 00:20:51.821000 audit: BPF prog-id=35 op=LOAD Sep 6 00:20:51.821000 audit: BPF prog-id=36 op=LOAD Sep 6 00:20:51.821000 audit: BPF prog-id=28 op=UNLOAD Sep 6 00:20:51.821000 audit: BPF prog-id=29 op=UNLOAD Sep 6 00:20:51.823000 audit: BPF prog-id=37 op=LOAD Sep 6 00:20:51.823000 audit: BPF prog-id=38 op=LOAD Sep 6 00:20:51.823000 audit: BPF prog-id=24 op=UNLOAD Sep 6 00:20:51.824000 audit: BPF prog-id=25 op=UNLOAD Sep 6 00:20:51.831597 systemd[1]: Finished ldconfig.service. Sep 6 00:20:51.831000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=ldconfig comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 00:20:51.832345 systemd[1]: Finished systemd-boot-update.service. Sep 6 00:20:51.831000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-boot-update comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 00:20:51.833000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-tmpfiles-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 00:20:51.834039 systemd[1]: Finished systemd-tmpfiles-setup.service. Sep 6 00:20:51.841368 systemd[1]: Starting audit-rules.service... Sep 6 00:20:51.843508 systemd[1]: Starting clean-ca-certificates.service... Sep 6 00:20:51.849000 audit: BPF prog-id=39 op=LOAD Sep 6 00:20:51.852000 audit: BPF prog-id=40 op=LOAD Sep 6 00:20:51.848848 systemd[1]: Starting systemd-journal-catalog-update.service... Sep 6 00:20:51.851493 systemd[1]: Starting systemd-resolved.service... Sep 6 00:20:51.854000 systemd[1]: Starting systemd-timesyncd.service... Sep 6 00:20:51.857261 systemd[1]: Starting systemd-update-utmp.service... Sep 6 00:20:51.859000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=clean-ca-certificates comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 00:20:51.859656 systemd[1]: Finished clean-ca-certificates.service. Sep 6 00:20:51.864052 systemd[1]: update-ca-certificates.service was skipped because of an unmet condition check (ConditionPathIsSymbolicLink=!/etc/ssl/certs/ca-certificates.crt). Sep 6 00:20:51.866670 systemd[1]: ignition-delete-config.service was skipped because no trigger condition checks were met. Sep 6 00:20:51.875000 audit[1135]: SYSTEM_BOOT pid=1135 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg=' comm="systemd-update-utmp" exe="/usr/lib/systemd/systemd-update-utmp" hostname=? addr=? terminal=? res=success' Sep 6 00:20:51.869397 systemd[1]: Starting modprobe@dm_mod.service... Sep 6 00:20:51.873520 systemd[1]: Starting modprobe@efi_pstore.service... Sep 6 00:20:51.875545 systemd[1]: Starting modprobe@loop.service... Sep 6 00:20:51.876019 systemd[1]: systemd-binfmt.service was skipped because no trigger condition checks were met. Sep 6 00:20:51.876256 systemd[1]: systemd-boot-system-token.service was skipped because of an unmet condition check (ConditionPathExists=/sys/firmware/efi/efivars/LoaderFeatures-4a67b082-0a4c-41cf-b6c7-440b29bb8c4f). Sep 6 00:20:51.876409 systemd[1]: update-ca-certificates.service was skipped because of an unmet condition check (ConditionPathIsSymbolicLink=!/etc/ssl/certs/ca-certificates.crt). Sep 6 00:20:51.879000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@efi_pstore comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 00:20:51.879000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@efi_pstore comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 00:20:51.880000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@dm_mod comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 00:20:51.880000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@dm_mod comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 00:20:51.877806 systemd[1]: modprobe@efi_pstore.service: Deactivated successfully. Sep 6 00:20:51.878475 systemd[1]: Finished modprobe@efi_pstore.service. Sep 6 00:20:51.880388 systemd[1]: modprobe@dm_mod.service: Deactivated successfully. Sep 6 00:20:51.880519 systemd[1]: Finished modprobe@dm_mod.service. Sep 6 00:20:51.884942 systemd[1]: systemd-pstore.service was skipped because of an unmet condition check (ConditionDirectoryNotEmpty=/sys/fs/pstore). Sep 6 00:20:51.886000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-update-utmp comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 00:20:51.887101 systemd[1]: Finished systemd-update-utmp.service. Sep 6 00:20:51.889666 systemd[1]: ignition-delete-config.service was skipped because no trigger condition checks were met. Sep 6 00:20:51.891277 systemd[1]: Starting modprobe@dm_mod.service... Sep 6 00:20:51.894914 systemd[1]: Starting modprobe@efi_pstore.service... Sep 6 00:20:51.895410 systemd[1]: systemd-binfmt.service was skipped because no trigger condition checks were met. Sep 6 00:20:51.895606 systemd[1]: systemd-boot-system-token.service was skipped because of an unmet condition check (ConditionPathExists=/sys/firmware/efi/efivars/LoaderFeatures-4a67b082-0a4c-41cf-b6c7-440b29bb8c4f). Sep 6 00:20:51.895807 systemd[1]: update-ca-certificates.service was skipped because of an unmet condition check (ConditionPathIsSymbolicLink=!/etc/ssl/certs/ca-certificates.crt). Sep 6 00:20:51.898000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@loop comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 00:20:51.898000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@loop comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 00:20:51.898639 systemd[1]: modprobe@loop.service: Deactivated successfully. Sep 6 00:20:51.898807 systemd[1]: Finished modprobe@loop.service. Sep 6 00:20:51.903366 systemd[1]: ignition-delete-config.service was skipped because no trigger condition checks were met. Sep 6 00:20:51.906839 systemd[1]: Starting modprobe@drm.service... Sep 6 00:20:51.918179 systemd[1]: Starting modprobe@loop.service... Sep 6 00:20:51.918895 systemd[1]: systemd-binfmt.service was skipped because no trigger condition checks were met. Sep 6 00:20:51.919120 systemd[1]: systemd-boot-system-token.service was skipped because of an unmet condition check (ConditionPathExists=/sys/firmware/efi/efivars/LoaderFeatures-4a67b082-0a4c-41cf-b6c7-440b29bb8c4f). Sep 6 00:20:51.922278 systemd[1]: Starting systemd-networkd-wait-online.service... Sep 6 00:20:51.922865 systemd[1]: update-ca-certificates.service was skipped because of an unmet condition check (ConditionPathIsSymbolicLink=!/etc/ssl/certs/ca-certificates.crt). Sep 6 00:20:51.924063 systemd[1]: modprobe@dm_mod.service: Deactivated successfully. Sep 6 00:20:51.924224 systemd[1]: Finished modprobe@dm_mod.service. Sep 6 00:20:51.924000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@dm_mod comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 00:20:51.924000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@dm_mod comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 00:20:51.925000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@drm comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 00:20:51.926000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@drm comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 00:20:51.926082 systemd[1]: modprobe@drm.service: Deactivated successfully. Sep 6 00:20:51.926238 systemd[1]: Finished modprobe@drm.service. Sep 6 00:20:51.929821 systemd-networkd[1004]: eth1: Gained IPv6LL Sep 6 00:20:51.931000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=ensure-sysext comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 00:20:51.931000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-networkd-wait-online comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 00:20:51.931549 systemd[1]: Finished ensure-sysext.service. Sep 6 00:20:51.932280 systemd[1]: Finished systemd-networkd-wait-online.service. Sep 6 00:20:51.935000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@loop comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 00:20:51.935000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@loop comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 00:20:51.936093 systemd[1]: modprobe@loop.service: Deactivated successfully. Sep 6 00:20:51.936267 systemd[1]: Finished modprobe@loop.service. Sep 6 00:20:51.936801 systemd[1]: systemd-repart.service was skipped because no trigger condition checks were met. Sep 6 00:20:51.941000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@efi_pstore comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 00:20:51.941000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@efi_pstore comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 00:20:51.942124 systemd[1]: modprobe@efi_pstore.service: Deactivated successfully. Sep 6 00:20:51.942278 systemd[1]: Finished modprobe@efi_pstore.service. Sep 6 00:20:51.942836 systemd[1]: systemd-pstore.service was skipped because of an unmet condition check (ConditionDirectoryNotEmpty=/sys/fs/pstore). Sep 6 00:20:51.950000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-journal-catalog-update comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 00:20:51.950772 systemd[1]: Finished systemd-journal-catalog-update.service. Sep 6 00:20:51.952689 systemd[1]: Starting systemd-update-done.service... Sep 6 00:20:51.964000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-update-done comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 00:20:51.965080 systemd[1]: Finished systemd-update-done.service. Sep 6 00:20:51.979000 audit: CONFIG_CHANGE auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op=add_rule key=(null) list=5 res=1 Sep 6 00:20:51.979000 audit[1159]: SYSCALL arch=c000003e syscall=44 success=yes exit=1056 a0=3 a1=7ffd4d1533e0 a2=420 a3=0 items=0 ppid=1129 pid=1159 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auditctl" exe="/usr/sbin/auditctl" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:20:51.979000 audit: PROCTITLE proctitle=2F7362696E2F617564697463746C002D52002F6574632F61756469742F61756469742E72756C6573 Sep 6 00:20:51.981425 augenrules[1159]: No rules Sep 6 00:20:51.982637 systemd[1]: Finished audit-rules.service. Sep 6 00:20:51.994515 systemd-resolved[1133]: Positive Trust Anchors: Sep 6 00:20:51.994532 systemd-resolved[1133]: . IN DS 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d Sep 6 00:20:51.994564 systemd-resolved[1133]: Negative trust anchors: home.arpa 10.in-addr.arpa 16.172.in-addr.arpa 17.172.in-addr.arpa 18.172.in-addr.arpa 19.172.in-addr.arpa 20.172.in-addr.arpa 21.172.in-addr.arpa 22.172.in-addr.arpa 23.172.in-addr.arpa 24.172.in-addr.arpa 25.172.in-addr.arpa 26.172.in-addr.arpa 27.172.in-addr.arpa 28.172.in-addr.arpa 29.172.in-addr.arpa 30.172.in-addr.arpa 31.172.in-addr.arpa 168.192.in-addr.arpa d.f.ip6.arpa corp home internal intranet lan local private test Sep 6 00:20:52.001198 systemd-resolved[1133]: Using system hostname 'ci-3510.3.8-n-86fdecb492'. Sep 6 00:20:52.003814 systemd[1]: Started systemd-resolved.service. Sep 6 00:20:52.004441 systemd[1]: Reached target network.target. Sep 6 00:20:52.004860 systemd[1]: Reached target network-online.target. Sep 6 00:20:52.005238 systemd[1]: Reached target nss-lookup.target. Sep 6 00:20:52.008949 systemd[1]: Started systemd-timesyncd.service. Sep 6 00:20:52.009603 systemd[1]: Reached target sysinit.target. Sep 6 00:20:52.010213 systemd[1]: Started motdgen.path. Sep 6 00:20:52.010859 systemd[1]: Started user-cloudinit@var-lib-flatcar\x2dinstall-user_data.path. Sep 6 00:20:52.011306 systemd[1]: Started systemd-tmpfiles-clean.timer. Sep 6 00:20:52.011673 systemd[1]: update-engine-stub.timer was skipped because of an unmet condition check (ConditionPathExists=/usr/.noupdate). Sep 6 00:20:52.011706 systemd[1]: Reached target paths.target. Sep 6 00:20:52.012033 systemd[1]: Reached target time-set.target. Sep 6 00:20:52.012565 systemd[1]: Started logrotate.timer. Sep 6 00:20:52.013054 systemd[1]: Started mdadm.timer. Sep 6 00:20:52.013333 systemd[1]: Reached target timers.target. Sep 6 00:20:52.014343 systemd[1]: Listening on dbus.socket. Sep 6 00:20:52.016176 systemd[1]: Starting docker.socket... Sep 6 00:20:52.020555 systemd[1]: Listening on sshd.socket. Sep 6 00:20:52.021033 systemd[1]: systemd-pcrphase-sysinit.service was skipped because of an unmet condition check (ConditionPathExists=/sys/firmware/efi/efivars/StubPcrKernelImage-4a67b082-0a4c-41cf-b6c7-440b29bb8c4f). Sep 6 00:20:52.021596 systemd[1]: Listening on docker.socket. Sep 6 00:20:52.022048 systemd[1]: Reached target sockets.target. Sep 6 00:20:52.022374 systemd[1]: Reached target basic.target. Sep 6 00:20:52.022708 systemd[1]: addon-config@usr-share-oem.service was skipped because no trigger condition checks were met. Sep 6 00:20:52.022747 systemd[1]: addon-run@usr-share-oem.service was skipped because no trigger condition checks were met. Sep 6 00:20:52.024058 systemd[1]: Starting containerd.service... Sep 6 00:20:52.025774 systemd[1]: Starting coreos-metadata-sshkeys@core.service... Sep 6 00:20:52.028238 systemd[1]: Starting dbus.service... Sep 6 00:20:52.031194 systemd[1]: Starting enable-oem-cloudinit.service... Sep 6 00:20:52.037200 systemd[1]: Starting extend-filesystems.service... Sep 6 00:20:52.037673 systemd[1]: flatcar-setup-environment.service was skipped because of an unmet condition check (ConditionPathExists=/usr/share/oem/bin/flatcar-setup-environment). Sep 6 00:20:52.040046 systemd[1]: Starting kubelet.service... Sep 6 00:20:52.042749 systemd[1]: Starting motdgen.service... Sep 6 00:20:52.046593 systemd[1]: Starting prepare-helm.service... Sep 6 00:20:52.049782 systemd[1]: Starting ssh-key-proc-cmdline.service... Sep 6 00:20:52.052444 systemd[1]: Starting sshd-keygen.service... Sep 6 00:20:52.056848 systemd-networkd[1004]: eth0: Gained IPv6LL Sep 6 00:20:52.058097 systemd[1]: Starting systemd-logind.service... Sep 6 00:20:52.058977 systemd[1]: systemd-pcrphase.service was skipped because of an unmet condition check (ConditionPathExists=/sys/firmware/efi/efivars/StubPcrKernelImage-4a67b082-0a4c-41cf-b6c7-440b29bb8c4f). Sep 6 00:20:52.059072 systemd[1]: tcsd.service was skipped because of an unmet condition check (ConditionPathExists=/dev/tpm0). Sep 6 00:20:52.059689 systemd[1]: cgroup compatibility translation between legacy and unified hierarchy settings activated. See cgroup-compat debug messages for details. Sep 6 00:20:52.061807 systemd[1]: Starting update-engine.service... Sep 6 00:20:52.065565 systemd[1]: Starting update-ssh-keys-after-ignition.service... Sep 6 00:20:52.576556 systemd-timesyncd[1134]: Contacted time server 104.167.215.195:123 (0.flatcar.pool.ntp.org). Sep 6 00:20:52.576621 systemd-timesyncd[1134]: Initial clock synchronization to Sat 2025-09-06 00:20:52.576410 UTC. Sep 6 00:20:52.578300 systemd-resolved[1133]: Clock change detected. Flushing caches. Sep 6 00:20:52.579400 systemd[1]: ssh-key-proc-cmdline.service: Deactivated successfully. Sep 6 00:20:52.579669 systemd[1]: Finished ssh-key-proc-cmdline.service. Sep 6 00:20:52.597842 jq[1172]: false Sep 6 00:20:52.604345 systemd[1]: enable-oem-cloudinit.service: Skipped due to 'exec-condition'. Sep 6 00:20:52.604533 systemd[1]: Condition check resulted in enable-oem-cloudinit.service being skipped. Sep 6 00:20:52.606708 jq[1187]: true Sep 6 00:20:52.619856 tar[1190]: linux-amd64/helm Sep 6 00:20:52.635084 dbus-daemon[1169]: [system] SELinux support is enabled Sep 6 00:20:52.639556 jq[1197]: true Sep 6 00:20:52.643027 extend-filesystems[1173]: Found loop1 Sep 6 00:20:52.643928 systemd[1]: Started dbus.service. Sep 6 00:20:52.647446 systemd[1]: system-cloudinit@usr-share-oem-cloud\x2dconfig.yml.service was skipped because of an unmet condition check (ConditionFileNotEmpty=/usr/share/oem/cloud-config.yml). Sep 6 00:20:52.647498 systemd[1]: Reached target system-config.target. Sep 6 00:20:52.648051 systemd[1]: user-cloudinit-proc-cmdline.service was skipped because of an unmet condition check (ConditionKernelCommandLine=cloud-config-url). Sep 6 00:20:52.648075 systemd[1]: Reached target user-config.target. Sep 6 00:20:52.654682 extend-filesystems[1173]: Found vda Sep 6 00:20:52.659620 extend-filesystems[1173]: Found vda1 Sep 6 00:20:52.660541 extend-filesystems[1173]: Found vda2 Sep 6 00:20:52.661075 extend-filesystems[1173]: Found vda3 Sep 6 00:20:52.662333 extend-filesystems[1173]: Found usr Sep 6 00:20:52.662333 extend-filesystems[1173]: Found vda4 Sep 6 00:20:52.662333 extend-filesystems[1173]: Found vda6 Sep 6 00:20:52.662333 extend-filesystems[1173]: Found vda7 Sep 6 00:20:52.662333 extend-filesystems[1173]: Found vda9 Sep 6 00:20:52.662333 extend-filesystems[1173]: Checking size of /dev/vda9 Sep 6 00:20:52.684585 systemd[1]: motdgen.service: Deactivated successfully. Sep 6 00:20:52.684758 systemd[1]: Finished motdgen.service. Sep 6 00:20:52.722704 extend-filesystems[1173]: Resized partition /dev/vda9 Sep 6 00:20:52.723434 systemd[1]: proc-xen.mount was skipped because of an unmet condition check (ConditionVirtualization=xen). Sep 6 00:20:52.723484 systemd[1]: xenserver-pv-version.service was skipped because of an unmet condition check (ConditionVirtualization=xen). Sep 6 00:20:52.730399 update_engine[1186]: I0906 00:20:52.729822 1186 main.cc:92] Flatcar Update Engine starting Sep 6 00:20:52.735919 systemd[1]: Started update-engine.service. Sep 6 00:20:52.736281 update_engine[1186]: I0906 00:20:52.736212 1186 update_check_scheduler.cc:74] Next update check in 3m25s Sep 6 00:20:52.738389 systemd[1]: Started locksmithd.service. Sep 6 00:20:52.742153 extend-filesystems[1219]: resize2fs 1.46.5 (30-Dec-2021) Sep 6 00:20:52.749310 kernel: EXT4-fs (vda9): resizing filesystem from 553472 to 15121403 blocks Sep 6 00:20:52.793292 bash[1224]: Updated "/home/core/.ssh/authorized_keys" Sep 6 00:20:52.794633 systemd[1]: Finished update-ssh-keys-after-ignition.service. Sep 6 00:20:52.829037 systemd-logind[1184]: Watching system buttons on /dev/input/event1 (Power Button) Sep 6 00:20:52.831692 systemd-logind[1184]: Watching system buttons on /dev/input/event0 (AT Translated Set 2 keyboard) Sep 6 00:20:52.834338 systemd-logind[1184]: New seat seat0. Sep 6 00:20:52.836274 kernel: EXT4-fs (vda9): resized filesystem to 15121403 Sep 6 00:20:52.845643 systemd[1]: Started systemd-logind.service. Sep 6 00:20:52.859977 extend-filesystems[1219]: Filesystem at /dev/vda9 is mounted on /; on-line resizing required Sep 6 00:20:52.859977 extend-filesystems[1219]: old_desc_blocks = 1, new_desc_blocks = 8 Sep 6 00:20:52.859977 extend-filesystems[1219]: The filesystem on /dev/vda9 is now 15121403 (4k) blocks long. Sep 6 00:20:52.862419 extend-filesystems[1173]: Resized filesystem in /dev/vda9 Sep 6 00:20:52.862419 extend-filesystems[1173]: Found vdb Sep 6 00:20:52.860413 systemd[1]: extend-filesystems.service: Deactivated successfully. Sep 6 00:20:52.860607 systemd[1]: Finished extend-filesystems.service. Sep 6 00:20:52.875904 env[1194]: time="2025-09-06T00:20:52.875839273Z" level=info msg="starting containerd" revision=92b3a9d6f1b3bcc6dc74875cfdea653fe39f09c2 version=1.6.16 Sep 6 00:20:52.950272 coreos-metadata[1168]: Sep 06 00:20:52.949 INFO Fetching http://169.254.169.254/metadata/v1.json: Attempt #1 Sep 6 00:20:52.964744 coreos-metadata[1168]: Sep 06 00:20:52.964 INFO Fetch successful Sep 6 00:20:52.967590 env[1194]: time="2025-09-06T00:20:52.967541804Z" level=info msg="loading plugin \"io.containerd.content.v1.content\"..." type=io.containerd.content.v1 Sep 6 00:20:52.972122 env[1194]: time="2025-09-06T00:20:52.972076958Z" level=info msg="loading plugin \"io.containerd.snapshotter.v1.aufs\"..." type=io.containerd.snapshotter.v1 Sep 6 00:20:52.973871 unknown[1168]: wrote ssh authorized keys file for user: core Sep 6 00:20:52.978161 env[1194]: time="2025-09-06T00:20:52.978123378Z" level=info msg="skip loading plugin \"io.containerd.snapshotter.v1.aufs\"..." error="aufs is not supported (modprobe aufs failed: exit status 1 \"modprobe: FATAL: Module aufs not found in directory /lib/modules/5.15.190-flatcar\\n\"): skip plugin" type=io.containerd.snapshotter.v1 Sep 6 00:20:52.982329 env[1194]: time="2025-09-06T00:20:52.982286258Z" level=info msg="loading plugin \"io.containerd.snapshotter.v1.btrfs\"..." type=io.containerd.snapshotter.v1 Sep 6 00:20:52.983505 env[1194]: time="2025-09-06T00:20:52.983356372Z" level=info msg="skip loading plugin \"io.containerd.snapshotter.v1.btrfs\"..." error="path /var/lib/containerd/io.containerd.snapshotter.v1.btrfs (ext4) must be a btrfs filesystem to be used with the btrfs snapshotter: skip plugin" type=io.containerd.snapshotter.v1 Sep 6 00:20:52.983676 env[1194]: time="2025-09-06T00:20:52.983655547Z" level=info msg="loading plugin \"io.containerd.snapshotter.v1.devmapper\"..." type=io.containerd.snapshotter.v1 Sep 6 00:20:52.983763 env[1194]: time="2025-09-06T00:20:52.983746935Z" level=warning msg="failed to load plugin io.containerd.snapshotter.v1.devmapper" error="devmapper not configured" Sep 6 00:20:52.983938 env[1194]: time="2025-09-06T00:20:52.983914621Z" level=info msg="loading plugin \"io.containerd.snapshotter.v1.native\"..." type=io.containerd.snapshotter.v1 Sep 6 00:20:52.984108 env[1194]: time="2025-09-06T00:20:52.984088919Z" level=info msg="loading plugin \"io.containerd.snapshotter.v1.overlayfs\"..." type=io.containerd.snapshotter.v1 Sep 6 00:20:52.984488 env[1194]: time="2025-09-06T00:20:52.984466437Z" level=info msg="loading plugin \"io.containerd.snapshotter.v1.zfs\"..." type=io.containerd.snapshotter.v1 Sep 6 00:20:52.984807 env[1194]: time="2025-09-06T00:20:52.984778134Z" level=info msg="skip loading plugin \"io.containerd.snapshotter.v1.zfs\"..." error="path /var/lib/containerd/io.containerd.snapshotter.v1.zfs must be a zfs filesystem to be used with the zfs snapshotter: skip plugin" type=io.containerd.snapshotter.v1 Sep 6 00:20:52.984861 update-ssh-keys[1230]: Updated "/home/core/.ssh/authorized_keys" Sep 6 00:20:52.985118 env[1194]: time="2025-09-06T00:20:52.985100125Z" level=info msg="loading plugin \"io.containerd.metadata.v1.bolt\"..." type=io.containerd.metadata.v1 Sep 6 00:20:52.985282 env[1194]: time="2025-09-06T00:20:52.985263157Z" level=warning msg="could not use snapshotter devmapper in metadata plugin" error="devmapper not configured" Sep 6 00:20:52.985359 systemd[1]: Finished coreos-metadata-sshkeys@core.service. Sep 6 00:20:52.985461 env[1194]: time="2025-09-06T00:20:52.985361891Z" level=info msg="metadata content store policy set" policy=shared Sep 6 00:20:52.989122 env[1194]: time="2025-09-06T00:20:52.989082896Z" level=info msg="loading plugin \"io.containerd.differ.v1.walking\"..." type=io.containerd.differ.v1 Sep 6 00:20:52.989327 env[1194]: time="2025-09-06T00:20:52.989293532Z" level=info msg="loading plugin \"io.containerd.event.v1.exchange\"..." type=io.containerd.event.v1 Sep 6 00:20:52.989410 env[1194]: time="2025-09-06T00:20:52.989393771Z" level=info msg="loading plugin \"io.containerd.gc.v1.scheduler\"..." type=io.containerd.gc.v1 Sep 6 00:20:52.989499 env[1194]: time="2025-09-06T00:20:52.989483929Z" level=info msg="loading plugin \"io.containerd.service.v1.introspection-service\"..." type=io.containerd.service.v1 Sep 6 00:20:52.989572 env[1194]: time="2025-09-06T00:20:52.989553491Z" level=info msg="loading plugin \"io.containerd.service.v1.containers-service\"..." type=io.containerd.service.v1 Sep 6 00:20:52.989659 env[1194]: time="2025-09-06T00:20:52.989645451Z" level=info msg="loading plugin \"io.containerd.service.v1.content-service\"..." type=io.containerd.service.v1 Sep 6 00:20:52.989786 env[1194]: time="2025-09-06T00:20:52.989767443Z" level=info msg="loading plugin \"io.containerd.service.v1.diff-service\"..." type=io.containerd.service.v1 Sep 6 00:20:52.989864 env[1194]: time="2025-09-06T00:20:52.989849673Z" level=info msg="loading plugin \"io.containerd.service.v1.images-service\"..." type=io.containerd.service.v1 Sep 6 00:20:52.989933 env[1194]: time="2025-09-06T00:20:52.989918933Z" level=info msg="loading plugin \"io.containerd.service.v1.leases-service\"..." type=io.containerd.service.v1 Sep 6 00:20:52.989999 env[1194]: time="2025-09-06T00:20:52.989986343Z" level=info msg="loading plugin \"io.containerd.service.v1.namespaces-service\"..." type=io.containerd.service.v1 Sep 6 00:20:52.990061 env[1194]: time="2025-09-06T00:20:52.990047260Z" level=info msg="loading plugin \"io.containerd.service.v1.snapshots-service\"..." type=io.containerd.service.v1 Sep 6 00:20:52.990130 env[1194]: time="2025-09-06T00:20:52.990116276Z" level=info msg="loading plugin \"io.containerd.runtime.v1.linux\"..." type=io.containerd.runtime.v1 Sep 6 00:20:52.990338 env[1194]: time="2025-09-06T00:20:52.990319703Z" level=info msg="loading plugin \"io.containerd.runtime.v2.task\"..." type=io.containerd.runtime.v2 Sep 6 00:20:52.990519 env[1194]: time="2025-09-06T00:20:52.990502105Z" level=info msg="loading plugin \"io.containerd.monitor.v1.cgroups\"..." type=io.containerd.monitor.v1 Sep 6 00:20:52.990845 env[1194]: time="2025-09-06T00:20:52.990823747Z" level=info msg="loading plugin \"io.containerd.service.v1.tasks-service\"..." type=io.containerd.service.v1 Sep 6 00:20:52.990940 env[1194]: time="2025-09-06T00:20:52.990924769Z" level=info msg="loading plugin \"io.containerd.grpc.v1.introspection\"..." type=io.containerd.grpc.v1 Sep 6 00:20:52.991006 env[1194]: time="2025-09-06T00:20:52.990992731Z" level=info msg="loading plugin \"io.containerd.internal.v1.restart\"..." type=io.containerd.internal.v1 Sep 6 00:20:52.991136 env[1194]: time="2025-09-06T00:20:52.991119184Z" level=info msg="loading plugin \"io.containerd.grpc.v1.containers\"..." type=io.containerd.grpc.v1 Sep 6 00:20:52.991210 env[1194]: time="2025-09-06T00:20:52.991195755Z" level=info msg="loading plugin \"io.containerd.grpc.v1.content\"..." type=io.containerd.grpc.v1 Sep 6 00:20:52.991309 env[1194]: time="2025-09-06T00:20:52.991293857Z" level=info msg="loading plugin \"io.containerd.grpc.v1.diff\"..." type=io.containerd.grpc.v1 Sep 6 00:20:52.991430 env[1194]: time="2025-09-06T00:20:52.991406480Z" level=info msg="loading plugin \"io.containerd.grpc.v1.events\"..." type=io.containerd.grpc.v1 Sep 6 00:20:52.991504 env[1194]: time="2025-09-06T00:20:52.991489779Z" level=info msg="loading plugin \"io.containerd.grpc.v1.healthcheck\"..." type=io.containerd.grpc.v1 Sep 6 00:20:52.991570 env[1194]: time="2025-09-06T00:20:52.991553888Z" level=info msg="loading plugin \"io.containerd.grpc.v1.images\"..." type=io.containerd.grpc.v1 Sep 6 00:20:52.991629 env[1194]: time="2025-09-06T00:20:52.991616314Z" level=info msg="loading plugin \"io.containerd.grpc.v1.leases\"..." type=io.containerd.grpc.v1 Sep 6 00:20:52.991690 env[1194]: time="2025-09-06T00:20:52.991677166Z" level=info msg="loading plugin \"io.containerd.grpc.v1.namespaces\"..." type=io.containerd.grpc.v1 Sep 6 00:20:52.991766 env[1194]: time="2025-09-06T00:20:52.991752741Z" level=info msg="loading plugin \"io.containerd.internal.v1.opt\"..." type=io.containerd.internal.v1 Sep 6 00:20:52.991982 env[1194]: time="2025-09-06T00:20:52.991959777Z" level=info msg="loading plugin \"io.containerd.grpc.v1.snapshots\"..." type=io.containerd.grpc.v1 Sep 6 00:20:52.992082 env[1194]: time="2025-09-06T00:20:52.992066225Z" level=info msg="loading plugin \"io.containerd.grpc.v1.tasks\"..." type=io.containerd.grpc.v1 Sep 6 00:20:52.992159 env[1194]: time="2025-09-06T00:20:52.992144875Z" level=info msg="loading plugin \"io.containerd.grpc.v1.version\"..." type=io.containerd.grpc.v1 Sep 6 00:20:52.992225 env[1194]: time="2025-09-06T00:20:52.992211583Z" level=info msg="loading plugin \"io.containerd.tracing.processor.v1.otlp\"..." type=io.containerd.tracing.processor.v1 Sep 6 00:20:52.992329 env[1194]: time="2025-09-06T00:20:52.992309725Z" level=info msg="skip loading plugin \"io.containerd.tracing.processor.v1.otlp\"..." error="no OpenTelemetry endpoint: skip plugin" type=io.containerd.tracing.processor.v1 Sep 6 00:20:52.992391 env[1194]: time="2025-09-06T00:20:52.992376944Z" level=info msg="loading plugin \"io.containerd.internal.v1.tracing\"..." type=io.containerd.internal.v1 Sep 6 00:20:52.992461 env[1194]: time="2025-09-06T00:20:52.992445518Z" level=error msg="failed to initialize a tracing processor \"otlp\"" error="no OpenTelemetry endpoint: skip plugin" Sep 6 00:20:52.992597 env[1194]: time="2025-09-06T00:20:52.992579846Z" level=info msg="loading plugin \"io.containerd.grpc.v1.cri\"..." type=io.containerd.grpc.v1 Sep 6 00:20:52.992904 env[1194]: time="2025-09-06T00:20:52.992843063Z" level=info msg="Start cri plugin with config {PluginConfig:{ContainerdConfig:{Snapshotter:overlayfs DefaultRuntimeName:runc DefaultRuntime:{Type: Path: Engine: PodAnnotations:[] ContainerAnnotations:[] Root: Options:map[] PrivilegedWithoutHostDevices:false BaseRuntimeSpec: NetworkPluginConfDir: NetworkPluginMaxConfNum:0} UntrustedWorkloadRuntime:{Type: Path: Engine: PodAnnotations:[] ContainerAnnotations:[] Root: Options:map[] PrivilegedWithoutHostDevices:false BaseRuntimeSpec: NetworkPluginConfDir: NetworkPluginMaxConfNum:0} Runtimes:map[runc:{Type:io.containerd.runc.v2 Path: Engine: PodAnnotations:[] ContainerAnnotations:[] Root: Options:map[SystemdCgroup:true] PrivilegedWithoutHostDevices:false BaseRuntimeSpec: NetworkPluginConfDir: NetworkPluginMaxConfNum:0}] NoPivot:false DisableSnapshotAnnotations:true DiscardUnpackedLayers:false IgnoreRdtNotEnabledErrors:false} CniConfig:{NetworkPluginBinDir:/opt/cni/bin NetworkPluginConfDir:/etc/cni/net.d NetworkPluginMaxConfNum:1 NetworkPluginConfTemplate: IPPreference:} Registry:{ConfigPath: Mirrors:map[] Configs:map[] Auths:map[] Headers:map[]} ImageDecryption:{KeyModel:node} DisableTCPService:true StreamServerAddress:127.0.0.1 StreamServerPort:0 StreamIdleTimeout:4h0m0s EnableSelinux:true SelinuxCategoryRange:1024 SandboxImage:registry.k8s.io/pause:3.6 StatsCollectPeriod:10 SystemdCgroup:false EnableTLSStreaming:false X509KeyPairStreaming:{TLSCertFile: TLSKeyFile:} MaxContainerLogLineSize:16384 DisableCgroup:false DisableApparmor:false RestrictOOMScoreAdj:false MaxConcurrentDownloads:3 DisableProcMount:false UnsetSeccompProfile: TolerateMissingHugetlbController:true DisableHugetlbController:true DeviceOwnershipFromSecurityContext:false IgnoreImageDefinedVolumes:false NetNSMountsUnderStateDir:false EnableUnprivilegedPorts:false EnableUnprivilegedICMP:false} ContainerdRootDir:/var/lib/containerd ContainerdEndpoint:/run/containerd/containerd.sock RootDir:/var/lib/containerd/io.containerd.grpc.v1.cri StateDir:/run/containerd/io.containerd.grpc.v1.cri}" Sep 6 00:20:52.994737 env[1194]: time="2025-09-06T00:20:52.993072760Z" level=info msg="Connect containerd service" Sep 6 00:20:52.994737 env[1194]: time="2025-09-06T00:20:52.993119758Z" level=info msg="Get image filesystem path \"/var/lib/containerd/io.containerd.snapshotter.v1.overlayfs\"" Sep 6 00:20:52.998527 env[1194]: time="2025-09-06T00:20:52.998469118Z" level=error msg="failed to load cni during init, please check CRI plugin status before setting up network for pods" error="cni config load failed: no network config found in /etc/cni/net.d: cni plugin not initialized: failed to load cni config" Sep 6 00:20:52.999261 env[1194]: time="2025-09-06T00:20:52.999200737Z" level=info msg=serving... address=/run/containerd/containerd.sock.ttrpc Sep 6 00:20:52.999743 env[1194]: time="2025-09-06T00:20:52.999696797Z" level=info msg="Start subscribing containerd event" Sep 6 00:20:53.000009 env[1194]: time="2025-09-06T00:20:52.999978615Z" level=info msg="Start recovering state" Sep 6 00:20:53.000185 env[1194]: time="2025-09-06T00:20:53.000167419Z" level=info msg="Start event monitor" Sep 6 00:20:53.001259 env[1194]: time="2025-09-06T00:20:53.001113622Z" level=info msg="Start snapshots syncer" Sep 6 00:20:53.001259 env[1194]: time="2025-09-06T00:20:53.001152375Z" level=info msg="Start cni network conf syncer for default" Sep 6 00:20:53.001259 env[1194]: time="2025-09-06T00:20:53.001172909Z" level=info msg="Start streaming server" Sep 6 00:20:53.010153 env[1194]: time="2025-09-06T00:20:53.010085457Z" level=info msg=serving... address=/run/containerd/containerd.sock Sep 6 00:20:53.010356 systemd[1]: Started containerd.service. Sep 6 00:20:53.011192 env[1194]: time="2025-09-06T00:20:53.011148564Z" level=info msg="containerd successfully booted in 0.175099s" Sep 6 00:20:53.623977 locksmithd[1221]: locksmithd starting currentOperation="UPDATE_STATUS_IDLE" strategy="reboot" Sep 6 00:20:53.734741 tar[1190]: linux-amd64/LICENSE Sep 6 00:20:53.735585 tar[1190]: linux-amd64/README.md Sep 6 00:20:53.747297 systemd[1]: Finished prepare-helm.service. Sep 6 00:20:54.014997 sshd_keygen[1199]: ssh-keygen: generating new host keys: RSA ECDSA ED25519 Sep 6 00:20:54.049261 systemd[1]: Finished sshd-keygen.service. Sep 6 00:20:54.051624 systemd[1]: Starting issuegen.service... Sep 6 00:20:54.060530 systemd[1]: issuegen.service: Deactivated successfully. Sep 6 00:20:54.060750 systemd[1]: Finished issuegen.service. Sep 6 00:20:54.063465 systemd[1]: Starting systemd-user-sessions.service... Sep 6 00:20:54.074342 systemd[1]: Finished systemd-user-sessions.service. Sep 6 00:20:54.077053 systemd[1]: Started getty@tty1.service. Sep 6 00:20:54.079647 systemd[1]: Started serial-getty@ttyS0.service. Sep 6 00:20:54.080339 systemd[1]: Reached target getty.target. Sep 6 00:20:54.277568 systemd[1]: Started kubelet.service. Sep 6 00:20:54.278806 systemd[1]: Reached target multi-user.target. Sep 6 00:20:54.285010 systemd[1]: Starting systemd-update-utmp-runlevel.service... Sep 6 00:20:54.293824 systemd[1]: systemd-update-utmp-runlevel.service: Deactivated successfully. Sep 6 00:20:54.294027 systemd[1]: Finished systemd-update-utmp-runlevel.service. Sep 6 00:20:54.294709 systemd[1]: Startup finished in 869ms (kernel) + 5.909s (initrd) + 7.120s (userspace) = 13.900s. Sep 6 00:20:54.742146 systemd[1]: Created slice system-sshd.slice. Sep 6 00:20:54.744186 systemd[1]: Started sshd@0-147.182.198.71:22-147.75.109.163:36614.service. Sep 6 00:20:54.839276 sshd[1261]: Accepted publickey for core from 147.75.109.163 port 36614 ssh2: RSA SHA256:zgVES46caP1+99uzHYMS+9ry3WhXasb4NYAgm1B5TPc Sep 6 00:20:54.841690 sshd[1261]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Sep 6 00:20:54.858710 systemd[1]: Created slice user-500.slice. Sep 6 00:20:54.861976 systemd[1]: Starting user-runtime-dir@500.service... Sep 6 00:20:54.875315 systemd-logind[1184]: New session 1 of user core. Sep 6 00:20:54.884958 systemd[1]: Finished user-runtime-dir@500.service. Sep 6 00:20:54.888170 systemd[1]: Starting user@500.service... Sep 6 00:20:54.895998 (systemd)[1264]: pam_unix(systemd-user:session): session opened for user core(uid=500) by (uid=0) Sep 6 00:20:55.028220 kubelet[1253]: E0906 00:20:55.028156 1253 run.go:72] "command failed" err="failed to load kubelet config file, path: /var/lib/kubelet/config.yaml, error: failed to load Kubelet config file /var/lib/kubelet/config.yaml, error failed to read kubelet config file \"/var/lib/kubelet/config.yaml\", error: open /var/lib/kubelet/config.yaml: no such file or directory" Sep 6 00:20:55.030088 systemd[1]: kubelet.service: Main process exited, code=exited, status=1/FAILURE Sep 6 00:20:55.030299 systemd[1]: kubelet.service: Failed with result 'exit-code'. Sep 6 00:20:55.030706 systemd[1]: kubelet.service: Consumed 1.375s CPU time. Sep 6 00:20:55.035580 systemd[1264]: Queued start job for default target default.target. Sep 6 00:20:55.036171 systemd[1264]: Reached target paths.target. Sep 6 00:20:55.036193 systemd[1264]: Reached target sockets.target. Sep 6 00:20:55.036206 systemd[1264]: Reached target timers.target. Sep 6 00:20:55.036217 systemd[1264]: Reached target basic.target. Sep 6 00:20:55.036277 systemd[1264]: Reached target default.target. Sep 6 00:20:55.036308 systemd[1264]: Startup finished in 129ms. Sep 6 00:20:55.037229 systemd[1]: Started user@500.service. Sep 6 00:20:55.039529 systemd[1]: Started session-1.scope. Sep 6 00:20:55.105072 systemd[1]: Started sshd@1-147.182.198.71:22-147.75.109.163:36618.service. Sep 6 00:20:55.154730 sshd[1273]: Accepted publickey for core from 147.75.109.163 port 36618 ssh2: RSA SHA256:zgVES46caP1+99uzHYMS+9ry3WhXasb4NYAgm1B5TPc Sep 6 00:20:55.156574 sshd[1273]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Sep 6 00:20:55.164528 systemd[1]: Started session-2.scope. Sep 6 00:20:55.165130 systemd-logind[1184]: New session 2 of user core. Sep 6 00:20:55.236740 sshd[1273]: pam_unix(sshd:session): session closed for user core Sep 6 00:20:55.241522 systemd[1]: sshd@1-147.182.198.71:22-147.75.109.163:36618.service: Deactivated successfully. Sep 6 00:20:55.242405 systemd[1]: session-2.scope: Deactivated successfully. Sep 6 00:20:55.243286 systemd-logind[1184]: Session 2 logged out. Waiting for processes to exit. Sep 6 00:20:55.244782 systemd[1]: Started sshd@2-147.182.198.71:22-147.75.109.163:36630.service. Sep 6 00:20:55.248786 systemd-logind[1184]: Removed session 2. Sep 6 00:20:55.292133 sshd[1279]: Accepted publickey for core from 147.75.109.163 port 36630 ssh2: RSA SHA256:zgVES46caP1+99uzHYMS+9ry3WhXasb4NYAgm1B5TPc Sep 6 00:20:55.295550 sshd[1279]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Sep 6 00:20:55.302743 systemd[1]: Started session-3.scope. Sep 6 00:20:55.303586 systemd-logind[1184]: New session 3 of user core. Sep 6 00:20:55.365617 sshd[1279]: pam_unix(sshd:session): session closed for user core Sep 6 00:20:55.370963 systemd[1]: sshd@2-147.182.198.71:22-147.75.109.163:36630.service: Deactivated successfully. Sep 6 00:20:55.371722 systemd[1]: session-3.scope: Deactivated successfully. Sep 6 00:20:55.372572 systemd-logind[1184]: Session 3 logged out. Waiting for processes to exit. Sep 6 00:20:55.374357 systemd[1]: Started sshd@3-147.182.198.71:22-147.75.109.163:36634.service. Sep 6 00:20:55.375836 systemd-logind[1184]: Removed session 3. Sep 6 00:20:55.422151 sshd[1285]: Accepted publickey for core from 147.75.109.163 port 36634 ssh2: RSA SHA256:zgVES46caP1+99uzHYMS+9ry3WhXasb4NYAgm1B5TPc Sep 6 00:20:55.424371 sshd[1285]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Sep 6 00:20:55.429465 systemd-logind[1184]: New session 4 of user core. Sep 6 00:20:55.430055 systemd[1]: Started session-4.scope. Sep 6 00:20:55.496553 sshd[1285]: pam_unix(sshd:session): session closed for user core Sep 6 00:20:55.501755 systemd[1]: sshd@3-147.182.198.71:22-147.75.109.163:36634.service: Deactivated successfully. Sep 6 00:20:55.502643 systemd[1]: session-4.scope: Deactivated successfully. Sep 6 00:20:55.503287 systemd-logind[1184]: Session 4 logged out. Waiting for processes to exit. Sep 6 00:20:55.504827 systemd[1]: Started sshd@4-147.182.198.71:22-147.75.109.163:36646.service. Sep 6 00:20:55.508705 systemd-logind[1184]: Removed session 4. Sep 6 00:20:55.553199 sshd[1291]: Accepted publickey for core from 147.75.109.163 port 36646 ssh2: RSA SHA256:zgVES46caP1+99uzHYMS+9ry3WhXasb4NYAgm1B5TPc Sep 6 00:20:55.555571 sshd[1291]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Sep 6 00:20:55.561980 systemd-logind[1184]: New session 5 of user core. Sep 6 00:20:55.562923 systemd[1]: Started session-5.scope. Sep 6 00:20:55.643351 sudo[1294]: core : PWD=/home/core ; USER=root ; COMMAND=/usr/sbin/setenforce 1 Sep 6 00:20:55.644213 sudo[1294]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=500) Sep 6 00:20:55.653520 dbus-daemon[1169]: \xd0\u000d)\x95;V: received setenforce notice (enforcing=-651437472) Sep 6 00:20:55.655613 sudo[1294]: pam_unix(sudo:session): session closed for user root Sep 6 00:20:55.660798 sshd[1291]: pam_unix(sshd:session): session closed for user core Sep 6 00:20:55.667389 systemd[1]: sshd@4-147.182.198.71:22-147.75.109.163:36646.service: Deactivated successfully. Sep 6 00:20:55.668797 systemd[1]: session-5.scope: Deactivated successfully. Sep 6 00:20:55.669696 systemd-logind[1184]: Session 5 logged out. Waiting for processes to exit. Sep 6 00:20:55.672095 systemd[1]: Started sshd@5-147.182.198.71:22-147.75.109.163:36658.service. Sep 6 00:20:55.673256 systemd-logind[1184]: Removed session 5. Sep 6 00:20:55.724415 sshd[1298]: Accepted publickey for core from 147.75.109.163 port 36658 ssh2: RSA SHA256:zgVES46caP1+99uzHYMS+9ry3WhXasb4NYAgm1B5TPc Sep 6 00:20:55.726877 sshd[1298]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Sep 6 00:20:55.731969 systemd-logind[1184]: New session 6 of user core. Sep 6 00:20:55.733370 systemd[1]: Started session-6.scope. Sep 6 00:20:55.798709 sudo[1302]: core : PWD=/home/core ; USER=root ; COMMAND=/usr/bin/rm -rf /etc/audit/rules.d/80-selinux.rules /etc/audit/rules.d/99-default.rules Sep 6 00:20:55.799131 sudo[1302]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=500) Sep 6 00:20:55.803321 sudo[1302]: pam_unix(sudo:session): session closed for user root Sep 6 00:20:55.811687 sudo[1301]: core : PWD=/home/core ; USER=root ; COMMAND=/usr/bin/systemctl restart audit-rules Sep 6 00:20:55.812538 sudo[1301]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=500) Sep 6 00:20:55.828311 systemd[1]: Stopping audit-rules.service... Sep 6 00:20:55.829000 audit: CONFIG_CHANGE auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op=remove_rule key=(null) list=5 res=1 Sep 6 00:20:55.829000 audit[1305]: SYSCALL arch=c000003e syscall=44 success=yes exit=1056 a0=3 a1=7ffd51942f00 a2=420 a3=0 items=0 ppid=1 pid=1305 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auditctl" exe="/usr/sbin/auditctl" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:20:55.829000 audit: PROCTITLE proctitle=2F7362696E2F617564697463746C002D44 Sep 6 00:20:55.830990 auditctl[1305]: No rules Sep 6 00:20:55.831347 systemd[1]: audit-rules.service: Deactivated successfully. Sep 6 00:20:55.831674 systemd[1]: Stopped audit-rules.service. Sep 6 00:20:55.830000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=audit-rules comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 00:20:55.834256 systemd[1]: Starting audit-rules.service... Sep 6 00:20:55.862763 augenrules[1322]: No rules Sep 6 00:20:55.864034 systemd[1]: Finished audit-rules.service. Sep 6 00:20:55.863000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=audit-rules comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 00:20:55.866453 sudo[1301]: pam_unix(sudo:session): session closed for user root Sep 6 00:20:55.865000 audit[1301]: USER_END pid=1301 uid=500 auid=500 ses=6 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_limits,pam_env,pam_unix,pam_permit,pam_systemd acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Sep 6 00:20:55.865000 audit[1301]: CRED_DISP pid=1301 uid=500 auid=500 ses=6 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Sep 6 00:20:55.870420 sshd[1298]: pam_unix(sshd:session): session closed for user core Sep 6 00:20:55.871000 audit[1298]: USER_END pid=1298 uid=0 auid=500 ses=6 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Sep 6 00:20:55.871000 audit[1298]: CRED_DISP pid=1298 uid=0 auid=500 ses=6 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Sep 6 00:20:55.876710 systemd[1]: sshd@5-147.182.198.71:22-147.75.109.163:36658.service: Deactivated successfully. Sep 6 00:20:55.875000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@5-147.182.198.71:22-147.75.109.163:36658 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 00:20:55.877424 systemd[1]: session-6.scope: Deactivated successfully. Sep 6 00:20:55.878319 systemd-logind[1184]: Session 6 logged out. Waiting for processes to exit. Sep 6 00:20:55.879000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@6-147.182.198.71:22-147.75.109.163:36660 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 00:20:55.880127 systemd[1]: Started sshd@6-147.182.198.71:22-147.75.109.163:36660.service. Sep 6 00:20:55.881646 systemd-logind[1184]: Removed session 6. Sep 6 00:20:55.930000 audit[1328]: USER_ACCT pid=1328 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Sep 6 00:20:55.932410 sshd[1328]: Accepted publickey for core from 147.75.109.163 port 36660 ssh2: RSA SHA256:zgVES46caP1+99uzHYMS+9ry3WhXasb4NYAgm1B5TPc Sep 6 00:20:55.932000 audit[1328]: CRED_ACQ pid=1328 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Sep 6 00:20:55.932000 audit[1328]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffffa1f4590 a2=3 a3=0 items=0 ppid=1 pid=1328 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=7 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:20:55.932000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Sep 6 00:20:55.934568 sshd[1328]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Sep 6 00:20:55.940881 systemd[1]: Started session-7.scope. Sep 6 00:20:55.941264 systemd-logind[1184]: New session 7 of user core. Sep 6 00:20:55.946000 audit[1328]: USER_START pid=1328 uid=0 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Sep 6 00:20:55.949000 audit[1330]: CRED_ACQ pid=1330 uid=0 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Sep 6 00:20:56.003000 audit[1331]: USER_ACCT pid=1331 uid=500 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Sep 6 00:20:56.005125 sudo[1331]: core : PWD=/home/core ; USER=root ; COMMAND=/home/core/install.sh Sep 6 00:20:56.004000 audit[1331]: CRED_REFR pid=1331 uid=500 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Sep 6 00:20:56.005440 sudo[1331]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=500) Sep 6 00:20:56.006000 audit[1331]: USER_START pid=1331 uid=500 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_limits,pam_env,pam_unix,pam_permit,pam_systemd acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Sep 6 00:20:56.046756 systemd[1]: Starting docker.service... Sep 6 00:20:56.121311 env[1341]: time="2025-09-06T00:20:56.120294657Z" level=info msg="Starting up" Sep 6 00:20:56.123606 env[1341]: time="2025-09-06T00:20:56.123529901Z" level=info msg="parsed scheme: \"unix\"" module=grpc Sep 6 00:20:56.123606 env[1341]: time="2025-09-06T00:20:56.123566259Z" level=info msg="scheme \"unix\" not registered, fallback to default scheme" module=grpc Sep 6 00:20:56.123826 env[1341]: time="2025-09-06T00:20:56.123622273Z" level=info msg="ccResolverWrapper: sending update to cc: {[{unix:///var/run/docker/libcontainerd/docker-containerd.sock 0 }] }" module=grpc Sep 6 00:20:56.123826 env[1341]: time="2025-09-06T00:20:56.123646096Z" level=info msg="ClientConn switching balancer to \"pick_first\"" module=grpc Sep 6 00:20:56.126457 env[1341]: time="2025-09-06T00:20:56.126416794Z" level=info msg="parsed scheme: \"unix\"" module=grpc Sep 6 00:20:56.126457 env[1341]: time="2025-09-06T00:20:56.126442972Z" level=info msg="scheme \"unix\" not registered, fallback to default scheme" module=grpc Sep 6 00:20:56.126457 env[1341]: time="2025-09-06T00:20:56.126461202Z" level=info msg="ccResolverWrapper: sending update to cc: {[{unix:///var/run/docker/libcontainerd/docker-containerd.sock 0 }] }" module=grpc Sep 6 00:20:56.126653 env[1341]: time="2025-09-06T00:20:56.126471834Z" level=info msg="ClientConn switching balancer to \"pick_first\"" module=grpc Sep 6 00:20:56.134083 systemd[1]: var-lib-docker-check\x2doverlayfs\x2dsupport1034051636-merged.mount: Deactivated successfully. Sep 6 00:20:56.221769 env[1341]: time="2025-09-06T00:20:56.221713518Z" level=info msg="Loading containers: start." Sep 6 00:20:56.305000 audit[1375]: NETFILTER_CFG table=nat:2 family=2 entries=2 op=nft_register_chain pid=1375 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 6 00:20:56.305000 audit[1375]: SYSCALL arch=c000003e syscall=46 success=yes exit=116 a0=3 a1=7ffef9b56eb0 a2=0 a3=7ffef9b56e9c items=0 ppid=1341 pid=1375 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:20:56.305000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D74006E6174002D4E00444F434B4552 Sep 6 00:20:56.308000 audit[1377]: NETFILTER_CFG table=filter:3 family=2 entries=2 op=nft_register_chain pid=1377 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 6 00:20:56.308000 audit[1377]: SYSCALL arch=c000003e syscall=46 success=yes exit=124 a0=3 a1=7ffc5e162b90 a2=0 a3=7ffc5e162b7c items=0 ppid=1341 pid=1377 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:20:56.308000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D740066696C746572002D4E00444F434B4552 Sep 6 00:20:56.310000 audit[1379]: NETFILTER_CFG table=filter:4 family=2 entries=1 op=nft_register_chain pid=1379 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 6 00:20:56.310000 audit[1379]: SYSCALL arch=c000003e syscall=46 success=yes exit=112 a0=3 a1=7fff1faaf5a0 a2=0 a3=7fff1faaf58c items=0 ppid=1341 pid=1379 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:20:56.310000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D740066696C746572002D4E00444F434B45522D49534F4C4154494F4E2D53544147452D31 Sep 6 00:20:56.312000 audit[1381]: NETFILTER_CFG table=filter:5 family=2 entries=1 op=nft_register_chain pid=1381 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 6 00:20:56.312000 audit[1381]: SYSCALL arch=c000003e syscall=46 success=yes exit=112 a0=3 a1=7fff58035420 a2=0 a3=7fff5803540c items=0 ppid=1341 pid=1381 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:20:56.312000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D740066696C746572002D4E00444F434B45522D49534F4C4154494F4E2D53544147452D32 Sep 6 00:20:56.316000 audit[1383]: NETFILTER_CFG table=filter:6 family=2 entries=1 op=nft_register_rule pid=1383 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 6 00:20:56.316000 audit[1383]: SYSCALL arch=c000003e syscall=46 success=yes exit=228 a0=3 a1=7ffe21d37420 a2=0 a3=7ffe21d3740c items=0 ppid=1341 pid=1383 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:20:56.316000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4100444F434B45522D49534F4C4154494F4E2D53544147452D31002D6A0052455455524E Sep 6 00:20:56.336000 audit[1388]: NETFILTER_CFG table=filter:7 family=2 entries=1 op=nft_register_rule pid=1388 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 6 00:20:56.336000 audit[1388]: SYSCALL arch=c000003e syscall=46 success=yes exit=228 a0=3 a1=7ffda80ffc70 a2=0 a3=7ffda80ffc5c items=0 ppid=1341 pid=1388 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:20:56.336000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4100444F434B45522D49534F4C4154494F4E2D53544147452D32002D6A0052455455524E Sep 6 00:20:56.345000 audit[1390]: NETFILTER_CFG table=filter:8 family=2 entries=1 op=nft_register_chain pid=1390 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 6 00:20:56.345000 audit[1390]: SYSCALL arch=c000003e syscall=46 success=yes exit=96 a0=3 a1=7ffd2becafb0 a2=0 a3=7ffd2becaf9c items=0 ppid=1341 pid=1390 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:20:56.345000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D740066696C746572002D4E00444F434B45522D55534552 Sep 6 00:20:56.348000 audit[1392]: NETFILTER_CFG table=filter:9 family=2 entries=1 op=nft_register_rule pid=1392 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 6 00:20:56.348000 audit[1392]: SYSCALL arch=c000003e syscall=46 success=yes exit=212 a0=3 a1=7fff6f31ad00 a2=0 a3=7fff6f31acec items=0 ppid=1341 pid=1392 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:20:56.348000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4100444F434B45522D55534552002D6A0052455455524E Sep 6 00:20:56.355000 audit[1394]: NETFILTER_CFG table=filter:10 family=2 entries=2 op=nft_register_chain pid=1394 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 6 00:20:56.355000 audit[1394]: SYSCALL arch=c000003e syscall=46 success=yes exit=308 a0=3 a1=7ffcc5e64310 a2=0 a3=7ffcc5e642fc items=0 ppid=1341 pid=1394 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:20:56.355000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6A00444F434B45522D55534552 Sep 6 00:20:56.366000 audit[1398]: NETFILTER_CFG table=filter:11 family=2 entries=1 op=nft_unregister_rule pid=1398 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 6 00:20:56.366000 audit[1398]: SYSCALL arch=c000003e syscall=46 success=yes exit=216 a0=3 a1=7ffd8a54d630 a2=0 a3=7ffd8a54d61c items=0 ppid=1341 pid=1398 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:20:56.366000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4400464F5257415244002D6A00444F434B45522D55534552 Sep 6 00:20:56.370000 audit[1399]: NETFILTER_CFG table=filter:12 family=2 entries=1 op=nft_register_rule pid=1399 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 6 00:20:56.370000 audit[1399]: SYSCALL arch=c000003e syscall=46 success=yes exit=224 a0=3 a1=7fff80a9be60 a2=0 a3=7fff80a9be4c items=0 ppid=1341 pid=1399 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:20:56.370000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6A00444F434B45522D55534552 Sep 6 00:20:56.384282 kernel: Initializing XFRM netlink socket Sep 6 00:20:56.425853 env[1341]: time="2025-09-06T00:20:56.425813478Z" level=info msg="Default bridge (docker0) is assigned with an IP address 172.17.0.0/16. Daemon option --bip can be used to set a preferred IP address" Sep 6 00:20:56.458000 audit[1407]: NETFILTER_CFG table=nat:13 family=2 entries=2 op=nft_register_chain pid=1407 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 6 00:20:56.458000 audit[1407]: SYSCALL arch=c000003e syscall=46 success=yes exit=492 a0=3 a1=7ffcadec7460 a2=0 a3=7ffcadec744c items=0 ppid=1341 pid=1407 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:20:56.458000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D74006E6174002D4900504F5354524F5554494E47002D73003137322E31372E302E302F31360000002D6F00646F636B657230002D6A004D415351554552414445 Sep 6 00:20:56.472000 audit[1410]: NETFILTER_CFG table=nat:14 family=2 entries=1 op=nft_register_rule pid=1410 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 6 00:20:56.472000 audit[1410]: SYSCALL arch=c000003e syscall=46 success=yes exit=288 a0=3 a1=7ffe03990ee0 a2=0 a3=7ffe03990ecc items=0 ppid=1341 pid=1410 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:20:56.472000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D74006E6174002D4900444F434B4552002D6900646F636B657230002D6A0052455455524E Sep 6 00:20:56.477000 audit[1413]: NETFILTER_CFG table=filter:15 family=2 entries=1 op=nft_register_rule pid=1413 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 6 00:20:56.477000 audit[1413]: SYSCALL arch=c000003e syscall=46 success=yes exit=376 a0=3 a1=7ffd06eb27a0 a2=0 a3=7ffd06eb278c items=0 ppid=1341 pid=1413 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:20:56.477000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6900646F636B657230002D6F00646F636B657230002D6A00414343455054 Sep 6 00:20:56.480000 audit[1415]: NETFILTER_CFG table=filter:16 family=2 entries=1 op=nft_register_rule pid=1415 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 6 00:20:56.480000 audit[1415]: SYSCALL arch=c000003e syscall=46 success=yes exit=376 a0=3 a1=7ffd8c9200b0 a2=0 a3=7ffd8c92009c items=0 ppid=1341 pid=1415 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:20:56.480000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6900646F636B6572300000002D6F00646F636B657230002D6A00414343455054 Sep 6 00:20:56.484000 audit[1417]: NETFILTER_CFG table=nat:17 family=2 entries=2 op=nft_register_chain pid=1417 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 6 00:20:56.484000 audit[1417]: SYSCALL arch=c000003e syscall=46 success=yes exit=356 a0=3 a1=7fff3fed3d10 a2=0 a3=7fff3fed3cfc items=0 ppid=1341 pid=1417 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:20:56.484000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D74006E6174002D4100505245524F5554494E47002D6D006164647274797065002D2D6473742D74797065004C4F43414C002D6A00444F434B4552 Sep 6 00:20:56.487000 audit[1419]: NETFILTER_CFG table=nat:18 family=2 entries=2 op=nft_register_chain pid=1419 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 6 00:20:56.487000 audit[1419]: SYSCALL arch=c000003e syscall=46 success=yes exit=444 a0=3 a1=7ffca7e3bd30 a2=0 a3=7ffca7e3bd1c items=0 ppid=1341 pid=1419 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:20:56.487000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D74006E6174002D41004F5554505554002D6D006164647274797065002D2D6473742D74797065004C4F43414C002D6A00444F434B45520000002D2D647374003132372E302E302E302F38 Sep 6 00:20:56.490000 audit[1421]: NETFILTER_CFG table=filter:19 family=2 entries=1 op=nft_register_rule pid=1421 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 6 00:20:56.490000 audit[1421]: SYSCALL arch=c000003e syscall=46 success=yes exit=304 a0=3 a1=7ffdc80d9500 a2=0 a3=7ffdc80d94ec items=0 ppid=1341 pid=1421 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:20:56.490000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6F00646F636B657230002D6A00444F434B4552 Sep 6 00:20:56.502000 audit[1424]: NETFILTER_CFG table=filter:20 family=2 entries=1 op=nft_register_rule pid=1424 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 6 00:20:56.502000 audit[1424]: SYSCALL arch=c000003e syscall=46 success=yes exit=508 a0=3 a1=7ffcc4702f10 a2=0 a3=7ffcc4702efc items=0 ppid=1341 pid=1424 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:20:56.502000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6F00646F636B657230002D6D00636F6E6E747261636B002D2D637473746174650052454C415445442C45535441424C4953484544002D6A00414343455054 Sep 6 00:20:56.506000 audit[1426]: NETFILTER_CFG table=filter:21 family=2 entries=1 op=nft_register_rule pid=1426 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 6 00:20:56.506000 audit[1426]: SYSCALL arch=c000003e syscall=46 success=yes exit=240 a0=3 a1=7ffdd57c66a0 a2=0 a3=7ffdd57c668c items=0 ppid=1341 pid=1426 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:20:56.506000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6A00444F434B45522D49534F4C4154494F4E2D53544147452D31 Sep 6 00:20:56.510000 audit[1428]: NETFILTER_CFG table=filter:22 family=2 entries=1 op=nft_register_rule pid=1428 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 6 00:20:56.510000 audit[1428]: SYSCALL arch=c000003e syscall=46 success=yes exit=428 a0=3 a1=7ffc80a2a330 a2=0 a3=7ffc80a2a31c items=0 ppid=1341 pid=1428 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:20:56.510000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D740066696C746572002D4900444F434B45522D49534F4C4154494F4E2D53544147452D31002D6900646F636B6572300000002D6F00646F636B657230002D6A00444F434B45522D49534F4C4154494F4E2D53544147452D32 Sep 6 00:20:56.514000 audit[1430]: NETFILTER_CFG table=filter:23 family=2 entries=1 op=nft_register_rule pid=1430 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 6 00:20:56.514000 audit[1430]: SYSCALL arch=c000003e syscall=46 success=yes exit=312 a0=3 a1=7ffcde943700 a2=0 a3=7ffcde9436ec items=0 ppid=1341 pid=1430 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:20:56.514000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D740066696C746572002D4900444F434B45522D49534F4C4154494F4E2D53544147452D32002D6F00646F636B657230002D6A0044524F50 Sep 6 00:20:56.516561 systemd-networkd[1004]: docker0: Link UP Sep 6 00:20:56.527000 audit[1434]: NETFILTER_CFG table=filter:24 family=2 entries=1 op=nft_unregister_rule pid=1434 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 6 00:20:56.527000 audit[1434]: SYSCALL arch=c000003e syscall=46 success=yes exit=228 a0=3 a1=7ffc3bf84d30 a2=0 a3=7ffc3bf84d1c items=0 ppid=1341 pid=1434 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:20:56.527000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4400464F5257415244002D6A00444F434B45522D55534552 Sep 6 00:20:56.533000 audit[1435]: NETFILTER_CFG table=filter:25 family=2 entries=1 op=nft_register_rule pid=1435 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 6 00:20:56.533000 audit[1435]: SYSCALL arch=c000003e syscall=46 success=yes exit=224 a0=3 a1=7ffd13ee02c0 a2=0 a3=7ffd13ee02ac items=0 ppid=1341 pid=1435 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:20:56.533000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6A00444F434B45522D55534552 Sep 6 00:20:56.536208 env[1341]: time="2025-09-06T00:20:56.536154759Z" level=info msg="Loading containers: done." Sep 6 00:20:56.551762 systemd[1]: var-lib-docker-overlay2-opaque\x2dbug\x2dcheck2132787802-merged.mount: Deactivated successfully. Sep 6 00:20:56.557603 env[1341]: time="2025-09-06T00:20:56.557547842Z" level=warning msg="Not using native diff for overlay2, this may cause degraded performance for building images: kernel has CONFIG_OVERLAY_FS_REDIRECT_DIR enabled" storage-driver=overlay2 Sep 6 00:20:56.558175 env[1341]: time="2025-09-06T00:20:56.558134639Z" level=info msg="Docker daemon" commit=112bdf3343 graphdriver(s)=overlay2 version=20.10.23 Sep 6 00:20:56.558488 env[1341]: time="2025-09-06T00:20:56.558463480Z" level=info msg="Daemon has completed initialization" Sep 6 00:20:56.574691 systemd[1]: Started docker.service. Sep 6 00:20:56.573000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=docker comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 00:20:56.588472 env[1341]: time="2025-09-06T00:20:56.588385823Z" level=info msg="API listen on /run/docker.sock" Sep 6 00:20:56.614827 systemd[1]: Starting coreos-metadata.service... Sep 6 00:20:56.662148 coreos-metadata[1460]: Sep 06 00:20:56.661 INFO Fetching http://169.254.169.254/metadata/v1.json: Attempt #1 Sep 6 00:20:56.676371 coreos-metadata[1460]: Sep 06 00:20:56.676 INFO Fetch successful Sep 6 00:20:56.691721 systemd[1]: Finished coreos-metadata.service. Sep 6 00:20:56.690000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=coreos-metadata comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 00:20:57.598159 env[1194]: time="2025-09-06T00:20:57.598093241Z" level=info msg="PullImage \"registry.k8s.io/kube-apiserver:v1.31.12\"" Sep 6 00:20:58.145633 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount2713834225.mount: Deactivated successfully. Sep 6 00:20:59.604761 env[1194]: time="2025-09-06T00:20:59.604691660Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-apiserver:v1.31.12,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 6 00:20:59.606594 env[1194]: time="2025-09-06T00:20:59.606540674Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:b1963c5b49c1722b8f408deaf83aafca7f48f47fed0ed14e5c10e93cc55974a7,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 6 00:20:59.609021 env[1194]: time="2025-09-06T00:20:59.608964708Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/kube-apiserver:v1.31.12,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 6 00:20:59.610832 env[1194]: time="2025-09-06T00:20:59.610795783Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-apiserver@sha256:e9011c3bee8c06ecabd7816e119dca4e448c92f7a78acd891de3d2db1dc6c234,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 6 00:20:59.611751 env[1194]: time="2025-09-06T00:20:59.611707218Z" level=info msg="PullImage \"registry.k8s.io/kube-apiserver:v1.31.12\" returns image reference \"sha256:b1963c5b49c1722b8f408deaf83aafca7f48f47fed0ed14e5c10e93cc55974a7\"" Sep 6 00:20:59.612703 env[1194]: time="2025-09-06T00:20:59.612671163Z" level=info msg="PullImage \"registry.k8s.io/kube-controller-manager:v1.31.12\"" Sep 6 00:21:01.426212 env[1194]: time="2025-09-06T00:21:01.426128114Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-controller-manager:v1.31.12,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 6 00:21:01.429777 env[1194]: time="2025-09-06T00:21:01.429715993Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:200c1a99a6f2b9d3b0a6e9b7362663513589341e0e58bc3b953a373efa735dfd,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 6 00:21:01.433357 env[1194]: time="2025-09-06T00:21:01.433287710Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/kube-controller-manager:v1.31.12,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 6 00:21:01.435858 env[1194]: time="2025-09-06T00:21:01.435804500Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-controller-manager@sha256:d2862f94d87320267fddbd55db26556a267aa802e51d6b60f25786b4c428afc8,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 6 00:21:01.436982 env[1194]: time="2025-09-06T00:21:01.436936372Z" level=info msg="PullImage \"registry.k8s.io/kube-controller-manager:v1.31.12\" returns image reference \"sha256:200c1a99a6f2b9d3b0a6e9b7362663513589341e0e58bc3b953a373efa735dfd\"" Sep 6 00:21:01.437846 env[1194]: time="2025-09-06T00:21:01.437805293Z" level=info msg="PullImage \"registry.k8s.io/kube-scheduler:v1.31.12\"" Sep 6 00:21:02.951284 env[1194]: time="2025-09-06T00:21:02.951168375Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-scheduler:v1.31.12,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 6 00:21:02.953327 env[1194]: time="2025-09-06T00:21:02.953275884Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:bcdd9599681a9460a5539177a986dbdaf880ac56eeb117ab94adb8f37889efba,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 6 00:21:02.955634 env[1194]: time="2025-09-06T00:21:02.955586958Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/kube-scheduler:v1.31.12,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 6 00:21:02.957694 env[1194]: time="2025-09-06T00:21:02.957640386Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-scheduler@sha256:152943b7e30244f4415fd0a5860a2dccd91660fe983d30a28a10edb0cc8f6756,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 6 00:21:02.958672 env[1194]: time="2025-09-06T00:21:02.958630852Z" level=info msg="PullImage \"registry.k8s.io/kube-scheduler:v1.31.12\" returns image reference \"sha256:bcdd9599681a9460a5539177a986dbdaf880ac56eeb117ab94adb8f37889efba\"" Sep 6 00:21:02.959650 env[1194]: time="2025-09-06T00:21:02.959623886Z" level=info msg="PullImage \"registry.k8s.io/kube-proxy:v1.31.12\"" Sep 6 00:21:04.283368 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount1697002093.mount: Deactivated successfully. Sep 6 00:21:05.051490 env[1194]: time="2025-09-06T00:21:05.051365296Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-proxy:v1.31.12,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 6 00:21:05.053745 env[1194]: time="2025-09-06T00:21:05.053700415Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:507cc52f5f78c0cff25e904c76c18e6bfc90982e9cc2aa4dcb19033f21c3f679,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 6 00:21:05.055147 env[1194]: time="2025-09-06T00:21:05.055105840Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/kube-proxy:v1.31.12,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 6 00:21:05.057680 env[1194]: time="2025-09-06T00:21:05.057627517Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-proxy@sha256:90aa6b5f4065937521ff8438bc705317485d0be3f8b00a07145e697d92cc2cc6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 6 00:21:05.058290 env[1194]: time="2025-09-06T00:21:05.058220039Z" level=info msg="PullImage \"registry.k8s.io/kube-proxy:v1.31.12\" returns image reference \"sha256:507cc52f5f78c0cff25e904c76c18e6bfc90982e9cc2aa4dcb19033f21c3f679\"" Sep 6 00:21:05.063649 env[1194]: time="2025-09-06T00:21:05.061609464Z" level=info msg="PullImage \"registry.k8s.io/coredns/coredns:v1.11.3\"" Sep 6 00:21:05.255677 systemd[1]: kubelet.service: Scheduled restart job, restart counter is at 1. Sep 6 00:21:05.255929 systemd[1]: Stopped kubelet.service. Sep 6 00:21:05.256011 systemd[1]: kubelet.service: Consumed 1.375s CPU time. Sep 6 00:21:05.263006 kernel: kauditd_printk_skb: 140 callbacks suppressed Sep 6 00:21:05.263199 kernel: audit: type=1130 audit(1757118065.254:268): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 00:21:05.263266 kernel: audit: type=1131 audit(1757118065.254:269): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 00:21:05.254000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 00:21:05.254000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 00:21:05.258216 systemd[1]: Starting kubelet.service... Sep 6 00:21:05.416289 kernel: audit: type=1130 audit(1757118065.410:270): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 00:21:05.410000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 00:21:05.411152 systemd[1]: Started kubelet.service. Sep 6 00:21:05.542513 kubelet[1484]: E0906 00:21:05.542431 1484 run.go:72] "command failed" err="failed to load kubelet config file, path: /var/lib/kubelet/config.yaml, error: failed to load Kubelet config file /var/lib/kubelet/config.yaml, error failed to read kubelet config file \"/var/lib/kubelet/config.yaml\", error: open /var/lib/kubelet/config.yaml: no such file or directory" Sep 6 00:21:05.562000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' Sep 6 00:21:05.561878 systemd[1]: kubelet.service: Main process exited, code=exited, status=1/FAILURE Sep 6 00:21:05.562079 systemd[1]: kubelet.service: Failed with result 'exit-code'. Sep 6 00:21:05.569527 kernel: audit: type=1131 audit(1757118065.562:271): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' Sep 6 00:21:05.652738 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount2576637062.mount: Deactivated successfully. Sep 6 00:21:06.789223 env[1194]: time="2025-09-06T00:21:06.789150426Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/coredns/coredns:v1.11.3,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 6 00:21:06.791735 env[1194]: time="2025-09-06T00:21:06.791685357Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:c69fa2e9cbf5f42dc48af631e956d3f95724c13f91596bc567591790e5e36db6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 6 00:21:06.794475 env[1194]: time="2025-09-06T00:21:06.794402542Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/coredns/coredns:v1.11.3,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 6 00:21:06.795590 env[1194]: time="2025-09-06T00:21:06.795539268Z" level=info msg="PullImage \"registry.k8s.io/coredns/coredns:v1.11.3\" returns image reference \"sha256:c69fa2e9cbf5f42dc48af631e956d3f95724c13f91596bc567591790e5e36db6\"" Sep 6 00:21:06.796361 env[1194]: time="2025-09-06T00:21:06.796327500Z" level=info msg="PullImage \"registry.k8s.io/pause:3.10\"" Sep 6 00:21:06.796947 env[1194]: time="2025-09-06T00:21:06.796914565Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/coredns/coredns@sha256:9caabbf6238b189a65d0d6e6ac138de60d6a1c419e5a341fbbb7c78382559c6e,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 6 00:21:07.315881 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount2795547771.mount: Deactivated successfully. Sep 6 00:21:07.320410 env[1194]: time="2025-09-06T00:21:07.320351576Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/pause:3.10,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 6 00:21:07.322344 env[1194]: time="2025-09-06T00:21:07.322289931Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:873ed75102791e5b0b8a7fcd41606c92fcec98d56d05ead4ac5131650004c136,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 6 00:21:07.324993 env[1194]: time="2025-09-06T00:21:07.324922549Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause:3.10,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 6 00:21:07.327580 env[1194]: time="2025-09-06T00:21:07.327527702Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/pause@sha256:ee6521f290b2168b6e0935a181d4cff9be1ac3f505666ef0e3c98fae8199917a,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 6 00:21:07.329312 env[1194]: time="2025-09-06T00:21:07.328640091Z" level=info msg="PullImage \"registry.k8s.io/pause:3.10\" returns image reference \"sha256:873ed75102791e5b0b8a7fcd41606c92fcec98d56d05ead4ac5131650004c136\"" Sep 6 00:21:07.330121 env[1194]: time="2025-09-06T00:21:07.330092833Z" level=info msg="PullImage \"registry.k8s.io/etcd:3.5.15-0\"" Sep 6 00:21:07.977389 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount1421635538.mount: Deactivated successfully. Sep 6 00:21:10.342772 env[1194]: time="2025-09-06T00:21:10.342711523Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/etcd:3.5.15-0,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 6 00:21:10.344333 env[1194]: time="2025-09-06T00:21:10.344292355Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:2e96e5913fc06e3d26915af3d0f2ca5048cc4b6327e661e80da792cbf8d8d9d4,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 6 00:21:10.346282 env[1194]: time="2025-09-06T00:21:10.346225016Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/etcd:3.5.15-0,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 6 00:21:10.348046 env[1194]: time="2025-09-06T00:21:10.348013201Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/etcd@sha256:a6dc63e6e8cfa0307d7851762fa6b629afb18f28d8aa3fab5a6e91b4af60026a,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 6 00:21:10.348963 env[1194]: time="2025-09-06T00:21:10.348933411Z" level=info msg="PullImage \"registry.k8s.io/etcd:3.5.15-0\" returns image reference \"sha256:2e96e5913fc06e3d26915af3d0f2ca5048cc4b6327e661e80da792cbf8d8d9d4\"" Sep 6 00:21:13.935623 systemd[1]: Stopped kubelet.service. Sep 6 00:21:13.934000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 00:21:13.934000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 00:21:13.939549 systemd[1]: Starting kubelet.service... Sep 6 00:21:13.943683 kernel: audit: type=1130 audit(1757118073.934:272): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 00:21:13.943835 kernel: audit: type=1131 audit(1757118073.934:273): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 00:21:13.983265 systemd[1]: Reloading. Sep 6 00:21:14.137423 /usr/lib/systemd/system-generators/torcx-generator[1534]: time="2025-09-06T00:21:14Z" level=debug msg="common configuration parsed" base_dir=/var/lib/torcx/ conf_dir=/etc/torcx/ run_dir=/run/torcx/ store_paths="[/usr/share/torcx/store /usr/share/oem/torcx/store/3510.3.8 /usr/share/oem/torcx/store /var/lib/torcx/store/3510.3.8 /var/lib/torcx/store]" Sep 6 00:21:14.137451 /usr/lib/systemd/system-generators/torcx-generator[1534]: time="2025-09-06T00:21:14Z" level=info msg="torcx already run" Sep 6 00:21:14.248852 systemd[1]: /usr/lib/systemd/system/locksmithd.service:8: Unit uses CPUShares=; please use CPUWeight= instead. Support for CPUShares= will be removed soon. Sep 6 00:21:14.248873 systemd[1]: /usr/lib/systemd/system/locksmithd.service:9: Unit uses MemoryLimit=; please use MemoryMax= instead. Support for MemoryLimit= will be removed soon. Sep 6 00:21:14.269625 systemd[1]: /run/systemd/system/docker.socket:8: ListenStream= references a path below legacy directory /var/run/, updating /var/run/docker.sock → /run/docker.sock; please update the unit file accordingly. Sep 6 00:21:14.346000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:14.346000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:14.352139 kernel: audit: type=1400 audit(1757118074.346:274): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:14.352267 kernel: audit: type=1400 audit(1757118074.346:275): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:14.357923 kernel: audit: type=1400 audit(1757118074.351:276): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:14.358050 kernel: audit: type=1400 audit(1757118074.351:277): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:14.351000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:14.351000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:14.360544 kernel: audit: type=1400 audit(1757118074.351:278): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:14.351000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:14.363063 kernel: audit: type=1400 audit(1757118074.351:279): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:14.351000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:14.351000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:14.351000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:14.351000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:14.351000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:14.351000 audit: BPF prog-id=46 op=LOAD Sep 6 00:21:14.351000 audit: BPF prog-id=40 op=UNLOAD Sep 6 00:21:14.353000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:14.353000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:14.353000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:14.353000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:14.353000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:14.353000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:14.353000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:14.353000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:14.353000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:14.354000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:14.354000 audit: BPF prog-id=47 op=LOAD Sep 6 00:21:14.354000 audit: BPF prog-id=44 op=UNLOAD Sep 6 00:21:14.354000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:14.354000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:14.354000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:14.354000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:14.366258 kernel: audit: type=1400 audit(1757118074.351:280): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:14.366308 kernel: audit: audit_backlog=65 > audit_backlog_limit=64 Sep 6 00:21:14.354000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:14.354000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:14.354000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:14.354000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:14.354000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:14.356000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:14.356000 audit: BPF prog-id=48 op=LOAD Sep 6 00:21:14.356000 audit: BPF prog-id=30 op=UNLOAD Sep 6 00:21:14.357000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:14.357000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:14.357000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:14.357000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:14.357000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:14.357000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:14.357000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:14.357000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:14.357000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:14.359000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:14.359000 audit: BPF prog-id=49 op=LOAD Sep 6 00:21:14.359000 audit: BPF prog-id=41 op=UNLOAD Sep 6 00:21:14.359000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:14.359000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:14.359000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:14.359000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:14.359000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:14.359000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:14.359000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:14.359000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:14.359000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:14.359000 audit: BPF prog-id=50 op=LOAD Sep 6 00:21:14.359000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:14.359000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:14.359000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:14.359000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:14.359000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:14.359000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:14.359000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:14.359000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:14.361000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:14.361000 audit: BPF prog-id=51 op=LOAD Sep 6 00:21:14.361000 audit: BPF prog-id=42 op=UNLOAD Sep 6 00:21:14.361000 audit: BPF prog-id=43 op=UNLOAD Sep 6 00:21:14.364000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:14.364000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:14.364000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:14.364000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:14.364000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:14.364000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:14.364000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:14.364000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:14.365000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:14.365000 audit: BPF prog-id=52 op=LOAD Sep 6 00:21:14.365000 audit: BPF prog-id=39 op=UNLOAD Sep 6 00:21:14.367000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:14.367000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:14.367000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:14.367000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:14.367000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:14.367000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:14.367000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:14.367000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:14.367000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:14.367000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:14.367000 audit: BPF prog-id=53 op=LOAD Sep 6 00:21:14.367000 audit: BPF prog-id=31 op=UNLOAD Sep 6 00:21:14.367000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:14.367000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:14.367000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:14.367000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:14.367000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:14.367000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:14.367000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:14.367000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:14.367000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:14.367000 audit: BPF prog-id=54 op=LOAD Sep 6 00:21:14.367000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:14.367000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:14.367000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:14.367000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:14.367000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:14.367000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:14.367000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:14.367000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:14.367000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:14.367000 audit: BPF prog-id=55 op=LOAD Sep 6 00:21:14.367000 audit: BPF prog-id=32 op=UNLOAD Sep 6 00:21:14.367000 audit: BPF prog-id=33 op=UNLOAD Sep 6 00:21:14.368000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:14.368000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:14.368000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:14.368000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:14.368000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:14.368000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:14.368000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:14.368000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:14.368000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:14.368000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:14.368000 audit: BPF prog-id=56 op=LOAD Sep 6 00:21:14.368000 audit: BPF prog-id=34 op=UNLOAD Sep 6 00:21:14.368000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:14.368000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:14.368000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:14.368000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:14.368000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:14.368000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:14.368000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:14.368000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:14.368000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:14.368000 audit: BPF prog-id=57 op=LOAD Sep 6 00:21:14.368000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:14.368000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:14.368000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:14.368000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:14.368000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:14.368000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:14.368000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:14.368000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:14.368000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:14.368000 audit: BPF prog-id=58 op=LOAD Sep 6 00:21:14.368000 audit: BPF prog-id=35 op=UNLOAD Sep 6 00:21:14.368000 audit: BPF prog-id=36 op=UNLOAD Sep 6 00:21:14.371000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:14.371000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:14.371000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:14.371000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:14.371000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:14.371000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:14.371000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:14.371000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:14.371000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:14.371000 audit: BPF prog-id=59 op=LOAD Sep 6 00:21:14.371000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:14.371000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:14.371000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:14.371000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:14.371000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:14.371000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:14.371000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:14.371000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:14.371000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:14.371000 audit: BPF prog-id=60 op=LOAD Sep 6 00:21:14.371000 audit: BPF prog-id=37 op=UNLOAD Sep 6 00:21:14.371000 audit: BPF prog-id=38 op=UNLOAD Sep 6 00:21:14.400593 systemd[1]: kubelet.service: Control process exited, code=killed, status=15/TERM Sep 6 00:21:14.400674 systemd[1]: kubelet.service: Failed with result 'signal'. Sep 6 00:21:14.400998 systemd[1]: Stopped kubelet.service. Sep 6 00:21:14.399000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' Sep 6 00:21:14.403675 systemd[1]: Starting kubelet.service... Sep 6 00:21:14.576784 systemd[1]: Started kubelet.service. Sep 6 00:21:14.576000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 00:21:14.652059 kubelet[1587]: Flag --container-runtime-endpoint has been deprecated, This parameter should be set via the config file specified by the Kubelet's --config flag. See https://kubernetes.io/docs/tasks/administer-cluster/kubelet-config-file/ for more information. Sep 6 00:21:14.652484 kubelet[1587]: Flag --pod-infra-container-image has been deprecated, will be removed in a future release. Image garbage collector will get sandbox image information from CRI. Sep 6 00:21:14.652552 kubelet[1587]: Flag --volume-plugin-dir has been deprecated, This parameter should be set via the config file specified by the Kubelet's --config flag. See https://kubernetes.io/docs/tasks/administer-cluster/kubelet-config-file/ for more information. Sep 6 00:21:14.652716 kubelet[1587]: I0906 00:21:14.652670 1587 server.go:211] "--pod-infra-container-image will not be pruned by the image garbage collector in kubelet and should also be set in the remote runtime" Sep 6 00:21:15.193688 kubelet[1587]: I0906 00:21:15.193642 1587 server.go:491] "Kubelet version" kubeletVersion="v1.31.8" Sep 6 00:21:15.193894 kubelet[1587]: I0906 00:21:15.193875 1587 server.go:493] "Golang settings" GOGC="" GOMAXPROCS="" GOTRACEBACK="" Sep 6 00:21:15.194359 kubelet[1587]: I0906 00:21:15.194338 1587 server.go:934] "Client rotation is on, will bootstrap in background" Sep 6 00:21:15.229985 kubelet[1587]: E0906 00:21:15.229930 1587 certificate_manager.go:562] "Unhandled Error" err="kubernetes.io/kube-apiserver-client-kubelet: Failed while requesting a signed certificate from the control plane: cannot create certificate signing request: Post \"https://147.182.198.71:6443/apis/certificates.k8s.io/v1/certificatesigningrequests\": dial tcp 147.182.198.71:6443: connect: connection refused" logger="UnhandledError" Sep 6 00:21:15.231276 kubelet[1587]: I0906 00:21:15.231229 1587 dynamic_cafile_content.go:160] "Starting controller" name="client-ca-bundle::/etc/kubernetes/pki/ca.crt" Sep 6 00:21:15.241169 kubelet[1587]: E0906 00:21:15.241130 1587 log.go:32] "RuntimeConfig from runtime service failed" err="rpc error: code = Unimplemented desc = unknown method RuntimeConfig for service runtime.v1.RuntimeService" Sep 6 00:21:15.241169 kubelet[1587]: I0906 00:21:15.241161 1587 server.go:1408] "CRI implementation should be updated to support RuntimeConfig when KubeletCgroupDriverFromCRI feature gate has been enabled. Falling back to using cgroupDriver from kubelet config." Sep 6 00:21:15.247515 kubelet[1587]: I0906 00:21:15.247465 1587 server.go:749] "--cgroups-per-qos enabled, but --cgroup-root was not specified. defaulting to /" Sep 6 00:21:15.248794 kubelet[1587]: I0906 00:21:15.248754 1587 swap_util.go:113] "Swap is on" /proc/swaps contents="Filename\t\t\t\tType\t\tSize\t\tUsed\t\tPriority" Sep 6 00:21:15.249272 kubelet[1587]: I0906 00:21:15.249214 1587 container_manager_linux.go:264] "Container manager verified user specified cgroup-root exists" cgroupRoot=[] Sep 6 00:21:15.249726 kubelet[1587]: I0906 00:21:15.249387 1587 container_manager_linux.go:269] "Creating Container Manager object based on Node Config" nodeConfig={"NodeName":"ci-3510.3.8-n-86fdecb492","RuntimeCgroupsName":"","SystemCgroupsName":"","KubeletCgroupsName":"","KubeletOOMScoreAdj":-999,"ContainerRuntime":"","CgroupsPerQOS":true,"CgroupRoot":"/","CgroupDriver":"systemd","KubeletRootDir":"/var/lib/kubelet","ProtectKernelDefaults":false,"KubeReservedCgroupName":"","SystemReservedCgroupName":"","ReservedSystemCPUs":{},"EnforceNodeAllocatable":{"pods":{}},"KubeReserved":null,"SystemReserved":null,"HardEvictionThresholds":[{"Signal":"nodefs.available","Operator":"LessThan","Value":{"Quantity":null,"Percentage":0.1},"GracePeriod":0,"MinReclaim":null},{"Signal":"nodefs.inodesFree","Operator":"LessThan","Value":{"Quantity":null,"Percentage":0.05},"GracePeriod":0,"MinReclaim":null},{"Signal":"imagefs.available","Operator":"LessThan","Value":{"Quantity":null,"Percentage":0.15},"GracePeriod":0,"MinReclaim":null},{"Signal":"imagefs.inodesFree","Operator":"LessThan","Value":{"Quantity":null,"Percentage":0.05},"GracePeriod":0,"MinReclaim":null},{"Signal":"memory.available","Operator":"LessThan","Value":{"Quantity":"100Mi","Percentage":0},"GracePeriod":0,"MinReclaim":null}],"QOSReserved":{},"CPUManagerPolicy":"none","CPUManagerPolicyOptions":null,"TopologyManagerScope":"container","CPUManagerReconcilePeriod":10000000000,"ExperimentalMemoryManagerPolicy":"None","ExperimentalMemoryManagerReservedMemory":null,"PodPidsLimit":-1,"EnforceCPULimits":true,"CPUCFSQuotaPeriod":100000000,"TopologyManagerPolicy":"none","TopologyManagerPolicyOptions":null,"CgroupVersion":2} Sep 6 00:21:15.250010 kubelet[1587]: I0906 00:21:15.249987 1587 topology_manager.go:138] "Creating topology manager with none policy" Sep 6 00:21:15.250117 kubelet[1587]: I0906 00:21:15.250101 1587 container_manager_linux.go:300] "Creating device plugin manager" Sep 6 00:21:15.250406 kubelet[1587]: I0906 00:21:15.250383 1587 state_mem.go:36] "Initialized new in-memory state store" Sep 6 00:21:15.255366 kubelet[1587]: I0906 00:21:15.255295 1587 kubelet.go:408] "Attempting to sync node with API server" Sep 6 00:21:15.255633 kubelet[1587]: I0906 00:21:15.255616 1587 kubelet.go:303] "Adding static pod path" path="/etc/kubernetes/manifests" Sep 6 00:21:15.255732 kubelet[1587]: I0906 00:21:15.255722 1587 kubelet.go:314] "Adding apiserver pod source" Sep 6 00:21:15.255813 kubelet[1587]: I0906 00:21:15.255800 1587 apiserver.go:42] "Waiting for node sync before watching apiserver pods" Sep 6 00:21:15.256722 kubelet[1587]: W0906 00:21:15.256557 1587 reflector.go:561] k8s.io/client-go/informers/factory.go:160: failed to list *v1.Node: Get "https://147.182.198.71:6443/api/v1/nodes?fieldSelector=metadata.name%3Dci-3510.3.8-n-86fdecb492&limit=500&resourceVersion=0": dial tcp 147.182.198.71:6443: connect: connection refused Sep 6 00:21:15.256722 kubelet[1587]: E0906 00:21:15.256626 1587 reflector.go:158] "Unhandled Error" err="k8s.io/client-go/informers/factory.go:160: Failed to watch *v1.Node: failed to list *v1.Node: Get \"https://147.182.198.71:6443/api/v1/nodes?fieldSelector=metadata.name%3Dci-3510.3.8-n-86fdecb492&limit=500&resourceVersion=0\": dial tcp 147.182.198.71:6443: connect: connection refused" logger="UnhandledError" Sep 6 00:21:15.266502 kubelet[1587]: W0906 00:21:15.266424 1587 reflector.go:561] k8s.io/client-go/informers/factory.go:160: failed to list *v1.Service: Get "https://147.182.198.71:6443/api/v1/services?fieldSelector=spec.clusterIP%21%3DNone&limit=500&resourceVersion=0": dial tcp 147.182.198.71:6443: connect: connection refused Sep 6 00:21:15.266827 kubelet[1587]: E0906 00:21:15.266785 1587 reflector.go:158] "Unhandled Error" err="k8s.io/client-go/informers/factory.go:160: Failed to watch *v1.Service: failed to list *v1.Service: Get \"https://147.182.198.71:6443/api/v1/services?fieldSelector=spec.clusterIP%21%3DNone&limit=500&resourceVersion=0\": dial tcp 147.182.198.71:6443: connect: connection refused" logger="UnhandledError" Sep 6 00:21:15.267134 kubelet[1587]: I0906 00:21:15.267110 1587 kuberuntime_manager.go:262] "Container runtime initialized" containerRuntime="containerd" version="1.6.16" apiVersion="v1" Sep 6 00:21:15.267978 kubelet[1587]: I0906 00:21:15.267952 1587 kubelet.go:837] "Not starting ClusterTrustBundle informer because we are in static kubelet mode" Sep 6 00:21:15.269406 kubelet[1587]: W0906 00:21:15.269374 1587 probe.go:272] Flexvolume plugin directory at /opt/libexec/kubernetes/kubelet-plugins/volume/exec/ does not exist. Recreating. Sep 6 00:21:15.276001 kubelet[1587]: I0906 00:21:15.275959 1587 server.go:1274] "Started kubelet" Sep 6 00:21:15.285000 audit[1587]: AVC avc: denied { mac_admin } for pid=1587 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:15.285000 audit: SELINUX_ERR op=setxattr invalid_context="system_u:object_r:container_file_t:s0" Sep 6 00:21:15.285000 audit[1587]: SYSCALL arch=c000003e syscall=188 success=no exit=-22 a0=c000b27a70 a1=c000ae77e8 a2=c000b27a40 a3=25 items=0 ppid=1 pid=1587 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/usr/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:21:15.285000 audit: PROCTITLE proctitle=2F7573722F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 Sep 6 00:21:15.287245 kubelet[1587]: I0906 00:21:15.287203 1587 kubelet.go:1430] "Unprivileged containerized plugins might not work, could not set selinux context on plugin registration dir" path="/var/lib/kubelet/plugins_registry" err="setxattr /var/lib/kubelet/plugins_registry: invalid argument" Sep 6 00:21:15.286000 audit[1587]: AVC avc: denied { mac_admin } for pid=1587 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:15.286000 audit: SELINUX_ERR op=setxattr invalid_context="system_u:object_r:container_file_t:s0" Sep 6 00:21:15.286000 audit[1587]: SYSCALL arch=c000003e syscall=188 success=no exit=-22 a0=c0008ab020 a1=c000ae7800 a2=c000b27b00 a3=25 items=0 ppid=1 pid=1587 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/usr/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:21:15.286000 audit: PROCTITLE proctitle=2F7573722F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 Sep 6 00:21:15.287712 kubelet[1587]: I0906 00:21:15.287686 1587 kubelet.go:1434] "Unprivileged containerized plugins might not work, could not set selinux context on plugins dir" path="/var/lib/kubelet/plugins" err="setxattr /var/lib/kubelet/plugins: invalid argument" Sep 6 00:21:15.287869 kubelet[1587]: I0906 00:21:15.287856 1587 fs_resource_analyzer.go:67] "Starting FS ResourceAnalyzer" Sep 6 00:21:15.290000 audit[1599]: NETFILTER_CFG table=mangle:26 family=2 entries=2 op=nft_register_chain pid=1599 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 6 00:21:15.290000 audit[1599]: SYSCALL arch=c000003e syscall=46 success=yes exit=136 a0=3 a1=7ffce2322910 a2=0 a3=7ffce23228fc items=0 ppid=1587 pid=1599 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:21:15.290000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D49505441424C45532D48494E54002D74006D616E676C65 Sep 6 00:21:15.293598 kubelet[1587]: E0906 00:21:15.292288 1587 event.go:368] "Unable to write event (may retry after sleeping)" err="Post \"https://147.182.198.71:6443/api/v1/namespaces/default/events\": dial tcp 147.182.198.71:6443: connect: connection refused" event="&Event{ObjectMeta:{ci-3510.3.8-n-86fdecb492.18628994713ce8f3 default 0 0001-01-01 00:00:00 +0000 UTC map[] map[] [] [] []},InvolvedObject:ObjectReference{Kind:Node,Namespace:,Name:ci-3510.3.8-n-86fdecb492,UID:ci-3510.3.8-n-86fdecb492,APIVersion:,ResourceVersion:,FieldPath:,},Reason:Starting,Message:Starting kubelet.,Source:EventSource{Component:kubelet,Host:ci-3510.3.8-n-86fdecb492,},FirstTimestamp:2025-09-06 00:21:15.275897075 +0000 UTC m=+0.683804791,LastTimestamp:2025-09-06 00:21:15.275897075 +0000 UTC m=+0.683804791,Count:1,Type:Normal,EventTime:0001-01-01 00:00:00 +0000 UTC,Series:nil,Action:,Related:nil,ReportingController:kubelet,ReportingInstance:ci-3510.3.8-n-86fdecb492,}" Sep 6 00:21:15.293000 audit[1600]: NETFILTER_CFG table=filter:27 family=2 entries=1 op=nft_register_chain pid=1600 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 6 00:21:15.293000 audit[1600]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7ffc992aca40 a2=0 a3=7ffc992aca2c items=0 ppid=1587 pid=1600 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:21:15.293000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D4649524557414C4C002D740066696C746572 Sep 6 00:21:15.294660 kubelet[1587]: I0906 00:21:15.294614 1587 server.go:163] "Starting to listen" address="0.0.0.0" port=10250 Sep 6 00:21:15.294923 kubelet[1587]: I0906 00:21:15.294875 1587 ratelimit.go:55] "Setting rate limiting for endpoint" service="podresources" qps=100 burstTokens=10 Sep 6 00:21:15.295302 kubelet[1587]: I0906 00:21:15.295286 1587 server.go:236] "Starting to serve the podresources API" endpoint="unix:/var/lib/kubelet/pod-resources/kubelet.sock" Sep 6 00:21:15.295707 kubelet[1587]: I0906 00:21:15.295687 1587 dynamic_serving_content.go:135] "Starting controller" name="kubelet-server-cert-files::/var/lib/kubelet/pki/kubelet.crt::/var/lib/kubelet/pki/kubelet.key" Sep 6 00:21:15.295854 kubelet[1587]: I0906 00:21:15.295836 1587 server.go:449] "Adding debug handlers to kubelet server" Sep 6 00:21:15.297347 kubelet[1587]: I0906 00:21:15.297330 1587 volume_manager.go:289] "Starting Kubelet Volume Manager" Sep 6 00:21:15.297699 kubelet[1587]: E0906 00:21:15.297676 1587 kubelet_node_status.go:453] "Error getting the current node from lister" err="node \"ci-3510.3.8-n-86fdecb492\" not found" Sep 6 00:21:15.298314 kubelet[1587]: I0906 00:21:15.298298 1587 desired_state_of_world_populator.go:147] "Desired state populator starts to run" Sep 6 00:21:15.298436 kubelet[1587]: I0906 00:21:15.298425 1587 reconciler.go:26] "Reconciler: start to sync state" Sep 6 00:21:15.300385 kubelet[1587]: I0906 00:21:15.300361 1587 factory.go:221] Registration of the systemd container factory successfully Sep 6 00:21:15.300506 kubelet[1587]: I0906 00:21:15.300478 1587 factory.go:219] Registration of the crio container factory failed: Get "http://%2Fvar%2Frun%2Fcrio%2Fcrio.sock/info": dial unix /var/run/crio/crio.sock: connect: no such file or directory Sep 6 00:21:15.301091 kubelet[1587]: W0906 00:21:15.301033 1587 reflector.go:561] k8s.io/client-go/informers/factory.go:160: failed to list *v1.CSIDriver: Get "https://147.182.198.71:6443/apis/storage.k8s.io/v1/csidrivers?limit=500&resourceVersion=0": dial tcp 147.182.198.71:6443: connect: connection refused Sep 6 00:21:15.301157 kubelet[1587]: E0906 00:21:15.301103 1587 reflector.go:158] "Unhandled Error" err="k8s.io/client-go/informers/factory.go:160: Failed to watch *v1.CSIDriver: failed to list *v1.CSIDriver: Get \"https://147.182.198.71:6443/apis/storage.k8s.io/v1/csidrivers?limit=500&resourceVersion=0\": dial tcp 147.182.198.71:6443: connect: connection refused" logger="UnhandledError" Sep 6 00:21:15.301382 kubelet[1587]: E0906 00:21:15.301331 1587 controller.go:145] "Failed to ensure lease exists, will retry" err="Get \"https://147.182.198.71:6443/apis/coordination.k8s.io/v1/namespaces/kube-node-lease/leases/ci-3510.3.8-n-86fdecb492?timeout=10s\": dial tcp 147.182.198.71:6443: connect: connection refused" interval="200ms" Sep 6 00:21:15.302396 kubelet[1587]: E0906 00:21:15.302378 1587 kubelet.go:1478] "Image garbage collection failed once. Stats initialization may not have completed yet" err="invalid capacity 0 on image filesystem" Sep 6 00:21:15.303290 kubelet[1587]: I0906 00:21:15.303267 1587 factory.go:221] Registration of the containerd container factory successfully Sep 6 00:21:15.302000 audit[1602]: NETFILTER_CFG table=filter:28 family=2 entries=2 op=nft_register_chain pid=1602 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 6 00:21:15.302000 audit[1602]: SYSCALL arch=c000003e syscall=46 success=yes exit=312 a0=3 a1=7ffc30500f80 a2=0 a3=7ffc30500f6c items=0 ppid=1587 pid=1602 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:21:15.302000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D49004F5554505554002D740066696C746572002D6A004B5542452D4649524557414C4C Sep 6 00:21:15.316000 audit[1605]: NETFILTER_CFG table=filter:29 family=2 entries=2 op=nft_register_chain pid=1605 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 6 00:21:15.316000 audit[1605]: SYSCALL arch=c000003e syscall=46 success=yes exit=312 a0=3 a1=7fffee45ced0 a2=0 a3=7fffee45cebc items=0 ppid=1587 pid=1605 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:21:15.316000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6A004B5542452D4649524557414C4C Sep 6 00:21:15.319710 kubelet[1587]: I0906 00:21:15.319675 1587 cpu_manager.go:214] "Starting CPU manager" policy="none" Sep 6 00:21:15.319710 kubelet[1587]: I0906 00:21:15.319701 1587 cpu_manager.go:215] "Reconciling" reconcilePeriod="10s" Sep 6 00:21:15.319710 kubelet[1587]: I0906 00:21:15.319722 1587 state_mem.go:36] "Initialized new in-memory state store" Sep 6 00:21:15.322018 kubelet[1587]: I0906 00:21:15.321991 1587 policy_none.go:49] "None policy: Start" Sep 6 00:21:15.322805 kubelet[1587]: I0906 00:21:15.322777 1587 memory_manager.go:170] "Starting memorymanager" policy="None" Sep 6 00:21:15.322805 kubelet[1587]: I0906 00:21:15.322808 1587 state_mem.go:35] "Initializing new in-memory state store" Sep 6 00:21:15.328729 systemd[1]: Created slice kubepods.slice. Sep 6 00:21:15.335816 systemd[1]: Created slice kubepods-burstable.slice. Sep 6 00:21:15.339937 systemd[1]: Created slice kubepods-besteffort.slice. Sep 6 00:21:15.344000 audit[1610]: NETFILTER_CFG table=filter:30 family=2 entries=1 op=nft_register_rule pid=1610 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 6 00:21:15.344000 audit[1610]: SYSCALL arch=c000003e syscall=46 success=yes exit=924 a0=3 a1=7ffcf118d010 a2=0 a3=7ffcf118cffc items=0 ppid=1587 pid=1610 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:21:15.344000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D41004B5542452D4649524557414C4C002D740066696C746572002D6D00636F6D6D656E74002D2D636F6D6D656E7400626C6F636B20696E636F6D696E67206C6F63616C6E657420636F6E6E656374696F6E73002D2D647374003132372E302E302E302F38 Sep 6 00:21:15.346993 kubelet[1587]: I0906 00:21:15.346964 1587 manager.go:513] "Failed to read data from checkpoint" checkpoint="kubelet_internal_checkpoint" err="checkpoint is not found" Sep 6 00:21:15.345000 audit[1587]: AVC avc: denied { mac_admin } for pid=1587 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:15.345000 audit: SELINUX_ERR op=setxattr invalid_context="system_u:object_r:container_file_t:s0" Sep 6 00:21:15.345000 audit[1587]: SYSCALL arch=c000003e syscall=188 success=no exit=-22 a0=c000dfec30 a1=c000e9c240 a2=c000dfec00 a3=25 items=0 ppid=1 pid=1587 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/usr/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:21:15.345000 audit: PROCTITLE proctitle=2F7573722F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 Sep 6 00:21:15.347507 kubelet[1587]: I0906 00:21:15.347487 1587 server.go:88] "Unprivileged containerized plugins might not work. Could not set selinux context on socket dir" path="/var/lib/kubelet/device-plugins/" err="setxattr /var/lib/kubelet/device-plugins/: invalid argument" Sep 6 00:21:15.347796 kubelet[1587]: I0906 00:21:15.347748 1587 kubelet_network_linux.go:50] "Initialized iptables rules." protocol="IPv4" Sep 6 00:21:15.347958 kubelet[1587]: I0906 00:21:15.347942 1587 eviction_manager.go:189] "Eviction manager: starting control loop" Sep 6 00:21:15.348050 kubelet[1587]: I0906 00:21:15.348018 1587 container_log_manager.go:189] "Initializing container log rotate workers" workers=1 monitorPeriod="10s" Sep 6 00:21:15.349865 kubelet[1587]: I0906 00:21:15.349836 1587 plugin_manager.go:118] "Starting Kubelet Plugin Manager" Sep 6 00:21:15.349000 audit[1612]: NETFILTER_CFG table=mangle:31 family=10 entries=2 op=nft_register_chain pid=1612 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Sep 6 00:21:15.349000 audit[1612]: SYSCALL arch=c000003e syscall=46 success=yes exit=136 a0=3 a1=7ffcc6aead00 a2=0 a3=7ffcc6aeacec items=0 ppid=1587 pid=1612 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:21:15.349000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D49505441424C45532D48494E54002D74006D616E676C65 Sep 6 00:21:15.352413 kubelet[1587]: I0906 00:21:15.352383 1587 kubelet_network_linux.go:50] "Initialized iptables rules." protocol="IPv6" Sep 6 00:21:15.352546 kubelet[1587]: I0906 00:21:15.352531 1587 status_manager.go:217] "Starting to sync pod status with apiserver" Sep 6 00:21:15.352915 kubelet[1587]: I0906 00:21:15.352893 1587 kubelet.go:2321] "Starting kubelet main sync loop" Sep 6 00:21:15.353083 kubelet[1587]: E0906 00:21:15.353063 1587 kubelet.go:2345] "Skipping pod synchronization" err="PLEG is not healthy: pleg has yet to be successful" Sep 6 00:21:15.353375 kubelet[1587]: E0906 00:21:15.353348 1587 eviction_manager.go:285] "Eviction manager: failed to get summary stats" err="failed to get node info: node \"ci-3510.3.8-n-86fdecb492\" not found" Sep 6 00:21:15.355931 kubelet[1587]: W0906 00:21:15.355866 1587 reflector.go:561] k8s.io/client-go/informers/factory.go:160: failed to list *v1.RuntimeClass: Get "https://147.182.198.71:6443/apis/node.k8s.io/v1/runtimeclasses?limit=500&resourceVersion=0": dial tcp 147.182.198.71:6443: connect: connection refused Sep 6 00:21:15.356139 kubelet[1587]: E0906 00:21:15.356102 1587 reflector.go:158] "Unhandled Error" err="k8s.io/client-go/informers/factory.go:160: Failed to watch *v1.RuntimeClass: failed to list *v1.RuntimeClass: Get \"https://147.182.198.71:6443/apis/node.k8s.io/v1/runtimeclasses?limit=500&resourceVersion=0\": dial tcp 147.182.198.71:6443: connect: connection refused" logger="UnhandledError" Sep 6 00:21:15.355000 audit[1613]: NETFILTER_CFG table=mangle:32 family=2 entries=1 op=nft_register_chain pid=1613 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 6 00:21:15.355000 audit[1613]: SYSCALL arch=c000003e syscall=46 success=yes exit=104 a0=3 a1=7ffd36a8e5d0 a2=0 a3=7ffd36a8e5bc items=0 ppid=1587 pid=1613 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:21:15.355000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D4B5542454C45542D43414E415259002D74006D616E676C65 Sep 6 00:21:15.358000 audit[1614]: NETFILTER_CFG table=mangle:33 family=10 entries=1 op=nft_register_chain pid=1614 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Sep 6 00:21:15.358000 audit[1614]: SYSCALL arch=c000003e syscall=46 success=yes exit=104 a0=3 a1=7fffb9cc8130 a2=0 a3=7fffb9cc811c items=0 ppid=1587 pid=1614 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:21:15.358000 audit[1615]: NETFILTER_CFG table=nat:34 family=2 entries=1 op=nft_register_chain pid=1615 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 6 00:21:15.358000 audit[1615]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7ffddf286e50 a2=0 a3=7ffddf286e3c items=0 ppid=1587 pid=1615 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:21:15.358000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D4B5542454C45542D43414E415259002D74006E6174 Sep 6 00:21:15.358000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D4B5542454C45542D43414E415259002D74006D616E676C65 Sep 6 00:21:15.360000 audit[1616]: NETFILTER_CFG table=filter:35 family=2 entries=1 op=nft_register_chain pid=1616 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 6 00:21:15.360000 audit[1616]: SYSCALL arch=c000003e syscall=46 success=yes exit=104 a0=3 a1=7fffa0242ec0 a2=0 a3=7fffa0242eac items=0 ppid=1587 pid=1616 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:21:15.360000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D4B5542454C45542D43414E415259002D740066696C746572 Sep 6 00:21:15.361000 audit[1617]: NETFILTER_CFG table=nat:36 family=10 entries=2 op=nft_register_chain pid=1617 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Sep 6 00:21:15.361000 audit[1617]: SYSCALL arch=c000003e syscall=46 success=yes exit=128 a0=3 a1=7ffd99c2d9f0 a2=0 a3=7ffd99c2d9dc items=0 ppid=1587 pid=1617 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:21:15.361000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D4B5542454C45542D43414E415259002D74006E6174 Sep 6 00:21:15.363000 audit[1618]: NETFILTER_CFG table=filter:37 family=10 entries=2 op=nft_register_chain pid=1618 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Sep 6 00:21:15.363000 audit[1618]: SYSCALL arch=c000003e syscall=46 success=yes exit=136 a0=3 a1=7fffd84cfe90 a2=0 a3=7fffd84cfe7c items=0 ppid=1587 pid=1618 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:21:15.363000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D4B5542454C45542D43414E415259002D740066696C746572 Sep 6 00:21:15.451014 kubelet[1587]: I0906 00:21:15.449938 1587 kubelet_node_status.go:72] "Attempting to register node" node="ci-3510.3.8-n-86fdecb492" Sep 6 00:21:15.451014 kubelet[1587]: E0906 00:21:15.450945 1587 kubelet_node_status.go:95] "Unable to register node with API server" err="Post \"https://147.182.198.71:6443/api/v1/nodes\": dial tcp 147.182.198.71:6443: connect: connection refused" node="ci-3510.3.8-n-86fdecb492" Sep 6 00:21:15.467486 systemd[1]: Created slice kubepods-burstable-pod9d02cb95976b735500645fa2441ab491.slice. Sep 6 00:21:15.478168 systemd[1]: Created slice kubepods-burstable-pod4861086eeae139b8582e7f5c37b0fb45.slice. Sep 6 00:21:15.485347 systemd[1]: Created slice kubepods-burstable-podcf93944aca1773e88499dc4ad2afd181.slice. Sep 6 00:21:15.502225 kubelet[1587]: E0906 00:21:15.502137 1587 controller.go:145] "Failed to ensure lease exists, will retry" err="Get \"https://147.182.198.71:6443/apis/coordination.k8s.io/v1/namespaces/kube-node-lease/leases/ci-3510.3.8-n-86fdecb492?timeout=10s\": dial tcp 147.182.198.71:6443: connect: connection refused" interval="400ms" Sep 6 00:21:15.600779 kubelet[1587]: I0906 00:21:15.600729 1587 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"k8s-certs\" (UniqueName: \"kubernetes.io/host-path/4861086eeae139b8582e7f5c37b0fb45-k8s-certs\") pod \"kube-controller-manager-ci-3510.3.8-n-86fdecb492\" (UID: \"4861086eeae139b8582e7f5c37b0fb45\") " pod="kube-system/kube-controller-manager-ci-3510.3.8-n-86fdecb492" Sep 6 00:21:15.600779 kubelet[1587]: I0906 00:21:15.600778 1587 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kubeconfig\" (UniqueName: \"kubernetes.io/host-path/cf93944aca1773e88499dc4ad2afd181-kubeconfig\") pod \"kube-scheduler-ci-3510.3.8-n-86fdecb492\" (UID: \"cf93944aca1773e88499dc4ad2afd181\") " pod="kube-system/kube-scheduler-ci-3510.3.8-n-86fdecb492" Sep 6 00:21:15.600952 kubelet[1587]: I0906 00:21:15.600802 1587 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"ca-certs\" (UniqueName: \"kubernetes.io/host-path/9d02cb95976b735500645fa2441ab491-ca-certs\") pod \"kube-apiserver-ci-3510.3.8-n-86fdecb492\" (UID: \"9d02cb95976b735500645fa2441ab491\") " pod="kube-system/kube-apiserver-ci-3510.3.8-n-86fdecb492" Sep 6 00:21:15.600952 kubelet[1587]: I0906 00:21:15.600821 1587 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"usr-share-ca-certificates\" (UniqueName: \"kubernetes.io/host-path/9d02cb95976b735500645fa2441ab491-usr-share-ca-certificates\") pod \"kube-apiserver-ci-3510.3.8-n-86fdecb492\" (UID: \"9d02cb95976b735500645fa2441ab491\") " pod="kube-system/kube-apiserver-ci-3510.3.8-n-86fdecb492" Sep 6 00:21:15.600952 kubelet[1587]: I0906 00:21:15.600841 1587 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"ca-certs\" (UniqueName: \"kubernetes.io/host-path/4861086eeae139b8582e7f5c37b0fb45-ca-certs\") pod \"kube-controller-manager-ci-3510.3.8-n-86fdecb492\" (UID: \"4861086eeae139b8582e7f5c37b0fb45\") " pod="kube-system/kube-controller-manager-ci-3510.3.8-n-86fdecb492" Sep 6 00:21:15.600952 kubelet[1587]: I0906 00:21:15.600858 1587 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"flexvolume-dir\" (UniqueName: \"kubernetes.io/host-path/4861086eeae139b8582e7f5c37b0fb45-flexvolume-dir\") pod \"kube-controller-manager-ci-3510.3.8-n-86fdecb492\" (UID: \"4861086eeae139b8582e7f5c37b0fb45\") " pod="kube-system/kube-controller-manager-ci-3510.3.8-n-86fdecb492" Sep 6 00:21:15.600952 kubelet[1587]: I0906 00:21:15.600874 1587 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"k8s-certs\" (UniqueName: \"kubernetes.io/host-path/9d02cb95976b735500645fa2441ab491-k8s-certs\") pod \"kube-apiserver-ci-3510.3.8-n-86fdecb492\" (UID: \"9d02cb95976b735500645fa2441ab491\") " pod="kube-system/kube-apiserver-ci-3510.3.8-n-86fdecb492" Sep 6 00:21:15.601116 kubelet[1587]: I0906 00:21:15.600891 1587 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kubeconfig\" (UniqueName: \"kubernetes.io/host-path/4861086eeae139b8582e7f5c37b0fb45-kubeconfig\") pod \"kube-controller-manager-ci-3510.3.8-n-86fdecb492\" (UID: \"4861086eeae139b8582e7f5c37b0fb45\") " pod="kube-system/kube-controller-manager-ci-3510.3.8-n-86fdecb492" Sep 6 00:21:15.601116 kubelet[1587]: I0906 00:21:15.600910 1587 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"usr-share-ca-certificates\" (UniqueName: \"kubernetes.io/host-path/4861086eeae139b8582e7f5c37b0fb45-usr-share-ca-certificates\") pod \"kube-controller-manager-ci-3510.3.8-n-86fdecb492\" (UID: \"4861086eeae139b8582e7f5c37b0fb45\") " pod="kube-system/kube-controller-manager-ci-3510.3.8-n-86fdecb492" Sep 6 00:21:15.652729 kubelet[1587]: I0906 00:21:15.652699 1587 kubelet_node_status.go:72] "Attempting to register node" node="ci-3510.3.8-n-86fdecb492" Sep 6 00:21:15.653635 kubelet[1587]: E0906 00:21:15.653607 1587 kubelet_node_status.go:95] "Unable to register node with API server" err="Post \"https://147.182.198.71:6443/api/v1/nodes\": dial tcp 147.182.198.71:6443: connect: connection refused" node="ci-3510.3.8-n-86fdecb492" Sep 6 00:21:15.775691 kubelet[1587]: E0906 00:21:15.775587 1587 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 67.207.67.3 67.207.67.2 67.207.67.3" Sep 6 00:21:15.776508 env[1194]: time="2025-09-06T00:21:15.776397044Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-apiserver-ci-3510.3.8-n-86fdecb492,Uid:9d02cb95976b735500645fa2441ab491,Namespace:kube-system,Attempt:0,}" Sep 6 00:21:15.782840 kubelet[1587]: E0906 00:21:15.782804 1587 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 67.207.67.3 67.207.67.2 67.207.67.3" Sep 6 00:21:15.783868 env[1194]: time="2025-09-06T00:21:15.783575226Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-controller-manager-ci-3510.3.8-n-86fdecb492,Uid:4861086eeae139b8582e7f5c37b0fb45,Namespace:kube-system,Attempt:0,}" Sep 6 00:21:15.789384 kubelet[1587]: E0906 00:21:15.789339 1587 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 67.207.67.3 67.207.67.2 67.207.67.3" Sep 6 00:21:15.791627 env[1194]: time="2025-09-06T00:21:15.791569278Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-scheduler-ci-3510.3.8-n-86fdecb492,Uid:cf93944aca1773e88499dc4ad2afd181,Namespace:kube-system,Attempt:0,}" Sep 6 00:21:15.903860 kubelet[1587]: E0906 00:21:15.903775 1587 controller.go:145] "Failed to ensure lease exists, will retry" err="Get \"https://147.182.198.71:6443/apis/coordination.k8s.io/v1/namespaces/kube-node-lease/leases/ci-3510.3.8-n-86fdecb492?timeout=10s\": dial tcp 147.182.198.71:6443: connect: connection refused" interval="800ms" Sep 6 00:21:16.056111 kubelet[1587]: I0906 00:21:16.055569 1587 kubelet_node_status.go:72] "Attempting to register node" node="ci-3510.3.8-n-86fdecb492" Sep 6 00:21:16.056111 kubelet[1587]: E0906 00:21:16.055886 1587 kubelet_node_status.go:95] "Unable to register node with API server" err="Post \"https://147.182.198.71:6443/api/v1/nodes\": dial tcp 147.182.198.71:6443: connect: connection refused" node="ci-3510.3.8-n-86fdecb492" Sep 6 00:21:16.245013 kubelet[1587]: W0906 00:21:16.244909 1587 reflector.go:561] k8s.io/client-go/informers/factory.go:160: failed to list *v1.Service: Get "https://147.182.198.71:6443/api/v1/services?fieldSelector=spec.clusterIP%21%3DNone&limit=500&resourceVersion=0": dial tcp 147.182.198.71:6443: connect: connection refused Sep 6 00:21:16.245013 kubelet[1587]: E0906 00:21:16.244996 1587 reflector.go:158] "Unhandled Error" err="k8s.io/client-go/informers/factory.go:160: Failed to watch *v1.Service: failed to list *v1.Service: Get \"https://147.182.198.71:6443/api/v1/services?fieldSelector=spec.clusterIP%21%3DNone&limit=500&resourceVersion=0\": dial tcp 147.182.198.71:6443: connect: connection refused" logger="UnhandledError" Sep 6 00:21:16.336649 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount3543119068.mount: Deactivated successfully. Sep 6 00:21:16.341803 env[1194]: time="2025-09-06T00:21:16.341730313Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/pause:3.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 6 00:21:16.343985 env[1194]: time="2025-09-06T00:21:16.343942869Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:6270bb605e12e581514ada5fd5b3216f727db55dc87d5889c790e4c760683fee,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 6 00:21:16.345014 env[1194]: time="2025-09-06T00:21:16.344976793Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause:3.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 6 00:21:16.345743 env[1194]: time="2025-09-06T00:21:16.345716578Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause:3.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 6 00:21:16.346560 env[1194]: time="2025-09-06T00:21:16.346529448Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause:3.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 6 00:21:16.348701 env[1194]: time="2025-09-06T00:21:16.348662006Z" level=info msg="ImageUpdate event &ImageUpdate{Name:sha256:6270bb605e12e581514ada5fd5b3216f727db55dc87d5889c790e4c760683fee,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 6 00:21:16.350046 env[1194]: time="2025-09-06T00:21:16.350021429Z" level=info msg="ImageUpdate event &ImageUpdate{Name:sha256:6270bb605e12e581514ada5fd5b3216f727db55dc87d5889c790e4c760683fee,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 6 00:21:16.352834 env[1194]: time="2025-09-06T00:21:16.352801555Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/pause@sha256:3d380ca8864549e74af4b29c10f9cb0956236dfb01c40ca076fb6c37253234db,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 6 00:21:16.356412 env[1194]: time="2025-09-06T00:21:16.356370728Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause:3.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 6 00:21:16.357773 env[1194]: time="2025-09-06T00:21:16.357740687Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause:3.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 6 00:21:16.358991 env[1194]: time="2025-09-06T00:21:16.358957487Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause@sha256:3d380ca8864549e74af4b29c10f9cb0956236dfb01c40ca076fb6c37253234db,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 6 00:21:16.361152 env[1194]: time="2025-09-06T00:21:16.361115992Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause@sha256:3d380ca8864549e74af4b29c10f9cb0956236dfb01c40ca076fb6c37253234db,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 6 00:21:16.396033 env[1194]: time="2025-09-06T00:21:16.395938148Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Sep 6 00:21:16.396033 env[1194]: time="2025-09-06T00:21:16.395980409Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Sep 6 00:21:16.396033 env[1194]: time="2025-09-06T00:21:16.395991037Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Sep 6 00:21:16.396337 env[1194]: time="2025-09-06T00:21:16.396114527Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/e7a3846b45f13d5ea2865061602f7b56a30a3f41ffa73d4177fae4e71e3c4f53 pid=1627 runtime=io.containerd.runc.v2 Sep 6 00:21:16.402074 env[1194]: time="2025-09-06T00:21:16.401996748Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Sep 6 00:21:16.402074 env[1194]: time="2025-09-06T00:21:16.402076637Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Sep 6 00:21:16.402267 env[1194]: time="2025-09-06T00:21:16.402098918Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Sep 6 00:21:16.402361 env[1194]: time="2025-09-06T00:21:16.402314794Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/089bd2038c404ba240d33a9a0284d617b8097cd996396681538c8669d21276a0 pid=1640 runtime=io.containerd.runc.v2 Sep 6 00:21:16.405575 env[1194]: time="2025-09-06T00:21:16.405481051Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Sep 6 00:21:16.405721 env[1194]: time="2025-09-06T00:21:16.405578947Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Sep 6 00:21:16.405721 env[1194]: time="2025-09-06T00:21:16.405602598Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Sep 6 00:21:16.405916 env[1194]: time="2025-09-06T00:21:16.405874232Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/d0e82131942e18f024309a8b19385a7e4512081eb45f70cf44f05267909fb99b pid=1655 runtime=io.containerd.runc.v2 Sep 6 00:21:16.426446 systemd[1]: Started cri-containerd-e7a3846b45f13d5ea2865061602f7b56a30a3f41ffa73d4177fae4e71e3c4f53.scope. Sep 6 00:21:16.442896 systemd[1]: Started cri-containerd-d0e82131942e18f024309a8b19385a7e4512081eb45f70cf44f05267909fb99b.scope. Sep 6 00:21:16.444000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:16.444000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:16.444000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:16.444000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:16.444000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:16.444000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:16.444000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:16.444000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:16.444000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:16.444000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:16.444000 audit: BPF prog-id=61 op=LOAD Sep 6 00:21:16.445000 audit[1656]: AVC avc: denied { bpf } for pid=1656 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:16.445000 audit[1656]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000117c48 a2=10 a3=1c items=0 ppid=1627 pid=1656 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:21:16.445000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6537613338343662343566313364356561323836353036313630326637 Sep 6 00:21:16.445000 audit[1656]: AVC avc: denied { perfmon } for pid=1656 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:16.445000 audit[1656]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001176b0 a2=3c a3=c items=0 ppid=1627 pid=1656 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:21:16.445000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6537613338343662343566313364356561323836353036313630326637 Sep 6 00:21:16.445000 audit[1656]: AVC avc: denied { bpf } for pid=1656 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:16.445000 audit[1656]: AVC avc: denied { bpf } for pid=1656 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:16.445000 audit[1656]: AVC avc: denied { bpf } for pid=1656 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:16.445000 audit[1656]: AVC avc: denied { perfmon } for pid=1656 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:16.445000 audit[1656]: AVC avc: denied { perfmon } for pid=1656 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:16.445000 audit[1656]: AVC avc: denied { perfmon } for pid=1656 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:16.445000 audit[1656]: AVC avc: denied { perfmon } for pid=1656 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:16.445000 audit[1656]: AVC avc: denied { perfmon } for pid=1656 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:16.445000 audit[1656]: AVC avc: denied { bpf } for pid=1656 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:16.445000 audit[1656]: AVC avc: denied { bpf } for pid=1656 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:16.445000 audit: BPF prog-id=62 op=LOAD Sep 6 00:21:16.445000 audit[1656]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001179d8 a2=78 a3=c00030b2e0 items=0 ppid=1627 pid=1656 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:21:16.445000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6537613338343662343566313364356561323836353036313630326637 Sep 6 00:21:16.445000 audit[1656]: AVC avc: denied { bpf } for pid=1656 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:16.445000 audit[1656]: AVC avc: denied { bpf } for pid=1656 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:16.445000 audit[1656]: AVC avc: denied { perfmon } for pid=1656 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:16.445000 audit[1656]: AVC avc: denied { perfmon } for pid=1656 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:16.445000 audit[1656]: AVC avc: denied { perfmon } for pid=1656 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:16.445000 audit[1656]: AVC avc: denied { perfmon } for pid=1656 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:16.445000 audit[1656]: AVC avc: denied { perfmon } for pid=1656 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:16.445000 audit[1656]: AVC avc: denied { bpf } for pid=1656 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:16.445000 audit[1656]: AVC avc: denied { bpf } for pid=1656 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:16.445000 audit: BPF prog-id=63 op=LOAD Sep 6 00:21:16.445000 audit[1656]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000117770 a2=78 a3=c00030b328 items=0 ppid=1627 pid=1656 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:21:16.445000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6537613338343662343566313364356561323836353036313630326637 Sep 6 00:21:16.445000 audit: BPF prog-id=63 op=UNLOAD Sep 6 00:21:16.445000 audit: BPF prog-id=62 op=UNLOAD Sep 6 00:21:16.445000 audit[1656]: AVC avc: denied { bpf } for pid=1656 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:16.445000 audit[1656]: AVC avc: denied { bpf } for pid=1656 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:16.445000 audit[1656]: AVC avc: denied { bpf } for pid=1656 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:16.445000 audit[1656]: AVC avc: denied { perfmon } for pid=1656 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:16.445000 audit[1656]: AVC avc: denied { perfmon } for pid=1656 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:16.445000 audit[1656]: AVC avc: denied { perfmon } for pid=1656 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:16.445000 audit[1656]: AVC avc: denied { perfmon } for pid=1656 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:16.445000 audit[1656]: AVC avc: denied { perfmon } for pid=1656 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:16.445000 audit[1656]: AVC avc: denied { bpf } for pid=1656 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:16.445000 audit[1656]: AVC avc: denied { bpf } for pid=1656 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:16.445000 audit: BPF prog-id=64 op=LOAD Sep 6 00:21:16.445000 audit[1656]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000117c30 a2=78 a3=c00030b738 items=0 ppid=1627 pid=1656 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:21:16.445000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6537613338343662343566313364356561323836353036313630326637 Sep 6 00:21:16.451512 systemd[1]: Started cri-containerd-089bd2038c404ba240d33a9a0284d617b8097cd996396681538c8669d21276a0.scope. Sep 6 00:21:16.479000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:16.479000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:16.479000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:16.479000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:16.479000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:16.479000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:16.479000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:16.479000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:16.479000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:16.479000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:16.479000 audit: BPF prog-id=65 op=LOAD Sep 6 00:21:16.480000 audit[1678]: AVC avc: denied { bpf } for pid=1678 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:16.480000 audit[1678]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000197c48 a2=10 a3=1c items=0 ppid=1655 pid=1678 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:21:16.480000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6430653832313331393432653138663032343330396138623139333835 Sep 6 00:21:16.480000 audit[1678]: AVC avc: denied { perfmon } for pid=1678 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:16.480000 audit[1678]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001976b0 a2=3c a3=c items=0 ppid=1655 pid=1678 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:21:16.480000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6430653832313331393432653138663032343330396138623139333835 Sep 6 00:21:16.480000 audit[1678]: AVC avc: denied { bpf } for pid=1678 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:16.480000 audit[1678]: AVC avc: denied { bpf } for pid=1678 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:16.480000 audit[1678]: AVC avc: denied { bpf } for pid=1678 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:16.480000 audit[1678]: AVC avc: denied { perfmon } for pid=1678 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:16.480000 audit[1678]: AVC avc: denied { perfmon } for pid=1678 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:16.480000 audit[1678]: AVC avc: denied { perfmon } for pid=1678 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:16.480000 audit[1678]: AVC avc: denied { perfmon } for pid=1678 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:16.480000 audit[1678]: AVC avc: denied { perfmon } for pid=1678 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:16.480000 audit[1678]: AVC avc: denied { bpf } for pid=1678 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:16.480000 audit[1678]: AVC avc: denied { bpf } for pid=1678 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:16.480000 audit: BPF prog-id=66 op=LOAD Sep 6 00:21:16.480000 audit[1678]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001979d8 a2=78 a3=c0000d7ce0 items=0 ppid=1655 pid=1678 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:21:16.480000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6430653832313331393432653138663032343330396138623139333835 Sep 6 00:21:16.480000 audit[1678]: AVC avc: denied { bpf } for pid=1678 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:16.480000 audit[1678]: AVC avc: denied { bpf } for pid=1678 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:16.480000 audit[1678]: AVC avc: denied { perfmon } for pid=1678 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:16.480000 audit[1678]: AVC avc: denied { perfmon } for pid=1678 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:16.480000 audit[1678]: AVC avc: denied { perfmon } for pid=1678 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:16.480000 audit[1678]: AVC avc: denied { perfmon } for pid=1678 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:16.480000 audit[1678]: AVC avc: denied { perfmon } for pid=1678 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:16.480000 audit[1678]: AVC avc: denied { bpf } for pid=1678 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:16.480000 audit[1678]: AVC avc: denied { bpf } for pid=1678 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:16.480000 audit: BPF prog-id=67 op=LOAD Sep 6 00:21:16.480000 audit[1678]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000197770 a2=78 a3=c0000d7d28 items=0 ppid=1655 pid=1678 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:21:16.480000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6430653832313331393432653138663032343330396138623139333835 Sep 6 00:21:16.480000 audit: BPF prog-id=67 op=UNLOAD Sep 6 00:21:16.480000 audit: BPF prog-id=66 op=UNLOAD Sep 6 00:21:16.480000 audit[1678]: AVC avc: denied { bpf } for pid=1678 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:16.480000 audit[1678]: AVC avc: denied { bpf } for pid=1678 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:16.480000 audit[1678]: AVC avc: denied { bpf } for pid=1678 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:16.480000 audit[1678]: AVC avc: denied { perfmon } for pid=1678 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:16.480000 audit[1678]: AVC avc: denied { perfmon } for pid=1678 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:16.480000 audit[1678]: AVC avc: denied { perfmon } for pid=1678 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:16.480000 audit[1678]: AVC avc: denied { perfmon } for pid=1678 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:16.480000 audit[1678]: AVC avc: denied { perfmon } for pid=1678 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:16.480000 audit[1678]: AVC avc: denied { bpf } for pid=1678 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:16.480000 audit[1678]: AVC avc: denied { bpf } for pid=1678 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:16.480000 audit: BPF prog-id=68 op=LOAD Sep 6 00:21:16.480000 audit[1678]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000197c30 a2=78 a3=c0003d8138 items=0 ppid=1655 pid=1678 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:21:16.480000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6430653832313331393432653138663032343330396138623139333835 Sep 6 00:21:16.490815 kubelet[1587]: W0906 00:21:16.490673 1587 reflector.go:561] k8s.io/client-go/informers/factory.go:160: failed to list *v1.CSIDriver: Get "https://147.182.198.71:6443/apis/storage.k8s.io/v1/csidrivers?limit=500&resourceVersion=0": dial tcp 147.182.198.71:6443: connect: connection refused Sep 6 00:21:16.490815 kubelet[1587]: E0906 00:21:16.490757 1587 reflector.go:158] "Unhandled Error" err="k8s.io/client-go/informers/factory.go:160: Failed to watch *v1.CSIDriver: failed to list *v1.CSIDriver: Get \"https://147.182.198.71:6443/apis/storage.k8s.io/v1/csidrivers?limit=500&resourceVersion=0\": dial tcp 147.182.198.71:6443: connect: connection refused" logger="UnhandledError" Sep 6 00:21:16.490000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:16.490000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:16.490000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:16.490000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:16.490000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:16.490000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:16.490000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:16.490000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:16.490000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:16.491000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:16.491000 audit: BPF prog-id=69 op=LOAD Sep 6 00:21:16.492000 audit[1676]: AVC avc: denied { bpf } for pid=1676 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:16.492000 audit[1676]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c00011fc48 a2=10 a3=1c items=0 ppid=1640 pid=1676 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:21:16.492000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3038396264323033386334303462613234306433336139613032383464 Sep 6 00:21:16.492000 audit[1676]: AVC avc: denied { perfmon } for pid=1676 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:16.492000 audit[1676]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c00011f6b0 a2=3c a3=c items=0 ppid=1640 pid=1676 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:21:16.492000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3038396264323033386334303462613234306433336139613032383464 Sep 6 00:21:16.492000 audit[1676]: AVC avc: denied { bpf } for pid=1676 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:16.492000 audit[1676]: AVC avc: denied { bpf } for pid=1676 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:16.492000 audit[1676]: AVC avc: denied { bpf } for pid=1676 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:16.492000 audit[1676]: AVC avc: denied { perfmon } for pid=1676 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:16.492000 audit[1676]: AVC avc: denied { perfmon } for pid=1676 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:16.492000 audit[1676]: AVC avc: denied { perfmon } for pid=1676 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:16.492000 audit[1676]: AVC avc: denied { perfmon } for pid=1676 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:16.492000 audit[1676]: AVC avc: denied { perfmon } for pid=1676 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:16.492000 audit[1676]: AVC avc: denied { bpf } for pid=1676 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:16.492000 audit[1676]: AVC avc: denied { bpf } for pid=1676 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:16.492000 audit: BPF prog-id=70 op=LOAD Sep 6 00:21:16.492000 audit[1676]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c00011f9d8 a2=78 a3=c000392700 items=0 ppid=1640 pid=1676 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:21:16.492000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3038396264323033386334303462613234306433336139613032383464 Sep 6 00:21:16.493000 audit[1676]: AVC avc: denied { bpf } for pid=1676 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:16.493000 audit[1676]: AVC avc: denied { bpf } for pid=1676 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:16.493000 audit[1676]: AVC avc: denied { perfmon } for pid=1676 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:16.493000 audit[1676]: AVC avc: denied { perfmon } for pid=1676 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:16.493000 audit[1676]: AVC avc: denied { perfmon } for pid=1676 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:16.493000 audit[1676]: AVC avc: denied { perfmon } for pid=1676 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:16.493000 audit[1676]: AVC avc: denied { perfmon } for pid=1676 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:16.493000 audit[1676]: AVC avc: denied { bpf } for pid=1676 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:16.493000 audit[1676]: AVC avc: denied { bpf } for pid=1676 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:16.493000 audit: BPF prog-id=71 op=LOAD Sep 6 00:21:16.493000 audit[1676]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c00011f770 a2=78 a3=c000392748 items=0 ppid=1640 pid=1676 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:21:16.493000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3038396264323033386334303462613234306433336139613032383464 Sep 6 00:21:16.494000 audit: BPF prog-id=71 op=UNLOAD Sep 6 00:21:16.494000 audit: BPF prog-id=70 op=UNLOAD Sep 6 00:21:16.494000 audit[1676]: AVC avc: denied { bpf } for pid=1676 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:16.494000 audit[1676]: AVC avc: denied { bpf } for pid=1676 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:16.494000 audit[1676]: AVC avc: denied { bpf } for pid=1676 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:16.494000 audit[1676]: AVC avc: denied { perfmon } for pid=1676 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:16.494000 audit[1676]: AVC avc: denied { perfmon } for pid=1676 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:16.494000 audit[1676]: AVC avc: denied { perfmon } for pid=1676 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:16.494000 audit[1676]: AVC avc: denied { perfmon } for pid=1676 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:16.494000 audit[1676]: AVC avc: denied { perfmon } for pid=1676 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:16.494000 audit[1676]: AVC avc: denied { bpf } for pid=1676 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:16.494000 audit[1676]: AVC avc: denied { bpf } for pid=1676 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:16.494000 audit: BPF prog-id=72 op=LOAD Sep 6 00:21:16.494000 audit[1676]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c00011fc30 a2=78 a3=c000392b58 items=0 ppid=1640 pid=1676 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:21:16.494000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3038396264323033386334303462613234306433336139613032383464 Sep 6 00:21:16.548693 env[1194]: time="2025-09-06T00:21:16.547999667Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-controller-manager-ci-3510.3.8-n-86fdecb492,Uid:4861086eeae139b8582e7f5c37b0fb45,Namespace:kube-system,Attempt:0,} returns sandbox id \"d0e82131942e18f024309a8b19385a7e4512081eb45f70cf44f05267909fb99b\"" Sep 6 00:21:16.549272 kubelet[1587]: E0906 00:21:16.549217 1587 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 67.207.67.3 67.207.67.2 67.207.67.3" Sep 6 00:21:16.550979 env[1194]: time="2025-09-06T00:21:16.550819221Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-scheduler-ci-3510.3.8-n-86fdecb492,Uid:cf93944aca1773e88499dc4ad2afd181,Namespace:kube-system,Attempt:0,} returns sandbox id \"e7a3846b45f13d5ea2865061602f7b56a30a3f41ffa73d4177fae4e71e3c4f53\"" Sep 6 00:21:16.552014 kubelet[1587]: E0906 00:21:16.551853 1587 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 67.207.67.3 67.207.67.2 67.207.67.3" Sep 6 00:21:16.552178 env[1194]: time="2025-09-06T00:21:16.551950983Z" level=info msg="CreateContainer within sandbox \"d0e82131942e18f024309a8b19385a7e4512081eb45f70cf44f05267909fb99b\" for container &ContainerMetadata{Name:kube-controller-manager,Attempt:0,}" Sep 6 00:21:16.553391 env[1194]: time="2025-09-06T00:21:16.553358735Z" level=info msg="CreateContainer within sandbox \"e7a3846b45f13d5ea2865061602f7b56a30a3f41ffa73d4177fae4e71e3c4f53\" for container &ContainerMetadata{Name:kube-scheduler,Attempt:0,}" Sep 6 00:21:16.563936 env[1194]: time="2025-09-06T00:21:16.562784839Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-apiserver-ci-3510.3.8-n-86fdecb492,Uid:9d02cb95976b735500645fa2441ab491,Namespace:kube-system,Attempt:0,} returns sandbox id \"089bd2038c404ba240d33a9a0284d617b8097cd996396681538c8669d21276a0\"" Sep 6 00:21:16.564629 kubelet[1587]: E0906 00:21:16.564395 1587 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 67.207.67.3 67.207.67.2 67.207.67.3" Sep 6 00:21:16.567613 env[1194]: time="2025-09-06T00:21:16.567540397Z" level=info msg="CreateContainer within sandbox \"089bd2038c404ba240d33a9a0284d617b8097cd996396681538c8669d21276a0\" for container &ContainerMetadata{Name:kube-apiserver,Attempt:0,}" Sep 6 00:21:16.575993 env[1194]: time="2025-09-06T00:21:16.575935789Z" level=info msg="CreateContainer within sandbox \"d0e82131942e18f024309a8b19385a7e4512081eb45f70cf44f05267909fb99b\" for &ContainerMetadata{Name:kube-controller-manager,Attempt:0,} returns container id \"c96dc9cbcf50880d18234eef32acf3fec34da173cddce1ff62952ccd718b206e\"" Sep 6 00:21:16.577196 env[1194]: time="2025-09-06T00:21:16.577152345Z" level=info msg="StartContainer for \"c96dc9cbcf50880d18234eef32acf3fec34da173cddce1ff62952ccd718b206e\"" Sep 6 00:21:16.578388 env[1194]: time="2025-09-06T00:21:16.578338985Z" level=info msg="CreateContainer within sandbox \"e7a3846b45f13d5ea2865061602f7b56a30a3f41ffa73d4177fae4e71e3c4f53\" for &ContainerMetadata{Name:kube-scheduler,Attempt:0,} returns container id \"431fa8a65e48f2fc9f0456f50799d84218a937e3aca0d74ebe48a80e96e8527a\"" Sep 6 00:21:16.580352 env[1194]: time="2025-09-06T00:21:16.580303158Z" level=info msg="StartContainer for \"431fa8a65e48f2fc9f0456f50799d84218a937e3aca0d74ebe48a80e96e8527a\"" Sep 6 00:21:16.585597 env[1194]: time="2025-09-06T00:21:16.585538704Z" level=info msg="CreateContainer within sandbox \"089bd2038c404ba240d33a9a0284d617b8097cd996396681538c8669d21276a0\" for &ContainerMetadata{Name:kube-apiserver,Attempt:0,} returns container id \"db8c0680bc27f796fa927ec8d932cea3b7d8e978e8fa68f5b2ab91d9ca795f50\"" Sep 6 00:21:16.586515 env[1194]: time="2025-09-06T00:21:16.586459763Z" level=info msg="StartContainer for \"db8c0680bc27f796fa927ec8d932cea3b7d8e978e8fa68f5b2ab91d9ca795f50\"" Sep 6 00:21:16.608984 systemd[1]: Started cri-containerd-431fa8a65e48f2fc9f0456f50799d84218a937e3aca0d74ebe48a80e96e8527a.scope. Sep 6 00:21:16.632954 systemd[1]: Started cri-containerd-c96dc9cbcf50880d18234eef32acf3fec34da173cddce1ff62952ccd718b206e.scope. Sep 6 00:21:16.638335 systemd[1]: Started cri-containerd-db8c0680bc27f796fa927ec8d932cea3b7d8e978e8fa68f5b2ab91d9ca795f50.scope. Sep 6 00:21:16.645000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:16.645000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:16.645000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:16.645000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:16.645000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:16.645000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:16.645000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:16.645000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:16.645000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:16.645000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:16.645000 audit: BPF prog-id=73 op=LOAD Sep 6 00:21:16.647000 audit[1769]: AVC avc: denied { bpf } for pid=1769 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:16.647000 audit[1769]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000197c48 a2=10 a3=1c items=0 ppid=1627 pid=1769 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:21:16.647000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3433316661386136356534386632666339663034353666353037393964 Sep 6 00:21:16.650000 audit[1769]: AVC avc: denied { perfmon } for pid=1769 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:16.650000 audit[1769]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001976b0 a2=3c a3=8 items=0 ppid=1627 pid=1769 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:21:16.650000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3433316661386136356534386632666339663034353666353037393964 Sep 6 00:21:16.650000 audit[1769]: AVC avc: denied { bpf } for pid=1769 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:16.650000 audit[1769]: AVC avc: denied { bpf } for pid=1769 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:16.650000 audit[1769]: AVC avc: denied { bpf } for pid=1769 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:16.650000 audit[1769]: AVC avc: denied { perfmon } for pid=1769 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:16.650000 audit[1769]: AVC avc: denied { perfmon } for pid=1769 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:16.650000 audit[1769]: AVC avc: denied { perfmon } for pid=1769 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:16.650000 audit[1769]: AVC avc: denied { perfmon } for pid=1769 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:16.650000 audit[1769]: AVC avc: denied { perfmon } for pid=1769 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:16.650000 audit[1769]: AVC avc: denied { bpf } for pid=1769 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:16.650000 audit[1769]: AVC avc: denied { bpf } for pid=1769 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:16.650000 audit: BPF prog-id=74 op=LOAD Sep 6 00:21:16.650000 audit[1769]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001979d8 a2=78 a3=c0000a8370 items=0 ppid=1627 pid=1769 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:21:16.650000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3433316661386136356534386632666339663034353666353037393964 Sep 6 00:21:16.650000 audit[1769]: AVC avc: denied { bpf } for pid=1769 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:16.650000 audit[1769]: AVC avc: denied { bpf } for pid=1769 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:16.650000 audit[1769]: AVC avc: denied { perfmon } for pid=1769 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:16.650000 audit[1769]: AVC avc: denied { perfmon } for pid=1769 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:16.650000 audit[1769]: AVC avc: denied { perfmon } for pid=1769 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:16.650000 audit[1769]: AVC avc: denied { perfmon } for pid=1769 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:16.650000 audit[1769]: AVC avc: denied { perfmon } for pid=1769 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:16.650000 audit[1769]: AVC avc: denied { bpf } for pid=1769 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:16.650000 audit[1769]: AVC avc: denied { bpf } for pid=1769 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:16.650000 audit: BPF prog-id=75 op=LOAD Sep 6 00:21:16.650000 audit[1769]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000197770 a2=78 a3=c0000a83b8 items=0 ppid=1627 pid=1769 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:21:16.650000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3433316661386136356534386632666339663034353666353037393964 Sep 6 00:21:16.650000 audit: BPF prog-id=75 op=UNLOAD Sep 6 00:21:16.650000 audit: BPF prog-id=74 op=UNLOAD Sep 6 00:21:16.650000 audit[1769]: AVC avc: denied { bpf } for pid=1769 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:16.650000 audit[1769]: AVC avc: denied { bpf } for pid=1769 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:16.650000 audit[1769]: AVC avc: denied { bpf } for pid=1769 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:16.650000 audit[1769]: AVC avc: denied { perfmon } for pid=1769 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:16.650000 audit[1769]: AVC avc: denied { perfmon } for pid=1769 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:16.650000 audit[1769]: AVC avc: denied { perfmon } for pid=1769 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:16.650000 audit[1769]: AVC avc: denied { perfmon } for pid=1769 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:16.650000 audit[1769]: AVC avc: denied { perfmon } for pid=1769 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:16.650000 audit[1769]: AVC avc: denied { bpf } for pid=1769 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:16.650000 audit[1769]: AVC avc: denied { bpf } for pid=1769 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:16.650000 audit: BPF prog-id=76 op=LOAD Sep 6 00:21:16.650000 audit[1769]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000197c30 a2=78 a3=c0000a87c8 items=0 ppid=1627 pid=1769 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:21:16.650000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3433316661386136356534386632666339663034353666353037393964 Sep 6 00:21:16.660000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:16.660000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:16.660000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:16.660000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:16.660000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:16.660000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:16.660000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:16.660000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:16.660000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:16.660000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:16.660000 audit: BPF prog-id=77 op=LOAD Sep 6 00:21:16.661000 audit[1761]: AVC avc: denied { bpf } for pid=1761 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:16.661000 audit[1761]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000145c48 a2=10 a3=1c items=0 ppid=1655 pid=1761 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:21:16.661000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6339366463396362636635303838306431383233346565663332616366 Sep 6 00:21:16.661000 audit[1761]: AVC avc: denied { perfmon } for pid=1761 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:16.661000 audit[1761]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001456b0 a2=3c a3=8 items=0 ppid=1655 pid=1761 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:21:16.661000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6339366463396362636635303838306431383233346565663332616366 Sep 6 00:21:16.661000 audit[1761]: AVC avc: denied { bpf } for pid=1761 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:16.661000 audit[1761]: AVC avc: denied { bpf } for pid=1761 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:16.661000 audit[1761]: AVC avc: denied { bpf } for pid=1761 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:16.661000 audit[1761]: AVC avc: denied { perfmon } for pid=1761 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:16.661000 audit[1761]: AVC avc: denied { perfmon } for pid=1761 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:16.661000 audit[1761]: AVC avc: denied { perfmon } for pid=1761 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:16.661000 audit[1761]: AVC avc: denied { perfmon } for pid=1761 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:16.661000 audit[1761]: AVC avc: denied { perfmon } for pid=1761 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:16.661000 audit[1761]: AVC avc: denied { bpf } for pid=1761 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:16.661000 audit[1761]: AVC avc: denied { bpf } for pid=1761 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:16.661000 audit: BPF prog-id=78 op=LOAD Sep 6 00:21:16.661000 audit[1761]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001459d8 a2=78 a3=c000025210 items=0 ppid=1655 pid=1761 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:21:16.661000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6339366463396362636635303838306431383233346565663332616366 Sep 6 00:21:16.661000 audit[1761]: AVC avc: denied { bpf } for pid=1761 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:16.661000 audit[1761]: AVC avc: denied { bpf } for pid=1761 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:16.661000 audit[1761]: AVC avc: denied { perfmon } for pid=1761 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:16.661000 audit[1761]: AVC avc: denied { perfmon } for pid=1761 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:16.661000 audit[1761]: AVC avc: denied { perfmon } for pid=1761 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:16.661000 audit[1761]: AVC avc: denied { perfmon } for pid=1761 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:16.661000 audit[1761]: AVC avc: denied { perfmon } for pid=1761 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:16.661000 audit[1761]: AVC avc: denied { bpf } for pid=1761 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:16.661000 audit[1761]: AVC avc: denied { bpf } for pid=1761 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:16.661000 audit: BPF prog-id=79 op=LOAD Sep 6 00:21:16.661000 audit[1761]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000145770 a2=78 a3=c000025258 items=0 ppid=1655 pid=1761 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:21:16.661000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6339366463396362636635303838306431383233346565663332616366 Sep 6 00:21:16.661000 audit: BPF prog-id=79 op=UNLOAD Sep 6 00:21:16.661000 audit: BPF prog-id=78 op=UNLOAD Sep 6 00:21:16.661000 audit[1761]: AVC avc: denied { bpf } for pid=1761 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:16.661000 audit[1761]: AVC avc: denied { bpf } for pid=1761 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:16.661000 audit[1761]: AVC avc: denied { bpf } for pid=1761 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:16.661000 audit[1761]: AVC avc: denied { perfmon } for pid=1761 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:16.661000 audit[1761]: AVC avc: denied { perfmon } for pid=1761 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:16.661000 audit[1761]: AVC avc: denied { perfmon } for pid=1761 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:16.661000 audit[1761]: AVC avc: denied { perfmon } for pid=1761 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:16.661000 audit[1761]: AVC avc: denied { perfmon } for pid=1761 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:16.661000 audit[1761]: AVC avc: denied { bpf } for pid=1761 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:16.661000 audit[1761]: AVC avc: denied { bpf } for pid=1761 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:16.661000 audit: BPF prog-id=80 op=LOAD Sep 6 00:21:16.661000 audit[1761]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000145c30 a2=78 a3=c000025668 items=0 ppid=1655 pid=1761 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:21:16.661000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6339366463396362636635303838306431383233346565663332616366 Sep 6 00:21:16.692782 kubelet[1587]: W0906 00:21:16.692706 1587 reflector.go:561] k8s.io/client-go/informers/factory.go:160: failed to list *v1.RuntimeClass: Get "https://147.182.198.71:6443/apis/node.k8s.io/v1/runtimeclasses?limit=500&resourceVersion=0": dial tcp 147.182.198.71:6443: connect: connection refused Sep 6 00:21:16.692782 kubelet[1587]: E0906 00:21:16.692795 1587 reflector.go:158] "Unhandled Error" err="k8s.io/client-go/informers/factory.go:160: Failed to watch *v1.RuntimeClass: failed to list *v1.RuntimeClass: Get \"https://147.182.198.71:6443/apis/node.k8s.io/v1/runtimeclasses?limit=500&resourceVersion=0\": dial tcp 147.182.198.71:6443: connect: connection refused" logger="UnhandledError" Sep 6 00:21:16.699000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:16.699000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:16.699000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:16.699000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:16.699000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:16.699000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:16.699000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:16.699000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:16.699000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:16.700000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:16.700000 audit: BPF prog-id=81 op=LOAD Sep 6 00:21:16.701000 audit[1786]: AVC avc: denied { bpf } for pid=1786 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:16.701000 audit[1786]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000145c48 a2=10 a3=1c items=0 ppid=1640 pid=1786 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:21:16.701000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6462386330363830626332376637393666613932376563386439333263 Sep 6 00:21:16.702000 audit[1786]: AVC avc: denied { perfmon } for pid=1786 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:16.702000 audit[1786]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001456b0 a2=3c a3=8 items=0 ppid=1640 pid=1786 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:21:16.702000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6462386330363830626332376637393666613932376563386439333263 Sep 6 00:21:16.704991 kubelet[1587]: E0906 00:21:16.704381 1587 controller.go:145] "Failed to ensure lease exists, will retry" err="Get \"https://147.182.198.71:6443/apis/coordination.k8s.io/v1/namespaces/kube-node-lease/leases/ci-3510.3.8-n-86fdecb492?timeout=10s\": dial tcp 147.182.198.71:6443: connect: connection refused" interval="1.6s" Sep 6 00:21:16.703000 audit[1786]: AVC avc: denied { bpf } for pid=1786 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:16.703000 audit[1786]: AVC avc: denied { bpf } for pid=1786 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:16.703000 audit[1786]: AVC avc: denied { bpf } for pid=1786 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:16.703000 audit[1786]: AVC avc: denied { perfmon } for pid=1786 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:16.703000 audit[1786]: AVC avc: denied { perfmon } for pid=1786 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:16.703000 audit[1786]: AVC avc: denied { perfmon } for pid=1786 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:16.703000 audit[1786]: AVC avc: denied { perfmon } for pid=1786 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:16.703000 audit[1786]: AVC avc: denied { perfmon } for pid=1786 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:16.703000 audit[1786]: AVC avc: denied { bpf } for pid=1786 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:16.703000 audit[1786]: AVC avc: denied { bpf } for pid=1786 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:16.703000 audit: BPF prog-id=82 op=LOAD Sep 6 00:21:16.703000 audit[1786]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001459d8 a2=78 a3=c00034bd00 items=0 ppid=1640 pid=1786 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:21:16.703000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6462386330363830626332376637393666613932376563386439333263 Sep 6 00:21:16.705000 audit[1786]: AVC avc: denied { bpf } for pid=1786 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:16.705000 audit[1786]: AVC avc: denied { bpf } for pid=1786 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:16.705000 audit[1786]: AVC avc: denied { perfmon } for pid=1786 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:16.705000 audit[1786]: AVC avc: denied { perfmon } for pid=1786 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:16.705000 audit[1786]: AVC avc: denied { perfmon } for pid=1786 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:16.705000 audit[1786]: AVC avc: denied { perfmon } for pid=1786 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:16.705000 audit[1786]: AVC avc: denied { perfmon } for pid=1786 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:16.705000 audit[1786]: AVC avc: denied { bpf } for pid=1786 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:16.705000 audit[1786]: AVC avc: denied { bpf } for pid=1786 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:16.705000 audit: BPF prog-id=83 op=LOAD Sep 6 00:21:16.705000 audit[1786]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000145770 a2=78 a3=c00034bd48 items=0 ppid=1640 pid=1786 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:21:16.705000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6462386330363830626332376637393666613932376563386439333263 Sep 6 00:21:16.706000 audit: BPF prog-id=83 op=UNLOAD Sep 6 00:21:16.706000 audit: BPF prog-id=82 op=UNLOAD Sep 6 00:21:16.706000 audit[1786]: AVC avc: denied { bpf } for pid=1786 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:16.706000 audit[1786]: AVC avc: denied { bpf } for pid=1786 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:16.706000 audit[1786]: AVC avc: denied { bpf } for pid=1786 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:16.706000 audit[1786]: AVC avc: denied { perfmon } for pid=1786 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:16.706000 audit[1786]: AVC avc: denied { perfmon } for pid=1786 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:16.706000 audit[1786]: AVC avc: denied { perfmon } for pid=1786 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:16.706000 audit[1786]: AVC avc: denied { perfmon } for pid=1786 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:16.706000 audit[1786]: AVC avc: denied { perfmon } for pid=1786 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:16.706000 audit[1786]: AVC avc: denied { bpf } for pid=1786 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:16.706000 audit[1786]: AVC avc: denied { bpf } for pid=1786 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:16.706000 audit: BPF prog-id=84 op=LOAD Sep 6 00:21:16.706000 audit[1786]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000145c30 a2=78 a3=c0003d0158 items=0 ppid=1640 pid=1786 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:21:16.706000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6462386330363830626332376637393666613932376563386439333263 Sep 6 00:21:16.730123 env[1194]: time="2025-09-06T00:21:16.730051842Z" level=info msg="StartContainer for \"c96dc9cbcf50880d18234eef32acf3fec34da173cddce1ff62952ccd718b206e\" returns successfully" Sep 6 00:21:16.732974 env[1194]: time="2025-09-06T00:21:16.732909422Z" level=info msg="StartContainer for \"431fa8a65e48f2fc9f0456f50799d84218a937e3aca0d74ebe48a80e96e8527a\" returns successfully" Sep 6 00:21:16.778646 env[1194]: time="2025-09-06T00:21:16.778575231Z" level=info msg="StartContainer for \"db8c0680bc27f796fa927ec8d932cea3b7d8e978e8fa68f5b2ab91d9ca795f50\" returns successfully" Sep 6 00:21:16.793421 kubelet[1587]: W0906 00:21:16.793329 1587 reflector.go:561] k8s.io/client-go/informers/factory.go:160: failed to list *v1.Node: Get "https://147.182.198.71:6443/api/v1/nodes?fieldSelector=metadata.name%3Dci-3510.3.8-n-86fdecb492&limit=500&resourceVersion=0": dial tcp 147.182.198.71:6443: connect: connection refused Sep 6 00:21:16.793601 kubelet[1587]: E0906 00:21:16.793454 1587 reflector.go:158] "Unhandled Error" err="k8s.io/client-go/informers/factory.go:160: Failed to watch *v1.Node: failed to list *v1.Node: Get \"https://147.182.198.71:6443/api/v1/nodes?fieldSelector=metadata.name%3Dci-3510.3.8-n-86fdecb492&limit=500&resourceVersion=0\": dial tcp 147.182.198.71:6443: connect: connection refused" logger="UnhandledError" Sep 6 00:21:16.857510 kubelet[1587]: I0906 00:21:16.857463 1587 kubelet_node_status.go:72] "Attempting to register node" node="ci-3510.3.8-n-86fdecb492" Sep 6 00:21:16.858007 kubelet[1587]: E0906 00:21:16.857973 1587 kubelet_node_status.go:95] "Unable to register node with API server" err="Post \"https://147.182.198.71:6443/api/v1/nodes\": dial tcp 147.182.198.71:6443: connect: connection refused" node="ci-3510.3.8-n-86fdecb492" Sep 6 00:21:17.361040 kubelet[1587]: E0906 00:21:17.361006 1587 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 67.207.67.3 67.207.67.2 67.207.67.3" Sep 6 00:21:17.363663 kubelet[1587]: E0906 00:21:17.363630 1587 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 67.207.67.3 67.207.67.2 67.207.67.3" Sep 6 00:21:17.365577 kubelet[1587]: E0906 00:21:17.365544 1587 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 67.207.67.3 67.207.67.2 67.207.67.3" Sep 6 00:21:17.406777 kubelet[1587]: E0906 00:21:17.406734 1587 certificate_manager.go:562] "Unhandled Error" err="kubernetes.io/kube-apiserver-client-kubelet: Failed while requesting a signed certificate from the control plane: cannot create certificate signing request: Post \"https://147.182.198.71:6443/apis/certificates.k8s.io/v1/certificatesigningrequests\": dial tcp 147.182.198.71:6443: connect: connection refused" logger="UnhandledError" Sep 6 00:21:18.008000 audit[1812]: AVC avc: denied { watch } for pid=1812 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="vda9" ino=526385 scontext=system_u:system_r:svirt_lxc_net_t:s0:c665,c790 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Sep 6 00:21:18.008000 audit[1812]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=6 a1=c000d010e0 a2=fc6 a3=0 items=0 ppid=1655 pid=1812 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c665,c790 key=(null) Sep 6 00:21:18.008000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Sep 6 00:21:18.009000 audit[1812]: AVC avc: denied { watch } for pid=1812 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=526379 scontext=system_u:system_r:svirt_lxc_net_t:s0:c665,c790 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Sep 6 00:21:18.009000 audit[1812]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=6 a1=c000d07980 a2=fc6 a3=0 items=0 ppid=1655 pid=1812 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c665,c790 key=(null) Sep 6 00:21:18.009000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Sep 6 00:21:18.366995 kubelet[1587]: E0906 00:21:18.366894 1587 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 67.207.67.3 67.207.67.2 67.207.67.3" Sep 6 00:21:18.459433 kubelet[1587]: I0906 00:21:18.459395 1587 kubelet_node_status.go:72] "Attempting to register node" node="ci-3510.3.8-n-86fdecb492" Sep 6 00:21:19.087000 audit[1819]: AVC avc: denied { watch } for pid=1819 comm="kube-apiserver" path="/etc/kubernetes/pki/apiserver.crt" dev="vda9" ino=526381 scontext=system_u:system_r:svirt_lxc_net_t:s0:c762,c897 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Sep 6 00:21:19.092215 kernel: kauditd_printk_skb: 564 callbacks suppressed Sep 6 00:21:19.092369 kernel: audit: type=1400 audit(1757118079.087:572): avc: denied { watch } for pid=1819 comm="kube-apiserver" path="/etc/kubernetes/pki/apiserver.crt" dev="vda9" ino=526381 scontext=system_u:system_r:svirt_lxc_net_t:s0:c762,c897 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Sep 6 00:21:19.092407 kernel: audit: type=1400 audit(1757118079.089:573): avc: denied { watch } for pid=1819 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="vda9" ino=526385 scontext=system_u:system_r:svirt_lxc_net_t:s0:c762,c897 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Sep 6 00:21:19.089000 audit[1819]: AVC avc: denied { watch } for pid=1819 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="vda9" ino=526385 scontext=system_u:system_r:svirt_lxc_net_t:s0:c762,c897 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Sep 6 00:21:19.089000 audit[1819]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=42 a1=c003cbf170 a2=fc6 a3=0 items=0 ppid=1640 pid=1819 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c762,c897 key=(null) Sep 6 00:21:19.089000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3134372E3138322E3139382E3731002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B Sep 6 00:21:19.104622 kernel: audit: type=1300 audit(1757118079.089:573): arch=c000003e syscall=254 success=no exit=-13 a0=42 a1=c003cbf170 a2=fc6 a3=0 items=0 ppid=1640 pid=1819 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c762,c897 key=(null) Sep 6 00:21:19.104746 kernel: audit: type=1327 audit(1757118079.089:573): proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3134372E3138322E3139382E3731002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B Sep 6 00:21:19.104782 kernel: audit: type=1400 audit(1757118079.089:574): avc: denied { watch } for pid=1819 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=526379 scontext=system_u:system_r:svirt_lxc_net_t:s0:c762,c897 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Sep 6 00:21:19.089000 audit[1819]: AVC avc: denied { watch } for pid=1819 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=526379 scontext=system_u:system_r:svirt_lxc_net_t:s0:c762,c897 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Sep 6 00:21:19.089000 audit[1819]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=42 a1=c0090b36a0 a2=fc6 a3=0 items=0 ppid=1640 pid=1819 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c762,c897 key=(null) Sep 6 00:21:19.111688 kernel: audit: type=1300 audit(1757118079.089:574): arch=c000003e syscall=254 success=no exit=-13 a0=42 a1=c0090b36a0 a2=fc6 a3=0 items=0 ppid=1640 pid=1819 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c762,c897 key=(null) Sep 6 00:21:19.111843 kernel: audit: type=1327 audit(1757118079.089:574): proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3134372E3138322E3139382E3731002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B Sep 6 00:21:19.089000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3134372E3138322E3139382E3731002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B Sep 6 00:21:19.087000 audit[1819]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=41 a1=c00423cb70 a2=fc6 a3=0 items=0 ppid=1640 pid=1819 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c762,c897 key=(null) Sep 6 00:21:19.087000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3134372E3138322E3139382E3731002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B Sep 6 00:21:19.125361 kernel: audit: type=1300 audit(1757118079.087:572): arch=c000003e syscall=254 success=no exit=-13 a0=41 a1=c00423cb70 a2=fc6 a3=0 items=0 ppid=1640 pid=1819 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c762,c897 key=(null) Sep 6 00:21:19.125489 kernel: audit: type=1327 audit(1757118079.087:572): proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3134372E3138322E3139382E3731002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B Sep 6 00:21:19.114000 audit[1819]: AVC avc: denied { watch } for pid=1819 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-client.crt" dev="vda9" ino=526387 scontext=system_u:system_r:svirt_lxc_net_t:s0:c762,c897 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Sep 6 00:21:19.114000 audit[1819]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=4b a1=c00423d020 a2=fc6 a3=0 items=0 ppid=1640 pid=1819 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c762,c897 key=(null) Sep 6 00:21:19.130356 kernel: audit: type=1400 audit(1757118079.114:575): avc: denied { watch } for pid=1819 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-client.crt" dev="vda9" ino=526387 scontext=system_u:system_r:svirt_lxc_net_t:s0:c762,c897 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Sep 6 00:21:19.114000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3134372E3138322E3139382E3731002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B Sep 6 00:21:19.198000 audit[1819]: AVC avc: denied { watch } for pid=1819 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=526379 scontext=system_u:system_r:svirt_lxc_net_t:s0:c762,c897 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Sep 6 00:21:19.198000 audit[1819]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=43 a1=c009e00f60 a2=fc6 a3=0 items=0 ppid=1640 pid=1819 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c762,c897 key=(null) Sep 6 00:21:19.198000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3134372E3138322E3139382E3731002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B Sep 6 00:21:19.201000 audit[1819]: AVC avc: denied { watch } for pid=1819 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="vda9" ino=526385 scontext=system_u:system_r:svirt_lxc_net_t:s0:c762,c897 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Sep 6 00:21:19.201000 audit[1819]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=43 a1=c0043573e0 a2=fc6 a3=0 items=0 ppid=1640 pid=1819 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c762,c897 key=(null) Sep 6 00:21:19.201000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3134372E3138322E3139382E3731002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B Sep 6 00:21:19.259467 kubelet[1587]: I0906 00:21:19.259422 1587 apiserver.go:52] "Watching apiserver" Sep 6 00:21:19.277159 kubelet[1587]: E0906 00:21:19.277116 1587 nodelease.go:49] "Failed to get node when trying to set owner ref to the node lease" err="nodes \"ci-3510.3.8-n-86fdecb492\" not found" node="ci-3510.3.8-n-86fdecb492" Sep 6 00:21:19.299563 kubelet[1587]: I0906 00:21:19.299511 1587 desired_state_of_world_populator.go:155] "Finished populating initial desired state of world" Sep 6 00:21:19.352101 kubelet[1587]: E0906 00:21:19.351873 1587 event.go:359] "Server rejected event (will not retry!)" err="namespaces \"default\" not found" event="&Event{ObjectMeta:{ci-3510.3.8-n-86fdecb492.18628994713ce8f3 default 0 0001-01-01 00:00:00 +0000 UTC map[] map[] [] [] []},InvolvedObject:ObjectReference{Kind:Node,Namespace:,Name:ci-3510.3.8-n-86fdecb492,UID:ci-3510.3.8-n-86fdecb492,APIVersion:,ResourceVersion:,FieldPath:,},Reason:Starting,Message:Starting kubelet.,Source:EventSource{Component:kubelet,Host:ci-3510.3.8-n-86fdecb492,},FirstTimestamp:2025-09-06 00:21:15.275897075 +0000 UTC m=+0.683804791,LastTimestamp:2025-09-06 00:21:15.275897075 +0000 UTC m=+0.683804791,Count:1,Type:Normal,EventTime:0001-01-01 00:00:00 +0000 UTC,Series:nil,Action:,Related:nil,ReportingController:kubelet,ReportingInstance:ci-3510.3.8-n-86fdecb492,}" Sep 6 00:21:19.383465 kubelet[1587]: I0906 00:21:19.383422 1587 kubelet_node_status.go:75] "Successfully registered node" node="ci-3510.3.8-n-86fdecb492" Sep 6 00:21:19.411526 kubelet[1587]: E0906 00:21:19.411415 1587 event.go:359] "Server rejected event (will not retry!)" err="namespaces \"default\" not found" event="&Event{ObjectMeta:{ci-3510.3.8-n-86fdecb492.1862899472d0d0ac default 0 0001-01-01 00:00:00 +0000 UTC map[] map[] [] [] []},InvolvedObject:ObjectReference{Kind:Node,Namespace:,Name:ci-3510.3.8-n-86fdecb492,UID:ci-3510.3.8-n-86fdecb492,APIVersion:,ResourceVersion:,FieldPath:,},Reason:InvalidDiskCapacity,Message:invalid capacity 0 on image filesystem,Source:EventSource{Component:kubelet,Host:ci-3510.3.8-n-86fdecb492,},FirstTimestamp:2025-09-06 00:21:15.302367404 +0000 UTC m=+0.710275115,LastTimestamp:2025-09-06 00:21:15.302367404 +0000 UTC m=+0.710275115,Count:1,Type:Warning,EventTime:0001-01-01 00:00:00 +0000 UTC,Series:nil,Action:,Related:nil,ReportingController:kubelet,ReportingInstance:ci-3510.3.8-n-86fdecb492,}" Sep 6 00:21:21.534920 systemd[1]: Reloading. Sep 6 00:21:21.651685 /usr/lib/systemd/system-generators/torcx-generator[1882]: time="2025-09-06T00:21:21Z" level=debug msg="common configuration parsed" base_dir=/var/lib/torcx/ conf_dir=/etc/torcx/ run_dir=/run/torcx/ store_paths="[/usr/share/torcx/store /usr/share/oem/torcx/store/3510.3.8 /usr/share/oem/torcx/store /var/lib/torcx/store/3510.3.8 /var/lib/torcx/store]" Sep 6 00:21:21.651714 /usr/lib/systemd/system-generators/torcx-generator[1882]: time="2025-09-06T00:21:21Z" level=info msg="torcx already run" Sep 6 00:21:21.779653 systemd[1]: /usr/lib/systemd/system/locksmithd.service:8: Unit uses CPUShares=; please use CPUWeight= instead. Support for CPUShares= will be removed soon. Sep 6 00:21:21.779673 systemd[1]: /usr/lib/systemd/system/locksmithd.service:9: Unit uses MemoryLimit=; please use MemoryMax= instead. Support for MemoryLimit= will be removed soon. Sep 6 00:21:21.802914 systemd[1]: /run/systemd/system/docker.socket:8: ListenStream= references a path below legacy directory /var/run/, updating /var/run/docker.sock → /run/docker.sock; please update the unit file accordingly. Sep 6 00:21:21.903000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:21.903000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:21.903000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:21.903000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:21.903000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:21.903000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:21.903000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:21.903000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:21.903000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:21.903000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:21.903000 audit: BPF prog-id=85 op=LOAD Sep 6 00:21:21.903000 audit: BPF prog-id=46 op=UNLOAD Sep 6 00:21:21.906000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:21.906000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:21.906000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:21.906000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:21.906000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:21.906000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:21.906000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:21.906000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:21.906000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:21.906000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:21.906000 audit: BPF prog-id=86 op=LOAD Sep 6 00:21:21.906000 audit: BPF prog-id=65 op=UNLOAD Sep 6 00:21:21.907000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:21.907000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:21.907000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:21.907000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:21.907000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:21.907000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:21.907000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:21.907000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:21.907000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:21.907000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:21.907000 audit: BPF prog-id=87 op=LOAD Sep 6 00:21:21.907000 audit: BPF prog-id=47 op=UNLOAD Sep 6 00:21:21.907000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:21.907000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:21.907000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:21.907000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:21.907000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:21.907000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:21.907000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:21.907000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:21.907000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:21.908000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:21.908000 audit: BPF prog-id=88 op=LOAD Sep 6 00:21:21.908000 audit: BPF prog-id=48 op=UNLOAD Sep 6 00:21:21.909000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:21.909000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:21.909000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:21.909000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:21.909000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:21.909000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:21.909000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:21.909000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:21.909000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:21.909000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:21.909000 audit: BPF prog-id=89 op=LOAD Sep 6 00:21:21.909000 audit: BPF prog-id=49 op=UNLOAD Sep 6 00:21:21.909000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:21.909000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:21.909000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:21.909000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:21.909000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:21.909000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:21.909000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:21.909000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:21.909000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:21.909000 audit: BPF prog-id=90 op=LOAD Sep 6 00:21:21.909000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:21.909000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:21.909000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:21.909000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:21.909000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:21.909000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:21.909000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:21.909000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:21.909000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:21.909000 audit: BPF prog-id=91 op=LOAD Sep 6 00:21:21.909000 audit: BPF prog-id=50 op=UNLOAD Sep 6 00:21:21.909000 audit: BPF prog-id=51 op=UNLOAD Sep 6 00:21:21.910000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:21.910000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:21.910000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:21.910000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:21.910000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:21.910000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:21.910000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:21.910000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:21.910000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:21.911000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:21.911000 audit: BPF prog-id=92 op=LOAD Sep 6 00:21:21.911000 audit: BPF prog-id=73 op=UNLOAD Sep 6 00:21:21.911000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:21.911000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:21.911000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:21.911000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:21.911000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:21.911000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:21.911000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:21.911000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:21.911000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:21.911000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:21.911000 audit: BPF prog-id=93 op=LOAD Sep 6 00:21:21.911000 audit: BPF prog-id=52 op=UNLOAD Sep 6 00:21:21.913000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:21.913000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:21.913000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:21.913000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:21.913000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:21.913000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:21.913000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:21.913000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:21.913000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:21.913000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:21.913000 audit: BPF prog-id=94 op=LOAD Sep 6 00:21:21.913000 audit: BPF prog-id=77 op=UNLOAD Sep 6 00:21:21.914000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:21.914000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:21.914000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:21.914000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:21.914000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:21.914000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:21.914000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:21.914000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:21.914000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:21.914000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:21.914000 audit: BPF prog-id=95 op=LOAD Sep 6 00:21:21.914000 audit: BPF prog-id=81 op=UNLOAD Sep 6 00:21:21.916000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:21.916000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:21.916000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:21.916000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:21.916000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:21.916000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:21.916000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:21.916000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:21.916000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:21.916000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:21.916000 audit: BPF prog-id=96 op=LOAD Sep 6 00:21:21.916000 audit: BPF prog-id=53 op=UNLOAD Sep 6 00:21:21.916000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:21.916000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:21.916000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:21.916000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:21.916000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:21.916000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:21.916000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:21.916000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:21.916000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:21.916000 audit: BPF prog-id=97 op=LOAD Sep 6 00:21:21.916000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:21.916000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:21.916000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:21.916000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:21.916000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:21.916000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:21.916000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:21.916000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:21.916000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:21.916000 audit: BPF prog-id=98 op=LOAD Sep 6 00:21:21.916000 audit: BPF prog-id=54 op=UNLOAD Sep 6 00:21:21.916000 audit: BPF prog-id=55 op=UNLOAD Sep 6 00:21:21.917000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:21.917000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:21.917000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:21.917000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:21.917000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:21.917000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:21.917000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:21.917000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:21.917000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:21.917000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:21.917000 audit: BPF prog-id=99 op=LOAD Sep 6 00:21:21.917000 audit: BPF prog-id=56 op=UNLOAD Sep 6 00:21:21.917000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:21.917000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:21.917000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:21.917000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:21.917000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:21.917000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:21.917000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:21.917000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:21.917000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:21.917000 audit: BPF prog-id=100 op=LOAD Sep 6 00:21:21.917000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:21.917000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:21.917000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:21.917000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:21.917000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:21.917000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:21.917000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:21.917000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:21.917000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:21.917000 audit: BPF prog-id=101 op=LOAD Sep 6 00:21:21.917000 audit: BPF prog-id=57 op=UNLOAD Sep 6 00:21:21.917000 audit: BPF prog-id=58 op=UNLOAD Sep 6 00:21:21.917000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:21.917000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:21.917000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:21.917000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:21.917000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:21.917000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:21.917000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:21.917000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:21.917000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:21.918000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:21.918000 audit: BPF prog-id=102 op=LOAD Sep 6 00:21:21.918000 audit: BPF prog-id=61 op=UNLOAD Sep 6 00:21:21.919000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:21.919000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:21.919000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:21.919000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:21.919000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:21.919000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:21.919000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:21.919000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:21.919000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:21.919000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:21.919000 audit: BPF prog-id=103 op=LOAD Sep 6 00:21:21.919000 audit: BPF prog-id=69 op=UNLOAD Sep 6 00:21:21.921000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:21.921000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:21.921000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:21.921000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:21.921000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:21.921000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:21.921000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:21.921000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:21.921000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:21.921000 audit: BPF prog-id=104 op=LOAD Sep 6 00:21:21.921000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:21.921000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:21.921000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:21.921000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:21.921000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:21.921000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:21.921000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:21.921000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:21.921000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:21.921000 audit: BPF prog-id=105 op=LOAD Sep 6 00:21:21.921000 audit: BPF prog-id=59 op=UNLOAD Sep 6 00:21:21.921000 audit: BPF prog-id=60 op=UNLOAD Sep 6 00:21:21.950138 systemd[1]: Stopping kubelet.service... Sep 6 00:21:21.967151 systemd[1]: kubelet.service: Deactivated successfully. Sep 6 00:21:21.967497 systemd[1]: Stopped kubelet.service. Sep 6 00:21:21.966000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 00:21:21.967608 systemd[1]: kubelet.service: Consumed 1.159s CPU time. Sep 6 00:21:21.970395 systemd[1]: Starting kubelet.service... Sep 6 00:21:23.117464 systemd[1]: Started kubelet.service. Sep 6 00:21:23.116000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 00:21:23.223547 kubelet[1933]: Flag --container-runtime-endpoint has been deprecated, This parameter should be set via the config file specified by the Kubelet's --config flag. See https://kubernetes.io/docs/tasks/administer-cluster/kubelet-config-file/ for more information. Sep 6 00:21:23.224121 kubelet[1933]: Flag --pod-infra-container-image has been deprecated, will be removed in a future release. Image garbage collector will get sandbox image information from CRI. Sep 6 00:21:23.224217 kubelet[1933]: Flag --volume-plugin-dir has been deprecated, This parameter should be set via the config file specified by the Kubelet's --config flag. See https://kubernetes.io/docs/tasks/administer-cluster/kubelet-config-file/ for more information. Sep 6 00:21:23.226312 kubelet[1933]: I0906 00:21:23.226228 1933 server.go:211] "--pod-infra-container-image will not be pruned by the image garbage collector in kubelet and should also be set in the remote runtime" Sep 6 00:21:23.238973 kubelet[1933]: I0906 00:21:23.238923 1933 server.go:491] "Kubelet version" kubeletVersion="v1.31.8" Sep 6 00:21:23.239222 kubelet[1933]: I0906 00:21:23.239203 1933 server.go:493] "Golang settings" GOGC="" GOMAXPROCS="" GOTRACEBACK="" Sep 6 00:21:23.239893 kubelet[1933]: I0906 00:21:23.239851 1933 server.go:934] "Client rotation is on, will bootstrap in background" Sep 6 00:21:23.242007 kubelet[1933]: I0906 00:21:23.241976 1933 certificate_store.go:130] Loading cert/key pair from "/var/lib/kubelet/pki/kubelet-client-current.pem". Sep 6 00:21:23.252593 kubelet[1933]: I0906 00:21:23.249758 1933 dynamic_cafile_content.go:160] "Starting controller" name="client-ca-bundle::/etc/kubernetes/pki/ca.crt" Sep 6 00:21:23.255891 kubelet[1933]: E0906 00:21:23.255775 1933 log.go:32] "RuntimeConfig from runtime service failed" err="rpc error: code = Unimplemented desc = unknown method RuntimeConfig for service runtime.v1.RuntimeService" Sep 6 00:21:23.255891 kubelet[1933]: I0906 00:21:23.255813 1933 server.go:1408] "CRI implementation should be updated to support RuntimeConfig when KubeletCgroupDriverFromCRI feature gate has been enabled. Falling back to using cgroupDriver from kubelet config." Sep 6 00:21:23.259799 kubelet[1933]: I0906 00:21:23.259745 1933 server.go:749] "--cgroups-per-qos enabled, but --cgroup-root was not specified. defaulting to /" Sep 6 00:21:23.260031 kubelet[1933]: I0906 00:21:23.259984 1933 swap_util.go:113] "Swap is on" /proc/swaps contents="Filename\t\t\t\tType\t\tSize\t\tUsed\t\tPriority" Sep 6 00:21:23.260306 kubelet[1933]: I0906 00:21:23.260144 1933 container_manager_linux.go:264] "Container manager verified user specified cgroup-root exists" cgroupRoot=[] Sep 6 00:21:23.260556 kubelet[1933]: I0906 00:21:23.260187 1933 container_manager_linux.go:269] "Creating Container Manager object based on Node Config" nodeConfig={"NodeName":"ci-3510.3.8-n-86fdecb492","RuntimeCgroupsName":"","SystemCgroupsName":"","KubeletCgroupsName":"","KubeletOOMScoreAdj":-999,"ContainerRuntime":"","CgroupsPerQOS":true,"CgroupRoot":"/","CgroupDriver":"systemd","KubeletRootDir":"/var/lib/kubelet","ProtectKernelDefaults":false,"KubeReservedCgroupName":"","SystemReservedCgroupName":"","ReservedSystemCPUs":{},"EnforceNodeAllocatable":{"pods":{}},"KubeReserved":null,"SystemReserved":null,"HardEvictionThresholds":[{"Signal":"nodefs.inodesFree","Operator":"LessThan","Value":{"Quantity":null,"Percentage":0.05},"GracePeriod":0,"MinReclaim":null},{"Signal":"imagefs.available","Operator":"LessThan","Value":{"Quantity":null,"Percentage":0.15},"GracePeriod":0,"MinReclaim":null},{"Signal":"imagefs.inodesFree","Operator":"LessThan","Value":{"Quantity":null,"Percentage":0.05},"GracePeriod":0,"MinReclaim":null},{"Signal":"memory.available","Operator":"LessThan","Value":{"Quantity":"100Mi","Percentage":0},"GracePeriod":0,"MinReclaim":null},{"Signal":"nodefs.available","Operator":"LessThan","Value":{"Quantity":null,"Percentage":0.1},"GracePeriod":0,"MinReclaim":null}],"QOSReserved":{},"CPUManagerPolicy":"none","CPUManagerPolicyOptions":null,"TopologyManagerScope":"container","CPUManagerReconcilePeriod":10000000000,"ExperimentalMemoryManagerPolicy":"None","ExperimentalMemoryManagerReservedMemory":null,"PodPidsLimit":-1,"EnforceCPULimits":true,"CPUCFSQuotaPeriod":100000000,"TopologyManagerPolicy":"none","TopologyManagerPolicyOptions":null,"CgroupVersion":2} Sep 6 00:21:23.260556 kubelet[1933]: I0906 00:21:23.260521 1933 topology_manager.go:138] "Creating topology manager with none policy" Sep 6 00:21:23.260834 kubelet[1933]: I0906 00:21:23.260577 1933 container_manager_linux.go:300] "Creating device plugin manager" Sep 6 00:21:23.260834 kubelet[1933]: I0906 00:21:23.260628 1933 state_mem.go:36] "Initialized new in-memory state store" Sep 6 00:21:23.260834 kubelet[1933]: I0906 00:21:23.260782 1933 kubelet.go:408] "Attempting to sync node with API server" Sep 6 00:21:23.260834 kubelet[1933]: I0906 00:21:23.260797 1933 kubelet.go:303] "Adding static pod path" path="/etc/kubernetes/manifests" Sep 6 00:21:23.265109 kubelet[1933]: I0906 00:21:23.263038 1933 kubelet.go:314] "Adding apiserver pod source" Sep 6 00:21:23.265109 kubelet[1933]: I0906 00:21:23.263071 1933 apiserver.go:42] "Waiting for node sync before watching apiserver pods" Sep 6 00:21:23.284420 kubelet[1933]: I0906 00:21:23.282761 1933 kuberuntime_manager.go:262] "Container runtime initialized" containerRuntime="containerd" version="1.6.16" apiVersion="v1" Sep 6 00:21:23.285412 kubelet[1933]: I0906 00:21:23.285369 1933 kubelet.go:837] "Not starting ClusterTrustBundle informer because we are in static kubelet mode" Sep 6 00:21:23.288026 kubelet[1933]: I0906 00:21:23.287981 1933 server.go:1274] "Started kubelet" Sep 6 00:21:23.297000 audit[1933]: AVC avc: denied { mac_admin } for pid=1933 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:23.297000 audit: SELINUX_ERR op=setxattr invalid_context="system_u:object_r:container_file_t:s0" Sep 6 00:21:23.297000 audit[1933]: SYSCALL arch=c000003e syscall=188 success=no exit=-22 a0=c000ad5920 a1=c000c349a8 a2=c000ad58f0 a3=25 items=0 ppid=1 pid=1933 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/usr/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:21:23.297000 audit: PROCTITLE proctitle=2F7573722F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 Sep 6 00:21:23.302311 kubelet[1933]: I0906 00:21:23.302229 1933 ratelimit.go:55] "Setting rate limiting for endpoint" service="podresources" qps=100 burstTokens=10 Sep 6 00:21:23.305250 kubelet[1933]: I0906 00:21:23.305194 1933 server.go:236] "Starting to serve the podresources API" endpoint="unix:/var/lib/kubelet/pod-resources/kubelet.sock" Sep 6 00:21:23.306850 kubelet[1933]: I0906 00:21:23.301889 1933 server.go:163] "Starting to listen" address="0.0.0.0" port=10250 Sep 6 00:21:23.311490 kubelet[1933]: I0906 00:21:23.310763 1933 server.go:449] "Adding debug handlers to kubelet server" Sep 6 00:21:23.314415 kubelet[1933]: I0906 00:21:23.301819 1933 kubelet.go:1430] "Unprivileged containerized plugins might not work, could not set selinux context on plugin registration dir" path="/var/lib/kubelet/plugins_registry" err="setxattr /var/lib/kubelet/plugins_registry: invalid argument" Sep 6 00:21:23.313000 audit[1933]: AVC avc: denied { mac_admin } for pid=1933 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:23.313000 audit: SELINUX_ERR op=setxattr invalid_context="system_u:object_r:container_file_t:s0" Sep 6 00:21:23.313000 audit[1933]: SYSCALL arch=c000003e syscall=188 success=no exit=-22 a0=c000bd31c0 a1=c000b459b0 a2=c000c17d40 a3=25 items=0 ppid=1 pid=1933 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/usr/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:21:23.313000 audit: PROCTITLE proctitle=2F7573722F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 Sep 6 00:21:23.314927 kubelet[1933]: I0906 00:21:23.314486 1933 kubelet.go:1434] "Unprivileged containerized plugins might not work, could not set selinux context on plugins dir" path="/var/lib/kubelet/plugins" err="setxattr /var/lib/kubelet/plugins: invalid argument" Sep 6 00:21:23.314927 kubelet[1933]: I0906 00:21:23.314543 1933 fs_resource_analyzer.go:67] "Starting FS ResourceAnalyzer" Sep 6 00:21:23.315772 kubelet[1933]: I0906 00:21:23.315738 1933 dynamic_serving_content.go:135] "Starting controller" name="kubelet-server-cert-files::/var/lib/kubelet/pki/kubelet.crt::/var/lib/kubelet/pki/kubelet.key" Sep 6 00:21:23.320815 kubelet[1933]: I0906 00:21:23.320769 1933 volume_manager.go:289] "Starting Kubelet Volume Manager" Sep 6 00:21:23.321331 kubelet[1933]: I0906 00:21:23.321294 1933 desired_state_of_world_populator.go:147] "Desired state populator starts to run" Sep 6 00:21:23.321778 kubelet[1933]: I0906 00:21:23.321747 1933 reconciler.go:26] "Reconciler: start to sync state" Sep 6 00:21:23.325053 kubelet[1933]: I0906 00:21:23.325014 1933 factory.go:221] Registration of the systemd container factory successfully Sep 6 00:21:23.325494 kubelet[1933]: I0906 00:21:23.325455 1933 factory.go:219] Registration of the crio container factory failed: Get "http://%2Fvar%2Frun%2Fcrio%2Fcrio.sock/info": dial unix /var/run/crio/crio.sock: connect: no such file or directory Sep 6 00:21:23.328038 kubelet[1933]: E0906 00:21:23.327995 1933 kubelet.go:1478] "Image garbage collection failed once. Stats initialization may not have completed yet" err="invalid capacity 0 on image filesystem" Sep 6 00:21:23.343909 kubelet[1933]: I0906 00:21:23.343863 1933 factory.go:221] Registration of the containerd container factory successfully Sep 6 00:21:23.379673 kubelet[1933]: I0906 00:21:23.377829 1933 kubelet_network_linux.go:50] "Initialized iptables rules." protocol="IPv4" Sep 6 00:21:23.384470 kubelet[1933]: I0906 00:21:23.384424 1933 kubelet_network_linux.go:50] "Initialized iptables rules." protocol="IPv6" Sep 6 00:21:23.384470 kubelet[1933]: I0906 00:21:23.384466 1933 status_manager.go:217] "Starting to sync pod status with apiserver" Sep 6 00:21:23.384694 kubelet[1933]: I0906 00:21:23.384497 1933 kubelet.go:2321] "Starting kubelet main sync loop" Sep 6 00:21:23.384694 kubelet[1933]: E0906 00:21:23.384563 1933 kubelet.go:2345] "Skipping pod synchronization" err="[container runtime status check may not have completed yet, PLEG is not healthy: pleg has yet to be successful]" Sep 6 00:21:23.435366 kubelet[1933]: I0906 00:21:23.435330 1933 cpu_manager.go:214] "Starting CPU manager" policy="none" Sep 6 00:21:23.438315 kubelet[1933]: I0906 00:21:23.438280 1933 cpu_manager.go:215] "Reconciling" reconcilePeriod="10s" Sep 6 00:21:23.438489 kubelet[1933]: I0906 00:21:23.438476 1933 state_mem.go:36] "Initialized new in-memory state store" Sep 6 00:21:23.438842 kubelet[1933]: I0906 00:21:23.438810 1933 state_mem.go:88] "Updated default CPUSet" cpuSet="" Sep 6 00:21:23.438999 kubelet[1933]: I0906 00:21:23.438965 1933 state_mem.go:96] "Updated CPUSet assignments" assignments={} Sep 6 00:21:23.439065 kubelet[1933]: I0906 00:21:23.439055 1933 policy_none.go:49] "None policy: Start" Sep 6 00:21:23.442213 kubelet[1933]: I0906 00:21:23.442177 1933 memory_manager.go:170] "Starting memorymanager" policy="None" Sep 6 00:21:23.442471 kubelet[1933]: I0906 00:21:23.442452 1933 state_mem.go:35] "Initializing new in-memory state store" Sep 6 00:21:23.442825 kubelet[1933]: I0906 00:21:23.442800 1933 state_mem.go:75] "Updated machine memory state" Sep 6 00:21:23.460031 kubelet[1933]: I0906 00:21:23.459959 1933 manager.go:513] "Failed to read data from checkpoint" checkpoint="kubelet_internal_checkpoint" err="checkpoint is not found" Sep 6 00:21:23.459000 audit[1933]: AVC avc: denied { mac_admin } for pid=1933 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:23.459000 audit: SELINUX_ERR op=setxattr invalid_context="system_u:object_r:container_file_t:s0" Sep 6 00:21:23.459000 audit[1933]: SYSCALL arch=c000003e syscall=188 success=no exit=-22 a0=c0008880f0 a1=c00097ed68 a2=c000888090 a3=25 items=0 ppid=1 pid=1933 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/usr/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:21:23.459000 audit: PROCTITLE proctitle=2F7573722F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 Sep 6 00:21:23.460925 kubelet[1933]: I0906 00:21:23.460895 1933 server.go:88] "Unprivileged containerized plugins might not work. Could not set selinux context on socket dir" path="/var/lib/kubelet/device-plugins/" err="setxattr /var/lib/kubelet/device-plugins/: invalid argument" Sep 6 00:21:23.461284 kubelet[1933]: I0906 00:21:23.461259 1933 eviction_manager.go:189] "Eviction manager: starting control loop" Sep 6 00:21:23.461452 kubelet[1933]: I0906 00:21:23.461412 1933 container_log_manager.go:189] "Initializing container log rotate workers" workers=1 monitorPeriod="10s" Sep 6 00:21:23.462307 kubelet[1933]: I0906 00:21:23.462286 1933 plugin_manager.go:118] "Starting Kubelet Plugin Manager" Sep 6 00:21:23.517901 kubelet[1933]: W0906 00:21:23.517856 1933 warnings.go:70] metadata.name: this is used in the Pod's hostname, which can result in surprising behavior; a DNS label is recommended: [must not contain dots] Sep 6 00:21:23.521128 kubelet[1933]: W0906 00:21:23.521076 1933 warnings.go:70] metadata.name: this is used in the Pod's hostname, which can result in surprising behavior; a DNS label is recommended: [must not contain dots] Sep 6 00:21:23.527572 kubelet[1933]: I0906 00:21:23.527513 1933 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kubeconfig\" (UniqueName: \"kubernetes.io/host-path/cf93944aca1773e88499dc4ad2afd181-kubeconfig\") pod \"kube-scheduler-ci-3510.3.8-n-86fdecb492\" (UID: \"cf93944aca1773e88499dc4ad2afd181\") " pod="kube-system/kube-scheduler-ci-3510.3.8-n-86fdecb492" Sep 6 00:21:23.527572 kubelet[1933]: I0906 00:21:23.527567 1933 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"ca-certs\" (UniqueName: \"kubernetes.io/host-path/9d02cb95976b735500645fa2441ab491-ca-certs\") pod \"kube-apiserver-ci-3510.3.8-n-86fdecb492\" (UID: \"9d02cb95976b735500645fa2441ab491\") " pod="kube-system/kube-apiserver-ci-3510.3.8-n-86fdecb492" Sep 6 00:21:23.527800 kubelet[1933]: I0906 00:21:23.527590 1933 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"usr-share-ca-certificates\" (UniqueName: \"kubernetes.io/host-path/9d02cb95976b735500645fa2441ab491-usr-share-ca-certificates\") pod \"kube-apiserver-ci-3510.3.8-n-86fdecb492\" (UID: \"9d02cb95976b735500645fa2441ab491\") " pod="kube-system/kube-apiserver-ci-3510.3.8-n-86fdecb492" Sep 6 00:21:23.527800 kubelet[1933]: I0906 00:21:23.527629 1933 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"k8s-certs\" (UniqueName: \"kubernetes.io/host-path/4861086eeae139b8582e7f5c37b0fb45-k8s-certs\") pod \"kube-controller-manager-ci-3510.3.8-n-86fdecb492\" (UID: \"4861086eeae139b8582e7f5c37b0fb45\") " pod="kube-system/kube-controller-manager-ci-3510.3.8-n-86fdecb492" Sep 6 00:21:23.527800 kubelet[1933]: I0906 00:21:23.527648 1933 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kubeconfig\" (UniqueName: \"kubernetes.io/host-path/4861086eeae139b8582e7f5c37b0fb45-kubeconfig\") pod \"kube-controller-manager-ci-3510.3.8-n-86fdecb492\" (UID: \"4861086eeae139b8582e7f5c37b0fb45\") " pod="kube-system/kube-controller-manager-ci-3510.3.8-n-86fdecb492" Sep 6 00:21:23.527800 kubelet[1933]: I0906 00:21:23.527664 1933 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"usr-share-ca-certificates\" (UniqueName: \"kubernetes.io/host-path/4861086eeae139b8582e7f5c37b0fb45-usr-share-ca-certificates\") pod \"kube-controller-manager-ci-3510.3.8-n-86fdecb492\" (UID: \"4861086eeae139b8582e7f5c37b0fb45\") " pod="kube-system/kube-controller-manager-ci-3510.3.8-n-86fdecb492" Sep 6 00:21:23.527800 kubelet[1933]: I0906 00:21:23.527679 1933 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"k8s-certs\" (UniqueName: \"kubernetes.io/host-path/9d02cb95976b735500645fa2441ab491-k8s-certs\") pod \"kube-apiserver-ci-3510.3.8-n-86fdecb492\" (UID: \"9d02cb95976b735500645fa2441ab491\") " pod="kube-system/kube-apiserver-ci-3510.3.8-n-86fdecb492" Sep 6 00:21:23.527981 kubelet[1933]: I0906 00:21:23.527699 1933 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"ca-certs\" (UniqueName: \"kubernetes.io/host-path/4861086eeae139b8582e7f5c37b0fb45-ca-certs\") pod \"kube-controller-manager-ci-3510.3.8-n-86fdecb492\" (UID: \"4861086eeae139b8582e7f5c37b0fb45\") " pod="kube-system/kube-controller-manager-ci-3510.3.8-n-86fdecb492" Sep 6 00:21:23.527981 kubelet[1933]: I0906 00:21:23.527717 1933 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"flexvolume-dir\" (UniqueName: \"kubernetes.io/host-path/4861086eeae139b8582e7f5c37b0fb45-flexvolume-dir\") pod \"kube-controller-manager-ci-3510.3.8-n-86fdecb492\" (UID: \"4861086eeae139b8582e7f5c37b0fb45\") " pod="kube-system/kube-controller-manager-ci-3510.3.8-n-86fdecb492" Sep 6 00:21:23.529949 kubelet[1933]: W0906 00:21:23.529911 1933 warnings.go:70] metadata.name: this is used in the Pod's hostname, which can result in surprising behavior; a DNS label is recommended: [must not contain dots] Sep 6 00:21:23.568699 kubelet[1933]: I0906 00:21:23.568662 1933 kubelet_node_status.go:72] "Attempting to register node" node="ci-3510.3.8-n-86fdecb492" Sep 6 00:21:23.583798 kubelet[1933]: I0906 00:21:23.583759 1933 kubelet_node_status.go:111] "Node was previously registered" node="ci-3510.3.8-n-86fdecb492" Sep 6 00:21:23.584092 kubelet[1933]: I0906 00:21:23.584074 1933 kubelet_node_status.go:75] "Successfully registered node" node="ci-3510.3.8-n-86fdecb492" Sep 6 00:21:23.819060 kubelet[1933]: E0906 00:21:23.818997 1933 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 67.207.67.3 67.207.67.2 67.207.67.3" Sep 6 00:21:23.822784 kubelet[1933]: E0906 00:21:23.822738 1933 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 67.207.67.3 67.207.67.2 67.207.67.3" Sep 6 00:21:23.831152 kubelet[1933]: E0906 00:21:23.831096 1933 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 67.207.67.3 67.207.67.2 67.207.67.3" Sep 6 00:21:24.193359 kernel: kauditd_printk_skb: 266 callbacks suppressed Sep 6 00:21:24.193598 kernel: audit: type=1400 audit(1757118084.186:827): avc: denied { watch } for pid=1812 comm="kube-controller" path="/opt/libexec/kubernetes/kubelet-plugins/volume/exec" dev="vda9" ino=526412 scontext=system_u:system_r:svirt_lxc_net_t:s0:c665,c790 tcontext=system_u:object_r:usr_t:s0 tclass=dir permissive=0 Sep 6 00:21:24.186000 audit[1812]: AVC avc: denied { watch } for pid=1812 comm="kube-controller" path="/opt/libexec/kubernetes/kubelet-plugins/volume/exec" dev="vda9" ino=526412 scontext=system_u:system_r:svirt_lxc_net_t:s0:c665,c790 tcontext=system_u:object_r:usr_t:s0 tclass=dir permissive=0 Sep 6 00:21:24.186000 audit[1812]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=8 a1=c000b624c0 a2=fc6 a3=0 items=0 ppid=1655 pid=1812 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c665,c790 key=(null) Sep 6 00:21:24.204425 kernel: audit: type=1300 audit(1757118084.186:827): arch=c000003e syscall=254 success=no exit=-13 a0=8 a1=c000b624c0 a2=fc6 a3=0 items=0 ppid=1655 pid=1812 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c665,c790 key=(null) Sep 6 00:21:24.186000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Sep 6 00:21:24.211278 kernel: audit: type=1327 audit(1757118084.186:827): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Sep 6 00:21:24.276336 kubelet[1933]: I0906 00:21:24.276282 1933 apiserver.go:52] "Watching apiserver" Sep 6 00:21:24.322293 kubelet[1933]: I0906 00:21:24.322172 1933 desired_state_of_world_populator.go:155] "Finished populating initial desired state of world" Sep 6 00:21:24.436721 kubelet[1933]: E0906 00:21:24.436679 1933 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 67.207.67.3 67.207.67.2 67.207.67.3" Sep 6 00:21:24.438026 kubelet[1933]: E0906 00:21:24.437984 1933 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 67.207.67.3 67.207.67.2 67.207.67.3" Sep 6 00:21:24.438361 kubelet[1933]: E0906 00:21:24.438340 1933 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 67.207.67.3 67.207.67.2 67.207.67.3" Sep 6 00:21:24.465169 kubelet[1933]: I0906 00:21:24.465021 1933 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="kube-system/kube-scheduler-ci-3510.3.8-n-86fdecb492" podStartSLOduration=1.46500261 podStartE2EDuration="1.46500261s" podCreationTimestamp="2025-09-06 00:21:23 +0000 UTC" firstStartedPulling="0001-01-01 00:00:00 +0000 UTC" lastFinishedPulling="0001-01-01 00:00:00 +0000 UTC" observedRunningTime="2025-09-06 00:21:24.464379835 +0000 UTC m=+1.324369802" watchObservedRunningTime="2025-09-06 00:21:24.46500261 +0000 UTC m=+1.324992778" Sep 6 00:21:24.480986 kubelet[1933]: I0906 00:21:24.480921 1933 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="kube-system/kube-apiserver-ci-3510.3.8-n-86fdecb492" podStartSLOduration=1.480903976 podStartE2EDuration="1.480903976s" podCreationTimestamp="2025-09-06 00:21:23 +0000 UTC" firstStartedPulling="0001-01-01 00:00:00 +0000 UTC" lastFinishedPulling="0001-01-01 00:00:00 +0000 UTC" observedRunningTime="2025-09-06 00:21:24.477243198 +0000 UTC m=+1.337233158" watchObservedRunningTime="2025-09-06 00:21:24.480903976 +0000 UTC m=+1.340893934" Sep 6 00:21:24.493489 kubelet[1933]: I0906 00:21:24.493425 1933 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="kube-system/kube-controller-manager-ci-3510.3.8-n-86fdecb492" podStartSLOduration=1.493398264 podStartE2EDuration="1.493398264s" podCreationTimestamp="2025-09-06 00:21:23 +0000 UTC" firstStartedPulling="0001-01-01 00:00:00 +0000 UTC" lastFinishedPulling="0001-01-01 00:00:00 +0000 UTC" observedRunningTime="2025-09-06 00:21:24.490949669 +0000 UTC m=+1.350939636" watchObservedRunningTime="2025-09-06 00:21:24.493398264 +0000 UTC m=+1.353388222" Sep 6 00:21:25.438311 kubelet[1933]: E0906 00:21:25.438266 1933 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 67.207.67.3 67.207.67.2 67.207.67.3" Sep 6 00:21:26.435000 audit[1812]: AVC avc: denied { watch } for pid=1812 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=526379 scontext=system_u:system_r:svirt_lxc_net_t:s0:c665,c790 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Sep 6 00:21:26.435000 audit[1812]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=9 a1=c000976020 a2=fc6 a3=0 items=0 ppid=1655 pid=1812 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c665,c790 key=(null) Sep 6 00:21:26.446218 kernel: audit: type=1400 audit(1757118086.435:828): avc: denied { watch } for pid=1812 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=526379 scontext=system_u:system_r:svirt_lxc_net_t:s0:c665,c790 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Sep 6 00:21:26.446447 kernel: audit: type=1300 audit(1757118086.435:828): arch=c000003e syscall=254 success=no exit=-13 a0=9 a1=c000976020 a2=fc6 a3=0 items=0 ppid=1655 pid=1812 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c665,c790 key=(null) Sep 6 00:21:26.446501 kernel: audit: type=1327 audit(1757118086.435:828): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Sep 6 00:21:26.435000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Sep 6 00:21:26.437000 audit[1812]: AVC avc: denied { watch } for pid=1812 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=526379 scontext=system_u:system_r:svirt_lxc_net_t:s0:c665,c790 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Sep 6 00:21:26.452534 kernel: audit: type=1400 audit(1757118086.437:829): avc: denied { watch } for pid=1812 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=526379 scontext=system_u:system_r:svirt_lxc_net_t:s0:c665,c790 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Sep 6 00:21:26.452729 kernel: audit: type=1300 audit(1757118086.437:829): arch=c000003e syscall=254 success=no exit=-13 a0=9 a1=c0009761e0 a2=fc6 a3=0 items=0 ppid=1655 pid=1812 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c665,c790 key=(null) Sep 6 00:21:26.437000 audit[1812]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=9 a1=c0009761e0 a2=fc6 a3=0 items=0 ppid=1655 pid=1812 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c665,c790 key=(null) Sep 6 00:21:26.437000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Sep 6 00:21:26.461098 kernel: audit: type=1327 audit(1757118086.437:829): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Sep 6 00:21:26.461313 kernel: audit: type=1400 audit(1757118086.437:830): avc: denied { watch } for pid=1812 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=526379 scontext=system_u:system_r:svirt_lxc_net_t:s0:c665,c790 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Sep 6 00:21:26.437000 audit[1812]: AVC avc: denied { watch } for pid=1812 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=526379 scontext=system_u:system_r:svirt_lxc_net_t:s0:c665,c790 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Sep 6 00:21:26.437000 audit[1812]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=9 a1=c0007199a0 a2=fc6 a3=0 items=0 ppid=1655 pid=1812 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c665,c790 key=(null) Sep 6 00:21:26.437000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Sep 6 00:21:26.437000 audit[1812]: AVC avc: denied { watch } for pid=1812 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=526379 scontext=system_u:system_r:svirt_lxc_net_t:s0:c665,c790 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Sep 6 00:21:26.437000 audit[1812]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=9 a1=c0007199e0 a2=fc6 a3=0 items=0 ppid=1655 pid=1812 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c665,c790 key=(null) Sep 6 00:21:26.437000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Sep 6 00:21:27.817521 kubelet[1933]: E0906 00:21:27.817478 1933 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 67.207.67.3 67.207.67.2 67.207.67.3" Sep 6 00:21:28.118254 kubelet[1933]: I0906 00:21:28.118122 1933 kuberuntime_manager.go:1635] "Updating runtime config through cri with podcidr" CIDR="192.168.0.0/24" Sep 6 00:21:28.119094 env[1194]: time="2025-09-06T00:21:28.118998903Z" level=info msg="No cni config template is specified, wait for other system components to drop the config." Sep 6 00:21:28.119982 kubelet[1933]: I0906 00:21:28.119947 1933 kubelet_network.go:61] "Updating Pod CIDR" originalPodCIDR="" newPodCIDR="192.168.0.0/24" Sep 6 00:21:28.447526 kubelet[1933]: E0906 00:21:28.447401 1933 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 67.207.67.3 67.207.67.2 67.207.67.3" Sep 6 00:21:28.987675 systemd[1]: Created slice kubepods-besteffort-pod8655294f_4d4a_43f1_a9a7_607ba3175ea1.slice. Sep 6 00:21:29.065324 kubelet[1933]: I0906 00:21:29.065277 1933 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"lib-modules\" (UniqueName: \"kubernetes.io/host-path/8655294f-4d4a-43f1-a9a7-607ba3175ea1-lib-modules\") pod \"kube-proxy-5xcq4\" (UID: \"8655294f-4d4a-43f1-a9a7-607ba3175ea1\") " pod="kube-system/kube-proxy-5xcq4" Sep 6 00:21:29.065838 kubelet[1933]: I0906 00:21:29.065814 1933 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-g9j62\" (UniqueName: \"kubernetes.io/projected/8655294f-4d4a-43f1-a9a7-607ba3175ea1-kube-api-access-g9j62\") pod \"kube-proxy-5xcq4\" (UID: \"8655294f-4d4a-43f1-a9a7-607ba3175ea1\") " pod="kube-system/kube-proxy-5xcq4" Sep 6 00:21:29.065997 kubelet[1933]: I0906 00:21:29.065982 1933 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-proxy\" (UniqueName: \"kubernetes.io/configmap/8655294f-4d4a-43f1-a9a7-607ba3175ea1-kube-proxy\") pod \"kube-proxy-5xcq4\" (UID: \"8655294f-4d4a-43f1-a9a7-607ba3175ea1\") " pod="kube-system/kube-proxy-5xcq4" Sep 6 00:21:29.066111 kubelet[1933]: I0906 00:21:29.066097 1933 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"xtables-lock\" (UniqueName: \"kubernetes.io/host-path/8655294f-4d4a-43f1-a9a7-607ba3175ea1-xtables-lock\") pod \"kube-proxy-5xcq4\" (UID: \"8655294f-4d4a-43f1-a9a7-607ba3175ea1\") " pod="kube-system/kube-proxy-5xcq4" Sep 6 00:21:29.186464 kubelet[1933]: I0906 00:21:29.186430 1933 swap_util.go:74] "error creating dir to test if tmpfs noswap is enabled. Assuming not supported" mount path="" error="stat /var/lib/kubelet/plugins/kubernetes.io/empty-dir: no such file or directory" Sep 6 00:21:29.215935 systemd[1]: Created slice kubepods-besteffort-pod9e92d9de_c4fe_4371_b54c_6ebe6f67c718.slice. Sep 6 00:21:29.267013 kubelet[1933]: I0906 00:21:29.266906 1933 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"var-lib-calico\" (UniqueName: \"kubernetes.io/host-path/9e92d9de-c4fe-4371-b54c-6ebe6f67c718-var-lib-calico\") pod \"tigera-operator-58fc44c59b-sh8bt\" (UID: \"9e92d9de-c4fe-4371-b54c-6ebe6f67c718\") " pod="tigera-operator/tigera-operator-58fc44c59b-sh8bt" Sep 6 00:21:29.267013 kubelet[1933]: I0906 00:21:29.266979 1933 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-fhdnt\" (UniqueName: \"kubernetes.io/projected/9e92d9de-c4fe-4371-b54c-6ebe6f67c718-kube-api-access-fhdnt\") pod \"tigera-operator-58fc44c59b-sh8bt\" (UID: \"9e92d9de-c4fe-4371-b54c-6ebe6f67c718\") " pod="tigera-operator/tigera-operator-58fc44c59b-sh8bt" Sep 6 00:21:29.297975 kubelet[1933]: E0906 00:21:29.297882 1933 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 67.207.67.3 67.207.67.2 67.207.67.3" Sep 6 00:21:29.298734 env[1194]: time="2025-09-06T00:21:29.298680278Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-proxy-5xcq4,Uid:8655294f-4d4a-43f1-a9a7-607ba3175ea1,Namespace:kube-system,Attempt:0,}" Sep 6 00:21:29.316357 env[1194]: time="2025-09-06T00:21:29.316192833Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Sep 6 00:21:29.316357 env[1194]: time="2025-09-06T00:21:29.316273254Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Sep 6 00:21:29.316357 env[1194]: time="2025-09-06T00:21:29.316285081Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Sep 6 00:21:29.321848 env[1194]: time="2025-09-06T00:21:29.316918573Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/f428f1f89ce4219755000bb8451be59a206ce6d696474aa4f74bc32e35679281 pid=1984 runtime=io.containerd.runc.v2 Sep 6 00:21:29.335214 systemd[1]: Started cri-containerd-f428f1f89ce4219755000bb8451be59a206ce6d696474aa4f74bc32e35679281.scope. Sep 6 00:21:29.361000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:29.363866 kernel: kauditd_printk_skb: 5 callbacks suppressed Sep 6 00:21:29.363999 kernel: audit: type=1400 audit(1757118089.361:832): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:29.361000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:29.368896 kernel: audit: type=1400 audit(1757118089.361:833): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:29.369018 kernel: audit: type=1400 audit(1757118089.361:834): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:29.361000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:29.361000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:29.361000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:29.377651 kernel: audit: type=1400 audit(1757118089.361:835): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:29.377760 kernel: audit: type=1400 audit(1757118089.361:836): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:29.377786 kernel: audit: type=1400 audit(1757118089.361:837): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:29.361000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:29.382262 kernel: audit: type=1400 audit(1757118089.361:838): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:29.361000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:29.361000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:29.387794 kernel: audit: type=1400 audit(1757118089.361:839): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:29.361000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:29.393287 kernel: audit: type=1400 audit(1757118089.361:840): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:29.361000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:29.396281 kernel: audit: type=1400 audit(1757118089.361:841): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:29.361000 audit: BPF prog-id=106 op=LOAD Sep 6 00:21:29.361000 audit[1994]: AVC avc: denied { bpf } for pid=1994 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:29.361000 audit[1994]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c0001bdc48 a2=10 a3=1c items=0 ppid=1984 pid=1994 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:21:29.361000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6634323866316638396365343231393735353030306262383435316265 Sep 6 00:21:29.363000 audit[1994]: AVC avc: denied { perfmon } for pid=1994 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:29.363000 audit[1994]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001bd6b0 a2=3c a3=c items=0 ppid=1984 pid=1994 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:21:29.363000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6634323866316638396365343231393735353030306262383435316265 Sep 6 00:21:29.363000 audit[1994]: AVC avc: denied { bpf } for pid=1994 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:29.363000 audit[1994]: AVC avc: denied { bpf } for pid=1994 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:29.363000 audit[1994]: AVC avc: denied { bpf } for pid=1994 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:29.363000 audit[1994]: AVC avc: denied { perfmon } for pid=1994 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:29.363000 audit[1994]: AVC avc: denied { perfmon } for pid=1994 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:29.363000 audit[1994]: AVC avc: denied { perfmon } for pid=1994 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:29.363000 audit[1994]: AVC avc: denied { perfmon } for pid=1994 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:29.363000 audit[1994]: AVC avc: denied { perfmon } for pid=1994 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:29.363000 audit[1994]: AVC avc: denied { bpf } for pid=1994 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:29.363000 audit[1994]: AVC avc: denied { bpf } for pid=1994 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:29.363000 audit: BPF prog-id=107 op=LOAD Sep 6 00:21:29.363000 audit[1994]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001bd9d8 a2=78 a3=c000024790 items=0 ppid=1984 pid=1994 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:21:29.363000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6634323866316638396365343231393735353030306262383435316265 Sep 6 00:21:29.365000 audit[1994]: AVC avc: denied { bpf } for pid=1994 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:29.365000 audit[1994]: AVC avc: denied { bpf } for pid=1994 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:29.365000 audit[1994]: AVC avc: denied { perfmon } for pid=1994 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:29.365000 audit[1994]: AVC avc: denied { perfmon } for pid=1994 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:29.365000 audit[1994]: AVC avc: denied { perfmon } for pid=1994 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:29.365000 audit[1994]: AVC avc: denied { perfmon } for pid=1994 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:29.365000 audit[1994]: AVC avc: denied { perfmon } for pid=1994 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:29.365000 audit[1994]: AVC avc: denied { bpf } for pid=1994 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:29.365000 audit[1994]: AVC avc: denied { bpf } for pid=1994 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:29.365000 audit: BPF prog-id=108 op=LOAD Sep 6 00:21:29.365000 audit[1994]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c0001bd770 a2=78 a3=c0000247d8 items=0 ppid=1984 pid=1994 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:21:29.365000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6634323866316638396365343231393735353030306262383435316265 Sep 6 00:21:29.370000 audit: BPF prog-id=108 op=UNLOAD Sep 6 00:21:29.370000 audit: BPF prog-id=107 op=UNLOAD Sep 6 00:21:29.370000 audit[1994]: AVC avc: denied { bpf } for pid=1994 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:29.370000 audit[1994]: AVC avc: denied { bpf } for pid=1994 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:29.370000 audit[1994]: AVC avc: denied { bpf } for pid=1994 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:29.370000 audit[1994]: AVC avc: denied { perfmon } for pid=1994 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:29.370000 audit[1994]: AVC avc: denied { perfmon } for pid=1994 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:29.370000 audit[1994]: AVC avc: denied { perfmon } for pid=1994 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:29.370000 audit[1994]: AVC avc: denied { perfmon } for pid=1994 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:29.370000 audit[1994]: AVC avc: denied { perfmon } for pid=1994 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:29.370000 audit[1994]: AVC avc: denied { bpf } for pid=1994 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:29.370000 audit[1994]: AVC avc: denied { bpf } for pid=1994 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:29.370000 audit: BPF prog-id=109 op=LOAD Sep 6 00:21:29.370000 audit[1994]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001bdc30 a2=78 a3=c000024be8 items=0 ppid=1984 pid=1994 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:21:29.370000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6634323866316638396365343231393735353030306262383435316265 Sep 6 00:21:29.413430 env[1194]: time="2025-09-06T00:21:29.413374455Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-proxy-5xcq4,Uid:8655294f-4d4a-43f1-a9a7-607ba3175ea1,Namespace:kube-system,Attempt:0,} returns sandbox id \"f428f1f89ce4219755000bb8451be59a206ce6d696474aa4f74bc32e35679281\"" Sep 6 00:21:29.415411 kubelet[1933]: E0906 00:21:29.414694 1933 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 67.207.67.3 67.207.67.2 67.207.67.3" Sep 6 00:21:29.417869 env[1194]: time="2025-09-06T00:21:29.417827818Z" level=info msg="CreateContainer within sandbox \"f428f1f89ce4219755000bb8451be59a206ce6d696474aa4f74bc32e35679281\" for container &ContainerMetadata{Name:kube-proxy,Attempt:0,}" Sep 6 00:21:29.440557 env[1194]: time="2025-09-06T00:21:29.440501586Z" level=info msg="CreateContainer within sandbox \"f428f1f89ce4219755000bb8451be59a206ce6d696474aa4f74bc32e35679281\" for &ContainerMetadata{Name:kube-proxy,Attempt:0,} returns container id \"3a64dee9cfbc8dc2c88fa2ee261f541616c536b198cd0e6d4aa027c202886720\"" Sep 6 00:21:29.444596 env[1194]: time="2025-09-06T00:21:29.444549619Z" level=info msg="StartContainer for \"3a64dee9cfbc8dc2c88fa2ee261f541616c536b198cd0e6d4aa027c202886720\"" Sep 6 00:21:29.471638 systemd[1]: Started cri-containerd-3a64dee9cfbc8dc2c88fa2ee261f541616c536b198cd0e6d4aa027c202886720.scope. Sep 6 00:21:29.500000 audit[2027]: AVC avc: denied { perfmon } for pid=2027 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:29.500000 audit[2027]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=0 a1=c0001976b0 a2=3c a3=7fc90d999718 items=0 ppid=1984 pid=2027 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:21:29.500000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3361363464656539636662633864633263383866613265653236316635 Sep 6 00:21:29.500000 audit[2027]: AVC avc: denied { bpf } for pid=2027 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:29.500000 audit[2027]: AVC avc: denied { bpf } for pid=2027 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:29.500000 audit[2027]: AVC avc: denied { bpf } for pid=2027 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:29.500000 audit[2027]: AVC avc: denied { perfmon } for pid=2027 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:29.500000 audit[2027]: AVC avc: denied { perfmon } for pid=2027 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:29.500000 audit[2027]: AVC avc: denied { perfmon } for pid=2027 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:29.500000 audit[2027]: AVC avc: denied { perfmon } for pid=2027 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:29.500000 audit[2027]: AVC avc: denied { perfmon } for pid=2027 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:29.500000 audit[2027]: AVC avc: denied { bpf } for pid=2027 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:29.500000 audit[2027]: AVC avc: denied { bpf } for pid=2027 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:29.500000 audit: BPF prog-id=110 op=LOAD Sep 6 00:21:29.500000 audit[2027]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c0001979d8 a2=78 a3=c000291618 items=0 ppid=1984 pid=2027 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:21:29.500000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3361363464656539636662633864633263383866613265653236316635 Sep 6 00:21:29.500000 audit[2027]: AVC avc: denied { bpf } for pid=2027 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:29.500000 audit[2027]: AVC avc: denied { bpf } for pid=2027 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:29.500000 audit[2027]: AVC avc: denied { perfmon } for pid=2027 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:29.500000 audit[2027]: AVC avc: denied { perfmon } for pid=2027 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:29.500000 audit[2027]: AVC avc: denied { perfmon } for pid=2027 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:29.500000 audit[2027]: AVC avc: denied { perfmon } for pid=2027 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:29.500000 audit[2027]: AVC avc: denied { perfmon } for pid=2027 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:29.500000 audit[2027]: AVC avc: denied { bpf } for pid=2027 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:29.500000 audit[2027]: AVC avc: denied { bpf } for pid=2027 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:29.500000 audit: BPF prog-id=111 op=LOAD Sep 6 00:21:29.500000 audit[2027]: SYSCALL arch=c000003e syscall=321 success=yes exit=17 a0=5 a1=c000197770 a2=78 a3=c000291668 items=0 ppid=1984 pid=2027 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:21:29.500000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3361363464656539636662633864633263383866613265653236316635 Sep 6 00:21:29.500000 audit: BPF prog-id=111 op=UNLOAD Sep 6 00:21:29.500000 audit: BPF prog-id=110 op=UNLOAD Sep 6 00:21:29.500000 audit[2027]: AVC avc: denied { bpf } for pid=2027 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:29.500000 audit[2027]: AVC avc: denied { bpf } for pid=2027 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:29.500000 audit[2027]: AVC avc: denied { bpf } for pid=2027 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:29.500000 audit[2027]: AVC avc: denied { perfmon } for pid=2027 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:29.500000 audit[2027]: AVC avc: denied { perfmon } for pid=2027 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:29.500000 audit[2027]: AVC avc: denied { perfmon } for pid=2027 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:29.500000 audit[2027]: AVC avc: denied { perfmon } for pid=2027 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:29.500000 audit[2027]: AVC avc: denied { perfmon } for pid=2027 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:29.500000 audit[2027]: AVC avc: denied { bpf } for pid=2027 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:29.500000 audit[2027]: AVC avc: denied { bpf } for pid=2027 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:29.500000 audit: BPF prog-id=112 op=LOAD Sep 6 00:21:29.500000 audit[2027]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c000197c30 a2=78 a3=c0002916f8 items=0 ppid=1984 pid=2027 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:21:29.500000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3361363464656539636662633864633263383866613265653236316635 Sep 6 00:21:29.521851 env[1194]: time="2025-09-06T00:21:29.521744485Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:tigera-operator-58fc44c59b-sh8bt,Uid:9e92d9de-c4fe-4371-b54c-6ebe6f67c718,Namespace:tigera-operator,Attempt:0,}" Sep 6 00:21:29.526570 env[1194]: time="2025-09-06T00:21:29.526502530Z" level=info msg="StartContainer for \"3a64dee9cfbc8dc2c88fa2ee261f541616c536b198cd0e6d4aa027c202886720\" returns successfully" Sep 6 00:21:29.545681 env[1194]: time="2025-09-06T00:21:29.545545577Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Sep 6 00:21:29.546289 env[1194]: time="2025-09-06T00:21:29.546206574Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Sep 6 00:21:29.546463 env[1194]: time="2025-09-06T00:21:29.546436850Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Sep 6 00:21:29.547070 env[1194]: time="2025-09-06T00:21:29.546972064Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/0ffeffafebb922eac8bac2f1a4e348867dfbcb83d3d42ce91b46caf634049db1 pid=2059 runtime=io.containerd.runc.v2 Sep 6 00:21:29.569539 systemd[1]: Started cri-containerd-0ffeffafebb922eac8bac2f1a4e348867dfbcb83d3d42ce91b46caf634049db1.scope. Sep 6 00:21:29.613000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:29.613000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:29.613000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:29.613000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:29.613000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:29.613000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:29.613000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:29.613000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:29.613000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:29.613000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:29.613000 audit: BPF prog-id=113 op=LOAD Sep 6 00:21:29.615000 audit[2068]: AVC avc: denied { bpf } for pid=2068 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:29.615000 audit[2068]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000145c48 a2=10 a3=1c items=0 ppid=2059 pid=2068 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:21:29.615000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3066666566666166656262393232656163386261633266316134653334 Sep 6 00:21:29.615000 audit[2068]: AVC avc: denied { perfmon } for pid=2068 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:29.615000 audit[2068]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001456b0 a2=3c a3=c items=0 ppid=2059 pid=2068 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:21:29.615000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3066666566666166656262393232656163386261633266316134653334 Sep 6 00:21:29.615000 audit[2068]: AVC avc: denied { bpf } for pid=2068 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:29.615000 audit[2068]: AVC avc: denied { bpf } for pid=2068 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:29.615000 audit[2068]: AVC avc: denied { bpf } for pid=2068 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:29.615000 audit[2068]: AVC avc: denied { perfmon } for pid=2068 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:29.615000 audit[2068]: AVC avc: denied { perfmon } for pid=2068 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:29.615000 audit[2068]: AVC avc: denied { perfmon } for pid=2068 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:29.615000 audit[2068]: AVC avc: denied { perfmon } for pid=2068 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:29.615000 audit[2068]: AVC avc: denied { perfmon } for pid=2068 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:29.615000 audit[2068]: AVC avc: denied { bpf } for pid=2068 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:29.615000 audit[2068]: AVC avc: denied { bpf } for pid=2068 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:29.615000 audit: BPF prog-id=114 op=LOAD Sep 6 00:21:29.615000 audit[2068]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001459d8 a2=78 a3=c0002d7e90 items=0 ppid=2059 pid=2068 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:21:29.615000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3066666566666166656262393232656163386261633266316134653334 Sep 6 00:21:29.616000 audit[2068]: AVC avc: denied { bpf } for pid=2068 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:29.616000 audit[2068]: AVC avc: denied { bpf } for pid=2068 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:29.616000 audit[2068]: AVC avc: denied { perfmon } for pid=2068 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:29.616000 audit[2068]: AVC avc: denied { perfmon } for pid=2068 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:29.616000 audit[2068]: AVC avc: denied { perfmon } for pid=2068 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:29.616000 audit[2068]: AVC avc: denied { perfmon } for pid=2068 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:29.616000 audit[2068]: AVC avc: denied { perfmon } for pid=2068 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:29.616000 audit[2068]: AVC avc: denied { bpf } for pid=2068 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:29.616000 audit[2068]: AVC avc: denied { bpf } for pid=2068 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:29.616000 audit: BPF prog-id=115 op=LOAD Sep 6 00:21:29.616000 audit[2068]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000145770 a2=78 a3=c0002d7ed8 items=0 ppid=2059 pid=2068 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:21:29.616000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3066666566666166656262393232656163386261633266316134653334 Sep 6 00:21:29.617000 audit: BPF prog-id=115 op=UNLOAD Sep 6 00:21:29.617000 audit: BPF prog-id=114 op=UNLOAD Sep 6 00:21:29.617000 audit[2068]: AVC avc: denied { bpf } for pid=2068 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:29.617000 audit[2068]: AVC avc: denied { bpf } for pid=2068 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:29.617000 audit[2068]: AVC avc: denied { bpf } for pid=2068 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:29.617000 audit[2068]: AVC avc: denied { perfmon } for pid=2068 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:29.617000 audit[2068]: AVC avc: denied { perfmon } for pid=2068 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:29.617000 audit[2068]: AVC avc: denied { perfmon } for pid=2068 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:29.617000 audit[2068]: AVC avc: denied { perfmon } for pid=2068 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:29.617000 audit[2068]: AVC avc: denied { perfmon } for pid=2068 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:29.617000 audit[2068]: AVC avc: denied { bpf } for pid=2068 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:29.617000 audit[2068]: AVC avc: denied { bpf } for pid=2068 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:29.617000 audit: BPF prog-id=116 op=LOAD Sep 6 00:21:29.617000 audit[2068]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000145c30 a2=78 a3=c00035a2e8 items=0 ppid=2059 pid=2068 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:21:29.617000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3066666566666166656262393232656163386261633266316134653334 Sep 6 00:21:29.663841 env[1194]: time="2025-09-06T00:21:29.663800766Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:tigera-operator-58fc44c59b-sh8bt,Uid:9e92d9de-c4fe-4371-b54c-6ebe6f67c718,Namespace:tigera-operator,Attempt:0,} returns sandbox id \"0ffeffafebb922eac8bac2f1a4e348867dfbcb83d3d42ce91b46caf634049db1\"" Sep 6 00:21:29.667439 env[1194]: time="2025-09-06T00:21:29.667358377Z" level=info msg="PullImage \"quay.io/tigera/operator:v1.38.6\"" Sep 6 00:21:29.770000 audit[2127]: NETFILTER_CFG table=mangle:38 family=2 entries=1 op=nft_register_chain pid=2127 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 6 00:21:29.770000 audit[2127]: SYSCALL arch=c000003e syscall=46 success=yes exit=104 a0=3 a1=7ffc2adcb1f0 a2=0 a3=7ffc2adcb1dc items=0 ppid=2038 pid=2127 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:21:29.770000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D43414E415259002D74006D616E676C65 Sep 6 00:21:29.772000 audit[2129]: NETFILTER_CFG table=nat:39 family=2 entries=1 op=nft_register_chain pid=2129 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 6 00:21:29.772000 audit[2129]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7fff1c772050 a2=0 a3=7fff1c77203c items=0 ppid=2038 pid=2129 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:21:29.772000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D43414E415259002D74006E6174 Sep 6 00:21:29.772000 audit[2128]: NETFILTER_CFG table=mangle:40 family=10 entries=1 op=nft_register_chain pid=2128 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Sep 6 00:21:29.772000 audit[2128]: SYSCALL arch=c000003e syscall=46 success=yes exit=104 a0=3 a1=7ffcb8f0e5b0 a2=0 a3=7ffcb8f0e59c items=0 ppid=2038 pid=2128 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:21:29.772000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D43414E415259002D74006D616E676C65 Sep 6 00:21:29.774000 audit[2130]: NETFILTER_CFG table=filter:41 family=2 entries=1 op=nft_register_chain pid=2130 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 6 00:21:29.774000 audit[2130]: SYSCALL arch=c000003e syscall=46 success=yes exit=104 a0=3 a1=7ffc87846a50 a2=0 a3=7ffc87846a3c items=0 ppid=2038 pid=2130 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:21:29.774000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D43414E415259002D740066696C746572 Sep 6 00:21:29.775000 audit[2131]: NETFILTER_CFG table=nat:42 family=10 entries=1 op=nft_register_chain pid=2131 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Sep 6 00:21:29.775000 audit[2131]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7ffc9c9bae90 a2=0 a3=7ffc9c9bae7c items=0 ppid=2038 pid=2131 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:21:29.775000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D43414E415259002D74006E6174 Sep 6 00:21:29.776000 audit[2132]: NETFILTER_CFG table=filter:43 family=10 entries=1 op=nft_register_chain pid=2132 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Sep 6 00:21:29.776000 audit[2132]: SYSCALL arch=c000003e syscall=46 success=yes exit=104 a0=3 a1=7fff1f557660 a2=0 a3=7fff1f55764c items=0 ppid=2038 pid=2132 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:21:29.776000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D43414E415259002D740066696C746572 Sep 6 00:21:29.882000 audit[2133]: NETFILTER_CFG table=filter:44 family=2 entries=1 op=nft_register_chain pid=2133 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 6 00:21:29.882000 audit[2133]: SYSCALL arch=c000003e syscall=46 success=yes exit=108 a0=3 a1=7fff9b031220 a2=0 a3=7fff9b03120c items=0 ppid=2038 pid=2133 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:21:29.882000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D45585445524E414C2D5345525649434553002D740066696C746572 Sep 6 00:21:29.889000 audit[2135]: NETFILTER_CFG table=filter:45 family=2 entries=1 op=nft_register_rule pid=2135 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 6 00:21:29.889000 audit[2135]: SYSCALL arch=c000003e syscall=46 success=yes exit=752 a0=3 a1=7fff3f321700 a2=0 a3=7fff3f3216ec items=0 ppid=2038 pid=2135 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:21:29.889000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E657465732065787465726E616C6C792D76697369626C652073657276696365 Sep 6 00:21:29.895000 audit[2138]: NETFILTER_CFG table=filter:46 family=2 entries=1 op=nft_register_rule pid=2138 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 6 00:21:29.895000 audit[2138]: SYSCALL arch=c000003e syscall=46 success=yes exit=752 a0=3 a1=7fff41a62970 a2=0 a3=7fff41a6295c items=0 ppid=2038 pid=2138 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:21:29.895000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E657465732065787465726E616C6C792D76697369626C65207365727669 Sep 6 00:21:29.897000 audit[2139]: NETFILTER_CFG table=filter:47 family=2 entries=1 op=nft_register_chain pid=2139 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 6 00:21:29.897000 audit[2139]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7fff4a101910 a2=0 a3=7fff4a1018fc items=0 ppid=2038 pid=2139 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:21:29.897000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D4E4F4445504F525453002D740066696C746572 Sep 6 00:21:29.901000 audit[2141]: NETFILTER_CFG table=filter:48 family=2 entries=1 op=nft_register_rule pid=2141 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 6 00:21:29.901000 audit[2141]: SYSCALL arch=c000003e syscall=46 success=yes exit=528 a0=3 a1=7ffe816dd780 a2=0 a3=7ffe816dd76c items=0 ppid=2038 pid=2141 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:21:29.901000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206865616C746820636865636B207365727669636520706F727473002D6A004B5542452D4E4F4445504F525453 Sep 6 00:21:29.902000 audit[2142]: NETFILTER_CFG table=filter:49 family=2 entries=1 op=nft_register_chain pid=2142 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 6 00:21:29.902000 audit[2142]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7ffeb61e8030 a2=0 a3=7ffeb61e801c items=0 ppid=2038 pid=2142 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:21:29.902000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D5345525649434553002D740066696C746572 Sep 6 00:21:29.907000 audit[2144]: NETFILTER_CFG table=filter:50 family=2 entries=1 op=nft_register_rule pid=2144 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 6 00:21:29.907000 audit[2144]: SYSCALL arch=c000003e syscall=46 success=yes exit=744 a0=3 a1=7ffdb48e5230 a2=0 a3=7ffdb48e521c items=0 ppid=2038 pid=2144 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:21:29.907000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D Sep 6 00:21:29.913000 audit[2147]: NETFILTER_CFG table=filter:51 family=2 entries=1 op=nft_register_rule pid=2147 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 6 00:21:29.913000 audit[2147]: SYSCALL arch=c000003e syscall=46 success=yes exit=744 a0=3 a1=7ffc2eb75f20 a2=0 a3=7ffc2eb75f0c items=0 ppid=2038 pid=2147 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:21:29.913000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D49004F5554505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D53 Sep 6 00:21:29.916000 audit[2148]: NETFILTER_CFG table=filter:52 family=2 entries=1 op=nft_register_chain pid=2148 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 6 00:21:29.916000 audit[2148]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7ffe04273810 a2=0 a3=7ffe042737fc items=0 ppid=2038 pid=2148 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:21:29.916000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D464F5257415244002D740066696C746572 Sep 6 00:21:29.921000 audit[2150]: NETFILTER_CFG table=filter:53 family=2 entries=1 op=nft_register_rule pid=2150 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 6 00:21:29.921000 audit[2150]: SYSCALL arch=c000003e syscall=46 success=yes exit=528 a0=3 a1=7fff361e8440 a2=0 a3=7fff361e842c items=0 ppid=2038 pid=2150 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:21:29.921000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E6574657320666F7277617264696E672072756C6573002D6A004B5542452D464F5257415244 Sep 6 00:21:29.923000 audit[2151]: NETFILTER_CFG table=filter:54 family=2 entries=1 op=nft_register_chain pid=2151 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 6 00:21:29.923000 audit[2151]: SYSCALL arch=c000003e syscall=46 success=yes exit=104 a0=3 a1=7ffd0a2bd9d0 a2=0 a3=7ffd0a2bd9bc items=0 ppid=2038 pid=2151 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:21:29.923000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D4649524557414C4C002D740066696C746572 Sep 6 00:21:29.927000 audit[2153]: NETFILTER_CFG table=filter:55 family=2 entries=1 op=nft_register_rule pid=2153 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 6 00:21:29.927000 audit[2153]: SYSCALL arch=c000003e syscall=46 success=yes exit=748 a0=3 a1=7ffeded202b0 a2=0 a3=7ffeded2029c items=0 ppid=2038 pid=2153 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:21:29.927000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206C6F61642062616C616E636572206669726577616C6C002D6A Sep 6 00:21:29.934000 audit[2156]: NETFILTER_CFG table=filter:56 family=2 entries=1 op=nft_register_rule pid=2156 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 6 00:21:29.934000 audit[2156]: SYSCALL arch=c000003e syscall=46 success=yes exit=748 a0=3 a1=7ffced9725d0 a2=0 a3=7ffced9725bc items=0 ppid=2038 pid=2156 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:21:29.934000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D49004F5554505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206C6F61642062616C616E636572206669726577616C6C002D6A Sep 6 00:21:29.940000 audit[2159]: NETFILTER_CFG table=filter:57 family=2 entries=1 op=nft_register_rule pid=2159 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 6 00:21:29.940000 audit[2159]: SYSCALL arch=c000003e syscall=46 success=yes exit=748 a0=3 a1=7ffe28a69990 a2=0 a3=7ffe28a6997c items=0 ppid=2038 pid=2159 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:21:29.940000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206C6F61642062616C616E636572206669726577616C6C002D Sep 6 00:21:29.943000 audit[2160]: NETFILTER_CFG table=nat:58 family=2 entries=1 op=nft_register_chain pid=2160 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 6 00:21:29.943000 audit[2160]: SYSCALL arch=c000003e syscall=46 success=yes exit=96 a0=3 a1=7ffdfba4e7e0 a2=0 a3=7ffdfba4e7cc items=0 ppid=2038 pid=2160 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:21:29.943000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D5345525649434553002D74006E6174 Sep 6 00:21:29.947000 audit[2162]: NETFILTER_CFG table=nat:59 family=2 entries=1 op=nft_register_rule pid=2162 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 6 00:21:29.947000 audit[2162]: SYSCALL arch=c000003e syscall=46 success=yes exit=524 a0=3 a1=7fffee509a40 a2=0 a3=7fffee509a2c items=0 ppid=2038 pid=2162 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:21:29.947000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D49004F5554505554002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D5345525649434553 Sep 6 00:21:29.954000 audit[2165]: NETFILTER_CFG table=nat:60 family=2 entries=1 op=nft_register_rule pid=2165 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 6 00:21:29.954000 audit[2165]: SYSCALL arch=c000003e syscall=46 success=yes exit=528 a0=3 a1=7ffcf10408c0 a2=0 a3=7ffcf10408ac items=0 ppid=2038 pid=2165 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:21:29.954000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900505245524F5554494E47002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D5345525649434553 Sep 6 00:21:29.956000 audit[2166]: NETFILTER_CFG table=nat:61 family=2 entries=1 op=nft_register_chain pid=2166 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 6 00:21:29.956000 audit[2166]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7ffe507b46f0 a2=0 a3=7ffe507b46dc items=0 ppid=2038 pid=2166 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:21:29.956000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D504F5354524F5554494E47002D74006E6174 Sep 6 00:21:29.961000 audit[2168]: NETFILTER_CFG table=nat:62 family=2 entries=1 op=nft_register_rule pid=2168 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 6 00:21:29.961000 audit[2168]: SYSCALL arch=c000003e syscall=46 success=yes exit=532 a0=3 a1=7ffd7d5f8540 a2=0 a3=7ffd7d5f852c items=0 ppid=2038 pid=2168 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:21:29.961000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900504F5354524F5554494E47002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E6574657320706F7374726F7574696E672072756C6573002D6A004B5542452D504F5354524F5554494E47 Sep 6 00:21:30.002000 audit[2174]: NETFILTER_CFG table=filter:63 family=2 entries=8 op=nft_register_rule pid=2174 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Sep 6 00:21:30.002000 audit[2174]: SYSCALL arch=c000003e syscall=46 success=yes exit=5248 a0=3 a1=7ffe90221b30 a2=0 a3=7ffe90221b1c items=0 ppid=2038 pid=2174 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:21:30.002000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Sep 6 00:21:30.015000 audit[2174]: NETFILTER_CFG table=nat:64 family=2 entries=14 op=nft_register_chain pid=2174 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Sep 6 00:21:30.015000 audit[2174]: SYSCALL arch=c000003e syscall=46 success=yes exit=5508 a0=3 a1=7ffe90221b30 a2=0 a3=7ffe90221b1c items=0 ppid=2038 pid=2174 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:21:30.015000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Sep 6 00:21:30.018000 audit[2179]: NETFILTER_CFG table=filter:65 family=10 entries=1 op=nft_register_chain pid=2179 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Sep 6 00:21:30.018000 audit[2179]: SYSCALL arch=c000003e syscall=46 success=yes exit=108 a0=3 a1=7ffe23d8e0b0 a2=0 a3=7ffe23d8e09c items=0 ppid=2038 pid=2179 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:21:30.018000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D45585445524E414C2D5345525649434553002D740066696C746572 Sep 6 00:21:30.024000 audit[2181]: NETFILTER_CFG table=filter:66 family=10 entries=2 op=nft_register_chain pid=2181 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Sep 6 00:21:30.024000 audit[2181]: SYSCALL arch=c000003e syscall=46 success=yes exit=836 a0=3 a1=7ffc121963c0 a2=0 a3=7ffc121963ac items=0 ppid=2038 pid=2181 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:21:30.024000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E657465732065787465726E616C6C792D76697369626C6520736572766963 Sep 6 00:21:30.035163 kubelet[1933]: E0906 00:21:30.034705 1933 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 67.207.67.3 67.207.67.2 67.207.67.3" Sep 6 00:21:30.040000 audit[2184]: NETFILTER_CFG table=filter:67 family=10 entries=2 op=nft_register_chain pid=2184 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Sep 6 00:21:30.040000 audit[2184]: SYSCALL arch=c000003e syscall=46 success=yes exit=836 a0=3 a1=7ffe318d27e0 a2=0 a3=7ffe318d27cc items=0 ppid=2038 pid=2184 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:21:30.040000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E657465732065787465726E616C6C792D76697369626C652073657276 Sep 6 00:21:30.059000 audit[2185]: NETFILTER_CFG table=filter:68 family=10 entries=1 op=nft_register_chain pid=2185 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Sep 6 00:21:30.059000 audit[2185]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7ffc3dbd5540 a2=0 a3=7ffc3dbd552c items=0 ppid=2038 pid=2185 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:21:30.059000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D4E4F4445504F525453002D740066696C746572 Sep 6 00:21:30.067000 audit[2187]: NETFILTER_CFG table=filter:69 family=10 entries=1 op=nft_register_rule pid=2187 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Sep 6 00:21:30.067000 audit[2187]: SYSCALL arch=c000003e syscall=46 success=yes exit=528 a0=3 a1=7ffe996a0770 a2=0 a3=7ffe996a075c items=0 ppid=2038 pid=2187 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:21:30.067000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206865616C746820636865636B207365727669636520706F727473002D6A004B5542452D4E4F4445504F525453 Sep 6 00:21:30.072000 audit[2188]: NETFILTER_CFG table=filter:70 family=10 entries=1 op=nft_register_chain pid=2188 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Sep 6 00:21:30.072000 audit[2188]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7ffd034195f0 a2=0 a3=7ffd034195dc items=0 ppid=2038 pid=2188 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:21:30.072000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D5345525649434553002D740066696C746572 Sep 6 00:21:30.078000 audit[2190]: NETFILTER_CFG table=filter:71 family=10 entries=1 op=nft_register_rule pid=2190 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Sep 6 00:21:30.078000 audit[2190]: SYSCALL arch=c000003e syscall=46 success=yes exit=744 a0=3 a1=7ffecd0a8ba0 a2=0 a3=7ffecd0a8b8c items=0 ppid=2038 pid=2190 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:21:30.078000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B554245 Sep 6 00:21:30.089000 audit[2193]: NETFILTER_CFG table=filter:72 family=10 entries=2 op=nft_register_chain pid=2193 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Sep 6 00:21:30.089000 audit[2193]: SYSCALL arch=c000003e syscall=46 success=yes exit=828 a0=3 a1=7ffda55ecbe0 a2=0 a3=7ffda55ecbcc items=0 ppid=2038 pid=2193 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:21:30.089000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D49004F5554505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D Sep 6 00:21:30.092000 audit[2194]: NETFILTER_CFG table=filter:73 family=10 entries=1 op=nft_register_chain pid=2194 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Sep 6 00:21:30.092000 audit[2194]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7ffcf7e48c80 a2=0 a3=7ffcf7e48c6c items=0 ppid=2038 pid=2194 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:21:30.092000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D464F5257415244002D740066696C746572 Sep 6 00:21:30.097000 audit[2196]: NETFILTER_CFG table=filter:74 family=10 entries=1 op=nft_register_rule pid=2196 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Sep 6 00:21:30.097000 audit[2196]: SYSCALL arch=c000003e syscall=46 success=yes exit=528 a0=3 a1=7ffed9813620 a2=0 a3=7ffed981360c items=0 ppid=2038 pid=2196 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:21:30.097000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E6574657320666F7277617264696E672072756C6573002D6A004B5542452D464F5257415244 Sep 6 00:21:30.100000 audit[2197]: NETFILTER_CFG table=filter:75 family=10 entries=1 op=nft_register_chain pid=2197 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Sep 6 00:21:30.100000 audit[2197]: SYSCALL arch=c000003e syscall=46 success=yes exit=104 a0=3 a1=7ffc99edf8b0 a2=0 a3=7ffc99edf89c items=0 ppid=2038 pid=2197 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:21:30.100000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D4649524557414C4C002D740066696C746572 Sep 6 00:21:30.107000 audit[2199]: NETFILTER_CFG table=filter:76 family=10 entries=1 op=nft_register_rule pid=2199 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Sep 6 00:21:30.107000 audit[2199]: SYSCALL arch=c000003e syscall=46 success=yes exit=748 a0=3 a1=7ffe31e5cc40 a2=0 a3=7ffe31e5cc2c items=0 ppid=2038 pid=2199 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:21:30.107000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206C6F61642062616C616E636572206669726577616C6C002D6A Sep 6 00:21:30.115000 audit[2202]: NETFILTER_CFG table=filter:77 family=10 entries=1 op=nft_register_rule pid=2202 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Sep 6 00:21:30.115000 audit[2202]: SYSCALL arch=c000003e syscall=46 success=yes exit=748 a0=3 a1=7ffc6ba9e910 a2=0 a3=7ffc6ba9e8fc items=0 ppid=2038 pid=2202 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:21:30.115000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D49004F5554505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206C6F61642062616C616E636572206669726577616C6C002D Sep 6 00:21:30.121000 audit[2205]: NETFILTER_CFG table=filter:78 family=10 entries=1 op=nft_register_rule pid=2205 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Sep 6 00:21:30.121000 audit[2205]: SYSCALL arch=c000003e syscall=46 success=yes exit=748 a0=3 a1=7ffd0696fb80 a2=0 a3=7ffd0696fb6c items=0 ppid=2038 pid=2205 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:21:30.121000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206C6F61642062616C616E636572206669726577616C6C Sep 6 00:21:30.124000 audit[2206]: NETFILTER_CFG table=nat:79 family=10 entries=1 op=nft_register_chain pid=2206 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Sep 6 00:21:30.124000 audit[2206]: SYSCALL arch=c000003e syscall=46 success=yes exit=96 a0=3 a1=7ffe9e580510 a2=0 a3=7ffe9e5804fc items=0 ppid=2038 pid=2206 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:21:30.124000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D5345525649434553002D74006E6174 Sep 6 00:21:30.130000 audit[2208]: NETFILTER_CFG table=nat:80 family=10 entries=2 op=nft_register_chain pid=2208 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Sep 6 00:21:30.130000 audit[2208]: SYSCALL arch=c000003e syscall=46 success=yes exit=600 a0=3 a1=7ffd3e5f60a0 a2=0 a3=7ffd3e5f608c items=0 ppid=2038 pid=2208 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:21:30.130000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D49004F5554505554002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D5345525649434553 Sep 6 00:21:30.137000 audit[2211]: NETFILTER_CFG table=nat:81 family=10 entries=2 op=nft_register_chain pid=2211 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Sep 6 00:21:30.137000 audit[2211]: SYSCALL arch=c000003e syscall=46 success=yes exit=608 a0=3 a1=7ffff56b03f0 a2=0 a3=7ffff56b03dc items=0 ppid=2038 pid=2211 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:21:30.137000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900505245524F5554494E47002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D5345525649434553 Sep 6 00:21:30.140000 audit[2212]: NETFILTER_CFG table=nat:82 family=10 entries=1 op=nft_register_chain pid=2212 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Sep 6 00:21:30.140000 audit[2212]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7ffc487aeec0 a2=0 a3=7ffc487aeeac items=0 ppid=2038 pid=2212 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:21:30.140000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D504F5354524F5554494E47002D74006E6174 Sep 6 00:21:30.145000 audit[2214]: NETFILTER_CFG table=nat:83 family=10 entries=2 op=nft_register_chain pid=2214 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Sep 6 00:21:30.145000 audit[2214]: SYSCALL arch=c000003e syscall=46 success=yes exit=612 a0=3 a1=7ffff2cf7d80 a2=0 a3=7ffff2cf7d6c items=0 ppid=2038 pid=2214 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:21:30.145000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900504F5354524F5554494E47002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E6574657320706F7374726F7574696E672072756C6573002D6A004B5542452D504F5354524F5554494E47 Sep 6 00:21:30.147000 audit[2215]: NETFILTER_CFG table=filter:84 family=10 entries=1 op=nft_register_chain pid=2215 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Sep 6 00:21:30.147000 audit[2215]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7ffe812a2080 a2=0 a3=7ffe812a206c items=0 ppid=2038 pid=2215 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:21:30.147000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D4649524557414C4C002D740066696C746572 Sep 6 00:21:30.152000 audit[2217]: NETFILTER_CFG table=filter:85 family=10 entries=1 op=nft_register_rule pid=2217 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Sep 6 00:21:30.152000 audit[2217]: SYSCALL arch=c000003e syscall=46 success=yes exit=228 a0=3 a1=7ffde0a55530 a2=0 a3=7ffde0a5551c items=0 ppid=2038 pid=2217 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:21:30.152000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6A004B5542452D4649524557414C4C Sep 6 00:21:30.159000 audit[2220]: NETFILTER_CFG table=filter:86 family=10 entries=1 op=nft_register_rule pid=2220 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Sep 6 00:21:30.159000 audit[2220]: SYSCALL arch=c000003e syscall=46 success=yes exit=228 a0=3 a1=7fff13c3c170 a2=0 a3=7fff13c3c15c items=0 ppid=2038 pid=2220 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:21:30.159000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D49004F5554505554002D740066696C746572002D6A004B5542452D4649524557414C4C Sep 6 00:21:30.165000 audit[2222]: NETFILTER_CFG table=filter:87 family=10 entries=3 op=nft_register_rule pid=2222 subj=system_u:system_r:kernel_t:s0 comm="ip6tables-resto" Sep 6 00:21:30.165000 audit[2222]: SYSCALL arch=c000003e syscall=46 success=yes exit=2088 a0=3 a1=7ffd7b617a00 a2=0 a3=7ffd7b6179ec items=0 ppid=2038 pid=2222 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:21:30.165000 audit: PROCTITLE proctitle=6970367461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Sep 6 00:21:30.166000 audit[2222]: NETFILTER_CFG table=nat:88 family=10 entries=7 op=nft_register_chain pid=2222 subj=system_u:system_r:kernel_t:s0 comm="ip6tables-resto" Sep 6 00:21:30.166000 audit[2222]: SYSCALL arch=c000003e syscall=46 success=yes exit=2056 a0=3 a1=7ffd7b617a00 a2=0 a3=7ffd7b6179ec items=0 ppid=2038 pid=2222 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:21:30.166000 audit: PROCTITLE proctitle=6970367461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Sep 6 00:21:30.458447 kubelet[1933]: E0906 00:21:30.458280 1933 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 67.207.67.3 67.207.67.2 67.207.67.3" Sep 6 00:21:30.463677 kubelet[1933]: E0906 00:21:30.463581 1933 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 67.207.67.3 67.207.67.2 67.207.67.3" Sep 6 00:21:30.501717 kubelet[1933]: I0906 00:21:30.501616 1933 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="kube-system/kube-proxy-5xcq4" podStartSLOduration=2.501596099 podStartE2EDuration="2.501596099s" podCreationTimestamp="2025-09-06 00:21:28 +0000 UTC" firstStartedPulling="0001-01-01 00:00:00 +0000 UTC" lastFinishedPulling="0001-01-01 00:00:00 +0000 UTC" observedRunningTime="2025-09-06 00:21:30.489617898 +0000 UTC m=+7.349607882" watchObservedRunningTime="2025-09-06 00:21:30.501596099 +0000 UTC m=+7.361586066" Sep 6 00:21:30.635333 kubelet[1933]: E0906 00:21:30.635211 1933 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 67.207.67.3 67.207.67.2 67.207.67.3" Sep 6 00:21:31.112694 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount4091052145.mount: Deactivated successfully. Sep 6 00:21:31.465405 kubelet[1933]: E0906 00:21:31.465279 1933 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 67.207.67.3 67.207.67.2 67.207.67.3" Sep 6 00:21:31.469124 kubelet[1933]: E0906 00:21:31.469089 1933 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 67.207.67.3 67.207.67.2 67.207.67.3" Sep 6 00:21:31.471156 kubelet[1933]: E0906 00:21:31.471119 1933 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 67.207.67.3 67.207.67.2 67.207.67.3" Sep 6 00:21:32.310472 env[1194]: time="2025-09-06T00:21:32.310404751Z" level=info msg="ImageCreate event &ImageCreate{Name:quay.io/tigera/operator:v1.38.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 6 00:21:32.312143 env[1194]: time="2025-09-06T00:21:32.312089878Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:1911afdd8478c6ca3036ff85614050d5d19acc0f0c3f6a5a7b3e34b38dd309c9,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 6 00:21:32.313854 env[1194]: time="2025-09-06T00:21:32.313806685Z" level=info msg="ImageUpdate event &ImageUpdate{Name:quay.io/tigera/operator:v1.38.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 6 00:21:32.315326 env[1194]: time="2025-09-06T00:21:32.315195842Z" level=info msg="ImageCreate event &ImageCreate{Name:quay.io/tigera/operator@sha256:00a7a9b62f9b9a4e0856128b078539783b8352b07f707bff595cb604cc580f6e,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 6 00:21:32.316121 env[1194]: time="2025-09-06T00:21:32.316076407Z" level=info msg="PullImage \"quay.io/tigera/operator:v1.38.6\" returns image reference \"sha256:1911afdd8478c6ca3036ff85614050d5d19acc0f0c3f6a5a7b3e34b38dd309c9\"" Sep 6 00:21:32.321984 env[1194]: time="2025-09-06T00:21:32.321917255Z" level=info msg="CreateContainer within sandbox \"0ffeffafebb922eac8bac2f1a4e348867dfbcb83d3d42ce91b46caf634049db1\" for container &ContainerMetadata{Name:tigera-operator,Attempt:0,}" Sep 6 00:21:32.336928 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount37367143.mount: Deactivated successfully. Sep 6 00:21:32.342670 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount3670552037.mount: Deactivated successfully. Sep 6 00:21:32.347276 env[1194]: time="2025-09-06T00:21:32.347172305Z" level=info msg="CreateContainer within sandbox \"0ffeffafebb922eac8bac2f1a4e348867dfbcb83d3d42ce91b46caf634049db1\" for &ContainerMetadata{Name:tigera-operator,Attempt:0,} returns container id \"a9ab7d524116d022c6e35d92bfa5fb335aed3cd8aafe86f4c7f9f7f01247adfc\"" Sep 6 00:21:32.348477 env[1194]: time="2025-09-06T00:21:32.348442056Z" level=info msg="StartContainer for \"a9ab7d524116d022c6e35d92bfa5fb335aed3cd8aafe86f4c7f9f7f01247adfc\"" Sep 6 00:21:32.375101 systemd[1]: Started cri-containerd-a9ab7d524116d022c6e35d92bfa5fb335aed3cd8aafe86f4c7f9f7f01247adfc.scope. Sep 6 00:21:32.397000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:32.397000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:32.397000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:32.397000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:32.397000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:32.397000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:32.397000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:32.397000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:32.397000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:32.397000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:32.397000 audit: BPF prog-id=117 op=LOAD Sep 6 00:21:32.399000 audit[2230]: AVC avc: denied { bpf } for pid=2230 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:32.399000 audit[2230]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000197c48 a2=10 a3=1c items=0 ppid=2059 pid=2230 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:21:32.399000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6139616237643532343131366430323263366533356439326266613566 Sep 6 00:21:32.399000 audit[2230]: AVC avc: denied { perfmon } for pid=2230 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:32.399000 audit[2230]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001976b0 a2=3c a3=8 items=0 ppid=2059 pid=2230 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:21:32.399000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6139616237643532343131366430323263366533356439326266613566 Sep 6 00:21:32.400000 audit[2230]: AVC avc: denied { bpf } for pid=2230 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:32.400000 audit[2230]: AVC avc: denied { bpf } for pid=2230 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:32.400000 audit[2230]: AVC avc: denied { bpf } for pid=2230 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:32.400000 audit[2230]: AVC avc: denied { perfmon } for pid=2230 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:32.400000 audit[2230]: AVC avc: denied { perfmon } for pid=2230 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:32.400000 audit[2230]: AVC avc: denied { perfmon } for pid=2230 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:32.400000 audit[2230]: AVC avc: denied { perfmon } for pid=2230 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:32.400000 audit[2230]: AVC avc: denied { perfmon } for pid=2230 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:32.400000 audit[2230]: AVC avc: denied { bpf } for pid=2230 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:32.400000 audit[2230]: AVC avc: denied { bpf } for pid=2230 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:32.400000 audit: BPF prog-id=118 op=LOAD Sep 6 00:21:32.400000 audit[2230]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001979d8 a2=78 a3=c0003283c0 items=0 ppid=2059 pid=2230 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:21:32.400000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6139616237643532343131366430323263366533356439326266613566 Sep 6 00:21:32.401000 audit[2230]: AVC avc: denied { bpf } for pid=2230 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:32.401000 audit[2230]: AVC avc: denied { bpf } for pid=2230 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:32.401000 audit[2230]: AVC avc: denied { perfmon } for pid=2230 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:32.401000 audit[2230]: AVC avc: denied { perfmon } for pid=2230 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:32.401000 audit[2230]: AVC avc: denied { perfmon } for pid=2230 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:32.401000 audit[2230]: AVC avc: denied { perfmon } for pid=2230 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:32.401000 audit[2230]: AVC avc: denied { perfmon } for pid=2230 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:32.401000 audit[2230]: AVC avc: denied { bpf } for pid=2230 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:32.401000 audit[2230]: AVC avc: denied { bpf } for pid=2230 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:32.401000 audit: BPF prog-id=119 op=LOAD Sep 6 00:21:32.401000 audit[2230]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000197770 a2=78 a3=c000328408 items=0 ppid=2059 pid=2230 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:21:32.401000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6139616237643532343131366430323263366533356439326266613566 Sep 6 00:21:32.401000 audit: BPF prog-id=119 op=UNLOAD Sep 6 00:21:32.401000 audit: BPF prog-id=118 op=UNLOAD Sep 6 00:21:32.401000 audit[2230]: AVC avc: denied { bpf } for pid=2230 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:32.401000 audit[2230]: AVC avc: denied { bpf } for pid=2230 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:32.401000 audit[2230]: AVC avc: denied { bpf } for pid=2230 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:32.401000 audit[2230]: AVC avc: denied { perfmon } for pid=2230 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:32.401000 audit[2230]: AVC avc: denied { perfmon } for pid=2230 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:32.401000 audit[2230]: AVC avc: denied { perfmon } for pid=2230 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:32.401000 audit[2230]: AVC avc: denied { perfmon } for pid=2230 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:32.401000 audit[2230]: AVC avc: denied { perfmon } for pid=2230 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:32.401000 audit[2230]: AVC avc: denied { bpf } for pid=2230 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:32.401000 audit[2230]: AVC avc: denied { bpf } for pid=2230 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:32.401000 audit: BPF prog-id=120 op=LOAD Sep 6 00:21:32.401000 audit[2230]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000197c30 a2=78 a3=c000328818 items=0 ppid=2059 pid=2230 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:21:32.401000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6139616237643532343131366430323263366533356439326266613566 Sep 6 00:21:32.439511 env[1194]: time="2025-09-06T00:21:32.439457426Z" level=info msg="StartContainer for \"a9ab7d524116d022c6e35d92bfa5fb335aed3cd8aafe86f4c7f9f7f01247adfc\" returns successfully" Sep 6 00:21:38.395407 update_engine[1186]: I0906 00:21:38.395308 1186 update_attempter.cc:509] Updating boot flags... Sep 6 00:21:39.056077 sudo[1331]: pam_unix(sudo:session): session closed for user root Sep 6 00:21:39.062273 kernel: kauditd_printk_skb: 357 callbacks suppressed Sep 6 00:21:39.062468 kernel: audit: type=1106 audit(1757118099.055:943): pid=1331 uid=500 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_limits,pam_env,pam_unix,pam_permit,pam_systemd acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Sep 6 00:21:39.055000 audit[1331]: USER_END pid=1331 uid=500 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_limits,pam_env,pam_unix,pam_permit,pam_systemd acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Sep 6 00:21:39.056000 audit[1331]: CRED_DISP pid=1331 uid=500 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Sep 6 00:21:39.067281 kernel: audit: type=1104 audit(1757118099.056:944): pid=1331 uid=500 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Sep 6 00:21:39.073398 sshd[1328]: pam_unix(sshd:session): session closed for user core Sep 6 00:21:39.074000 audit[1328]: USER_END pid=1328 uid=0 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Sep 6 00:21:39.077792 systemd-logind[1184]: Session 7 logged out. Waiting for processes to exit. Sep 6 00:21:39.082478 kernel: audit: type=1106 audit(1757118099.074:945): pid=1328 uid=0 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Sep 6 00:21:39.075000 audit[1328]: CRED_DISP pid=1328 uid=0 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Sep 6 00:21:39.083188 systemd[1]: sshd@6-147.182.198.71:22-147.75.109.163:36660.service: Deactivated successfully. Sep 6 00:21:39.087368 kernel: audit: type=1104 audit(1757118099.075:946): pid=1328 uid=0 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Sep 6 00:21:39.084278 systemd[1]: session-7.scope: Deactivated successfully. Sep 6 00:21:39.084473 systemd[1]: session-7.scope: Consumed 5.813s CPU time. Sep 6 00:21:39.086206 systemd-logind[1184]: Removed session 7. Sep 6 00:21:39.083000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@6-147.182.198.71:22-147.75.109.163:36660 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 00:21:39.093544 kernel: audit: type=1131 audit(1757118099.083:947): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@6-147.182.198.71:22-147.75.109.163:36660 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 00:21:40.426000 audit[2321]: NETFILTER_CFG table=filter:89 family=2 entries=15 op=nft_register_rule pid=2321 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Sep 6 00:21:40.436264 kernel: audit: type=1325 audit(1757118100.426:948): table=filter:89 family=2 entries=15 op=nft_register_rule pid=2321 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Sep 6 00:21:40.426000 audit[2321]: SYSCALL arch=c000003e syscall=46 success=yes exit=5992 a0=3 a1=7ffef2c20830 a2=0 a3=7ffef2c2081c items=0 ppid=2038 pid=2321 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:21:40.444266 kernel: audit: type=1300 audit(1757118100.426:948): arch=c000003e syscall=46 success=yes exit=5992 a0=3 a1=7ffef2c20830 a2=0 a3=7ffef2c2081c items=0 ppid=2038 pid=2321 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:21:40.426000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Sep 6 00:21:40.453727 kernel: audit: type=1327 audit(1757118100.426:948): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Sep 6 00:21:40.453883 kernel: audit: type=1325 audit(1757118100.440:949): table=nat:90 family=2 entries=12 op=nft_register_rule pid=2321 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Sep 6 00:21:40.440000 audit[2321]: NETFILTER_CFG table=nat:90 family=2 entries=12 op=nft_register_rule pid=2321 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Sep 6 00:21:40.440000 audit[2321]: SYSCALL arch=c000003e syscall=46 success=yes exit=2700 a0=3 a1=7ffef2c20830 a2=0 a3=0 items=0 ppid=2038 pid=2321 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:21:40.459261 kernel: audit: type=1300 audit(1757118100.440:949): arch=c000003e syscall=46 success=yes exit=2700 a0=3 a1=7ffef2c20830 a2=0 a3=0 items=0 ppid=2038 pid=2321 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:21:40.440000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Sep 6 00:21:40.490000 audit[2323]: NETFILTER_CFG table=filter:91 family=2 entries=16 op=nft_register_rule pid=2323 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Sep 6 00:21:40.490000 audit[2323]: SYSCALL arch=c000003e syscall=46 success=yes exit=5992 a0=3 a1=7fffe0b4e590 a2=0 a3=7fffe0b4e57c items=0 ppid=2038 pid=2323 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:21:40.490000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Sep 6 00:21:40.495000 audit[2323]: NETFILTER_CFG table=nat:92 family=2 entries=12 op=nft_register_rule pid=2323 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Sep 6 00:21:40.495000 audit[2323]: SYSCALL arch=c000003e syscall=46 success=yes exit=2700 a0=3 a1=7fffe0b4e590 a2=0 a3=0 items=0 ppid=2038 pid=2323 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:21:40.495000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Sep 6 00:21:43.211000 audit[2325]: NETFILTER_CFG table=filter:93 family=2 entries=17 op=nft_register_rule pid=2325 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Sep 6 00:21:43.211000 audit[2325]: SYSCALL arch=c000003e syscall=46 success=yes exit=6736 a0=3 a1=7fffd6e04670 a2=0 a3=7fffd6e0465c items=0 ppid=2038 pid=2325 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:21:43.211000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Sep 6 00:21:43.216000 audit[2325]: NETFILTER_CFG table=nat:94 family=2 entries=12 op=nft_register_rule pid=2325 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Sep 6 00:21:43.216000 audit[2325]: SYSCALL arch=c000003e syscall=46 success=yes exit=2700 a0=3 a1=7fffd6e04670 a2=0 a3=0 items=0 ppid=2038 pid=2325 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:21:43.216000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Sep 6 00:21:43.298000 audit[2327]: NETFILTER_CFG table=filter:95 family=2 entries=18 op=nft_register_rule pid=2327 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Sep 6 00:21:43.298000 audit[2327]: SYSCALL arch=c000003e syscall=46 success=yes exit=6736 a0=3 a1=7ffda85feb00 a2=0 a3=7ffda85feaec items=0 ppid=2038 pid=2327 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:21:43.298000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Sep 6 00:21:43.305000 audit[2327]: NETFILTER_CFG table=nat:96 family=2 entries=12 op=nft_register_rule pid=2327 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Sep 6 00:21:43.305000 audit[2327]: SYSCALL arch=c000003e syscall=46 success=yes exit=2700 a0=3 a1=7ffda85feb00 a2=0 a3=0 items=0 ppid=2038 pid=2327 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:21:43.305000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Sep 6 00:21:43.621970 kubelet[1933]: I0906 00:21:43.621905 1933 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="tigera-operator/tigera-operator-58fc44c59b-sh8bt" podStartSLOduration=11.969436198 podStartE2EDuration="14.621868895s" podCreationTimestamp="2025-09-06 00:21:29 +0000 UTC" firstStartedPulling="2025-09-06 00:21:29.665389651 +0000 UTC m=+6.525379596" lastFinishedPulling="2025-09-06 00:21:32.317822337 +0000 UTC m=+9.177812293" observedRunningTime="2025-09-06 00:21:32.485046266 +0000 UTC m=+9.345036313" watchObservedRunningTime="2025-09-06 00:21:43.621868895 +0000 UTC m=+20.481858862" Sep 6 00:21:43.628411 systemd[1]: Created slice kubepods-besteffort-pod88d86ec7_832d_409f_9162_5a6aad6c2aac.slice. Sep 6 00:21:43.664403 kubelet[1933]: I0906 00:21:43.664344 1933 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"typha-certs\" (UniqueName: \"kubernetes.io/secret/88d86ec7-832d-409f-9162-5a6aad6c2aac-typha-certs\") pod \"calico-typha-6fcd7986b9-hz4tb\" (UID: \"88d86ec7-832d-409f-9162-5a6aad6c2aac\") " pod="calico-system/calico-typha-6fcd7986b9-hz4tb" Sep 6 00:21:43.664847 kubelet[1933]: I0906 00:21:43.664798 1933 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"tigera-ca-bundle\" (UniqueName: \"kubernetes.io/configmap/88d86ec7-832d-409f-9162-5a6aad6c2aac-tigera-ca-bundle\") pod \"calico-typha-6fcd7986b9-hz4tb\" (UID: \"88d86ec7-832d-409f-9162-5a6aad6c2aac\") " pod="calico-system/calico-typha-6fcd7986b9-hz4tb" Sep 6 00:21:43.665141 kubelet[1933]: I0906 00:21:43.665107 1933 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-wdd7t\" (UniqueName: \"kubernetes.io/projected/88d86ec7-832d-409f-9162-5a6aad6c2aac-kube-api-access-wdd7t\") pod \"calico-typha-6fcd7986b9-hz4tb\" (UID: \"88d86ec7-832d-409f-9162-5a6aad6c2aac\") " pod="calico-system/calico-typha-6fcd7986b9-hz4tb" Sep 6 00:21:43.932186 kubelet[1933]: E0906 00:21:43.932088 1933 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 67.207.67.3 67.207.67.2 67.207.67.3" Sep 6 00:21:43.934604 env[1194]: time="2025-09-06T00:21:43.933940937Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-typha-6fcd7986b9-hz4tb,Uid:88d86ec7-832d-409f-9162-5a6aad6c2aac,Namespace:calico-system,Attempt:0,}" Sep 6 00:21:43.936750 systemd[1]: Created slice kubepods-besteffort-pod96da4418_ad7d_40b7_ad38_c48a2589b32a.slice. Sep 6 00:21:43.962079 env[1194]: time="2025-09-06T00:21:43.961977890Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Sep 6 00:21:43.962508 env[1194]: time="2025-09-06T00:21:43.962469817Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Sep 6 00:21:43.962641 env[1194]: time="2025-09-06T00:21:43.962618042Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Sep 6 00:21:43.962940 env[1194]: time="2025-09-06T00:21:43.962903704Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/63c9f4a1555320c6238518a943c6471beb025eb6994b8f9864e36e02650c0d05 pid=2336 runtime=io.containerd.runc.v2 Sep 6 00:21:43.967795 kubelet[1933]: I0906 00:21:43.967457 1933 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"cni-log-dir\" (UniqueName: \"kubernetes.io/host-path/96da4418-ad7d-40b7-ad38-c48a2589b32a-cni-log-dir\") pod \"calico-node-8hgkp\" (UID: \"96da4418-ad7d-40b7-ad38-c48a2589b32a\") " pod="calico-system/calico-node-8hgkp" Sep 6 00:21:43.967795 kubelet[1933]: I0906 00:21:43.967501 1933 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"lib-modules\" (UniqueName: \"kubernetes.io/host-path/96da4418-ad7d-40b7-ad38-c48a2589b32a-lib-modules\") pod \"calico-node-8hgkp\" (UID: \"96da4418-ad7d-40b7-ad38-c48a2589b32a\") " pod="calico-system/calico-node-8hgkp" Sep 6 00:21:43.967795 kubelet[1933]: I0906 00:21:43.967521 1933 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"node-certs\" (UniqueName: \"kubernetes.io/secret/96da4418-ad7d-40b7-ad38-c48a2589b32a-node-certs\") pod \"calico-node-8hgkp\" (UID: \"96da4418-ad7d-40b7-ad38-c48a2589b32a\") " pod="calico-system/calico-node-8hgkp" Sep 6 00:21:43.967795 kubelet[1933]: I0906 00:21:43.967544 1933 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"var-lib-calico\" (UniqueName: \"kubernetes.io/host-path/96da4418-ad7d-40b7-ad38-c48a2589b32a-var-lib-calico\") pod \"calico-node-8hgkp\" (UID: \"96da4418-ad7d-40b7-ad38-c48a2589b32a\") " pod="calico-system/calico-node-8hgkp" Sep 6 00:21:43.967795 kubelet[1933]: I0906 00:21:43.967560 1933 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"cni-bin-dir\" (UniqueName: \"kubernetes.io/host-path/96da4418-ad7d-40b7-ad38-c48a2589b32a-cni-bin-dir\") pod \"calico-node-8hgkp\" (UID: \"96da4418-ad7d-40b7-ad38-c48a2589b32a\") " pod="calico-system/calico-node-8hgkp" Sep 6 00:21:43.968288 kubelet[1933]: I0906 00:21:43.967580 1933 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"flexvol-driver-host\" (UniqueName: \"kubernetes.io/host-path/96da4418-ad7d-40b7-ad38-c48a2589b32a-flexvol-driver-host\") pod \"calico-node-8hgkp\" (UID: \"96da4418-ad7d-40b7-ad38-c48a2589b32a\") " pod="calico-system/calico-node-8hgkp" Sep 6 00:21:43.968288 kubelet[1933]: I0906 00:21:43.967599 1933 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"var-run-calico\" (UniqueName: \"kubernetes.io/host-path/96da4418-ad7d-40b7-ad38-c48a2589b32a-var-run-calico\") pod \"calico-node-8hgkp\" (UID: \"96da4418-ad7d-40b7-ad38-c48a2589b32a\") " pod="calico-system/calico-node-8hgkp" Sep 6 00:21:43.968288 kubelet[1933]: I0906 00:21:43.967614 1933 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"cni-net-dir\" (UniqueName: \"kubernetes.io/host-path/96da4418-ad7d-40b7-ad38-c48a2589b32a-cni-net-dir\") pod \"calico-node-8hgkp\" (UID: \"96da4418-ad7d-40b7-ad38-c48a2589b32a\") " pod="calico-system/calico-node-8hgkp" Sep 6 00:21:43.968288 kubelet[1933]: I0906 00:21:43.967633 1933 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"xtables-lock\" (UniqueName: \"kubernetes.io/host-path/96da4418-ad7d-40b7-ad38-c48a2589b32a-xtables-lock\") pod \"calico-node-8hgkp\" (UID: \"96da4418-ad7d-40b7-ad38-c48a2589b32a\") " pod="calico-system/calico-node-8hgkp" Sep 6 00:21:43.968288 kubelet[1933]: I0906 00:21:43.967655 1933 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"tigera-ca-bundle\" (UniqueName: \"kubernetes.io/configmap/96da4418-ad7d-40b7-ad38-c48a2589b32a-tigera-ca-bundle\") pod \"calico-node-8hgkp\" (UID: \"96da4418-ad7d-40b7-ad38-c48a2589b32a\") " pod="calico-system/calico-node-8hgkp" Sep 6 00:21:43.968445 kubelet[1933]: I0906 00:21:43.967672 1933 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"policysync\" (UniqueName: \"kubernetes.io/host-path/96da4418-ad7d-40b7-ad38-c48a2589b32a-policysync\") pod \"calico-node-8hgkp\" (UID: \"96da4418-ad7d-40b7-ad38-c48a2589b32a\") " pod="calico-system/calico-node-8hgkp" Sep 6 00:21:43.968445 kubelet[1933]: I0906 00:21:43.967694 1933 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-gddm2\" (UniqueName: \"kubernetes.io/projected/96da4418-ad7d-40b7-ad38-c48a2589b32a-kube-api-access-gddm2\") pod \"calico-node-8hgkp\" (UID: \"96da4418-ad7d-40b7-ad38-c48a2589b32a\") " pod="calico-system/calico-node-8hgkp" Sep 6 00:21:43.993527 systemd[1]: Started cri-containerd-63c9f4a1555320c6238518a943c6471beb025eb6994b8f9864e36e02650c0d05.scope. Sep 6 00:21:44.011000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:44.011000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:44.011000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:44.011000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:44.011000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:44.011000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:44.011000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:44.011000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:44.011000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:44.011000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:44.011000 audit: BPF prog-id=121 op=LOAD Sep 6 00:21:44.012000 audit[2347]: AVC avc: denied { bpf } for pid=2347 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:44.012000 audit[2347]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000145c48 a2=10 a3=1c items=0 ppid=2336 pid=2347 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:21:44.012000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3633633966346131353535333230633632333835313861393433633634 Sep 6 00:21:44.012000 audit[2347]: AVC avc: denied { perfmon } for pid=2347 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:44.012000 audit[2347]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001456b0 a2=3c a3=c items=0 ppid=2336 pid=2347 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:21:44.012000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3633633966346131353535333230633632333835313861393433633634 Sep 6 00:21:44.012000 audit[2347]: AVC avc: denied { bpf } for pid=2347 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:44.012000 audit[2347]: AVC avc: denied { bpf } for pid=2347 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:44.012000 audit[2347]: AVC avc: denied { bpf } for pid=2347 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:44.012000 audit[2347]: AVC avc: denied { perfmon } for pid=2347 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:44.012000 audit[2347]: AVC avc: denied { perfmon } for pid=2347 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:44.012000 audit[2347]: AVC avc: denied { perfmon } for pid=2347 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:44.012000 audit[2347]: AVC avc: denied { perfmon } for pid=2347 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:44.012000 audit[2347]: AVC avc: denied { perfmon } for pid=2347 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:44.012000 audit[2347]: AVC avc: denied { bpf } for pid=2347 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:44.012000 audit[2347]: AVC avc: denied { bpf } for pid=2347 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:44.012000 audit: BPF prog-id=122 op=LOAD Sep 6 00:21:44.012000 audit[2347]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001459d8 a2=78 a3=c00027e820 items=0 ppid=2336 pid=2347 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:21:44.012000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3633633966346131353535333230633632333835313861393433633634 Sep 6 00:21:44.012000 audit[2347]: AVC avc: denied { bpf } for pid=2347 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:44.012000 audit[2347]: AVC avc: denied { bpf } for pid=2347 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:44.012000 audit[2347]: AVC avc: denied { perfmon } for pid=2347 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:44.012000 audit[2347]: AVC avc: denied { perfmon } for pid=2347 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:44.012000 audit[2347]: AVC avc: denied { perfmon } for pid=2347 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:44.012000 audit[2347]: AVC avc: denied { perfmon } for pid=2347 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:44.012000 audit[2347]: AVC avc: denied { perfmon } for pid=2347 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:44.012000 audit[2347]: AVC avc: denied { bpf } for pid=2347 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:44.012000 audit[2347]: AVC avc: denied { bpf } for pid=2347 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:44.012000 audit: BPF prog-id=123 op=LOAD Sep 6 00:21:44.012000 audit[2347]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000145770 a2=78 a3=c00027e868 items=0 ppid=2336 pid=2347 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:21:44.012000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3633633966346131353535333230633632333835313861393433633634 Sep 6 00:21:44.012000 audit: BPF prog-id=123 op=UNLOAD Sep 6 00:21:44.013000 audit: BPF prog-id=122 op=UNLOAD Sep 6 00:21:44.013000 audit[2347]: AVC avc: denied { bpf } for pid=2347 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:44.013000 audit[2347]: AVC avc: denied { bpf } for pid=2347 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:44.013000 audit[2347]: AVC avc: denied { bpf } for pid=2347 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:44.013000 audit[2347]: AVC avc: denied { perfmon } for pid=2347 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:44.013000 audit[2347]: AVC avc: denied { perfmon } for pid=2347 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:44.013000 audit[2347]: AVC avc: denied { perfmon } for pid=2347 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:44.013000 audit[2347]: AVC avc: denied { perfmon } for pid=2347 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:44.013000 audit[2347]: AVC avc: denied { perfmon } for pid=2347 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:44.013000 audit[2347]: AVC avc: denied { bpf } for pid=2347 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:44.013000 audit[2347]: AVC avc: denied { bpf } for pid=2347 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:44.013000 audit: BPF prog-id=124 op=LOAD Sep 6 00:21:44.013000 audit[2347]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000145c30 a2=78 a3=c00027ec78 items=0 ppid=2336 pid=2347 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:21:44.013000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3633633966346131353535333230633632333835313861393433633634 Sep 6 00:21:44.061160 env[1194]: time="2025-09-06T00:21:44.061116298Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-typha-6fcd7986b9-hz4tb,Uid:88d86ec7-832d-409f-9162-5a6aad6c2aac,Namespace:calico-system,Attempt:0,} returns sandbox id \"63c9f4a1555320c6238518a943c6471beb025eb6994b8f9864e36e02650c0d05\"" Sep 6 00:21:44.062736 kubelet[1933]: E0906 00:21:44.062217 1933 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 67.207.67.3 67.207.67.2 67.207.67.3" Sep 6 00:21:44.063645 env[1194]: time="2025-09-06T00:21:44.063614243Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/typha:v3.30.3\"" Sep 6 00:21:44.075653 kubelet[1933]: E0906 00:21:44.075615 1933 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 6 00:21:44.075956 kubelet[1933]: W0906 00:21:44.075931 1933 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 6 00:21:44.076051 kubelet[1933]: E0906 00:21:44.076036 1933 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 6 00:21:44.085634 kubelet[1933]: E0906 00:21:44.085606 1933 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 6 00:21:44.085824 kubelet[1933]: W0906 00:21:44.085805 1933 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 6 00:21:44.085904 kubelet[1933]: E0906 00:21:44.085890 1933 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 6 00:21:44.169653 kubelet[1933]: E0906 00:21:44.169568 1933 pod_workers.go:1301] "Error syncing pod, skipping" err="network is not ready: container runtime network not ready: NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" pod="calico-system/csi-node-driver-6qmdc" podUID="ece72a4f-db26-4c71-b1f6-478e03debafc" Sep 6 00:21:44.244105 env[1194]: time="2025-09-06T00:21:44.243560004Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-node-8hgkp,Uid:96da4418-ad7d-40b7-ad38-c48a2589b32a,Namespace:calico-system,Attempt:0,}" Sep 6 00:21:44.265293 kubelet[1933]: E0906 00:21:44.265198 1933 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 6 00:21:44.265293 kubelet[1933]: W0906 00:21:44.265230 1933 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 6 00:21:44.265293 kubelet[1933]: E0906 00:21:44.265289 1933 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 6 00:21:44.265787 kubelet[1933]: E0906 00:21:44.265763 1933 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 6 00:21:44.265787 kubelet[1933]: W0906 00:21:44.265784 1933 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 6 00:21:44.265912 kubelet[1933]: E0906 00:21:44.265806 1933 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 6 00:21:44.266168 kubelet[1933]: E0906 00:21:44.266151 1933 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 6 00:21:44.266218 kubelet[1933]: W0906 00:21:44.266168 1933 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 6 00:21:44.266218 kubelet[1933]: E0906 00:21:44.266183 1933 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 6 00:21:44.266535 kubelet[1933]: E0906 00:21:44.266500 1933 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 6 00:21:44.266590 kubelet[1933]: W0906 00:21:44.266537 1933 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 6 00:21:44.266590 kubelet[1933]: E0906 00:21:44.266553 1933 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 6 00:21:44.266908 kubelet[1933]: E0906 00:21:44.266888 1933 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 6 00:21:44.266908 kubelet[1933]: W0906 00:21:44.266907 1933 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 6 00:21:44.267007 kubelet[1933]: E0906 00:21:44.266923 1933 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 6 00:21:44.270616 kubelet[1933]: E0906 00:21:44.270543 1933 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 6 00:21:44.270616 kubelet[1933]: W0906 00:21:44.270592 1933 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 6 00:21:44.270815 kubelet[1933]: E0906 00:21:44.270622 1933 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 6 00:21:44.271267 kubelet[1933]: E0906 00:21:44.271160 1933 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 6 00:21:44.271267 kubelet[1933]: W0906 00:21:44.271184 1933 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 6 00:21:44.271267 kubelet[1933]: E0906 00:21:44.271265 1933 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 6 00:21:44.272981 kubelet[1933]: E0906 00:21:44.272953 1933 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 6 00:21:44.272981 kubelet[1933]: W0906 00:21:44.272976 1933 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 6 00:21:44.273229 kubelet[1933]: E0906 00:21:44.273002 1933 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 6 00:21:44.273777 kubelet[1933]: E0906 00:21:44.273751 1933 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 6 00:21:44.273777 kubelet[1933]: W0906 00:21:44.273776 1933 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 6 00:21:44.273925 kubelet[1933]: E0906 00:21:44.273798 1933 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 6 00:21:44.274092 kubelet[1933]: E0906 00:21:44.274068 1933 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 6 00:21:44.274092 kubelet[1933]: W0906 00:21:44.274087 1933 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 6 00:21:44.274402 kubelet[1933]: E0906 00:21:44.274104 1933 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 6 00:21:44.276592 kubelet[1933]: E0906 00:21:44.276315 1933 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 6 00:21:44.276592 kubelet[1933]: W0906 00:21:44.276339 1933 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 6 00:21:44.276592 kubelet[1933]: E0906 00:21:44.276361 1933 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 6 00:21:44.276828 kubelet[1933]: E0906 00:21:44.276629 1933 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 6 00:21:44.276828 kubelet[1933]: W0906 00:21:44.276643 1933 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 6 00:21:44.276828 kubelet[1933]: E0906 00:21:44.276662 1933 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 6 00:21:44.276977 kubelet[1933]: E0906 00:21:44.276957 1933 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 6 00:21:44.277037 kubelet[1933]: W0906 00:21:44.276977 1933 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 6 00:21:44.277037 kubelet[1933]: E0906 00:21:44.276994 1933 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 6 00:21:44.277615 kubelet[1933]: E0906 00:21:44.277260 1933 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 6 00:21:44.277615 kubelet[1933]: W0906 00:21:44.277280 1933 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 6 00:21:44.277615 kubelet[1933]: E0906 00:21:44.277295 1933 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 6 00:21:44.279403 kubelet[1933]: E0906 00:21:44.279373 1933 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 6 00:21:44.279403 kubelet[1933]: W0906 00:21:44.279398 1933 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 6 00:21:44.279605 kubelet[1933]: E0906 00:21:44.279417 1933 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 6 00:21:44.279703 kubelet[1933]: E0906 00:21:44.279683 1933 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 6 00:21:44.279761 kubelet[1933]: W0906 00:21:44.279702 1933 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 6 00:21:44.279761 kubelet[1933]: E0906 00:21:44.279723 1933 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 6 00:21:44.280048 kubelet[1933]: E0906 00:21:44.280024 1933 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 6 00:21:44.280048 kubelet[1933]: W0906 00:21:44.280046 1933 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 6 00:21:44.280165 kubelet[1933]: E0906 00:21:44.280063 1933 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 6 00:21:44.280351 kubelet[1933]: E0906 00:21:44.280331 1933 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 6 00:21:44.280351 kubelet[1933]: W0906 00:21:44.280349 1933 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 6 00:21:44.280479 kubelet[1933]: E0906 00:21:44.280365 1933 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 6 00:21:44.280652 kubelet[1933]: E0906 00:21:44.280622 1933 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 6 00:21:44.280652 kubelet[1933]: W0906 00:21:44.280640 1933 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 6 00:21:44.280772 kubelet[1933]: E0906 00:21:44.280658 1933 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 6 00:21:44.283667 env[1194]: time="2025-09-06T00:21:44.283553077Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Sep 6 00:21:44.283951 env[1194]: time="2025-09-06T00:21:44.283909465Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Sep 6 00:21:44.284111 env[1194]: time="2025-09-06T00:21:44.284067531Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Sep 6 00:21:44.284765 env[1194]: time="2025-09-06T00:21:44.284690578Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/2f62fb67075e1523acff2e95d02eca678fd67d04e398c285ec4e0609ad793b03 pid=2383 runtime=io.containerd.runc.v2 Sep 6 00:21:44.286479 kubelet[1933]: E0906 00:21:44.285910 1933 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 6 00:21:44.286479 kubelet[1933]: W0906 00:21:44.285947 1933 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 6 00:21:44.286479 kubelet[1933]: E0906 00:21:44.285981 1933 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 6 00:21:44.286774 kubelet[1933]: E0906 00:21:44.286535 1933 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 6 00:21:44.286774 kubelet[1933]: W0906 00:21:44.286554 1933 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 6 00:21:44.286774 kubelet[1933]: E0906 00:21:44.286578 1933 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 6 00:21:44.286774 kubelet[1933]: I0906 00:21:44.286619 1933 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kubelet-dir\" (UniqueName: \"kubernetes.io/host-path/ece72a4f-db26-4c71-b1f6-478e03debafc-kubelet-dir\") pod \"csi-node-driver-6qmdc\" (UID: \"ece72a4f-db26-4c71-b1f6-478e03debafc\") " pod="calico-system/csi-node-driver-6qmdc" Sep 6 00:21:44.287005 kubelet[1933]: E0906 00:21:44.286978 1933 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 6 00:21:44.287005 kubelet[1933]: W0906 00:21:44.287001 1933 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 6 00:21:44.287132 kubelet[1933]: E0906 00:21:44.287024 1933 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 6 00:21:44.287132 kubelet[1933]: I0906 00:21:44.287051 1933 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"varrun\" (UniqueName: \"kubernetes.io/host-path/ece72a4f-db26-4c71-b1f6-478e03debafc-varrun\") pod \"csi-node-driver-6qmdc\" (UID: \"ece72a4f-db26-4c71-b1f6-478e03debafc\") " pod="calico-system/csi-node-driver-6qmdc" Sep 6 00:21:44.287416 kubelet[1933]: E0906 00:21:44.287395 1933 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 6 00:21:44.287508 kubelet[1933]: W0906 00:21:44.287417 1933 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 6 00:21:44.287508 kubelet[1933]: E0906 00:21:44.287439 1933 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 6 00:21:44.287508 kubelet[1933]: I0906 00:21:44.287464 1933 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"socket-dir\" (UniqueName: \"kubernetes.io/host-path/ece72a4f-db26-4c71-b1f6-478e03debafc-socket-dir\") pod \"csi-node-driver-6qmdc\" (UID: \"ece72a4f-db26-4c71-b1f6-478e03debafc\") " pod="calico-system/csi-node-driver-6qmdc" Sep 6 00:21:44.287764 kubelet[1933]: E0906 00:21:44.287744 1933 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 6 00:21:44.287764 kubelet[1933]: W0906 00:21:44.287761 1933 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 6 00:21:44.287880 kubelet[1933]: E0906 00:21:44.287783 1933 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 6 00:21:44.287880 kubelet[1933]: I0906 00:21:44.287814 1933 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-j7v54\" (UniqueName: \"kubernetes.io/projected/ece72a4f-db26-4c71-b1f6-478e03debafc-kube-api-access-j7v54\") pod \"csi-node-driver-6qmdc\" (UID: \"ece72a4f-db26-4c71-b1f6-478e03debafc\") " pod="calico-system/csi-node-driver-6qmdc" Sep 6 00:21:44.288125 kubelet[1933]: E0906 00:21:44.288104 1933 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 6 00:21:44.288202 kubelet[1933]: W0906 00:21:44.288125 1933 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 6 00:21:44.288437 kubelet[1933]: E0906 00:21:44.288328 1933 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 6 00:21:44.288437 kubelet[1933]: I0906 00:21:44.288382 1933 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"registration-dir\" (UniqueName: \"kubernetes.io/host-path/ece72a4f-db26-4c71-b1f6-478e03debafc-registration-dir\") pod \"csi-node-driver-6qmdc\" (UID: \"ece72a4f-db26-4c71-b1f6-478e03debafc\") " pod="calico-system/csi-node-driver-6qmdc" Sep 6 00:21:44.288437 kubelet[1933]: E0906 00:21:44.288413 1933 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 6 00:21:44.288437 kubelet[1933]: W0906 00:21:44.288428 1933 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 6 00:21:44.288655 kubelet[1933]: E0906 00:21:44.288563 1933 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 6 00:21:44.288816 kubelet[1933]: E0906 00:21:44.288729 1933 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 6 00:21:44.288816 kubelet[1933]: W0906 00:21:44.288748 1933 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 6 00:21:44.288952 kubelet[1933]: E0906 00:21:44.288874 1933 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 6 00:21:44.289047 kubelet[1933]: E0906 00:21:44.289020 1933 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 6 00:21:44.289047 kubelet[1933]: W0906 00:21:44.289038 1933 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 6 00:21:44.290493 kubelet[1933]: E0906 00:21:44.290459 1933 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 6 00:21:44.290724 kubelet[1933]: E0906 00:21:44.290667 1933 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 6 00:21:44.290724 kubelet[1933]: W0906 00:21:44.290687 1933 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 6 00:21:44.290965 kubelet[1933]: E0906 00:21:44.290907 1933 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 6 00:21:44.291039 kubelet[1933]: E0906 00:21:44.290989 1933 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 6 00:21:44.291039 kubelet[1933]: W0906 00:21:44.291004 1933 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 6 00:21:44.291149 kubelet[1933]: E0906 00:21:44.291123 1933 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 6 00:21:44.292507 kubelet[1933]: E0906 00:21:44.292474 1933 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 6 00:21:44.292507 kubelet[1933]: W0906 00:21:44.292501 1933 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 6 00:21:44.292663 kubelet[1933]: E0906 00:21:44.292520 1933 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 6 00:21:44.292854 kubelet[1933]: E0906 00:21:44.292834 1933 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 6 00:21:44.292930 kubelet[1933]: W0906 00:21:44.292853 1933 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 6 00:21:44.292930 kubelet[1933]: E0906 00:21:44.292870 1933 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 6 00:21:44.293204 kubelet[1933]: E0906 00:21:44.293187 1933 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 6 00:21:44.293297 kubelet[1933]: W0906 00:21:44.293204 1933 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 6 00:21:44.293297 kubelet[1933]: E0906 00:21:44.293220 1933 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 6 00:21:44.293636 kubelet[1933]: E0906 00:21:44.293526 1933 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 6 00:21:44.293636 kubelet[1933]: W0906 00:21:44.293543 1933 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 6 00:21:44.293636 kubelet[1933]: E0906 00:21:44.293558 1933 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 6 00:21:44.293846 kubelet[1933]: E0906 00:21:44.293801 1933 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 6 00:21:44.301424 kubelet[1933]: W0906 00:21:44.301352 1933 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 6 00:21:44.301424 kubelet[1933]: E0906 00:21:44.301417 1933 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 6 00:21:44.327506 systemd[1]: Started cri-containerd-2f62fb67075e1523acff2e95d02eca678fd67d04e398c285ec4e0609ad793b03.scope. Sep 6 00:21:44.368767 kernel: kauditd_printk_skb: 76 callbacks suppressed Sep 6 00:21:44.368925 kernel: audit: type=1400 audit(1757118104.365:974): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:44.365000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:44.371523 kernel: audit: type=1400 audit(1757118104.365:975): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:44.365000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:44.374065 kernel: audit: type=1400 audit(1757118104.365:976): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:44.365000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:44.365000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:44.377252 kernel: audit: type=1400 audit(1757118104.365:977): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:44.365000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:44.384163 kernel: audit: type=1400 audit(1757118104.365:978): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:44.384282 kernel: audit: type=1400 audit(1757118104.365:979): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:44.365000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:44.365000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:44.390682 kernel: audit: type=1400 audit(1757118104.365:980): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:44.390835 kernel: audit: type=1400 audit(1757118104.365:981): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:44.365000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:44.393576 kernel: audit: type=1400 audit(1757118104.365:982): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:44.365000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:44.393789 kubelet[1933]: E0906 00:21:44.391855 1933 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 6 00:21:44.393789 kubelet[1933]: W0906 00:21:44.391902 1933 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 6 00:21:44.393789 kubelet[1933]: E0906 00:21:44.391947 1933 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 6 00:21:44.397432 kernel: audit: type=1400 audit(1757118104.368:983): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:44.368000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:44.397676 kubelet[1933]: E0906 00:21:44.394400 1933 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 6 00:21:44.397676 kubelet[1933]: W0906 00:21:44.394431 1933 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 6 00:21:44.397676 kubelet[1933]: E0906 00:21:44.394486 1933 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 6 00:21:44.398440 kubelet[1933]: E0906 00:21:44.398395 1933 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 6 00:21:44.398440 kubelet[1933]: W0906 00:21:44.398429 1933 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 6 00:21:44.398651 kubelet[1933]: E0906 00:21:44.398468 1933 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 6 00:21:44.399022 kubelet[1933]: E0906 00:21:44.398989 1933 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 6 00:21:44.399022 kubelet[1933]: W0906 00:21:44.399017 1933 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 6 00:21:44.399189 kubelet[1933]: E0906 00:21:44.399039 1933 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 6 00:21:44.399379 kubelet[1933]: E0906 00:21:44.399359 1933 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 6 00:21:44.399379 kubelet[1933]: W0906 00:21:44.399377 1933 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 6 00:21:44.399652 kubelet[1933]: E0906 00:21:44.399567 1933 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 6 00:21:44.399652 kubelet[1933]: E0906 00:21:44.399632 1933 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 6 00:21:44.399652 kubelet[1933]: W0906 00:21:44.399647 1933 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 6 00:21:44.399851 kubelet[1933]: E0906 00:21:44.399757 1933 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 6 00:21:44.400029 kubelet[1933]: E0906 00:21:44.400009 1933 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 6 00:21:44.400029 kubelet[1933]: W0906 00:21:44.400026 1933 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 6 00:21:44.400195 kubelet[1933]: E0906 00:21:44.400172 1933 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 6 00:21:44.368000 audit: BPF prog-id=125 op=LOAD Sep 6 00:21:44.400752 kubelet[1933]: E0906 00:21:44.400370 1933 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 6 00:21:44.400752 kubelet[1933]: W0906 00:21:44.400577 1933 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 6 00:21:44.400752 kubelet[1933]: E0906 00:21:44.400607 1933 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 6 00:21:44.370000 audit[2429]: AVC avc: denied { bpf } for pid=2429 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:44.370000 audit[2429]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000117c48 a2=10 a3=1c items=0 ppid=2383 pid=2429 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:21:44.370000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3266363266623637303735653135323361636666326539356430326563 Sep 6 00:21:44.370000 audit[2429]: AVC avc: denied { perfmon } for pid=2429 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:44.370000 audit[2429]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=0 a1=c0001176b0 a2=3c a3=c items=0 ppid=2383 pid=2429 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:21:44.370000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3266363266623637303735653135323361636666326539356430326563 Sep 6 00:21:44.370000 audit[2429]: AVC avc: denied { bpf } for pid=2429 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:44.370000 audit[2429]: AVC avc: denied { bpf } for pid=2429 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:44.370000 audit[2429]: AVC avc: denied { bpf } for pid=2429 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:44.370000 audit[2429]: AVC avc: denied { perfmon } for pid=2429 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:44.370000 audit[2429]: AVC avc: denied { perfmon } for pid=2429 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:44.370000 audit[2429]: AVC avc: denied { perfmon } for pid=2429 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:44.370000 audit[2429]: AVC avc: denied { perfmon } for pid=2429 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:44.370000 audit[2429]: AVC avc: denied { perfmon } for pid=2429 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:44.370000 audit[2429]: AVC avc: denied { bpf } for pid=2429 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:44.370000 audit[2429]: AVC avc: denied { bpf } for pid=2429 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:44.370000 audit: BPF prog-id=126 op=LOAD Sep 6 00:21:44.370000 audit[2429]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c0001179d8 a2=78 a3=c000211050 items=0 ppid=2383 pid=2429 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:21:44.370000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3266363266623637303735653135323361636666326539356430326563 Sep 6 00:21:44.371000 audit[2429]: AVC avc: denied { bpf } for pid=2429 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:44.403188 kubelet[1933]: E0906 00:21:44.401334 1933 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 6 00:21:44.403188 kubelet[1933]: W0906 00:21:44.401350 1933 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 6 00:21:44.403188 kubelet[1933]: E0906 00:21:44.401375 1933 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 6 00:21:44.403188 kubelet[1933]: E0906 00:21:44.401698 1933 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 6 00:21:44.403188 kubelet[1933]: W0906 00:21:44.401712 1933 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 6 00:21:44.403188 kubelet[1933]: E0906 00:21:44.401815 1933 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 6 00:21:44.403740 kubelet[1933]: E0906 00:21:44.403341 1933 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 6 00:21:44.403740 kubelet[1933]: W0906 00:21:44.403357 1933 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 6 00:21:44.403740 kubelet[1933]: E0906 00:21:44.403499 1933 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 6 00:21:44.371000 audit[2429]: AVC avc: denied { bpf } for pid=2429 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:44.371000 audit[2429]: AVC avc: denied { perfmon } for pid=2429 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:44.371000 audit[2429]: AVC avc: denied { perfmon } for pid=2429 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:44.371000 audit[2429]: AVC avc: denied { perfmon } for pid=2429 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:44.371000 audit[2429]: AVC avc: denied { perfmon } for pid=2429 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:44.371000 audit[2429]: AVC avc: denied { perfmon } for pid=2429 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:44.371000 audit[2429]: AVC avc: denied { bpf } for pid=2429 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:44.371000 audit[2429]: AVC avc: denied { bpf } for pid=2429 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:44.371000 audit: BPF prog-id=127 op=LOAD Sep 6 00:21:44.371000 audit[2429]: SYSCALL arch=c000003e syscall=321 success=yes exit=17 a0=5 a1=c000117770 a2=78 a3=c000211098 items=0 ppid=2383 pid=2429 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:21:44.371000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3266363266623637303735653135323361636666326539356430326563 Sep 6 00:21:44.375000 audit: BPF prog-id=127 op=UNLOAD Sep 6 00:21:44.376000 audit: BPF prog-id=126 op=UNLOAD Sep 6 00:21:44.376000 audit[2429]: AVC avc: denied { bpf } for pid=2429 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:44.376000 audit[2429]: AVC avc: denied { bpf } for pid=2429 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:44.376000 audit[2429]: AVC avc: denied { bpf } for pid=2429 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:44.376000 audit[2429]: AVC avc: denied { perfmon } for pid=2429 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:44.376000 audit[2429]: AVC avc: denied { perfmon } for pid=2429 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:44.376000 audit[2429]: AVC avc: denied { perfmon } for pid=2429 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:44.376000 audit[2429]: AVC avc: denied { perfmon } for pid=2429 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:44.376000 audit[2429]: AVC avc: denied { perfmon } for pid=2429 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:44.376000 audit[2429]: AVC avc: denied { bpf } for pid=2429 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:44.376000 audit[2429]: AVC avc: denied { bpf } for pid=2429 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:44.376000 audit: BPF prog-id=128 op=LOAD Sep 6 00:21:44.376000 audit[2429]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c000117c30 a2=78 a3=c0002114a8 items=0 ppid=2383 pid=2429 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:21:44.376000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3266363266623637303735653135323361636666326539356430326563 Sep 6 00:21:44.406225 kubelet[1933]: E0906 00:21:44.405351 1933 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 6 00:21:44.406225 kubelet[1933]: W0906 00:21:44.405369 1933 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 6 00:21:44.406225 kubelet[1933]: E0906 00:21:44.405478 1933 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 6 00:21:44.407379 kubelet[1933]: E0906 00:21:44.407351 1933 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 6 00:21:44.407379 kubelet[1933]: W0906 00:21:44.407376 1933 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 6 00:21:44.407757 kubelet[1933]: E0906 00:21:44.407427 1933 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 6 00:21:44.408879 kubelet[1933]: E0906 00:21:44.408845 1933 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 6 00:21:44.408879 kubelet[1933]: W0906 00:21:44.408868 1933 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 6 00:21:44.409105 kubelet[1933]: E0906 00:21:44.409057 1933 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 6 00:21:44.409181 kubelet[1933]: E0906 00:21:44.409162 1933 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 6 00:21:44.409343 kubelet[1933]: W0906 00:21:44.409180 1933 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 6 00:21:44.409410 kubelet[1933]: E0906 00:21:44.409388 1933 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 6 00:21:44.409578 kubelet[1933]: E0906 00:21:44.409561 1933 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 6 00:21:44.409713 kubelet[1933]: W0906 00:21:44.409577 1933 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 6 00:21:44.409713 kubelet[1933]: E0906 00:21:44.409608 1933 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 6 00:21:44.409816 kubelet[1933]: E0906 00:21:44.409800 1933 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 6 00:21:44.409816 kubelet[1933]: W0906 00:21:44.409815 1933 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 6 00:21:44.409953 kubelet[1933]: E0906 00:21:44.409842 1933 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 6 00:21:44.410047 kubelet[1933]: E0906 00:21:44.410030 1933 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 6 00:21:44.410151 kubelet[1933]: W0906 00:21:44.410047 1933 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 6 00:21:44.410151 kubelet[1933]: E0906 00:21:44.410068 1933 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 6 00:21:44.410336 kubelet[1933]: E0906 00:21:44.410317 1933 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 6 00:21:44.410336 kubelet[1933]: W0906 00:21:44.410335 1933 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 6 00:21:44.410508 kubelet[1933]: E0906 00:21:44.410355 1933 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 6 00:21:44.410666 kubelet[1933]: E0906 00:21:44.410648 1933 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 6 00:21:44.410882 kubelet[1933]: W0906 00:21:44.410666 1933 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 6 00:21:44.410882 kubelet[1933]: E0906 00:21:44.410706 1933 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 6 00:21:44.411084 kubelet[1933]: E0906 00:21:44.410890 1933 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 6 00:21:44.411084 kubelet[1933]: W0906 00:21:44.410902 1933 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 6 00:21:44.411084 kubelet[1933]: E0906 00:21:44.410942 1933 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 6 00:21:44.411298 kubelet[1933]: E0906 00:21:44.411190 1933 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 6 00:21:44.411298 kubelet[1933]: W0906 00:21:44.411203 1933 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 6 00:21:44.411298 kubelet[1933]: E0906 00:21:44.411251 1933 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 6 00:21:44.411469 kubelet[1933]: E0906 00:21:44.411459 1933 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 6 00:21:44.411641 kubelet[1933]: W0906 00:21:44.411475 1933 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 6 00:21:44.411641 kubelet[1933]: E0906 00:21:44.411509 1933 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 6 00:21:44.412327 kubelet[1933]: E0906 00:21:44.411768 1933 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 6 00:21:44.412327 kubelet[1933]: W0906 00:21:44.411786 1933 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 6 00:21:44.412327 kubelet[1933]: E0906 00:21:44.411809 1933 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 6 00:21:44.412327 kubelet[1933]: E0906 00:21:44.412259 1933 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 6 00:21:44.412327 kubelet[1933]: W0906 00:21:44.412274 1933 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 6 00:21:44.412327 kubelet[1933]: E0906 00:21:44.412289 1933 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 6 00:21:44.438258 env[1194]: time="2025-09-06T00:21:44.438177824Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-node-8hgkp,Uid:96da4418-ad7d-40b7-ad38-c48a2589b32a,Namespace:calico-system,Attempt:0,} returns sandbox id \"2f62fb67075e1523acff2e95d02eca678fd67d04e398c285ec4e0609ad793b03\"" Sep 6 00:21:44.443000 audit[2471]: NETFILTER_CFG table=filter:97 family=2 entries=20 op=nft_register_rule pid=2471 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Sep 6 00:21:44.443000 audit[2471]: SYSCALL arch=c000003e syscall=46 success=yes exit=8224 a0=3 a1=7ffdc55aaf70 a2=0 a3=7ffdc55aaf5c items=0 ppid=2038 pid=2471 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:21:44.443000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Sep 6 00:21:44.446348 kubelet[1933]: E0906 00:21:44.446310 1933 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 6 00:21:44.446348 kubelet[1933]: W0906 00:21:44.446343 1933 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 6 00:21:44.446549 kubelet[1933]: E0906 00:21:44.446375 1933 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 6 00:21:44.449000 audit[2471]: NETFILTER_CFG table=nat:98 family=2 entries=12 op=nft_register_rule pid=2471 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Sep 6 00:21:44.449000 audit[2471]: SYSCALL arch=c000003e syscall=46 success=yes exit=2700 a0=3 a1=7ffdc55aaf70 a2=0 a3=0 items=0 ppid=2038 pid=2471 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:21:44.449000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Sep 6 00:21:44.778139 systemd[1]: run-containerd-runc-k8s.io-63c9f4a1555320c6238518a943c6471beb025eb6994b8f9864e36e02650c0d05-runc.rY9M7c.mount: Deactivated successfully. Sep 6 00:21:45.267862 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount2507339456.mount: Deactivated successfully. Sep 6 00:21:45.387557 kubelet[1933]: E0906 00:21:45.386501 1933 pod_workers.go:1301] "Error syncing pod, skipping" err="network is not ready: container runtime network not ready: NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" pod="calico-system/csi-node-driver-6qmdc" podUID="ece72a4f-db26-4c71-b1f6-478e03debafc" Sep 6 00:21:46.365184 env[1194]: time="2025-09-06T00:21:46.365127122Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/typha:v3.30.3,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 6 00:21:46.367424 env[1194]: time="2025-09-06T00:21:46.367380340Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:1d7bb7b0cce2924d35c7c26f6b6600409ea7c9535074c3d2e517ffbb3a0e0b36,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 6 00:21:46.368805 env[1194]: time="2025-09-06T00:21:46.368759396Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/typha:v3.30.3,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 6 00:21:46.370773 env[1194]: time="2025-09-06T00:21:46.370729048Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/typha:v3.30.3\" returns image reference \"sha256:1d7bb7b0cce2924d35c7c26f6b6600409ea7c9535074c3d2e517ffbb3a0e0b36\"" Sep 6 00:21:46.371046 env[1194]: time="2025-09-06T00:21:46.371026125Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/typha@sha256:f4a3d61ffda9c98a53adeb412c5af404ca3727a3cc2d0b4ef28d197bdd47ecaa,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 6 00:21:46.372850 env[1194]: time="2025-09-06T00:21:46.372822650Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/pod2daemon-flexvol:v3.30.3\"" Sep 6 00:21:46.391154 env[1194]: time="2025-09-06T00:21:46.391090170Z" level=info msg="CreateContainer within sandbox \"63c9f4a1555320c6238518a943c6471beb025eb6994b8f9864e36e02650c0d05\" for container &ContainerMetadata{Name:calico-typha,Attempt:0,}" Sep 6 00:21:46.409204 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount2320349548.mount: Deactivated successfully. Sep 6 00:21:46.414000 env[1194]: time="2025-09-06T00:21:46.413948655Z" level=info msg="CreateContainer within sandbox \"63c9f4a1555320c6238518a943c6471beb025eb6994b8f9864e36e02650c0d05\" for &ContainerMetadata{Name:calico-typha,Attempt:0,} returns container id \"3be9d35bd580a4de5fb6c3d928bd7e3d7b5835b459754a67c3cce0be72453795\"" Sep 6 00:21:46.414874 env[1194]: time="2025-09-06T00:21:46.414841621Z" level=info msg="StartContainer for \"3be9d35bd580a4de5fb6c3d928bd7e3d7b5835b459754a67c3cce0be72453795\"" Sep 6 00:21:46.442188 systemd[1]: Started cri-containerd-3be9d35bd580a4de5fb6c3d928bd7e3d7b5835b459754a67c3cce0be72453795.scope. Sep 6 00:21:46.488000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:46.488000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:46.488000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:46.488000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:46.488000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:46.488000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:46.488000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:46.488000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:46.488000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:46.489000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:46.489000 audit: BPF prog-id=129 op=LOAD Sep 6 00:21:46.490000 audit[2492]: AVC avc: denied { bpf } for pid=2492 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:46.490000 audit[2492]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000197c48 a2=10 a3=1c items=0 ppid=2336 pid=2492 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:21:46.490000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3362653964333562643538306134646535666236633364393238626437 Sep 6 00:21:46.490000 audit[2492]: AVC avc: denied { perfmon } for pid=2492 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:46.490000 audit[2492]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001976b0 a2=3c a3=8 items=0 ppid=2336 pid=2492 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:21:46.490000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3362653964333562643538306134646535666236633364393238626437 Sep 6 00:21:46.490000 audit[2492]: AVC avc: denied { bpf } for pid=2492 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:46.490000 audit[2492]: AVC avc: denied { bpf } for pid=2492 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:46.490000 audit[2492]: AVC avc: denied { bpf } for pid=2492 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:46.490000 audit[2492]: AVC avc: denied { perfmon } for pid=2492 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:46.490000 audit[2492]: AVC avc: denied { perfmon } for pid=2492 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:46.490000 audit[2492]: AVC avc: denied { perfmon } for pid=2492 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:46.490000 audit[2492]: AVC avc: denied { perfmon } for pid=2492 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:46.490000 audit[2492]: AVC avc: denied { perfmon } for pid=2492 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:46.490000 audit[2492]: AVC avc: denied { bpf } for pid=2492 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:46.490000 audit[2492]: AVC avc: denied { bpf } for pid=2492 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:46.490000 audit: BPF prog-id=130 op=LOAD Sep 6 00:21:46.490000 audit[2492]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001979d8 a2=78 a3=c0003d0010 items=0 ppid=2336 pid=2492 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:21:46.490000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3362653964333562643538306134646535666236633364393238626437 Sep 6 00:21:46.490000 audit[2492]: AVC avc: denied { bpf } for pid=2492 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:46.490000 audit[2492]: AVC avc: denied { bpf } for pid=2492 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:46.490000 audit[2492]: AVC avc: denied { perfmon } for pid=2492 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:46.490000 audit[2492]: AVC avc: denied { perfmon } for pid=2492 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:46.490000 audit[2492]: AVC avc: denied { perfmon } for pid=2492 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:46.490000 audit[2492]: AVC avc: denied { perfmon } for pid=2492 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:46.490000 audit[2492]: AVC avc: denied { perfmon } for pid=2492 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:46.490000 audit[2492]: AVC avc: denied { bpf } for pid=2492 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:46.490000 audit[2492]: AVC avc: denied { bpf } for pid=2492 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:46.490000 audit: BPF prog-id=131 op=LOAD Sep 6 00:21:46.490000 audit[2492]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000197770 a2=78 a3=c0003d0058 items=0 ppid=2336 pid=2492 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:21:46.490000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3362653964333562643538306134646535666236633364393238626437 Sep 6 00:21:46.490000 audit: BPF prog-id=131 op=UNLOAD Sep 6 00:21:46.490000 audit: BPF prog-id=130 op=UNLOAD Sep 6 00:21:46.490000 audit[2492]: AVC avc: denied { bpf } for pid=2492 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:46.490000 audit[2492]: AVC avc: denied { bpf } for pid=2492 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:46.490000 audit[2492]: AVC avc: denied { bpf } for pid=2492 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:46.490000 audit[2492]: AVC avc: denied { perfmon } for pid=2492 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:46.490000 audit[2492]: AVC avc: denied { perfmon } for pid=2492 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:46.490000 audit[2492]: AVC avc: denied { perfmon } for pid=2492 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:46.490000 audit[2492]: AVC avc: denied { perfmon } for pid=2492 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:46.490000 audit[2492]: AVC avc: denied { perfmon } for pid=2492 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:46.490000 audit[2492]: AVC avc: denied { bpf } for pid=2492 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:46.490000 audit[2492]: AVC avc: denied { bpf } for pid=2492 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:46.490000 audit: BPF prog-id=132 op=LOAD Sep 6 00:21:46.490000 audit[2492]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000197c30 a2=78 a3=c0003d0468 items=0 ppid=2336 pid=2492 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:21:46.490000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3362653964333562643538306134646535666236633364393238626437 Sep 6 00:21:46.542514 env[1194]: time="2025-09-06T00:21:46.542467305Z" level=info msg="StartContainer for \"3be9d35bd580a4de5fb6c3d928bd7e3d7b5835b459754a67c3cce0be72453795\" returns successfully" Sep 6 00:21:47.385516 kubelet[1933]: E0906 00:21:47.385218 1933 pod_workers.go:1301] "Error syncing pod, skipping" err="network is not ready: container runtime network not ready: NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" pod="calico-system/csi-node-driver-6qmdc" podUID="ece72a4f-db26-4c71-b1f6-478e03debafc" Sep 6 00:21:47.506182 kubelet[1933]: E0906 00:21:47.506103 1933 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 67.207.67.3 67.207.67.2 67.207.67.3" Sep 6 00:21:47.512304 kubelet[1933]: E0906 00:21:47.512271 1933 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 6 00:21:47.512557 kubelet[1933]: W0906 00:21:47.512533 1933 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 6 00:21:47.512675 kubelet[1933]: E0906 00:21:47.512659 1933 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 6 00:21:47.513093 kubelet[1933]: E0906 00:21:47.513076 1933 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 6 00:21:47.513202 kubelet[1933]: W0906 00:21:47.513188 1933 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 6 00:21:47.513296 kubelet[1933]: E0906 00:21:47.513283 1933 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 6 00:21:47.513613 kubelet[1933]: E0906 00:21:47.513599 1933 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 6 00:21:47.513730 kubelet[1933]: W0906 00:21:47.513715 1933 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 6 00:21:47.513819 kubelet[1933]: E0906 00:21:47.513807 1933 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 6 00:21:47.514146 kubelet[1933]: E0906 00:21:47.514132 1933 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 6 00:21:47.514257 kubelet[1933]: W0906 00:21:47.514227 1933 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 6 00:21:47.514384 kubelet[1933]: E0906 00:21:47.514367 1933 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 6 00:21:47.514699 kubelet[1933]: E0906 00:21:47.514686 1933 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 6 00:21:47.514803 kubelet[1933]: W0906 00:21:47.514790 1933 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 6 00:21:47.514923 kubelet[1933]: E0906 00:21:47.514908 1933 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 6 00:21:47.515351 kubelet[1933]: E0906 00:21:47.515329 1933 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 6 00:21:47.515489 kubelet[1933]: W0906 00:21:47.515474 1933 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 6 00:21:47.515585 kubelet[1933]: E0906 00:21:47.515573 1933 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 6 00:21:47.515881 kubelet[1933]: E0906 00:21:47.515867 1933 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 6 00:21:47.515985 kubelet[1933]: W0906 00:21:47.515971 1933 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 6 00:21:47.516085 kubelet[1933]: E0906 00:21:47.516070 1933 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 6 00:21:47.516476 kubelet[1933]: E0906 00:21:47.516447 1933 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 6 00:21:47.516614 kubelet[1933]: W0906 00:21:47.516596 1933 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 6 00:21:47.516710 kubelet[1933]: E0906 00:21:47.516697 1933 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 6 00:21:47.517028 kubelet[1933]: E0906 00:21:47.517014 1933 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 6 00:21:47.517126 kubelet[1933]: W0906 00:21:47.517113 1933 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 6 00:21:47.517220 kubelet[1933]: E0906 00:21:47.517198 1933 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 6 00:21:47.517599 kubelet[1933]: E0906 00:21:47.517583 1933 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 6 00:21:47.517696 kubelet[1933]: W0906 00:21:47.517683 1933 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 6 00:21:47.517769 kubelet[1933]: E0906 00:21:47.517757 1933 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 6 00:21:47.518030 kubelet[1933]: E0906 00:21:47.518017 1933 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 6 00:21:47.518133 kubelet[1933]: W0906 00:21:47.518112 1933 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 6 00:21:47.518219 kubelet[1933]: E0906 00:21:47.518207 1933 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 6 00:21:47.518523 kubelet[1933]: E0906 00:21:47.518509 1933 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 6 00:21:47.518622 kubelet[1933]: W0906 00:21:47.518609 1933 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 6 00:21:47.518695 kubelet[1933]: E0906 00:21:47.518683 1933 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 6 00:21:47.519060 kubelet[1933]: E0906 00:21:47.519033 1933 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 6 00:21:47.519174 kubelet[1933]: W0906 00:21:47.519159 1933 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 6 00:21:47.519285 kubelet[1933]: E0906 00:21:47.519271 1933 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 6 00:21:47.519725 kubelet[1933]: E0906 00:21:47.519708 1933 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 6 00:21:47.519822 kubelet[1933]: W0906 00:21:47.519806 1933 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 6 00:21:47.520085 kubelet[1933]: E0906 00:21:47.520068 1933 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 6 00:21:47.522706 kubelet[1933]: E0906 00:21:47.522674 1933 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 6 00:21:47.522898 kubelet[1933]: W0906 00:21:47.522878 1933 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 6 00:21:47.522984 kubelet[1933]: E0906 00:21:47.522969 1933 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 6 00:21:47.523461 kubelet[1933]: E0906 00:21:47.523439 1933 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 6 00:21:47.523588 kubelet[1933]: W0906 00:21:47.523573 1933 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 6 00:21:47.523674 kubelet[1933]: E0906 00:21:47.523661 1933 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 6 00:21:47.524035 kubelet[1933]: E0906 00:21:47.524018 1933 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 6 00:21:47.524154 kubelet[1933]: W0906 00:21:47.524136 1933 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 6 00:21:47.524282 kubelet[1933]: E0906 00:21:47.524226 1933 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 6 00:21:47.524486 kubelet[1933]: E0906 00:21:47.524463 1933 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 6 00:21:47.524542 kubelet[1933]: W0906 00:21:47.524487 1933 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 6 00:21:47.524542 kubelet[1933]: E0906 00:21:47.524508 1933 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 6 00:21:47.524785 kubelet[1933]: E0906 00:21:47.524771 1933 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 6 00:21:47.524785 kubelet[1933]: W0906 00:21:47.524782 1933 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 6 00:21:47.524785 kubelet[1933]: E0906 00:21:47.524797 1933 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 6 00:21:47.524994 kubelet[1933]: E0906 00:21:47.524979 1933 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 6 00:21:47.524994 kubelet[1933]: W0906 00:21:47.524993 1933 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 6 00:21:47.525077 kubelet[1933]: E0906 00:21:47.525008 1933 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 6 00:21:47.525300 kubelet[1933]: E0906 00:21:47.525283 1933 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 6 00:21:47.525300 kubelet[1933]: W0906 00:21:47.525295 1933 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 6 00:21:47.525404 kubelet[1933]: E0906 00:21:47.525309 1933 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 6 00:21:47.525798 kubelet[1933]: E0906 00:21:47.525781 1933 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 6 00:21:47.525904 kubelet[1933]: W0906 00:21:47.525887 1933 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 6 00:21:47.526012 kubelet[1933]: E0906 00:21:47.525997 1933 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 6 00:21:47.526274 kubelet[1933]: E0906 00:21:47.526256 1933 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 6 00:21:47.526274 kubelet[1933]: W0906 00:21:47.526271 1933 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 6 00:21:47.526386 kubelet[1933]: E0906 00:21:47.526288 1933 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 6 00:21:47.526460 kubelet[1933]: E0906 00:21:47.526446 1933 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 6 00:21:47.526460 kubelet[1933]: W0906 00:21:47.526456 1933 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 6 00:21:47.526580 kubelet[1933]: E0906 00:21:47.526465 1933 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 6 00:21:47.526806 kubelet[1933]: E0906 00:21:47.526792 1933 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 6 00:21:47.526806 kubelet[1933]: W0906 00:21:47.526802 1933 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 6 00:21:47.526943 kubelet[1933]: E0906 00:21:47.526925 1933 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 6 00:21:47.527025 kubelet[1933]: E0906 00:21:47.526968 1933 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 6 00:21:47.527137 kubelet[1933]: W0906 00:21:47.527119 1933 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 6 00:21:47.527268 kubelet[1933]: E0906 00:21:47.527224 1933 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 6 00:21:47.527514 kubelet[1933]: E0906 00:21:47.527500 1933 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 6 00:21:47.527604 kubelet[1933]: W0906 00:21:47.527590 1933 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 6 00:21:47.527692 kubelet[1933]: E0906 00:21:47.527676 1933 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 6 00:21:47.527959 kubelet[1933]: E0906 00:21:47.527946 1933 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 6 00:21:47.528038 kubelet[1933]: W0906 00:21:47.528024 1933 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 6 00:21:47.528117 kubelet[1933]: E0906 00:21:47.528103 1933 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 6 00:21:47.528414 kubelet[1933]: E0906 00:21:47.528391 1933 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 6 00:21:47.528414 kubelet[1933]: W0906 00:21:47.528410 1933 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 6 00:21:47.528516 kubelet[1933]: E0906 00:21:47.528426 1933 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 6 00:21:47.529059 kubelet[1933]: E0906 00:21:47.529035 1933 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 6 00:21:47.529128 kubelet[1933]: W0906 00:21:47.529060 1933 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 6 00:21:47.529128 kubelet[1933]: E0906 00:21:47.529083 1933 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 6 00:21:47.529448 kubelet[1933]: E0906 00:21:47.529430 1933 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 6 00:21:47.529448 kubelet[1933]: W0906 00:21:47.529443 1933 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 6 00:21:47.529552 kubelet[1933]: E0906 00:21:47.529461 1933 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 6 00:21:47.529808 kubelet[1933]: E0906 00:21:47.529793 1933 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 6 00:21:47.529915 kubelet[1933]: W0906 00:21:47.529896 1933 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 6 00:21:47.530057 kubelet[1933]: E0906 00:21:47.530040 1933 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 6 00:21:47.530358 kubelet[1933]: E0906 00:21:47.530342 1933 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 6 00:21:47.530358 kubelet[1933]: W0906 00:21:47.530355 1933 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 6 00:21:47.530450 kubelet[1933]: E0906 00:21:47.530368 1933 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 6 00:21:47.906921 env[1194]: time="2025-09-06T00:21:47.906828329Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/pod2daemon-flexvol:v3.30.3,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 6 00:21:47.908413 env[1194]: time="2025-09-06T00:21:47.908368490Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:4f2b088ed6fdfc6a97ac0650a4ba8171107d6656ce265c592e4c8423fd10e5c4,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 6 00:21:47.909960 env[1194]: time="2025-09-06T00:21:47.909922327Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/pod2daemon-flexvol:v3.30.3,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 6 00:21:47.911750 env[1194]: time="2025-09-06T00:21:47.911701934Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/pod2daemon-flexvol@sha256:81bdfcd9dbd36624dc35354e8c181c75631ba40e6c7df5820f5f56cea36f0ef9,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 6 00:21:47.912519 env[1194]: time="2025-09-06T00:21:47.912474495Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/pod2daemon-flexvol:v3.30.3\" returns image reference \"sha256:4f2b088ed6fdfc6a97ac0650a4ba8171107d6656ce265c592e4c8423fd10e5c4\"" Sep 6 00:21:47.917299 env[1194]: time="2025-09-06T00:21:47.917229798Z" level=info msg="CreateContainer within sandbox \"2f62fb67075e1523acff2e95d02eca678fd67d04e398c285ec4e0609ad793b03\" for container &ContainerMetadata{Name:flexvol-driver,Attempt:0,}" Sep 6 00:21:47.930380 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount2696276273.mount: Deactivated successfully. Sep 6 00:21:47.937392 env[1194]: time="2025-09-06T00:21:47.937328907Z" level=info msg="CreateContainer within sandbox \"2f62fb67075e1523acff2e95d02eca678fd67d04e398c285ec4e0609ad793b03\" for &ContainerMetadata{Name:flexvol-driver,Attempt:0,} returns container id \"d6cd69ff9f9e53d431daab808155327b2959fa0280997e8a9660d0864fa59775\"" Sep 6 00:21:47.938110 env[1194]: time="2025-09-06T00:21:47.938076654Z" level=info msg="StartContainer for \"d6cd69ff9f9e53d431daab808155327b2959fa0280997e8a9660d0864fa59775\"" Sep 6 00:21:47.992263 systemd[1]: Started cri-containerd-d6cd69ff9f9e53d431daab808155327b2959fa0280997e8a9660d0864fa59775.scope. Sep 6 00:21:48.029000 audit[2562]: AVC avc: denied { perfmon } for pid=2562 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:48.029000 audit[2562]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=0 a1=c0001976b0 a2=3c a3=7f7b62a06a88 items=0 ppid=2383 pid=2562 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:21:48.029000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6436636436396666396639653533643433316461616238303831353533 Sep 6 00:21:48.029000 audit[2562]: AVC avc: denied { bpf } for pid=2562 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:48.029000 audit[2562]: AVC avc: denied { bpf } for pid=2562 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:48.029000 audit[2562]: AVC avc: denied { bpf } for pid=2562 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:48.029000 audit[2562]: AVC avc: denied { perfmon } for pid=2562 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:48.029000 audit[2562]: AVC avc: denied { perfmon } for pid=2562 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:48.029000 audit[2562]: AVC avc: denied { perfmon } for pid=2562 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:48.029000 audit[2562]: AVC avc: denied { perfmon } for pid=2562 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:48.029000 audit[2562]: AVC avc: denied { perfmon } for pid=2562 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:48.029000 audit[2562]: AVC avc: denied { bpf } for pid=2562 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:48.029000 audit[2562]: AVC avc: denied { bpf } for pid=2562 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:48.029000 audit: BPF prog-id=133 op=LOAD Sep 6 00:21:48.029000 audit[2562]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c0001979d8 a2=78 a3=c0003a86d8 items=0 ppid=2383 pid=2562 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:21:48.029000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6436636436396666396639653533643433316461616238303831353533 Sep 6 00:21:48.030000 audit[2562]: AVC avc: denied { bpf } for pid=2562 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:48.030000 audit[2562]: AVC avc: denied { bpf } for pid=2562 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:48.030000 audit[2562]: AVC avc: denied { perfmon } for pid=2562 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:48.030000 audit[2562]: AVC avc: denied { perfmon } for pid=2562 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:48.030000 audit[2562]: AVC avc: denied { perfmon } for pid=2562 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:48.030000 audit[2562]: AVC avc: denied { perfmon } for pid=2562 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:48.030000 audit[2562]: AVC avc: denied { perfmon } for pid=2562 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:48.030000 audit[2562]: AVC avc: denied { bpf } for pid=2562 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:48.030000 audit[2562]: AVC avc: denied { bpf } for pid=2562 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:48.030000 audit: BPF prog-id=134 op=LOAD Sep 6 00:21:48.030000 audit[2562]: SYSCALL arch=c000003e syscall=321 success=yes exit=17 a0=5 a1=c000197770 a2=78 a3=c0003a8728 items=0 ppid=2383 pid=2562 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:21:48.030000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6436636436396666396639653533643433316461616238303831353533 Sep 6 00:21:48.032000 audit: BPF prog-id=134 op=UNLOAD Sep 6 00:21:48.032000 audit: BPF prog-id=133 op=UNLOAD Sep 6 00:21:48.032000 audit[2562]: AVC avc: denied { bpf } for pid=2562 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:48.032000 audit[2562]: AVC avc: denied { bpf } for pid=2562 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:48.032000 audit[2562]: AVC avc: denied { bpf } for pid=2562 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:48.032000 audit[2562]: AVC avc: denied { perfmon } for pid=2562 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:48.032000 audit[2562]: AVC avc: denied { perfmon } for pid=2562 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:48.032000 audit[2562]: AVC avc: denied { perfmon } for pid=2562 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:48.032000 audit[2562]: AVC avc: denied { perfmon } for pid=2562 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:48.032000 audit[2562]: AVC avc: denied { perfmon } for pid=2562 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:48.032000 audit[2562]: AVC avc: denied { bpf } for pid=2562 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:48.032000 audit[2562]: AVC avc: denied { bpf } for pid=2562 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:48.032000 audit: BPF prog-id=135 op=LOAD Sep 6 00:21:48.032000 audit[2562]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c000197c30 a2=78 a3=c0003a87b8 items=0 ppid=2383 pid=2562 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:21:48.032000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6436636436396666396639653533643433316461616238303831353533 Sep 6 00:21:48.064768 env[1194]: time="2025-09-06T00:21:48.064707541Z" level=info msg="StartContainer for \"d6cd69ff9f9e53d431daab808155327b2959fa0280997e8a9660d0864fa59775\" returns successfully" Sep 6 00:21:48.086053 systemd[1]: cri-containerd-d6cd69ff9f9e53d431daab808155327b2959fa0280997e8a9660d0864fa59775.scope: Deactivated successfully. Sep 6 00:21:48.090000 audit: BPF prog-id=135 op=UNLOAD Sep 6 00:21:48.123226 env[1194]: time="2025-09-06T00:21:48.123163150Z" level=info msg="shim disconnected" id=d6cd69ff9f9e53d431daab808155327b2959fa0280997e8a9660d0864fa59775 Sep 6 00:21:48.123954 env[1194]: time="2025-09-06T00:21:48.123923062Z" level=warning msg="cleaning up after shim disconnected" id=d6cd69ff9f9e53d431daab808155327b2959fa0280997e8a9660d0864fa59775 namespace=k8s.io Sep 6 00:21:48.124096 env[1194]: time="2025-09-06T00:21:48.124072167Z" level=info msg="cleaning up dead shim" Sep 6 00:21:48.137051 env[1194]: time="2025-09-06T00:21:48.136960769Z" level=warning msg="cleanup warnings time=\"2025-09-06T00:21:48Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=2601 runtime=io.containerd.runc.v2\n" Sep 6 00:21:48.381680 systemd[1]: run-containerd-runc-k8s.io-d6cd69ff9f9e53d431daab808155327b2959fa0280997e8a9660d0864fa59775-runc.WLOJez.mount: Deactivated successfully. Sep 6 00:21:48.382119 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-d6cd69ff9f9e53d431daab808155327b2959fa0280997e8a9660d0864fa59775-rootfs.mount: Deactivated successfully. Sep 6 00:21:48.509699 kubelet[1933]: I0906 00:21:48.509659 1933 prober_manager.go:312] "Failed to trigger a manual run" probe="Readiness" Sep 6 00:21:48.510785 kubelet[1933]: E0906 00:21:48.510758 1933 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 67.207.67.3 67.207.67.2 67.207.67.3" Sep 6 00:21:48.514396 env[1194]: time="2025-09-06T00:21:48.514046539Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/cni:v3.30.3\"" Sep 6 00:21:48.547816 kubelet[1933]: I0906 00:21:48.547750 1933 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="calico-system/calico-typha-6fcd7986b9-hz4tb" podStartSLOduration=3.23911961 podStartE2EDuration="5.547726955s" podCreationTimestamp="2025-09-06 00:21:43 +0000 UTC" firstStartedPulling="2025-09-06 00:21:44.063314987 +0000 UTC m=+20.923304946" lastFinishedPulling="2025-09-06 00:21:46.371922345 +0000 UTC m=+23.231912291" observedRunningTime="2025-09-06 00:21:47.522566138 +0000 UTC m=+24.382556105" watchObservedRunningTime="2025-09-06 00:21:48.547726955 +0000 UTC m=+25.407716914" Sep 6 00:21:49.385923 kubelet[1933]: E0906 00:21:49.385866 1933 pod_workers.go:1301] "Error syncing pod, skipping" err="network is not ready: container runtime network not ready: NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" pod="calico-system/csi-node-driver-6qmdc" podUID="ece72a4f-db26-4c71-b1f6-478e03debafc" Sep 6 00:21:51.082721 kubelet[1933]: I0906 00:21:51.082377 1933 prober_manager.go:312] "Failed to trigger a manual run" probe="Readiness" Sep 6 00:21:51.083742 kubelet[1933]: E0906 00:21:51.083542 1933 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 67.207.67.3 67.207.67.2 67.207.67.3" Sep 6 00:21:51.146000 audit[2618]: NETFILTER_CFG table=filter:99 family=2 entries=21 op=nft_register_rule pid=2618 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Sep 6 00:21:51.147809 kernel: kauditd_printk_skb: 154 callbacks suppressed Sep 6 00:21:51.147925 kernel: audit: type=1325 audit(1757118111.146:1019): table=filter:99 family=2 entries=21 op=nft_register_rule pid=2618 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Sep 6 00:21:51.146000 audit[2618]: SYSCALL arch=c000003e syscall=46 success=yes exit=7480 a0=3 a1=7ffcd4953a10 a2=0 a3=7ffcd49539fc items=0 ppid=2038 pid=2618 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:21:51.152716 kernel: audit: type=1300 audit(1757118111.146:1019): arch=c000003e syscall=46 success=yes exit=7480 a0=3 a1=7ffcd4953a10 a2=0 a3=7ffcd49539fc items=0 ppid=2038 pid=2618 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:21:51.152964 kernel: audit: type=1327 audit(1757118111.146:1019): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Sep 6 00:21:51.146000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Sep 6 00:21:51.157000 audit[2618]: NETFILTER_CFG table=nat:100 family=2 entries=19 op=nft_register_chain pid=2618 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Sep 6 00:21:51.157000 audit[2618]: SYSCALL arch=c000003e syscall=46 success=yes exit=6276 a0=3 a1=7ffcd4953a10 a2=0 a3=7ffcd49539fc items=0 ppid=2038 pid=2618 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:21:51.163487 kernel: audit: type=1325 audit(1757118111.157:1020): table=nat:100 family=2 entries=19 op=nft_register_chain pid=2618 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Sep 6 00:21:51.163652 kernel: audit: type=1300 audit(1757118111.157:1020): arch=c000003e syscall=46 success=yes exit=6276 a0=3 a1=7ffcd4953a10 a2=0 a3=7ffcd49539fc items=0 ppid=2038 pid=2618 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:21:51.163688 kernel: audit: type=1327 audit(1757118111.157:1020): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Sep 6 00:21:51.157000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Sep 6 00:21:51.386220 kubelet[1933]: E0906 00:21:51.386069 1933 pod_workers.go:1301] "Error syncing pod, skipping" err="network is not ready: container runtime network not ready: NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" pod="calico-system/csi-node-driver-6qmdc" podUID="ece72a4f-db26-4c71-b1f6-478e03debafc" Sep 6 00:21:51.515872 kubelet[1933]: E0906 00:21:51.515831 1933 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 67.207.67.3 67.207.67.2 67.207.67.3" Sep 6 00:21:51.988089 env[1194]: time="2025-09-06T00:21:51.988042671Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/cni:v3.30.3,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 6 00:21:51.991540 env[1194]: time="2025-09-06T00:21:51.990053532Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:034822460c2f667e1f4a7679c843cc35ce1bf2c25dec86f04e07fb403df7e458,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 6 00:21:51.993756 env[1194]: time="2025-09-06T00:21:51.992812994Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/cni:v3.30.3,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 6 00:21:51.996154 env[1194]: time="2025-09-06T00:21:51.996092475Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/cni:v3.30.3\" returns image reference \"sha256:034822460c2f667e1f4a7679c843cc35ce1bf2c25dec86f04e07fb403df7e458\"" Sep 6 00:21:51.996544 env[1194]: time="2025-09-06T00:21:51.996504913Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/cni@sha256:73d1e391050490d54e5bee8ff2b1a50a8be1746c98dc530361b00e8c0ab63f87,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 6 00:21:52.001801 env[1194]: time="2025-09-06T00:21:52.001746885Z" level=info msg="CreateContainer within sandbox \"2f62fb67075e1523acff2e95d02eca678fd67d04e398c285ec4e0609ad793b03\" for container &ContainerMetadata{Name:install-cni,Attempt:0,}" Sep 6 00:21:52.019809 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount1379923729.mount: Deactivated successfully. Sep 6 00:21:52.026377 env[1194]: time="2025-09-06T00:21:52.026301975Z" level=info msg="CreateContainer within sandbox \"2f62fb67075e1523acff2e95d02eca678fd67d04e398c285ec4e0609ad793b03\" for &ContainerMetadata{Name:install-cni,Attempt:0,} returns container id \"d8273c75d392d9ed2f4b2d66a192164edca89fb82558df53b8378a3e22f1ccf4\"" Sep 6 00:21:52.027622 env[1194]: time="2025-09-06T00:21:52.027579022Z" level=info msg="StartContainer for \"d8273c75d392d9ed2f4b2d66a192164edca89fb82558df53b8378a3e22f1ccf4\"" Sep 6 00:21:52.063826 systemd[1]: Started cri-containerd-d8273c75d392d9ed2f4b2d66a192164edca89fb82558df53b8378a3e22f1ccf4.scope. Sep 6 00:21:52.124000 audit[2627]: AVC avc: denied { perfmon } for pid=2627 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:52.132018 kernel: audit: type=1400 audit(1757118112.124:1021): avc: denied { perfmon } for pid=2627 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:52.132182 kernel: audit: type=1300 audit(1757118112.124:1021): arch=c000003e syscall=321 success=yes exit=15 a0=0 a1=c0001976b0 a2=3c a3=7faa4071f518 items=0 ppid=2383 pid=2627 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:21:52.124000 audit[2627]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=0 a1=c0001976b0 a2=3c a3=7faa4071f518 items=0 ppid=2383 pid=2627 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:21:52.124000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6438323733633735643339326439656432663462326436366131393231 Sep 6 00:21:52.139200 kernel: audit: type=1327 audit(1757118112.124:1021): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6438323733633735643339326439656432663462326436366131393231 Sep 6 00:21:52.139338 kernel: audit: type=1400 audit(1757118112.124:1022): avc: denied { bpf } for pid=2627 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:52.124000 audit[2627]: AVC avc: denied { bpf } for pid=2627 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:52.124000 audit[2627]: AVC avc: denied { bpf } for pid=2627 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:52.124000 audit[2627]: AVC avc: denied { bpf } for pid=2627 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:52.124000 audit[2627]: AVC avc: denied { perfmon } for pid=2627 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:52.124000 audit[2627]: AVC avc: denied { perfmon } for pid=2627 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:52.124000 audit[2627]: AVC avc: denied { perfmon } for pid=2627 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:52.124000 audit[2627]: AVC avc: denied { perfmon } for pid=2627 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:52.124000 audit[2627]: AVC avc: denied { perfmon } for pid=2627 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:52.124000 audit[2627]: AVC avc: denied { bpf } for pid=2627 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:52.124000 audit[2627]: AVC avc: denied { bpf } for pid=2627 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:52.124000 audit: BPF prog-id=136 op=LOAD Sep 6 00:21:52.124000 audit[2627]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c0001979d8 a2=78 a3=c0002e5bf8 items=0 ppid=2383 pid=2627 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:21:52.124000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6438323733633735643339326439656432663462326436366131393231 Sep 6 00:21:52.127000 audit[2627]: AVC avc: denied { bpf } for pid=2627 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:52.127000 audit[2627]: AVC avc: denied { bpf } for pid=2627 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:52.127000 audit[2627]: AVC avc: denied { perfmon } for pid=2627 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:52.127000 audit[2627]: AVC avc: denied { perfmon } for pid=2627 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:52.127000 audit[2627]: AVC avc: denied { perfmon } for pid=2627 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:52.127000 audit[2627]: AVC avc: denied { perfmon } for pid=2627 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:52.127000 audit[2627]: AVC avc: denied { perfmon } for pid=2627 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:52.127000 audit[2627]: AVC avc: denied { bpf } for pid=2627 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:52.127000 audit[2627]: AVC avc: denied { bpf } for pid=2627 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:52.127000 audit: BPF prog-id=137 op=LOAD Sep 6 00:21:52.127000 audit[2627]: SYSCALL arch=c000003e syscall=321 success=yes exit=17 a0=5 a1=c000197770 a2=78 a3=c0002e5c48 items=0 ppid=2383 pid=2627 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:21:52.127000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6438323733633735643339326439656432663462326436366131393231 Sep 6 00:21:52.127000 audit: BPF prog-id=137 op=UNLOAD Sep 6 00:21:52.127000 audit: BPF prog-id=136 op=UNLOAD Sep 6 00:21:52.127000 audit[2627]: AVC avc: denied { bpf } for pid=2627 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:52.127000 audit[2627]: AVC avc: denied { bpf } for pid=2627 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:52.127000 audit[2627]: AVC avc: denied { bpf } for pid=2627 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:52.127000 audit[2627]: AVC avc: denied { perfmon } for pid=2627 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:52.127000 audit[2627]: AVC avc: denied { perfmon } for pid=2627 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:52.127000 audit[2627]: AVC avc: denied { perfmon } for pid=2627 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:52.127000 audit[2627]: AVC avc: denied { perfmon } for pid=2627 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:52.127000 audit[2627]: AVC avc: denied { perfmon } for pid=2627 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:52.127000 audit[2627]: AVC avc: denied { bpf } for pid=2627 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:52.127000 audit[2627]: AVC avc: denied { bpf } for pid=2627 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:21:52.127000 audit: BPF prog-id=138 op=LOAD Sep 6 00:21:52.127000 audit[2627]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c000197c30 a2=78 a3=c0002e5cd8 items=0 ppid=2383 pid=2627 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:21:52.127000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6438323733633735643339326439656432663462326436366131393231 Sep 6 00:21:52.166937 env[1194]: time="2025-09-06T00:21:52.166521477Z" level=info msg="StartContainer for \"d8273c75d392d9ed2f4b2d66a192164edca89fb82558df53b8378a3e22f1ccf4\" returns successfully" Sep 6 00:21:52.930642 env[1194]: time="2025-09-06T00:21:52.930559278Z" level=error msg="failed to reload cni configuration after receiving fs change event(\"/etc/cni/net.d/calico-kubeconfig\": WRITE)" error="cni config load failed: no network config found in /etc/cni/net.d: cni plugin not initialized: failed to load cni config" Sep 6 00:21:52.934638 systemd[1]: cri-containerd-d8273c75d392d9ed2f4b2d66a192164edca89fb82558df53b8378a3e22f1ccf4.scope: Deactivated successfully. Sep 6 00:21:52.938000 audit: BPF prog-id=138 op=UNLOAD Sep 6 00:21:52.967822 env[1194]: time="2025-09-06T00:21:52.967764706Z" level=info msg="shim disconnected" id=d8273c75d392d9ed2f4b2d66a192164edca89fb82558df53b8378a3e22f1ccf4 Sep 6 00:21:52.967822 env[1194]: time="2025-09-06T00:21:52.967812878Z" level=warning msg="cleaning up after shim disconnected" id=d8273c75d392d9ed2f4b2d66a192164edca89fb82558df53b8378a3e22f1ccf4 namespace=k8s.io Sep 6 00:21:52.967822 env[1194]: time="2025-09-06T00:21:52.967822750Z" level=info msg="cleaning up dead shim" Sep 6 00:21:52.979477 env[1194]: time="2025-09-06T00:21:52.979403911Z" level=warning msg="cleanup warnings time=\"2025-09-06T00:21:52Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=2667 runtime=io.containerd.runc.v2\n" Sep 6 00:21:53.012641 systemd[1]: run-containerd-runc-k8s.io-d8273c75d392d9ed2f4b2d66a192164edca89fb82558df53b8378a3e22f1ccf4-runc.jOiL0g.mount: Deactivated successfully. Sep 6 00:21:53.012785 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-d8273c75d392d9ed2f4b2d66a192164edca89fb82558df53b8378a3e22f1ccf4-rootfs.mount: Deactivated successfully. Sep 6 00:21:53.021111 kubelet[1933]: I0906 00:21:53.019968 1933 kubelet_node_status.go:488] "Fast updating node status as it just became ready" Sep 6 00:21:53.057162 systemd[1]: Created slice kubepods-burstable-pod919279a3_0e76_4d7e_98d0_24775a445624.slice. Sep 6 00:21:53.071940 systemd[1]: Created slice kubepods-burstable-podce247e9f_faab_4499_88d3_f60c1625b467.slice. Sep 6 00:21:53.080681 systemd[1]: Created slice kubepods-besteffort-poda508ebae_2d95_49ee_ae16_79dab0a4ff50.slice. Sep 6 00:21:53.086110 kubelet[1933]: W0906 00:21:53.086076 1933 reflector.go:561] object-"calico-system"/"whisker-ca-bundle": failed to list *v1.ConfigMap: configmaps "whisker-ca-bundle" is forbidden: User "system:node:ci-3510.3.8-n-86fdecb492" cannot list resource "configmaps" in API group "" in the namespace "calico-system": no relationship found between node 'ci-3510.3.8-n-86fdecb492' and this object Sep 6 00:21:53.086358 kubelet[1933]: E0906 00:21:53.086337 1933 reflector.go:158] "Unhandled Error" err="object-\"calico-system\"/\"whisker-ca-bundle\": Failed to watch *v1.ConfigMap: failed to list *v1.ConfigMap: configmaps \"whisker-ca-bundle\" is forbidden: User \"system:node:ci-3510.3.8-n-86fdecb492\" cannot list resource \"configmaps\" in API group \"\" in the namespace \"calico-system\": no relationship found between node 'ci-3510.3.8-n-86fdecb492' and this object" logger="UnhandledError" Sep 6 00:21:53.088744 systemd[1]: Created slice kubepods-besteffort-pod1397c9b2_c600_4219_95d8_4497169633b1.slice. Sep 6 00:21:53.104494 systemd[1]: Created slice kubepods-besteffort-poda6952448_1254_4d78_8f5e_8abf0e8f4465.slice. Sep 6 00:21:53.109756 kubelet[1933]: W0906 00:21:53.109008 1933 reflector.go:561] object-"calico-apiserver"/"kube-root-ca.crt": failed to list *v1.ConfigMap: configmaps "kube-root-ca.crt" is forbidden: User "system:node:ci-3510.3.8-n-86fdecb492" cannot list resource "configmaps" in API group "" in the namespace "calico-apiserver": no relationship found between node 'ci-3510.3.8-n-86fdecb492' and this object Sep 6 00:21:53.109756 kubelet[1933]: E0906 00:21:53.109083 1933 reflector.go:158] "Unhandled Error" err="object-\"calico-apiserver\"/\"kube-root-ca.crt\": Failed to watch *v1.ConfigMap: failed to list *v1.ConfigMap: configmaps \"kube-root-ca.crt\" is forbidden: User \"system:node:ci-3510.3.8-n-86fdecb492\" cannot list resource \"configmaps\" in API group \"\" in the namespace \"calico-apiserver\": no relationship found between node 'ci-3510.3.8-n-86fdecb492' and this object" logger="UnhandledError" Sep 6 00:21:53.111910 kubelet[1933]: W0906 00:21:53.111877 1933 reflector.go:561] object-"calico-apiserver"/"calico-apiserver-certs": failed to list *v1.Secret: secrets "calico-apiserver-certs" is forbidden: User "system:node:ci-3510.3.8-n-86fdecb492" cannot list resource "secrets" in API group "" in the namespace "calico-apiserver": no relationship found between node 'ci-3510.3.8-n-86fdecb492' and this object Sep 6 00:21:53.112114 kubelet[1933]: E0906 00:21:53.112090 1933 reflector.go:158] "Unhandled Error" err="object-\"calico-apiserver\"/\"calico-apiserver-certs\": Failed to watch *v1.Secret: failed to list *v1.Secret: secrets \"calico-apiserver-certs\" is forbidden: User \"system:node:ci-3510.3.8-n-86fdecb492\" cannot list resource \"secrets\" in API group \"\" in the namespace \"calico-apiserver\": no relationship found between node 'ci-3510.3.8-n-86fdecb492' and this object" logger="UnhandledError" Sep 6 00:21:53.113872 systemd[1]: Created slice kubepods-besteffort-pod0c93136d_a9dc_4b1a_915b_42a235beadf5.slice. Sep 6 00:21:53.118746 kubelet[1933]: W0906 00:21:53.118643 1933 reflector.go:561] object-"calico-system"/"goldmane": failed to list *v1.ConfigMap: configmaps "goldmane" is forbidden: User "system:node:ci-3510.3.8-n-86fdecb492" cannot list resource "configmaps" in API group "" in the namespace "calico-system": no relationship found between node 'ci-3510.3.8-n-86fdecb492' and this object Sep 6 00:21:53.118955 kubelet[1933]: E0906 00:21:53.118932 1933 reflector.go:158] "Unhandled Error" err="object-\"calico-system\"/\"goldmane\": Failed to watch *v1.ConfigMap: failed to list *v1.ConfigMap: configmaps \"goldmane\" is forbidden: User \"system:node:ci-3510.3.8-n-86fdecb492\" cannot list resource \"configmaps\" in API group \"\" in the namespace \"calico-system\": no relationship found between node 'ci-3510.3.8-n-86fdecb492' and this object" logger="UnhandledError" Sep 6 00:21:53.119170 kubelet[1933]: W0906 00:21:53.119144 1933 reflector.go:561] object-"calico-system"/"goldmane-key-pair": failed to list *v1.Secret: secrets "goldmane-key-pair" is forbidden: User "system:node:ci-3510.3.8-n-86fdecb492" cannot list resource "secrets" in API group "" in the namespace "calico-system": no relationship found between node 'ci-3510.3.8-n-86fdecb492' and this object Sep 6 00:21:53.119294 kubelet[1933]: E0906 00:21:53.119274 1933 reflector.go:158] "Unhandled Error" err="object-\"calico-system\"/\"goldmane-key-pair\": Failed to watch *v1.Secret: failed to list *v1.Secret: secrets \"goldmane-key-pair\" is forbidden: User \"system:node:ci-3510.3.8-n-86fdecb492\" cannot list resource \"secrets\" in API group \"\" in the namespace \"calico-system\": no relationship found between node 'ci-3510.3.8-n-86fdecb492' and this object" logger="UnhandledError" Sep 6 00:21:53.123035 systemd[1]: Created slice kubepods-besteffort-podf08dcdfb_b2f6_4cf2_856e_527bb3034be9.slice. Sep 6 00:21:53.173467 kubelet[1933]: I0906 00:21:53.173417 1933 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-kmdm7\" (UniqueName: \"kubernetes.io/projected/ce247e9f-faab-4499-88d3-f60c1625b467-kube-api-access-kmdm7\") pod \"coredns-7c65d6cfc9-lj58v\" (UID: \"ce247e9f-faab-4499-88d3-f60c1625b467\") " pod="kube-system/coredns-7c65d6cfc9-lj58v" Sep 6 00:21:53.173742 kubelet[1933]: I0906 00:21:53.173724 1933 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"tigera-ca-bundle\" (UniqueName: \"kubernetes.io/configmap/a508ebae-2d95-49ee-ae16-79dab0a4ff50-tigera-ca-bundle\") pod \"calico-kube-controllers-dcdb654dd-lnm9v\" (UID: \"a508ebae-2d95-49ee-ae16-79dab0a4ff50\") " pod="calico-system/calico-kube-controllers-dcdb654dd-lnm9v" Sep 6 00:21:53.173884 kubelet[1933]: I0906 00:21:53.173868 1933 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"config-volume\" (UniqueName: \"kubernetes.io/configmap/ce247e9f-faab-4499-88d3-f60c1625b467-config-volume\") pod \"coredns-7c65d6cfc9-lj58v\" (UID: \"ce247e9f-faab-4499-88d3-f60c1625b467\") " pod="kube-system/coredns-7c65d6cfc9-lj58v" Sep 6 00:21:53.174009 kubelet[1933]: I0906 00:21:53.173994 1933 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-2kgtr\" (UniqueName: \"kubernetes.io/projected/a508ebae-2d95-49ee-ae16-79dab0a4ff50-kube-api-access-2kgtr\") pod \"calico-kube-controllers-dcdb654dd-lnm9v\" (UID: \"a508ebae-2d95-49ee-ae16-79dab0a4ff50\") " pod="calico-system/calico-kube-controllers-dcdb654dd-lnm9v" Sep 6 00:21:53.174152 kubelet[1933]: I0906 00:21:53.174137 1933 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"config-volume\" (UniqueName: \"kubernetes.io/configmap/919279a3-0e76-4d7e-98d0-24775a445624-config-volume\") pod \"coredns-7c65d6cfc9-m2nlc\" (UID: \"919279a3-0e76-4d7e-98d0-24775a445624\") " pod="kube-system/coredns-7c65d6cfc9-m2nlc" Sep 6 00:21:53.174327 kubelet[1933]: I0906 00:21:53.174302 1933 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-m2fg7\" (UniqueName: \"kubernetes.io/projected/919279a3-0e76-4d7e-98d0-24775a445624-kube-api-access-m2fg7\") pod \"coredns-7c65d6cfc9-m2nlc\" (UID: \"919279a3-0e76-4d7e-98d0-24775a445624\") " pod="kube-system/coredns-7c65d6cfc9-m2nlc" Sep 6 00:21:53.275222 kubelet[1933]: I0906 00:21:53.275166 1933 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"calico-apiserver-certs\" (UniqueName: \"kubernetes.io/secret/f08dcdfb-b2f6-4cf2-856e-527bb3034be9-calico-apiserver-certs\") pod \"calico-apiserver-658847fc7d-nxs25\" (UID: \"f08dcdfb-b2f6-4cf2-856e-527bb3034be9\") " pod="calico-apiserver/calico-apiserver-658847fc7d-nxs25" Sep 6 00:21:53.275577 kubelet[1933]: I0906 00:21:53.275553 1933 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"whisker-ca-bundle\" (UniqueName: \"kubernetes.io/configmap/1397c9b2-c600-4219-95d8-4497169633b1-whisker-ca-bundle\") pod \"whisker-6dbdbbb558-f4gjr\" (UID: \"1397c9b2-c600-4219-95d8-4497169633b1\") " pod="calico-system/whisker-6dbdbbb558-f4gjr" Sep 6 00:21:53.275694 kubelet[1933]: I0906 00:21:53.275674 1933 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-rh4hp\" (UniqueName: \"kubernetes.io/projected/0c93136d-a9dc-4b1a-915b-42a235beadf5-kube-api-access-rh4hp\") pod \"calico-apiserver-658847fc7d-whbgb\" (UID: \"0c93136d-a9dc-4b1a-915b-42a235beadf5\") " pod="calico-apiserver/calico-apiserver-658847fc7d-whbgb" Sep 6 00:21:53.275795 kubelet[1933]: I0906 00:21:53.275779 1933 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"goldmane-key-pair\" (UniqueName: \"kubernetes.io/secret/a6952448-1254-4d78-8f5e-8abf0e8f4465-goldmane-key-pair\") pod \"goldmane-7988f88666-bmw2n\" (UID: \"a6952448-1254-4d78-8f5e-8abf0e8f4465\") " pod="calico-system/goldmane-7988f88666-bmw2n" Sep 6 00:21:53.275907 kubelet[1933]: I0906 00:21:53.275890 1933 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-8qlvj\" (UniqueName: \"kubernetes.io/projected/f08dcdfb-b2f6-4cf2-856e-527bb3034be9-kube-api-access-8qlvj\") pod \"calico-apiserver-658847fc7d-nxs25\" (UID: \"f08dcdfb-b2f6-4cf2-856e-527bb3034be9\") " pod="calico-apiserver/calico-apiserver-658847fc7d-nxs25" Sep 6 00:21:53.276032 kubelet[1933]: I0906 00:21:53.276001 1933 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"goldmane-ca-bundle\" (UniqueName: \"kubernetes.io/configmap/a6952448-1254-4d78-8f5e-8abf0e8f4465-goldmane-ca-bundle\") pod \"goldmane-7988f88666-bmw2n\" (UID: \"a6952448-1254-4d78-8f5e-8abf0e8f4465\") " pod="calico-system/goldmane-7988f88666-bmw2n" Sep 6 00:21:53.276122 kubelet[1933]: I0906 00:21:53.276105 1933 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-h89kb\" (UniqueName: \"kubernetes.io/projected/a6952448-1254-4d78-8f5e-8abf0e8f4465-kube-api-access-h89kb\") pod \"goldmane-7988f88666-bmw2n\" (UID: \"a6952448-1254-4d78-8f5e-8abf0e8f4465\") " pod="calico-system/goldmane-7988f88666-bmw2n" Sep 6 00:21:53.276226 kubelet[1933]: I0906 00:21:53.276211 1933 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"calico-apiserver-certs\" (UniqueName: \"kubernetes.io/secret/0c93136d-a9dc-4b1a-915b-42a235beadf5-calico-apiserver-certs\") pod \"calico-apiserver-658847fc7d-whbgb\" (UID: \"0c93136d-a9dc-4b1a-915b-42a235beadf5\") " pod="calico-apiserver/calico-apiserver-658847fc7d-whbgb" Sep 6 00:21:53.276487 kubelet[1933]: I0906 00:21:53.276453 1933 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"config\" (UniqueName: \"kubernetes.io/configmap/a6952448-1254-4d78-8f5e-8abf0e8f4465-config\") pod \"goldmane-7988f88666-bmw2n\" (UID: \"a6952448-1254-4d78-8f5e-8abf0e8f4465\") " pod="calico-system/goldmane-7988f88666-bmw2n" Sep 6 00:21:53.276574 kubelet[1933]: I0906 00:21:53.276497 1933 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"whisker-backend-key-pair\" (UniqueName: \"kubernetes.io/secret/1397c9b2-c600-4219-95d8-4497169633b1-whisker-backend-key-pair\") pod \"whisker-6dbdbbb558-f4gjr\" (UID: \"1397c9b2-c600-4219-95d8-4497169633b1\") " pod="calico-system/whisker-6dbdbbb558-f4gjr" Sep 6 00:21:53.276574 kubelet[1933]: I0906 00:21:53.276518 1933 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-dnbxf\" (UniqueName: \"kubernetes.io/projected/1397c9b2-c600-4219-95d8-4497169633b1-kube-api-access-dnbxf\") pod \"whisker-6dbdbbb558-f4gjr\" (UID: \"1397c9b2-c600-4219-95d8-4497169633b1\") " pod="calico-system/whisker-6dbdbbb558-f4gjr" Sep 6 00:21:53.361337 kubelet[1933]: E0906 00:21:53.361292 1933 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 67.207.67.3 67.207.67.2 67.207.67.3" Sep 6 00:21:53.364343 env[1194]: time="2025-09-06T00:21:53.364284640Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:coredns-7c65d6cfc9-m2nlc,Uid:919279a3-0e76-4d7e-98d0-24775a445624,Namespace:kube-system,Attempt:0,}" Sep 6 00:21:53.379474 kubelet[1933]: E0906 00:21:53.379360 1933 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 67.207.67.3 67.207.67.2 67.207.67.3" Sep 6 00:21:53.384445 env[1194]: time="2025-09-06T00:21:53.380359307Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:coredns-7c65d6cfc9-lj58v,Uid:ce247e9f-faab-4499-88d3-f60c1625b467,Namespace:kube-system,Attempt:0,}" Sep 6 00:21:53.403204 env[1194]: time="2025-09-06T00:21:53.403143895Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-kube-controllers-dcdb654dd-lnm9v,Uid:a508ebae-2d95-49ee-ae16-79dab0a4ff50,Namespace:calico-system,Attempt:0,}" Sep 6 00:21:53.432618 systemd[1]: Created slice kubepods-besteffort-podece72a4f_db26_4c71_b1f6_478e03debafc.slice. Sep 6 00:21:53.444623 env[1194]: time="2025-09-06T00:21:53.444163188Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:csi-node-driver-6qmdc,Uid:ece72a4f-db26-4c71-b1f6-478e03debafc,Namespace:calico-system,Attempt:0,}" Sep 6 00:21:53.542037 env[1194]: time="2025-09-06T00:21:53.540323469Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/node:v3.30.3\"" Sep 6 00:21:53.693055 env[1194]: time="2025-09-06T00:21:53.692965194Z" level=error msg="Failed to destroy network for sandbox \"70d37490adbefe97ec1e7961936bf69023ffff9f3849ce09562104a029affc8c\"" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Sep 6 00:21:53.693430 env[1194]: time="2025-09-06T00:21:53.693394309Z" level=error msg="encountered an error cleaning up failed sandbox \"70d37490adbefe97ec1e7961936bf69023ffff9f3849ce09562104a029affc8c\", marking sandbox state as SANDBOX_UNKNOWN" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Sep 6 00:21:53.693555 env[1194]: time="2025-09-06T00:21:53.693450360Z" level=error msg="RunPodSandbox for &PodSandboxMetadata{Name:coredns-7c65d6cfc9-m2nlc,Uid:919279a3-0e76-4d7e-98d0-24775a445624,Namespace:kube-system,Attempt:0,} failed, error" error="failed to setup network for sandbox \"70d37490adbefe97ec1e7961936bf69023ffff9f3849ce09562104a029affc8c\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Sep 6 00:21:53.693763 kubelet[1933]: E0906 00:21:53.693722 1933 log.go:32] "RunPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"70d37490adbefe97ec1e7961936bf69023ffff9f3849ce09562104a029affc8c\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Sep 6 00:21:53.693896 kubelet[1933]: E0906 00:21:53.693801 1933 kuberuntime_sandbox.go:72] "Failed to create sandbox for pod" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"70d37490adbefe97ec1e7961936bf69023ffff9f3849ce09562104a029affc8c\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="kube-system/coredns-7c65d6cfc9-m2nlc" Sep 6 00:21:53.693896 kubelet[1933]: E0906 00:21:53.693825 1933 kuberuntime_manager.go:1170] "CreatePodSandbox for pod failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"70d37490adbefe97ec1e7961936bf69023ffff9f3849ce09562104a029affc8c\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="kube-system/coredns-7c65d6cfc9-m2nlc" Sep 6 00:21:53.693896 kubelet[1933]: E0906 00:21:53.693868 1933 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"CreatePodSandbox\" for \"coredns-7c65d6cfc9-m2nlc_kube-system(919279a3-0e76-4d7e-98d0-24775a445624)\" with CreatePodSandboxError: \"Failed to create sandbox for pod \\\"coredns-7c65d6cfc9-m2nlc_kube-system(919279a3-0e76-4d7e-98d0-24775a445624)\\\": rpc error: code = Unknown desc = failed to setup network for sandbox \\\"70d37490adbefe97ec1e7961936bf69023ffff9f3849ce09562104a029affc8c\\\": plugin type=\\\"calico\\\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="kube-system/coredns-7c65d6cfc9-m2nlc" podUID="919279a3-0e76-4d7e-98d0-24775a445624" Sep 6 00:21:53.698683 env[1194]: time="2025-09-06T00:21:53.698579661Z" level=error msg="Failed to destroy network for sandbox \"401e31ac767b820917f0284ed67d15c34d31d47745a5163164761fda87b8a37c\"" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Sep 6 00:21:53.699757 env[1194]: time="2025-09-06T00:21:53.699080292Z" level=error msg="encountered an error cleaning up failed sandbox \"401e31ac767b820917f0284ed67d15c34d31d47745a5163164761fda87b8a37c\", marking sandbox state as SANDBOX_UNKNOWN" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Sep 6 00:21:53.699757 env[1194]: time="2025-09-06T00:21:53.699173412Z" level=error msg="RunPodSandbox for &PodSandboxMetadata{Name:coredns-7c65d6cfc9-lj58v,Uid:ce247e9f-faab-4499-88d3-f60c1625b467,Namespace:kube-system,Attempt:0,} failed, error" error="failed to setup network for sandbox \"401e31ac767b820917f0284ed67d15c34d31d47745a5163164761fda87b8a37c\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Sep 6 00:21:53.699931 kubelet[1933]: E0906 00:21:53.699523 1933 log.go:32] "RunPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"401e31ac767b820917f0284ed67d15c34d31d47745a5163164761fda87b8a37c\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Sep 6 00:21:53.699931 kubelet[1933]: E0906 00:21:53.699632 1933 kuberuntime_sandbox.go:72] "Failed to create sandbox for pod" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"401e31ac767b820917f0284ed67d15c34d31d47745a5163164761fda87b8a37c\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="kube-system/coredns-7c65d6cfc9-lj58v" Sep 6 00:21:53.699931 kubelet[1933]: E0906 00:21:53.699677 1933 kuberuntime_manager.go:1170] "CreatePodSandbox for pod failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"401e31ac767b820917f0284ed67d15c34d31d47745a5163164761fda87b8a37c\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="kube-system/coredns-7c65d6cfc9-lj58v" Sep 6 00:21:53.700054 kubelet[1933]: E0906 00:21:53.699756 1933 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"CreatePodSandbox\" for \"coredns-7c65d6cfc9-lj58v_kube-system(ce247e9f-faab-4499-88d3-f60c1625b467)\" with CreatePodSandboxError: \"Failed to create sandbox for pod \\\"coredns-7c65d6cfc9-lj58v_kube-system(ce247e9f-faab-4499-88d3-f60c1625b467)\\\": rpc error: code = Unknown desc = failed to setup network for sandbox \\\"401e31ac767b820917f0284ed67d15c34d31d47745a5163164761fda87b8a37c\\\": plugin type=\\\"calico\\\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="kube-system/coredns-7c65d6cfc9-lj58v" podUID="ce247e9f-faab-4499-88d3-f60c1625b467" Sep 6 00:21:53.718437 env[1194]: time="2025-09-06T00:21:53.718370126Z" level=error msg="Failed to destroy network for sandbox \"865d6c3ec068e07b6321682c7afbda2f71b72d5a2cc7ea65fbddbe99ee0e181c\"" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Sep 6 00:21:53.719073 env[1194]: time="2025-09-06T00:21:53.718982073Z" level=error msg="encountered an error cleaning up failed sandbox \"865d6c3ec068e07b6321682c7afbda2f71b72d5a2cc7ea65fbddbe99ee0e181c\", marking sandbox state as SANDBOX_UNKNOWN" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Sep 6 00:21:53.719274 env[1194]: time="2025-09-06T00:21:53.719225085Z" level=error msg="RunPodSandbox for &PodSandboxMetadata{Name:csi-node-driver-6qmdc,Uid:ece72a4f-db26-4c71-b1f6-478e03debafc,Namespace:calico-system,Attempt:0,} failed, error" error="failed to setup network for sandbox \"865d6c3ec068e07b6321682c7afbda2f71b72d5a2cc7ea65fbddbe99ee0e181c\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Sep 6 00:21:53.719710 kubelet[1933]: E0906 00:21:53.719635 1933 log.go:32] "RunPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"865d6c3ec068e07b6321682c7afbda2f71b72d5a2cc7ea65fbddbe99ee0e181c\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Sep 6 00:21:53.719946 kubelet[1933]: E0906 00:21:53.719791 1933 kuberuntime_sandbox.go:72] "Failed to create sandbox for pod" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"865d6c3ec068e07b6321682c7afbda2f71b72d5a2cc7ea65fbddbe99ee0e181c\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="calico-system/csi-node-driver-6qmdc" Sep 6 00:21:53.719946 kubelet[1933]: E0906 00:21:53.719855 1933 kuberuntime_manager.go:1170] "CreatePodSandbox for pod failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"865d6c3ec068e07b6321682c7afbda2f71b72d5a2cc7ea65fbddbe99ee0e181c\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="calico-system/csi-node-driver-6qmdc" Sep 6 00:21:53.720067 kubelet[1933]: E0906 00:21:53.719941 1933 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"CreatePodSandbox\" for \"csi-node-driver-6qmdc_calico-system(ece72a4f-db26-4c71-b1f6-478e03debafc)\" with CreatePodSandboxError: \"Failed to create sandbox for pod \\\"csi-node-driver-6qmdc_calico-system(ece72a4f-db26-4c71-b1f6-478e03debafc)\\\": rpc error: code = Unknown desc = failed to setup network for sandbox \\\"865d6c3ec068e07b6321682c7afbda2f71b72d5a2cc7ea65fbddbe99ee0e181c\\\": plugin type=\\\"calico\\\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-system/csi-node-driver-6qmdc" podUID="ece72a4f-db26-4c71-b1f6-478e03debafc" Sep 6 00:21:53.735102 env[1194]: time="2025-09-06T00:21:53.734998885Z" level=error msg="Failed to destroy network for sandbox \"b6c0d676905e7769a979b641b973fbab57a0ede6e9580ef71a25fd94e8b9bcca\"" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Sep 6 00:21:53.735614 env[1194]: time="2025-09-06T00:21:53.735564718Z" level=error msg="encountered an error cleaning up failed sandbox \"b6c0d676905e7769a979b641b973fbab57a0ede6e9580ef71a25fd94e8b9bcca\", marking sandbox state as SANDBOX_UNKNOWN" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Sep 6 00:21:53.735701 env[1194]: time="2025-09-06T00:21:53.735637287Z" level=error msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-kube-controllers-dcdb654dd-lnm9v,Uid:a508ebae-2d95-49ee-ae16-79dab0a4ff50,Namespace:calico-system,Attempt:0,} failed, error" error="failed to setup network for sandbox \"b6c0d676905e7769a979b641b973fbab57a0ede6e9580ef71a25fd94e8b9bcca\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Sep 6 00:21:53.736319 kubelet[1933]: E0906 00:21:53.735913 1933 log.go:32] "RunPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"b6c0d676905e7769a979b641b973fbab57a0ede6e9580ef71a25fd94e8b9bcca\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Sep 6 00:21:53.736319 kubelet[1933]: E0906 00:21:53.735976 1933 kuberuntime_sandbox.go:72] "Failed to create sandbox for pod" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"b6c0d676905e7769a979b641b973fbab57a0ede6e9580ef71a25fd94e8b9bcca\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="calico-system/calico-kube-controllers-dcdb654dd-lnm9v" Sep 6 00:21:53.736319 kubelet[1933]: E0906 00:21:53.736001 1933 kuberuntime_manager.go:1170] "CreatePodSandbox for pod failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"b6c0d676905e7769a979b641b973fbab57a0ede6e9580ef71a25fd94e8b9bcca\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="calico-system/calico-kube-controllers-dcdb654dd-lnm9v" Sep 6 00:21:53.736773 kubelet[1933]: E0906 00:21:53.736054 1933 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"CreatePodSandbox\" for \"calico-kube-controllers-dcdb654dd-lnm9v_calico-system(a508ebae-2d95-49ee-ae16-79dab0a4ff50)\" with CreatePodSandboxError: \"Failed to create sandbox for pod \\\"calico-kube-controllers-dcdb654dd-lnm9v_calico-system(a508ebae-2d95-49ee-ae16-79dab0a4ff50)\\\": rpc error: code = Unknown desc = failed to setup network for sandbox \\\"b6c0d676905e7769a979b641b973fbab57a0ede6e9580ef71a25fd94e8b9bcca\\\": plugin type=\\\"calico\\\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-system/calico-kube-controllers-dcdb654dd-lnm9v" podUID="a508ebae-2d95-49ee-ae16-79dab0a4ff50" Sep 6 00:21:53.995135 env[1194]: time="2025-09-06T00:21:53.994229423Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:whisker-6dbdbbb558-f4gjr,Uid:1397c9b2-c600-4219-95d8-4497169633b1,Namespace:calico-system,Attempt:0,}" Sep 6 00:21:54.028027 systemd[1]: run-containerd-io.containerd.grpc.v1.cri-sandboxes-70d37490adbefe97ec1e7961936bf69023ffff9f3849ce09562104a029affc8c-shm.mount: Deactivated successfully. Sep 6 00:21:54.095582 env[1194]: time="2025-09-06T00:21:54.095520634Z" level=error msg="Failed to destroy network for sandbox \"3e6e2ce4bf09e8646818b07652040b83f047bc208a2744a1e9bbf06cf3437233\"" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Sep 6 00:21:54.098524 systemd[1]: run-containerd-io.containerd.grpc.v1.cri-sandboxes-3e6e2ce4bf09e8646818b07652040b83f047bc208a2744a1e9bbf06cf3437233-shm.mount: Deactivated successfully. Sep 6 00:21:54.099409 env[1194]: time="2025-09-06T00:21:54.099342580Z" level=error msg="encountered an error cleaning up failed sandbox \"3e6e2ce4bf09e8646818b07652040b83f047bc208a2744a1e9bbf06cf3437233\", marking sandbox state as SANDBOX_UNKNOWN" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Sep 6 00:21:54.099863 env[1194]: time="2025-09-06T00:21:54.099706428Z" level=error msg="RunPodSandbox for &PodSandboxMetadata{Name:whisker-6dbdbbb558-f4gjr,Uid:1397c9b2-c600-4219-95d8-4497169633b1,Namespace:calico-system,Attempt:0,} failed, error" error="failed to setup network for sandbox \"3e6e2ce4bf09e8646818b07652040b83f047bc208a2744a1e9bbf06cf3437233\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Sep 6 00:21:54.100391 kubelet[1933]: E0906 00:21:54.100328 1933 log.go:32] "RunPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"3e6e2ce4bf09e8646818b07652040b83f047bc208a2744a1e9bbf06cf3437233\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Sep 6 00:21:54.100736 kubelet[1933]: E0906 00:21:54.100439 1933 kuberuntime_sandbox.go:72] "Failed to create sandbox for pod" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"3e6e2ce4bf09e8646818b07652040b83f047bc208a2744a1e9bbf06cf3437233\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="calico-system/whisker-6dbdbbb558-f4gjr" Sep 6 00:21:54.100736 kubelet[1933]: E0906 00:21:54.100463 1933 kuberuntime_manager.go:1170] "CreatePodSandbox for pod failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"3e6e2ce4bf09e8646818b07652040b83f047bc208a2744a1e9bbf06cf3437233\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="calico-system/whisker-6dbdbbb558-f4gjr" Sep 6 00:21:54.100736 kubelet[1933]: E0906 00:21:54.100524 1933 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"CreatePodSandbox\" for \"whisker-6dbdbbb558-f4gjr_calico-system(1397c9b2-c600-4219-95d8-4497169633b1)\" with CreatePodSandboxError: \"Failed to create sandbox for pod \\\"whisker-6dbdbbb558-f4gjr_calico-system(1397c9b2-c600-4219-95d8-4497169633b1)\\\": rpc error: code = Unknown desc = failed to setup network for sandbox \\\"3e6e2ce4bf09e8646818b07652040b83f047bc208a2744a1e9bbf06cf3437233\\\": plugin type=\\\"calico\\\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-system/whisker-6dbdbbb558-f4gjr" podUID="1397c9b2-c600-4219-95d8-4497169633b1" Sep 6 00:21:54.309907 env[1194]: time="2025-09-06T00:21:54.309847370Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:goldmane-7988f88666-bmw2n,Uid:a6952448-1254-4d78-8f5e-8abf0e8f4465,Namespace:calico-system,Attempt:0,}" Sep 6 00:21:54.381205 kubelet[1933]: E0906 00:21:54.381138 1933 secret.go:189] Couldn't get secret calico-apiserver/calico-apiserver-certs: failed to sync secret cache: timed out waiting for the condition Sep 6 00:21:54.381442 kubelet[1933]: E0906 00:21:54.381328 1933 nestedpendingoperations.go:348] Operation for "{volumeName:kubernetes.io/secret/f08dcdfb-b2f6-4cf2-856e-527bb3034be9-calico-apiserver-certs podName:f08dcdfb-b2f6-4cf2-856e-527bb3034be9 nodeName:}" failed. No retries permitted until 2025-09-06 00:21:54.881283828 +0000 UTC m=+31.741273793 (durationBeforeRetry 500ms). Error: MountVolume.SetUp failed for volume "calico-apiserver-certs" (UniqueName: "kubernetes.io/secret/f08dcdfb-b2f6-4cf2-856e-527bb3034be9-calico-apiserver-certs") pod "calico-apiserver-658847fc7d-nxs25" (UID: "f08dcdfb-b2f6-4cf2-856e-527bb3034be9") : failed to sync secret cache: timed out waiting for the condition Sep 6 00:21:54.383535 kubelet[1933]: E0906 00:21:54.383399 1933 secret.go:189] Couldn't get secret calico-apiserver/calico-apiserver-certs: failed to sync secret cache: timed out waiting for the condition Sep 6 00:21:54.383535 kubelet[1933]: E0906 00:21:54.383485 1933 nestedpendingoperations.go:348] Operation for "{volumeName:kubernetes.io/secret/0c93136d-a9dc-4b1a-915b-42a235beadf5-calico-apiserver-certs podName:0c93136d-a9dc-4b1a-915b-42a235beadf5 nodeName:}" failed. No retries permitted until 2025-09-06 00:21:54.883462297 +0000 UTC m=+31.743452257 (durationBeforeRetry 500ms). Error: MountVolume.SetUp failed for volume "calico-apiserver-certs" (UniqueName: "kubernetes.io/secret/0c93136d-a9dc-4b1a-915b-42a235beadf5-calico-apiserver-certs") pod "calico-apiserver-658847fc7d-whbgb" (UID: "0c93136d-a9dc-4b1a-915b-42a235beadf5") : failed to sync secret cache: timed out waiting for the condition Sep 6 00:21:54.412931 env[1194]: time="2025-09-06T00:21:54.412858246Z" level=error msg="Failed to destroy network for sandbox \"3e6cbb7012d247d9d125bbc3ca5eea67cec016d67a30106e88c9a3f4d841c284\"" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Sep 6 00:21:54.413792 env[1194]: time="2025-09-06T00:21:54.413735430Z" level=error msg="encountered an error cleaning up failed sandbox \"3e6cbb7012d247d9d125bbc3ca5eea67cec016d67a30106e88c9a3f4d841c284\", marking sandbox state as SANDBOX_UNKNOWN" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Sep 6 00:21:54.413995 env[1194]: time="2025-09-06T00:21:54.413956438Z" level=error msg="RunPodSandbox for &PodSandboxMetadata{Name:goldmane-7988f88666-bmw2n,Uid:a6952448-1254-4d78-8f5e-8abf0e8f4465,Namespace:calico-system,Attempt:0,} failed, error" error="failed to setup network for sandbox \"3e6cbb7012d247d9d125bbc3ca5eea67cec016d67a30106e88c9a3f4d841c284\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Sep 6 00:21:54.414898 kubelet[1933]: E0906 00:21:54.414411 1933 log.go:32] "RunPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"3e6cbb7012d247d9d125bbc3ca5eea67cec016d67a30106e88c9a3f4d841c284\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Sep 6 00:21:54.414898 kubelet[1933]: E0906 00:21:54.414491 1933 kuberuntime_sandbox.go:72] "Failed to create sandbox for pod" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"3e6cbb7012d247d9d125bbc3ca5eea67cec016d67a30106e88c9a3f4d841c284\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="calico-system/goldmane-7988f88666-bmw2n" Sep 6 00:21:54.414898 kubelet[1933]: E0906 00:21:54.414520 1933 kuberuntime_manager.go:1170] "CreatePodSandbox for pod failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"3e6cbb7012d247d9d125bbc3ca5eea67cec016d67a30106e88c9a3f4d841c284\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="calico-system/goldmane-7988f88666-bmw2n" Sep 6 00:21:54.416100 kubelet[1933]: E0906 00:21:54.414583 1933 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"CreatePodSandbox\" for \"goldmane-7988f88666-bmw2n_calico-system(a6952448-1254-4d78-8f5e-8abf0e8f4465)\" with CreatePodSandboxError: \"Failed to create sandbox for pod \\\"goldmane-7988f88666-bmw2n_calico-system(a6952448-1254-4d78-8f5e-8abf0e8f4465)\\\": rpc error: code = Unknown desc = failed to setup network for sandbox \\\"3e6cbb7012d247d9d125bbc3ca5eea67cec016d67a30106e88c9a3f4d841c284\\\": plugin type=\\\"calico\\\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-system/goldmane-7988f88666-bmw2n" podUID="a6952448-1254-4d78-8f5e-8abf0e8f4465" Sep 6 00:21:54.540870 kubelet[1933]: I0906 00:21:54.540831 1933 pod_container_deletor.go:80] "Container not found in pod's containers" containerID="3e6cbb7012d247d9d125bbc3ca5eea67cec016d67a30106e88c9a3f4d841c284" Sep 6 00:21:54.543772 env[1194]: time="2025-09-06T00:21:54.543686396Z" level=info msg="StopPodSandbox for \"3e6cbb7012d247d9d125bbc3ca5eea67cec016d67a30106e88c9a3f4d841c284\"" Sep 6 00:21:54.547177 kubelet[1933]: I0906 00:21:54.547141 1933 pod_container_deletor.go:80] "Container not found in pod's containers" containerID="865d6c3ec068e07b6321682c7afbda2f71b72d5a2cc7ea65fbddbe99ee0e181c" Sep 6 00:21:54.548819 env[1194]: time="2025-09-06T00:21:54.548692929Z" level=info msg="StopPodSandbox for \"865d6c3ec068e07b6321682c7afbda2f71b72d5a2cc7ea65fbddbe99ee0e181c\"" Sep 6 00:21:54.550769 kubelet[1933]: I0906 00:21:54.550732 1933 pod_container_deletor.go:80] "Container not found in pod's containers" containerID="b6c0d676905e7769a979b641b973fbab57a0ede6e9580ef71a25fd94e8b9bcca" Sep 6 00:21:54.551755 env[1194]: time="2025-09-06T00:21:54.551701981Z" level=info msg="StopPodSandbox for \"b6c0d676905e7769a979b641b973fbab57a0ede6e9580ef71a25fd94e8b9bcca\"" Sep 6 00:21:54.553970 kubelet[1933]: I0906 00:21:54.553932 1933 pod_container_deletor.go:80] "Container not found in pod's containers" containerID="3e6e2ce4bf09e8646818b07652040b83f047bc208a2744a1e9bbf06cf3437233" Sep 6 00:21:54.554618 env[1194]: time="2025-09-06T00:21:54.554579883Z" level=info msg="StopPodSandbox for \"3e6e2ce4bf09e8646818b07652040b83f047bc208a2744a1e9bbf06cf3437233\"" Sep 6 00:21:54.557705 kubelet[1933]: I0906 00:21:54.556443 1933 pod_container_deletor.go:80] "Container not found in pod's containers" containerID="70d37490adbefe97ec1e7961936bf69023ffff9f3849ce09562104a029affc8c" Sep 6 00:21:54.557883 env[1194]: time="2025-09-06T00:21:54.557321175Z" level=info msg="StopPodSandbox for \"70d37490adbefe97ec1e7961936bf69023ffff9f3849ce09562104a029affc8c\"" Sep 6 00:21:54.559584 kubelet[1933]: I0906 00:21:54.559375 1933 pod_container_deletor.go:80] "Container not found in pod's containers" containerID="401e31ac767b820917f0284ed67d15c34d31d47745a5163164761fda87b8a37c" Sep 6 00:21:54.563949 env[1194]: time="2025-09-06T00:21:54.562294706Z" level=info msg="StopPodSandbox for \"401e31ac767b820917f0284ed67d15c34d31d47745a5163164761fda87b8a37c\"" Sep 6 00:21:54.654887 env[1194]: time="2025-09-06T00:21:54.654819126Z" level=error msg="StopPodSandbox for \"3e6cbb7012d247d9d125bbc3ca5eea67cec016d67a30106e88c9a3f4d841c284\" failed" error="failed to destroy network for sandbox \"3e6cbb7012d247d9d125bbc3ca5eea67cec016d67a30106e88c9a3f4d841c284\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Sep 6 00:21:54.655170 kubelet[1933]: E0906 00:21:54.655128 1933 log.go:32] "StopPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to destroy network for sandbox \"3e6cbb7012d247d9d125bbc3ca5eea67cec016d67a30106e88c9a3f4d841c284\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" podSandboxID="3e6cbb7012d247d9d125bbc3ca5eea67cec016d67a30106e88c9a3f4d841c284" Sep 6 00:21:54.655265 kubelet[1933]: E0906 00:21:54.655207 1933 kuberuntime_manager.go:1479] "Failed to stop sandbox" podSandboxID={"Type":"containerd","ID":"3e6cbb7012d247d9d125bbc3ca5eea67cec016d67a30106e88c9a3f4d841c284"} Sep 6 00:21:54.655308 kubelet[1933]: E0906 00:21:54.655286 1933 kuberuntime_manager.go:1079] "killPodWithSyncResult failed" err="failed to \"KillPodSandbox\" for \"a6952448-1254-4d78-8f5e-8abf0e8f4465\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"3e6cbb7012d247d9d125bbc3ca5eea67cec016d67a30106e88c9a3f4d841c284\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" Sep 6 00:21:54.655409 kubelet[1933]: E0906 00:21:54.655310 1933 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"KillPodSandbox\" for \"a6952448-1254-4d78-8f5e-8abf0e8f4465\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"3e6cbb7012d247d9d125bbc3ca5eea67cec016d67a30106e88c9a3f4d841c284\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-system/goldmane-7988f88666-bmw2n" podUID="a6952448-1254-4d78-8f5e-8abf0e8f4465" Sep 6 00:21:54.685504 env[1194]: time="2025-09-06T00:21:54.685418121Z" level=error msg="StopPodSandbox for \"3e6e2ce4bf09e8646818b07652040b83f047bc208a2744a1e9bbf06cf3437233\" failed" error="failed to destroy network for sandbox \"3e6e2ce4bf09e8646818b07652040b83f047bc208a2744a1e9bbf06cf3437233\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Sep 6 00:21:54.686406 kubelet[1933]: E0906 00:21:54.686286 1933 log.go:32] "StopPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to destroy network for sandbox \"3e6e2ce4bf09e8646818b07652040b83f047bc208a2744a1e9bbf06cf3437233\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" podSandboxID="3e6e2ce4bf09e8646818b07652040b83f047bc208a2744a1e9bbf06cf3437233" Sep 6 00:21:54.686603 kubelet[1933]: E0906 00:21:54.686419 1933 kuberuntime_manager.go:1479] "Failed to stop sandbox" podSandboxID={"Type":"containerd","ID":"3e6e2ce4bf09e8646818b07652040b83f047bc208a2744a1e9bbf06cf3437233"} Sep 6 00:21:54.686603 kubelet[1933]: E0906 00:21:54.686466 1933 kuberuntime_manager.go:1079] "killPodWithSyncResult failed" err="failed to \"KillPodSandbox\" for \"1397c9b2-c600-4219-95d8-4497169633b1\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"3e6e2ce4bf09e8646818b07652040b83f047bc208a2744a1e9bbf06cf3437233\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" Sep 6 00:21:54.686603 kubelet[1933]: E0906 00:21:54.686494 1933 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"KillPodSandbox\" for \"1397c9b2-c600-4219-95d8-4497169633b1\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"3e6e2ce4bf09e8646818b07652040b83f047bc208a2744a1e9bbf06cf3437233\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-system/whisker-6dbdbbb558-f4gjr" podUID="1397c9b2-c600-4219-95d8-4497169633b1" Sep 6 00:21:54.736223 env[1194]: time="2025-09-06T00:21:54.736158897Z" level=error msg="StopPodSandbox for \"b6c0d676905e7769a979b641b973fbab57a0ede6e9580ef71a25fd94e8b9bcca\" failed" error="failed to destroy network for sandbox \"b6c0d676905e7769a979b641b973fbab57a0ede6e9580ef71a25fd94e8b9bcca\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Sep 6 00:21:54.736806 kubelet[1933]: E0906 00:21:54.736652 1933 log.go:32] "StopPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to destroy network for sandbox \"b6c0d676905e7769a979b641b973fbab57a0ede6e9580ef71a25fd94e8b9bcca\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" podSandboxID="b6c0d676905e7769a979b641b973fbab57a0ede6e9580ef71a25fd94e8b9bcca" Sep 6 00:21:54.736806 kubelet[1933]: E0906 00:21:54.736702 1933 kuberuntime_manager.go:1479] "Failed to stop sandbox" podSandboxID={"Type":"containerd","ID":"b6c0d676905e7769a979b641b973fbab57a0ede6e9580ef71a25fd94e8b9bcca"} Sep 6 00:21:54.736806 kubelet[1933]: E0906 00:21:54.736744 1933 kuberuntime_manager.go:1079] "killPodWithSyncResult failed" err="failed to \"KillPodSandbox\" for \"a508ebae-2d95-49ee-ae16-79dab0a4ff50\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"b6c0d676905e7769a979b641b973fbab57a0ede6e9580ef71a25fd94e8b9bcca\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" Sep 6 00:21:54.736806 kubelet[1933]: E0906 00:21:54.736769 1933 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"KillPodSandbox\" for \"a508ebae-2d95-49ee-ae16-79dab0a4ff50\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"b6c0d676905e7769a979b641b973fbab57a0ede6e9580ef71a25fd94e8b9bcca\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-system/calico-kube-controllers-dcdb654dd-lnm9v" podUID="a508ebae-2d95-49ee-ae16-79dab0a4ff50" Sep 6 00:21:54.746719 env[1194]: time="2025-09-06T00:21:54.746643229Z" level=error msg="StopPodSandbox for \"401e31ac767b820917f0284ed67d15c34d31d47745a5163164761fda87b8a37c\" failed" error="failed to destroy network for sandbox \"401e31ac767b820917f0284ed67d15c34d31d47745a5163164761fda87b8a37c\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Sep 6 00:21:54.747425 kubelet[1933]: E0906 00:21:54.747269 1933 log.go:32] "StopPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to destroy network for sandbox \"401e31ac767b820917f0284ed67d15c34d31d47745a5163164761fda87b8a37c\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" podSandboxID="401e31ac767b820917f0284ed67d15c34d31d47745a5163164761fda87b8a37c" Sep 6 00:21:54.747425 kubelet[1933]: E0906 00:21:54.747330 1933 kuberuntime_manager.go:1479] "Failed to stop sandbox" podSandboxID={"Type":"containerd","ID":"401e31ac767b820917f0284ed67d15c34d31d47745a5163164761fda87b8a37c"} Sep 6 00:21:54.747651 kubelet[1933]: E0906 00:21:54.747366 1933 kuberuntime_manager.go:1079] "killPodWithSyncResult failed" err="failed to \"KillPodSandbox\" for \"ce247e9f-faab-4499-88d3-f60c1625b467\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"401e31ac767b820917f0284ed67d15c34d31d47745a5163164761fda87b8a37c\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" Sep 6 00:21:54.747651 kubelet[1933]: E0906 00:21:54.747621 1933 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"KillPodSandbox\" for \"ce247e9f-faab-4499-88d3-f60c1625b467\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"401e31ac767b820917f0284ed67d15c34d31d47745a5163164761fda87b8a37c\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="kube-system/coredns-7c65d6cfc9-lj58v" podUID="ce247e9f-faab-4499-88d3-f60c1625b467" Sep 6 00:21:54.755942 env[1194]: time="2025-09-06T00:21:54.755848211Z" level=error msg="StopPodSandbox for \"865d6c3ec068e07b6321682c7afbda2f71b72d5a2cc7ea65fbddbe99ee0e181c\" failed" error="failed to destroy network for sandbox \"865d6c3ec068e07b6321682c7afbda2f71b72d5a2cc7ea65fbddbe99ee0e181c\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Sep 6 00:21:54.756512 kubelet[1933]: E0906 00:21:54.756356 1933 log.go:32] "StopPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to destroy network for sandbox \"865d6c3ec068e07b6321682c7afbda2f71b72d5a2cc7ea65fbddbe99ee0e181c\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" podSandboxID="865d6c3ec068e07b6321682c7afbda2f71b72d5a2cc7ea65fbddbe99ee0e181c" Sep 6 00:21:54.756512 kubelet[1933]: E0906 00:21:54.756412 1933 kuberuntime_manager.go:1479] "Failed to stop sandbox" podSandboxID={"Type":"containerd","ID":"865d6c3ec068e07b6321682c7afbda2f71b72d5a2cc7ea65fbddbe99ee0e181c"} Sep 6 00:21:54.756512 kubelet[1933]: E0906 00:21:54.756448 1933 kuberuntime_manager.go:1079] "killPodWithSyncResult failed" err="failed to \"KillPodSandbox\" for \"ece72a4f-db26-4c71-b1f6-478e03debafc\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"865d6c3ec068e07b6321682c7afbda2f71b72d5a2cc7ea65fbddbe99ee0e181c\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" Sep 6 00:21:54.756512 kubelet[1933]: E0906 00:21:54.756479 1933 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"KillPodSandbox\" for \"ece72a4f-db26-4c71-b1f6-478e03debafc\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"865d6c3ec068e07b6321682c7afbda2f71b72d5a2cc7ea65fbddbe99ee0e181c\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-system/csi-node-driver-6qmdc" podUID="ece72a4f-db26-4c71-b1f6-478e03debafc" Sep 6 00:21:54.758396 env[1194]: time="2025-09-06T00:21:54.758329036Z" level=error msg="StopPodSandbox for \"70d37490adbefe97ec1e7961936bf69023ffff9f3849ce09562104a029affc8c\" failed" error="failed to destroy network for sandbox \"70d37490adbefe97ec1e7961936bf69023ffff9f3849ce09562104a029affc8c\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Sep 6 00:21:54.758725 kubelet[1933]: E0906 00:21:54.758663 1933 log.go:32] "StopPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to destroy network for sandbox \"70d37490adbefe97ec1e7961936bf69023ffff9f3849ce09562104a029affc8c\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" podSandboxID="70d37490adbefe97ec1e7961936bf69023ffff9f3849ce09562104a029affc8c" Sep 6 00:21:54.758791 kubelet[1933]: E0906 00:21:54.758762 1933 kuberuntime_manager.go:1479] "Failed to stop sandbox" podSandboxID={"Type":"containerd","ID":"70d37490adbefe97ec1e7961936bf69023ffff9f3849ce09562104a029affc8c"} Sep 6 00:21:54.758850 kubelet[1933]: E0906 00:21:54.758810 1933 kuberuntime_manager.go:1079] "killPodWithSyncResult failed" err="failed to \"KillPodSandbox\" for \"919279a3-0e76-4d7e-98d0-24775a445624\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"70d37490adbefe97ec1e7961936bf69023ffff9f3849ce09562104a029affc8c\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" Sep 6 00:21:54.758920 kubelet[1933]: E0906 00:21:54.758870 1933 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"KillPodSandbox\" for \"919279a3-0e76-4d7e-98d0-24775a445624\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"70d37490adbefe97ec1e7961936bf69023ffff9f3849ce09562104a029affc8c\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="kube-system/coredns-7c65d6cfc9-m2nlc" podUID="919279a3-0e76-4d7e-98d0-24775a445624" Sep 6 00:21:54.920658 env[1194]: time="2025-09-06T00:21:54.919211094Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-apiserver-658847fc7d-whbgb,Uid:0c93136d-a9dc-4b1a-915b-42a235beadf5,Namespace:calico-apiserver,Attempt:0,}" Sep 6 00:21:54.940380 env[1194]: time="2025-09-06T00:21:54.940324678Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-apiserver-658847fc7d-nxs25,Uid:f08dcdfb-b2f6-4cf2-856e-527bb3034be9,Namespace:calico-apiserver,Attempt:0,}" Sep 6 00:21:55.021167 systemd[1]: run-containerd-io.containerd.grpc.v1.cri-sandboxes-3e6cbb7012d247d9d125bbc3ca5eea67cec016d67a30106e88c9a3f4d841c284-shm.mount: Deactivated successfully. Sep 6 00:21:55.058549 env[1194]: time="2025-09-06T00:21:55.058484490Z" level=error msg="Failed to destroy network for sandbox \"0e5553fbc453e3577d78a53a280028ebeb909e064b00094e55fe9738a9b2c018\"" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Sep 6 00:21:55.061008 systemd[1]: run-containerd-io.containerd.grpc.v1.cri-sandboxes-0e5553fbc453e3577d78a53a280028ebeb909e064b00094e55fe9738a9b2c018-shm.mount: Deactivated successfully. Sep 6 00:21:55.062376 env[1194]: time="2025-09-06T00:21:55.062005220Z" level=error msg="encountered an error cleaning up failed sandbox \"0e5553fbc453e3577d78a53a280028ebeb909e064b00094e55fe9738a9b2c018\", marking sandbox state as SANDBOX_UNKNOWN" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Sep 6 00:21:55.062811 env[1194]: time="2025-09-06T00:21:55.062771101Z" level=error msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-apiserver-658847fc7d-whbgb,Uid:0c93136d-a9dc-4b1a-915b-42a235beadf5,Namespace:calico-apiserver,Attempt:0,} failed, error" error="failed to setup network for sandbox \"0e5553fbc453e3577d78a53a280028ebeb909e064b00094e55fe9738a9b2c018\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Sep 6 00:21:55.063287 kubelet[1933]: E0906 00:21:55.063054 1933 log.go:32] "RunPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"0e5553fbc453e3577d78a53a280028ebeb909e064b00094e55fe9738a9b2c018\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Sep 6 00:21:55.063287 kubelet[1933]: E0906 00:21:55.063122 1933 kuberuntime_sandbox.go:72] "Failed to create sandbox for pod" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"0e5553fbc453e3577d78a53a280028ebeb909e064b00094e55fe9738a9b2c018\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="calico-apiserver/calico-apiserver-658847fc7d-whbgb" Sep 6 00:21:55.063287 kubelet[1933]: E0906 00:21:55.063143 1933 kuberuntime_manager.go:1170] "CreatePodSandbox for pod failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"0e5553fbc453e3577d78a53a280028ebeb909e064b00094e55fe9738a9b2c018\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="calico-apiserver/calico-apiserver-658847fc7d-whbgb" Sep 6 00:21:55.063507 kubelet[1933]: E0906 00:21:55.063183 1933 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"CreatePodSandbox\" for \"calico-apiserver-658847fc7d-whbgb_calico-apiserver(0c93136d-a9dc-4b1a-915b-42a235beadf5)\" with CreatePodSandboxError: \"Failed to create sandbox for pod \\\"calico-apiserver-658847fc7d-whbgb_calico-apiserver(0c93136d-a9dc-4b1a-915b-42a235beadf5)\\\": rpc error: code = Unknown desc = failed to setup network for sandbox \\\"0e5553fbc453e3577d78a53a280028ebeb909e064b00094e55fe9738a9b2c018\\\": plugin type=\\\"calico\\\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-apiserver/calico-apiserver-658847fc7d-whbgb" podUID="0c93136d-a9dc-4b1a-915b-42a235beadf5" Sep 6 00:21:55.119835 env[1194]: time="2025-09-06T00:21:55.119767919Z" level=error msg="Failed to destroy network for sandbox \"17c5099fb97f72d58f1833acd13fa27da6caf86fbe52428c8b16129b064f21d7\"" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Sep 6 00:21:55.122616 systemd[1]: run-containerd-io.containerd.grpc.v1.cri-sandboxes-17c5099fb97f72d58f1833acd13fa27da6caf86fbe52428c8b16129b064f21d7-shm.mount: Deactivated successfully. Sep 6 00:21:55.124010 env[1194]: time="2025-09-06T00:21:55.123948491Z" level=error msg="encountered an error cleaning up failed sandbox \"17c5099fb97f72d58f1833acd13fa27da6caf86fbe52428c8b16129b064f21d7\", marking sandbox state as SANDBOX_UNKNOWN" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Sep 6 00:21:55.124103 env[1194]: time="2025-09-06T00:21:55.124037833Z" level=error msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-apiserver-658847fc7d-nxs25,Uid:f08dcdfb-b2f6-4cf2-856e-527bb3034be9,Namespace:calico-apiserver,Attempt:0,} failed, error" error="failed to setup network for sandbox \"17c5099fb97f72d58f1833acd13fa27da6caf86fbe52428c8b16129b064f21d7\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Sep 6 00:21:55.124352 kubelet[1933]: E0906 00:21:55.124315 1933 log.go:32] "RunPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"17c5099fb97f72d58f1833acd13fa27da6caf86fbe52428c8b16129b064f21d7\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Sep 6 00:21:55.125444 kubelet[1933]: E0906 00:21:55.124379 1933 kuberuntime_sandbox.go:72] "Failed to create sandbox for pod" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"17c5099fb97f72d58f1833acd13fa27da6caf86fbe52428c8b16129b064f21d7\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="calico-apiserver/calico-apiserver-658847fc7d-nxs25" Sep 6 00:21:55.125444 kubelet[1933]: E0906 00:21:55.124401 1933 kuberuntime_manager.go:1170] "CreatePodSandbox for pod failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"17c5099fb97f72d58f1833acd13fa27da6caf86fbe52428c8b16129b064f21d7\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="calico-apiserver/calico-apiserver-658847fc7d-nxs25" Sep 6 00:21:55.125444 kubelet[1933]: E0906 00:21:55.124441 1933 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"CreatePodSandbox\" for \"calico-apiserver-658847fc7d-nxs25_calico-apiserver(f08dcdfb-b2f6-4cf2-856e-527bb3034be9)\" with CreatePodSandboxError: \"Failed to create sandbox for pod \\\"calico-apiserver-658847fc7d-nxs25_calico-apiserver(f08dcdfb-b2f6-4cf2-856e-527bb3034be9)\\\": rpc error: code = Unknown desc = failed to setup network for sandbox \\\"17c5099fb97f72d58f1833acd13fa27da6caf86fbe52428c8b16129b064f21d7\\\": plugin type=\\\"calico\\\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-apiserver/calico-apiserver-658847fc7d-nxs25" podUID="f08dcdfb-b2f6-4cf2-856e-527bb3034be9" Sep 6 00:21:55.562868 kubelet[1933]: I0906 00:21:55.562286 1933 pod_container_deletor.go:80] "Container not found in pod's containers" containerID="17c5099fb97f72d58f1833acd13fa27da6caf86fbe52428c8b16129b064f21d7" Sep 6 00:21:55.563302 env[1194]: time="2025-09-06T00:21:55.563266730Z" level=info msg="StopPodSandbox for \"17c5099fb97f72d58f1833acd13fa27da6caf86fbe52428c8b16129b064f21d7\"" Sep 6 00:21:55.565876 kubelet[1933]: I0906 00:21:55.565507 1933 pod_container_deletor.go:80] "Container not found in pod's containers" containerID="0e5553fbc453e3577d78a53a280028ebeb909e064b00094e55fe9738a9b2c018" Sep 6 00:21:55.566174 env[1194]: time="2025-09-06T00:21:55.566142407Z" level=info msg="StopPodSandbox for \"0e5553fbc453e3577d78a53a280028ebeb909e064b00094e55fe9738a9b2c018\"" Sep 6 00:21:55.622243 env[1194]: time="2025-09-06T00:21:55.622167480Z" level=error msg="StopPodSandbox for \"17c5099fb97f72d58f1833acd13fa27da6caf86fbe52428c8b16129b064f21d7\" failed" error="failed to destroy network for sandbox \"17c5099fb97f72d58f1833acd13fa27da6caf86fbe52428c8b16129b064f21d7\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Sep 6 00:21:55.622739 kubelet[1933]: E0906 00:21:55.622563 1933 log.go:32] "StopPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to destroy network for sandbox \"17c5099fb97f72d58f1833acd13fa27da6caf86fbe52428c8b16129b064f21d7\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" podSandboxID="17c5099fb97f72d58f1833acd13fa27da6caf86fbe52428c8b16129b064f21d7" Sep 6 00:21:55.622739 kubelet[1933]: E0906 00:21:55.622617 1933 kuberuntime_manager.go:1479] "Failed to stop sandbox" podSandboxID={"Type":"containerd","ID":"17c5099fb97f72d58f1833acd13fa27da6caf86fbe52428c8b16129b064f21d7"} Sep 6 00:21:55.622739 kubelet[1933]: E0906 00:21:55.622651 1933 kuberuntime_manager.go:1079] "killPodWithSyncResult failed" err="failed to \"KillPodSandbox\" for \"f08dcdfb-b2f6-4cf2-856e-527bb3034be9\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"17c5099fb97f72d58f1833acd13fa27da6caf86fbe52428c8b16129b064f21d7\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" Sep 6 00:21:55.622739 kubelet[1933]: E0906 00:21:55.622682 1933 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"KillPodSandbox\" for \"f08dcdfb-b2f6-4cf2-856e-527bb3034be9\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"17c5099fb97f72d58f1833acd13fa27da6caf86fbe52428c8b16129b064f21d7\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-apiserver/calico-apiserver-658847fc7d-nxs25" podUID="f08dcdfb-b2f6-4cf2-856e-527bb3034be9" Sep 6 00:21:55.637847 env[1194]: time="2025-09-06T00:21:55.637761520Z" level=error msg="StopPodSandbox for \"0e5553fbc453e3577d78a53a280028ebeb909e064b00094e55fe9738a9b2c018\" failed" error="failed to destroy network for sandbox \"0e5553fbc453e3577d78a53a280028ebeb909e064b00094e55fe9738a9b2c018\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Sep 6 00:21:55.638578 kubelet[1933]: E0906 00:21:55.638353 1933 log.go:32] "StopPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to destroy network for sandbox \"0e5553fbc453e3577d78a53a280028ebeb909e064b00094e55fe9738a9b2c018\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" podSandboxID="0e5553fbc453e3577d78a53a280028ebeb909e064b00094e55fe9738a9b2c018" Sep 6 00:21:55.638578 kubelet[1933]: E0906 00:21:55.638422 1933 kuberuntime_manager.go:1479] "Failed to stop sandbox" podSandboxID={"Type":"containerd","ID":"0e5553fbc453e3577d78a53a280028ebeb909e064b00094e55fe9738a9b2c018"} Sep 6 00:21:55.638578 kubelet[1933]: E0906 00:21:55.638480 1933 kuberuntime_manager.go:1079] "killPodWithSyncResult failed" err="failed to \"KillPodSandbox\" for \"0c93136d-a9dc-4b1a-915b-42a235beadf5\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"0e5553fbc453e3577d78a53a280028ebeb909e064b00094e55fe9738a9b2c018\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" Sep 6 00:21:55.638578 kubelet[1933]: E0906 00:21:55.638513 1933 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"KillPodSandbox\" for \"0c93136d-a9dc-4b1a-915b-42a235beadf5\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"0e5553fbc453e3577d78a53a280028ebeb909e064b00094e55fe9738a9b2c018\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-apiserver/calico-apiserver-658847fc7d-whbgb" podUID="0c93136d-a9dc-4b1a-915b-42a235beadf5" Sep 6 00:22:00.322103 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount3327205684.mount: Deactivated successfully. Sep 6 00:22:00.357393 env[1194]: time="2025-09-06T00:22:00.357319534Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/node:v3.30.3,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 6 00:22:00.359307 env[1194]: time="2025-09-06T00:22:00.359227293Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:ce9c4ac0f175f22c56e80844e65379d9ebe1d8a4e2bbb38dc1db0f53a8826f0f,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 6 00:22:00.363798 env[1194]: time="2025-09-06T00:22:00.363754582Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/node:v3.30.3,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 6 00:22:00.366106 env[1194]: time="2025-09-06T00:22:00.366056921Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/node@sha256:bcb8146fcaeced1e1c88fad3eaa697f1680746bd23c3e7e8d4535bc484c6f2a1,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 6 00:22:00.367230 env[1194]: time="2025-09-06T00:22:00.367161610Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/node:v3.30.3\" returns image reference \"sha256:ce9c4ac0f175f22c56e80844e65379d9ebe1d8a4e2bbb38dc1db0f53a8826f0f\"" Sep 6 00:22:00.408298 env[1194]: time="2025-09-06T00:22:00.408135141Z" level=info msg="CreateContainer within sandbox \"2f62fb67075e1523acff2e95d02eca678fd67d04e398c285ec4e0609ad793b03\" for container &ContainerMetadata{Name:calico-node,Attempt:0,}" Sep 6 00:22:00.426070 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount694979800.mount: Deactivated successfully. Sep 6 00:22:00.429951 env[1194]: time="2025-09-06T00:22:00.429891587Z" level=info msg="CreateContainer within sandbox \"2f62fb67075e1523acff2e95d02eca678fd67d04e398c285ec4e0609ad793b03\" for &ContainerMetadata{Name:calico-node,Attempt:0,} returns container id \"c7159642d54acd22b7418e53840b3b4adaaa2a0a2a24b380678df942301126ff\"" Sep 6 00:22:00.430895 env[1194]: time="2025-09-06T00:22:00.430635756Z" level=info msg="StartContainer for \"c7159642d54acd22b7418e53840b3b4adaaa2a0a2a24b380678df942301126ff\"" Sep 6 00:22:00.460509 systemd[1]: Started cri-containerd-c7159642d54acd22b7418e53840b3b4adaaa2a0a2a24b380678df942301126ff.scope. Sep 6 00:22:00.507000 audit[3043]: AVC avc: denied { perfmon } for pid=3043 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:00.525678 kernel: kauditd_printk_skb: 40 callbacks suppressed Sep 6 00:22:00.525804 kernel: audit: type=1400 audit(1757118120.507:1028): avc: denied { perfmon } for pid=3043 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:00.525854 kernel: audit: type=1300 audit(1757118120.507:1028): arch=c000003e syscall=321 success=yes exit=15 a0=0 a1=c0001976b0 a2=3c a3=7f4cc5528988 items=0 ppid=2383 pid=3043 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:22:00.525943 kernel: audit: type=1327 audit(1757118120.507:1028): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6337313539363432643534616364323262373431386535333834306233 Sep 6 00:22:00.525966 kernel: audit: type=1400 audit(1757118120.508:1029): avc: denied { bpf } for pid=3043 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:00.526005 kernel: audit: type=1400 audit(1757118120.508:1029): avc: denied { bpf } for pid=3043 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:00.507000 audit[3043]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=0 a1=c0001976b0 a2=3c a3=7f4cc5528988 items=0 ppid=2383 pid=3043 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:22:00.538487 kernel: audit: type=1400 audit(1757118120.508:1029): avc: denied { bpf } for pid=3043 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:00.538618 kernel: audit: type=1400 audit(1757118120.508:1029): avc: denied { perfmon } for pid=3043 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:00.538896 kernel: audit: type=1400 audit(1757118120.508:1029): avc: denied { perfmon } for pid=3043 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:00.507000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6337313539363432643534616364323262373431386535333834306233 Sep 6 00:22:00.508000 audit[3043]: AVC avc: denied { bpf } for pid=3043 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:00.508000 audit[3043]: AVC avc: denied { bpf } for pid=3043 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:00.508000 audit[3043]: AVC avc: denied { bpf } for pid=3043 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:00.508000 audit[3043]: AVC avc: denied { perfmon } for pid=3043 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:00.508000 audit[3043]: AVC avc: denied { perfmon } for pid=3043 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:00.508000 audit[3043]: AVC avc: denied { perfmon } for pid=3043 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:00.543808 kernel: audit: type=1400 audit(1757118120.508:1029): avc: denied { perfmon } for pid=3043 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:00.508000 audit[3043]: AVC avc: denied { perfmon } for pid=3043 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:00.548797 kernel: audit: type=1400 audit(1757118120.508:1029): avc: denied { perfmon } for pid=3043 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:00.508000 audit[3043]: AVC avc: denied { perfmon } for pid=3043 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:00.508000 audit[3043]: AVC avc: denied { bpf } for pid=3043 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:00.508000 audit[3043]: AVC avc: denied { bpf } for pid=3043 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:00.508000 audit: BPF prog-id=139 op=LOAD Sep 6 00:22:00.508000 audit[3043]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c0001979d8 a2=78 a3=c0000edb88 items=0 ppid=2383 pid=3043 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:22:00.508000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6337313539363432643534616364323262373431386535333834306233 Sep 6 00:22:00.518000 audit[3043]: AVC avc: denied { bpf } for pid=3043 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:00.518000 audit[3043]: AVC avc: denied { bpf } for pid=3043 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:00.518000 audit[3043]: AVC avc: denied { perfmon } for pid=3043 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:00.518000 audit[3043]: AVC avc: denied { perfmon } for pid=3043 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:00.518000 audit[3043]: AVC avc: denied { perfmon } for pid=3043 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:00.518000 audit[3043]: AVC avc: denied { perfmon } for pid=3043 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:00.518000 audit[3043]: AVC avc: denied { perfmon } for pid=3043 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:00.518000 audit[3043]: AVC avc: denied { bpf } for pid=3043 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:00.518000 audit[3043]: AVC avc: denied { bpf } for pid=3043 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:00.518000 audit: BPF prog-id=140 op=LOAD Sep 6 00:22:00.518000 audit[3043]: SYSCALL arch=c000003e syscall=321 success=yes exit=17 a0=5 a1=c000197770 a2=78 a3=c0000edbd8 items=0 ppid=2383 pid=3043 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:22:00.518000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6337313539363432643534616364323262373431386535333834306233 Sep 6 00:22:00.521000 audit: BPF prog-id=140 op=UNLOAD Sep 6 00:22:00.521000 audit: BPF prog-id=139 op=UNLOAD Sep 6 00:22:00.521000 audit[3043]: AVC avc: denied { bpf } for pid=3043 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:00.521000 audit[3043]: AVC avc: denied { bpf } for pid=3043 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:00.521000 audit[3043]: AVC avc: denied { bpf } for pid=3043 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:00.521000 audit[3043]: AVC avc: denied { perfmon } for pid=3043 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:00.521000 audit[3043]: AVC avc: denied { perfmon } for pid=3043 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:00.521000 audit[3043]: AVC avc: denied { perfmon } for pid=3043 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:00.521000 audit[3043]: AVC avc: denied { perfmon } for pid=3043 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:00.521000 audit[3043]: AVC avc: denied { perfmon } for pid=3043 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:00.521000 audit[3043]: AVC avc: denied { bpf } for pid=3043 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:00.521000 audit[3043]: AVC avc: denied { bpf } for pid=3043 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:00.521000 audit: BPF prog-id=141 op=LOAD Sep 6 00:22:00.521000 audit[3043]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c000197c30 a2=78 a3=c0000edc68 items=0 ppid=2383 pid=3043 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:22:00.521000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6337313539363432643534616364323262373431386535333834306233 Sep 6 00:22:00.564586 env[1194]: time="2025-09-06T00:22:00.564505227Z" level=info msg="StartContainer for \"c7159642d54acd22b7418e53840b3b4adaaa2a0a2a24b380678df942301126ff\" returns successfully" Sep 6 00:22:00.646179 kubelet[1933]: I0906 00:22:00.640534 1933 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="calico-system/calico-node-8hgkp" podStartSLOduration=1.708085434 podStartE2EDuration="17.636228525s" podCreationTimestamp="2025-09-06 00:21:43 +0000 UTC" firstStartedPulling="2025-09-06 00:21:44.441623954 +0000 UTC m=+21.301613912" lastFinishedPulling="2025-09-06 00:22:00.369767035 +0000 UTC m=+37.229757003" observedRunningTime="2025-09-06 00:22:00.633194647 +0000 UTC m=+37.493184615" watchObservedRunningTime="2025-09-06 00:22:00.636228525 +0000 UTC m=+37.496218526" Sep 6 00:22:00.997241 kernel: wireguard: WireGuard 1.0.0 loaded. See www.wireguard.com for information. Sep 6 00:22:00.997468 kernel: wireguard: Copyright (C) 2015-2019 Jason A. Donenfeld . All Rights Reserved. Sep 6 00:22:01.195333 env[1194]: time="2025-09-06T00:22:01.194824192Z" level=info msg="StopPodSandbox for \"3e6e2ce4bf09e8646818b07652040b83f047bc208a2744a1e9bbf06cf3437233\"" Sep 6 00:22:01.607878 env[1194]: 2025-09-06 00:22:01.343 [INFO][3113] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="3e6e2ce4bf09e8646818b07652040b83f047bc208a2744a1e9bbf06cf3437233" Sep 6 00:22:01.607878 env[1194]: 2025-09-06 00:22:01.344 [INFO][3113] cni-plugin/dataplane_linux.go 559: Deleting workload's device in netns. ContainerID="3e6e2ce4bf09e8646818b07652040b83f047bc208a2744a1e9bbf06cf3437233" iface="eth0" netns="/var/run/netns/cni-7d73382e-59fa-3259-ec35-e4a8f31d54a8" Sep 6 00:22:01.607878 env[1194]: 2025-09-06 00:22:01.345 [INFO][3113] cni-plugin/dataplane_linux.go 570: Entered netns, deleting veth. ContainerID="3e6e2ce4bf09e8646818b07652040b83f047bc208a2744a1e9bbf06cf3437233" iface="eth0" netns="/var/run/netns/cni-7d73382e-59fa-3259-ec35-e4a8f31d54a8" Sep 6 00:22:01.607878 env[1194]: 2025-09-06 00:22:01.346 [INFO][3113] cni-plugin/dataplane_linux.go 597: Workload's veth was already gone. Nothing to do. ContainerID="3e6e2ce4bf09e8646818b07652040b83f047bc208a2744a1e9bbf06cf3437233" iface="eth0" netns="/var/run/netns/cni-7d73382e-59fa-3259-ec35-e4a8f31d54a8" Sep 6 00:22:01.607878 env[1194]: 2025-09-06 00:22:01.346 [INFO][3113] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="3e6e2ce4bf09e8646818b07652040b83f047bc208a2744a1e9bbf06cf3437233" Sep 6 00:22:01.607878 env[1194]: 2025-09-06 00:22:01.346 [INFO][3113] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="3e6e2ce4bf09e8646818b07652040b83f047bc208a2744a1e9bbf06cf3437233" Sep 6 00:22:01.607878 env[1194]: 2025-09-06 00:22:01.557 [INFO][3123] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="3e6e2ce4bf09e8646818b07652040b83f047bc208a2744a1e9bbf06cf3437233" HandleID="k8s-pod-network.3e6e2ce4bf09e8646818b07652040b83f047bc208a2744a1e9bbf06cf3437233" Workload="ci--3510.3.8--n--86fdecb492-k8s-whisker--6dbdbbb558--f4gjr-eth0" Sep 6 00:22:01.607878 env[1194]: 2025-09-06 00:22:01.561 [INFO][3123] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Sep 6 00:22:01.607878 env[1194]: 2025-09-06 00:22:01.562 [INFO][3123] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Sep 6 00:22:01.607878 env[1194]: 2025-09-06 00:22:01.579 [WARNING][3123] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="3e6e2ce4bf09e8646818b07652040b83f047bc208a2744a1e9bbf06cf3437233" HandleID="k8s-pod-network.3e6e2ce4bf09e8646818b07652040b83f047bc208a2744a1e9bbf06cf3437233" Workload="ci--3510.3.8--n--86fdecb492-k8s-whisker--6dbdbbb558--f4gjr-eth0" Sep 6 00:22:01.607878 env[1194]: 2025-09-06 00:22:01.580 [INFO][3123] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="3e6e2ce4bf09e8646818b07652040b83f047bc208a2744a1e9bbf06cf3437233" HandleID="k8s-pod-network.3e6e2ce4bf09e8646818b07652040b83f047bc208a2744a1e9bbf06cf3437233" Workload="ci--3510.3.8--n--86fdecb492-k8s-whisker--6dbdbbb558--f4gjr-eth0" Sep 6 00:22:01.607878 env[1194]: 2025-09-06 00:22:01.598 [INFO][3123] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Sep 6 00:22:01.607878 env[1194]: 2025-09-06 00:22:01.604 [INFO][3113] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="3e6e2ce4bf09e8646818b07652040b83f047bc208a2744a1e9bbf06cf3437233" Sep 6 00:22:01.612065 systemd[1]: run-netns-cni\x2d7d73382e\x2d59fa\x2d3259\x2dec35\x2de4a8f31d54a8.mount: Deactivated successfully. Sep 6 00:22:01.615061 env[1194]: time="2025-09-06T00:22:01.614996547Z" level=info msg="TearDown network for sandbox \"3e6e2ce4bf09e8646818b07652040b83f047bc208a2744a1e9bbf06cf3437233\" successfully" Sep 6 00:22:01.615272 env[1194]: time="2025-09-06T00:22:01.615209118Z" level=info msg="StopPodSandbox for \"3e6e2ce4bf09e8646818b07652040b83f047bc208a2744a1e9bbf06cf3437233\" returns successfully" Sep 6 00:22:01.648024 systemd[1]: run-containerd-runc-k8s.io-c7159642d54acd22b7418e53840b3b4adaaa2a0a2a24b380678df942301126ff-runc.6bgP38.mount: Deactivated successfully. Sep 6 00:22:01.750626 kubelet[1933]: I0906 00:22:01.750146 1933 reconciler_common.go:159] "operationExecutor.UnmountVolume started for volume \"whisker-ca-bundle\" (UniqueName: \"kubernetes.io/configmap/1397c9b2-c600-4219-95d8-4497169633b1-whisker-ca-bundle\") pod \"1397c9b2-c600-4219-95d8-4497169633b1\" (UID: \"1397c9b2-c600-4219-95d8-4497169633b1\") " Sep 6 00:22:01.750626 kubelet[1933]: I0906 00:22:01.750472 1933 reconciler_common.go:159] "operationExecutor.UnmountVolume started for volume \"kube-api-access-dnbxf\" (UniqueName: \"kubernetes.io/projected/1397c9b2-c600-4219-95d8-4497169633b1-kube-api-access-dnbxf\") pod \"1397c9b2-c600-4219-95d8-4497169633b1\" (UID: \"1397c9b2-c600-4219-95d8-4497169633b1\") " Sep 6 00:22:01.750626 kubelet[1933]: I0906 00:22:01.750513 1933 reconciler_common.go:159] "operationExecutor.UnmountVolume started for volume \"whisker-backend-key-pair\" (UniqueName: \"kubernetes.io/secret/1397c9b2-c600-4219-95d8-4497169633b1-whisker-backend-key-pair\") pod \"1397c9b2-c600-4219-95d8-4497169633b1\" (UID: \"1397c9b2-c600-4219-95d8-4497169633b1\") " Sep 6 00:22:01.765198 kubelet[1933]: I0906 00:22:01.759640 1933 operation_generator.go:803] UnmountVolume.TearDown succeeded for volume "kubernetes.io/configmap/1397c9b2-c600-4219-95d8-4497169633b1-whisker-ca-bundle" (OuterVolumeSpecName: "whisker-ca-bundle") pod "1397c9b2-c600-4219-95d8-4497169633b1" (UID: "1397c9b2-c600-4219-95d8-4497169633b1"). InnerVolumeSpecName "whisker-ca-bundle". PluginName "kubernetes.io/configmap", VolumeGidValue "" Sep 6 00:22:01.770418 systemd[1]: var-lib-kubelet-pods-1397c9b2\x2dc600\x2d4219\x2d95d8\x2d4497169633b1-volumes-kubernetes.io\x7eprojected-kube\x2dapi\x2daccess\x2ddnbxf.mount: Deactivated successfully. Sep 6 00:22:01.773272 kubelet[1933]: I0906 00:22:01.773088 1933 operation_generator.go:803] UnmountVolume.TearDown succeeded for volume "kubernetes.io/projected/1397c9b2-c600-4219-95d8-4497169633b1-kube-api-access-dnbxf" (OuterVolumeSpecName: "kube-api-access-dnbxf") pod "1397c9b2-c600-4219-95d8-4497169633b1" (UID: "1397c9b2-c600-4219-95d8-4497169633b1"). InnerVolumeSpecName "kube-api-access-dnbxf". PluginName "kubernetes.io/projected", VolumeGidValue "" Sep 6 00:22:01.776690 kubelet[1933]: I0906 00:22:01.776641 1933 operation_generator.go:803] UnmountVolume.TearDown succeeded for volume "kubernetes.io/secret/1397c9b2-c600-4219-95d8-4497169633b1-whisker-backend-key-pair" (OuterVolumeSpecName: "whisker-backend-key-pair") pod "1397c9b2-c600-4219-95d8-4497169633b1" (UID: "1397c9b2-c600-4219-95d8-4497169633b1"). InnerVolumeSpecName "whisker-backend-key-pair". PluginName "kubernetes.io/secret", VolumeGidValue "" Sep 6 00:22:01.851983 kubelet[1933]: I0906 00:22:01.851927 1933 reconciler_common.go:293] "Volume detached for volume \"whisker-backend-key-pair\" (UniqueName: \"kubernetes.io/secret/1397c9b2-c600-4219-95d8-4497169633b1-whisker-backend-key-pair\") on node \"ci-3510.3.8-n-86fdecb492\" DevicePath \"\"" Sep 6 00:22:01.851983 kubelet[1933]: I0906 00:22:01.851975 1933 reconciler_common.go:293] "Volume detached for volume \"whisker-ca-bundle\" (UniqueName: \"kubernetes.io/configmap/1397c9b2-c600-4219-95d8-4497169633b1-whisker-ca-bundle\") on node \"ci-3510.3.8-n-86fdecb492\" DevicePath \"\"" Sep 6 00:22:01.851983 kubelet[1933]: I0906 00:22:01.851994 1933 reconciler_common.go:293] "Volume detached for volume \"kube-api-access-dnbxf\" (UniqueName: \"kubernetes.io/projected/1397c9b2-c600-4219-95d8-4497169633b1-kube-api-access-dnbxf\") on node \"ci-3510.3.8-n-86fdecb492\" DevicePath \"\"" Sep 6 00:22:02.322149 systemd[1]: var-lib-kubelet-pods-1397c9b2\x2dc600\x2d4219\x2d95d8\x2d4497169633b1-volumes-kubernetes.io\x7esecret-whisker\x2dbackend\x2dkey\x2dpair.mount: Deactivated successfully. Sep 6 00:22:02.598111 systemd[1]: Removed slice kubepods-besteffort-pod1397c9b2_c600_4219_95d8_4497169633b1.slice. Sep 6 00:22:02.626735 systemd[1]: run-containerd-runc-k8s.io-c7159642d54acd22b7418e53840b3b4adaaa2a0a2a24b380678df942301126ff-runc.LopJsV.mount: Deactivated successfully. Sep 6 00:22:02.728931 systemd[1]: Created slice kubepods-besteffort-pod38a337ad_b6c0_43ea_a253_22b4b9e702ae.slice. Sep 6 00:22:02.859634 kubelet[1933]: I0906 00:22:02.859467 1933 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"whisker-backend-key-pair\" (UniqueName: \"kubernetes.io/secret/38a337ad-b6c0-43ea-a253-22b4b9e702ae-whisker-backend-key-pair\") pod \"whisker-644c87b7f7-mbfmn\" (UID: \"38a337ad-b6c0-43ea-a253-22b4b9e702ae\") " pod="calico-system/whisker-644c87b7f7-mbfmn" Sep 6 00:22:02.860195 kubelet[1933]: I0906 00:22:02.860104 1933 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"whisker-ca-bundle\" (UniqueName: \"kubernetes.io/configmap/38a337ad-b6c0-43ea-a253-22b4b9e702ae-whisker-ca-bundle\") pod \"whisker-644c87b7f7-mbfmn\" (UID: \"38a337ad-b6c0-43ea-a253-22b4b9e702ae\") " pod="calico-system/whisker-644c87b7f7-mbfmn" Sep 6 00:22:02.860195 kubelet[1933]: I0906 00:22:02.860152 1933 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-j7qwq\" (UniqueName: \"kubernetes.io/projected/38a337ad-b6c0-43ea-a253-22b4b9e702ae-kube-api-access-j7qwq\") pod \"whisker-644c87b7f7-mbfmn\" (UID: \"38a337ad-b6c0-43ea-a253-22b4b9e702ae\") " pod="calico-system/whisker-644c87b7f7-mbfmn" Sep 6 00:22:03.032000 audit[3242]: AVC avc: denied { write } for pid=3242 comm="tee" name="fd" dev="proc" ino=24954 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0 Sep 6 00:22:03.032000 audit[3242]: SYSCALL arch=c000003e syscall=257 success=yes exit=3 a0=ffffff9c a1=7ffef56017bd a2=241 a3=1b6 items=1 ppid=3203 pid=3242 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tee" exe="/usr/bin/coreutils" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:22:03.032000 audit: CWD cwd="/etc/service/enabled/node-status-reporter/log" Sep 6 00:22:03.032000 audit: PATH item=0 name="/dev/fd/63" inode=24431 dev=00:0c mode=010600 ouid=0 ogid=0 rdev=00:00 obj=system_u:system_r:kernel_t:s0 nametype=NORMAL cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Sep 6 00:22:03.032000 audit: PROCTITLE proctitle=2F7573722F62696E2F636F72657574696C73002D2D636F72657574696C732D70726F672D73686562616E673D746565002F7573722F62696E2F746565002F6465762F66642F3633 Sep 6 00:22:03.033795 env[1194]: time="2025-09-06T00:22:03.033460463Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:whisker-644c87b7f7-mbfmn,Uid:38a337ad-b6c0-43ea-a253-22b4b9e702ae,Namespace:calico-system,Attempt:0,}" Sep 6 00:22:03.034000 audit[3239]: AVC avc: denied { write } for pid=3239 comm="tee" name="fd" dev="proc" ino=24958 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0 Sep 6 00:22:03.034000 audit[3239]: SYSCALL arch=c000003e syscall=257 success=yes exit=3 a0=ffffff9c a1=7ffdccf237cc a2=241 a3=1b6 items=1 ppid=3198 pid=3239 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tee" exe="/usr/bin/coreutils" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:22:03.034000 audit: CWD cwd="/etc/service/enabled/bird6/log" Sep 6 00:22:03.034000 audit: PATH item=0 name="/dev/fd/63" inode=24430 dev=00:0c mode=010600 ouid=0 ogid=0 rdev=00:00 obj=system_u:system_r:kernel_t:s0 nametype=NORMAL cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Sep 6 00:22:03.034000 audit: PROCTITLE proctitle=2F7573722F62696E2F636F72657574696C73002D2D636F72657574696C732D70726F672D73686562616E673D746565002F7573722F62696E2F746565002F6465762F66642F3633 Sep 6 00:22:03.050000 audit[3261]: AVC avc: denied { write } for pid=3261 comm="tee" name="fd" dev="proc" ino=24461 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0 Sep 6 00:22:03.050000 audit[3261]: SYSCALL arch=c000003e syscall=257 success=yes exit=3 a0=ffffff9c a1=7fff1391f7cc a2=241 a3=1b6 items=1 ppid=3200 pid=3261 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tee" exe="/usr/bin/coreutils" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:22:03.050000 audit: CWD cwd="/etc/service/enabled/confd/log" Sep 6 00:22:03.050000 audit: PATH item=0 name="/dev/fd/63" inode=24960 dev=00:0c mode=010600 ouid=0 ogid=0 rdev=00:00 obj=system_u:system_r:kernel_t:s0 nametype=NORMAL cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Sep 6 00:22:03.050000 audit: PROCTITLE proctitle=2F7573722F62696E2F636F72657574696C73002D2D636F72657574696C732D70726F672D73686562616E673D746565002F7573722F62696E2F746565002F6465762F66642F3633 Sep 6 00:22:03.055000 audit[3250]: AVC avc: denied { write } for pid=3250 comm="tee" name="fd" dev="proc" ino=24978 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0 Sep 6 00:22:03.055000 audit[3250]: SYSCALL arch=c000003e syscall=257 success=yes exit=3 a0=ffffff9c a1=7ffdbe6527cd a2=241 a3=1b6 items=1 ppid=3191 pid=3250 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tee" exe="/usr/bin/coreutils" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:22:03.055000 audit: CWD cwd="/etc/service/enabled/bird/log" Sep 6 00:22:03.055000 audit: PATH item=0 name="/dev/fd/63" inode=24949 dev=00:0c mode=010600 ouid=0 ogid=0 rdev=00:00 obj=system_u:system_r:kernel_t:s0 nametype=NORMAL cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Sep 6 00:22:03.055000 audit: PROCTITLE proctitle=2F7573722F62696E2F636F72657574696C73002D2D636F72657574696C732D70726F672D73686562616E673D746565002F7573722F62696E2F746565002F6465762F66642F3633 Sep 6 00:22:03.062000 audit[3246]: AVC avc: denied { write } for pid=3246 comm="tee" name="fd" dev="proc" ino=24983 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0 Sep 6 00:22:03.062000 audit[3246]: SYSCALL arch=c000003e syscall=257 success=yes exit=3 a0=ffffff9c a1=7fffd9e7d7cc a2=241 a3=1b6 items=1 ppid=3205 pid=3246 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tee" exe="/usr/bin/coreutils" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:22:03.062000 audit: CWD cwd="/etc/service/enabled/felix/log" Sep 6 00:22:03.062000 audit: PATH item=0 name="/dev/fd/63" inode=24434 dev=00:0c mode=010600 ouid=0 ogid=0 rdev=00:00 obj=system_u:system_r:kernel_t:s0 nametype=NORMAL cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Sep 6 00:22:03.062000 audit: PROCTITLE proctitle=2F7573722F62696E2F636F72657574696C73002D2D636F72657574696C732D70726F672D73686562616E673D746565002F7573722F62696E2F746565002F6465762F66642F3633 Sep 6 00:22:03.063000 audit[3237]: AVC avc: denied { write } for pid=3237 comm="tee" name="fd" dev="proc" ino=24987 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0 Sep 6 00:22:03.063000 audit[3237]: SYSCALL arch=c000003e syscall=257 success=yes exit=3 a0=ffffff9c a1=7fff49cb77ce a2=241 a3=1b6 items=1 ppid=3196 pid=3237 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tee" exe="/usr/bin/coreutils" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:22:03.063000 audit: CWD cwd="/etc/service/enabled/cni/log" Sep 6 00:22:03.063000 audit: PATH item=0 name="/dev/fd/63" inode=24427 dev=00:0c mode=010600 ouid=0 ogid=0 rdev=00:00 obj=system_u:system_r:kernel_t:s0 nametype=NORMAL cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Sep 6 00:22:03.063000 audit: PROCTITLE proctitle=2F7573722F62696E2F636F72657574696C73002D2D636F72657574696C732D70726F672D73686562616E673D746565002F7573722F62696E2F746565002F6465762F66642F3633 Sep 6 00:22:03.064000 audit[3248]: AVC avc: denied { write } for pid=3248 comm="tee" name="fd" dev="proc" ino=24991 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0 Sep 6 00:22:03.064000 audit[3248]: SYSCALL arch=c000003e syscall=257 success=yes exit=3 a0=ffffff9c a1=7ffedc8a07bc a2=241 a3=1b6 items=1 ppid=3193 pid=3248 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tee" exe="/usr/bin/coreutils" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:22:03.064000 audit: CWD cwd="/etc/service/enabled/allocate-tunnel-addrs/log" Sep 6 00:22:03.064000 audit: PATH item=0 name="/dev/fd/63" inode=24948 dev=00:0c mode=010600 ouid=0 ogid=0 rdev=00:00 obj=system_u:system_r:kernel_t:s0 nametype=NORMAL cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Sep 6 00:22:03.064000 audit: PROCTITLE proctitle=2F7573722F62696E2F636F72657574696C73002D2D636F72657574696C732D70726F672D73686562616E673D746565002F7573722F62696E2F746565002F6465762F66642F3633 Sep 6 00:22:03.261814 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): eth0: link becomes ready Sep 6 00:22:03.261976 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): cali7bca7169ccf: link becomes ready Sep 6 00:22:03.267096 systemd-networkd[1004]: cali7bca7169ccf: Link UP Sep 6 00:22:03.268841 systemd-networkd[1004]: cali7bca7169ccf: Gained carrier Sep 6 00:22:03.306606 env[1194]: 2025-09-06 00:22:03.106 [INFO][3266] cni-plugin/utils.go 100: File /var/lib/calico/mtu does not exist Sep 6 00:22:03.306606 env[1194]: 2025-09-06 00:22:03.121 [INFO][3266] cni-plugin/plugin.go 340: Calico CNI found existing endpoint: &{{WorkloadEndpoint projectcalico.org/v3} {ci--3510.3.8--n--86fdecb492-k8s-whisker--644c87b7f7--mbfmn-eth0 whisker-644c87b7f7- calico-system 38a337ad-b6c0-43ea-a253-22b4b9e702ae 955 0 2025-09-06 00:22:02 +0000 UTC map[app.kubernetes.io/name:whisker k8s-app:whisker pod-template-hash:644c87b7f7 projectcalico.org/namespace:calico-system projectcalico.org/orchestrator:k8s projectcalico.org/serviceaccount:whisker] map[] [] [] []} {k8s ci-3510.3.8-n-86fdecb492 whisker-644c87b7f7-mbfmn eth0 whisker [] [] [kns.calico-system ksa.calico-system.whisker] cali7bca7169ccf [] [] }} ContainerID="e4c7a46e6700b7479b88e5a8c2b11d17dda22ce2dad2275f4ac6804407270f54" Namespace="calico-system" Pod="whisker-644c87b7f7-mbfmn" WorkloadEndpoint="ci--3510.3.8--n--86fdecb492-k8s-whisker--644c87b7f7--mbfmn-" Sep 6 00:22:03.306606 env[1194]: 2025-09-06 00:22:03.121 [INFO][3266] cni-plugin/k8s.go 74: Extracted identifiers for CmdAddK8s ContainerID="e4c7a46e6700b7479b88e5a8c2b11d17dda22ce2dad2275f4ac6804407270f54" Namespace="calico-system" Pod="whisker-644c87b7f7-mbfmn" WorkloadEndpoint="ci--3510.3.8--n--86fdecb492-k8s-whisker--644c87b7f7--mbfmn-eth0" Sep 6 00:22:03.306606 env[1194]: 2025-09-06 00:22:03.169 [INFO][3284] ipam/ipam_plugin.go 225: Calico CNI IPAM request count IPv4=1 IPv6=0 ContainerID="e4c7a46e6700b7479b88e5a8c2b11d17dda22ce2dad2275f4ac6804407270f54" HandleID="k8s-pod-network.e4c7a46e6700b7479b88e5a8c2b11d17dda22ce2dad2275f4ac6804407270f54" Workload="ci--3510.3.8--n--86fdecb492-k8s-whisker--644c87b7f7--mbfmn-eth0" Sep 6 00:22:03.306606 env[1194]: 2025-09-06 00:22:03.170 [INFO][3284] ipam/ipam_plugin.go 265: Auto assigning IP ContainerID="e4c7a46e6700b7479b88e5a8c2b11d17dda22ce2dad2275f4ac6804407270f54" HandleID="k8s-pod-network.e4c7a46e6700b7479b88e5a8c2b11d17dda22ce2dad2275f4ac6804407270f54" Workload="ci--3510.3.8--n--86fdecb492-k8s-whisker--644c87b7f7--mbfmn-eth0" assignArgs=ipam.AutoAssignArgs{Num4:1, Num6:0, HandleID:(*string)(0xc0002d5030), Attrs:map[string]string{"namespace":"calico-system", "node":"ci-3510.3.8-n-86fdecb492", "pod":"whisker-644c87b7f7-mbfmn", "timestamp":"2025-09-06 00:22:03.169747971 +0000 UTC"}, Hostname:"ci-3510.3.8-n-86fdecb492", IPv4Pools:[]net.IPNet{}, IPv6Pools:[]net.IPNet{}, MaxBlocksPerHost:0, HostReservedAttrIPv4s:(*ipam.HostReservedAttr)(nil), HostReservedAttrIPv6s:(*ipam.HostReservedAttr)(nil), IntendedUse:"Workload"} Sep 6 00:22:03.306606 env[1194]: 2025-09-06 00:22:03.170 [INFO][3284] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Sep 6 00:22:03.306606 env[1194]: 2025-09-06 00:22:03.170 [INFO][3284] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Sep 6 00:22:03.306606 env[1194]: 2025-09-06 00:22:03.170 [INFO][3284] ipam/ipam.go 110: Auto-assign 1 ipv4, 0 ipv6 addrs for host 'ci-3510.3.8-n-86fdecb492' Sep 6 00:22:03.306606 env[1194]: 2025-09-06 00:22:03.187 [INFO][3284] ipam/ipam.go 691: Looking up existing affinities for host handle="k8s-pod-network.e4c7a46e6700b7479b88e5a8c2b11d17dda22ce2dad2275f4ac6804407270f54" host="ci-3510.3.8-n-86fdecb492" Sep 6 00:22:03.306606 env[1194]: 2025-09-06 00:22:03.206 [INFO][3284] ipam/ipam.go 394: Looking up existing affinities for host host="ci-3510.3.8-n-86fdecb492" Sep 6 00:22:03.306606 env[1194]: 2025-09-06 00:22:03.212 [INFO][3284] ipam/ipam.go 511: Trying affinity for 192.168.14.128/26 host="ci-3510.3.8-n-86fdecb492" Sep 6 00:22:03.306606 env[1194]: 2025-09-06 00:22:03.215 [INFO][3284] ipam/ipam.go 158: Attempting to load block cidr=192.168.14.128/26 host="ci-3510.3.8-n-86fdecb492" Sep 6 00:22:03.306606 env[1194]: 2025-09-06 00:22:03.218 [INFO][3284] ipam/ipam.go 235: Affinity is confirmed and block has been loaded cidr=192.168.14.128/26 host="ci-3510.3.8-n-86fdecb492" Sep 6 00:22:03.306606 env[1194]: 2025-09-06 00:22:03.218 [INFO][3284] ipam/ipam.go 1220: Attempting to assign 1 addresses from block block=192.168.14.128/26 handle="k8s-pod-network.e4c7a46e6700b7479b88e5a8c2b11d17dda22ce2dad2275f4ac6804407270f54" host="ci-3510.3.8-n-86fdecb492" Sep 6 00:22:03.306606 env[1194]: 2025-09-06 00:22:03.220 [INFO][3284] ipam/ipam.go 1764: Creating new handle: k8s-pod-network.e4c7a46e6700b7479b88e5a8c2b11d17dda22ce2dad2275f4ac6804407270f54 Sep 6 00:22:03.306606 env[1194]: 2025-09-06 00:22:03.229 [INFO][3284] ipam/ipam.go 1243: Writing block in order to claim IPs block=192.168.14.128/26 handle="k8s-pod-network.e4c7a46e6700b7479b88e5a8c2b11d17dda22ce2dad2275f4ac6804407270f54" host="ci-3510.3.8-n-86fdecb492" Sep 6 00:22:03.306606 env[1194]: 2025-09-06 00:22:03.236 [INFO][3284] ipam/ipam.go 1256: Successfully claimed IPs: [192.168.14.129/26] block=192.168.14.128/26 handle="k8s-pod-network.e4c7a46e6700b7479b88e5a8c2b11d17dda22ce2dad2275f4ac6804407270f54" host="ci-3510.3.8-n-86fdecb492" Sep 6 00:22:03.306606 env[1194]: 2025-09-06 00:22:03.236 [INFO][3284] ipam/ipam.go 878: Auto-assigned 1 out of 1 IPv4s: [192.168.14.129/26] handle="k8s-pod-network.e4c7a46e6700b7479b88e5a8c2b11d17dda22ce2dad2275f4ac6804407270f54" host="ci-3510.3.8-n-86fdecb492" Sep 6 00:22:03.306606 env[1194]: 2025-09-06 00:22:03.236 [INFO][3284] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Sep 6 00:22:03.306606 env[1194]: 2025-09-06 00:22:03.236 [INFO][3284] ipam/ipam_plugin.go 283: Calico CNI IPAM assigned addresses IPv4=[192.168.14.129/26] IPv6=[] ContainerID="e4c7a46e6700b7479b88e5a8c2b11d17dda22ce2dad2275f4ac6804407270f54" HandleID="k8s-pod-network.e4c7a46e6700b7479b88e5a8c2b11d17dda22ce2dad2275f4ac6804407270f54" Workload="ci--3510.3.8--n--86fdecb492-k8s-whisker--644c87b7f7--mbfmn-eth0" Sep 6 00:22:03.307900 env[1194]: 2025-09-06 00:22:03.240 [INFO][3266] cni-plugin/k8s.go 418: Populated endpoint ContainerID="e4c7a46e6700b7479b88e5a8c2b11d17dda22ce2dad2275f4ac6804407270f54" Namespace="calico-system" Pod="whisker-644c87b7f7-mbfmn" WorkloadEndpoint="ci--3510.3.8--n--86fdecb492-k8s-whisker--644c87b7f7--mbfmn-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ci--3510.3.8--n--86fdecb492-k8s-whisker--644c87b7f7--mbfmn-eth0", GenerateName:"whisker-644c87b7f7-", Namespace:"calico-system", SelfLink:"", UID:"38a337ad-b6c0-43ea-a253-22b4b9e702ae", ResourceVersion:"955", Generation:0, CreationTimestamp:time.Date(2025, time.September, 6, 0, 22, 2, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"whisker", "k8s-app":"whisker", "pod-template-hash":"644c87b7f7", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"whisker"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ci-3510.3.8-n-86fdecb492", ContainerID:"", Pod:"whisker-644c87b7f7-mbfmn", Endpoint:"eth0", ServiceAccountName:"whisker", IPNetworks:[]string{"192.168.14.129/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.whisker"}, InterfaceName:"cali7bca7169ccf", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Sep 6 00:22:03.307900 env[1194]: 2025-09-06 00:22:03.240 [INFO][3266] cni-plugin/k8s.go 419: Calico CNI using IPs: [192.168.14.129/32] ContainerID="e4c7a46e6700b7479b88e5a8c2b11d17dda22ce2dad2275f4ac6804407270f54" Namespace="calico-system" Pod="whisker-644c87b7f7-mbfmn" WorkloadEndpoint="ci--3510.3.8--n--86fdecb492-k8s-whisker--644c87b7f7--mbfmn-eth0" Sep 6 00:22:03.307900 env[1194]: 2025-09-06 00:22:03.240 [INFO][3266] cni-plugin/dataplane_linux.go 69: Setting the host side veth name to cali7bca7169ccf ContainerID="e4c7a46e6700b7479b88e5a8c2b11d17dda22ce2dad2275f4ac6804407270f54" Namespace="calico-system" Pod="whisker-644c87b7f7-mbfmn" WorkloadEndpoint="ci--3510.3.8--n--86fdecb492-k8s-whisker--644c87b7f7--mbfmn-eth0" Sep 6 00:22:03.307900 env[1194]: 2025-09-06 00:22:03.270 [INFO][3266] cni-plugin/dataplane_linux.go 508: Disabling IPv4 forwarding ContainerID="e4c7a46e6700b7479b88e5a8c2b11d17dda22ce2dad2275f4ac6804407270f54" Namespace="calico-system" Pod="whisker-644c87b7f7-mbfmn" WorkloadEndpoint="ci--3510.3.8--n--86fdecb492-k8s-whisker--644c87b7f7--mbfmn-eth0" Sep 6 00:22:03.307900 env[1194]: 2025-09-06 00:22:03.271 [INFO][3266] cni-plugin/k8s.go 446: Added Mac, interface name, and active container ID to endpoint ContainerID="e4c7a46e6700b7479b88e5a8c2b11d17dda22ce2dad2275f4ac6804407270f54" Namespace="calico-system" Pod="whisker-644c87b7f7-mbfmn" WorkloadEndpoint="ci--3510.3.8--n--86fdecb492-k8s-whisker--644c87b7f7--mbfmn-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ci--3510.3.8--n--86fdecb492-k8s-whisker--644c87b7f7--mbfmn-eth0", GenerateName:"whisker-644c87b7f7-", Namespace:"calico-system", SelfLink:"", UID:"38a337ad-b6c0-43ea-a253-22b4b9e702ae", ResourceVersion:"955", Generation:0, CreationTimestamp:time.Date(2025, time.September, 6, 0, 22, 2, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"whisker", "k8s-app":"whisker", "pod-template-hash":"644c87b7f7", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"whisker"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ci-3510.3.8-n-86fdecb492", ContainerID:"e4c7a46e6700b7479b88e5a8c2b11d17dda22ce2dad2275f4ac6804407270f54", Pod:"whisker-644c87b7f7-mbfmn", Endpoint:"eth0", ServiceAccountName:"whisker", IPNetworks:[]string{"192.168.14.129/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.whisker"}, InterfaceName:"cali7bca7169ccf", MAC:"c2:a0:39:11:56:2d", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Sep 6 00:22:03.307900 env[1194]: 2025-09-06 00:22:03.301 [INFO][3266] cni-plugin/k8s.go 532: Wrote updated endpoint to datastore ContainerID="e4c7a46e6700b7479b88e5a8c2b11d17dda22ce2dad2275f4ac6804407270f54" Namespace="calico-system" Pod="whisker-644c87b7f7-mbfmn" WorkloadEndpoint="ci--3510.3.8--n--86fdecb492-k8s-whisker--644c87b7f7--mbfmn-eth0" Sep 6 00:22:03.345593 env[1194]: time="2025-09-06T00:22:03.345459374Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Sep 6 00:22:03.345871 env[1194]: time="2025-09-06T00:22:03.345819599Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Sep 6 00:22:03.346029 env[1194]: time="2025-09-06T00:22:03.346002351Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Sep 6 00:22:03.346372 env[1194]: time="2025-09-06T00:22:03.346339235Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/e4c7a46e6700b7479b88e5a8c2b11d17dda22ce2dad2275f4ac6804407270f54 pid=3307 runtime=io.containerd.runc.v2 Sep 6 00:22:03.373365 systemd[1]: Started cri-containerd-e4c7a46e6700b7479b88e5a8c2b11d17dda22ce2dad2275f4ac6804407270f54.scope. Sep 6 00:22:03.383892 systemd[1]: run-containerd-runc-k8s.io-e4c7a46e6700b7479b88e5a8c2b11d17dda22ce2dad2275f4ac6804407270f54-runc.uLESFX.mount: Deactivated successfully. Sep 6 00:22:03.400373 kubelet[1933]: I0906 00:22:03.400323 1933 kubelet_volumes.go:163] "Cleaned up orphaned pod volumes dir" podUID="1397c9b2-c600-4219-95d8-4497169633b1" path="/var/lib/kubelet/pods/1397c9b2-c600-4219-95d8-4497169633b1/volumes" Sep 6 00:22:03.421000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:03.421000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:03.421000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:03.421000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:03.421000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:03.421000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:03.421000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:03.421000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:03.421000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:03.421000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:03.421000 audit: BPF prog-id=142 op=LOAD Sep 6 00:22:03.421000 audit[3317]: AVC avc: denied { bpf } for pid=3317 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:03.421000 audit[3317]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c00014dc48 a2=10 a3=1c items=0 ppid=3307 pid=3317 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:22:03.421000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6534633761343665363730306237343739623838653561386332623131 Sep 6 00:22:03.421000 audit[3317]: AVC avc: denied { perfmon } for pid=3317 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:03.421000 audit[3317]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c00014d6b0 a2=3c a3=c items=0 ppid=3307 pid=3317 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:22:03.421000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6534633761343665363730306237343739623838653561386332623131 Sep 6 00:22:03.421000 audit[3317]: AVC avc: denied { bpf } for pid=3317 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:03.421000 audit[3317]: AVC avc: denied { bpf } for pid=3317 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:03.421000 audit[3317]: AVC avc: denied { bpf } for pid=3317 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:03.421000 audit[3317]: AVC avc: denied { perfmon } for pid=3317 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:03.421000 audit[3317]: AVC avc: denied { perfmon } for pid=3317 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:03.421000 audit[3317]: AVC avc: denied { perfmon } for pid=3317 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:03.421000 audit[3317]: AVC avc: denied { perfmon } for pid=3317 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:03.421000 audit[3317]: AVC avc: denied { perfmon } for pid=3317 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:03.421000 audit[3317]: AVC avc: denied { bpf } for pid=3317 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:03.421000 audit[3317]: AVC avc: denied { bpf } for pid=3317 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:03.421000 audit: BPF prog-id=143 op=LOAD Sep 6 00:22:03.421000 audit[3317]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c00014d9d8 a2=78 a3=c000385520 items=0 ppid=3307 pid=3317 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:22:03.421000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6534633761343665363730306237343739623838653561386332623131 Sep 6 00:22:03.421000 audit[3317]: AVC avc: denied { bpf } for pid=3317 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:03.421000 audit[3317]: AVC avc: denied { bpf } for pid=3317 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:03.421000 audit[3317]: AVC avc: denied { perfmon } for pid=3317 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:03.421000 audit[3317]: AVC avc: denied { perfmon } for pid=3317 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:03.421000 audit[3317]: AVC avc: denied { perfmon } for pid=3317 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:03.421000 audit[3317]: AVC avc: denied { perfmon } for pid=3317 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:03.421000 audit[3317]: AVC avc: denied { perfmon } for pid=3317 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:03.421000 audit[3317]: AVC avc: denied { bpf } for pid=3317 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:03.421000 audit[3317]: AVC avc: denied { bpf } for pid=3317 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:03.421000 audit: BPF prog-id=144 op=LOAD Sep 6 00:22:03.421000 audit[3317]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c00014d770 a2=78 a3=c000385568 items=0 ppid=3307 pid=3317 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:22:03.421000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6534633761343665363730306237343739623838653561386332623131 Sep 6 00:22:03.421000 audit: BPF prog-id=144 op=UNLOAD Sep 6 00:22:03.421000 audit: BPF prog-id=143 op=UNLOAD Sep 6 00:22:03.421000 audit[3317]: AVC avc: denied { bpf } for pid=3317 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:03.421000 audit[3317]: AVC avc: denied { bpf } for pid=3317 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:03.421000 audit[3317]: AVC avc: denied { bpf } for pid=3317 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:03.421000 audit[3317]: AVC avc: denied { perfmon } for pid=3317 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:03.421000 audit[3317]: AVC avc: denied { perfmon } for pid=3317 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:03.421000 audit[3317]: AVC avc: denied { perfmon } for pid=3317 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:03.421000 audit[3317]: AVC avc: denied { perfmon } for pid=3317 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:03.421000 audit[3317]: AVC avc: denied { perfmon } for pid=3317 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:03.421000 audit[3317]: AVC avc: denied { bpf } for pid=3317 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:03.421000 audit[3317]: AVC avc: denied { bpf } for pid=3317 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:03.421000 audit: BPF prog-id=145 op=LOAD Sep 6 00:22:03.421000 audit[3317]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c00014dc30 a2=78 a3=c000385978 items=0 ppid=3307 pid=3317 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:22:03.421000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6534633761343665363730306237343739623838653561386332623131 Sep 6 00:22:03.468633 env[1194]: time="2025-09-06T00:22:03.468582148Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:whisker-644c87b7f7-mbfmn,Uid:38a337ad-b6c0-43ea-a253-22b4b9e702ae,Namespace:calico-system,Attempt:0,} returns sandbox id \"e4c7a46e6700b7479b88e5a8c2b11d17dda22ce2dad2275f4ac6804407270f54\"" Sep 6 00:22:03.471455 env[1194]: time="2025-09-06T00:22:03.470961879Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/whisker:v3.30.3\"" Sep 6 00:22:03.688000 audit[3368]: AVC avc: denied { bpf } for pid=3368 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:03.688000 audit[3368]: AVC avc: denied { bpf } for pid=3368 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:03.688000 audit[3368]: AVC avc: denied { perfmon } for pid=3368 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:03.688000 audit[3368]: AVC avc: denied { perfmon } for pid=3368 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:03.688000 audit[3368]: AVC avc: denied { perfmon } for pid=3368 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:03.688000 audit[3368]: AVC avc: denied { perfmon } for pid=3368 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:03.688000 audit[3368]: AVC avc: denied { perfmon } for pid=3368 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:03.688000 audit[3368]: AVC avc: denied { bpf } for pid=3368 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:03.688000 audit[3368]: AVC avc: denied { bpf } for pid=3368 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:03.688000 audit: BPF prog-id=146 op=LOAD Sep 6 00:22:03.688000 audit[3368]: SYSCALL arch=c000003e syscall=321 success=yes exit=3 a0=5 a1=7fff07ba58f0 a2=98 a3=1fffffffffffffff items=0 ppid=3206 pid=3368 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:22:03.688000 audit: PROCTITLE proctitle=627066746F6F6C006D617000637265617465002F7379732F66732F6270662F74632F676C6F62616C732F63616C695F63746C625F70726F677300747970650070726F675F6172726179006B657900340076616C7565003400656E74726965730033006E616D650063616C695F63746C625F70726F677300666C6167730030 Sep 6 00:22:03.695000 audit: BPF prog-id=146 op=UNLOAD Sep 6 00:22:03.695000 audit[3368]: AVC avc: denied { bpf } for pid=3368 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:03.695000 audit[3368]: AVC avc: denied { bpf } for pid=3368 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:03.695000 audit[3368]: AVC avc: denied { perfmon } for pid=3368 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:03.695000 audit[3368]: AVC avc: denied { perfmon } for pid=3368 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:03.695000 audit[3368]: AVC avc: denied { perfmon } for pid=3368 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:03.695000 audit[3368]: AVC avc: denied { perfmon } for pid=3368 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:03.695000 audit[3368]: AVC avc: denied { perfmon } for pid=3368 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:03.695000 audit[3368]: AVC avc: denied { bpf } for pid=3368 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:03.695000 audit[3368]: AVC avc: denied { bpf } for pid=3368 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:03.695000 audit: BPF prog-id=147 op=LOAD Sep 6 00:22:03.695000 audit[3368]: SYSCALL arch=c000003e syscall=321 success=yes exit=3 a0=5 a1=7fff07ba57d0 a2=94 a3=3 items=0 ppid=3206 pid=3368 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:22:03.695000 audit: PROCTITLE proctitle=627066746F6F6C006D617000637265617465002F7379732F66732F6270662F74632F676C6F62616C732F63616C695F63746C625F70726F677300747970650070726F675F6172726179006B657900340076616C7565003400656E74726965730033006E616D650063616C695F63746C625F70726F677300666C6167730030 Sep 6 00:22:03.696000 audit: BPF prog-id=147 op=UNLOAD Sep 6 00:22:03.696000 audit[3368]: AVC avc: denied { bpf } for pid=3368 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:03.696000 audit[3368]: AVC avc: denied { bpf } for pid=3368 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:03.696000 audit[3368]: AVC avc: denied { perfmon } for pid=3368 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:03.696000 audit[3368]: AVC avc: denied { perfmon } for pid=3368 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:03.696000 audit[3368]: AVC avc: denied { perfmon } for pid=3368 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:03.696000 audit[3368]: AVC avc: denied { perfmon } for pid=3368 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:03.696000 audit[3368]: AVC avc: denied { perfmon } for pid=3368 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:03.696000 audit[3368]: AVC avc: denied { bpf } for pid=3368 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:03.696000 audit[3368]: AVC avc: denied { bpf } for pid=3368 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:03.696000 audit: BPF prog-id=148 op=LOAD Sep 6 00:22:03.696000 audit[3368]: SYSCALL arch=c000003e syscall=321 success=yes exit=3 a0=5 a1=7fff07ba5810 a2=94 a3=7fff07ba59f0 items=0 ppid=3206 pid=3368 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:22:03.696000 audit: PROCTITLE proctitle=627066746F6F6C006D617000637265617465002F7379732F66732F6270662F74632F676C6F62616C732F63616C695F63746C625F70726F677300747970650070726F675F6172726179006B657900340076616C7565003400656E74726965730033006E616D650063616C695F63746C625F70726F677300666C6167730030 Sep 6 00:22:03.696000 audit: BPF prog-id=148 op=UNLOAD Sep 6 00:22:03.696000 audit[3368]: AVC avc: denied { perfmon } for pid=3368 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:03.696000 audit[3368]: SYSCALL arch=c000003e syscall=321 success=yes exit=3 a0=0 a1=7fff07ba58e0 a2=50 a3=a000000085 items=0 ppid=3206 pid=3368 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:22:03.696000 audit: PROCTITLE proctitle=627066746F6F6C006D617000637265617465002F7379732F66732F6270662F74632F676C6F62616C732F63616C695F63746C625F70726F677300747970650070726F675F6172726179006B657900340076616C7565003400656E74726965730033006E616D650063616C695F63746C625F70726F677300666C6167730030 Sep 6 00:22:03.701000 audit[3369]: AVC avc: denied { bpf } for pid=3369 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:03.701000 audit[3369]: AVC avc: denied { bpf } for pid=3369 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:03.701000 audit[3369]: AVC avc: denied { perfmon } for pid=3369 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:03.701000 audit[3369]: AVC avc: denied { perfmon } for pid=3369 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:03.701000 audit[3369]: AVC avc: denied { perfmon } for pid=3369 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:03.701000 audit[3369]: AVC avc: denied { perfmon } for pid=3369 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:03.701000 audit[3369]: AVC avc: denied { perfmon } for pid=3369 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:03.701000 audit[3369]: AVC avc: denied { bpf } for pid=3369 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:03.701000 audit[3369]: AVC avc: denied { bpf } for pid=3369 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:03.701000 audit: BPF prog-id=149 op=LOAD Sep 6 00:22:03.701000 audit[3369]: SYSCALL arch=c000003e syscall=321 success=yes exit=3 a0=5 a1=7ffd06610ed0 a2=98 a3=3 items=0 ppid=3206 pid=3369 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:22:03.701000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Sep 6 00:22:03.701000 audit: BPF prog-id=149 op=UNLOAD Sep 6 00:22:03.702000 audit[3369]: AVC avc: denied { bpf } for pid=3369 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:03.702000 audit[3369]: AVC avc: denied { bpf } for pid=3369 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:03.702000 audit[3369]: AVC avc: denied { perfmon } for pid=3369 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:03.702000 audit[3369]: AVC avc: denied { perfmon } for pid=3369 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:03.702000 audit[3369]: AVC avc: denied { perfmon } for pid=3369 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:03.702000 audit[3369]: AVC avc: denied { perfmon } for pid=3369 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:03.702000 audit[3369]: AVC avc: denied { perfmon } for pid=3369 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:03.702000 audit[3369]: AVC avc: denied { bpf } for pid=3369 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:03.702000 audit[3369]: AVC avc: denied { bpf } for pid=3369 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:03.702000 audit: BPF prog-id=150 op=LOAD Sep 6 00:22:03.702000 audit[3369]: SYSCALL arch=c000003e syscall=321 success=yes exit=4 a0=5 a1=7ffd06610cc0 a2=94 a3=54428f items=0 ppid=3206 pid=3369 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:22:03.702000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Sep 6 00:22:03.702000 audit: BPF prog-id=150 op=UNLOAD Sep 6 00:22:03.702000 audit[3369]: AVC avc: denied { bpf } for pid=3369 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:03.702000 audit[3369]: AVC avc: denied { bpf } for pid=3369 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:03.702000 audit[3369]: AVC avc: denied { perfmon } for pid=3369 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:03.702000 audit[3369]: AVC avc: denied { perfmon } for pid=3369 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:03.702000 audit[3369]: AVC avc: denied { perfmon } for pid=3369 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:03.702000 audit[3369]: AVC avc: denied { perfmon } for pid=3369 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:03.702000 audit[3369]: AVC avc: denied { perfmon } for pid=3369 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:03.702000 audit[3369]: AVC avc: denied { bpf } for pid=3369 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:03.702000 audit[3369]: AVC avc: denied { bpf } for pid=3369 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:03.702000 audit: BPF prog-id=151 op=LOAD Sep 6 00:22:03.702000 audit[3369]: SYSCALL arch=c000003e syscall=321 success=yes exit=4 a0=5 a1=7ffd06610cf0 a2=94 a3=2 items=0 ppid=3206 pid=3369 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:22:03.702000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Sep 6 00:22:03.702000 audit: BPF prog-id=151 op=UNLOAD Sep 6 00:22:03.874000 audit[3369]: AVC avc: denied { bpf } for pid=3369 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:03.874000 audit[3369]: AVC avc: denied { bpf } for pid=3369 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:03.874000 audit[3369]: AVC avc: denied { perfmon } for pid=3369 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:03.874000 audit[3369]: AVC avc: denied { perfmon } for pid=3369 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:03.874000 audit[3369]: AVC avc: denied { perfmon } for pid=3369 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:03.874000 audit[3369]: AVC avc: denied { perfmon } for pid=3369 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:03.874000 audit[3369]: AVC avc: denied { perfmon } for pid=3369 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:03.874000 audit[3369]: AVC avc: denied { bpf } for pid=3369 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:03.874000 audit[3369]: AVC avc: denied { bpf } for pid=3369 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:03.874000 audit: BPF prog-id=152 op=LOAD Sep 6 00:22:03.874000 audit[3369]: SYSCALL arch=c000003e syscall=321 success=yes exit=4 a0=5 a1=7ffd06610bb0 a2=94 a3=1 items=0 ppid=3206 pid=3369 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:22:03.874000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Sep 6 00:22:03.875000 audit: BPF prog-id=152 op=UNLOAD Sep 6 00:22:03.875000 audit[3369]: AVC avc: denied { perfmon } for pid=3369 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:03.875000 audit[3369]: SYSCALL arch=c000003e syscall=321 success=yes exit=4 a0=0 a1=7ffd06610c80 a2=50 a3=7ffd06610d60 items=0 ppid=3206 pid=3369 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:22:03.875000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Sep 6 00:22:03.887000 audit[3369]: AVC avc: denied { bpf } for pid=3369 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:03.887000 audit[3369]: SYSCALL arch=c000003e syscall=321 success=yes exit=4 a0=12 a1=7ffd06610bc0 a2=28 a3=0 items=0 ppid=3206 pid=3369 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:22:03.887000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Sep 6 00:22:03.887000 audit[3369]: AVC avc: denied { bpf } for pid=3369 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:03.887000 audit[3369]: SYSCALL arch=c000003e syscall=321 success=no exit=-22 a0=12 a1=7ffd06610bf0 a2=28 a3=0 items=0 ppid=3206 pid=3369 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:22:03.887000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Sep 6 00:22:03.887000 audit[3369]: AVC avc: denied { bpf } for pid=3369 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:03.887000 audit[3369]: SYSCALL arch=c000003e syscall=321 success=no exit=-22 a0=12 a1=7ffd06610b00 a2=28 a3=0 items=0 ppid=3206 pid=3369 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:22:03.887000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Sep 6 00:22:03.887000 audit[3369]: AVC avc: denied { bpf } for pid=3369 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:03.887000 audit[3369]: SYSCALL arch=c000003e syscall=321 success=yes exit=4 a0=12 a1=7ffd06610c10 a2=28 a3=0 items=0 ppid=3206 pid=3369 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:22:03.887000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Sep 6 00:22:03.887000 audit[3369]: AVC avc: denied { bpf } for pid=3369 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:03.887000 audit[3369]: SYSCALL arch=c000003e syscall=321 success=yes exit=4 a0=12 a1=7ffd06610bf0 a2=28 a3=0 items=0 ppid=3206 pid=3369 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:22:03.887000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Sep 6 00:22:03.888000 audit[3369]: AVC avc: denied { bpf } for pid=3369 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:03.888000 audit[3369]: SYSCALL arch=c000003e syscall=321 success=yes exit=4 a0=12 a1=7ffd06610be0 a2=28 a3=0 items=0 ppid=3206 pid=3369 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:22:03.888000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Sep 6 00:22:03.888000 audit[3369]: AVC avc: denied { bpf } for pid=3369 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:03.888000 audit[3369]: SYSCALL arch=c000003e syscall=321 success=yes exit=4 a0=12 a1=7ffd06610c10 a2=28 a3=0 items=0 ppid=3206 pid=3369 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:22:03.888000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Sep 6 00:22:03.888000 audit[3369]: AVC avc: denied { bpf } for pid=3369 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:03.888000 audit[3369]: SYSCALL arch=c000003e syscall=321 success=no exit=-22 a0=12 a1=7ffd06610bf0 a2=28 a3=0 items=0 ppid=3206 pid=3369 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:22:03.888000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Sep 6 00:22:03.888000 audit[3369]: AVC avc: denied { bpf } for pid=3369 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:03.888000 audit[3369]: SYSCALL arch=c000003e syscall=321 success=no exit=-22 a0=12 a1=7ffd06610c10 a2=28 a3=0 items=0 ppid=3206 pid=3369 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:22:03.888000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Sep 6 00:22:03.888000 audit[3369]: AVC avc: denied { bpf } for pid=3369 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:03.888000 audit[3369]: SYSCALL arch=c000003e syscall=321 success=no exit=-22 a0=12 a1=7ffd06610be0 a2=28 a3=0 items=0 ppid=3206 pid=3369 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:22:03.888000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Sep 6 00:22:03.888000 audit[3369]: AVC avc: denied { bpf } for pid=3369 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:03.888000 audit[3369]: SYSCALL arch=c000003e syscall=321 success=yes exit=4 a0=12 a1=7ffd06610c50 a2=28 a3=0 items=0 ppid=3206 pid=3369 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:22:03.888000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Sep 6 00:22:03.888000 audit[3369]: AVC avc: denied { perfmon } for pid=3369 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:03.888000 audit[3369]: SYSCALL arch=c000003e syscall=321 success=yes exit=5 a0=0 a1=7ffd06610a00 a2=50 a3=1 items=0 ppid=3206 pid=3369 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:22:03.888000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Sep 6 00:22:03.888000 audit[3369]: AVC avc: denied { bpf } for pid=3369 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:03.888000 audit[3369]: AVC avc: denied { bpf } for pid=3369 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:03.888000 audit[3369]: AVC avc: denied { perfmon } for pid=3369 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:03.888000 audit[3369]: AVC avc: denied { perfmon } for pid=3369 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:03.888000 audit[3369]: AVC avc: denied { perfmon } for pid=3369 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:03.888000 audit[3369]: AVC avc: denied { perfmon } for pid=3369 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:03.888000 audit[3369]: AVC avc: denied { perfmon } for pid=3369 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:03.888000 audit[3369]: AVC avc: denied { bpf } for pid=3369 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:03.888000 audit[3369]: AVC avc: denied { bpf } for pid=3369 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:03.888000 audit: BPF prog-id=153 op=LOAD Sep 6 00:22:03.888000 audit[3369]: SYSCALL arch=c000003e syscall=321 success=yes exit=6 a0=5 a1=7ffd06610a00 a2=94 a3=5 items=0 ppid=3206 pid=3369 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:22:03.888000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Sep 6 00:22:03.888000 audit: BPF prog-id=153 op=UNLOAD Sep 6 00:22:03.888000 audit[3369]: AVC avc: denied { perfmon } for pid=3369 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:03.888000 audit[3369]: SYSCALL arch=c000003e syscall=321 success=yes exit=5 a0=0 a1=7ffd06610ab0 a2=50 a3=1 items=0 ppid=3206 pid=3369 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:22:03.888000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Sep 6 00:22:03.888000 audit[3369]: AVC avc: denied { bpf } for pid=3369 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:03.888000 audit[3369]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=16 a1=7ffd06610bd0 a2=4 a3=38 items=0 ppid=3206 pid=3369 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:22:03.888000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Sep 6 00:22:03.888000 audit[3369]: AVC avc: denied { bpf } for pid=3369 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:03.888000 audit[3369]: AVC avc: denied { bpf } for pid=3369 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:03.888000 audit[3369]: AVC avc: denied { perfmon } for pid=3369 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:03.888000 audit[3369]: AVC avc: denied { bpf } for pid=3369 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:03.888000 audit[3369]: AVC avc: denied { perfmon } for pid=3369 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:03.888000 audit[3369]: AVC avc: denied { perfmon } for pid=3369 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:03.888000 audit[3369]: AVC avc: denied { perfmon } for pid=3369 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:03.888000 audit[3369]: AVC avc: denied { perfmon } for pid=3369 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:03.888000 audit[3369]: AVC avc: denied { perfmon } for pid=3369 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:03.888000 audit[3369]: AVC avc: denied { bpf } for pid=3369 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:03.888000 audit[3369]: AVC avc: denied { confidentiality } for pid=3369 comm="bpftool" lockdown_reason="use of bpf to read kernel RAM" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=lockdown permissive=0 Sep 6 00:22:03.888000 audit[3369]: SYSCALL arch=c000003e syscall=321 success=no exit=-22 a0=5 a1=7ffd06610c20 a2=94 a3=6 items=0 ppid=3206 pid=3369 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:22:03.888000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Sep 6 00:22:03.890000 audit[3369]: AVC avc: denied { bpf } for pid=3369 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:03.890000 audit[3369]: AVC avc: denied { bpf } for pid=3369 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:03.890000 audit[3369]: AVC avc: denied { perfmon } for pid=3369 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:03.890000 audit[3369]: AVC avc: denied { bpf } for pid=3369 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:03.890000 audit[3369]: AVC avc: denied { perfmon } for pid=3369 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:03.890000 audit[3369]: AVC avc: denied { perfmon } for pid=3369 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:03.890000 audit[3369]: AVC avc: denied { perfmon } for pid=3369 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:03.890000 audit[3369]: AVC avc: denied { perfmon } for pid=3369 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:03.890000 audit[3369]: AVC avc: denied { perfmon } for pid=3369 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:03.890000 audit[3369]: AVC avc: denied { bpf } for pid=3369 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:03.890000 audit[3369]: AVC avc: denied { confidentiality } for pid=3369 comm="bpftool" lockdown_reason="use of bpf to read kernel RAM" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=lockdown permissive=0 Sep 6 00:22:03.890000 audit[3369]: SYSCALL arch=c000003e syscall=321 success=no exit=-22 a0=5 a1=7ffd066103d0 a2=94 a3=88 items=0 ppid=3206 pid=3369 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:22:03.890000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Sep 6 00:22:03.890000 audit[3369]: AVC avc: denied { bpf } for pid=3369 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:03.890000 audit[3369]: AVC avc: denied { bpf } for pid=3369 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:03.890000 audit[3369]: AVC avc: denied { perfmon } for pid=3369 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:03.890000 audit[3369]: AVC avc: denied { bpf } for pid=3369 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:03.890000 audit[3369]: AVC avc: denied { perfmon } for pid=3369 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:03.890000 audit[3369]: AVC avc: denied { perfmon } for pid=3369 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:03.890000 audit[3369]: AVC avc: denied { perfmon } for pid=3369 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:03.890000 audit[3369]: AVC avc: denied { perfmon } for pid=3369 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:03.890000 audit[3369]: AVC avc: denied { perfmon } for pid=3369 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:03.890000 audit[3369]: AVC avc: denied { bpf } for pid=3369 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:03.890000 audit[3369]: AVC avc: denied { confidentiality } for pid=3369 comm="bpftool" lockdown_reason="use of bpf to read kernel RAM" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=lockdown permissive=0 Sep 6 00:22:03.890000 audit[3369]: SYSCALL arch=c000003e syscall=321 success=no exit=-22 a0=5 a1=7ffd066103d0 a2=94 a3=88 items=0 ppid=3206 pid=3369 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:22:03.890000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Sep 6 00:22:03.904000 audit[3372]: AVC avc: denied { bpf } for pid=3372 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:03.904000 audit[3372]: AVC avc: denied { bpf } for pid=3372 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:03.904000 audit[3372]: AVC avc: denied { perfmon } for pid=3372 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:03.904000 audit[3372]: AVC avc: denied { perfmon } for pid=3372 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:03.904000 audit[3372]: AVC avc: denied { perfmon } for pid=3372 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:03.904000 audit[3372]: AVC avc: denied { perfmon } for pid=3372 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:03.904000 audit[3372]: AVC avc: denied { perfmon } for pid=3372 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:03.904000 audit[3372]: AVC avc: denied { bpf } for pid=3372 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:03.904000 audit[3372]: AVC avc: denied { bpf } for pid=3372 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:03.904000 audit: BPF prog-id=154 op=LOAD Sep 6 00:22:03.904000 audit[3372]: SYSCALL arch=c000003e syscall=321 success=yes exit=3 a0=5 a1=7fff904bd3b0 a2=98 a3=1999999999999999 items=0 ppid=3206 pid=3372 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:22:03.904000 audit: PROCTITLE proctitle=627066746F6F6C006D617000637265617465002F7379732F66732F6270662F63616C69636F2F63616C69636F5F6661696C736166655F706F7274735F763100747970650068617368006B657900340076616C7565003100656E7472696573003635353335006E616D650063616C69636F5F6661696C736166655F706F7274735F Sep 6 00:22:03.905000 audit: BPF prog-id=154 op=UNLOAD Sep 6 00:22:03.905000 audit[3372]: AVC avc: denied { bpf } for pid=3372 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:03.905000 audit[3372]: AVC avc: denied { bpf } for pid=3372 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:03.905000 audit[3372]: AVC avc: denied { perfmon } for pid=3372 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:03.905000 audit[3372]: AVC avc: denied { perfmon } for pid=3372 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:03.905000 audit[3372]: AVC avc: denied { perfmon } for pid=3372 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:03.905000 audit[3372]: AVC avc: denied { perfmon } for pid=3372 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:03.905000 audit[3372]: AVC avc: denied { perfmon } for pid=3372 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:03.905000 audit[3372]: AVC avc: denied { bpf } for pid=3372 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:03.905000 audit[3372]: AVC avc: denied { bpf } for pid=3372 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:03.905000 audit: BPF prog-id=155 op=LOAD Sep 6 00:22:03.905000 audit[3372]: SYSCALL arch=c000003e syscall=321 success=yes exit=3 a0=5 a1=7fff904bd290 a2=94 a3=ffff items=0 ppid=3206 pid=3372 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:22:03.905000 audit: PROCTITLE proctitle=627066746F6F6C006D617000637265617465002F7379732F66732F6270662F63616C69636F2F63616C69636F5F6661696C736166655F706F7274735F763100747970650068617368006B657900340076616C7565003100656E7472696573003635353335006E616D650063616C69636F5F6661696C736166655F706F7274735F Sep 6 00:22:03.905000 audit: BPF prog-id=155 op=UNLOAD Sep 6 00:22:03.905000 audit[3372]: AVC avc: denied { bpf } for pid=3372 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:03.905000 audit[3372]: AVC avc: denied { bpf } for pid=3372 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:03.905000 audit[3372]: AVC avc: denied { perfmon } for pid=3372 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:03.905000 audit[3372]: AVC avc: denied { perfmon } for pid=3372 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:03.905000 audit[3372]: AVC avc: denied { perfmon } for pid=3372 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:03.905000 audit[3372]: AVC avc: denied { perfmon } for pid=3372 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:03.905000 audit[3372]: AVC avc: denied { perfmon } for pid=3372 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:03.905000 audit[3372]: AVC avc: denied { bpf } for pid=3372 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:03.905000 audit[3372]: AVC avc: denied { bpf } for pid=3372 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:03.905000 audit: BPF prog-id=156 op=LOAD Sep 6 00:22:03.905000 audit[3372]: SYSCALL arch=c000003e syscall=321 success=yes exit=3 a0=5 a1=7fff904bd2d0 a2=94 a3=7fff904bd4b0 items=0 ppid=3206 pid=3372 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:22:03.905000 audit: PROCTITLE proctitle=627066746F6F6C006D617000637265617465002F7379732F66732F6270662F63616C69636F2F63616C69636F5F6661696C736166655F706F7274735F763100747970650068617368006B657900340076616C7565003100656E7472696573003635353335006E616D650063616C69636F5F6661696C736166655F706F7274735F Sep 6 00:22:03.905000 audit: BPF prog-id=156 op=UNLOAD Sep 6 00:22:04.011868 systemd-networkd[1004]: vxlan.calico: Link UP Sep 6 00:22:04.011878 systemd-networkd[1004]: vxlan.calico: Gained carrier Sep 6 00:22:04.043000 audit[3402]: AVC avc: denied { bpf } for pid=3402 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:04.043000 audit[3402]: AVC avc: denied { bpf } for pid=3402 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:04.043000 audit[3402]: AVC avc: denied { perfmon } for pid=3402 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:04.043000 audit[3402]: AVC avc: denied { perfmon } for pid=3402 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:04.043000 audit[3402]: AVC avc: denied { perfmon } for pid=3402 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:04.043000 audit[3402]: AVC avc: denied { perfmon } for pid=3402 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:04.043000 audit[3402]: AVC avc: denied { perfmon } for pid=3402 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:04.043000 audit[3402]: AVC avc: denied { bpf } for pid=3402 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:04.043000 audit[3402]: AVC avc: denied { bpf } for pid=3402 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:04.043000 audit: BPF prog-id=157 op=LOAD Sep 6 00:22:04.043000 audit[3402]: SYSCALL arch=c000003e syscall=321 success=yes exit=3 a0=5 a1=7ffc38da1760 a2=98 a3=0 items=0 ppid=3206 pid=3402 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:22:04.043000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Sep 6 00:22:04.043000 audit: BPF prog-id=157 op=UNLOAD Sep 6 00:22:04.044000 audit[3402]: AVC avc: denied { bpf } for pid=3402 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:04.044000 audit[3402]: AVC avc: denied { bpf } for pid=3402 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:04.044000 audit[3402]: AVC avc: denied { perfmon } for pid=3402 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:04.044000 audit[3402]: AVC avc: denied { perfmon } for pid=3402 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:04.044000 audit[3402]: AVC avc: denied { perfmon } for pid=3402 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:04.044000 audit[3402]: AVC avc: denied { perfmon } for pid=3402 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:04.044000 audit[3402]: AVC avc: denied { perfmon } for pid=3402 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:04.044000 audit[3402]: AVC avc: denied { bpf } for pid=3402 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:04.044000 audit[3402]: AVC avc: denied { bpf } for pid=3402 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:04.044000 audit: BPF prog-id=158 op=LOAD Sep 6 00:22:04.044000 audit[3402]: SYSCALL arch=c000003e syscall=321 success=yes exit=3 a0=5 a1=7ffc38da1570 a2=94 a3=54428f items=0 ppid=3206 pid=3402 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:22:04.044000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Sep 6 00:22:04.044000 audit: BPF prog-id=158 op=UNLOAD Sep 6 00:22:04.044000 audit[3402]: AVC avc: denied { bpf } for pid=3402 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:04.044000 audit[3402]: AVC avc: denied { bpf } for pid=3402 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:04.044000 audit[3402]: AVC avc: denied { perfmon } for pid=3402 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:04.044000 audit[3402]: AVC avc: denied { perfmon } for pid=3402 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:04.044000 audit[3402]: AVC avc: denied { perfmon } for pid=3402 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:04.044000 audit[3402]: AVC avc: denied { perfmon } for pid=3402 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:04.044000 audit[3402]: AVC avc: denied { perfmon } for pid=3402 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:04.044000 audit[3402]: AVC avc: denied { bpf } for pid=3402 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:04.044000 audit[3402]: AVC avc: denied { bpf } for pid=3402 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:04.044000 audit: BPF prog-id=159 op=LOAD Sep 6 00:22:04.044000 audit[3402]: SYSCALL arch=c000003e syscall=321 success=yes exit=3 a0=5 a1=7ffc38da15a0 a2=94 a3=2 items=0 ppid=3206 pid=3402 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:22:04.044000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Sep 6 00:22:04.046000 audit: BPF prog-id=159 op=UNLOAD Sep 6 00:22:04.046000 audit[3402]: AVC avc: denied { bpf } for pid=3402 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:04.046000 audit[3402]: SYSCALL arch=c000003e syscall=321 success=yes exit=3 a0=12 a1=7ffc38da1470 a2=28 a3=0 items=0 ppid=3206 pid=3402 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:22:04.046000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Sep 6 00:22:04.046000 audit[3402]: AVC avc: denied { bpf } for pid=3402 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:04.046000 audit[3402]: SYSCALL arch=c000003e syscall=321 success=no exit=-22 a0=12 a1=7ffc38da14a0 a2=28 a3=0 items=0 ppid=3206 pid=3402 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:22:04.046000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Sep 6 00:22:04.046000 audit[3402]: AVC avc: denied { bpf } for pid=3402 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:04.046000 audit[3402]: SYSCALL arch=c000003e syscall=321 success=no exit=-22 a0=12 a1=7ffc38da13b0 a2=28 a3=0 items=0 ppid=3206 pid=3402 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:22:04.046000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Sep 6 00:22:04.046000 audit[3402]: AVC avc: denied { bpf } for pid=3402 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:04.046000 audit[3402]: SYSCALL arch=c000003e syscall=321 success=yes exit=3 a0=12 a1=7ffc38da14c0 a2=28 a3=0 items=0 ppid=3206 pid=3402 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:22:04.046000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Sep 6 00:22:04.046000 audit[3402]: AVC avc: denied { bpf } for pid=3402 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:04.046000 audit[3402]: SYSCALL arch=c000003e syscall=321 success=yes exit=3 a0=12 a1=7ffc38da14a0 a2=28 a3=0 items=0 ppid=3206 pid=3402 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:22:04.046000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Sep 6 00:22:04.046000 audit[3402]: AVC avc: denied { bpf } for pid=3402 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:04.046000 audit[3402]: SYSCALL arch=c000003e syscall=321 success=yes exit=3 a0=12 a1=7ffc38da1490 a2=28 a3=0 items=0 ppid=3206 pid=3402 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:22:04.046000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Sep 6 00:22:04.046000 audit[3402]: AVC avc: denied { bpf } for pid=3402 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:04.046000 audit[3402]: SYSCALL arch=c000003e syscall=321 success=yes exit=3 a0=12 a1=7ffc38da14c0 a2=28 a3=0 items=0 ppid=3206 pid=3402 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:22:04.046000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Sep 6 00:22:04.046000 audit[3402]: AVC avc: denied { bpf } for pid=3402 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:04.046000 audit[3402]: SYSCALL arch=c000003e syscall=321 success=no exit=-22 a0=12 a1=7ffc38da14a0 a2=28 a3=0 items=0 ppid=3206 pid=3402 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:22:04.046000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Sep 6 00:22:04.046000 audit[3402]: AVC avc: denied { bpf } for pid=3402 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:04.046000 audit[3402]: SYSCALL arch=c000003e syscall=321 success=no exit=-22 a0=12 a1=7ffc38da14c0 a2=28 a3=0 items=0 ppid=3206 pid=3402 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:22:04.046000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Sep 6 00:22:04.046000 audit[3402]: AVC avc: denied { bpf } for pid=3402 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:04.046000 audit[3402]: SYSCALL arch=c000003e syscall=321 success=no exit=-22 a0=12 a1=7ffc38da1490 a2=28 a3=0 items=0 ppid=3206 pid=3402 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:22:04.046000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Sep 6 00:22:04.046000 audit[3402]: AVC avc: denied { bpf } for pid=3402 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:04.046000 audit[3402]: SYSCALL arch=c000003e syscall=321 success=yes exit=3 a0=12 a1=7ffc38da1500 a2=28 a3=0 items=0 ppid=3206 pid=3402 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:22:04.046000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Sep 6 00:22:04.046000 audit[3402]: AVC avc: denied { bpf } for pid=3402 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:04.046000 audit[3402]: AVC avc: denied { bpf } for pid=3402 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:04.046000 audit[3402]: AVC avc: denied { perfmon } for pid=3402 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:04.046000 audit[3402]: AVC avc: denied { perfmon } for pid=3402 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:04.046000 audit[3402]: AVC avc: denied { perfmon } for pid=3402 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:04.046000 audit[3402]: AVC avc: denied { perfmon } for pid=3402 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:04.046000 audit[3402]: AVC avc: denied { perfmon } for pid=3402 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:04.046000 audit[3402]: AVC avc: denied { bpf } for pid=3402 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:04.046000 audit[3402]: AVC avc: denied { bpf } for pid=3402 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:04.046000 audit: BPF prog-id=160 op=LOAD Sep 6 00:22:04.046000 audit[3402]: SYSCALL arch=c000003e syscall=321 success=yes exit=6 a0=5 a1=7ffc38da1370 a2=94 a3=0 items=0 ppid=3206 pid=3402 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:22:04.046000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Sep 6 00:22:04.047000 audit: BPF prog-id=160 op=UNLOAD Sep 6 00:22:04.047000 audit[3402]: AVC avc: denied { bpf } for pid=3402 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:04.047000 audit[3402]: SYSCALL arch=c000003e syscall=321 success=no exit=-22 a0=0 a1=7ffc38da1360 a2=50 a3=2800 items=0 ppid=3206 pid=3402 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:22:04.047000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Sep 6 00:22:04.048000 audit[3402]: AVC avc: denied { bpf } for pid=3402 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:04.048000 audit[3402]: SYSCALL arch=c000003e syscall=321 success=yes exit=6 a0=0 a1=7ffc38da1360 a2=50 a3=2800 items=0 ppid=3206 pid=3402 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:22:04.048000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Sep 6 00:22:04.048000 audit[3402]: AVC avc: denied { bpf } for pid=3402 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:04.048000 audit[3402]: AVC avc: denied { bpf } for pid=3402 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:04.048000 audit[3402]: AVC avc: denied { bpf } for pid=3402 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:04.048000 audit[3402]: AVC avc: denied { perfmon } for pid=3402 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:04.048000 audit[3402]: AVC avc: denied { perfmon } for pid=3402 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:04.048000 audit[3402]: AVC avc: denied { perfmon } for pid=3402 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:04.048000 audit[3402]: AVC avc: denied { perfmon } for pid=3402 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:04.048000 audit[3402]: AVC avc: denied { perfmon } for pid=3402 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:04.048000 audit[3402]: AVC avc: denied { bpf } for pid=3402 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:04.048000 audit[3402]: AVC avc: denied { bpf } for pid=3402 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:04.048000 audit: BPF prog-id=161 op=LOAD Sep 6 00:22:04.048000 audit[3402]: SYSCALL arch=c000003e syscall=321 success=yes exit=6 a0=5 a1=7ffc38da0b80 a2=94 a3=2 items=0 ppid=3206 pid=3402 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:22:04.048000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Sep 6 00:22:04.048000 audit: BPF prog-id=161 op=UNLOAD Sep 6 00:22:04.048000 audit[3402]: AVC avc: denied { bpf } for pid=3402 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:04.048000 audit[3402]: AVC avc: denied { bpf } for pid=3402 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:04.048000 audit[3402]: AVC avc: denied { bpf } for pid=3402 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:04.048000 audit[3402]: AVC avc: denied { perfmon } for pid=3402 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:04.048000 audit[3402]: AVC avc: denied { perfmon } for pid=3402 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:04.048000 audit[3402]: AVC avc: denied { perfmon } for pid=3402 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:04.048000 audit[3402]: AVC avc: denied { perfmon } for pid=3402 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:04.048000 audit[3402]: AVC avc: denied { perfmon } for pid=3402 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:04.048000 audit[3402]: AVC avc: denied { bpf } for pid=3402 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:04.048000 audit[3402]: AVC avc: denied { bpf } for pid=3402 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:04.048000 audit: BPF prog-id=162 op=LOAD Sep 6 00:22:04.048000 audit[3402]: SYSCALL arch=c000003e syscall=321 success=yes exit=6 a0=5 a1=7ffc38da0c80 a2=94 a3=30 items=0 ppid=3206 pid=3402 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:22:04.048000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Sep 6 00:22:04.057000 audit[3407]: AVC avc: denied { bpf } for pid=3407 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:04.057000 audit[3407]: AVC avc: denied { bpf } for pid=3407 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:04.057000 audit[3407]: AVC avc: denied { perfmon } for pid=3407 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:04.057000 audit[3407]: AVC avc: denied { perfmon } for pid=3407 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:04.057000 audit[3407]: AVC avc: denied { perfmon } for pid=3407 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:04.057000 audit[3407]: AVC avc: denied { perfmon } for pid=3407 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:04.057000 audit[3407]: AVC avc: denied { perfmon } for pid=3407 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:04.057000 audit[3407]: AVC avc: denied { bpf } for pid=3407 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:04.057000 audit[3407]: AVC avc: denied { bpf } for pid=3407 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:04.057000 audit: BPF prog-id=163 op=LOAD Sep 6 00:22:04.057000 audit[3407]: SYSCALL arch=c000003e syscall=321 success=yes exit=3 a0=5 a1=7ffc4e0182d0 a2=98 a3=0 items=0 ppid=3206 pid=3407 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:22:04.057000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Sep 6 00:22:04.058000 audit: BPF prog-id=163 op=UNLOAD Sep 6 00:22:04.058000 audit[3407]: AVC avc: denied { bpf } for pid=3407 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:04.058000 audit[3407]: AVC avc: denied { bpf } for pid=3407 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:04.058000 audit[3407]: AVC avc: denied { perfmon } for pid=3407 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:04.058000 audit[3407]: AVC avc: denied { perfmon } for pid=3407 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:04.058000 audit[3407]: AVC avc: denied { perfmon } for pid=3407 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:04.058000 audit[3407]: AVC avc: denied { perfmon } for pid=3407 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:04.058000 audit[3407]: AVC avc: denied { perfmon } for pid=3407 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:04.058000 audit[3407]: AVC avc: denied { bpf } for pid=3407 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:04.058000 audit[3407]: AVC avc: denied { bpf } for pid=3407 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:04.058000 audit: BPF prog-id=164 op=LOAD Sep 6 00:22:04.058000 audit[3407]: SYSCALL arch=c000003e syscall=321 success=yes exit=4 a0=5 a1=7ffc4e0180c0 a2=94 a3=54428f items=0 ppid=3206 pid=3407 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:22:04.058000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Sep 6 00:22:04.058000 audit: BPF prog-id=164 op=UNLOAD Sep 6 00:22:04.058000 audit[3407]: AVC avc: denied { bpf } for pid=3407 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:04.058000 audit[3407]: AVC avc: denied { bpf } for pid=3407 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:04.058000 audit[3407]: AVC avc: denied { perfmon } for pid=3407 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:04.058000 audit[3407]: AVC avc: denied { perfmon } for pid=3407 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:04.058000 audit[3407]: AVC avc: denied { perfmon } for pid=3407 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:04.058000 audit[3407]: AVC avc: denied { perfmon } for pid=3407 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:04.058000 audit[3407]: AVC avc: denied { perfmon } for pid=3407 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:04.058000 audit[3407]: AVC avc: denied { bpf } for pid=3407 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:04.058000 audit[3407]: AVC avc: denied { bpf } for pid=3407 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:04.058000 audit: BPF prog-id=165 op=LOAD Sep 6 00:22:04.058000 audit[3407]: SYSCALL arch=c000003e syscall=321 success=yes exit=4 a0=5 a1=7ffc4e0180f0 a2=94 a3=2 items=0 ppid=3206 pid=3407 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:22:04.058000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Sep 6 00:22:04.058000 audit: BPF prog-id=165 op=UNLOAD Sep 6 00:22:04.188000 audit[3407]: AVC avc: denied { bpf } for pid=3407 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:04.188000 audit[3407]: AVC avc: denied { bpf } for pid=3407 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:04.188000 audit[3407]: AVC avc: denied { perfmon } for pid=3407 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:04.188000 audit[3407]: AVC avc: denied { perfmon } for pid=3407 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:04.188000 audit[3407]: AVC avc: denied { perfmon } for pid=3407 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:04.188000 audit[3407]: AVC avc: denied { perfmon } for pid=3407 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:04.188000 audit[3407]: AVC avc: denied { perfmon } for pid=3407 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:04.188000 audit[3407]: AVC avc: denied { bpf } for pid=3407 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:04.188000 audit[3407]: AVC avc: denied { bpf } for pid=3407 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:04.188000 audit: BPF prog-id=166 op=LOAD Sep 6 00:22:04.188000 audit[3407]: SYSCALL arch=c000003e syscall=321 success=yes exit=4 a0=5 a1=7ffc4e017fb0 a2=94 a3=1 items=0 ppid=3206 pid=3407 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:22:04.188000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Sep 6 00:22:04.188000 audit: BPF prog-id=166 op=UNLOAD Sep 6 00:22:04.188000 audit[3407]: AVC avc: denied { perfmon } for pid=3407 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:04.188000 audit[3407]: SYSCALL arch=c000003e syscall=321 success=yes exit=4 a0=0 a1=7ffc4e018080 a2=50 a3=7ffc4e018160 items=0 ppid=3206 pid=3407 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:22:04.188000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Sep 6 00:22:04.206000 audit[3407]: AVC avc: denied { bpf } for pid=3407 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:04.206000 audit[3407]: SYSCALL arch=c000003e syscall=321 success=yes exit=4 a0=12 a1=7ffc4e017fc0 a2=28 a3=0 items=0 ppid=3206 pid=3407 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:22:04.206000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Sep 6 00:22:04.206000 audit[3407]: AVC avc: denied { bpf } for pid=3407 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:04.206000 audit[3407]: SYSCALL arch=c000003e syscall=321 success=no exit=-22 a0=12 a1=7ffc4e017ff0 a2=28 a3=0 items=0 ppid=3206 pid=3407 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:22:04.206000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Sep 6 00:22:04.206000 audit[3407]: AVC avc: denied { bpf } for pid=3407 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:04.206000 audit[3407]: SYSCALL arch=c000003e syscall=321 success=no exit=-22 a0=12 a1=7ffc4e017f00 a2=28 a3=0 items=0 ppid=3206 pid=3407 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:22:04.206000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Sep 6 00:22:04.206000 audit[3407]: AVC avc: denied { bpf } for pid=3407 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:04.206000 audit[3407]: SYSCALL arch=c000003e syscall=321 success=yes exit=4 a0=12 a1=7ffc4e018010 a2=28 a3=0 items=0 ppid=3206 pid=3407 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:22:04.206000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Sep 6 00:22:04.206000 audit[3407]: AVC avc: denied { bpf } for pid=3407 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:04.206000 audit[3407]: SYSCALL arch=c000003e syscall=321 success=yes exit=4 a0=12 a1=7ffc4e017ff0 a2=28 a3=0 items=0 ppid=3206 pid=3407 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:22:04.206000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Sep 6 00:22:04.206000 audit[3407]: AVC avc: denied { bpf } for pid=3407 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:04.206000 audit[3407]: SYSCALL arch=c000003e syscall=321 success=yes exit=4 a0=12 a1=7ffc4e017fe0 a2=28 a3=0 items=0 ppid=3206 pid=3407 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:22:04.206000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Sep 6 00:22:04.206000 audit[3407]: AVC avc: denied { bpf } for pid=3407 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:04.206000 audit[3407]: SYSCALL arch=c000003e syscall=321 success=yes exit=4 a0=12 a1=7ffc4e018010 a2=28 a3=0 items=0 ppid=3206 pid=3407 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:22:04.206000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Sep 6 00:22:04.206000 audit[3407]: AVC avc: denied { bpf } for pid=3407 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:04.206000 audit[3407]: SYSCALL arch=c000003e syscall=321 success=no exit=-22 a0=12 a1=7ffc4e017ff0 a2=28 a3=0 items=0 ppid=3206 pid=3407 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:22:04.206000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Sep 6 00:22:04.206000 audit[3407]: AVC avc: denied { bpf } for pid=3407 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:04.206000 audit[3407]: SYSCALL arch=c000003e syscall=321 success=no exit=-22 a0=12 a1=7ffc4e018010 a2=28 a3=0 items=0 ppid=3206 pid=3407 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:22:04.206000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Sep 6 00:22:04.206000 audit[3407]: AVC avc: denied { bpf } for pid=3407 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:04.206000 audit[3407]: SYSCALL arch=c000003e syscall=321 success=no exit=-22 a0=12 a1=7ffc4e017fe0 a2=28 a3=0 items=0 ppid=3206 pid=3407 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:22:04.206000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Sep 6 00:22:04.206000 audit[3407]: AVC avc: denied { bpf } for pid=3407 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:04.206000 audit[3407]: SYSCALL arch=c000003e syscall=321 success=yes exit=4 a0=12 a1=7ffc4e018050 a2=28 a3=0 items=0 ppid=3206 pid=3407 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:22:04.206000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Sep 6 00:22:04.206000 audit[3407]: AVC avc: denied { perfmon } for pid=3407 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:04.206000 audit[3407]: SYSCALL arch=c000003e syscall=321 success=yes exit=5 a0=0 a1=7ffc4e017e00 a2=50 a3=1 items=0 ppid=3206 pid=3407 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:22:04.206000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Sep 6 00:22:04.206000 audit[3407]: AVC avc: denied { bpf } for pid=3407 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:04.206000 audit[3407]: AVC avc: denied { bpf } for pid=3407 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:04.206000 audit[3407]: AVC avc: denied { perfmon } for pid=3407 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:04.206000 audit[3407]: AVC avc: denied { perfmon } for pid=3407 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:04.206000 audit[3407]: AVC avc: denied { perfmon } for pid=3407 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:04.206000 audit[3407]: AVC avc: denied { perfmon } for pid=3407 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:04.206000 audit[3407]: AVC avc: denied { perfmon } for pid=3407 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:04.206000 audit[3407]: AVC avc: denied { bpf } for pid=3407 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:04.206000 audit[3407]: AVC avc: denied { bpf } for pid=3407 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:04.206000 audit: BPF prog-id=167 op=LOAD Sep 6 00:22:04.206000 audit[3407]: SYSCALL arch=c000003e syscall=321 success=yes exit=6 a0=5 a1=7ffc4e017e00 a2=94 a3=5 items=0 ppid=3206 pid=3407 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:22:04.206000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Sep 6 00:22:04.207000 audit: BPF prog-id=167 op=UNLOAD Sep 6 00:22:04.207000 audit[3407]: AVC avc: denied { perfmon } for pid=3407 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:04.207000 audit[3407]: SYSCALL arch=c000003e syscall=321 success=yes exit=5 a0=0 a1=7ffc4e017eb0 a2=50 a3=1 items=0 ppid=3206 pid=3407 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:22:04.207000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Sep 6 00:22:04.207000 audit[3407]: AVC avc: denied { bpf } for pid=3407 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:04.207000 audit[3407]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=16 a1=7ffc4e017fd0 a2=4 a3=38 items=0 ppid=3206 pid=3407 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:22:04.207000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Sep 6 00:22:04.207000 audit[3407]: AVC avc: denied { bpf } for pid=3407 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:04.207000 audit[3407]: AVC avc: denied { bpf } for pid=3407 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:04.207000 audit[3407]: AVC avc: denied { perfmon } for pid=3407 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:04.207000 audit[3407]: AVC avc: denied { bpf } for pid=3407 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:04.207000 audit[3407]: AVC avc: denied { perfmon } for pid=3407 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:04.207000 audit[3407]: AVC avc: denied { perfmon } for pid=3407 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:04.207000 audit[3407]: AVC avc: denied { perfmon } for pid=3407 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:04.207000 audit[3407]: AVC avc: denied { perfmon } for pid=3407 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:04.207000 audit[3407]: AVC avc: denied { perfmon } for pid=3407 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:04.207000 audit[3407]: AVC avc: denied { bpf } for pid=3407 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:04.207000 audit[3407]: AVC avc: denied { confidentiality } for pid=3407 comm="bpftool" lockdown_reason="use of bpf to read kernel RAM" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=lockdown permissive=0 Sep 6 00:22:04.207000 audit[3407]: SYSCALL arch=c000003e syscall=321 success=no exit=-22 a0=5 a1=7ffc4e018020 a2=94 a3=6 items=0 ppid=3206 pid=3407 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:22:04.207000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Sep 6 00:22:04.207000 audit[3407]: AVC avc: denied { bpf } for pid=3407 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:04.207000 audit[3407]: AVC avc: denied { bpf } for pid=3407 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:04.207000 audit[3407]: AVC avc: denied { perfmon } for pid=3407 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:04.207000 audit[3407]: AVC avc: denied { bpf } for pid=3407 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:04.207000 audit[3407]: AVC avc: denied { perfmon } for pid=3407 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:04.207000 audit[3407]: AVC avc: denied { perfmon } for pid=3407 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:04.207000 audit[3407]: AVC avc: denied { perfmon } for pid=3407 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:04.207000 audit[3407]: AVC avc: denied { perfmon } for pid=3407 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:04.207000 audit[3407]: AVC avc: denied { perfmon } for pid=3407 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:04.207000 audit[3407]: AVC avc: denied { bpf } for pid=3407 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:04.207000 audit[3407]: AVC avc: denied { confidentiality } for pid=3407 comm="bpftool" lockdown_reason="use of bpf to read kernel RAM" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=lockdown permissive=0 Sep 6 00:22:04.207000 audit[3407]: SYSCALL arch=c000003e syscall=321 success=no exit=-22 a0=5 a1=7ffc4e0177d0 a2=94 a3=88 items=0 ppid=3206 pid=3407 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:22:04.207000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Sep 6 00:22:04.207000 audit[3407]: AVC avc: denied { bpf } for pid=3407 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:04.207000 audit[3407]: AVC avc: denied { bpf } for pid=3407 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:04.207000 audit[3407]: AVC avc: denied { perfmon } for pid=3407 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:04.207000 audit[3407]: AVC avc: denied { bpf } for pid=3407 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:04.207000 audit[3407]: AVC avc: denied { perfmon } for pid=3407 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:04.207000 audit[3407]: AVC avc: denied { perfmon } for pid=3407 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:04.207000 audit[3407]: AVC avc: denied { perfmon } for pid=3407 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:04.207000 audit[3407]: AVC avc: denied { perfmon } for pid=3407 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:04.207000 audit[3407]: AVC avc: denied { perfmon } for pid=3407 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:04.207000 audit[3407]: AVC avc: denied { bpf } for pid=3407 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:04.207000 audit[3407]: AVC avc: denied { confidentiality } for pid=3407 comm="bpftool" lockdown_reason="use of bpf to read kernel RAM" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=lockdown permissive=0 Sep 6 00:22:04.207000 audit[3407]: SYSCALL arch=c000003e syscall=321 success=no exit=-22 a0=5 a1=7ffc4e0177d0 a2=94 a3=88 items=0 ppid=3206 pid=3407 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:22:04.207000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Sep 6 00:22:04.208000 audit[3407]: AVC avc: denied { bpf } for pid=3407 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:04.208000 audit[3407]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=7ffc4e019200 a2=10 a3=f8f00800 items=0 ppid=3206 pid=3407 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:22:04.208000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Sep 6 00:22:04.208000 audit[3407]: AVC avc: denied { bpf } for pid=3407 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:04.208000 audit[3407]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=7ffc4e0190a0 a2=10 a3=3 items=0 ppid=3206 pid=3407 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:22:04.208000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Sep 6 00:22:04.208000 audit[3407]: AVC avc: denied { bpf } for pid=3407 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:04.208000 audit[3407]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=7ffc4e019040 a2=10 a3=3 items=0 ppid=3206 pid=3407 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:22:04.208000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Sep 6 00:22:04.208000 audit[3407]: AVC avc: denied { bpf } for pid=3407 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:04.208000 audit[3407]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=7ffc4e019040 a2=10 a3=7 items=0 ppid=3206 pid=3407 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:22:04.208000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Sep 6 00:22:04.216000 audit: BPF prog-id=162 op=UNLOAD Sep 6 00:22:04.317000 audit[3431]: NETFILTER_CFG table=mangle:101 family=2 entries=16 op=nft_register_chain pid=3431 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Sep 6 00:22:04.317000 audit[3431]: SYSCALL arch=c000003e syscall=46 success=yes exit=6868 a0=3 a1=7ffe4d2b6ae0 a2=0 a3=7ffe4d2b6acc items=0 ppid=3206 pid=3431 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:22:04.317000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Sep 6 00:22:04.334000 audit[3430]: NETFILTER_CFG table=raw:102 family=2 entries=21 op=nft_register_chain pid=3430 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Sep 6 00:22:04.334000 audit[3430]: SYSCALL arch=c000003e syscall=46 success=yes exit=8452 a0=3 a1=7ffe62d202f0 a2=0 a3=7ffe62d202dc items=0 ppid=3206 pid=3430 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:22:04.334000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Sep 6 00:22:04.341000 audit[3432]: NETFILTER_CFG table=nat:103 family=2 entries=15 op=nft_register_chain pid=3432 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Sep 6 00:22:04.341000 audit[3432]: SYSCALL arch=c000003e syscall=46 success=yes exit=5084 a0=3 a1=7ffd88d6c040 a2=0 a3=7ffd88d6c02c items=0 ppid=3206 pid=3432 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:22:04.341000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Sep 6 00:22:04.348000 audit[3434]: NETFILTER_CFG table=filter:104 family=2 entries=94 op=nft_register_chain pid=3434 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Sep 6 00:22:04.348000 audit[3434]: SYSCALL arch=c000003e syscall=46 success=yes exit=53116 a0=3 a1=7ffd67340580 a2=0 a3=7ffd6734056c items=0 ppid=3206 pid=3434 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:22:04.348000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Sep 6 00:22:04.816858 env[1194]: time="2025-09-06T00:22:04.816793763Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/whisker:v3.30.3,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 6 00:22:04.819150 env[1194]: time="2025-09-06T00:22:04.819110447Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:9a4eedeed4a531acefb7f5d0a1b7e3856b1a9a24d9e7d25deef2134d7a734c2d,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 6 00:22:04.821106 env[1194]: time="2025-09-06T00:22:04.821067922Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/whisker:v3.30.3,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 6 00:22:04.823190 env[1194]: time="2025-09-06T00:22:04.823152695Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/whisker@sha256:e7113761fc7633d515882f0d48b5c8d0b8e62f3f9d34823f2ee194bb16d2ec44,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 6 00:22:04.824033 env[1194]: time="2025-09-06T00:22:04.823999491Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/whisker:v3.30.3\" returns image reference \"sha256:9a4eedeed4a531acefb7f5d0a1b7e3856b1a9a24d9e7d25deef2134d7a734c2d\"" Sep 6 00:22:04.827741 env[1194]: time="2025-09-06T00:22:04.827189753Z" level=info msg="CreateContainer within sandbox \"e4c7a46e6700b7479b88e5a8c2b11d17dda22ce2dad2275f4ac6804407270f54\" for container &ContainerMetadata{Name:whisker,Attempt:0,}" Sep 6 00:22:04.844450 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount1699144289.mount: Deactivated successfully. Sep 6 00:22:04.850348 env[1194]: time="2025-09-06T00:22:04.850273806Z" level=info msg="CreateContainer within sandbox \"e4c7a46e6700b7479b88e5a8c2b11d17dda22ce2dad2275f4ac6804407270f54\" for &ContainerMetadata{Name:whisker,Attempt:0,} returns container id \"bc3a7fb5e6e24f66d4ab260e42abaaa73f14eaf3184679173551416bb854a32c\"" Sep 6 00:22:04.852312 env[1194]: time="2025-09-06T00:22:04.851209218Z" level=info msg="StartContainer for \"bc3a7fb5e6e24f66d4ab260e42abaaa73f14eaf3184679173551416bb854a32c\"" Sep 6 00:22:04.882189 systemd[1]: Started cri-containerd-bc3a7fb5e6e24f66d4ab260e42abaaa73f14eaf3184679173551416bb854a32c.scope. Sep 6 00:22:04.914000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:04.914000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:04.914000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:04.914000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:04.914000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:04.914000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:04.914000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:04.914000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:04.914000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:04.914000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:04.914000 audit: BPF prog-id=168 op=LOAD Sep 6 00:22:04.915000 audit[3452]: AVC avc: denied { bpf } for pid=3452 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:04.915000 audit[3452]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000197c48 a2=10 a3=1c items=0 ppid=3307 pid=3452 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:22:04.915000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6263336137666235653665323466363664346162323630653432616261 Sep 6 00:22:04.915000 audit[3452]: AVC avc: denied { perfmon } for pid=3452 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:04.915000 audit[3452]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001976b0 a2=3c a3=8 items=0 ppid=3307 pid=3452 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:22:04.915000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6263336137666235653665323466363664346162323630653432616261 Sep 6 00:22:04.915000 audit[3452]: AVC avc: denied { bpf } for pid=3452 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:04.915000 audit[3452]: AVC avc: denied { bpf } for pid=3452 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:04.915000 audit[3452]: AVC avc: denied { bpf } for pid=3452 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:04.915000 audit[3452]: AVC avc: denied { perfmon } for pid=3452 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:04.915000 audit[3452]: AVC avc: denied { perfmon } for pid=3452 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:04.915000 audit[3452]: AVC avc: denied { perfmon } for pid=3452 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:04.915000 audit[3452]: AVC avc: denied { perfmon } for pid=3452 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:04.915000 audit[3452]: AVC avc: denied { perfmon } for pid=3452 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:04.915000 audit[3452]: AVC avc: denied { bpf } for pid=3452 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:04.915000 audit[3452]: AVC avc: denied { bpf } for pid=3452 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:04.915000 audit: BPF prog-id=169 op=LOAD Sep 6 00:22:04.915000 audit[3452]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001979d8 a2=78 a3=c00009ec80 items=0 ppid=3307 pid=3452 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:22:04.915000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6263336137666235653665323466363664346162323630653432616261 Sep 6 00:22:04.915000 audit[3452]: AVC avc: denied { bpf } for pid=3452 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:04.915000 audit[3452]: AVC avc: denied { bpf } for pid=3452 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:04.915000 audit[3452]: AVC avc: denied { perfmon } for pid=3452 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:04.915000 audit[3452]: AVC avc: denied { perfmon } for pid=3452 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:04.915000 audit[3452]: AVC avc: denied { perfmon } for pid=3452 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:04.915000 audit[3452]: AVC avc: denied { perfmon } for pid=3452 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:04.915000 audit[3452]: AVC avc: denied { perfmon } for pid=3452 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:04.915000 audit[3452]: AVC avc: denied { bpf } for pid=3452 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:04.915000 audit[3452]: AVC avc: denied { bpf } for pid=3452 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:04.915000 audit: BPF prog-id=170 op=LOAD Sep 6 00:22:04.915000 audit[3452]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000197770 a2=78 a3=c00009ecc8 items=0 ppid=3307 pid=3452 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:22:04.915000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6263336137666235653665323466363664346162323630653432616261 Sep 6 00:22:04.915000 audit: BPF prog-id=170 op=UNLOAD Sep 6 00:22:04.915000 audit: BPF prog-id=169 op=UNLOAD Sep 6 00:22:04.915000 audit[3452]: AVC avc: denied { bpf } for pid=3452 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:04.915000 audit[3452]: AVC avc: denied { bpf } for pid=3452 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:04.915000 audit[3452]: AVC avc: denied { bpf } for pid=3452 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:04.915000 audit[3452]: AVC avc: denied { perfmon } for pid=3452 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:04.915000 audit[3452]: AVC avc: denied { perfmon } for pid=3452 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:04.915000 audit[3452]: AVC avc: denied { perfmon } for pid=3452 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:04.915000 audit[3452]: AVC avc: denied { perfmon } for pid=3452 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:04.915000 audit[3452]: AVC avc: denied { perfmon } for pid=3452 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:04.915000 audit[3452]: AVC avc: denied { bpf } for pid=3452 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:04.915000 audit[3452]: AVC avc: denied { bpf } for pid=3452 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:04.915000 audit: BPF prog-id=171 op=LOAD Sep 6 00:22:04.915000 audit[3452]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000197c30 a2=78 a3=c00009f0d8 items=0 ppid=3307 pid=3452 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:22:04.915000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6263336137666235653665323466363664346162323630653432616261 Sep 6 00:22:04.964052 env[1194]: time="2025-09-06T00:22:04.963992265Z" level=info msg="StartContainer for \"bc3a7fb5e6e24f66d4ab260e42abaaa73f14eaf3184679173551416bb854a32c\" returns successfully" Sep 6 00:22:04.973385 env[1194]: time="2025-09-06T00:22:04.973314036Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/whisker-backend:v3.30.3\"" Sep 6 00:22:04.988000 audit[3463]: AVC avc: denied { search } for pid=3463 comm="nginx" name="crypto" dev="proc" ino=25960 scontext=system_u:system_r:svirt_lxc_net_t:s0:c221,c612 tcontext=system_u:object_r:sysctl_crypto_t:s0 tclass=dir permissive=0 Sep 6 00:22:04.988000 audit[3463]: SYSCALL arch=c000003e syscall=257 success=no exit=-13 a0=ffffff9c a1=7f1f65693728 a2=0 a3=0 items=0 ppid=3307 pid=3463 auid=4294967295 uid=10001 gid=10001 euid=10001 suid=10001 fsuid=10001 egid=10001 sgid=10001 fsgid=10001 tty=(none) ses=4294967295 comm="nginx" exe="/usr/sbin/nginx" subj=system_u:system_r:svirt_lxc_net_t:s0:c221,c612 key=(null) Sep 6 00:22:04.988000 audit: PROCTITLE proctitle=2F7573722F7362696E2F6E67696E78002D67006461656D6F6E206F66663B Sep 6 00:22:05.076081 systemd-networkd[1004]: cali7bca7169ccf: Gained IPv6LL Sep 6 00:22:05.586467 systemd-networkd[1004]: vxlan.calico: Gained IPv6LL Sep 6 00:22:06.387860 env[1194]: time="2025-09-06T00:22:06.387800462Z" level=info msg="StopPodSandbox for \"0e5553fbc453e3577d78a53a280028ebeb909e064b00094e55fe9738a9b2c018\"" Sep 6 00:22:06.388772 env[1194]: time="2025-09-06T00:22:06.388711015Z" level=info msg="StopPodSandbox for \"70d37490adbefe97ec1e7961936bf69023ffff9f3849ce09562104a029affc8c\"" Sep 6 00:22:06.559907 env[1194]: 2025-09-06 00:22:06.469 [INFO][3504] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="70d37490adbefe97ec1e7961936bf69023ffff9f3849ce09562104a029affc8c" Sep 6 00:22:06.559907 env[1194]: 2025-09-06 00:22:06.469 [INFO][3504] cni-plugin/dataplane_linux.go 559: Deleting workload's device in netns. ContainerID="70d37490adbefe97ec1e7961936bf69023ffff9f3849ce09562104a029affc8c" iface="eth0" netns="/var/run/netns/cni-9acaab73-3065-db6a-f979-c07a093140aa" Sep 6 00:22:06.559907 env[1194]: 2025-09-06 00:22:06.470 [INFO][3504] cni-plugin/dataplane_linux.go 570: Entered netns, deleting veth. ContainerID="70d37490adbefe97ec1e7961936bf69023ffff9f3849ce09562104a029affc8c" iface="eth0" netns="/var/run/netns/cni-9acaab73-3065-db6a-f979-c07a093140aa" Sep 6 00:22:06.559907 env[1194]: 2025-09-06 00:22:06.470 [INFO][3504] cni-plugin/dataplane_linux.go 597: Workload's veth was already gone. Nothing to do. ContainerID="70d37490adbefe97ec1e7961936bf69023ffff9f3849ce09562104a029affc8c" iface="eth0" netns="/var/run/netns/cni-9acaab73-3065-db6a-f979-c07a093140aa" Sep 6 00:22:06.559907 env[1194]: 2025-09-06 00:22:06.471 [INFO][3504] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="70d37490adbefe97ec1e7961936bf69023ffff9f3849ce09562104a029affc8c" Sep 6 00:22:06.559907 env[1194]: 2025-09-06 00:22:06.471 [INFO][3504] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="70d37490adbefe97ec1e7961936bf69023ffff9f3849ce09562104a029affc8c" Sep 6 00:22:06.559907 env[1194]: 2025-09-06 00:22:06.539 [INFO][3517] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="70d37490adbefe97ec1e7961936bf69023ffff9f3849ce09562104a029affc8c" HandleID="k8s-pod-network.70d37490adbefe97ec1e7961936bf69023ffff9f3849ce09562104a029affc8c" Workload="ci--3510.3.8--n--86fdecb492-k8s-coredns--7c65d6cfc9--m2nlc-eth0" Sep 6 00:22:06.559907 env[1194]: 2025-09-06 00:22:06.539 [INFO][3517] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Sep 6 00:22:06.559907 env[1194]: 2025-09-06 00:22:06.540 [INFO][3517] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Sep 6 00:22:06.559907 env[1194]: 2025-09-06 00:22:06.552 [WARNING][3517] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="70d37490adbefe97ec1e7961936bf69023ffff9f3849ce09562104a029affc8c" HandleID="k8s-pod-network.70d37490adbefe97ec1e7961936bf69023ffff9f3849ce09562104a029affc8c" Workload="ci--3510.3.8--n--86fdecb492-k8s-coredns--7c65d6cfc9--m2nlc-eth0" Sep 6 00:22:06.559907 env[1194]: 2025-09-06 00:22:06.552 [INFO][3517] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="70d37490adbefe97ec1e7961936bf69023ffff9f3849ce09562104a029affc8c" HandleID="k8s-pod-network.70d37490adbefe97ec1e7961936bf69023ffff9f3849ce09562104a029affc8c" Workload="ci--3510.3.8--n--86fdecb492-k8s-coredns--7c65d6cfc9--m2nlc-eth0" Sep 6 00:22:06.559907 env[1194]: 2025-09-06 00:22:06.554 [INFO][3517] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Sep 6 00:22:06.559907 env[1194]: 2025-09-06 00:22:06.557 [INFO][3504] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="70d37490adbefe97ec1e7961936bf69023ffff9f3849ce09562104a029affc8c" Sep 6 00:22:06.566159 systemd[1]: run-netns-cni\x2d9acaab73\x2d3065\x2ddb6a\x2df979\x2dc07a093140aa.mount: Deactivated successfully. Sep 6 00:22:06.568244 env[1194]: time="2025-09-06T00:22:06.568175664Z" level=info msg="TearDown network for sandbox \"70d37490adbefe97ec1e7961936bf69023ffff9f3849ce09562104a029affc8c\" successfully" Sep 6 00:22:06.568381 env[1194]: time="2025-09-06T00:22:06.568361614Z" level=info msg="StopPodSandbox for \"70d37490adbefe97ec1e7961936bf69023ffff9f3849ce09562104a029affc8c\" returns successfully" Sep 6 00:22:06.569342 kubelet[1933]: E0906 00:22:06.568803 1933 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 67.207.67.3 67.207.67.2 67.207.67.3" Sep 6 00:22:06.570843 env[1194]: time="2025-09-06T00:22:06.570701825Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:coredns-7c65d6cfc9-m2nlc,Uid:919279a3-0e76-4d7e-98d0-24775a445624,Namespace:kube-system,Attempt:1,}" Sep 6 00:22:06.616024 env[1194]: 2025-09-06 00:22:06.492 [INFO][3505] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="0e5553fbc453e3577d78a53a280028ebeb909e064b00094e55fe9738a9b2c018" Sep 6 00:22:06.616024 env[1194]: 2025-09-06 00:22:06.492 [INFO][3505] cni-plugin/dataplane_linux.go 559: Deleting workload's device in netns. ContainerID="0e5553fbc453e3577d78a53a280028ebeb909e064b00094e55fe9738a9b2c018" iface="eth0" netns="/var/run/netns/cni-9e4c887c-58a8-5308-cfc1-81632bbc04bf" Sep 6 00:22:06.616024 env[1194]: 2025-09-06 00:22:06.494 [INFO][3505] cni-plugin/dataplane_linux.go 570: Entered netns, deleting veth. ContainerID="0e5553fbc453e3577d78a53a280028ebeb909e064b00094e55fe9738a9b2c018" iface="eth0" netns="/var/run/netns/cni-9e4c887c-58a8-5308-cfc1-81632bbc04bf" Sep 6 00:22:06.616024 env[1194]: 2025-09-06 00:22:06.495 [INFO][3505] cni-plugin/dataplane_linux.go 597: Workload's veth was already gone. Nothing to do. ContainerID="0e5553fbc453e3577d78a53a280028ebeb909e064b00094e55fe9738a9b2c018" iface="eth0" netns="/var/run/netns/cni-9e4c887c-58a8-5308-cfc1-81632bbc04bf" Sep 6 00:22:06.616024 env[1194]: 2025-09-06 00:22:06.495 [INFO][3505] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="0e5553fbc453e3577d78a53a280028ebeb909e064b00094e55fe9738a9b2c018" Sep 6 00:22:06.616024 env[1194]: 2025-09-06 00:22:06.495 [INFO][3505] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="0e5553fbc453e3577d78a53a280028ebeb909e064b00094e55fe9738a9b2c018" Sep 6 00:22:06.616024 env[1194]: 2025-09-06 00:22:06.593 [INFO][3522] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="0e5553fbc453e3577d78a53a280028ebeb909e064b00094e55fe9738a9b2c018" HandleID="k8s-pod-network.0e5553fbc453e3577d78a53a280028ebeb909e064b00094e55fe9738a9b2c018" Workload="ci--3510.3.8--n--86fdecb492-k8s-calico--apiserver--658847fc7d--whbgb-eth0" Sep 6 00:22:06.616024 env[1194]: 2025-09-06 00:22:06.593 [INFO][3522] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Sep 6 00:22:06.616024 env[1194]: 2025-09-06 00:22:06.594 [INFO][3522] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Sep 6 00:22:06.616024 env[1194]: 2025-09-06 00:22:06.603 [WARNING][3522] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="0e5553fbc453e3577d78a53a280028ebeb909e064b00094e55fe9738a9b2c018" HandleID="k8s-pod-network.0e5553fbc453e3577d78a53a280028ebeb909e064b00094e55fe9738a9b2c018" Workload="ci--3510.3.8--n--86fdecb492-k8s-calico--apiserver--658847fc7d--whbgb-eth0" Sep 6 00:22:06.616024 env[1194]: 2025-09-06 00:22:06.604 [INFO][3522] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="0e5553fbc453e3577d78a53a280028ebeb909e064b00094e55fe9738a9b2c018" HandleID="k8s-pod-network.0e5553fbc453e3577d78a53a280028ebeb909e064b00094e55fe9738a9b2c018" Workload="ci--3510.3.8--n--86fdecb492-k8s-calico--apiserver--658847fc7d--whbgb-eth0" Sep 6 00:22:06.616024 env[1194]: 2025-09-06 00:22:06.607 [INFO][3522] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Sep 6 00:22:06.616024 env[1194]: 2025-09-06 00:22:06.611 [INFO][3505] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="0e5553fbc453e3577d78a53a280028ebeb909e064b00094e55fe9738a9b2c018" Sep 6 00:22:06.624592 env[1194]: time="2025-09-06T00:22:06.616355140Z" level=info msg="TearDown network for sandbox \"0e5553fbc453e3577d78a53a280028ebeb909e064b00094e55fe9738a9b2c018\" successfully" Sep 6 00:22:06.624592 env[1194]: time="2025-09-06T00:22:06.616407462Z" level=info msg="StopPodSandbox for \"0e5553fbc453e3577d78a53a280028ebeb909e064b00094e55fe9738a9b2c018\" returns successfully" Sep 6 00:22:06.621767 systemd[1]: run-netns-cni\x2d9e4c887c\x2d58a8\x2d5308\x2dcfc1\x2d81632bbc04bf.mount: Deactivated successfully. Sep 6 00:22:06.625335 env[1194]: time="2025-09-06T00:22:06.625117977Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-apiserver-658847fc7d-whbgb,Uid:0c93136d-a9dc-4b1a-915b-42a235beadf5,Namespace:calico-apiserver,Attempt:1,}" Sep 6 00:22:06.808104 systemd-networkd[1004]: calib007679f81a: Link UP Sep 6 00:22:06.812915 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): eth0: link becomes ready Sep 6 00:22:06.813049 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): calib007679f81a: link becomes ready Sep 6 00:22:06.813453 systemd-networkd[1004]: calib007679f81a: Gained carrier Sep 6 00:22:06.839196 env[1194]: 2025-09-06 00:22:06.660 [INFO][3530] cni-plugin/plugin.go 340: Calico CNI found existing endpoint: &{{WorkloadEndpoint projectcalico.org/v3} {ci--3510.3.8--n--86fdecb492-k8s-coredns--7c65d6cfc9--m2nlc-eth0 coredns-7c65d6cfc9- kube-system 919279a3-0e76-4d7e-98d0-24775a445624 974 0 2025-09-06 00:21:29 +0000 UTC map[k8s-app:kube-dns pod-template-hash:7c65d6cfc9 projectcalico.org/namespace:kube-system projectcalico.org/orchestrator:k8s projectcalico.org/serviceaccount:coredns] map[] [] [] []} {k8s ci-3510.3.8-n-86fdecb492 coredns-7c65d6cfc9-m2nlc eth0 coredns [] [] [kns.kube-system ksa.kube-system.coredns] calib007679f81a [{dns UDP 53 0 } {dns-tcp TCP 53 0 } {metrics TCP 9153 0 }] [] }} ContainerID="417fc124208699eef4f832eccd30eabbea4a0ded63dfaeeebe4da4780d9d6ddf" Namespace="kube-system" Pod="coredns-7c65d6cfc9-m2nlc" WorkloadEndpoint="ci--3510.3.8--n--86fdecb492-k8s-coredns--7c65d6cfc9--m2nlc-" Sep 6 00:22:06.839196 env[1194]: 2025-09-06 00:22:06.660 [INFO][3530] cni-plugin/k8s.go 74: Extracted identifiers for CmdAddK8s ContainerID="417fc124208699eef4f832eccd30eabbea4a0ded63dfaeeebe4da4780d9d6ddf" Namespace="kube-system" Pod="coredns-7c65d6cfc9-m2nlc" WorkloadEndpoint="ci--3510.3.8--n--86fdecb492-k8s-coredns--7c65d6cfc9--m2nlc-eth0" Sep 6 00:22:06.839196 env[1194]: 2025-09-06 00:22:06.731 [INFO][3555] ipam/ipam_plugin.go 225: Calico CNI IPAM request count IPv4=1 IPv6=0 ContainerID="417fc124208699eef4f832eccd30eabbea4a0ded63dfaeeebe4da4780d9d6ddf" HandleID="k8s-pod-network.417fc124208699eef4f832eccd30eabbea4a0ded63dfaeeebe4da4780d9d6ddf" Workload="ci--3510.3.8--n--86fdecb492-k8s-coredns--7c65d6cfc9--m2nlc-eth0" Sep 6 00:22:06.839196 env[1194]: 2025-09-06 00:22:06.732 [INFO][3555] ipam/ipam_plugin.go 265: Auto assigning IP ContainerID="417fc124208699eef4f832eccd30eabbea4a0ded63dfaeeebe4da4780d9d6ddf" HandleID="k8s-pod-network.417fc124208699eef4f832eccd30eabbea4a0ded63dfaeeebe4da4780d9d6ddf" Workload="ci--3510.3.8--n--86fdecb492-k8s-coredns--7c65d6cfc9--m2nlc-eth0" assignArgs=ipam.AutoAssignArgs{Num4:1, Num6:0, HandleID:(*string)(0xc0002cd6a0), Attrs:map[string]string{"namespace":"kube-system", "node":"ci-3510.3.8-n-86fdecb492", "pod":"coredns-7c65d6cfc9-m2nlc", "timestamp":"2025-09-06 00:22:06.731360063 +0000 UTC"}, Hostname:"ci-3510.3.8-n-86fdecb492", IPv4Pools:[]net.IPNet{}, IPv6Pools:[]net.IPNet{}, MaxBlocksPerHost:0, HostReservedAttrIPv4s:(*ipam.HostReservedAttr)(nil), HostReservedAttrIPv6s:(*ipam.HostReservedAttr)(nil), IntendedUse:"Workload"} Sep 6 00:22:06.839196 env[1194]: 2025-09-06 00:22:06.733 [INFO][3555] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Sep 6 00:22:06.839196 env[1194]: 2025-09-06 00:22:06.733 [INFO][3555] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Sep 6 00:22:06.839196 env[1194]: 2025-09-06 00:22:06.733 [INFO][3555] ipam/ipam.go 110: Auto-assign 1 ipv4, 0 ipv6 addrs for host 'ci-3510.3.8-n-86fdecb492' Sep 6 00:22:06.839196 env[1194]: 2025-09-06 00:22:06.742 [INFO][3555] ipam/ipam.go 691: Looking up existing affinities for host handle="k8s-pod-network.417fc124208699eef4f832eccd30eabbea4a0ded63dfaeeebe4da4780d9d6ddf" host="ci-3510.3.8-n-86fdecb492" Sep 6 00:22:06.839196 env[1194]: 2025-09-06 00:22:06.749 [INFO][3555] ipam/ipam.go 394: Looking up existing affinities for host host="ci-3510.3.8-n-86fdecb492" Sep 6 00:22:06.839196 env[1194]: 2025-09-06 00:22:06.757 [INFO][3555] ipam/ipam.go 511: Trying affinity for 192.168.14.128/26 host="ci-3510.3.8-n-86fdecb492" Sep 6 00:22:06.839196 env[1194]: 2025-09-06 00:22:06.760 [INFO][3555] ipam/ipam.go 158: Attempting to load block cidr=192.168.14.128/26 host="ci-3510.3.8-n-86fdecb492" Sep 6 00:22:06.839196 env[1194]: 2025-09-06 00:22:06.767 [INFO][3555] ipam/ipam.go 235: Affinity is confirmed and block has been loaded cidr=192.168.14.128/26 host="ci-3510.3.8-n-86fdecb492" Sep 6 00:22:06.839196 env[1194]: 2025-09-06 00:22:06.767 [INFO][3555] ipam/ipam.go 1220: Attempting to assign 1 addresses from block block=192.168.14.128/26 handle="k8s-pod-network.417fc124208699eef4f832eccd30eabbea4a0ded63dfaeeebe4da4780d9d6ddf" host="ci-3510.3.8-n-86fdecb492" Sep 6 00:22:06.839196 env[1194]: 2025-09-06 00:22:06.769 [INFO][3555] ipam/ipam.go 1764: Creating new handle: k8s-pod-network.417fc124208699eef4f832eccd30eabbea4a0ded63dfaeeebe4da4780d9d6ddf Sep 6 00:22:06.839196 env[1194]: 2025-09-06 00:22:06.784 [INFO][3555] ipam/ipam.go 1243: Writing block in order to claim IPs block=192.168.14.128/26 handle="k8s-pod-network.417fc124208699eef4f832eccd30eabbea4a0ded63dfaeeebe4da4780d9d6ddf" host="ci-3510.3.8-n-86fdecb492" Sep 6 00:22:06.839196 env[1194]: 2025-09-06 00:22:06.792 [INFO][3555] ipam/ipam.go 1256: Successfully claimed IPs: [192.168.14.130/26] block=192.168.14.128/26 handle="k8s-pod-network.417fc124208699eef4f832eccd30eabbea4a0ded63dfaeeebe4da4780d9d6ddf" host="ci-3510.3.8-n-86fdecb492" Sep 6 00:22:06.839196 env[1194]: 2025-09-06 00:22:06.792 [INFO][3555] ipam/ipam.go 878: Auto-assigned 1 out of 1 IPv4s: [192.168.14.130/26] handle="k8s-pod-network.417fc124208699eef4f832eccd30eabbea4a0ded63dfaeeebe4da4780d9d6ddf" host="ci-3510.3.8-n-86fdecb492" Sep 6 00:22:06.839196 env[1194]: 2025-09-06 00:22:06.792 [INFO][3555] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Sep 6 00:22:06.839196 env[1194]: 2025-09-06 00:22:06.792 [INFO][3555] ipam/ipam_plugin.go 283: Calico CNI IPAM assigned addresses IPv4=[192.168.14.130/26] IPv6=[] ContainerID="417fc124208699eef4f832eccd30eabbea4a0ded63dfaeeebe4da4780d9d6ddf" HandleID="k8s-pod-network.417fc124208699eef4f832eccd30eabbea4a0ded63dfaeeebe4da4780d9d6ddf" Workload="ci--3510.3.8--n--86fdecb492-k8s-coredns--7c65d6cfc9--m2nlc-eth0" Sep 6 00:22:06.840373 env[1194]: 2025-09-06 00:22:06.800 [INFO][3530] cni-plugin/k8s.go 418: Populated endpoint ContainerID="417fc124208699eef4f832eccd30eabbea4a0ded63dfaeeebe4da4780d9d6ddf" Namespace="kube-system" Pod="coredns-7c65d6cfc9-m2nlc" WorkloadEndpoint="ci--3510.3.8--n--86fdecb492-k8s-coredns--7c65d6cfc9--m2nlc-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ci--3510.3.8--n--86fdecb492-k8s-coredns--7c65d6cfc9--m2nlc-eth0", GenerateName:"coredns-7c65d6cfc9-", Namespace:"kube-system", SelfLink:"", UID:"919279a3-0e76-4d7e-98d0-24775a445624", ResourceVersion:"974", Generation:0, CreationTimestamp:time.Date(2025, time.September, 6, 0, 21, 29, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"k8s-app":"kube-dns", "pod-template-hash":"7c65d6cfc9", "projectcalico.org/namespace":"kube-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"coredns"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ci-3510.3.8-n-86fdecb492", ContainerID:"", Pod:"coredns-7c65d6cfc9-m2nlc", Endpoint:"eth0", ServiceAccountName:"coredns", IPNetworks:[]string{"192.168.14.130/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.kube-system", "ksa.kube-system.coredns"}, InterfaceName:"calib007679f81a", MAC:"", Ports:[]v3.WorkloadEndpointPort{v3.WorkloadEndpointPort{Name:"dns", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"UDP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"dns-tcp", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"metrics", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x23c1, HostPort:0x0, HostIP:""}}, AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Sep 6 00:22:06.840373 env[1194]: 2025-09-06 00:22:06.800 [INFO][3530] cni-plugin/k8s.go 419: Calico CNI using IPs: [192.168.14.130/32] ContainerID="417fc124208699eef4f832eccd30eabbea4a0ded63dfaeeebe4da4780d9d6ddf" Namespace="kube-system" Pod="coredns-7c65d6cfc9-m2nlc" WorkloadEndpoint="ci--3510.3.8--n--86fdecb492-k8s-coredns--7c65d6cfc9--m2nlc-eth0" Sep 6 00:22:06.840373 env[1194]: 2025-09-06 00:22:06.800 [INFO][3530] cni-plugin/dataplane_linux.go 69: Setting the host side veth name to calib007679f81a ContainerID="417fc124208699eef4f832eccd30eabbea4a0ded63dfaeeebe4da4780d9d6ddf" Namespace="kube-system" Pod="coredns-7c65d6cfc9-m2nlc" WorkloadEndpoint="ci--3510.3.8--n--86fdecb492-k8s-coredns--7c65d6cfc9--m2nlc-eth0" Sep 6 00:22:06.840373 env[1194]: 2025-09-06 00:22:06.814 [INFO][3530] cni-plugin/dataplane_linux.go 508: Disabling IPv4 forwarding ContainerID="417fc124208699eef4f832eccd30eabbea4a0ded63dfaeeebe4da4780d9d6ddf" Namespace="kube-system" Pod="coredns-7c65d6cfc9-m2nlc" WorkloadEndpoint="ci--3510.3.8--n--86fdecb492-k8s-coredns--7c65d6cfc9--m2nlc-eth0" Sep 6 00:22:06.840373 env[1194]: 2025-09-06 00:22:06.815 [INFO][3530] cni-plugin/k8s.go 446: Added Mac, interface name, and active container ID to endpoint ContainerID="417fc124208699eef4f832eccd30eabbea4a0ded63dfaeeebe4da4780d9d6ddf" Namespace="kube-system" Pod="coredns-7c65d6cfc9-m2nlc" WorkloadEndpoint="ci--3510.3.8--n--86fdecb492-k8s-coredns--7c65d6cfc9--m2nlc-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ci--3510.3.8--n--86fdecb492-k8s-coredns--7c65d6cfc9--m2nlc-eth0", GenerateName:"coredns-7c65d6cfc9-", Namespace:"kube-system", SelfLink:"", UID:"919279a3-0e76-4d7e-98d0-24775a445624", ResourceVersion:"974", Generation:0, CreationTimestamp:time.Date(2025, time.September, 6, 0, 21, 29, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"k8s-app":"kube-dns", "pod-template-hash":"7c65d6cfc9", "projectcalico.org/namespace":"kube-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"coredns"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ci-3510.3.8-n-86fdecb492", ContainerID:"417fc124208699eef4f832eccd30eabbea4a0ded63dfaeeebe4da4780d9d6ddf", Pod:"coredns-7c65d6cfc9-m2nlc", Endpoint:"eth0", ServiceAccountName:"coredns", IPNetworks:[]string{"192.168.14.130/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.kube-system", "ksa.kube-system.coredns"}, InterfaceName:"calib007679f81a", MAC:"52:07:81:44:bf:55", Ports:[]v3.WorkloadEndpointPort{v3.WorkloadEndpointPort{Name:"dns", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"UDP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"dns-tcp", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"metrics", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x23c1, HostPort:0x0, HostIP:""}}, AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Sep 6 00:22:06.840373 env[1194]: 2025-09-06 00:22:06.834 [INFO][3530] cni-plugin/k8s.go 532: Wrote updated endpoint to datastore ContainerID="417fc124208699eef4f832eccd30eabbea4a0ded63dfaeeebe4da4780d9d6ddf" Namespace="kube-system" Pod="coredns-7c65d6cfc9-m2nlc" WorkloadEndpoint="ci--3510.3.8--n--86fdecb492-k8s-coredns--7c65d6cfc9--m2nlc-eth0" Sep 6 00:22:06.892526 kernel: kauditd_printk_skb: 707 callbacks suppressed Sep 6 00:22:06.892689 kernel: audit: type=1325 audit(1757118126.884:1180): table=filter:105 family=2 entries=42 op=nft_register_chain pid=3590 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Sep 6 00:22:06.892723 kernel: audit: type=1300 audit(1757118126.884:1180): arch=c000003e syscall=46 success=yes exit=22552 a0=3 a1=7fffd94b01d0 a2=0 a3=7fffd94b01bc items=0 ppid=3206 pid=3590 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:22:06.884000 audit[3590]: NETFILTER_CFG table=filter:105 family=2 entries=42 op=nft_register_chain pid=3590 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Sep 6 00:22:06.884000 audit[3590]: SYSCALL arch=c000003e syscall=46 success=yes exit=22552 a0=3 a1=7fffd94b01d0 a2=0 a3=7fffd94b01bc items=0 ppid=3206 pid=3590 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:22:06.884000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Sep 6 00:22:06.895456 kernel: audit: type=1327 audit(1757118126.884:1180): proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Sep 6 00:22:06.903374 env[1194]: time="2025-09-06T00:22:06.903068757Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Sep 6 00:22:06.903374 env[1194]: time="2025-09-06T00:22:06.903117939Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Sep 6 00:22:06.903374 env[1194]: time="2025-09-06T00:22:06.903128657Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Sep 6 00:22:06.904056 env[1194]: time="2025-09-06T00:22:06.903918502Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/417fc124208699eef4f832eccd30eabbea4a0ded63dfaeeebe4da4780d9d6ddf pid=3585 runtime=io.containerd.runc.v2 Sep 6 00:22:06.921764 systemd[1]: Started cri-containerd-417fc124208699eef4f832eccd30eabbea4a0ded63dfaeeebe4da4780d9d6ddf.scope. Sep 6 00:22:06.957221 kernel: audit: type=1400 audit(1757118126.946:1181): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:06.957373 kernel: audit: type=1400 audit(1757118126.946:1182): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:06.957408 kernel: audit: type=1400 audit(1757118126.946:1183): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:06.957430 kernel: audit: type=1400 audit(1757118126.946:1184): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:06.946000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:06.946000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:06.946000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:06.946000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:06.965107 kernel: audit: type=1400 audit(1757118126.946:1185): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:06.965271 kernel: audit: type=1400 audit(1757118126.946:1186): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:06.965316 kernel: audit: type=1400 audit(1757118126.946:1187): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:06.946000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:06.946000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:06.946000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:06.946000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:06.946000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:06.947000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:06.947000 audit: BPF prog-id=172 op=LOAD Sep 6 00:22:06.965000 audit[3595]: AVC avc: denied { bpf } for pid=3595 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:06.965000 audit[3595]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000145c48 a2=10 a3=1c items=0 ppid=3585 pid=3595 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:22:06.965000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3431376663313234323038363939656566346638333265636364333065 Sep 6 00:22:06.965000 audit[3595]: AVC avc: denied { perfmon } for pid=3595 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:06.965000 audit[3595]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001456b0 a2=3c a3=8 items=0 ppid=3585 pid=3595 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:22:06.965000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3431376663313234323038363939656566346638333265636364333065 Sep 6 00:22:06.965000 audit[3595]: AVC avc: denied { bpf } for pid=3595 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:06.965000 audit[3595]: AVC avc: denied { bpf } for pid=3595 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:06.965000 audit[3595]: AVC avc: denied { bpf } for pid=3595 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:06.965000 audit[3595]: AVC avc: denied { perfmon } for pid=3595 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:06.965000 audit[3595]: AVC avc: denied { perfmon } for pid=3595 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:06.965000 audit[3595]: AVC avc: denied { perfmon } for pid=3595 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:06.965000 audit[3595]: AVC avc: denied { perfmon } for pid=3595 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:06.965000 audit[3595]: AVC avc: denied { perfmon } for pid=3595 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:06.965000 audit[3595]: AVC avc: denied { bpf } for pid=3595 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:06.965000 audit[3595]: AVC avc: denied { bpf } for pid=3595 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:06.965000 audit: BPF prog-id=173 op=LOAD Sep 6 00:22:06.965000 audit[3595]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001459d8 a2=78 a3=c0003b6880 items=0 ppid=3585 pid=3595 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:22:06.965000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3431376663313234323038363939656566346638333265636364333065 Sep 6 00:22:06.965000 audit[3595]: AVC avc: denied { bpf } for pid=3595 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:06.965000 audit[3595]: AVC avc: denied { bpf } for pid=3595 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:06.965000 audit[3595]: AVC avc: denied { perfmon } for pid=3595 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:06.965000 audit[3595]: AVC avc: denied { perfmon } for pid=3595 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:06.965000 audit[3595]: AVC avc: denied { perfmon } for pid=3595 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:06.965000 audit[3595]: AVC avc: denied { perfmon } for pid=3595 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:06.965000 audit[3595]: AVC avc: denied { perfmon } for pid=3595 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:06.965000 audit[3595]: AVC avc: denied { bpf } for pid=3595 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:06.965000 audit[3595]: AVC avc: denied { bpf } for pid=3595 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:06.965000 audit: BPF prog-id=174 op=LOAD Sep 6 00:22:06.965000 audit[3595]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000145770 a2=78 a3=c0003b68c8 items=0 ppid=3585 pid=3595 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:22:06.965000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3431376663313234323038363939656566346638333265636364333065 Sep 6 00:22:06.965000 audit: BPF prog-id=174 op=UNLOAD Sep 6 00:22:06.965000 audit: BPF prog-id=173 op=UNLOAD Sep 6 00:22:06.965000 audit[3595]: AVC avc: denied { bpf } for pid=3595 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:06.965000 audit[3595]: AVC avc: denied { bpf } for pid=3595 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:06.965000 audit[3595]: AVC avc: denied { bpf } for pid=3595 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:06.965000 audit[3595]: AVC avc: denied { perfmon } for pid=3595 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:06.965000 audit[3595]: AVC avc: denied { perfmon } for pid=3595 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:06.965000 audit[3595]: AVC avc: denied { perfmon } for pid=3595 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:06.965000 audit[3595]: AVC avc: denied { perfmon } for pid=3595 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:06.965000 audit[3595]: AVC avc: denied { perfmon } for pid=3595 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:06.965000 audit[3595]: AVC avc: denied { bpf } for pid=3595 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:06.965000 audit[3595]: AVC avc: denied { bpf } for pid=3595 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:06.965000 audit: BPF prog-id=175 op=LOAD Sep 6 00:22:06.965000 audit[3595]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000145c30 a2=78 a3=c0003b6cd8 items=0 ppid=3585 pid=3595 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:22:06.965000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3431376663313234323038363939656566346638333265636364333065 Sep 6 00:22:07.007480 systemd-networkd[1004]: calid1f540657c9: Link UP Sep 6 00:22:07.008659 systemd-networkd[1004]: calid1f540657c9: Gained carrier Sep 6 00:22:07.009490 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): calid1f540657c9: link becomes ready Sep 6 00:22:07.051971 env[1194]: 2025-09-06 00:22:06.730 [INFO][3539] cni-plugin/plugin.go 340: Calico CNI found existing endpoint: &{{WorkloadEndpoint projectcalico.org/v3} {ci--3510.3.8--n--86fdecb492-k8s-calico--apiserver--658847fc7d--whbgb-eth0 calico-apiserver-658847fc7d- calico-apiserver 0c93136d-a9dc-4b1a-915b-42a235beadf5 975 0 2025-09-06 00:21:40 +0000 UTC map[apiserver:true app.kubernetes.io/name:calico-apiserver k8s-app:calico-apiserver pod-template-hash:658847fc7d projectcalico.org/namespace:calico-apiserver projectcalico.org/orchestrator:k8s projectcalico.org/serviceaccount:calico-apiserver] map[] [] [] []} {k8s ci-3510.3.8-n-86fdecb492 calico-apiserver-658847fc7d-whbgb eth0 calico-apiserver [] [] [kns.calico-apiserver ksa.calico-apiserver.calico-apiserver] calid1f540657c9 [] [] }} ContainerID="d2383e60ca9dd9ec363e8f6d9976870988237a45cf8b6e174d72c739742f338d" Namespace="calico-apiserver" Pod="calico-apiserver-658847fc7d-whbgb" WorkloadEndpoint="ci--3510.3.8--n--86fdecb492-k8s-calico--apiserver--658847fc7d--whbgb-" Sep 6 00:22:07.051971 env[1194]: 2025-09-06 00:22:06.730 [INFO][3539] cni-plugin/k8s.go 74: Extracted identifiers for CmdAddK8s ContainerID="d2383e60ca9dd9ec363e8f6d9976870988237a45cf8b6e174d72c739742f338d" Namespace="calico-apiserver" Pod="calico-apiserver-658847fc7d-whbgb" WorkloadEndpoint="ci--3510.3.8--n--86fdecb492-k8s-calico--apiserver--658847fc7d--whbgb-eth0" Sep 6 00:22:07.051971 env[1194]: 2025-09-06 00:22:06.877 [INFO][3563] ipam/ipam_plugin.go 225: Calico CNI IPAM request count IPv4=1 IPv6=0 ContainerID="d2383e60ca9dd9ec363e8f6d9976870988237a45cf8b6e174d72c739742f338d" HandleID="k8s-pod-network.d2383e60ca9dd9ec363e8f6d9976870988237a45cf8b6e174d72c739742f338d" Workload="ci--3510.3.8--n--86fdecb492-k8s-calico--apiserver--658847fc7d--whbgb-eth0" Sep 6 00:22:07.051971 env[1194]: 2025-09-06 00:22:06.878 [INFO][3563] ipam/ipam_plugin.go 265: Auto assigning IP ContainerID="d2383e60ca9dd9ec363e8f6d9976870988237a45cf8b6e174d72c739742f338d" HandleID="k8s-pod-network.d2383e60ca9dd9ec363e8f6d9976870988237a45cf8b6e174d72c739742f338d" Workload="ci--3510.3.8--n--86fdecb492-k8s-calico--apiserver--658847fc7d--whbgb-eth0" assignArgs=ipam.AutoAssignArgs{Num4:1, Num6:0, HandleID:(*string)(0xc0003de130), Attrs:map[string]string{"namespace":"calico-apiserver", "node":"ci-3510.3.8-n-86fdecb492", "pod":"calico-apiserver-658847fc7d-whbgb", "timestamp":"2025-09-06 00:22:06.877930207 +0000 UTC"}, Hostname:"ci-3510.3.8-n-86fdecb492", IPv4Pools:[]net.IPNet{}, IPv6Pools:[]net.IPNet{}, MaxBlocksPerHost:0, HostReservedAttrIPv4s:(*ipam.HostReservedAttr)(nil), HostReservedAttrIPv6s:(*ipam.HostReservedAttr)(nil), IntendedUse:"Workload"} Sep 6 00:22:07.051971 env[1194]: 2025-09-06 00:22:06.878 [INFO][3563] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Sep 6 00:22:07.051971 env[1194]: 2025-09-06 00:22:06.879 [INFO][3563] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Sep 6 00:22:07.051971 env[1194]: 2025-09-06 00:22:06.879 [INFO][3563] ipam/ipam.go 110: Auto-assign 1 ipv4, 0 ipv6 addrs for host 'ci-3510.3.8-n-86fdecb492' Sep 6 00:22:07.051971 env[1194]: 2025-09-06 00:22:06.900 [INFO][3563] ipam/ipam.go 691: Looking up existing affinities for host handle="k8s-pod-network.d2383e60ca9dd9ec363e8f6d9976870988237a45cf8b6e174d72c739742f338d" host="ci-3510.3.8-n-86fdecb492" Sep 6 00:22:07.051971 env[1194]: 2025-09-06 00:22:06.912 [INFO][3563] ipam/ipam.go 394: Looking up existing affinities for host host="ci-3510.3.8-n-86fdecb492" Sep 6 00:22:07.051971 env[1194]: 2025-09-06 00:22:06.918 [INFO][3563] ipam/ipam.go 511: Trying affinity for 192.168.14.128/26 host="ci-3510.3.8-n-86fdecb492" Sep 6 00:22:07.051971 env[1194]: 2025-09-06 00:22:06.921 [INFO][3563] ipam/ipam.go 158: Attempting to load block cidr=192.168.14.128/26 host="ci-3510.3.8-n-86fdecb492" Sep 6 00:22:07.051971 env[1194]: 2025-09-06 00:22:06.929 [INFO][3563] ipam/ipam.go 235: Affinity is confirmed and block has been loaded cidr=192.168.14.128/26 host="ci-3510.3.8-n-86fdecb492" Sep 6 00:22:07.051971 env[1194]: 2025-09-06 00:22:06.929 [INFO][3563] ipam/ipam.go 1220: Attempting to assign 1 addresses from block block=192.168.14.128/26 handle="k8s-pod-network.d2383e60ca9dd9ec363e8f6d9976870988237a45cf8b6e174d72c739742f338d" host="ci-3510.3.8-n-86fdecb492" Sep 6 00:22:07.051971 env[1194]: 2025-09-06 00:22:06.939 [INFO][3563] ipam/ipam.go 1764: Creating new handle: k8s-pod-network.d2383e60ca9dd9ec363e8f6d9976870988237a45cf8b6e174d72c739742f338d Sep 6 00:22:07.051971 env[1194]: 2025-09-06 00:22:06.966 [INFO][3563] ipam/ipam.go 1243: Writing block in order to claim IPs block=192.168.14.128/26 handle="k8s-pod-network.d2383e60ca9dd9ec363e8f6d9976870988237a45cf8b6e174d72c739742f338d" host="ci-3510.3.8-n-86fdecb492" Sep 6 00:22:07.051971 env[1194]: 2025-09-06 00:22:06.981 [INFO][3563] ipam/ipam.go 1256: Successfully claimed IPs: [192.168.14.131/26] block=192.168.14.128/26 handle="k8s-pod-network.d2383e60ca9dd9ec363e8f6d9976870988237a45cf8b6e174d72c739742f338d" host="ci-3510.3.8-n-86fdecb492" Sep 6 00:22:07.051971 env[1194]: 2025-09-06 00:22:06.981 [INFO][3563] ipam/ipam.go 878: Auto-assigned 1 out of 1 IPv4s: [192.168.14.131/26] handle="k8s-pod-network.d2383e60ca9dd9ec363e8f6d9976870988237a45cf8b6e174d72c739742f338d" host="ci-3510.3.8-n-86fdecb492" Sep 6 00:22:07.051971 env[1194]: 2025-09-06 00:22:06.981 [INFO][3563] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Sep 6 00:22:07.051971 env[1194]: 2025-09-06 00:22:06.981 [INFO][3563] ipam/ipam_plugin.go 283: Calico CNI IPAM assigned addresses IPv4=[192.168.14.131/26] IPv6=[] ContainerID="d2383e60ca9dd9ec363e8f6d9976870988237a45cf8b6e174d72c739742f338d" HandleID="k8s-pod-network.d2383e60ca9dd9ec363e8f6d9976870988237a45cf8b6e174d72c739742f338d" Workload="ci--3510.3.8--n--86fdecb492-k8s-calico--apiserver--658847fc7d--whbgb-eth0" Sep 6 00:22:07.052779 env[1194]: 2025-09-06 00:22:06.995 [INFO][3539] cni-plugin/k8s.go 418: Populated endpoint ContainerID="d2383e60ca9dd9ec363e8f6d9976870988237a45cf8b6e174d72c739742f338d" Namespace="calico-apiserver" Pod="calico-apiserver-658847fc7d-whbgb" WorkloadEndpoint="ci--3510.3.8--n--86fdecb492-k8s-calico--apiserver--658847fc7d--whbgb-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ci--3510.3.8--n--86fdecb492-k8s-calico--apiserver--658847fc7d--whbgb-eth0", GenerateName:"calico-apiserver-658847fc7d-", Namespace:"calico-apiserver", SelfLink:"", UID:"0c93136d-a9dc-4b1a-915b-42a235beadf5", ResourceVersion:"975", Generation:0, CreationTimestamp:time.Date(2025, time.September, 6, 0, 21, 40, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"apiserver":"true", "app.kubernetes.io/name":"calico-apiserver", "k8s-app":"calico-apiserver", "pod-template-hash":"658847fc7d", "projectcalico.org/namespace":"calico-apiserver", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-apiserver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ci-3510.3.8-n-86fdecb492", ContainerID:"", Pod:"calico-apiserver-658847fc7d-whbgb", Endpoint:"eth0", ServiceAccountName:"calico-apiserver", IPNetworks:[]string{"192.168.14.131/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-apiserver", "ksa.calico-apiserver.calico-apiserver"}, InterfaceName:"calid1f540657c9", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Sep 6 00:22:07.052779 env[1194]: 2025-09-06 00:22:06.995 [INFO][3539] cni-plugin/k8s.go 419: Calico CNI using IPs: [192.168.14.131/32] ContainerID="d2383e60ca9dd9ec363e8f6d9976870988237a45cf8b6e174d72c739742f338d" Namespace="calico-apiserver" Pod="calico-apiserver-658847fc7d-whbgb" WorkloadEndpoint="ci--3510.3.8--n--86fdecb492-k8s-calico--apiserver--658847fc7d--whbgb-eth0" Sep 6 00:22:07.052779 env[1194]: 2025-09-06 00:22:06.995 [INFO][3539] cni-plugin/dataplane_linux.go 69: Setting the host side veth name to calid1f540657c9 ContainerID="d2383e60ca9dd9ec363e8f6d9976870988237a45cf8b6e174d72c739742f338d" Namespace="calico-apiserver" Pod="calico-apiserver-658847fc7d-whbgb" WorkloadEndpoint="ci--3510.3.8--n--86fdecb492-k8s-calico--apiserver--658847fc7d--whbgb-eth0" Sep 6 00:22:07.052779 env[1194]: 2025-09-06 00:22:07.018 [INFO][3539] cni-plugin/dataplane_linux.go 508: Disabling IPv4 forwarding ContainerID="d2383e60ca9dd9ec363e8f6d9976870988237a45cf8b6e174d72c739742f338d" Namespace="calico-apiserver" Pod="calico-apiserver-658847fc7d-whbgb" WorkloadEndpoint="ci--3510.3.8--n--86fdecb492-k8s-calico--apiserver--658847fc7d--whbgb-eth0" Sep 6 00:22:07.052779 env[1194]: 2025-09-06 00:22:07.019 [INFO][3539] cni-plugin/k8s.go 446: Added Mac, interface name, and active container ID to endpoint ContainerID="d2383e60ca9dd9ec363e8f6d9976870988237a45cf8b6e174d72c739742f338d" Namespace="calico-apiserver" Pod="calico-apiserver-658847fc7d-whbgb" WorkloadEndpoint="ci--3510.3.8--n--86fdecb492-k8s-calico--apiserver--658847fc7d--whbgb-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ci--3510.3.8--n--86fdecb492-k8s-calico--apiserver--658847fc7d--whbgb-eth0", GenerateName:"calico-apiserver-658847fc7d-", Namespace:"calico-apiserver", SelfLink:"", UID:"0c93136d-a9dc-4b1a-915b-42a235beadf5", ResourceVersion:"975", Generation:0, CreationTimestamp:time.Date(2025, time.September, 6, 0, 21, 40, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"apiserver":"true", "app.kubernetes.io/name":"calico-apiserver", "k8s-app":"calico-apiserver", "pod-template-hash":"658847fc7d", "projectcalico.org/namespace":"calico-apiserver", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-apiserver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ci-3510.3.8-n-86fdecb492", ContainerID:"d2383e60ca9dd9ec363e8f6d9976870988237a45cf8b6e174d72c739742f338d", Pod:"calico-apiserver-658847fc7d-whbgb", Endpoint:"eth0", ServiceAccountName:"calico-apiserver", IPNetworks:[]string{"192.168.14.131/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-apiserver", "ksa.calico-apiserver.calico-apiserver"}, InterfaceName:"calid1f540657c9", MAC:"c2:eb:f1:f8:8a:cf", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Sep 6 00:22:07.052779 env[1194]: 2025-09-06 00:22:07.036 [INFO][3539] cni-plugin/k8s.go 532: Wrote updated endpoint to datastore ContainerID="d2383e60ca9dd9ec363e8f6d9976870988237a45cf8b6e174d72c739742f338d" Namespace="calico-apiserver" Pod="calico-apiserver-658847fc7d-whbgb" WorkloadEndpoint="ci--3510.3.8--n--86fdecb492-k8s-calico--apiserver--658847fc7d--whbgb-eth0" Sep 6 00:22:07.075928 env[1194]: time="2025-09-06T00:22:07.075816121Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:coredns-7c65d6cfc9-m2nlc,Uid:919279a3-0e76-4d7e-98d0-24775a445624,Namespace:kube-system,Attempt:1,} returns sandbox id \"417fc124208699eef4f832eccd30eabbea4a0ded63dfaeeebe4da4780d9d6ddf\"" Sep 6 00:22:07.079000 audit[3628]: NETFILTER_CFG table=filter:106 family=2 entries=54 op=nft_register_chain pid=3628 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Sep 6 00:22:07.079000 audit[3628]: SYSCALL arch=c000003e syscall=46 success=yes exit=29396 a0=3 a1=7ffe063f4bc0 a2=0 a3=7ffe063f4bac items=0 ppid=3206 pid=3628 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:22:07.079000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Sep 6 00:22:07.102290 kubelet[1933]: E0906 00:22:07.102253 1933 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 67.207.67.3 67.207.67.2 67.207.67.3" Sep 6 00:22:07.120701 env[1194]: time="2025-09-06T00:22:07.120644819Z" level=info msg="CreateContainer within sandbox \"417fc124208699eef4f832eccd30eabbea4a0ded63dfaeeebe4da4780d9d6ddf\" for container &ContainerMetadata{Name:coredns,Attempt:0,}" Sep 6 00:22:07.144096 env[1194]: time="2025-09-06T00:22:07.142743816Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Sep 6 00:22:07.144096 env[1194]: time="2025-09-06T00:22:07.142803348Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Sep 6 00:22:07.144096 env[1194]: time="2025-09-06T00:22:07.142818880Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Sep 6 00:22:07.144096 env[1194]: time="2025-09-06T00:22:07.143058806Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/d2383e60ca9dd9ec363e8f6d9976870988237a45cf8b6e174d72c739742f338d pid=3636 runtime=io.containerd.runc.v2 Sep 6 00:22:07.155943 env[1194]: time="2025-09-06T00:22:07.155878701Z" level=info msg="CreateContainer within sandbox \"417fc124208699eef4f832eccd30eabbea4a0ded63dfaeeebe4da4780d9d6ddf\" for &ContainerMetadata{Name:coredns,Attempt:0,} returns container id \"64c6906319eec9acb2398edef8218ea3f79e4341d8978cc652a9b06acb10ba89\"" Sep 6 00:22:07.157344 env[1194]: time="2025-09-06T00:22:07.157216272Z" level=info msg="StartContainer for \"64c6906319eec9acb2398edef8218ea3f79e4341d8978cc652a9b06acb10ba89\"" Sep 6 00:22:07.170993 systemd[1]: Started cri-containerd-d2383e60ca9dd9ec363e8f6d9976870988237a45cf8b6e174d72c739742f338d.scope. Sep 6 00:22:07.194000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:07.194000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:07.194000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:07.194000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:07.194000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:07.194000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:07.194000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:07.194000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:07.194000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:07.194000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:07.194000 audit: BPF prog-id=176 op=LOAD Sep 6 00:22:07.196000 audit[3647]: AVC avc: denied { bpf } for pid=3647 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:07.196000 audit[3647]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000145c48 a2=10 a3=1c items=0 ppid=3636 pid=3647 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:22:07.196000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6432333833653630636139646439656333363365386636643939373638 Sep 6 00:22:07.196000 audit[3647]: AVC avc: denied { perfmon } for pid=3647 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:07.196000 audit[3647]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001456b0 a2=3c a3=c items=0 ppid=3636 pid=3647 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:22:07.196000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6432333833653630636139646439656333363365386636643939373638 Sep 6 00:22:07.196000 audit[3647]: AVC avc: denied { bpf } for pid=3647 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:07.196000 audit[3647]: AVC avc: denied { bpf } for pid=3647 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:07.196000 audit[3647]: AVC avc: denied { bpf } for pid=3647 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:07.196000 audit[3647]: AVC avc: denied { perfmon } for pid=3647 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:07.196000 audit[3647]: AVC avc: denied { perfmon } for pid=3647 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:07.196000 audit[3647]: AVC avc: denied { perfmon } for pid=3647 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:07.196000 audit[3647]: AVC avc: denied { perfmon } for pid=3647 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:07.196000 audit[3647]: AVC avc: denied { perfmon } for pid=3647 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:07.196000 audit[3647]: AVC avc: denied { bpf } for pid=3647 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:07.196000 audit[3647]: AVC avc: denied { bpf } for pid=3647 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:07.196000 audit: BPF prog-id=177 op=LOAD Sep 6 00:22:07.196000 audit[3647]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001459d8 a2=78 a3=c00030aed0 items=0 ppid=3636 pid=3647 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:22:07.196000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6432333833653630636139646439656333363365386636643939373638 Sep 6 00:22:07.197000 audit[3647]: AVC avc: denied { bpf } for pid=3647 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:07.197000 audit[3647]: AVC avc: denied { bpf } for pid=3647 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:07.197000 audit[3647]: AVC avc: denied { perfmon } for pid=3647 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:07.197000 audit[3647]: AVC avc: denied { perfmon } for pid=3647 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:07.197000 audit[3647]: AVC avc: denied { perfmon } for pid=3647 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:07.197000 audit[3647]: AVC avc: denied { perfmon } for pid=3647 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:07.197000 audit[3647]: AVC avc: denied { perfmon } for pid=3647 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:07.197000 audit[3647]: AVC avc: denied { bpf } for pid=3647 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:07.197000 audit[3647]: AVC avc: denied { bpf } for pid=3647 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:07.197000 audit: BPF prog-id=178 op=LOAD Sep 6 00:22:07.197000 audit[3647]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000145770 a2=78 a3=c00030af18 items=0 ppid=3636 pid=3647 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:22:07.197000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6432333833653630636139646439656333363365386636643939373638 Sep 6 00:22:07.197000 audit: BPF prog-id=178 op=UNLOAD Sep 6 00:22:07.197000 audit: BPF prog-id=177 op=UNLOAD Sep 6 00:22:07.197000 audit[3647]: AVC avc: denied { bpf } for pid=3647 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:07.197000 audit[3647]: AVC avc: denied { bpf } for pid=3647 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:07.197000 audit[3647]: AVC avc: denied { bpf } for pid=3647 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:07.197000 audit[3647]: AVC avc: denied { perfmon } for pid=3647 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:07.197000 audit[3647]: AVC avc: denied { perfmon } for pid=3647 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:07.197000 audit[3647]: AVC avc: denied { perfmon } for pid=3647 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:07.197000 audit[3647]: AVC avc: denied { perfmon } for pid=3647 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:07.197000 audit[3647]: AVC avc: denied { perfmon } for pid=3647 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:07.197000 audit[3647]: AVC avc: denied { bpf } for pid=3647 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:07.197000 audit[3647]: AVC avc: denied { bpf } for pid=3647 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:07.197000 audit: BPF prog-id=179 op=LOAD Sep 6 00:22:07.197000 audit[3647]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000145c30 a2=78 a3=c00030b328 items=0 ppid=3636 pid=3647 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:22:07.197000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6432333833653630636139646439656333363365386636643939373638 Sep 6 00:22:07.226220 systemd[1]: Started cri-containerd-64c6906319eec9acb2398edef8218ea3f79e4341d8978cc652a9b06acb10ba89.scope. Sep 6 00:22:07.261588 env[1194]: time="2025-09-06T00:22:07.261518478Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-apiserver-658847fc7d-whbgb,Uid:0c93136d-a9dc-4b1a-915b-42a235beadf5,Namespace:calico-apiserver,Attempt:1,} returns sandbox id \"d2383e60ca9dd9ec363e8f6d9976870988237a45cf8b6e174d72c739742f338d\"" Sep 6 00:22:07.266000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:07.266000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:07.266000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:07.266000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:07.266000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:07.266000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:07.266000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:07.266000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:07.266000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:07.267000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:07.267000 audit: BPF prog-id=180 op=LOAD Sep 6 00:22:07.268000 audit[3672]: AVC avc: denied { bpf } for pid=3672 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:07.268000 audit[3672]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c0001bdc48 a2=10 a3=1c items=0 ppid=3585 pid=3672 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:22:07.268000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3634633639303633313965656339616362323339386564656638323138 Sep 6 00:22:07.269000 audit[3672]: AVC avc: denied { perfmon } for pid=3672 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:07.269000 audit[3672]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001bd6b0 a2=3c a3=8 items=0 ppid=3585 pid=3672 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:22:07.269000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3634633639303633313965656339616362323339386564656638323138 Sep 6 00:22:07.269000 audit[3672]: AVC avc: denied { bpf } for pid=3672 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:07.269000 audit[3672]: AVC avc: denied { bpf } for pid=3672 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:07.269000 audit[3672]: AVC avc: denied { bpf } for pid=3672 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:07.269000 audit[3672]: AVC avc: denied { perfmon } for pid=3672 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:07.269000 audit[3672]: AVC avc: denied { perfmon } for pid=3672 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:07.269000 audit[3672]: AVC avc: denied { perfmon } for pid=3672 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:07.269000 audit[3672]: AVC avc: denied { perfmon } for pid=3672 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:07.269000 audit[3672]: AVC avc: denied { perfmon } for pid=3672 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:07.269000 audit[3672]: AVC avc: denied { bpf } for pid=3672 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:07.269000 audit[3672]: AVC avc: denied { bpf } for pid=3672 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:07.269000 audit: BPF prog-id=181 op=LOAD Sep 6 00:22:07.269000 audit[3672]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001bd9d8 a2=78 a3=c000252be0 items=0 ppid=3585 pid=3672 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:22:07.269000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3634633639303633313965656339616362323339386564656638323138 Sep 6 00:22:07.271000 audit[3672]: AVC avc: denied { bpf } for pid=3672 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:07.271000 audit[3672]: AVC avc: denied { bpf } for pid=3672 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:07.271000 audit[3672]: AVC avc: denied { perfmon } for pid=3672 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:07.271000 audit[3672]: AVC avc: denied { perfmon } for pid=3672 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:07.271000 audit[3672]: AVC avc: denied { perfmon } for pid=3672 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:07.271000 audit[3672]: AVC avc: denied { perfmon } for pid=3672 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:07.271000 audit[3672]: AVC avc: denied { perfmon } for pid=3672 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:07.271000 audit[3672]: AVC avc: denied { bpf } for pid=3672 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:07.271000 audit[3672]: AVC avc: denied { bpf } for pid=3672 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:07.271000 audit: BPF prog-id=182 op=LOAD Sep 6 00:22:07.271000 audit[3672]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c0001bd770 a2=78 a3=c000252c28 items=0 ppid=3585 pid=3672 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:22:07.271000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3634633639303633313965656339616362323339386564656638323138 Sep 6 00:22:07.272000 audit: BPF prog-id=182 op=UNLOAD Sep 6 00:22:07.272000 audit: BPF prog-id=181 op=UNLOAD Sep 6 00:22:07.272000 audit[3672]: AVC avc: denied { bpf } for pid=3672 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:07.272000 audit[3672]: AVC avc: denied { bpf } for pid=3672 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:07.272000 audit[3672]: AVC avc: denied { bpf } for pid=3672 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:07.272000 audit[3672]: AVC avc: denied { perfmon } for pid=3672 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:07.272000 audit[3672]: AVC avc: denied { perfmon } for pid=3672 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:07.272000 audit[3672]: AVC avc: denied { perfmon } for pid=3672 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:07.272000 audit[3672]: AVC avc: denied { perfmon } for pid=3672 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:07.272000 audit[3672]: AVC avc: denied { perfmon } for pid=3672 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:07.272000 audit[3672]: AVC avc: denied { bpf } for pid=3672 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:07.272000 audit[3672]: AVC avc: denied { bpf } for pid=3672 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:07.272000 audit: BPF prog-id=183 op=LOAD Sep 6 00:22:07.272000 audit[3672]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001bdc30 a2=78 a3=c000253038 items=0 ppid=3585 pid=3672 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:22:07.272000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3634633639303633313965656339616362323339386564656638323138 Sep 6 00:22:07.292656 env[1194]: time="2025-09-06T00:22:07.292606742Z" level=info msg="StartContainer for \"64c6906319eec9acb2398edef8218ea3f79e4341d8978cc652a9b06acb10ba89\" returns successfully" Sep 6 00:22:07.401549 env[1194]: time="2025-09-06T00:22:07.398003096Z" level=info msg="StopPodSandbox for \"b6c0d676905e7769a979b641b973fbab57a0ede6e9580ef71a25fd94e8b9bcca\"" Sep 6 00:22:07.418443 env[1194]: time="2025-09-06T00:22:07.418385274Z" level=info msg="StopPodSandbox for \"17c5099fb97f72d58f1833acd13fa27da6caf86fbe52428c8b16129b064f21d7\"" Sep 6 00:22:07.444000 audit[3682]: AVC avc: denied { getattr } for pid=3682 comm="coredns" path="cgroup:[4026532804]" dev="nsfs" ino=4026532804 scontext=system_u:system_r:svirt_lxc_net_t:s0:c253,c426 tcontext=system_u:object_r:nsfs_t:s0 tclass=file permissive=0 Sep 6 00:22:07.444000 audit[3682]: SYSCALL arch=c000003e syscall=262 success=no exit=-13 a0=ffffffffffffff9c a1=c00005aa38 a2=c00043eed8 a3=0 items=0 ppid=3585 pid=3682 auid=4294967295 uid=65532 gid=65532 euid=65532 suid=65532 fsuid=65532 egid=65532 sgid=65532 fsgid=65532 tty=(none) ses=4294967295 comm="coredns" exe="/coredns" subj=system_u:system_r:svirt_lxc_net_t:s0:c253,c426 key=(null) Sep 6 00:22:07.444000 audit: PROCTITLE proctitle=2F636F7265646E73002D636F6E66002F6574632F636F7265646E732F436F726566696C65 Sep 6 00:22:07.629324 kubelet[1933]: E0906 00:22:07.629281 1933 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 67.207.67.3 67.207.67.2 67.207.67.3" Sep 6 00:22:07.711373 kubelet[1933]: I0906 00:22:07.710771 1933 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="kube-system/coredns-7c65d6cfc9-m2nlc" podStartSLOduration=38.710744293 podStartE2EDuration="38.710744293s" podCreationTimestamp="2025-09-06 00:21:29 +0000 UTC" firstStartedPulling="0001-01-01 00:00:00 +0000 UTC" lastFinishedPulling="0001-01-01 00:00:00 +0000 UTC" observedRunningTime="2025-09-06 00:22:07.706504588 +0000 UTC m=+44.566494555" watchObservedRunningTime="2025-09-06 00:22:07.710744293 +0000 UTC m=+44.570734260" Sep 6 00:22:07.803882 env[1194]: 2025-09-06 00:22:07.671 [INFO][3721] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="17c5099fb97f72d58f1833acd13fa27da6caf86fbe52428c8b16129b064f21d7" Sep 6 00:22:07.803882 env[1194]: 2025-09-06 00:22:07.671 [INFO][3721] cni-plugin/dataplane_linux.go 559: Deleting workload's device in netns. ContainerID="17c5099fb97f72d58f1833acd13fa27da6caf86fbe52428c8b16129b064f21d7" iface="eth0" netns="/var/run/netns/cni-8f25e8b7-19b1-f665-fdcd-2216e33f6105" Sep 6 00:22:07.803882 env[1194]: 2025-09-06 00:22:07.675 [INFO][3721] cni-plugin/dataplane_linux.go 570: Entered netns, deleting veth. ContainerID="17c5099fb97f72d58f1833acd13fa27da6caf86fbe52428c8b16129b064f21d7" iface="eth0" netns="/var/run/netns/cni-8f25e8b7-19b1-f665-fdcd-2216e33f6105" Sep 6 00:22:07.803882 env[1194]: 2025-09-06 00:22:07.675 [INFO][3721] cni-plugin/dataplane_linux.go 597: Workload's veth was already gone. Nothing to do. ContainerID="17c5099fb97f72d58f1833acd13fa27da6caf86fbe52428c8b16129b064f21d7" iface="eth0" netns="/var/run/netns/cni-8f25e8b7-19b1-f665-fdcd-2216e33f6105" Sep 6 00:22:07.803882 env[1194]: 2025-09-06 00:22:07.675 [INFO][3721] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="17c5099fb97f72d58f1833acd13fa27da6caf86fbe52428c8b16129b064f21d7" Sep 6 00:22:07.803882 env[1194]: 2025-09-06 00:22:07.675 [INFO][3721] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="17c5099fb97f72d58f1833acd13fa27da6caf86fbe52428c8b16129b064f21d7" Sep 6 00:22:07.803882 env[1194]: 2025-09-06 00:22:07.781 [INFO][3737] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="17c5099fb97f72d58f1833acd13fa27da6caf86fbe52428c8b16129b064f21d7" HandleID="k8s-pod-network.17c5099fb97f72d58f1833acd13fa27da6caf86fbe52428c8b16129b064f21d7" Workload="ci--3510.3.8--n--86fdecb492-k8s-calico--apiserver--658847fc7d--nxs25-eth0" Sep 6 00:22:07.803882 env[1194]: 2025-09-06 00:22:07.781 [INFO][3737] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Sep 6 00:22:07.803882 env[1194]: 2025-09-06 00:22:07.781 [INFO][3737] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Sep 6 00:22:07.803882 env[1194]: 2025-09-06 00:22:07.792 [WARNING][3737] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="17c5099fb97f72d58f1833acd13fa27da6caf86fbe52428c8b16129b064f21d7" HandleID="k8s-pod-network.17c5099fb97f72d58f1833acd13fa27da6caf86fbe52428c8b16129b064f21d7" Workload="ci--3510.3.8--n--86fdecb492-k8s-calico--apiserver--658847fc7d--nxs25-eth0" Sep 6 00:22:07.803882 env[1194]: 2025-09-06 00:22:07.792 [INFO][3737] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="17c5099fb97f72d58f1833acd13fa27da6caf86fbe52428c8b16129b064f21d7" HandleID="k8s-pod-network.17c5099fb97f72d58f1833acd13fa27da6caf86fbe52428c8b16129b064f21d7" Workload="ci--3510.3.8--n--86fdecb492-k8s-calico--apiserver--658847fc7d--nxs25-eth0" Sep 6 00:22:07.803882 env[1194]: 2025-09-06 00:22:07.795 [INFO][3737] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Sep 6 00:22:07.803882 env[1194]: 2025-09-06 00:22:07.798 [INFO][3721] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="17c5099fb97f72d58f1833acd13fa27da6caf86fbe52428c8b16129b064f21d7" Sep 6 00:22:07.810461 systemd[1]: run-netns-cni\x2d8f25e8b7\x2d19b1\x2df665\x2dfdcd\x2d2216e33f6105.mount: Deactivated successfully. Sep 6 00:22:07.812517 env[1194]: time="2025-09-06T00:22:07.812471539Z" level=info msg="TearDown network for sandbox \"17c5099fb97f72d58f1833acd13fa27da6caf86fbe52428c8b16129b064f21d7\" successfully" Sep 6 00:22:07.812675 env[1194]: time="2025-09-06T00:22:07.812650879Z" level=info msg="StopPodSandbox for \"17c5099fb97f72d58f1833acd13fa27da6caf86fbe52428c8b16129b064f21d7\" returns successfully" Sep 6 00:22:07.815797 env[1194]: time="2025-09-06T00:22:07.815759528Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-apiserver-658847fc7d-nxs25,Uid:f08dcdfb-b2f6-4cf2-856e-527bb3034be9,Namespace:calico-apiserver,Attempt:1,}" Sep 6 00:22:07.841000 audit[3751]: NETFILTER_CFG table=filter:107 family=2 entries=17 op=nft_register_rule pid=3751 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Sep 6 00:22:07.841000 audit[3751]: SYSCALL arch=c000003e syscall=46 success=yes exit=5248 a0=3 a1=7ffdd57384c0 a2=0 a3=7ffdd57384ac items=0 ppid=2038 pid=3751 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:22:07.841000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Sep 6 00:22:07.847380 env[1194]: 2025-09-06 00:22:07.699 [INFO][3720] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="b6c0d676905e7769a979b641b973fbab57a0ede6e9580ef71a25fd94e8b9bcca" Sep 6 00:22:07.847380 env[1194]: 2025-09-06 00:22:07.700 [INFO][3720] cni-plugin/dataplane_linux.go 559: Deleting workload's device in netns. ContainerID="b6c0d676905e7769a979b641b973fbab57a0ede6e9580ef71a25fd94e8b9bcca" iface="eth0" netns="/var/run/netns/cni-33b22b41-9cfc-937f-3c84-c0b27d510dd0" Sep 6 00:22:07.847380 env[1194]: 2025-09-06 00:22:07.700 [INFO][3720] cni-plugin/dataplane_linux.go 570: Entered netns, deleting veth. ContainerID="b6c0d676905e7769a979b641b973fbab57a0ede6e9580ef71a25fd94e8b9bcca" iface="eth0" netns="/var/run/netns/cni-33b22b41-9cfc-937f-3c84-c0b27d510dd0" Sep 6 00:22:07.847380 env[1194]: 2025-09-06 00:22:07.700 [INFO][3720] cni-plugin/dataplane_linux.go 597: Workload's veth was already gone. Nothing to do. ContainerID="b6c0d676905e7769a979b641b973fbab57a0ede6e9580ef71a25fd94e8b9bcca" iface="eth0" netns="/var/run/netns/cni-33b22b41-9cfc-937f-3c84-c0b27d510dd0" Sep 6 00:22:07.847380 env[1194]: 2025-09-06 00:22:07.700 [INFO][3720] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="b6c0d676905e7769a979b641b973fbab57a0ede6e9580ef71a25fd94e8b9bcca" Sep 6 00:22:07.847380 env[1194]: 2025-09-06 00:22:07.700 [INFO][3720] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="b6c0d676905e7769a979b641b973fbab57a0ede6e9580ef71a25fd94e8b9bcca" Sep 6 00:22:07.847380 env[1194]: 2025-09-06 00:22:07.795 [INFO][3743] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="b6c0d676905e7769a979b641b973fbab57a0ede6e9580ef71a25fd94e8b9bcca" HandleID="k8s-pod-network.b6c0d676905e7769a979b641b973fbab57a0ede6e9580ef71a25fd94e8b9bcca" Workload="ci--3510.3.8--n--86fdecb492-k8s-calico--kube--controllers--dcdb654dd--lnm9v-eth0" Sep 6 00:22:07.847380 env[1194]: 2025-09-06 00:22:07.795 [INFO][3743] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Sep 6 00:22:07.847380 env[1194]: 2025-09-06 00:22:07.795 [INFO][3743] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Sep 6 00:22:07.847380 env[1194]: 2025-09-06 00:22:07.812 [WARNING][3743] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="b6c0d676905e7769a979b641b973fbab57a0ede6e9580ef71a25fd94e8b9bcca" HandleID="k8s-pod-network.b6c0d676905e7769a979b641b973fbab57a0ede6e9580ef71a25fd94e8b9bcca" Workload="ci--3510.3.8--n--86fdecb492-k8s-calico--kube--controllers--dcdb654dd--lnm9v-eth0" Sep 6 00:22:07.847380 env[1194]: 2025-09-06 00:22:07.812 [INFO][3743] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="b6c0d676905e7769a979b641b973fbab57a0ede6e9580ef71a25fd94e8b9bcca" HandleID="k8s-pod-network.b6c0d676905e7769a979b641b973fbab57a0ede6e9580ef71a25fd94e8b9bcca" Workload="ci--3510.3.8--n--86fdecb492-k8s-calico--kube--controllers--dcdb654dd--lnm9v-eth0" Sep 6 00:22:07.847380 env[1194]: 2025-09-06 00:22:07.820 [INFO][3743] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Sep 6 00:22:07.847380 env[1194]: 2025-09-06 00:22:07.825 [INFO][3720] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="b6c0d676905e7769a979b641b973fbab57a0ede6e9580ef71a25fd94e8b9bcca" Sep 6 00:22:07.853938 systemd[1]: run-netns-cni\x2d33b22b41\x2d9cfc\x2d937f\x2d3c84\x2dc0b27d510dd0.mount: Deactivated successfully. Sep 6 00:22:07.859000 audit[3751]: NETFILTER_CFG table=nat:108 family=2 entries=35 op=nft_register_chain pid=3751 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Sep 6 00:22:07.859000 audit[3751]: SYSCALL arch=c000003e syscall=46 success=yes exit=14196 a0=3 a1=7ffdd57384c0 a2=0 a3=7ffdd57384ac items=0 ppid=2038 pid=3751 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:22:07.859000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Sep 6 00:22:07.865748 env[1194]: time="2025-09-06T00:22:07.865679048Z" level=info msg="TearDown network for sandbox \"b6c0d676905e7769a979b641b973fbab57a0ede6e9580ef71a25fd94e8b9bcca\" successfully" Sep 6 00:22:07.866447 env[1194]: time="2025-09-06T00:22:07.866420184Z" level=info msg="StopPodSandbox for \"b6c0d676905e7769a979b641b973fbab57a0ede6e9580ef71a25fd94e8b9bcca\" returns successfully" Sep 6 00:22:07.867859 env[1194]: time="2025-09-06T00:22:07.867791381Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-kube-controllers-dcdb654dd-lnm9v,Uid:a508ebae-2d95-49ee-ae16-79dab0a4ff50,Namespace:calico-system,Attempt:1,}" Sep 6 00:22:07.917000 audit[3765]: NETFILTER_CFG table=filter:109 family=2 entries=14 op=nft_register_rule pid=3765 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Sep 6 00:22:07.917000 audit[3765]: SYSCALL arch=c000003e syscall=46 success=yes exit=5248 a0=3 a1=7ffcdc5c00b0 a2=0 a3=7ffcdc5c009c items=0 ppid=2038 pid=3765 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:22:07.917000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Sep 6 00:22:07.923000 audit[3765]: NETFILTER_CFG table=nat:110 family=2 entries=20 op=nft_register_rule pid=3765 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Sep 6 00:22:07.923000 audit[3765]: SYSCALL arch=c000003e syscall=46 success=yes exit=5772 a0=3 a1=7ffcdc5c00b0 a2=0 a3=7ffcdc5c009c items=0 ppid=2038 pid=3765 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:22:07.923000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Sep 6 00:22:08.077368 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): eth0: link becomes ready Sep 6 00:22:08.077719 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): cali9be8c42a104: link becomes ready Sep 6 00:22:08.078646 systemd-networkd[1004]: cali9be8c42a104: Link UP Sep 6 00:22:08.090084 systemd-networkd[1004]: cali9be8c42a104: Gained carrier Sep 6 00:22:08.114632 env[1194]: 2025-09-06 00:22:07.922 [INFO][3752] cni-plugin/plugin.go 340: Calico CNI found existing endpoint: &{{WorkloadEndpoint projectcalico.org/v3} {ci--3510.3.8--n--86fdecb492-k8s-calico--apiserver--658847fc7d--nxs25-eth0 calico-apiserver-658847fc7d- calico-apiserver f08dcdfb-b2f6-4cf2-856e-527bb3034be9 993 0 2025-09-06 00:21:40 +0000 UTC map[apiserver:true app.kubernetes.io/name:calico-apiserver k8s-app:calico-apiserver pod-template-hash:658847fc7d projectcalico.org/namespace:calico-apiserver projectcalico.org/orchestrator:k8s projectcalico.org/serviceaccount:calico-apiserver] map[] [] [] []} {k8s ci-3510.3.8-n-86fdecb492 calico-apiserver-658847fc7d-nxs25 eth0 calico-apiserver [] [] [kns.calico-apiserver ksa.calico-apiserver.calico-apiserver] cali9be8c42a104 [] [] }} ContainerID="9f8252bcbc69511f2c6351ef3ae914d962de19a29730652ef3abab0754e769a2" Namespace="calico-apiserver" Pod="calico-apiserver-658847fc7d-nxs25" WorkloadEndpoint="ci--3510.3.8--n--86fdecb492-k8s-calico--apiserver--658847fc7d--nxs25-" Sep 6 00:22:08.114632 env[1194]: 2025-09-06 00:22:07.923 [INFO][3752] cni-plugin/k8s.go 74: Extracted identifiers for CmdAddK8s ContainerID="9f8252bcbc69511f2c6351ef3ae914d962de19a29730652ef3abab0754e769a2" Namespace="calico-apiserver" Pod="calico-apiserver-658847fc7d-nxs25" WorkloadEndpoint="ci--3510.3.8--n--86fdecb492-k8s-calico--apiserver--658847fc7d--nxs25-eth0" Sep 6 00:22:08.114632 env[1194]: 2025-09-06 00:22:08.022 [INFO][3777] ipam/ipam_plugin.go 225: Calico CNI IPAM request count IPv4=1 IPv6=0 ContainerID="9f8252bcbc69511f2c6351ef3ae914d962de19a29730652ef3abab0754e769a2" HandleID="k8s-pod-network.9f8252bcbc69511f2c6351ef3ae914d962de19a29730652ef3abab0754e769a2" Workload="ci--3510.3.8--n--86fdecb492-k8s-calico--apiserver--658847fc7d--nxs25-eth0" Sep 6 00:22:08.114632 env[1194]: 2025-09-06 00:22:08.023 [INFO][3777] ipam/ipam_plugin.go 265: Auto assigning IP ContainerID="9f8252bcbc69511f2c6351ef3ae914d962de19a29730652ef3abab0754e769a2" HandleID="k8s-pod-network.9f8252bcbc69511f2c6351ef3ae914d962de19a29730652ef3abab0754e769a2" Workload="ci--3510.3.8--n--86fdecb492-k8s-calico--apiserver--658847fc7d--nxs25-eth0" assignArgs=ipam.AutoAssignArgs{Num4:1, Num6:0, HandleID:(*string)(0xc00004e410), Attrs:map[string]string{"namespace":"calico-apiserver", "node":"ci-3510.3.8-n-86fdecb492", "pod":"calico-apiserver-658847fc7d-nxs25", "timestamp":"2025-09-06 00:22:08.022691226 +0000 UTC"}, Hostname:"ci-3510.3.8-n-86fdecb492", IPv4Pools:[]net.IPNet{}, IPv6Pools:[]net.IPNet{}, MaxBlocksPerHost:0, HostReservedAttrIPv4s:(*ipam.HostReservedAttr)(nil), HostReservedAttrIPv6s:(*ipam.HostReservedAttr)(nil), IntendedUse:"Workload"} Sep 6 00:22:08.114632 env[1194]: 2025-09-06 00:22:08.024 [INFO][3777] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Sep 6 00:22:08.114632 env[1194]: 2025-09-06 00:22:08.024 [INFO][3777] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Sep 6 00:22:08.114632 env[1194]: 2025-09-06 00:22:08.024 [INFO][3777] ipam/ipam.go 110: Auto-assign 1 ipv4, 0 ipv6 addrs for host 'ci-3510.3.8-n-86fdecb492' Sep 6 00:22:08.114632 env[1194]: 2025-09-06 00:22:08.032 [INFO][3777] ipam/ipam.go 691: Looking up existing affinities for host handle="k8s-pod-network.9f8252bcbc69511f2c6351ef3ae914d962de19a29730652ef3abab0754e769a2" host="ci-3510.3.8-n-86fdecb492" Sep 6 00:22:08.114632 env[1194]: 2025-09-06 00:22:08.038 [INFO][3777] ipam/ipam.go 394: Looking up existing affinities for host host="ci-3510.3.8-n-86fdecb492" Sep 6 00:22:08.114632 env[1194]: 2025-09-06 00:22:08.043 [INFO][3777] ipam/ipam.go 511: Trying affinity for 192.168.14.128/26 host="ci-3510.3.8-n-86fdecb492" Sep 6 00:22:08.114632 env[1194]: 2025-09-06 00:22:08.046 [INFO][3777] ipam/ipam.go 158: Attempting to load block cidr=192.168.14.128/26 host="ci-3510.3.8-n-86fdecb492" Sep 6 00:22:08.114632 env[1194]: 2025-09-06 00:22:08.049 [INFO][3777] ipam/ipam.go 235: Affinity is confirmed and block has been loaded cidr=192.168.14.128/26 host="ci-3510.3.8-n-86fdecb492" Sep 6 00:22:08.114632 env[1194]: 2025-09-06 00:22:08.049 [INFO][3777] ipam/ipam.go 1220: Attempting to assign 1 addresses from block block=192.168.14.128/26 handle="k8s-pod-network.9f8252bcbc69511f2c6351ef3ae914d962de19a29730652ef3abab0754e769a2" host="ci-3510.3.8-n-86fdecb492" Sep 6 00:22:08.114632 env[1194]: 2025-09-06 00:22:08.051 [INFO][3777] ipam/ipam.go 1764: Creating new handle: k8s-pod-network.9f8252bcbc69511f2c6351ef3ae914d962de19a29730652ef3abab0754e769a2 Sep 6 00:22:08.114632 env[1194]: 2025-09-06 00:22:08.059 [INFO][3777] ipam/ipam.go 1243: Writing block in order to claim IPs block=192.168.14.128/26 handle="k8s-pod-network.9f8252bcbc69511f2c6351ef3ae914d962de19a29730652ef3abab0754e769a2" host="ci-3510.3.8-n-86fdecb492" Sep 6 00:22:08.114632 env[1194]: 2025-09-06 00:22:08.067 [INFO][3777] ipam/ipam.go 1256: Successfully claimed IPs: [192.168.14.132/26] block=192.168.14.128/26 handle="k8s-pod-network.9f8252bcbc69511f2c6351ef3ae914d962de19a29730652ef3abab0754e769a2" host="ci-3510.3.8-n-86fdecb492" Sep 6 00:22:08.114632 env[1194]: 2025-09-06 00:22:08.068 [INFO][3777] ipam/ipam.go 878: Auto-assigned 1 out of 1 IPv4s: [192.168.14.132/26] handle="k8s-pod-network.9f8252bcbc69511f2c6351ef3ae914d962de19a29730652ef3abab0754e769a2" host="ci-3510.3.8-n-86fdecb492" Sep 6 00:22:08.114632 env[1194]: 2025-09-06 00:22:08.068 [INFO][3777] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Sep 6 00:22:08.114632 env[1194]: 2025-09-06 00:22:08.068 [INFO][3777] ipam/ipam_plugin.go 283: Calico CNI IPAM assigned addresses IPv4=[192.168.14.132/26] IPv6=[] ContainerID="9f8252bcbc69511f2c6351ef3ae914d962de19a29730652ef3abab0754e769a2" HandleID="k8s-pod-network.9f8252bcbc69511f2c6351ef3ae914d962de19a29730652ef3abab0754e769a2" Workload="ci--3510.3.8--n--86fdecb492-k8s-calico--apiserver--658847fc7d--nxs25-eth0" Sep 6 00:22:08.115817 env[1194]: 2025-09-06 00:22:08.072 [INFO][3752] cni-plugin/k8s.go 418: Populated endpoint ContainerID="9f8252bcbc69511f2c6351ef3ae914d962de19a29730652ef3abab0754e769a2" Namespace="calico-apiserver" Pod="calico-apiserver-658847fc7d-nxs25" WorkloadEndpoint="ci--3510.3.8--n--86fdecb492-k8s-calico--apiserver--658847fc7d--nxs25-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ci--3510.3.8--n--86fdecb492-k8s-calico--apiserver--658847fc7d--nxs25-eth0", GenerateName:"calico-apiserver-658847fc7d-", Namespace:"calico-apiserver", SelfLink:"", UID:"f08dcdfb-b2f6-4cf2-856e-527bb3034be9", ResourceVersion:"993", Generation:0, CreationTimestamp:time.Date(2025, time.September, 6, 0, 21, 40, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"apiserver":"true", "app.kubernetes.io/name":"calico-apiserver", "k8s-app":"calico-apiserver", "pod-template-hash":"658847fc7d", "projectcalico.org/namespace":"calico-apiserver", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-apiserver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ci-3510.3.8-n-86fdecb492", ContainerID:"", Pod:"calico-apiserver-658847fc7d-nxs25", Endpoint:"eth0", ServiceAccountName:"calico-apiserver", IPNetworks:[]string{"192.168.14.132/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-apiserver", "ksa.calico-apiserver.calico-apiserver"}, InterfaceName:"cali9be8c42a104", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Sep 6 00:22:08.115817 env[1194]: 2025-09-06 00:22:08.072 [INFO][3752] cni-plugin/k8s.go 419: Calico CNI using IPs: [192.168.14.132/32] ContainerID="9f8252bcbc69511f2c6351ef3ae914d962de19a29730652ef3abab0754e769a2" Namespace="calico-apiserver" Pod="calico-apiserver-658847fc7d-nxs25" WorkloadEndpoint="ci--3510.3.8--n--86fdecb492-k8s-calico--apiserver--658847fc7d--nxs25-eth0" Sep 6 00:22:08.115817 env[1194]: 2025-09-06 00:22:08.072 [INFO][3752] cni-plugin/dataplane_linux.go 69: Setting the host side veth name to cali9be8c42a104 ContainerID="9f8252bcbc69511f2c6351ef3ae914d962de19a29730652ef3abab0754e769a2" Namespace="calico-apiserver" Pod="calico-apiserver-658847fc7d-nxs25" WorkloadEndpoint="ci--3510.3.8--n--86fdecb492-k8s-calico--apiserver--658847fc7d--nxs25-eth0" Sep 6 00:22:08.115817 env[1194]: 2025-09-06 00:22:08.077 [INFO][3752] cni-plugin/dataplane_linux.go 508: Disabling IPv4 forwarding ContainerID="9f8252bcbc69511f2c6351ef3ae914d962de19a29730652ef3abab0754e769a2" Namespace="calico-apiserver" Pod="calico-apiserver-658847fc7d-nxs25" WorkloadEndpoint="ci--3510.3.8--n--86fdecb492-k8s-calico--apiserver--658847fc7d--nxs25-eth0" Sep 6 00:22:08.115817 env[1194]: 2025-09-06 00:22:08.078 [INFO][3752] cni-plugin/k8s.go 446: Added Mac, interface name, and active container ID to endpoint ContainerID="9f8252bcbc69511f2c6351ef3ae914d962de19a29730652ef3abab0754e769a2" Namespace="calico-apiserver" Pod="calico-apiserver-658847fc7d-nxs25" WorkloadEndpoint="ci--3510.3.8--n--86fdecb492-k8s-calico--apiserver--658847fc7d--nxs25-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ci--3510.3.8--n--86fdecb492-k8s-calico--apiserver--658847fc7d--nxs25-eth0", GenerateName:"calico-apiserver-658847fc7d-", Namespace:"calico-apiserver", SelfLink:"", UID:"f08dcdfb-b2f6-4cf2-856e-527bb3034be9", ResourceVersion:"993", Generation:0, CreationTimestamp:time.Date(2025, time.September, 6, 0, 21, 40, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"apiserver":"true", "app.kubernetes.io/name":"calico-apiserver", "k8s-app":"calico-apiserver", "pod-template-hash":"658847fc7d", "projectcalico.org/namespace":"calico-apiserver", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-apiserver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ci-3510.3.8-n-86fdecb492", ContainerID:"9f8252bcbc69511f2c6351ef3ae914d962de19a29730652ef3abab0754e769a2", Pod:"calico-apiserver-658847fc7d-nxs25", Endpoint:"eth0", ServiceAccountName:"calico-apiserver", IPNetworks:[]string{"192.168.14.132/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-apiserver", "ksa.calico-apiserver.calico-apiserver"}, InterfaceName:"cali9be8c42a104", MAC:"1a:c2:86:c5:bc:35", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Sep 6 00:22:08.115817 env[1194]: 2025-09-06 00:22:08.108 [INFO][3752] cni-plugin/k8s.go 532: Wrote updated endpoint to datastore ContainerID="9f8252bcbc69511f2c6351ef3ae914d962de19a29730652ef3abab0754e769a2" Namespace="calico-apiserver" Pod="calico-apiserver-658847fc7d-nxs25" WorkloadEndpoint="ci--3510.3.8--n--86fdecb492-k8s-calico--apiserver--658847fc7d--nxs25-eth0" Sep 6 00:22:08.147956 systemd-networkd[1004]: calid1f540657c9: Gained IPv6LL Sep 6 00:22:08.173608 env[1194]: time="2025-09-06T00:22:08.172444667Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Sep 6 00:22:08.173608 env[1194]: time="2025-09-06T00:22:08.172593648Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Sep 6 00:22:08.173608 env[1194]: time="2025-09-06T00:22:08.172628043Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Sep 6 00:22:08.173608 env[1194]: time="2025-09-06T00:22:08.172919384Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/9f8252bcbc69511f2c6351ef3ae914d962de19a29730652ef3abab0754e769a2 pid=3810 runtime=io.containerd.runc.v2 Sep 6 00:22:08.193000 audit[3821]: NETFILTER_CFG table=filter:111 family=2 entries=45 op=nft_register_chain pid=3821 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Sep 6 00:22:08.193000 audit[3821]: SYSCALL arch=c000003e syscall=46 success=yes exit=24264 a0=3 a1=7ffc45e0a910 a2=0 a3=7ffc45e0a8fc items=0 ppid=3206 pid=3821 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:22:08.193000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Sep 6 00:22:08.236875 systemd-networkd[1004]: calide79ca7d3be: Link UP Sep 6 00:22:08.245863 systemd-networkd[1004]: calide79ca7d3be: Gained carrier Sep 6 00:22:08.246266 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): calide79ca7d3be: link becomes ready Sep 6 00:22:08.262465 systemd[1]: Started cri-containerd-9f8252bcbc69511f2c6351ef3ae914d962de19a29730652ef3abab0754e769a2.scope. Sep 6 00:22:08.274428 systemd-networkd[1004]: calib007679f81a: Gained IPv6LL Sep 6 00:22:08.280496 env[1194]: 2025-09-06 00:22:08.010 [INFO][3768] cni-plugin/plugin.go 340: Calico CNI found existing endpoint: &{{WorkloadEndpoint projectcalico.org/v3} {ci--3510.3.8--n--86fdecb492-k8s-calico--kube--controllers--dcdb654dd--lnm9v-eth0 calico-kube-controllers-dcdb654dd- calico-system a508ebae-2d95-49ee-ae16-79dab0a4ff50 994 0 2025-09-06 00:21:44 +0000 UTC map[app.kubernetes.io/name:calico-kube-controllers k8s-app:calico-kube-controllers pod-template-hash:dcdb654dd projectcalico.org/namespace:calico-system projectcalico.org/orchestrator:k8s projectcalico.org/serviceaccount:calico-kube-controllers] map[] [] [] []} {k8s ci-3510.3.8-n-86fdecb492 calico-kube-controllers-dcdb654dd-lnm9v eth0 calico-kube-controllers [] [] [kns.calico-system ksa.calico-system.calico-kube-controllers] calide79ca7d3be [] [] }} ContainerID="ef1fa9356b12fab2bb6aef5a37c459181d8a6a1f7b09728577d9035a9fdd06d8" Namespace="calico-system" Pod="calico-kube-controllers-dcdb654dd-lnm9v" WorkloadEndpoint="ci--3510.3.8--n--86fdecb492-k8s-calico--kube--controllers--dcdb654dd--lnm9v-" Sep 6 00:22:08.280496 env[1194]: 2025-09-06 00:22:08.010 [INFO][3768] cni-plugin/k8s.go 74: Extracted identifiers for CmdAddK8s ContainerID="ef1fa9356b12fab2bb6aef5a37c459181d8a6a1f7b09728577d9035a9fdd06d8" Namespace="calico-system" Pod="calico-kube-controllers-dcdb654dd-lnm9v" WorkloadEndpoint="ci--3510.3.8--n--86fdecb492-k8s-calico--kube--controllers--dcdb654dd--lnm9v-eth0" Sep 6 00:22:08.280496 env[1194]: 2025-09-06 00:22:08.123 [INFO][3787] ipam/ipam_plugin.go 225: Calico CNI IPAM request count IPv4=1 IPv6=0 ContainerID="ef1fa9356b12fab2bb6aef5a37c459181d8a6a1f7b09728577d9035a9fdd06d8" HandleID="k8s-pod-network.ef1fa9356b12fab2bb6aef5a37c459181d8a6a1f7b09728577d9035a9fdd06d8" Workload="ci--3510.3.8--n--86fdecb492-k8s-calico--kube--controllers--dcdb654dd--lnm9v-eth0" Sep 6 00:22:08.280496 env[1194]: 2025-09-06 00:22:08.124 [INFO][3787] ipam/ipam_plugin.go 265: Auto assigning IP ContainerID="ef1fa9356b12fab2bb6aef5a37c459181d8a6a1f7b09728577d9035a9fdd06d8" HandleID="k8s-pod-network.ef1fa9356b12fab2bb6aef5a37c459181d8a6a1f7b09728577d9035a9fdd06d8" Workload="ci--3510.3.8--n--86fdecb492-k8s-calico--kube--controllers--dcdb654dd--lnm9v-eth0" assignArgs=ipam.AutoAssignArgs{Num4:1, Num6:0, HandleID:(*string)(0xc0002df760), Attrs:map[string]string{"namespace":"calico-system", "node":"ci-3510.3.8-n-86fdecb492", "pod":"calico-kube-controllers-dcdb654dd-lnm9v", "timestamp":"2025-09-06 00:22:08.123637785 +0000 UTC"}, Hostname:"ci-3510.3.8-n-86fdecb492", IPv4Pools:[]net.IPNet{}, IPv6Pools:[]net.IPNet{}, MaxBlocksPerHost:0, HostReservedAttrIPv4s:(*ipam.HostReservedAttr)(nil), HostReservedAttrIPv6s:(*ipam.HostReservedAttr)(nil), IntendedUse:"Workload"} Sep 6 00:22:08.280496 env[1194]: 2025-09-06 00:22:08.124 [INFO][3787] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Sep 6 00:22:08.280496 env[1194]: 2025-09-06 00:22:08.124 [INFO][3787] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Sep 6 00:22:08.280496 env[1194]: 2025-09-06 00:22:08.124 [INFO][3787] ipam/ipam.go 110: Auto-assign 1 ipv4, 0 ipv6 addrs for host 'ci-3510.3.8-n-86fdecb492' Sep 6 00:22:08.280496 env[1194]: 2025-09-06 00:22:08.136 [INFO][3787] ipam/ipam.go 691: Looking up existing affinities for host handle="k8s-pod-network.ef1fa9356b12fab2bb6aef5a37c459181d8a6a1f7b09728577d9035a9fdd06d8" host="ci-3510.3.8-n-86fdecb492" Sep 6 00:22:08.280496 env[1194]: 2025-09-06 00:22:08.145 [INFO][3787] ipam/ipam.go 394: Looking up existing affinities for host host="ci-3510.3.8-n-86fdecb492" Sep 6 00:22:08.280496 env[1194]: 2025-09-06 00:22:08.164 [INFO][3787] ipam/ipam.go 511: Trying affinity for 192.168.14.128/26 host="ci-3510.3.8-n-86fdecb492" Sep 6 00:22:08.280496 env[1194]: 2025-09-06 00:22:08.169 [INFO][3787] ipam/ipam.go 158: Attempting to load block cidr=192.168.14.128/26 host="ci-3510.3.8-n-86fdecb492" Sep 6 00:22:08.280496 env[1194]: 2025-09-06 00:22:08.174 [INFO][3787] ipam/ipam.go 235: Affinity is confirmed and block has been loaded cidr=192.168.14.128/26 host="ci-3510.3.8-n-86fdecb492" Sep 6 00:22:08.280496 env[1194]: 2025-09-06 00:22:08.174 [INFO][3787] ipam/ipam.go 1220: Attempting to assign 1 addresses from block block=192.168.14.128/26 handle="k8s-pod-network.ef1fa9356b12fab2bb6aef5a37c459181d8a6a1f7b09728577d9035a9fdd06d8" host="ci-3510.3.8-n-86fdecb492" Sep 6 00:22:08.280496 env[1194]: 2025-09-06 00:22:08.178 [INFO][3787] ipam/ipam.go 1764: Creating new handle: k8s-pod-network.ef1fa9356b12fab2bb6aef5a37c459181d8a6a1f7b09728577d9035a9fdd06d8 Sep 6 00:22:08.280496 env[1194]: 2025-09-06 00:22:08.188 [INFO][3787] ipam/ipam.go 1243: Writing block in order to claim IPs block=192.168.14.128/26 handle="k8s-pod-network.ef1fa9356b12fab2bb6aef5a37c459181d8a6a1f7b09728577d9035a9fdd06d8" host="ci-3510.3.8-n-86fdecb492" Sep 6 00:22:08.280496 env[1194]: 2025-09-06 00:22:08.215 [INFO][3787] ipam/ipam.go 1256: Successfully claimed IPs: [192.168.14.133/26] block=192.168.14.128/26 handle="k8s-pod-network.ef1fa9356b12fab2bb6aef5a37c459181d8a6a1f7b09728577d9035a9fdd06d8" host="ci-3510.3.8-n-86fdecb492" Sep 6 00:22:08.280496 env[1194]: 2025-09-06 00:22:08.216 [INFO][3787] ipam/ipam.go 878: Auto-assigned 1 out of 1 IPv4s: [192.168.14.133/26] handle="k8s-pod-network.ef1fa9356b12fab2bb6aef5a37c459181d8a6a1f7b09728577d9035a9fdd06d8" host="ci-3510.3.8-n-86fdecb492" Sep 6 00:22:08.280496 env[1194]: 2025-09-06 00:22:08.216 [INFO][3787] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Sep 6 00:22:08.280496 env[1194]: 2025-09-06 00:22:08.216 [INFO][3787] ipam/ipam_plugin.go 283: Calico CNI IPAM assigned addresses IPv4=[192.168.14.133/26] IPv6=[] ContainerID="ef1fa9356b12fab2bb6aef5a37c459181d8a6a1f7b09728577d9035a9fdd06d8" HandleID="k8s-pod-network.ef1fa9356b12fab2bb6aef5a37c459181d8a6a1f7b09728577d9035a9fdd06d8" Workload="ci--3510.3.8--n--86fdecb492-k8s-calico--kube--controllers--dcdb654dd--lnm9v-eth0" Sep 6 00:22:08.281547 env[1194]: 2025-09-06 00:22:08.226 [INFO][3768] cni-plugin/k8s.go 418: Populated endpoint ContainerID="ef1fa9356b12fab2bb6aef5a37c459181d8a6a1f7b09728577d9035a9fdd06d8" Namespace="calico-system" Pod="calico-kube-controllers-dcdb654dd-lnm9v" WorkloadEndpoint="ci--3510.3.8--n--86fdecb492-k8s-calico--kube--controllers--dcdb654dd--lnm9v-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ci--3510.3.8--n--86fdecb492-k8s-calico--kube--controllers--dcdb654dd--lnm9v-eth0", GenerateName:"calico-kube-controllers-dcdb654dd-", Namespace:"calico-system", SelfLink:"", UID:"a508ebae-2d95-49ee-ae16-79dab0a4ff50", ResourceVersion:"994", Generation:0, CreationTimestamp:time.Date(2025, time.September, 6, 0, 21, 44, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"calico-kube-controllers", "k8s-app":"calico-kube-controllers", "pod-template-hash":"dcdb654dd", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-kube-controllers"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ci-3510.3.8-n-86fdecb492", ContainerID:"", Pod:"calico-kube-controllers-dcdb654dd-lnm9v", Endpoint:"eth0", ServiceAccountName:"calico-kube-controllers", IPNetworks:[]string{"192.168.14.133/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.calico-kube-controllers"}, InterfaceName:"calide79ca7d3be", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Sep 6 00:22:08.281547 env[1194]: 2025-09-06 00:22:08.227 [INFO][3768] cni-plugin/k8s.go 419: Calico CNI using IPs: [192.168.14.133/32] ContainerID="ef1fa9356b12fab2bb6aef5a37c459181d8a6a1f7b09728577d9035a9fdd06d8" Namespace="calico-system" Pod="calico-kube-controllers-dcdb654dd-lnm9v" WorkloadEndpoint="ci--3510.3.8--n--86fdecb492-k8s-calico--kube--controllers--dcdb654dd--lnm9v-eth0" Sep 6 00:22:08.281547 env[1194]: 2025-09-06 00:22:08.227 [INFO][3768] cni-plugin/dataplane_linux.go 69: Setting the host side veth name to calide79ca7d3be ContainerID="ef1fa9356b12fab2bb6aef5a37c459181d8a6a1f7b09728577d9035a9fdd06d8" Namespace="calico-system" Pod="calico-kube-controllers-dcdb654dd-lnm9v" WorkloadEndpoint="ci--3510.3.8--n--86fdecb492-k8s-calico--kube--controllers--dcdb654dd--lnm9v-eth0" Sep 6 00:22:08.281547 env[1194]: 2025-09-06 00:22:08.245 [INFO][3768] cni-plugin/dataplane_linux.go 508: Disabling IPv4 forwarding ContainerID="ef1fa9356b12fab2bb6aef5a37c459181d8a6a1f7b09728577d9035a9fdd06d8" Namespace="calico-system" Pod="calico-kube-controllers-dcdb654dd-lnm9v" WorkloadEndpoint="ci--3510.3.8--n--86fdecb492-k8s-calico--kube--controllers--dcdb654dd--lnm9v-eth0" Sep 6 00:22:08.281547 env[1194]: 2025-09-06 00:22:08.247 [INFO][3768] cni-plugin/k8s.go 446: Added Mac, interface name, and active container ID to endpoint ContainerID="ef1fa9356b12fab2bb6aef5a37c459181d8a6a1f7b09728577d9035a9fdd06d8" Namespace="calico-system" Pod="calico-kube-controllers-dcdb654dd-lnm9v" WorkloadEndpoint="ci--3510.3.8--n--86fdecb492-k8s-calico--kube--controllers--dcdb654dd--lnm9v-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ci--3510.3.8--n--86fdecb492-k8s-calico--kube--controllers--dcdb654dd--lnm9v-eth0", GenerateName:"calico-kube-controllers-dcdb654dd-", Namespace:"calico-system", SelfLink:"", UID:"a508ebae-2d95-49ee-ae16-79dab0a4ff50", ResourceVersion:"994", Generation:0, CreationTimestamp:time.Date(2025, time.September, 6, 0, 21, 44, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"calico-kube-controllers", "k8s-app":"calico-kube-controllers", "pod-template-hash":"dcdb654dd", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-kube-controllers"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ci-3510.3.8-n-86fdecb492", ContainerID:"ef1fa9356b12fab2bb6aef5a37c459181d8a6a1f7b09728577d9035a9fdd06d8", Pod:"calico-kube-controllers-dcdb654dd-lnm9v", Endpoint:"eth0", ServiceAccountName:"calico-kube-controllers", IPNetworks:[]string{"192.168.14.133/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.calico-kube-controllers"}, InterfaceName:"calide79ca7d3be", MAC:"fe:d1:3c:d3:c6:6d", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Sep 6 00:22:08.281547 env[1194]: 2025-09-06 00:22:08.267 [INFO][3768] cni-plugin/k8s.go 532: Wrote updated endpoint to datastore ContainerID="ef1fa9356b12fab2bb6aef5a37c459181d8a6a1f7b09728577d9035a9fdd06d8" Namespace="calico-system" Pod="calico-kube-controllers-dcdb654dd-lnm9v" WorkloadEndpoint="ci--3510.3.8--n--86fdecb492-k8s-calico--kube--controllers--dcdb654dd--lnm9v-eth0" Sep 6 00:22:08.294000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:08.294000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:08.294000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:08.294000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:08.294000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:08.294000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:08.294000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:08.294000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:08.294000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:08.294000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:08.294000 audit: BPF prog-id=184 op=LOAD Sep 6 00:22:08.295000 audit[3820]: AVC avc: denied { bpf } for pid=3820 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:08.295000 audit[3820]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c0001c5c48 a2=10 a3=1c items=0 ppid=3810 pid=3820 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:22:08.295000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3966383235326263626336393531316632633633353165663361653931 Sep 6 00:22:08.295000 audit[3820]: AVC avc: denied { perfmon } for pid=3820 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:08.295000 audit[3820]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001c56b0 a2=3c a3=c items=0 ppid=3810 pid=3820 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:22:08.295000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3966383235326263626336393531316632633633353165663361653931 Sep 6 00:22:08.298000 audit[3820]: AVC avc: denied { bpf } for pid=3820 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:08.298000 audit[3820]: AVC avc: denied { bpf } for pid=3820 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:08.298000 audit[3820]: AVC avc: denied { bpf } for pid=3820 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:08.298000 audit[3820]: AVC avc: denied { perfmon } for pid=3820 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:08.298000 audit[3820]: AVC avc: denied { perfmon } for pid=3820 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:08.298000 audit[3820]: AVC avc: denied { perfmon } for pid=3820 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:08.298000 audit[3820]: AVC avc: denied { perfmon } for pid=3820 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:08.298000 audit[3820]: AVC avc: denied { perfmon } for pid=3820 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:08.298000 audit[3820]: AVC avc: denied { bpf } for pid=3820 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:08.298000 audit[3820]: AVC avc: denied { bpf } for pid=3820 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:08.298000 audit: BPF prog-id=185 op=LOAD Sep 6 00:22:08.298000 audit[3820]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001c59d8 a2=78 a3=c00010c520 items=0 ppid=3810 pid=3820 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:22:08.298000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3966383235326263626336393531316632633633353165663361653931 Sep 6 00:22:08.298000 audit[3820]: AVC avc: denied { bpf } for pid=3820 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:08.298000 audit[3820]: AVC avc: denied { bpf } for pid=3820 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:08.298000 audit[3820]: AVC avc: denied { perfmon } for pid=3820 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:08.298000 audit[3820]: AVC avc: denied { perfmon } for pid=3820 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:08.298000 audit[3820]: AVC avc: denied { perfmon } for pid=3820 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:08.298000 audit[3820]: AVC avc: denied { perfmon } for pid=3820 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:08.298000 audit[3820]: AVC avc: denied { perfmon } for pid=3820 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:08.298000 audit[3820]: AVC avc: denied { bpf } for pid=3820 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:08.298000 audit[3820]: AVC avc: denied { bpf } for pid=3820 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:08.298000 audit: BPF prog-id=186 op=LOAD Sep 6 00:22:08.298000 audit[3820]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c0001c5770 a2=78 a3=c00010c568 items=0 ppid=3810 pid=3820 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:22:08.298000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3966383235326263626336393531316632633633353165663361653931 Sep 6 00:22:08.298000 audit: BPF prog-id=186 op=UNLOAD Sep 6 00:22:08.298000 audit: BPF prog-id=185 op=UNLOAD Sep 6 00:22:08.298000 audit[3820]: AVC avc: denied { bpf } for pid=3820 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:08.298000 audit[3820]: AVC avc: denied { bpf } for pid=3820 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:08.298000 audit[3820]: AVC avc: denied { bpf } for pid=3820 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:08.298000 audit[3820]: AVC avc: denied { perfmon } for pid=3820 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:08.298000 audit[3820]: AVC avc: denied { perfmon } for pid=3820 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:08.298000 audit[3820]: AVC avc: denied { perfmon } for pid=3820 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:08.298000 audit[3820]: AVC avc: denied { perfmon } for pid=3820 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:08.298000 audit[3820]: AVC avc: denied { perfmon } for pid=3820 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:08.298000 audit[3820]: AVC avc: denied { bpf } for pid=3820 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:08.298000 audit[3820]: AVC avc: denied { bpf } for pid=3820 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:08.298000 audit: BPF prog-id=187 op=LOAD Sep 6 00:22:08.298000 audit[3820]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001c5c30 a2=78 a3=c00010c978 items=0 ppid=3810 pid=3820 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:22:08.298000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3966383235326263626336393531316632633633353165663361653931 Sep 6 00:22:08.332000 audit[3844]: NETFILTER_CFG table=filter:112 family=2 entries=54 op=nft_register_chain pid=3844 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Sep 6 00:22:08.332000 audit[3844]: SYSCALL arch=c000003e syscall=46 success=yes exit=25992 a0=3 a1=7fff8dbd0c80 a2=0 a3=7fff8dbd0c6c items=0 ppid=3206 pid=3844 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:22:08.332000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Sep 6 00:22:08.348540 env[1194]: time="2025-09-06T00:22:08.348151086Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Sep 6 00:22:08.348540 env[1194]: time="2025-09-06T00:22:08.348214847Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Sep 6 00:22:08.348540 env[1194]: time="2025-09-06T00:22:08.348280517Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Sep 6 00:22:08.349462 env[1194]: time="2025-09-06T00:22:08.348784354Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/ef1fa9356b12fab2bb6aef5a37c459181d8a6a1f7b09728577d9035a9fdd06d8 pid=3852 runtime=io.containerd.runc.v2 Sep 6 00:22:08.381559 env[1194]: time="2025-09-06T00:22:08.381499706Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-apiserver-658847fc7d-nxs25,Uid:f08dcdfb-b2f6-4cf2-856e-527bb3034be9,Namespace:calico-apiserver,Attempt:1,} returns sandbox id \"9f8252bcbc69511f2c6351ef3ae914d962de19a29730652ef3abab0754e769a2\"" Sep 6 00:22:08.386602 env[1194]: time="2025-09-06T00:22:08.386547074Z" level=info msg="StopPodSandbox for \"865d6c3ec068e07b6321682c7afbda2f71b72d5a2cc7ea65fbddbe99ee0e181c\"" Sep 6 00:22:08.395578 env[1194]: time="2025-09-06T00:22:08.395501337Z" level=info msg="StopPodSandbox for \"401e31ac767b820917f0284ed67d15c34d31d47745a5163164761fda87b8a37c\"" Sep 6 00:22:08.403079 systemd[1]: Started cri-containerd-ef1fa9356b12fab2bb6aef5a37c459181d8a6a1f7b09728577d9035a9fdd06d8.scope. Sep 6 00:22:08.456000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:08.456000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:08.456000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:08.456000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:08.456000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:08.456000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:08.456000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:08.456000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:08.456000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:08.456000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:08.456000 audit: BPF prog-id=188 op=LOAD Sep 6 00:22:08.458000 audit[3860]: AVC avc: denied { bpf } for pid=3860 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:08.458000 audit[3860]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000117c48 a2=10 a3=1c items=0 ppid=3852 pid=3860 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:22:08.458000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6566316661393335366231326661623262623661656635613337633435 Sep 6 00:22:08.458000 audit[3860]: AVC avc: denied { perfmon } for pid=3860 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:08.458000 audit[3860]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001176b0 a2=3c a3=c items=0 ppid=3852 pid=3860 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:22:08.458000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6566316661393335366231326661623262623661656635613337633435 Sep 6 00:22:08.459000 audit[3860]: AVC avc: denied { bpf } for pid=3860 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:08.459000 audit[3860]: AVC avc: denied { bpf } for pid=3860 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:08.459000 audit[3860]: AVC avc: denied { bpf } for pid=3860 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:08.459000 audit[3860]: AVC avc: denied { perfmon } for pid=3860 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:08.459000 audit[3860]: AVC avc: denied { perfmon } for pid=3860 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:08.459000 audit[3860]: AVC avc: denied { perfmon } for pid=3860 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:08.459000 audit[3860]: AVC avc: denied { perfmon } for pid=3860 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:08.459000 audit[3860]: AVC avc: denied { perfmon } for pid=3860 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:08.459000 audit[3860]: AVC avc: denied { bpf } for pid=3860 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:08.459000 audit[3860]: AVC avc: denied { bpf } for pid=3860 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:08.459000 audit: BPF prog-id=189 op=LOAD Sep 6 00:22:08.459000 audit[3860]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001179d8 a2=78 a3=c000408350 items=0 ppid=3852 pid=3860 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:22:08.459000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6566316661393335366231326661623262623661656635613337633435 Sep 6 00:22:08.460000 audit[3860]: AVC avc: denied { bpf } for pid=3860 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:08.460000 audit[3860]: AVC avc: denied { bpf } for pid=3860 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:08.460000 audit[3860]: AVC avc: denied { perfmon } for pid=3860 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:08.460000 audit[3860]: AVC avc: denied { perfmon } for pid=3860 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:08.460000 audit[3860]: AVC avc: denied { perfmon } for pid=3860 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:08.460000 audit[3860]: AVC avc: denied { perfmon } for pid=3860 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:08.460000 audit[3860]: AVC avc: denied { perfmon } for pid=3860 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:08.460000 audit[3860]: AVC avc: denied { bpf } for pid=3860 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:08.460000 audit[3860]: AVC avc: denied { bpf } for pid=3860 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:08.460000 audit: BPF prog-id=190 op=LOAD Sep 6 00:22:08.460000 audit[3860]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000117770 a2=78 a3=c000408398 items=0 ppid=3852 pid=3860 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:22:08.460000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6566316661393335366231326661623262623661656635613337633435 Sep 6 00:22:08.461000 audit: BPF prog-id=190 op=UNLOAD Sep 6 00:22:08.461000 audit: BPF prog-id=189 op=UNLOAD Sep 6 00:22:08.461000 audit[3860]: AVC avc: denied { bpf } for pid=3860 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:08.461000 audit[3860]: AVC avc: denied { bpf } for pid=3860 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:08.461000 audit[3860]: AVC avc: denied { bpf } for pid=3860 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:08.461000 audit[3860]: AVC avc: denied { perfmon } for pid=3860 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:08.461000 audit[3860]: AVC avc: denied { perfmon } for pid=3860 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:08.461000 audit[3860]: AVC avc: denied { perfmon } for pid=3860 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:08.461000 audit[3860]: AVC avc: denied { perfmon } for pid=3860 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:08.461000 audit[3860]: AVC avc: denied { perfmon } for pid=3860 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:08.461000 audit[3860]: AVC avc: denied { bpf } for pid=3860 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:08.461000 audit[3860]: AVC avc: denied { bpf } for pid=3860 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:08.461000 audit: BPF prog-id=191 op=LOAD Sep 6 00:22:08.461000 audit[3860]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000117c30 a2=78 a3=c0004087a8 items=0 ppid=3852 pid=3860 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:22:08.461000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6566316661393335366231326661623262623661656635613337633435 Sep 6 00:22:08.532064 env[1194]: time="2025-09-06T00:22:08.532000263Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-kube-controllers-dcdb654dd-lnm9v,Uid:a508ebae-2d95-49ee-ae16-79dab0a4ff50,Namespace:calico-system,Attempt:1,} returns sandbox id \"ef1fa9356b12fab2bb6aef5a37c459181d8a6a1f7b09728577d9035a9fdd06d8\"" Sep 6 00:22:08.621294 env[1194]: 2025-09-06 00:22:08.507 [INFO][3896] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="865d6c3ec068e07b6321682c7afbda2f71b72d5a2cc7ea65fbddbe99ee0e181c" Sep 6 00:22:08.621294 env[1194]: 2025-09-06 00:22:08.507 [INFO][3896] cni-plugin/dataplane_linux.go 559: Deleting workload's device in netns. ContainerID="865d6c3ec068e07b6321682c7afbda2f71b72d5a2cc7ea65fbddbe99ee0e181c" iface="eth0" netns="/var/run/netns/cni-6e3f47d3-bb7e-e9e4-3b50-06d5bba67551" Sep 6 00:22:08.621294 env[1194]: 2025-09-06 00:22:08.508 [INFO][3896] cni-plugin/dataplane_linux.go 570: Entered netns, deleting veth. ContainerID="865d6c3ec068e07b6321682c7afbda2f71b72d5a2cc7ea65fbddbe99ee0e181c" iface="eth0" netns="/var/run/netns/cni-6e3f47d3-bb7e-e9e4-3b50-06d5bba67551" Sep 6 00:22:08.621294 env[1194]: 2025-09-06 00:22:08.508 [INFO][3896] cni-plugin/dataplane_linux.go 597: Workload's veth was already gone. Nothing to do. ContainerID="865d6c3ec068e07b6321682c7afbda2f71b72d5a2cc7ea65fbddbe99ee0e181c" iface="eth0" netns="/var/run/netns/cni-6e3f47d3-bb7e-e9e4-3b50-06d5bba67551" Sep 6 00:22:08.621294 env[1194]: 2025-09-06 00:22:08.508 [INFO][3896] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="865d6c3ec068e07b6321682c7afbda2f71b72d5a2cc7ea65fbddbe99ee0e181c" Sep 6 00:22:08.621294 env[1194]: 2025-09-06 00:22:08.508 [INFO][3896] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="865d6c3ec068e07b6321682c7afbda2f71b72d5a2cc7ea65fbddbe99ee0e181c" Sep 6 00:22:08.621294 env[1194]: 2025-09-06 00:22:08.602 [INFO][3920] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="865d6c3ec068e07b6321682c7afbda2f71b72d5a2cc7ea65fbddbe99ee0e181c" HandleID="k8s-pod-network.865d6c3ec068e07b6321682c7afbda2f71b72d5a2cc7ea65fbddbe99ee0e181c" Workload="ci--3510.3.8--n--86fdecb492-k8s-csi--node--driver--6qmdc-eth0" Sep 6 00:22:08.621294 env[1194]: 2025-09-06 00:22:08.602 [INFO][3920] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Sep 6 00:22:08.621294 env[1194]: 2025-09-06 00:22:08.602 [INFO][3920] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Sep 6 00:22:08.621294 env[1194]: 2025-09-06 00:22:08.610 [WARNING][3920] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="865d6c3ec068e07b6321682c7afbda2f71b72d5a2cc7ea65fbddbe99ee0e181c" HandleID="k8s-pod-network.865d6c3ec068e07b6321682c7afbda2f71b72d5a2cc7ea65fbddbe99ee0e181c" Workload="ci--3510.3.8--n--86fdecb492-k8s-csi--node--driver--6qmdc-eth0" Sep 6 00:22:08.621294 env[1194]: 2025-09-06 00:22:08.610 [INFO][3920] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="865d6c3ec068e07b6321682c7afbda2f71b72d5a2cc7ea65fbddbe99ee0e181c" HandleID="k8s-pod-network.865d6c3ec068e07b6321682c7afbda2f71b72d5a2cc7ea65fbddbe99ee0e181c" Workload="ci--3510.3.8--n--86fdecb492-k8s-csi--node--driver--6qmdc-eth0" Sep 6 00:22:08.621294 env[1194]: 2025-09-06 00:22:08.613 [INFO][3920] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Sep 6 00:22:08.621294 env[1194]: 2025-09-06 00:22:08.616 [INFO][3896] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="865d6c3ec068e07b6321682c7afbda2f71b72d5a2cc7ea65fbddbe99ee0e181c" Sep 6 00:22:08.631565 env[1194]: time="2025-09-06T00:22:08.627534856Z" level=info msg="TearDown network for sandbox \"865d6c3ec068e07b6321682c7afbda2f71b72d5a2cc7ea65fbddbe99ee0e181c\" successfully" Sep 6 00:22:08.631565 env[1194]: time="2025-09-06T00:22:08.627585331Z" level=info msg="StopPodSandbox for \"865d6c3ec068e07b6321682c7afbda2f71b72d5a2cc7ea65fbddbe99ee0e181c\" returns successfully" Sep 6 00:22:08.630164 systemd[1]: run-netns-cni\x2d6e3f47d3\x2dbb7e\x2de9e4\x2d3b50\x2d06d5bba67551.mount: Deactivated successfully. Sep 6 00:22:08.632775 env[1194]: time="2025-09-06T00:22:08.632712399Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:csi-node-driver-6qmdc,Uid:ece72a4f-db26-4c71-b1f6-478e03debafc,Namespace:calico-system,Attempt:1,}" Sep 6 00:22:08.649524 env[1194]: 2025-09-06 00:22:08.558 [INFO][3902] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="401e31ac767b820917f0284ed67d15c34d31d47745a5163164761fda87b8a37c" Sep 6 00:22:08.649524 env[1194]: 2025-09-06 00:22:08.558 [INFO][3902] cni-plugin/dataplane_linux.go 559: Deleting workload's device in netns. ContainerID="401e31ac767b820917f0284ed67d15c34d31d47745a5163164761fda87b8a37c" iface="eth0" netns="/var/run/netns/cni-ebde3bc9-6ddb-f68a-32f6-b13565c1c0e0" Sep 6 00:22:08.649524 env[1194]: 2025-09-06 00:22:08.558 [INFO][3902] cni-plugin/dataplane_linux.go 570: Entered netns, deleting veth. ContainerID="401e31ac767b820917f0284ed67d15c34d31d47745a5163164761fda87b8a37c" iface="eth0" netns="/var/run/netns/cni-ebde3bc9-6ddb-f68a-32f6-b13565c1c0e0" Sep 6 00:22:08.649524 env[1194]: 2025-09-06 00:22:08.559 [INFO][3902] cni-plugin/dataplane_linux.go 597: Workload's veth was already gone. Nothing to do. ContainerID="401e31ac767b820917f0284ed67d15c34d31d47745a5163164761fda87b8a37c" iface="eth0" netns="/var/run/netns/cni-ebde3bc9-6ddb-f68a-32f6-b13565c1c0e0" Sep 6 00:22:08.649524 env[1194]: 2025-09-06 00:22:08.559 [INFO][3902] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="401e31ac767b820917f0284ed67d15c34d31d47745a5163164761fda87b8a37c" Sep 6 00:22:08.649524 env[1194]: 2025-09-06 00:22:08.559 [INFO][3902] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="401e31ac767b820917f0284ed67d15c34d31d47745a5163164761fda87b8a37c" Sep 6 00:22:08.649524 env[1194]: 2025-09-06 00:22:08.613 [INFO][3932] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="401e31ac767b820917f0284ed67d15c34d31d47745a5163164761fda87b8a37c" HandleID="k8s-pod-network.401e31ac767b820917f0284ed67d15c34d31d47745a5163164761fda87b8a37c" Workload="ci--3510.3.8--n--86fdecb492-k8s-coredns--7c65d6cfc9--lj58v-eth0" Sep 6 00:22:08.649524 env[1194]: 2025-09-06 00:22:08.614 [INFO][3932] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Sep 6 00:22:08.649524 env[1194]: 2025-09-06 00:22:08.614 [INFO][3932] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Sep 6 00:22:08.649524 env[1194]: 2025-09-06 00:22:08.632 [WARNING][3932] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="401e31ac767b820917f0284ed67d15c34d31d47745a5163164761fda87b8a37c" HandleID="k8s-pod-network.401e31ac767b820917f0284ed67d15c34d31d47745a5163164761fda87b8a37c" Workload="ci--3510.3.8--n--86fdecb492-k8s-coredns--7c65d6cfc9--lj58v-eth0" Sep 6 00:22:08.649524 env[1194]: 2025-09-06 00:22:08.632 [INFO][3932] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="401e31ac767b820917f0284ed67d15c34d31d47745a5163164761fda87b8a37c" HandleID="k8s-pod-network.401e31ac767b820917f0284ed67d15c34d31d47745a5163164761fda87b8a37c" Workload="ci--3510.3.8--n--86fdecb492-k8s-coredns--7c65d6cfc9--lj58v-eth0" Sep 6 00:22:08.649524 env[1194]: 2025-09-06 00:22:08.635 [INFO][3932] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Sep 6 00:22:08.649524 env[1194]: 2025-09-06 00:22:08.637 [INFO][3902] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="401e31ac767b820917f0284ed67d15c34d31d47745a5163164761fda87b8a37c" Sep 6 00:22:08.653472 systemd[1]: run-netns-cni\x2debde3bc9\x2d6ddb\x2df68a\x2d32f6\x2db13565c1c0e0.mount: Deactivated successfully. Sep 6 00:22:08.654818 env[1194]: time="2025-09-06T00:22:08.654767074Z" level=info msg="TearDown network for sandbox \"401e31ac767b820917f0284ed67d15c34d31d47745a5163164761fda87b8a37c\" successfully" Sep 6 00:22:08.654986 env[1194]: time="2025-09-06T00:22:08.654947322Z" level=info msg="StopPodSandbox for \"401e31ac767b820917f0284ed67d15c34d31d47745a5163164761fda87b8a37c\" returns successfully" Sep 6 00:22:08.655971 kubelet[1933]: E0906 00:22:08.655461 1933 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 67.207.67.3 67.207.67.2 67.207.67.3" Sep 6 00:22:08.680583 env[1194]: time="2025-09-06T00:22:08.680539976Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:coredns-7c65d6cfc9-lj58v,Uid:ce247e9f-faab-4499-88d3-f60c1625b467,Namespace:kube-system,Attempt:1,}" Sep 6 00:22:08.709770 kubelet[1933]: E0906 00:22:08.709724 1933 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 67.207.67.3 67.207.67.2 67.207.67.3" Sep 6 00:22:08.867380 systemd-networkd[1004]: calif5633e528a2: Link UP Sep 6 00:22:08.869548 systemd-networkd[1004]: calif5633e528a2: Gained carrier Sep 6 00:22:08.870463 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): calif5633e528a2: link becomes ready Sep 6 00:22:08.914590 env[1194]: 2025-09-06 00:22:08.739 [INFO][3940] cni-plugin/plugin.go 340: Calico CNI found existing endpoint: &{{WorkloadEndpoint projectcalico.org/v3} {ci--3510.3.8--n--86fdecb492-k8s-csi--node--driver--6qmdc-eth0 csi-node-driver- calico-system ece72a4f-db26-4c71-b1f6-478e03debafc 1014 0 2025-09-06 00:21:44 +0000 UTC map[app.kubernetes.io/name:csi-node-driver controller-revision-hash:856c6b598f k8s-app:csi-node-driver name:csi-node-driver pod-template-generation:1 projectcalico.org/namespace:calico-system projectcalico.org/orchestrator:k8s projectcalico.org/serviceaccount:csi-node-driver] map[] [] [] []} {k8s ci-3510.3.8-n-86fdecb492 csi-node-driver-6qmdc eth0 csi-node-driver [] [] [kns.calico-system ksa.calico-system.csi-node-driver] calif5633e528a2 [] [] }} ContainerID="e1200c94299c783759b0ddc32335b68b1ba29dda4ee901238fb354c9c59fbc88" Namespace="calico-system" Pod="csi-node-driver-6qmdc" WorkloadEndpoint="ci--3510.3.8--n--86fdecb492-k8s-csi--node--driver--6qmdc-" Sep 6 00:22:08.914590 env[1194]: 2025-09-06 00:22:08.739 [INFO][3940] cni-plugin/k8s.go 74: Extracted identifiers for CmdAddK8s ContainerID="e1200c94299c783759b0ddc32335b68b1ba29dda4ee901238fb354c9c59fbc88" Namespace="calico-system" Pod="csi-node-driver-6qmdc" WorkloadEndpoint="ci--3510.3.8--n--86fdecb492-k8s-csi--node--driver--6qmdc-eth0" Sep 6 00:22:08.914590 env[1194]: 2025-09-06 00:22:08.791 [INFO][3965] ipam/ipam_plugin.go 225: Calico CNI IPAM request count IPv4=1 IPv6=0 ContainerID="e1200c94299c783759b0ddc32335b68b1ba29dda4ee901238fb354c9c59fbc88" HandleID="k8s-pod-network.e1200c94299c783759b0ddc32335b68b1ba29dda4ee901238fb354c9c59fbc88" Workload="ci--3510.3.8--n--86fdecb492-k8s-csi--node--driver--6qmdc-eth0" Sep 6 00:22:08.914590 env[1194]: 2025-09-06 00:22:08.791 [INFO][3965] ipam/ipam_plugin.go 265: Auto assigning IP ContainerID="e1200c94299c783759b0ddc32335b68b1ba29dda4ee901238fb354c9c59fbc88" HandleID="k8s-pod-network.e1200c94299c783759b0ddc32335b68b1ba29dda4ee901238fb354c9c59fbc88" Workload="ci--3510.3.8--n--86fdecb492-k8s-csi--node--driver--6qmdc-eth0" assignArgs=ipam.AutoAssignArgs{Num4:1, Num6:0, HandleID:(*string)(0xc0002cd600), Attrs:map[string]string{"namespace":"calico-system", "node":"ci-3510.3.8-n-86fdecb492", "pod":"csi-node-driver-6qmdc", "timestamp":"2025-09-06 00:22:08.791326077 +0000 UTC"}, Hostname:"ci-3510.3.8-n-86fdecb492", IPv4Pools:[]net.IPNet{}, IPv6Pools:[]net.IPNet{}, MaxBlocksPerHost:0, HostReservedAttrIPv4s:(*ipam.HostReservedAttr)(nil), HostReservedAttrIPv6s:(*ipam.HostReservedAttr)(nil), IntendedUse:"Workload"} Sep 6 00:22:08.914590 env[1194]: 2025-09-06 00:22:08.791 [INFO][3965] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Sep 6 00:22:08.914590 env[1194]: 2025-09-06 00:22:08.791 [INFO][3965] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Sep 6 00:22:08.914590 env[1194]: 2025-09-06 00:22:08.791 [INFO][3965] ipam/ipam.go 110: Auto-assign 1 ipv4, 0 ipv6 addrs for host 'ci-3510.3.8-n-86fdecb492' Sep 6 00:22:08.914590 env[1194]: 2025-09-06 00:22:08.803 [INFO][3965] ipam/ipam.go 691: Looking up existing affinities for host handle="k8s-pod-network.e1200c94299c783759b0ddc32335b68b1ba29dda4ee901238fb354c9c59fbc88" host="ci-3510.3.8-n-86fdecb492" Sep 6 00:22:08.914590 env[1194]: 2025-09-06 00:22:08.809 [INFO][3965] ipam/ipam.go 394: Looking up existing affinities for host host="ci-3510.3.8-n-86fdecb492" Sep 6 00:22:08.914590 env[1194]: 2025-09-06 00:22:08.820 [INFO][3965] ipam/ipam.go 511: Trying affinity for 192.168.14.128/26 host="ci-3510.3.8-n-86fdecb492" Sep 6 00:22:08.914590 env[1194]: 2025-09-06 00:22:08.825 [INFO][3965] ipam/ipam.go 158: Attempting to load block cidr=192.168.14.128/26 host="ci-3510.3.8-n-86fdecb492" Sep 6 00:22:08.914590 env[1194]: 2025-09-06 00:22:08.828 [INFO][3965] ipam/ipam.go 235: Affinity is confirmed and block has been loaded cidr=192.168.14.128/26 host="ci-3510.3.8-n-86fdecb492" Sep 6 00:22:08.914590 env[1194]: 2025-09-06 00:22:08.828 [INFO][3965] ipam/ipam.go 1220: Attempting to assign 1 addresses from block block=192.168.14.128/26 handle="k8s-pod-network.e1200c94299c783759b0ddc32335b68b1ba29dda4ee901238fb354c9c59fbc88" host="ci-3510.3.8-n-86fdecb492" Sep 6 00:22:08.914590 env[1194]: 2025-09-06 00:22:08.830 [INFO][3965] ipam/ipam.go 1764: Creating new handle: k8s-pod-network.e1200c94299c783759b0ddc32335b68b1ba29dda4ee901238fb354c9c59fbc88 Sep 6 00:22:08.914590 env[1194]: 2025-09-06 00:22:08.840 [INFO][3965] ipam/ipam.go 1243: Writing block in order to claim IPs block=192.168.14.128/26 handle="k8s-pod-network.e1200c94299c783759b0ddc32335b68b1ba29dda4ee901238fb354c9c59fbc88" host="ci-3510.3.8-n-86fdecb492" Sep 6 00:22:08.914590 env[1194]: 2025-09-06 00:22:08.854 [INFO][3965] ipam/ipam.go 1256: Successfully claimed IPs: [192.168.14.134/26] block=192.168.14.128/26 handle="k8s-pod-network.e1200c94299c783759b0ddc32335b68b1ba29dda4ee901238fb354c9c59fbc88" host="ci-3510.3.8-n-86fdecb492" Sep 6 00:22:08.914590 env[1194]: 2025-09-06 00:22:08.854 [INFO][3965] ipam/ipam.go 878: Auto-assigned 1 out of 1 IPv4s: [192.168.14.134/26] handle="k8s-pod-network.e1200c94299c783759b0ddc32335b68b1ba29dda4ee901238fb354c9c59fbc88" host="ci-3510.3.8-n-86fdecb492" Sep 6 00:22:08.914590 env[1194]: 2025-09-06 00:22:08.854 [INFO][3965] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Sep 6 00:22:08.914590 env[1194]: 2025-09-06 00:22:08.854 [INFO][3965] ipam/ipam_plugin.go 283: Calico CNI IPAM assigned addresses IPv4=[192.168.14.134/26] IPv6=[] ContainerID="e1200c94299c783759b0ddc32335b68b1ba29dda4ee901238fb354c9c59fbc88" HandleID="k8s-pod-network.e1200c94299c783759b0ddc32335b68b1ba29dda4ee901238fb354c9c59fbc88" Workload="ci--3510.3.8--n--86fdecb492-k8s-csi--node--driver--6qmdc-eth0" Sep 6 00:22:08.915407 env[1194]: 2025-09-06 00:22:08.860 [INFO][3940] cni-plugin/k8s.go 418: Populated endpoint ContainerID="e1200c94299c783759b0ddc32335b68b1ba29dda4ee901238fb354c9c59fbc88" Namespace="calico-system" Pod="csi-node-driver-6qmdc" WorkloadEndpoint="ci--3510.3.8--n--86fdecb492-k8s-csi--node--driver--6qmdc-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ci--3510.3.8--n--86fdecb492-k8s-csi--node--driver--6qmdc-eth0", GenerateName:"csi-node-driver-", Namespace:"calico-system", SelfLink:"", UID:"ece72a4f-db26-4c71-b1f6-478e03debafc", ResourceVersion:"1014", Generation:0, CreationTimestamp:time.Date(2025, time.September, 6, 0, 21, 44, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"csi-node-driver", "controller-revision-hash":"856c6b598f", "k8s-app":"csi-node-driver", "name":"csi-node-driver", "pod-template-generation":"1", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"csi-node-driver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ci-3510.3.8-n-86fdecb492", ContainerID:"", Pod:"csi-node-driver-6qmdc", Endpoint:"eth0", ServiceAccountName:"csi-node-driver", IPNetworks:[]string{"192.168.14.134/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.csi-node-driver"}, InterfaceName:"calif5633e528a2", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Sep 6 00:22:08.915407 env[1194]: 2025-09-06 00:22:08.861 [INFO][3940] cni-plugin/k8s.go 419: Calico CNI using IPs: [192.168.14.134/32] ContainerID="e1200c94299c783759b0ddc32335b68b1ba29dda4ee901238fb354c9c59fbc88" Namespace="calico-system" Pod="csi-node-driver-6qmdc" WorkloadEndpoint="ci--3510.3.8--n--86fdecb492-k8s-csi--node--driver--6qmdc-eth0" Sep 6 00:22:08.915407 env[1194]: 2025-09-06 00:22:08.861 [INFO][3940] cni-plugin/dataplane_linux.go 69: Setting the host side veth name to calif5633e528a2 ContainerID="e1200c94299c783759b0ddc32335b68b1ba29dda4ee901238fb354c9c59fbc88" Namespace="calico-system" Pod="csi-node-driver-6qmdc" WorkloadEndpoint="ci--3510.3.8--n--86fdecb492-k8s-csi--node--driver--6qmdc-eth0" Sep 6 00:22:08.915407 env[1194]: 2025-09-06 00:22:08.871 [INFO][3940] cni-plugin/dataplane_linux.go 508: Disabling IPv4 forwarding ContainerID="e1200c94299c783759b0ddc32335b68b1ba29dda4ee901238fb354c9c59fbc88" Namespace="calico-system" Pod="csi-node-driver-6qmdc" WorkloadEndpoint="ci--3510.3.8--n--86fdecb492-k8s-csi--node--driver--6qmdc-eth0" Sep 6 00:22:08.915407 env[1194]: 2025-09-06 00:22:08.881 [INFO][3940] cni-plugin/k8s.go 446: Added Mac, interface name, and active container ID to endpoint ContainerID="e1200c94299c783759b0ddc32335b68b1ba29dda4ee901238fb354c9c59fbc88" Namespace="calico-system" Pod="csi-node-driver-6qmdc" WorkloadEndpoint="ci--3510.3.8--n--86fdecb492-k8s-csi--node--driver--6qmdc-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ci--3510.3.8--n--86fdecb492-k8s-csi--node--driver--6qmdc-eth0", GenerateName:"csi-node-driver-", Namespace:"calico-system", SelfLink:"", UID:"ece72a4f-db26-4c71-b1f6-478e03debafc", ResourceVersion:"1014", Generation:0, CreationTimestamp:time.Date(2025, time.September, 6, 0, 21, 44, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"csi-node-driver", "controller-revision-hash":"856c6b598f", "k8s-app":"csi-node-driver", "name":"csi-node-driver", "pod-template-generation":"1", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"csi-node-driver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ci-3510.3.8-n-86fdecb492", ContainerID:"e1200c94299c783759b0ddc32335b68b1ba29dda4ee901238fb354c9c59fbc88", Pod:"csi-node-driver-6qmdc", Endpoint:"eth0", ServiceAccountName:"csi-node-driver", IPNetworks:[]string{"192.168.14.134/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.csi-node-driver"}, InterfaceName:"calif5633e528a2", MAC:"76:80:26:29:10:82", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Sep 6 00:22:08.915407 env[1194]: 2025-09-06 00:22:08.905 [INFO][3940] cni-plugin/k8s.go 532: Wrote updated endpoint to datastore ContainerID="e1200c94299c783759b0ddc32335b68b1ba29dda4ee901238fb354c9c59fbc88" Namespace="calico-system" Pod="csi-node-driver-6qmdc" WorkloadEndpoint="ci--3510.3.8--n--86fdecb492-k8s-csi--node--driver--6qmdc-eth0" Sep 6 00:22:08.964675 env[1194]: time="2025-09-06T00:22:08.964583720Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Sep 6 00:22:08.965009 env[1194]: time="2025-09-06T00:22:08.964975261Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Sep 6 00:22:08.965148 env[1194]: time="2025-09-06T00:22:08.965117531Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Sep 6 00:22:08.965519 env[1194]: time="2025-09-06T00:22:08.965485771Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/e1200c94299c783759b0ddc32335b68b1ba29dda4ee901238fb354c9c59fbc88 pid=3995 runtime=io.containerd.runc.v2 Sep 6 00:22:08.967000 audit[4001]: NETFILTER_CFG table=filter:113 family=2 entries=48 op=nft_register_chain pid=4001 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Sep 6 00:22:08.967000 audit[4001]: SYSCALL arch=c000003e syscall=46 success=yes exit=23124 a0=3 a1=7fff16879ff0 a2=0 a3=7fff16879fdc items=0 ppid=3206 pid=4001 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:22:08.967000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Sep 6 00:22:08.981950 systemd-networkd[1004]: cali0e97a6fd6e2: Link UP Sep 6 00:22:08.983963 systemd-networkd[1004]: cali0e97a6fd6e2: Gained carrier Sep 6 00:22:08.984329 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): cali0e97a6fd6e2: link becomes ready Sep 6 00:22:09.009524 systemd[1]: Started cri-containerd-e1200c94299c783759b0ddc32335b68b1ba29dda4ee901238fb354c9c59fbc88.scope. Sep 6 00:22:09.010906 env[1194]: 2025-09-06 00:22:08.808 [INFO][3953] cni-plugin/plugin.go 340: Calico CNI found existing endpoint: &{{WorkloadEndpoint projectcalico.org/v3} {ci--3510.3.8--n--86fdecb492-k8s-coredns--7c65d6cfc9--lj58v-eth0 coredns-7c65d6cfc9- kube-system ce247e9f-faab-4499-88d3-f60c1625b467 1016 0 2025-09-06 00:21:29 +0000 UTC map[k8s-app:kube-dns pod-template-hash:7c65d6cfc9 projectcalico.org/namespace:kube-system projectcalico.org/orchestrator:k8s projectcalico.org/serviceaccount:coredns] map[] [] [] []} {k8s ci-3510.3.8-n-86fdecb492 coredns-7c65d6cfc9-lj58v eth0 coredns [] [] [kns.kube-system ksa.kube-system.coredns] cali0e97a6fd6e2 [{dns UDP 53 0 } {dns-tcp TCP 53 0 } {metrics TCP 9153 0 }] [] }} ContainerID="393196948766ef01f37ba9308a09cc2a255405934f79599df32189b752663bab" Namespace="kube-system" Pod="coredns-7c65d6cfc9-lj58v" WorkloadEndpoint="ci--3510.3.8--n--86fdecb492-k8s-coredns--7c65d6cfc9--lj58v-" Sep 6 00:22:09.010906 env[1194]: 2025-09-06 00:22:08.808 [INFO][3953] cni-plugin/k8s.go 74: Extracted identifiers for CmdAddK8s ContainerID="393196948766ef01f37ba9308a09cc2a255405934f79599df32189b752663bab" Namespace="kube-system" Pod="coredns-7c65d6cfc9-lj58v" WorkloadEndpoint="ci--3510.3.8--n--86fdecb492-k8s-coredns--7c65d6cfc9--lj58v-eth0" Sep 6 00:22:09.010906 env[1194]: 2025-09-06 00:22:08.896 [INFO][3974] ipam/ipam_plugin.go 225: Calico CNI IPAM request count IPv4=1 IPv6=0 ContainerID="393196948766ef01f37ba9308a09cc2a255405934f79599df32189b752663bab" HandleID="k8s-pod-network.393196948766ef01f37ba9308a09cc2a255405934f79599df32189b752663bab" Workload="ci--3510.3.8--n--86fdecb492-k8s-coredns--7c65d6cfc9--lj58v-eth0" Sep 6 00:22:09.010906 env[1194]: 2025-09-06 00:22:08.896 [INFO][3974] ipam/ipam_plugin.go 265: Auto assigning IP ContainerID="393196948766ef01f37ba9308a09cc2a255405934f79599df32189b752663bab" HandleID="k8s-pod-network.393196948766ef01f37ba9308a09cc2a255405934f79599df32189b752663bab" Workload="ci--3510.3.8--n--86fdecb492-k8s-coredns--7c65d6cfc9--lj58v-eth0" assignArgs=ipam.AutoAssignArgs{Num4:1, Num6:0, HandleID:(*string)(0xc00032a820), Attrs:map[string]string{"namespace":"kube-system", "node":"ci-3510.3.8-n-86fdecb492", "pod":"coredns-7c65d6cfc9-lj58v", "timestamp":"2025-09-06 00:22:08.896006618 +0000 UTC"}, Hostname:"ci-3510.3.8-n-86fdecb492", IPv4Pools:[]net.IPNet{}, IPv6Pools:[]net.IPNet{}, MaxBlocksPerHost:0, HostReservedAttrIPv4s:(*ipam.HostReservedAttr)(nil), HostReservedAttrIPv6s:(*ipam.HostReservedAttr)(nil), IntendedUse:"Workload"} Sep 6 00:22:09.010906 env[1194]: 2025-09-06 00:22:08.896 [INFO][3974] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Sep 6 00:22:09.010906 env[1194]: 2025-09-06 00:22:08.896 [INFO][3974] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Sep 6 00:22:09.010906 env[1194]: 2025-09-06 00:22:08.896 [INFO][3974] ipam/ipam.go 110: Auto-assign 1 ipv4, 0 ipv6 addrs for host 'ci-3510.3.8-n-86fdecb492' Sep 6 00:22:09.010906 env[1194]: 2025-09-06 00:22:08.916 [INFO][3974] ipam/ipam.go 691: Looking up existing affinities for host handle="k8s-pod-network.393196948766ef01f37ba9308a09cc2a255405934f79599df32189b752663bab" host="ci-3510.3.8-n-86fdecb492" Sep 6 00:22:09.010906 env[1194]: 2025-09-06 00:22:08.925 [INFO][3974] ipam/ipam.go 394: Looking up existing affinities for host host="ci-3510.3.8-n-86fdecb492" Sep 6 00:22:09.010906 env[1194]: 2025-09-06 00:22:08.939 [INFO][3974] ipam/ipam.go 511: Trying affinity for 192.168.14.128/26 host="ci-3510.3.8-n-86fdecb492" Sep 6 00:22:09.010906 env[1194]: 2025-09-06 00:22:08.941 [INFO][3974] ipam/ipam.go 158: Attempting to load block cidr=192.168.14.128/26 host="ci-3510.3.8-n-86fdecb492" Sep 6 00:22:09.010906 env[1194]: 2025-09-06 00:22:08.944 [INFO][3974] ipam/ipam.go 235: Affinity is confirmed and block has been loaded cidr=192.168.14.128/26 host="ci-3510.3.8-n-86fdecb492" Sep 6 00:22:09.010906 env[1194]: 2025-09-06 00:22:08.945 [INFO][3974] ipam/ipam.go 1220: Attempting to assign 1 addresses from block block=192.168.14.128/26 handle="k8s-pod-network.393196948766ef01f37ba9308a09cc2a255405934f79599df32189b752663bab" host="ci-3510.3.8-n-86fdecb492" Sep 6 00:22:09.010906 env[1194]: 2025-09-06 00:22:08.947 [INFO][3974] ipam/ipam.go 1764: Creating new handle: k8s-pod-network.393196948766ef01f37ba9308a09cc2a255405934f79599df32189b752663bab Sep 6 00:22:09.010906 env[1194]: 2025-09-06 00:22:08.955 [INFO][3974] ipam/ipam.go 1243: Writing block in order to claim IPs block=192.168.14.128/26 handle="k8s-pod-network.393196948766ef01f37ba9308a09cc2a255405934f79599df32189b752663bab" host="ci-3510.3.8-n-86fdecb492" Sep 6 00:22:09.010906 env[1194]: 2025-09-06 00:22:08.968 [INFO][3974] ipam/ipam.go 1256: Successfully claimed IPs: [192.168.14.135/26] block=192.168.14.128/26 handle="k8s-pod-network.393196948766ef01f37ba9308a09cc2a255405934f79599df32189b752663bab" host="ci-3510.3.8-n-86fdecb492" Sep 6 00:22:09.010906 env[1194]: 2025-09-06 00:22:08.968 [INFO][3974] ipam/ipam.go 878: Auto-assigned 1 out of 1 IPv4s: [192.168.14.135/26] handle="k8s-pod-network.393196948766ef01f37ba9308a09cc2a255405934f79599df32189b752663bab" host="ci-3510.3.8-n-86fdecb492" Sep 6 00:22:09.010906 env[1194]: 2025-09-06 00:22:08.968 [INFO][3974] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Sep 6 00:22:09.010906 env[1194]: 2025-09-06 00:22:08.968 [INFO][3974] ipam/ipam_plugin.go 283: Calico CNI IPAM assigned addresses IPv4=[192.168.14.135/26] IPv6=[] ContainerID="393196948766ef01f37ba9308a09cc2a255405934f79599df32189b752663bab" HandleID="k8s-pod-network.393196948766ef01f37ba9308a09cc2a255405934f79599df32189b752663bab" Workload="ci--3510.3.8--n--86fdecb492-k8s-coredns--7c65d6cfc9--lj58v-eth0" Sep 6 00:22:09.011771 env[1194]: 2025-09-06 00:22:08.971 [INFO][3953] cni-plugin/k8s.go 418: Populated endpoint ContainerID="393196948766ef01f37ba9308a09cc2a255405934f79599df32189b752663bab" Namespace="kube-system" Pod="coredns-7c65d6cfc9-lj58v" WorkloadEndpoint="ci--3510.3.8--n--86fdecb492-k8s-coredns--7c65d6cfc9--lj58v-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ci--3510.3.8--n--86fdecb492-k8s-coredns--7c65d6cfc9--lj58v-eth0", GenerateName:"coredns-7c65d6cfc9-", Namespace:"kube-system", SelfLink:"", UID:"ce247e9f-faab-4499-88d3-f60c1625b467", ResourceVersion:"1016", Generation:0, CreationTimestamp:time.Date(2025, time.September, 6, 0, 21, 29, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"k8s-app":"kube-dns", "pod-template-hash":"7c65d6cfc9", "projectcalico.org/namespace":"kube-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"coredns"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ci-3510.3.8-n-86fdecb492", ContainerID:"", Pod:"coredns-7c65d6cfc9-lj58v", Endpoint:"eth0", ServiceAccountName:"coredns", IPNetworks:[]string{"192.168.14.135/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.kube-system", "ksa.kube-system.coredns"}, InterfaceName:"cali0e97a6fd6e2", MAC:"", Ports:[]v3.WorkloadEndpointPort{v3.WorkloadEndpointPort{Name:"dns", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"UDP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"dns-tcp", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"metrics", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x23c1, HostPort:0x0, HostIP:""}}, AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Sep 6 00:22:09.011771 env[1194]: 2025-09-06 00:22:08.971 [INFO][3953] cni-plugin/k8s.go 419: Calico CNI using IPs: [192.168.14.135/32] ContainerID="393196948766ef01f37ba9308a09cc2a255405934f79599df32189b752663bab" Namespace="kube-system" Pod="coredns-7c65d6cfc9-lj58v" WorkloadEndpoint="ci--3510.3.8--n--86fdecb492-k8s-coredns--7c65d6cfc9--lj58v-eth0" Sep 6 00:22:09.011771 env[1194]: 2025-09-06 00:22:08.971 [INFO][3953] cni-plugin/dataplane_linux.go 69: Setting the host side veth name to cali0e97a6fd6e2 ContainerID="393196948766ef01f37ba9308a09cc2a255405934f79599df32189b752663bab" Namespace="kube-system" Pod="coredns-7c65d6cfc9-lj58v" WorkloadEndpoint="ci--3510.3.8--n--86fdecb492-k8s-coredns--7c65d6cfc9--lj58v-eth0" Sep 6 00:22:09.011771 env[1194]: 2025-09-06 00:22:08.984 [INFO][3953] cni-plugin/dataplane_linux.go 508: Disabling IPv4 forwarding ContainerID="393196948766ef01f37ba9308a09cc2a255405934f79599df32189b752663bab" Namespace="kube-system" Pod="coredns-7c65d6cfc9-lj58v" WorkloadEndpoint="ci--3510.3.8--n--86fdecb492-k8s-coredns--7c65d6cfc9--lj58v-eth0" Sep 6 00:22:09.011771 env[1194]: 2025-09-06 00:22:08.984 [INFO][3953] cni-plugin/k8s.go 446: Added Mac, interface name, and active container ID to endpoint ContainerID="393196948766ef01f37ba9308a09cc2a255405934f79599df32189b752663bab" Namespace="kube-system" Pod="coredns-7c65d6cfc9-lj58v" WorkloadEndpoint="ci--3510.3.8--n--86fdecb492-k8s-coredns--7c65d6cfc9--lj58v-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ci--3510.3.8--n--86fdecb492-k8s-coredns--7c65d6cfc9--lj58v-eth0", GenerateName:"coredns-7c65d6cfc9-", Namespace:"kube-system", SelfLink:"", UID:"ce247e9f-faab-4499-88d3-f60c1625b467", ResourceVersion:"1016", Generation:0, CreationTimestamp:time.Date(2025, time.September, 6, 0, 21, 29, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"k8s-app":"kube-dns", "pod-template-hash":"7c65d6cfc9", "projectcalico.org/namespace":"kube-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"coredns"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ci-3510.3.8-n-86fdecb492", ContainerID:"393196948766ef01f37ba9308a09cc2a255405934f79599df32189b752663bab", Pod:"coredns-7c65d6cfc9-lj58v", Endpoint:"eth0", ServiceAccountName:"coredns", IPNetworks:[]string{"192.168.14.135/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.kube-system", "ksa.kube-system.coredns"}, InterfaceName:"cali0e97a6fd6e2", MAC:"b6:24:a5:4c:2b:77", Ports:[]v3.WorkloadEndpointPort{v3.WorkloadEndpointPort{Name:"dns", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"UDP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"dns-tcp", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"metrics", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x23c1, HostPort:0x0, HostIP:""}}, AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Sep 6 00:22:09.011771 env[1194]: 2025-09-06 00:22:09.005 [INFO][3953] cni-plugin/k8s.go 532: Wrote updated endpoint to datastore ContainerID="393196948766ef01f37ba9308a09cc2a255405934f79599df32189b752663bab" Namespace="kube-system" Pod="coredns-7c65d6cfc9-lj58v" WorkloadEndpoint="ci--3510.3.8--n--86fdecb492-k8s-coredns--7c65d6cfc9--lj58v-eth0" Sep 6 00:22:09.055139 env[1194]: time="2025-09-06T00:22:09.055032171Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Sep 6 00:22:09.055139 env[1194]: time="2025-09-06T00:22:09.055092856Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Sep 6 00:22:09.055139 env[1194]: time="2025-09-06T00:22:09.055103908Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Sep 6 00:22:09.055666 env[1194]: time="2025-09-06T00:22:09.055618911Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/393196948766ef01f37ba9308a09cc2a255405934f79599df32189b752663bab pid=4038 runtime=io.containerd.runc.v2 Sep 6 00:22:09.071597 systemd[1]: Started cri-containerd-393196948766ef01f37ba9308a09cc2a255405934f79599df32189b752663bab.scope. Sep 6 00:22:09.091000 audit[4040]: NETFILTER_CFG table=filter:114 family=2 entries=48 op=nft_register_chain pid=4040 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Sep 6 00:22:09.091000 audit[4040]: SYSCALL arch=c000003e syscall=46 success=yes exit=22704 a0=3 a1=7ffe40b3e6a0 a2=0 a3=7ffe40b3e68c items=0 ppid=3206 pid=4040 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:22:09.091000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Sep 6 00:22:09.107000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:09.107000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:09.107000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:09.107000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:09.107000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:09.107000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:09.107000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:09.107000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:09.107000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:09.107000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:09.107000 audit: BPF prog-id=192 op=LOAD Sep 6 00:22:09.107000 audit[4049]: AVC avc: denied { bpf } for pid=4049 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:09.107000 audit[4049]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000145c48 a2=10 a3=1c items=0 ppid=4038 pid=4049 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:22:09.107000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3339333139363934383736366566303166333762613933303861303963 Sep 6 00:22:09.107000 audit[4049]: AVC avc: denied { perfmon } for pid=4049 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:09.107000 audit[4049]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001456b0 a2=3c a3=c items=0 ppid=4038 pid=4049 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:22:09.107000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3339333139363934383736366566303166333762613933303861303963 Sep 6 00:22:09.108000 audit[4049]: AVC avc: denied { bpf } for pid=4049 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:09.108000 audit[4049]: AVC avc: denied { bpf } for pid=4049 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:09.108000 audit[4049]: AVC avc: denied { bpf } for pid=4049 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:09.108000 audit[4049]: AVC avc: denied { perfmon } for pid=4049 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:09.108000 audit[4049]: AVC avc: denied { perfmon } for pid=4049 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:09.108000 audit[4049]: AVC avc: denied { perfmon } for pid=4049 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:09.108000 audit[4049]: AVC avc: denied { perfmon } for pid=4049 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:09.108000 audit[4049]: AVC avc: denied { perfmon } for pid=4049 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:09.108000 audit[4049]: AVC avc: denied { bpf } for pid=4049 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:09.108000 audit[4049]: AVC avc: denied { bpf } for pid=4049 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:09.108000 audit: BPF prog-id=193 op=LOAD Sep 6 00:22:09.108000 audit[4049]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001459d8 a2=78 a3=c000025170 items=0 ppid=4038 pid=4049 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:22:09.108000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3339333139363934383736366566303166333762613933303861303963 Sep 6 00:22:09.108000 audit[4049]: AVC avc: denied { bpf } for pid=4049 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:09.108000 audit[4049]: AVC avc: denied { bpf } for pid=4049 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:09.108000 audit[4049]: AVC avc: denied { perfmon } for pid=4049 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:09.108000 audit[4049]: AVC avc: denied { perfmon } for pid=4049 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:09.108000 audit[4049]: AVC avc: denied { perfmon } for pid=4049 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:09.108000 audit[4049]: AVC avc: denied { perfmon } for pid=4049 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:09.108000 audit[4049]: AVC avc: denied { perfmon } for pid=4049 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:09.108000 audit[4049]: AVC avc: denied { bpf } for pid=4049 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:09.108000 audit[4049]: AVC avc: denied { bpf } for pid=4049 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:09.108000 audit: BPF prog-id=194 op=LOAD Sep 6 00:22:09.108000 audit[4049]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000145770 a2=78 a3=c0000251b8 items=0 ppid=4038 pid=4049 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:22:09.108000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3339333139363934383736366566303166333762613933303861303963 Sep 6 00:22:09.108000 audit: BPF prog-id=194 op=UNLOAD Sep 6 00:22:09.108000 audit: BPF prog-id=193 op=UNLOAD Sep 6 00:22:09.108000 audit[4049]: AVC avc: denied { bpf } for pid=4049 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:09.108000 audit[4049]: AVC avc: denied { bpf } for pid=4049 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:09.108000 audit[4049]: AVC avc: denied { bpf } for pid=4049 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:09.108000 audit[4049]: AVC avc: denied { perfmon } for pid=4049 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:09.108000 audit[4049]: AVC avc: denied { perfmon } for pid=4049 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:09.108000 audit[4049]: AVC avc: denied { perfmon } for pid=4049 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:09.108000 audit[4049]: AVC avc: denied { perfmon } for pid=4049 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:09.108000 audit[4049]: AVC avc: denied { perfmon } for pid=4049 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:09.108000 audit[4049]: AVC avc: denied { bpf } for pid=4049 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:09.108000 audit[4049]: AVC avc: denied { bpf } for pid=4049 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:09.108000 audit: BPF prog-id=195 op=LOAD Sep 6 00:22:09.108000 audit[4049]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000145c30 a2=78 a3=c0000255c8 items=0 ppid=4038 pid=4049 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:22:09.108000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3339333139363934383736366566303166333762613933303861303963 Sep 6 00:22:09.108000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:09.108000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:09.108000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:09.108000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:09.108000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:09.108000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:09.108000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:09.108000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:09.108000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:09.109000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:09.109000 audit: BPF prog-id=196 op=LOAD Sep 6 00:22:09.112000 audit[4009]: AVC avc: denied { bpf } for pid=4009 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:09.112000 audit[4009]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000145c48 a2=10 a3=1c items=0 ppid=3995 pid=4009 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:22:09.112000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6531323030633934323939633738333735396230646463333233333562 Sep 6 00:22:09.114000 audit[4009]: AVC avc: denied { perfmon } for pid=4009 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:09.114000 audit[4009]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001456b0 a2=3c a3=c items=0 ppid=3995 pid=4009 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:22:09.114000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6531323030633934323939633738333735396230646463333233333562 Sep 6 00:22:09.114000 audit[4009]: AVC avc: denied { bpf } for pid=4009 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:09.114000 audit[4009]: AVC avc: denied { bpf } for pid=4009 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:09.114000 audit[4009]: AVC avc: denied { bpf } for pid=4009 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:09.114000 audit[4009]: AVC avc: denied { perfmon } for pid=4009 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:09.114000 audit[4009]: AVC avc: denied { perfmon } for pid=4009 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:09.114000 audit[4009]: AVC avc: denied { perfmon } for pid=4009 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:09.114000 audit[4009]: AVC avc: denied { perfmon } for pid=4009 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:09.114000 audit[4009]: AVC avc: denied { perfmon } for pid=4009 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:09.114000 audit[4009]: AVC avc: denied { bpf } for pid=4009 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:09.114000 audit[4009]: AVC avc: denied { bpf } for pid=4009 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:09.114000 audit: BPF prog-id=197 op=LOAD Sep 6 00:22:09.114000 audit[4009]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001459d8 a2=78 a3=c000185670 items=0 ppid=3995 pid=4009 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:22:09.114000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6531323030633934323939633738333735396230646463333233333562 Sep 6 00:22:09.121000 audit[4009]: AVC avc: denied { bpf } for pid=4009 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:09.121000 audit[4009]: AVC avc: denied { bpf } for pid=4009 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:09.121000 audit[4009]: AVC avc: denied { perfmon } for pid=4009 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:09.121000 audit[4009]: AVC avc: denied { perfmon } for pid=4009 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:09.121000 audit[4009]: AVC avc: denied { perfmon } for pid=4009 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:09.121000 audit[4009]: AVC avc: denied { perfmon } for pid=4009 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:09.121000 audit[4009]: AVC avc: denied { perfmon } for pid=4009 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:09.121000 audit[4009]: AVC avc: denied { bpf } for pid=4009 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:09.121000 audit[4009]: AVC avc: denied { bpf } for pid=4009 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:09.121000 audit: BPF prog-id=198 op=LOAD Sep 6 00:22:09.121000 audit[4009]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000145770 a2=78 a3=c0001856b8 items=0 ppid=3995 pid=4009 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:22:09.121000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6531323030633934323939633738333735396230646463333233333562 Sep 6 00:22:09.121000 audit: BPF prog-id=198 op=UNLOAD Sep 6 00:22:09.122000 audit: BPF prog-id=197 op=UNLOAD Sep 6 00:22:09.122000 audit[4009]: AVC avc: denied { bpf } for pid=4009 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:09.122000 audit[4009]: AVC avc: denied { bpf } for pid=4009 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:09.122000 audit[4009]: AVC avc: denied { bpf } for pid=4009 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:09.122000 audit[4009]: AVC avc: denied { perfmon } for pid=4009 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:09.122000 audit[4009]: AVC avc: denied { perfmon } for pid=4009 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:09.122000 audit[4009]: AVC avc: denied { perfmon } for pid=4009 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:09.122000 audit[4009]: AVC avc: denied { perfmon } for pid=4009 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:09.122000 audit[4009]: AVC avc: denied { perfmon } for pid=4009 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:09.122000 audit[4009]: AVC avc: denied { bpf } for pid=4009 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:09.122000 audit[4009]: AVC avc: denied { bpf } for pid=4009 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:09.122000 audit: BPF prog-id=199 op=LOAD Sep 6 00:22:09.122000 audit[4009]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000145c30 a2=78 a3=c000185ac8 items=0 ppid=3995 pid=4009 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:22:09.122000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6531323030633934323939633738333735396230646463333233333562 Sep 6 00:22:09.149668 env[1194]: time="2025-09-06T00:22:09.149490571Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/whisker-backend:v3.30.3,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 6 00:22:09.150841 env[1194]: time="2025-09-06T00:22:09.150802046Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:csi-node-driver-6qmdc,Uid:ece72a4f-db26-4c71-b1f6-478e03debafc,Namespace:calico-system,Attempt:1,} returns sandbox id \"e1200c94299c783759b0ddc32335b68b1ba29dda4ee901238fb354c9c59fbc88\"" Sep 6 00:22:09.154059 env[1194]: time="2025-09-06T00:22:09.154020534Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:7e29b0984d517678aab6ca138482c318989f6f28daf9d3b5dd6e4a5a3115ac16,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 6 00:22:09.158292 env[1194]: time="2025-09-06T00:22:09.158225311Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/whisker-backend:v3.30.3,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 6 00:22:09.160439 env[1194]: time="2025-09-06T00:22:09.160400312Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/whisker-backend@sha256:29becebc47401da9997a2a30f4c25c511a5f379d17275680b048224829af71a5,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 6 00:22:09.161004 env[1194]: time="2025-09-06T00:22:09.160971241Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/whisker-backend:v3.30.3\" returns image reference \"sha256:7e29b0984d517678aab6ca138482c318989f6f28daf9d3b5dd6e4a5a3115ac16\"" Sep 6 00:22:09.164425 env[1194]: time="2025-09-06T00:22:09.164376700Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/apiserver:v3.30.3\"" Sep 6 00:22:09.171310 env[1194]: time="2025-09-06T00:22:09.165974772Z" level=info msg="CreateContainer within sandbox \"e4c7a46e6700b7479b88e5a8c2b11d17dda22ce2dad2275f4ac6804407270f54\" for container &ContainerMetadata{Name:whisker-backend,Attempt:0,}" Sep 6 00:22:09.176611 env[1194]: time="2025-09-06T00:22:09.176563922Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:coredns-7c65d6cfc9-lj58v,Uid:ce247e9f-faab-4499-88d3-f60c1625b467,Namespace:kube-system,Attempt:1,} returns sandbox id \"393196948766ef01f37ba9308a09cc2a255405934f79599df32189b752663bab\"" Sep 6 00:22:09.177831 kubelet[1933]: E0906 00:22:09.177596 1933 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 67.207.67.3 67.207.67.2 67.207.67.3" Sep 6 00:22:09.180847 env[1194]: time="2025-09-06T00:22:09.180093650Z" level=info msg="CreateContainer within sandbox \"393196948766ef01f37ba9308a09cc2a255405934f79599df32189b752663bab\" for container &ContainerMetadata{Name:coredns,Attempt:0,}" Sep 6 00:22:09.193694 env[1194]: time="2025-09-06T00:22:09.193510431Z" level=info msg="CreateContainer within sandbox \"e4c7a46e6700b7479b88e5a8c2b11d17dda22ce2dad2275f4ac6804407270f54\" for &ContainerMetadata{Name:whisker-backend,Attempt:0,} returns container id \"13db883b55fff0debcac25c21c7bde2dc59816188920d1c9d2a3fcf554cb8590\"" Sep 6 00:22:09.195700 env[1194]: time="2025-09-06T00:22:09.195667364Z" level=info msg="StartContainer for \"13db883b55fff0debcac25c21c7bde2dc59816188920d1c9d2a3fcf554cb8590\"" Sep 6 00:22:09.201430 env[1194]: time="2025-09-06T00:22:09.201382948Z" level=info msg="CreateContainer within sandbox \"393196948766ef01f37ba9308a09cc2a255405934f79599df32189b752663bab\" for &ContainerMetadata{Name:coredns,Attempt:0,} returns container id \"682b4c6bf149fcfe314f0b6777b89142e2758c76c52315a05c89e96cc4c295e1\"" Sep 6 00:22:09.202671 env[1194]: time="2025-09-06T00:22:09.202632594Z" level=info msg="StartContainer for \"682b4c6bf149fcfe314f0b6777b89142e2758c76c52315a05c89e96cc4c295e1\"" Sep 6 00:22:09.223569 systemd[1]: Started cri-containerd-13db883b55fff0debcac25c21c7bde2dc59816188920d1c9d2a3fcf554cb8590.scope. Sep 6 00:22:09.234819 systemd[1]: Started cri-containerd-682b4c6bf149fcfe314f0b6777b89142e2758c76c52315a05c89e96cc4c295e1.scope. Sep 6 00:22:09.257000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:09.257000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:09.257000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:09.257000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:09.257000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:09.257000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:09.257000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:09.257000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:09.257000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:09.257000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:09.257000 audit: BPF prog-id=200 op=LOAD Sep 6 00:22:09.259000 audit[4103]: AVC avc: denied { bpf } for pid=4103 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:09.259000 audit[4103]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000145c48 a2=10 a3=1c items=0 ppid=4038 pid=4103 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:22:09.259000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3638326234633662663134396663666533313466306236373737623839 Sep 6 00:22:09.259000 audit[4103]: AVC avc: denied { perfmon } for pid=4103 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:09.259000 audit[4103]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001456b0 a2=3c a3=8 items=0 ppid=4038 pid=4103 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:22:09.259000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3638326234633662663134396663666533313466306236373737623839 Sep 6 00:22:09.259000 audit[4103]: AVC avc: denied { bpf } for pid=4103 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:09.259000 audit[4103]: AVC avc: denied { bpf } for pid=4103 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:09.259000 audit[4103]: AVC avc: denied { bpf } for pid=4103 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:09.259000 audit[4103]: AVC avc: denied { perfmon } for pid=4103 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:09.259000 audit[4103]: AVC avc: denied { perfmon } for pid=4103 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:09.259000 audit[4103]: AVC avc: denied { perfmon } for pid=4103 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:09.259000 audit[4103]: AVC avc: denied { perfmon } for pid=4103 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:09.259000 audit[4103]: AVC avc: denied { perfmon } for pid=4103 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:09.259000 audit[4103]: AVC avc: denied { bpf } for pid=4103 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:09.259000 audit[4103]: AVC avc: denied { bpf } for pid=4103 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:09.259000 audit: BPF prog-id=201 op=LOAD Sep 6 00:22:09.259000 audit[4103]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001459d8 a2=78 a3=c000257d30 items=0 ppid=4038 pid=4103 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:22:09.259000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3638326234633662663134396663666533313466306236373737623839 Sep 6 00:22:09.261000 audit[4103]: AVC avc: denied { bpf } for pid=4103 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:09.261000 audit[4103]: AVC avc: denied { bpf } for pid=4103 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:09.261000 audit[4103]: AVC avc: denied { perfmon } for pid=4103 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:09.261000 audit[4103]: AVC avc: denied { perfmon } for pid=4103 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:09.261000 audit[4103]: AVC avc: denied { perfmon } for pid=4103 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:09.261000 audit[4103]: AVC avc: denied { perfmon } for pid=4103 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:09.261000 audit[4103]: AVC avc: denied { perfmon } for pid=4103 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:09.261000 audit[4103]: AVC avc: denied { bpf } for pid=4103 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:09.261000 audit[4103]: AVC avc: denied { bpf } for pid=4103 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:09.261000 audit: BPF prog-id=202 op=LOAD Sep 6 00:22:09.261000 audit[4103]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000145770 a2=78 a3=c000257d78 items=0 ppid=4038 pid=4103 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:22:09.261000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3638326234633662663134396663666533313466306236373737623839 Sep 6 00:22:09.261000 audit: BPF prog-id=202 op=UNLOAD Sep 6 00:22:09.261000 audit: BPF prog-id=201 op=UNLOAD Sep 6 00:22:09.262000 audit[4103]: AVC avc: denied { bpf } for pid=4103 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:09.262000 audit[4103]: AVC avc: denied { bpf } for pid=4103 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:09.262000 audit[4103]: AVC avc: denied { bpf } for pid=4103 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:09.262000 audit[4103]: AVC avc: denied { perfmon } for pid=4103 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:09.262000 audit[4103]: AVC avc: denied { perfmon } for pid=4103 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:09.262000 audit[4103]: AVC avc: denied { perfmon } for pid=4103 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:09.262000 audit[4103]: AVC avc: denied { perfmon } for pid=4103 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:09.262000 audit[4103]: AVC avc: denied { perfmon } for pid=4103 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:09.262000 audit[4103]: AVC avc: denied { bpf } for pid=4103 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:09.262000 audit[4103]: AVC avc: denied { bpf } for pid=4103 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:09.262000 audit: BPF prog-id=203 op=LOAD Sep 6 00:22:09.262000 audit[4103]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000145c30 a2=78 a3=c0003a2188 items=0 ppid=4038 pid=4103 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:22:09.262000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3638326234633662663134396663666533313466306236373737623839 Sep 6 00:22:09.268000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:09.268000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:09.268000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:09.268000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:09.268000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:09.268000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:09.268000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:09.268000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:09.268000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:09.269000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:09.269000 audit: BPF prog-id=204 op=LOAD Sep 6 00:22:09.270000 audit[4090]: AVC avc: denied { bpf } for pid=4090 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:09.270000 audit[4090]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000145c48 a2=10 a3=1c items=0 ppid=3307 pid=4090 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:22:09.270000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3133646238383362353566666630646562636163323563323163376264 Sep 6 00:22:09.270000 audit[4090]: AVC avc: denied { perfmon } for pid=4090 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:09.270000 audit[4090]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001456b0 a2=3c a3=8 items=0 ppid=3307 pid=4090 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:22:09.270000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3133646238383362353566666630646562636163323563323163376264 Sep 6 00:22:09.270000 audit[4090]: AVC avc: denied { bpf } for pid=4090 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:09.270000 audit[4090]: AVC avc: denied { bpf } for pid=4090 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:09.270000 audit[4090]: AVC avc: denied { bpf } for pid=4090 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:09.270000 audit[4090]: AVC avc: denied { perfmon } for pid=4090 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:09.270000 audit[4090]: AVC avc: denied { perfmon } for pid=4090 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:09.270000 audit[4090]: AVC avc: denied { perfmon } for pid=4090 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:09.270000 audit[4090]: AVC avc: denied { perfmon } for pid=4090 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:09.270000 audit[4090]: AVC avc: denied { perfmon } for pid=4090 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:09.270000 audit[4090]: AVC avc: denied { bpf } for pid=4090 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:09.270000 audit[4090]: AVC avc: denied { bpf } for pid=4090 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:09.270000 audit: BPF prog-id=205 op=LOAD Sep 6 00:22:09.270000 audit[4090]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001459d8 a2=78 a3=c0003ac4a0 items=0 ppid=3307 pid=4090 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:22:09.270000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3133646238383362353566666630646562636163323563323163376264 Sep 6 00:22:09.270000 audit[4090]: AVC avc: denied { bpf } for pid=4090 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:09.270000 audit[4090]: AVC avc: denied { bpf } for pid=4090 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:09.270000 audit[4090]: AVC avc: denied { perfmon } for pid=4090 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:09.270000 audit[4090]: AVC avc: denied { perfmon } for pid=4090 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:09.270000 audit[4090]: AVC avc: denied { perfmon } for pid=4090 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:09.270000 audit[4090]: AVC avc: denied { perfmon } for pid=4090 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:09.270000 audit[4090]: AVC avc: denied { perfmon } for pid=4090 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:09.270000 audit[4090]: AVC avc: denied { bpf } for pid=4090 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:09.270000 audit[4090]: AVC avc: denied { bpf } for pid=4090 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:09.270000 audit: BPF prog-id=206 op=LOAD Sep 6 00:22:09.270000 audit[4090]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000145770 a2=78 a3=c0003ac4e8 items=0 ppid=3307 pid=4090 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:22:09.270000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3133646238383362353566666630646562636163323563323163376264 Sep 6 00:22:09.270000 audit: BPF prog-id=206 op=UNLOAD Sep 6 00:22:09.270000 audit: BPF prog-id=205 op=UNLOAD Sep 6 00:22:09.270000 audit[4090]: AVC avc: denied { bpf } for pid=4090 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:09.270000 audit[4090]: AVC avc: denied { bpf } for pid=4090 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:09.270000 audit[4090]: AVC avc: denied { bpf } for pid=4090 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:09.270000 audit[4090]: AVC avc: denied { perfmon } for pid=4090 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:09.270000 audit[4090]: AVC avc: denied { perfmon } for pid=4090 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:09.270000 audit[4090]: AVC avc: denied { perfmon } for pid=4090 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:09.270000 audit[4090]: AVC avc: denied { perfmon } for pid=4090 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:09.270000 audit[4090]: AVC avc: denied { perfmon } for pid=4090 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:09.270000 audit[4090]: AVC avc: denied { bpf } for pid=4090 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:09.270000 audit[4090]: AVC avc: denied { bpf } for pid=4090 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:09.270000 audit: BPF prog-id=207 op=LOAD Sep 6 00:22:09.270000 audit[4090]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000145c30 a2=78 a3=c0003ac8f8 items=0 ppid=3307 pid=4090 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:22:09.270000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3133646238383362353566666630646562636163323563323163376264 Sep 6 00:22:09.321875 env[1194]: time="2025-09-06T00:22:09.321801895Z" level=info msg="StartContainer for \"682b4c6bf149fcfe314f0b6777b89142e2758c76c52315a05c89e96cc4c295e1\" returns successfully" Sep 6 00:22:09.323023 env[1194]: time="2025-09-06T00:22:09.322962215Z" level=info msg="StartContainer for \"13db883b55fff0debcac25c21c7bde2dc59816188920d1c9d2a3fcf554cb8590\" returns successfully" Sep 6 00:22:09.347000 audit[4120]: AVC avc: denied { getattr } for pid=4120 comm="coredns" path="cgroup:[4026532746]" dev="nsfs" ino=4026532746 scontext=system_u:system_r:svirt_lxc_net_t:s0:c77,c560 tcontext=system_u:object_r:nsfs_t:s0 tclass=file permissive=0 Sep 6 00:22:09.347000 audit[4120]: SYSCALL arch=c000003e syscall=262 success=no exit=-13 a0=ffffffffffffff9c a1=c00005a720 a2=c000129d78 a3=0 items=0 ppid=4038 pid=4120 auid=4294967295 uid=65532 gid=65532 euid=65532 suid=65532 fsuid=65532 egid=65532 sgid=65532 fsgid=65532 tty=(none) ses=4294967295 comm="coredns" exe="/coredns" subj=system_u:system_r:svirt_lxc_net_t:s0:c77,c560 key=(null) Sep 6 00:22:09.347000 audit: PROCTITLE proctitle=2F636F7265646E73002D636F6E66002F6574632F636F7265646E732F436F726566696C65 Sep 6 00:22:09.571793 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount1697222713.mount: Deactivated successfully. Sep 6 00:22:09.727715 kubelet[1933]: E0906 00:22:09.727304 1933 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 67.207.67.3 67.207.67.2 67.207.67.3" Sep 6 00:22:09.734812 kubelet[1933]: E0906 00:22:09.734783 1933 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 67.207.67.3 67.207.67.2 67.207.67.3" Sep 6 00:22:09.746539 systemd-networkd[1004]: calide79ca7d3be: Gained IPv6LL Sep 6 00:22:09.762997 kubelet[1933]: I0906 00:22:09.762089 1933 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="calico-system/whisker-644c87b7f7-mbfmn" podStartSLOduration=2.069620734 podStartE2EDuration="7.762048706s" podCreationTimestamp="2025-09-06 00:22:02 +0000 UTC" firstStartedPulling="2025-09-06 00:22:03.470421736 +0000 UTC m=+40.330411681" lastFinishedPulling="2025-09-06 00:22:09.162849708 +0000 UTC m=+46.022839653" observedRunningTime="2025-09-06 00:22:09.760562794 +0000 UTC m=+46.620552764" watchObservedRunningTime="2025-09-06 00:22:09.762048706 +0000 UTC m=+46.622038684" Sep 6 00:22:09.796000 audit[4167]: NETFILTER_CFG table=filter:115 family=2 entries=13 op=nft_register_rule pid=4167 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Sep 6 00:22:09.796000 audit[4167]: SYSCALL arch=c000003e syscall=46 success=yes exit=4504 a0=3 a1=7ffd1f66e4c0 a2=0 a3=7ffd1f66e4ac items=0 ppid=2038 pid=4167 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:22:09.796000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Sep 6 00:22:09.802000 audit[4167]: NETFILTER_CFG table=nat:116 family=2 entries=27 op=nft_register_chain pid=4167 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Sep 6 00:22:09.802000 audit[4167]: SYSCALL arch=c000003e syscall=46 success=yes exit=9348 a0=3 a1=7ffd1f66e4c0 a2=0 a3=7ffd1f66e4ac items=0 ppid=2038 pid=4167 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:22:09.802000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Sep 6 00:22:09.811527 systemd-networkd[1004]: cali9be8c42a104: Gained IPv6LL Sep 6 00:22:09.820000 audit[4169]: NETFILTER_CFG table=filter:117 family=2 entries=12 op=nft_register_rule pid=4169 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Sep 6 00:22:09.820000 audit[4169]: SYSCALL arch=c000003e syscall=46 success=yes exit=4504 a0=3 a1=7ffefe78ca10 a2=0 a3=7ffefe78c9fc items=0 ppid=2038 pid=4169 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:22:09.820000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Sep 6 00:22:09.834000 audit[4169]: NETFILTER_CFG table=nat:118 family=2 entries=58 op=nft_register_chain pid=4169 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Sep 6 00:22:09.834000 audit[4169]: SYSCALL arch=c000003e syscall=46 success=yes exit=20628 a0=3 a1=7ffefe78ca10 a2=0 a3=7ffefe78c9fc items=0 ppid=2038 pid=4169 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:22:09.834000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Sep 6 00:22:10.388439 env[1194]: time="2025-09-06T00:22:10.388391915Z" level=info msg="StopPodSandbox for \"3e6cbb7012d247d9d125bbc3ca5eea67cec016d67a30106e88c9a3f4d841c284\"" Sep 6 00:22:10.389002 systemd-networkd[1004]: cali0e97a6fd6e2: Gained IPv6LL Sep 6 00:22:10.471625 kubelet[1933]: I0906 00:22:10.470244 1933 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="kube-system/coredns-7c65d6cfc9-lj58v" podStartSLOduration=41.470202441 podStartE2EDuration="41.470202441s" podCreationTimestamp="2025-09-06 00:21:29 +0000 UTC" firstStartedPulling="0001-01-01 00:00:00 +0000 UTC" lastFinishedPulling="0001-01-01 00:00:00 +0000 UTC" observedRunningTime="2025-09-06 00:22:09.781506191 +0000 UTC m=+46.641496158" watchObservedRunningTime="2025-09-06 00:22:10.470202441 +0000 UTC m=+47.330192410" Sep 6 00:22:10.519972 env[1194]: 2025-09-06 00:22:10.472 [INFO][4181] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="3e6cbb7012d247d9d125bbc3ca5eea67cec016d67a30106e88c9a3f4d841c284" Sep 6 00:22:10.519972 env[1194]: 2025-09-06 00:22:10.473 [INFO][4181] cni-plugin/dataplane_linux.go 559: Deleting workload's device in netns. ContainerID="3e6cbb7012d247d9d125bbc3ca5eea67cec016d67a30106e88c9a3f4d841c284" iface="eth0" netns="/var/run/netns/cni-6665cc41-7e76-dc6a-03f5-1a616a9c5a5f" Sep 6 00:22:10.519972 env[1194]: 2025-09-06 00:22:10.473 [INFO][4181] cni-plugin/dataplane_linux.go 570: Entered netns, deleting veth. ContainerID="3e6cbb7012d247d9d125bbc3ca5eea67cec016d67a30106e88c9a3f4d841c284" iface="eth0" netns="/var/run/netns/cni-6665cc41-7e76-dc6a-03f5-1a616a9c5a5f" Sep 6 00:22:10.519972 env[1194]: 2025-09-06 00:22:10.473 [INFO][4181] cni-plugin/dataplane_linux.go 597: Workload's veth was already gone. Nothing to do. ContainerID="3e6cbb7012d247d9d125bbc3ca5eea67cec016d67a30106e88c9a3f4d841c284" iface="eth0" netns="/var/run/netns/cni-6665cc41-7e76-dc6a-03f5-1a616a9c5a5f" Sep 6 00:22:10.519972 env[1194]: 2025-09-06 00:22:10.473 [INFO][4181] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="3e6cbb7012d247d9d125bbc3ca5eea67cec016d67a30106e88c9a3f4d841c284" Sep 6 00:22:10.519972 env[1194]: 2025-09-06 00:22:10.474 [INFO][4181] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="3e6cbb7012d247d9d125bbc3ca5eea67cec016d67a30106e88c9a3f4d841c284" Sep 6 00:22:10.519972 env[1194]: 2025-09-06 00:22:10.502 [INFO][4188] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="3e6cbb7012d247d9d125bbc3ca5eea67cec016d67a30106e88c9a3f4d841c284" HandleID="k8s-pod-network.3e6cbb7012d247d9d125bbc3ca5eea67cec016d67a30106e88c9a3f4d841c284" Workload="ci--3510.3.8--n--86fdecb492-k8s-goldmane--7988f88666--bmw2n-eth0" Sep 6 00:22:10.519972 env[1194]: 2025-09-06 00:22:10.503 [INFO][4188] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Sep 6 00:22:10.519972 env[1194]: 2025-09-06 00:22:10.503 [INFO][4188] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Sep 6 00:22:10.519972 env[1194]: 2025-09-06 00:22:10.512 [WARNING][4188] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="3e6cbb7012d247d9d125bbc3ca5eea67cec016d67a30106e88c9a3f4d841c284" HandleID="k8s-pod-network.3e6cbb7012d247d9d125bbc3ca5eea67cec016d67a30106e88c9a3f4d841c284" Workload="ci--3510.3.8--n--86fdecb492-k8s-goldmane--7988f88666--bmw2n-eth0" Sep 6 00:22:10.519972 env[1194]: 2025-09-06 00:22:10.512 [INFO][4188] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="3e6cbb7012d247d9d125bbc3ca5eea67cec016d67a30106e88c9a3f4d841c284" HandleID="k8s-pod-network.3e6cbb7012d247d9d125bbc3ca5eea67cec016d67a30106e88c9a3f4d841c284" Workload="ci--3510.3.8--n--86fdecb492-k8s-goldmane--7988f88666--bmw2n-eth0" Sep 6 00:22:10.519972 env[1194]: 2025-09-06 00:22:10.514 [INFO][4188] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Sep 6 00:22:10.519972 env[1194]: 2025-09-06 00:22:10.517 [INFO][4181] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="3e6cbb7012d247d9d125bbc3ca5eea67cec016d67a30106e88c9a3f4d841c284" Sep 6 00:22:10.523971 env[1194]: time="2025-09-06T00:22:10.523898680Z" level=info msg="TearDown network for sandbox \"3e6cbb7012d247d9d125bbc3ca5eea67cec016d67a30106e88c9a3f4d841c284\" successfully" Sep 6 00:22:10.523975 systemd[1]: run-netns-cni\x2d6665cc41\x2d7e76\x2ddc6a\x2d03f5\x2d1a616a9c5a5f.mount: Deactivated successfully. Sep 6 00:22:10.524991 env[1194]: time="2025-09-06T00:22:10.524957689Z" level=info msg="StopPodSandbox for \"3e6cbb7012d247d9d125bbc3ca5eea67cec016d67a30106e88c9a3f4d841c284\" returns successfully" Sep 6 00:22:10.525953 env[1194]: time="2025-09-06T00:22:10.525905237Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:goldmane-7988f88666-bmw2n,Uid:a6952448-1254-4d78-8f5e-8abf0e8f4465,Namespace:calico-system,Attempt:1,}" Sep 6 00:22:10.717043 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): eth0: link becomes ready Sep 6 00:22:10.717302 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): cali3a91ee5c626: link becomes ready Sep 6 00:22:10.716135 systemd-networkd[1004]: cali3a91ee5c626: Link UP Sep 6 00:22:10.716998 systemd-networkd[1004]: cali3a91ee5c626: Gained carrier Sep 6 00:22:10.747281 kubelet[1933]: E0906 00:22:10.746990 1933 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 67.207.67.3 67.207.67.2 67.207.67.3" Sep 6 00:22:10.752866 env[1194]: 2025-09-06 00:22:10.601 [INFO][4196] cni-plugin/plugin.go 340: Calico CNI found existing endpoint: &{{WorkloadEndpoint projectcalico.org/v3} {ci--3510.3.8--n--86fdecb492-k8s-goldmane--7988f88666--bmw2n-eth0 goldmane-7988f88666- calico-system a6952448-1254-4d78-8f5e-8abf0e8f4465 1049 0 2025-09-06 00:21:43 +0000 UTC map[app.kubernetes.io/name:goldmane k8s-app:goldmane pod-template-hash:7988f88666 projectcalico.org/namespace:calico-system projectcalico.org/orchestrator:k8s projectcalico.org/serviceaccount:goldmane] map[] [] [] []} {k8s ci-3510.3.8-n-86fdecb492 goldmane-7988f88666-bmw2n eth0 goldmane [] [] [kns.calico-system ksa.calico-system.goldmane] cali3a91ee5c626 [] [] }} ContainerID="58a186c255b7a7f5d7d5e8d290c16cdfa08f987de6a9834452720cdfda154bf4" Namespace="calico-system" Pod="goldmane-7988f88666-bmw2n" WorkloadEndpoint="ci--3510.3.8--n--86fdecb492-k8s-goldmane--7988f88666--bmw2n-" Sep 6 00:22:10.752866 env[1194]: 2025-09-06 00:22:10.602 [INFO][4196] cni-plugin/k8s.go 74: Extracted identifiers for CmdAddK8s ContainerID="58a186c255b7a7f5d7d5e8d290c16cdfa08f987de6a9834452720cdfda154bf4" Namespace="calico-system" Pod="goldmane-7988f88666-bmw2n" WorkloadEndpoint="ci--3510.3.8--n--86fdecb492-k8s-goldmane--7988f88666--bmw2n-eth0" Sep 6 00:22:10.752866 env[1194]: 2025-09-06 00:22:10.654 [INFO][4208] ipam/ipam_plugin.go 225: Calico CNI IPAM request count IPv4=1 IPv6=0 ContainerID="58a186c255b7a7f5d7d5e8d290c16cdfa08f987de6a9834452720cdfda154bf4" HandleID="k8s-pod-network.58a186c255b7a7f5d7d5e8d290c16cdfa08f987de6a9834452720cdfda154bf4" Workload="ci--3510.3.8--n--86fdecb492-k8s-goldmane--7988f88666--bmw2n-eth0" Sep 6 00:22:10.752866 env[1194]: 2025-09-06 00:22:10.654 [INFO][4208] ipam/ipam_plugin.go 265: Auto assigning IP ContainerID="58a186c255b7a7f5d7d5e8d290c16cdfa08f987de6a9834452720cdfda154bf4" HandleID="k8s-pod-network.58a186c255b7a7f5d7d5e8d290c16cdfa08f987de6a9834452720cdfda154bf4" Workload="ci--3510.3.8--n--86fdecb492-k8s-goldmane--7988f88666--bmw2n-eth0" assignArgs=ipam.AutoAssignArgs{Num4:1, Num6:0, HandleID:(*string)(0xc0003254a0), Attrs:map[string]string{"namespace":"calico-system", "node":"ci-3510.3.8-n-86fdecb492", "pod":"goldmane-7988f88666-bmw2n", "timestamp":"2025-09-06 00:22:10.654558332 +0000 UTC"}, Hostname:"ci-3510.3.8-n-86fdecb492", IPv4Pools:[]net.IPNet{}, IPv6Pools:[]net.IPNet{}, MaxBlocksPerHost:0, HostReservedAttrIPv4s:(*ipam.HostReservedAttr)(nil), HostReservedAttrIPv6s:(*ipam.HostReservedAttr)(nil), IntendedUse:"Workload"} Sep 6 00:22:10.752866 env[1194]: 2025-09-06 00:22:10.655 [INFO][4208] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Sep 6 00:22:10.752866 env[1194]: 2025-09-06 00:22:10.655 [INFO][4208] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Sep 6 00:22:10.752866 env[1194]: 2025-09-06 00:22:10.655 [INFO][4208] ipam/ipam.go 110: Auto-assign 1 ipv4, 0 ipv6 addrs for host 'ci-3510.3.8-n-86fdecb492' Sep 6 00:22:10.752866 env[1194]: 2025-09-06 00:22:10.664 [INFO][4208] ipam/ipam.go 691: Looking up existing affinities for host handle="k8s-pod-network.58a186c255b7a7f5d7d5e8d290c16cdfa08f987de6a9834452720cdfda154bf4" host="ci-3510.3.8-n-86fdecb492" Sep 6 00:22:10.752866 env[1194]: 2025-09-06 00:22:10.672 [INFO][4208] ipam/ipam.go 394: Looking up existing affinities for host host="ci-3510.3.8-n-86fdecb492" Sep 6 00:22:10.752866 env[1194]: 2025-09-06 00:22:10.679 [INFO][4208] ipam/ipam.go 511: Trying affinity for 192.168.14.128/26 host="ci-3510.3.8-n-86fdecb492" Sep 6 00:22:10.752866 env[1194]: 2025-09-06 00:22:10.682 [INFO][4208] ipam/ipam.go 158: Attempting to load block cidr=192.168.14.128/26 host="ci-3510.3.8-n-86fdecb492" Sep 6 00:22:10.752866 env[1194]: 2025-09-06 00:22:10.686 [INFO][4208] ipam/ipam.go 235: Affinity is confirmed and block has been loaded cidr=192.168.14.128/26 host="ci-3510.3.8-n-86fdecb492" Sep 6 00:22:10.752866 env[1194]: 2025-09-06 00:22:10.686 [INFO][4208] ipam/ipam.go 1220: Attempting to assign 1 addresses from block block=192.168.14.128/26 handle="k8s-pod-network.58a186c255b7a7f5d7d5e8d290c16cdfa08f987de6a9834452720cdfda154bf4" host="ci-3510.3.8-n-86fdecb492" Sep 6 00:22:10.752866 env[1194]: 2025-09-06 00:22:10.688 [INFO][4208] ipam/ipam.go 1764: Creating new handle: k8s-pod-network.58a186c255b7a7f5d7d5e8d290c16cdfa08f987de6a9834452720cdfda154bf4 Sep 6 00:22:10.752866 env[1194]: 2025-09-06 00:22:10.694 [INFO][4208] ipam/ipam.go 1243: Writing block in order to claim IPs block=192.168.14.128/26 handle="k8s-pod-network.58a186c255b7a7f5d7d5e8d290c16cdfa08f987de6a9834452720cdfda154bf4" host="ci-3510.3.8-n-86fdecb492" Sep 6 00:22:10.752866 env[1194]: 2025-09-06 00:22:10.706 [INFO][4208] ipam/ipam.go 1256: Successfully claimed IPs: [192.168.14.136/26] block=192.168.14.128/26 handle="k8s-pod-network.58a186c255b7a7f5d7d5e8d290c16cdfa08f987de6a9834452720cdfda154bf4" host="ci-3510.3.8-n-86fdecb492" Sep 6 00:22:10.752866 env[1194]: 2025-09-06 00:22:10.706 [INFO][4208] ipam/ipam.go 878: Auto-assigned 1 out of 1 IPv4s: [192.168.14.136/26] handle="k8s-pod-network.58a186c255b7a7f5d7d5e8d290c16cdfa08f987de6a9834452720cdfda154bf4" host="ci-3510.3.8-n-86fdecb492" Sep 6 00:22:10.752866 env[1194]: 2025-09-06 00:22:10.706 [INFO][4208] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Sep 6 00:22:10.752866 env[1194]: 2025-09-06 00:22:10.706 [INFO][4208] ipam/ipam_plugin.go 283: Calico CNI IPAM assigned addresses IPv4=[192.168.14.136/26] IPv6=[] ContainerID="58a186c255b7a7f5d7d5e8d290c16cdfa08f987de6a9834452720cdfda154bf4" HandleID="k8s-pod-network.58a186c255b7a7f5d7d5e8d290c16cdfa08f987de6a9834452720cdfda154bf4" Workload="ci--3510.3.8--n--86fdecb492-k8s-goldmane--7988f88666--bmw2n-eth0" Sep 6 00:22:10.754186 env[1194]: 2025-09-06 00:22:10.710 [INFO][4196] cni-plugin/k8s.go 418: Populated endpoint ContainerID="58a186c255b7a7f5d7d5e8d290c16cdfa08f987de6a9834452720cdfda154bf4" Namespace="calico-system" Pod="goldmane-7988f88666-bmw2n" WorkloadEndpoint="ci--3510.3.8--n--86fdecb492-k8s-goldmane--7988f88666--bmw2n-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ci--3510.3.8--n--86fdecb492-k8s-goldmane--7988f88666--bmw2n-eth0", GenerateName:"goldmane-7988f88666-", Namespace:"calico-system", SelfLink:"", UID:"a6952448-1254-4d78-8f5e-8abf0e8f4465", ResourceVersion:"1049", Generation:0, CreationTimestamp:time.Date(2025, time.September, 6, 0, 21, 43, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"goldmane", "k8s-app":"goldmane", "pod-template-hash":"7988f88666", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"goldmane"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ci-3510.3.8-n-86fdecb492", ContainerID:"", Pod:"goldmane-7988f88666-bmw2n", Endpoint:"eth0", ServiceAccountName:"goldmane", IPNetworks:[]string{"192.168.14.136/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.goldmane"}, InterfaceName:"cali3a91ee5c626", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Sep 6 00:22:10.754186 env[1194]: 2025-09-06 00:22:10.711 [INFO][4196] cni-plugin/k8s.go 419: Calico CNI using IPs: [192.168.14.136/32] ContainerID="58a186c255b7a7f5d7d5e8d290c16cdfa08f987de6a9834452720cdfda154bf4" Namespace="calico-system" Pod="goldmane-7988f88666-bmw2n" WorkloadEndpoint="ci--3510.3.8--n--86fdecb492-k8s-goldmane--7988f88666--bmw2n-eth0" Sep 6 00:22:10.754186 env[1194]: 2025-09-06 00:22:10.711 [INFO][4196] cni-plugin/dataplane_linux.go 69: Setting the host side veth name to cali3a91ee5c626 ContainerID="58a186c255b7a7f5d7d5e8d290c16cdfa08f987de6a9834452720cdfda154bf4" Namespace="calico-system" Pod="goldmane-7988f88666-bmw2n" WorkloadEndpoint="ci--3510.3.8--n--86fdecb492-k8s-goldmane--7988f88666--bmw2n-eth0" Sep 6 00:22:10.754186 env[1194]: 2025-09-06 00:22:10.719 [INFO][4196] cni-plugin/dataplane_linux.go 508: Disabling IPv4 forwarding ContainerID="58a186c255b7a7f5d7d5e8d290c16cdfa08f987de6a9834452720cdfda154bf4" Namespace="calico-system" Pod="goldmane-7988f88666-bmw2n" WorkloadEndpoint="ci--3510.3.8--n--86fdecb492-k8s-goldmane--7988f88666--bmw2n-eth0" Sep 6 00:22:10.754186 env[1194]: 2025-09-06 00:22:10.720 [INFO][4196] cni-plugin/k8s.go 446: Added Mac, interface name, and active container ID to endpoint ContainerID="58a186c255b7a7f5d7d5e8d290c16cdfa08f987de6a9834452720cdfda154bf4" Namespace="calico-system" Pod="goldmane-7988f88666-bmw2n" WorkloadEndpoint="ci--3510.3.8--n--86fdecb492-k8s-goldmane--7988f88666--bmw2n-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ci--3510.3.8--n--86fdecb492-k8s-goldmane--7988f88666--bmw2n-eth0", GenerateName:"goldmane-7988f88666-", Namespace:"calico-system", SelfLink:"", UID:"a6952448-1254-4d78-8f5e-8abf0e8f4465", ResourceVersion:"1049", Generation:0, CreationTimestamp:time.Date(2025, time.September, 6, 0, 21, 43, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"goldmane", "k8s-app":"goldmane", "pod-template-hash":"7988f88666", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"goldmane"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ci-3510.3.8-n-86fdecb492", ContainerID:"58a186c255b7a7f5d7d5e8d290c16cdfa08f987de6a9834452720cdfda154bf4", Pod:"goldmane-7988f88666-bmw2n", Endpoint:"eth0", ServiceAccountName:"goldmane", IPNetworks:[]string{"192.168.14.136/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.goldmane"}, InterfaceName:"cali3a91ee5c626", MAC:"f2:00:f1:cf:3d:0b", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Sep 6 00:22:10.754186 env[1194]: 2025-09-06 00:22:10.743 [INFO][4196] cni-plugin/k8s.go 532: Wrote updated endpoint to datastore ContainerID="58a186c255b7a7f5d7d5e8d290c16cdfa08f987de6a9834452720cdfda154bf4" Namespace="calico-system" Pod="goldmane-7988f88666-bmw2n" WorkloadEndpoint="ci--3510.3.8--n--86fdecb492-k8s-goldmane--7988f88666--bmw2n-eth0" Sep 6 00:22:10.770499 systemd-networkd[1004]: calif5633e528a2: Gained IPv6LL Sep 6 00:22:10.779000 audit[4226]: NETFILTER_CFG table=filter:119 family=2 entries=64 op=nft_register_chain pid=4226 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Sep 6 00:22:10.779000 audit[4226]: SYSCALL arch=c000003e syscall=46 success=yes exit=31104 a0=3 a1=7ffc04796030 a2=0 a3=7ffc0479601c items=0 ppid=3206 pid=4226 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:22:10.779000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Sep 6 00:22:10.784863 env[1194]: time="2025-09-06T00:22:10.784739033Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Sep 6 00:22:10.784863 env[1194]: time="2025-09-06T00:22:10.784860836Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Sep 6 00:22:10.785065 env[1194]: time="2025-09-06T00:22:10.784885957Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Sep 6 00:22:10.785113 env[1194]: time="2025-09-06T00:22:10.785077193Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/58a186c255b7a7f5d7d5e8d290c16cdfa08f987de6a9834452720cdfda154bf4 pid=4234 runtime=io.containerd.runc.v2 Sep 6 00:22:10.816422 systemd[1]: Started cri-containerd-58a186c255b7a7f5d7d5e8d290c16cdfa08f987de6a9834452720cdfda154bf4.scope. Sep 6 00:22:10.829242 systemd[1]: run-containerd-runc-k8s.io-58a186c255b7a7f5d7d5e8d290c16cdfa08f987de6a9834452720cdfda154bf4-runc.vGyPhl.mount: Deactivated successfully. Sep 6 00:22:10.921000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:10.921000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:10.921000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:10.921000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:10.921000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:10.921000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:10.921000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:10.921000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:10.921000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:10.922000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:10.922000 audit: BPF prog-id=208 op=LOAD Sep 6 00:22:10.922000 audit[4243]: AVC avc: denied { bpf } for pid=4243 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:10.922000 audit[4243]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000145c48 a2=10 a3=1c items=0 ppid=4234 pid=4243 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:22:10.922000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3538613138366332353562376137663564376435653864323930633136 Sep 6 00:22:10.922000 audit[4243]: AVC avc: denied { perfmon } for pid=4243 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:10.922000 audit[4243]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001456b0 a2=3c a3=c items=0 ppid=4234 pid=4243 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:22:10.922000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3538613138366332353562376137663564376435653864323930633136 Sep 6 00:22:10.923000 audit[4243]: AVC avc: denied { bpf } for pid=4243 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:10.923000 audit[4243]: AVC avc: denied { bpf } for pid=4243 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:10.923000 audit[4243]: AVC avc: denied { bpf } for pid=4243 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:10.923000 audit[4243]: AVC avc: denied { perfmon } for pid=4243 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:10.923000 audit[4243]: AVC avc: denied { perfmon } for pid=4243 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:10.923000 audit[4243]: AVC avc: denied { perfmon } for pid=4243 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:10.923000 audit[4243]: AVC avc: denied { perfmon } for pid=4243 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:10.923000 audit[4243]: AVC avc: denied { perfmon } for pid=4243 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:10.923000 audit[4243]: AVC avc: denied { bpf } for pid=4243 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:10.923000 audit[4243]: AVC avc: denied { bpf } for pid=4243 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:10.923000 audit: BPF prog-id=209 op=LOAD Sep 6 00:22:10.923000 audit[4243]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001459d8 a2=78 a3=c0003fa0b0 items=0 ppid=4234 pid=4243 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:22:10.923000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3538613138366332353562376137663564376435653864323930633136 Sep 6 00:22:10.923000 audit[4243]: AVC avc: denied { bpf } for pid=4243 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:10.923000 audit[4243]: AVC avc: denied { bpf } for pid=4243 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:10.923000 audit[4243]: AVC avc: denied { perfmon } for pid=4243 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:10.923000 audit[4243]: AVC avc: denied { perfmon } for pid=4243 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:10.923000 audit[4243]: AVC avc: denied { perfmon } for pid=4243 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:10.923000 audit[4243]: AVC avc: denied { perfmon } for pid=4243 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:10.923000 audit[4243]: AVC avc: denied { perfmon } for pid=4243 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:10.923000 audit[4243]: AVC avc: denied { bpf } for pid=4243 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:10.923000 audit[4243]: AVC avc: denied { bpf } for pid=4243 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:10.923000 audit: BPF prog-id=210 op=LOAD Sep 6 00:22:10.923000 audit[4243]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000145770 a2=78 a3=c0003fa0f8 items=0 ppid=4234 pid=4243 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:22:10.923000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3538613138366332353562376137663564376435653864323930633136 Sep 6 00:22:10.923000 audit: BPF prog-id=210 op=UNLOAD Sep 6 00:22:10.923000 audit: BPF prog-id=209 op=UNLOAD Sep 6 00:22:10.923000 audit[4243]: AVC avc: denied { bpf } for pid=4243 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:10.923000 audit[4243]: AVC avc: denied { bpf } for pid=4243 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:10.923000 audit[4243]: AVC avc: denied { bpf } for pid=4243 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:10.923000 audit[4243]: AVC avc: denied { perfmon } for pid=4243 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:10.923000 audit[4243]: AVC avc: denied { perfmon } for pid=4243 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:10.923000 audit[4243]: AVC avc: denied { perfmon } for pid=4243 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:10.923000 audit[4243]: AVC avc: denied { perfmon } for pid=4243 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:10.923000 audit[4243]: AVC avc: denied { perfmon } for pid=4243 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:10.923000 audit[4243]: AVC avc: denied { bpf } for pid=4243 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:10.923000 audit[4243]: AVC avc: denied { bpf } for pid=4243 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:10.923000 audit: BPF prog-id=211 op=LOAD Sep 6 00:22:10.923000 audit[4243]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000145c30 a2=78 a3=c0003fa508 items=0 ppid=4234 pid=4243 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:22:10.923000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3538613138366332353562376137663564376435653864323930633136 Sep 6 00:22:10.994346 env[1194]: time="2025-09-06T00:22:10.993467559Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:goldmane-7988f88666-bmw2n,Uid:a6952448-1254-4d78-8f5e-8abf0e8f4465,Namespace:calico-system,Attempt:1,} returns sandbox id \"58a186c255b7a7f5d7d5e8d290c16cdfa08f987de6a9834452720cdfda154bf4\"" Sep 6 00:22:11.753266 kubelet[1933]: E0906 00:22:11.753115 1933 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 67.207.67.3 67.207.67.2 67.207.67.3" Sep 6 00:22:12.370493 systemd-networkd[1004]: cali3a91ee5c626: Gained IPv6LL Sep 6 00:22:12.745060 env[1194]: time="2025-09-06T00:22:12.744534298Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/apiserver:v3.30.3,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 6 00:22:12.746391 env[1194]: time="2025-09-06T00:22:12.746296968Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:879f2443aed0573271114108bfec35d3e76419f98282ef796c646d0986c5ba6a,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 6 00:22:12.748564 env[1194]: time="2025-09-06T00:22:12.748510139Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/apiserver:v3.30.3,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 6 00:22:12.750410 env[1194]: time="2025-09-06T00:22:12.750358732Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/apiserver@sha256:6a24147f11c1edce9d6ba79bdb0c2beadec53853fb43438a287291e67b41e51b,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 6 00:22:12.751149 env[1194]: time="2025-09-06T00:22:12.751063990Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/apiserver:v3.30.3\" returns image reference \"sha256:879f2443aed0573271114108bfec35d3e76419f98282ef796c646d0986c5ba6a\"" Sep 6 00:22:12.756669 env[1194]: time="2025-09-06T00:22:12.755666574Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/apiserver:v3.30.3\"" Sep 6 00:22:12.760871 env[1194]: time="2025-09-06T00:22:12.760806222Z" level=info msg="CreateContainer within sandbox \"d2383e60ca9dd9ec363e8f6d9976870988237a45cf8b6e174d72c739742f338d\" for container &ContainerMetadata{Name:calico-apiserver,Attempt:0,}" Sep 6 00:22:12.777618 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount2169829872.mount: Deactivated successfully. Sep 6 00:22:12.782382 env[1194]: time="2025-09-06T00:22:12.782309498Z" level=info msg="CreateContainer within sandbox \"d2383e60ca9dd9ec363e8f6d9976870988237a45cf8b6e174d72c739742f338d\" for &ContainerMetadata{Name:calico-apiserver,Attempt:0,} returns container id \"236fc0723907083a2be4d06e3d5d8e6f4e57a9a76d4868f0e10fe2c8ba10eb99\"" Sep 6 00:22:12.786135 env[1194]: time="2025-09-06T00:22:12.784438565Z" level=info msg="StartContainer for \"236fc0723907083a2be4d06e3d5d8e6f4e57a9a76d4868f0e10fe2c8ba10eb99\"" Sep 6 00:22:12.815365 systemd[1]: Started cri-containerd-236fc0723907083a2be4d06e3d5d8e6f4e57a9a76d4868f0e10fe2c8ba10eb99.scope. Sep 6 00:22:12.833162 systemd[1]: run-containerd-runc-k8s.io-236fc0723907083a2be4d06e3d5d8e6f4e57a9a76d4868f0e10fe2c8ba10eb99-runc.LCFBLn.mount: Deactivated successfully. Sep 6 00:22:12.856591 kernel: kauditd_printk_skb: 611 callbacks suppressed Sep 6 00:22:12.856728 kernel: audit: type=1400 audit(1757118132.854:1377): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:12.854000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:12.854000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:12.854000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:12.865393 kernel: audit: type=1400 audit(1757118132.854:1378): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:12.865472 kernel: audit: type=1400 audit(1757118132.854:1379): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:12.865515 kernel: audit: type=1400 audit(1757118132.854:1380): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:12.854000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:12.869765 kernel: audit: type=1400 audit(1757118132.854:1381): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:12.869931 kernel: audit: type=1400 audit(1757118132.854:1382): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:12.854000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:12.854000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:12.872688 kernel: audit: type=1400 audit(1757118132.854:1383): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:12.854000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:12.875280 kernel: audit: type=1400 audit(1757118132.854:1384): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:12.854000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:12.879679 kernel: audit: type=1400 audit(1757118132.854:1385): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:12.879831 kernel: audit: type=1400 audit(1757118132.855:1386): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:12.854000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:12.855000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:12.855000 audit: BPF prog-id=212 op=LOAD Sep 6 00:22:12.858000 audit[4276]: AVC avc: denied { bpf } for pid=4276 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:12.858000 audit[4276]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000145c48 a2=10 a3=1c items=0 ppid=3636 pid=4276 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:22:12.858000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3233366663303732333930373038336132626534643036653364356438 Sep 6 00:22:12.858000 audit[4276]: AVC avc: denied { perfmon } for pid=4276 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:12.858000 audit[4276]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001456b0 a2=3c a3=8 items=0 ppid=3636 pid=4276 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:22:12.858000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3233366663303732333930373038336132626534643036653364356438 Sep 6 00:22:12.858000 audit[4276]: AVC avc: denied { bpf } for pid=4276 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:12.858000 audit[4276]: AVC avc: denied { bpf } for pid=4276 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:12.858000 audit[4276]: AVC avc: denied { bpf } for pid=4276 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:12.858000 audit[4276]: AVC avc: denied { perfmon } for pid=4276 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:12.858000 audit[4276]: AVC avc: denied { perfmon } for pid=4276 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:12.858000 audit[4276]: AVC avc: denied { perfmon } for pid=4276 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:12.858000 audit[4276]: AVC avc: denied { perfmon } for pid=4276 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:12.858000 audit[4276]: AVC avc: denied { perfmon } for pid=4276 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:12.858000 audit[4276]: AVC avc: denied { bpf } for pid=4276 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:12.858000 audit[4276]: AVC avc: denied { bpf } for pid=4276 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:12.858000 audit: BPF prog-id=213 op=LOAD Sep 6 00:22:12.858000 audit[4276]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001459d8 a2=78 a3=c0002191f0 items=0 ppid=3636 pid=4276 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:22:12.858000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3233366663303732333930373038336132626534643036653364356438 Sep 6 00:22:12.858000 audit[4276]: AVC avc: denied { bpf } for pid=4276 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:12.858000 audit[4276]: AVC avc: denied { bpf } for pid=4276 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:12.858000 audit[4276]: AVC avc: denied { perfmon } for pid=4276 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:12.858000 audit[4276]: AVC avc: denied { perfmon } for pid=4276 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:12.858000 audit[4276]: AVC avc: denied { perfmon } for pid=4276 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:12.858000 audit[4276]: AVC avc: denied { perfmon } for pid=4276 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:12.858000 audit[4276]: AVC avc: denied { perfmon } for pid=4276 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:12.858000 audit[4276]: AVC avc: denied { bpf } for pid=4276 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:12.858000 audit[4276]: AVC avc: denied { bpf } for pid=4276 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:12.858000 audit: BPF prog-id=214 op=LOAD Sep 6 00:22:12.858000 audit[4276]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000145770 a2=78 a3=c000219238 items=0 ppid=3636 pid=4276 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:22:12.858000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3233366663303732333930373038336132626534643036653364356438 Sep 6 00:22:12.859000 audit: BPF prog-id=214 op=UNLOAD Sep 6 00:22:12.859000 audit: BPF prog-id=213 op=UNLOAD Sep 6 00:22:12.859000 audit[4276]: AVC avc: denied { bpf } for pid=4276 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:12.859000 audit[4276]: AVC avc: denied { bpf } for pid=4276 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:12.859000 audit[4276]: AVC avc: denied { bpf } for pid=4276 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:12.859000 audit[4276]: AVC avc: denied { perfmon } for pid=4276 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:12.859000 audit[4276]: AVC avc: denied { perfmon } for pid=4276 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:12.859000 audit[4276]: AVC avc: denied { perfmon } for pid=4276 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:12.859000 audit[4276]: AVC avc: denied { perfmon } for pid=4276 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:12.859000 audit[4276]: AVC avc: denied { perfmon } for pid=4276 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:12.859000 audit[4276]: AVC avc: denied { bpf } for pid=4276 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:12.859000 audit[4276]: AVC avc: denied { bpf } for pid=4276 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:12.859000 audit: BPF prog-id=215 op=LOAD Sep 6 00:22:12.859000 audit[4276]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000145c30 a2=78 a3=c000219648 items=0 ppid=3636 pid=4276 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:22:12.859000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3233366663303732333930373038336132626534643036653364356438 Sep 6 00:22:12.923926 env[1194]: time="2025-09-06T00:22:12.923805668Z" level=info msg="StartContainer for \"236fc0723907083a2be4d06e3d5d8e6f4e57a9a76d4868f0e10fe2c8ba10eb99\" returns successfully" Sep 6 00:22:13.102681 env[1194]: time="2025-09-06T00:22:13.102622499Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/apiserver:v3.30.3,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 6 00:22:13.104042 env[1194]: time="2025-09-06T00:22:13.103991424Z" level=info msg="ImageUpdate event &ImageUpdate{Name:sha256:879f2443aed0573271114108bfec35d3e76419f98282ef796c646d0986c5ba6a,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 6 00:22:13.105814 env[1194]: time="2025-09-06T00:22:13.105766189Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/apiserver:v3.30.3,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 6 00:22:13.107982 env[1194]: time="2025-09-06T00:22:13.107871787Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/apiserver@sha256:6a24147f11c1edce9d6ba79bdb0c2beadec53853fb43438a287291e67b41e51b,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 6 00:22:13.108979 env[1194]: time="2025-09-06T00:22:13.108922333Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/apiserver:v3.30.3\" returns image reference \"sha256:879f2443aed0573271114108bfec35d3e76419f98282ef796c646d0986c5ba6a\"" Sep 6 00:22:13.113871 env[1194]: time="2025-09-06T00:22:13.113537542Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/kube-controllers:v3.30.3\"" Sep 6 00:22:13.126916 env[1194]: time="2025-09-06T00:22:13.125991121Z" level=info msg="CreateContainer within sandbox \"9f8252bcbc69511f2c6351ef3ae914d962de19a29730652ef3abab0754e769a2\" for container &ContainerMetadata{Name:calico-apiserver,Attempt:0,}" Sep 6 00:22:13.141597 env[1194]: time="2025-09-06T00:22:13.141506351Z" level=info msg="CreateContainer within sandbox \"9f8252bcbc69511f2c6351ef3ae914d962de19a29730652ef3abab0754e769a2\" for &ContainerMetadata{Name:calico-apiserver,Attempt:0,} returns container id \"bbca23a850f46c054027a04e8747141bf5fd4c00883cd796f1707c10a7beee7e\"" Sep 6 00:22:13.145220 env[1194]: time="2025-09-06T00:22:13.142572471Z" level=info msg="StartContainer for \"bbca23a850f46c054027a04e8747141bf5fd4c00883cd796f1707c10a7beee7e\"" Sep 6 00:22:13.175871 systemd[1]: Started cri-containerd-bbca23a850f46c054027a04e8747141bf5fd4c00883cd796f1707c10a7beee7e.scope. Sep 6 00:22:13.241000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:13.241000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:13.241000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:13.241000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:13.241000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:13.241000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:13.241000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:13.241000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:13.241000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:13.242000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:13.242000 audit: BPF prog-id=216 op=LOAD Sep 6 00:22:13.242000 audit[4317]: AVC avc: denied { bpf } for pid=4317 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:13.242000 audit[4317]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000145c48 a2=10 a3=1c items=0 ppid=3810 pid=4317 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:22:13.242000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6262636132336138353066343663303534303237613034653837343731 Sep 6 00:22:13.242000 audit[4317]: AVC avc: denied { perfmon } for pid=4317 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:13.242000 audit[4317]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001456b0 a2=3c a3=8 items=0 ppid=3810 pid=4317 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:22:13.242000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6262636132336138353066343663303534303237613034653837343731 Sep 6 00:22:13.242000 audit[4317]: AVC avc: denied { bpf } for pid=4317 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:13.242000 audit[4317]: AVC avc: denied { bpf } for pid=4317 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:13.242000 audit[4317]: AVC avc: denied { bpf } for pid=4317 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:13.242000 audit[4317]: AVC avc: denied { perfmon } for pid=4317 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:13.242000 audit[4317]: AVC avc: denied { perfmon } for pid=4317 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:13.242000 audit[4317]: AVC avc: denied { perfmon } for pid=4317 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:13.242000 audit[4317]: AVC avc: denied { perfmon } for pid=4317 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:13.242000 audit[4317]: AVC avc: denied { perfmon } for pid=4317 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:13.242000 audit[4317]: AVC avc: denied { bpf } for pid=4317 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:13.242000 audit[4317]: AVC avc: denied { bpf } for pid=4317 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:13.242000 audit: BPF prog-id=217 op=LOAD Sep 6 00:22:13.242000 audit[4317]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001459d8 a2=78 a3=c00039e5f0 items=0 ppid=3810 pid=4317 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:22:13.242000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6262636132336138353066343663303534303237613034653837343731 Sep 6 00:22:13.242000 audit[4317]: AVC avc: denied { bpf } for pid=4317 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:13.242000 audit[4317]: AVC avc: denied { bpf } for pid=4317 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:13.242000 audit[4317]: AVC avc: denied { perfmon } for pid=4317 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:13.242000 audit[4317]: AVC avc: denied { perfmon } for pid=4317 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:13.242000 audit[4317]: AVC avc: denied { perfmon } for pid=4317 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:13.242000 audit[4317]: AVC avc: denied { perfmon } for pid=4317 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:13.242000 audit[4317]: AVC avc: denied { perfmon } for pid=4317 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:13.242000 audit[4317]: AVC avc: denied { bpf } for pid=4317 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:13.242000 audit[4317]: AVC avc: denied { bpf } for pid=4317 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:13.242000 audit: BPF prog-id=218 op=LOAD Sep 6 00:22:13.242000 audit[4317]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000145770 a2=78 a3=c00039e638 items=0 ppid=3810 pid=4317 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:22:13.242000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6262636132336138353066343663303534303237613034653837343731 Sep 6 00:22:13.242000 audit: BPF prog-id=218 op=UNLOAD Sep 6 00:22:13.243000 audit: BPF prog-id=217 op=UNLOAD Sep 6 00:22:13.243000 audit[4317]: AVC avc: denied { bpf } for pid=4317 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:13.243000 audit[4317]: AVC avc: denied { bpf } for pid=4317 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:13.243000 audit[4317]: AVC avc: denied { bpf } for pid=4317 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:13.243000 audit[4317]: AVC avc: denied { perfmon } for pid=4317 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:13.243000 audit[4317]: AVC avc: denied { perfmon } for pid=4317 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:13.243000 audit[4317]: AVC avc: denied { perfmon } for pid=4317 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:13.243000 audit[4317]: AVC avc: denied { perfmon } for pid=4317 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:13.243000 audit[4317]: AVC avc: denied { perfmon } for pid=4317 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:13.243000 audit[4317]: AVC avc: denied { bpf } for pid=4317 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:13.243000 audit[4317]: AVC avc: denied { bpf } for pid=4317 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:13.243000 audit: BPF prog-id=219 op=LOAD Sep 6 00:22:13.243000 audit[4317]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000145c30 a2=78 a3=c00039ea48 items=0 ppid=3810 pid=4317 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:22:13.243000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6262636132336138353066343663303534303237613034653837343731 Sep 6 00:22:13.293994 env[1194]: time="2025-09-06T00:22:13.293927222Z" level=info msg="StartContainer for \"bbca23a850f46c054027a04e8747141bf5fd4c00883cd796f1707c10a7beee7e\" returns successfully" Sep 6 00:22:13.798083 kubelet[1933]: I0906 00:22:13.797986 1933 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="calico-apiserver/calico-apiserver-658847fc7d-nxs25" podStartSLOduration=29.069207198 podStartE2EDuration="33.797955919s" podCreationTimestamp="2025-09-06 00:21:40 +0000 UTC" firstStartedPulling="2025-09-06 00:22:08.383426056 +0000 UTC m=+45.243416014" lastFinishedPulling="2025-09-06 00:22:13.112174774 +0000 UTC m=+49.972164735" observedRunningTime="2025-09-06 00:22:13.796872423 +0000 UTC m=+50.656862390" watchObservedRunningTime="2025-09-06 00:22:13.797955919 +0000 UTC m=+50.657945904" Sep 6 00:22:13.867000 audit[4352]: NETFILTER_CFG table=filter:120 family=2 entries=12 op=nft_register_rule pid=4352 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Sep 6 00:22:13.867000 audit[4352]: SYSCALL arch=c000003e syscall=46 success=yes exit=4504 a0=3 a1=7ffedfb2a5a0 a2=0 a3=7ffedfb2a58c items=0 ppid=2038 pid=4352 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:22:13.867000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Sep 6 00:22:13.876000 audit[4352]: NETFILTER_CFG table=nat:121 family=2 entries=22 op=nft_register_rule pid=4352 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Sep 6 00:22:13.876000 audit[4352]: SYSCALL arch=c000003e syscall=46 success=yes exit=6540 a0=3 a1=7ffedfb2a5a0 a2=0 a3=7ffedfb2a58c items=0 ppid=2038 pid=4352 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:22:13.876000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Sep 6 00:22:13.906000 audit[4354]: NETFILTER_CFG table=filter:122 family=2 entries=12 op=nft_register_rule pid=4354 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Sep 6 00:22:13.906000 audit[4354]: SYSCALL arch=c000003e syscall=46 success=yes exit=4504 a0=3 a1=7ffd43ab7390 a2=0 a3=7ffd43ab737c items=0 ppid=2038 pid=4354 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:22:13.906000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Sep 6 00:22:13.912000 audit[4354]: NETFILTER_CFG table=nat:123 family=2 entries=22 op=nft_register_rule pid=4354 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Sep 6 00:22:13.912000 audit[4354]: SYSCALL arch=c000003e syscall=46 success=yes exit=6540 a0=3 a1=7ffd43ab7390 a2=0 a3=7ffd43ab737c items=0 ppid=2038 pid=4354 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:22:13.912000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Sep 6 00:22:14.798080 kubelet[1933]: I0906 00:22:14.798018 1933 prober_manager.go:312] "Failed to trigger a manual run" probe="Readiness" Sep 6 00:22:14.931626 systemd[1]: Started sshd@7-147.182.198.71:22-147.75.109.163:58016.service. Sep 6 00:22:14.931000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@7-147.182.198.71:22-147.75.109.163:58016 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 00:22:15.075000 audit[4366]: USER_ACCT pid=4366 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Sep 6 00:22:15.079073 sshd[4366]: Accepted publickey for core from 147.75.109.163 port 58016 ssh2: RSA SHA256:zgVES46caP1+99uzHYMS+9ry3WhXasb4NYAgm1B5TPc Sep 6 00:22:15.078000 audit[4366]: CRED_ACQ pid=4366 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Sep 6 00:22:15.078000 audit[4366]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffe1fa76770 a2=3 a3=0 items=0 ppid=1 pid=4366 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=8 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:22:15.078000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Sep 6 00:22:15.082167 sshd[4366]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Sep 6 00:22:15.095391 systemd-logind[1184]: New session 8 of user core. Sep 6 00:22:15.095940 systemd[1]: Started session-8.scope. Sep 6 00:22:15.102000 audit[4366]: USER_START pid=4366 uid=0 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Sep 6 00:22:15.106000 audit[4368]: CRED_ACQ pid=4368 uid=0 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Sep 6 00:22:15.808268 kubelet[1933]: I0906 00:22:15.807336 1933 prober_manager.go:312] "Failed to trigger a manual run" probe="Readiness" Sep 6 00:22:16.351394 sshd[4366]: pam_unix(sshd:session): session closed for user core Sep 6 00:22:16.353000 audit[4366]: USER_END pid=4366 uid=0 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Sep 6 00:22:16.354000 audit[4366]: CRED_DISP pid=4366 uid=0 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Sep 6 00:22:16.357901 systemd-logind[1184]: Session 8 logged out. Waiting for processes to exit. Sep 6 00:22:16.359662 systemd[1]: sshd@7-147.182.198.71:22-147.75.109.163:58016.service: Deactivated successfully. Sep 6 00:22:16.360960 systemd[1]: session-8.scope: Deactivated successfully. Sep 6 00:22:16.358000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@7-147.182.198.71:22-147.75.109.163:58016 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 00:22:16.362152 systemd-logind[1184]: Removed session 8. Sep 6 00:22:16.802000 audit[4287]: AVC avc: denied { watch } for pid=4287 comm="apiserver" path="/calico-apiserver-certs/..2025_09_06_00_21_54.2538852212/tls.crt" dev="tmpfs" ino=3 scontext=system_u:system_r:svirt_lxc_net_t:s0:c353,c875 tcontext=system_u:object_r:svirt_lxc_file_t:s0:c353,c875 tclass=file permissive=0 Sep 6 00:22:16.802000 audit[4287]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=7 a1=c0007ae9e0 a2=fc6 a3=0 items=0 ppid=3636 pid=4287 auid=4294967295 uid=10001 gid=10001 euid=10001 suid=10001 fsuid=10001 egid=10001 sgid=10001 fsgid=10001 tty=(none) ses=4294967295 comm="apiserver" exe="/code/apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c353,c875 key=(null) Sep 6 00:22:16.802000 audit: PROCTITLE proctitle=2F636F64652F617069736572766572002D2D7365637572652D706F72743D35343433002D2D746C732D707269766174652D6B65792D66696C653D2F63616C69636F2D6170697365727665722D63657274732F746C732E6B6579002D2D746C732D636572742D66696C653D2F63616C69636F2D6170697365727665722D63657274 Sep 6 00:22:17.063378 kubelet[1933]: I0906 00:22:17.055093 1933 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="calico-apiserver/calico-apiserver-658847fc7d-whbgb" podStartSLOduration=31.562710451 podStartE2EDuration="37.052196835s" podCreationTimestamp="2025-09-06 00:21:40 +0000 UTC" firstStartedPulling="2025-09-06 00:22:07.264475288 +0000 UTC m=+44.124465247" lastFinishedPulling="2025-09-06 00:22:12.753961682 +0000 UTC m=+49.613951631" observedRunningTime="2025-09-06 00:22:13.824968039 +0000 UTC m=+50.684958011" watchObservedRunningTime="2025-09-06 00:22:17.052196835 +0000 UTC m=+53.912186803" Sep 6 00:22:17.074376 env[1194]: time="2025-09-06T00:22:17.074145230Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/kube-controllers:v3.30.3,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 6 00:22:17.075993 env[1194]: time="2025-09-06T00:22:17.075925635Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:df191a54fb79de3c693f8b1b864a1bd3bd14f63b3fff9d5fa4869c471ce3cd37,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 6 00:22:17.079119 env[1194]: time="2025-09-06T00:22:17.079066572Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/kube-controllers:v3.30.3,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 6 00:22:17.082740 env[1194]: time="2025-09-06T00:22:17.082677520Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/kube-controllers@sha256:27c4187717f08f0a5727019d8beb7597665eb47e69eaa1d7d091a7e28913e577,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 6 00:22:17.083697 env[1194]: time="2025-09-06T00:22:17.083645744Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/kube-controllers:v3.30.3\" returns image reference \"sha256:df191a54fb79de3c693f8b1b864a1bd3bd14f63b3fff9d5fa4869c471ce3cd37\"" Sep 6 00:22:17.114574 env[1194]: time="2025-09-06T00:22:17.114310429Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/csi:v3.30.3\"" Sep 6 00:22:17.151000 audit[4382]: NETFILTER_CFG table=filter:124 family=2 entries=11 op=nft_register_rule pid=4382 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Sep 6 00:22:17.151000 audit[4382]: SYSCALL arch=c000003e syscall=46 success=yes exit=3760 a0=3 a1=7fff56847ea0 a2=0 a3=7fff56847e8c items=0 ppid=2038 pid=4382 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:22:17.151000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Sep 6 00:22:17.165000 audit[4382]: NETFILTER_CFG table=nat:125 family=2 entries=29 op=nft_register_chain pid=4382 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Sep 6 00:22:17.165000 audit[4382]: SYSCALL arch=c000003e syscall=46 success=yes exit=10116 a0=3 a1=7fff56847ea0 a2=0 a3=7fff56847e8c items=0 ppid=2038 pid=4382 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:22:17.165000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Sep 6 00:22:17.219961 env[1194]: time="2025-09-06T00:22:17.218594221Z" level=info msg="CreateContainer within sandbox \"ef1fa9356b12fab2bb6aef5a37c459181d8a6a1f7b09728577d9035a9fdd06d8\" for container &ContainerMetadata{Name:calico-kube-controllers,Attempt:0,}" Sep 6 00:22:17.243837 env[1194]: time="2025-09-06T00:22:17.243758752Z" level=info msg="CreateContainer within sandbox \"ef1fa9356b12fab2bb6aef5a37c459181d8a6a1f7b09728577d9035a9fdd06d8\" for &ContainerMetadata{Name:calico-kube-controllers,Attempt:0,} returns container id \"dbadc605c162eff9bb44e82efde08e842b92352acdf9965d8c35c662bae87a91\"" Sep 6 00:22:17.252318 env[1194]: time="2025-09-06T00:22:17.250457006Z" level=info msg="StartContainer for \"dbadc605c162eff9bb44e82efde08e842b92352acdf9965d8c35c662bae87a91\"" Sep 6 00:22:17.298025 systemd[1]: Started cri-containerd-dbadc605c162eff9bb44e82efde08e842b92352acdf9965d8c35c662bae87a91.scope. Sep 6 00:22:17.412000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:17.412000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:17.412000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:17.412000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:17.412000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:17.412000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:17.412000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:17.412000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:17.412000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:17.413000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:17.413000 audit: BPF prog-id=220 op=LOAD Sep 6 00:22:17.414000 audit[4391]: AVC avc: denied { bpf } for pid=4391 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:17.414000 audit[4391]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000117c48 a2=10 a3=1c items=0 ppid=3852 pid=4391 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:22:17.414000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6462616463363035633136326566663962623434653832656664653038 Sep 6 00:22:17.414000 audit[4391]: AVC avc: denied { perfmon } for pid=4391 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:17.414000 audit[4391]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001176b0 a2=3c a3=8 items=0 ppid=3852 pid=4391 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:22:17.414000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6462616463363035633136326566663962623434653832656664653038 Sep 6 00:22:17.414000 audit[4391]: AVC avc: denied { bpf } for pid=4391 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:17.414000 audit[4391]: AVC avc: denied { bpf } for pid=4391 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:17.414000 audit[4391]: AVC avc: denied { bpf } for pid=4391 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:17.414000 audit[4391]: AVC avc: denied { perfmon } for pid=4391 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:17.414000 audit[4391]: AVC avc: denied { perfmon } for pid=4391 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:17.414000 audit[4391]: AVC avc: denied { perfmon } for pid=4391 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:17.414000 audit[4391]: AVC avc: denied { perfmon } for pid=4391 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:17.414000 audit[4391]: AVC avc: denied { perfmon } for pid=4391 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:17.414000 audit[4391]: AVC avc: denied { bpf } for pid=4391 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:17.414000 audit[4391]: AVC avc: denied { bpf } for pid=4391 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:17.414000 audit: BPF prog-id=221 op=LOAD Sep 6 00:22:17.414000 audit[4391]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001179d8 a2=78 a3=c00036e350 items=0 ppid=3852 pid=4391 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:22:17.414000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6462616463363035633136326566663962623434653832656664653038 Sep 6 00:22:17.414000 audit[4391]: AVC avc: denied { bpf } for pid=4391 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:17.414000 audit[4391]: AVC avc: denied { bpf } for pid=4391 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:17.414000 audit[4391]: AVC avc: denied { perfmon } for pid=4391 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:17.414000 audit[4391]: AVC avc: denied { perfmon } for pid=4391 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:17.414000 audit[4391]: AVC avc: denied { perfmon } for pid=4391 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:17.414000 audit[4391]: AVC avc: denied { perfmon } for pid=4391 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:17.414000 audit[4391]: AVC avc: denied { perfmon } for pid=4391 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:17.414000 audit[4391]: AVC avc: denied { bpf } for pid=4391 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:17.414000 audit[4391]: AVC avc: denied { bpf } for pid=4391 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:17.414000 audit: BPF prog-id=222 op=LOAD Sep 6 00:22:17.414000 audit[4391]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000117770 a2=78 a3=c00036e398 items=0 ppid=3852 pid=4391 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:22:17.414000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6462616463363035633136326566663962623434653832656664653038 Sep 6 00:22:17.414000 audit: BPF prog-id=222 op=UNLOAD Sep 6 00:22:17.414000 audit: BPF prog-id=221 op=UNLOAD Sep 6 00:22:17.414000 audit[4391]: AVC avc: denied { bpf } for pid=4391 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:17.414000 audit[4391]: AVC avc: denied { bpf } for pid=4391 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:17.414000 audit[4391]: AVC avc: denied { bpf } for pid=4391 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:17.414000 audit[4391]: AVC avc: denied { perfmon } for pid=4391 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:17.414000 audit[4391]: AVC avc: denied { perfmon } for pid=4391 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:17.414000 audit[4391]: AVC avc: denied { perfmon } for pid=4391 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:17.414000 audit[4391]: AVC avc: denied { perfmon } for pid=4391 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:17.414000 audit[4391]: AVC avc: denied { perfmon } for pid=4391 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:17.414000 audit[4391]: AVC avc: denied { bpf } for pid=4391 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:17.414000 audit[4391]: AVC avc: denied { bpf } for pid=4391 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:17.414000 audit: BPF prog-id=223 op=LOAD Sep 6 00:22:17.414000 audit[4391]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000117c30 a2=78 a3=c00036e7a8 items=0 ppid=3852 pid=4391 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:22:17.414000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6462616463363035633136326566663962623434653832656664653038 Sep 6 00:22:17.526182 env[1194]: time="2025-09-06T00:22:17.526119663Z" level=info msg="StartContainer for \"dbadc605c162eff9bb44e82efde08e842b92352acdf9965d8c35c662bae87a91\" returns successfully" Sep 6 00:22:18.013000 audit[1812]: AVC avc: denied { watch } for pid=1812 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=526379 scontext=system_u:system_r:svirt_lxc_net_t:s0:c665,c790 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Sep 6 00:22:18.019622 kernel: kauditd_printk_skb: 193 callbacks suppressed Sep 6 00:22:18.019770 kernel: audit: type=1400 audit(1757118138.013:1447): avc: denied { watch } for pid=1812 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=526379 scontext=system_u:system_r:svirt_lxc_net_t:s0:c665,c790 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Sep 6 00:22:18.031417 kernel: audit: type=1400 audit(1757118138.018:1448): avc: denied { watch } for pid=1812 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="vda9" ino=526385 scontext=system_u:system_r:svirt_lxc_net_t:s0:c665,c790 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Sep 6 00:22:18.031904 kernel: audit: type=1300 audit(1757118138.018:1448): arch=c000003e syscall=254 success=no exit=-13 a0=9 a1=c00262e1e0 a2=fc6 a3=0 items=0 ppid=1655 pid=1812 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c665,c790 key=(null) Sep 6 00:22:18.018000 audit[1812]: AVC avc: denied { watch } for pid=1812 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="vda9" ino=526385 scontext=system_u:system_r:svirt_lxc_net_t:s0:c665,c790 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Sep 6 00:22:18.018000 audit[1812]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=9 a1=c00262e1e0 a2=fc6 a3=0 items=0 ppid=1655 pid=1812 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c665,c790 key=(null) Sep 6 00:22:18.018000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Sep 6 00:22:18.013000 audit[1812]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c000dfeea0 a2=fc6 a3=0 items=0 ppid=1655 pid=1812 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c665,c790 key=(null) Sep 6 00:22:18.044524 kernel: audit: type=1327 audit(1757118138.018:1448): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Sep 6 00:22:18.044715 kernel: audit: type=1300 audit(1757118138.013:1447): arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c000dfeea0 a2=fc6 a3=0 items=0 ppid=1655 pid=1812 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c665,c790 key=(null) Sep 6 00:22:18.013000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Sep 6 00:22:18.052313 kernel: audit: type=1327 audit(1757118138.013:1447): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Sep 6 00:22:18.111636 kubelet[1933]: I0906 00:22:18.111570 1933 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="calico-system/calico-kube-controllers-dcdb654dd-lnm9v" podStartSLOduration=25.53562435 podStartE2EDuration="34.11154304s" podCreationTimestamp="2025-09-06 00:21:44 +0000 UTC" firstStartedPulling="2025-09-06 00:22:08.533685312 +0000 UTC m=+45.393675270" lastFinishedPulling="2025-09-06 00:22:17.109603993 +0000 UTC m=+53.969593960" observedRunningTime="2025-09-06 00:22:17.898575942 +0000 UTC m=+54.758565911" watchObservedRunningTime="2025-09-06 00:22:18.11154304 +0000 UTC m=+54.971533007" Sep 6 00:22:18.655461 env[1194]: time="2025-09-06T00:22:18.655396304Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/csi:v3.30.3,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 6 00:22:18.656948 env[1194]: time="2025-09-06T00:22:18.656855538Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:666f4e02e75c30547109a06ed75b415a990a970811173aa741379cfaac4d9dd7,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 6 00:22:18.662176 env[1194]: time="2025-09-06T00:22:18.662118758Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/csi:v3.30.3,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 6 00:22:18.663287 env[1194]: time="2025-09-06T00:22:18.663211741Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/csi@sha256:f22c88018d8b58c4ef0052f594b216a13bd6852166ac131a538c5ab2fba23bb2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 6 00:22:18.665188 env[1194]: time="2025-09-06T00:22:18.664177374Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/csi:v3.30.3\" returns image reference \"sha256:666f4e02e75c30547109a06ed75b415a990a970811173aa741379cfaac4d9dd7\"" Sep 6 00:22:18.672139 env[1194]: time="2025-09-06T00:22:18.672088560Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/goldmane:v3.30.3\"" Sep 6 00:22:18.683108 env[1194]: time="2025-09-06T00:22:18.683043357Z" level=info msg="CreateContainer within sandbox \"e1200c94299c783759b0ddc32335b68b1ba29dda4ee901238fb354c9c59fbc88\" for container &ContainerMetadata{Name:calico-csi,Attempt:0,}" Sep 6 00:22:18.709982 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount2223459245.mount: Deactivated successfully. Sep 6 00:22:18.711692 env[1194]: time="2025-09-06T00:22:18.711527350Z" level=info msg="CreateContainer within sandbox \"e1200c94299c783759b0ddc32335b68b1ba29dda4ee901238fb354c9c59fbc88\" for &ContainerMetadata{Name:calico-csi,Attempt:0,} returns container id \"b4502787bafd07338e4eefe2df07b2c3daa52719a8b8a7d3a8c3747f3c0d246e\"" Sep 6 00:22:18.712628 env[1194]: time="2025-09-06T00:22:18.712582050Z" level=info msg="StartContainer for \"b4502787bafd07338e4eefe2df07b2c3daa52719a8b8a7d3a8c3747f3c0d246e\"" Sep 6 00:22:18.762099 systemd[1]: Started cri-containerd-b4502787bafd07338e4eefe2df07b2c3daa52719a8b8a7d3a8c3747f3c0d246e.scope. Sep 6 00:22:18.832000 audit[4326]: AVC avc: denied { watch } for pid=4326 comm="apiserver" path="/calico-apiserver-certs/..2025_09_06_00_21_54.3834834349/tls.crt" dev="tmpfs" ino=4 scontext=system_u:system_r:svirt_lxc_net_t:s0:c832,c980 tcontext=system_u:object_r:svirt_lxc_file_t:s0:c832,c980 tclass=file permissive=0 Sep 6 00:22:18.832000 audit[4326]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=7 a1=c000c886e0 a2=fc6 a3=0 items=0 ppid=3810 pid=4326 auid=4294967295 uid=10001 gid=10001 euid=10001 suid=10001 fsuid=10001 egid=10001 sgid=10001 fsgid=10001 tty=(none) ses=4294967295 comm="apiserver" exe="/code/apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c832,c980 key=(null) Sep 6 00:22:18.842621 kernel: audit: type=1400 audit(1757118138.832:1449): avc: denied { watch } for pid=4326 comm="apiserver" path="/calico-apiserver-certs/..2025_09_06_00_21_54.3834834349/tls.crt" dev="tmpfs" ino=4 scontext=system_u:system_r:svirt_lxc_net_t:s0:c832,c980 tcontext=system_u:object_r:svirt_lxc_file_t:s0:c832,c980 tclass=file permissive=0 Sep 6 00:22:18.842721 kernel: audit: type=1300 audit(1757118138.832:1449): arch=c000003e syscall=254 success=no exit=-13 a0=7 a1=c000c886e0 a2=fc6 a3=0 items=0 ppid=3810 pid=4326 auid=4294967295 uid=10001 gid=10001 euid=10001 suid=10001 fsuid=10001 egid=10001 sgid=10001 fsgid=10001 tty=(none) ses=4294967295 comm="apiserver" exe="/code/apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c832,c980 key=(null) Sep 6 00:22:18.840000 audit[4455]: AVC avc: denied { perfmon } for pid=4455 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:18.846264 kernel: audit: type=1400 audit(1757118138.840:1450): avc: denied { perfmon } for pid=4455 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:18.840000 audit[4455]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=0 a1=c0001976b0 a2=3c a3=7f282dfaf5f8 items=0 ppid=3995 pid=4455 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:22:18.850269 kernel: audit: type=1300 audit(1757118138.840:1450): arch=c000003e syscall=321 success=yes exit=15 a0=0 a1=c0001976b0 a2=3c a3=7f282dfaf5f8 items=0 ppid=3995 pid=4455 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:22:18.840000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6234353032373837626166643037333338653465656665326466303762 Sep 6 00:22:18.840000 audit[4455]: AVC avc: denied { bpf } for pid=4455 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:18.840000 audit[4455]: AVC avc: denied { bpf } for pid=4455 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:18.840000 audit[4455]: AVC avc: denied { bpf } for pid=4455 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:18.840000 audit[4455]: AVC avc: denied { perfmon } for pid=4455 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:18.840000 audit[4455]: AVC avc: denied { perfmon } for pid=4455 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:18.840000 audit[4455]: AVC avc: denied { perfmon } for pid=4455 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:18.840000 audit[4455]: AVC avc: denied { perfmon } for pid=4455 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:18.840000 audit[4455]: AVC avc: denied { perfmon } for pid=4455 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:18.840000 audit[4455]: AVC avc: denied { bpf } for pid=4455 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:18.840000 audit[4455]: AVC avc: denied { bpf } for pid=4455 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:18.840000 audit: BPF prog-id=224 op=LOAD Sep 6 00:22:18.840000 audit[4455]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c0001979d8 a2=78 a3=c00029a2a8 items=0 ppid=3995 pid=4455 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:22:18.840000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6234353032373837626166643037333338653465656665326466303762 Sep 6 00:22:18.841000 audit[4455]: AVC avc: denied { bpf } for pid=4455 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:18.841000 audit[4455]: AVC avc: denied { bpf } for pid=4455 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:18.841000 audit[4455]: AVC avc: denied { perfmon } for pid=4455 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:18.841000 audit[4455]: AVC avc: denied { perfmon } for pid=4455 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:18.841000 audit[4455]: AVC avc: denied { perfmon } for pid=4455 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:18.841000 audit[4455]: AVC avc: denied { perfmon } for pid=4455 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:18.841000 audit[4455]: AVC avc: denied { perfmon } for pid=4455 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:18.841000 audit[4455]: AVC avc: denied { bpf } for pid=4455 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:18.841000 audit[4455]: AVC avc: denied { bpf } for pid=4455 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:18.841000 audit: BPF prog-id=225 op=LOAD Sep 6 00:22:18.841000 audit[4455]: SYSCALL arch=c000003e syscall=321 success=yes exit=17 a0=5 a1=c000197770 a2=78 a3=c00029a2f8 items=0 ppid=3995 pid=4455 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:22:18.841000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6234353032373837626166643037333338653465656665326466303762 Sep 6 00:22:18.841000 audit: BPF prog-id=225 op=UNLOAD Sep 6 00:22:18.841000 audit: BPF prog-id=224 op=UNLOAD Sep 6 00:22:18.841000 audit[4455]: AVC avc: denied { bpf } for pid=4455 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:18.841000 audit[4455]: AVC avc: denied { bpf } for pid=4455 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:18.841000 audit[4455]: AVC avc: denied { bpf } for pid=4455 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:18.841000 audit[4455]: AVC avc: denied { perfmon } for pid=4455 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:18.841000 audit[4455]: AVC avc: denied { perfmon } for pid=4455 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:18.841000 audit[4455]: AVC avc: denied { perfmon } for pid=4455 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:18.841000 audit[4455]: AVC avc: denied { perfmon } for pid=4455 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:18.841000 audit[4455]: AVC avc: denied { perfmon } for pid=4455 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:18.841000 audit[4455]: AVC avc: denied { bpf } for pid=4455 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:18.841000 audit[4455]: AVC avc: denied { bpf } for pid=4455 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:18.841000 audit: BPF prog-id=226 op=LOAD Sep 6 00:22:18.841000 audit[4455]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c000197c30 a2=78 a3=c00029a388 items=0 ppid=3995 pid=4455 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:22:18.841000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6234353032373837626166643037333338653465656665326466303762 Sep 6 00:22:18.832000 audit: PROCTITLE proctitle=2F636F64652F617069736572766572002D2D7365637572652D706F72743D35343433002D2D746C732D707269766174652D6B65792D66696C653D2F63616C69636F2D6170697365727665722D63657274732F746C732E6B6579002D2D746C732D636572742D66696C653D2F63616C69636F2D6170697365727665722D63657274 Sep 6 00:22:18.908212 env[1194]: time="2025-09-06T00:22:18.905436093Z" level=info msg="StartContainer for \"b4502787bafd07338e4eefe2df07b2c3daa52719a8b8a7d3a8c3747f3c0d246e\" returns successfully" Sep 6 00:22:19.092000 audit[1819]: AVC avc: denied { watch } for pid=1819 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=526379 scontext=system_u:system_r:svirt_lxc_net_t:s0:c762,c897 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Sep 6 00:22:19.092000 audit[1819]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=7a a1=c00882a520 a2=fc6 a3=0 items=0 ppid=1640 pid=1819 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c762,c897 key=(null) Sep 6 00:22:19.092000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3134372E3138322E3139382E3731002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B Sep 6 00:22:19.092000 audit[1819]: AVC avc: denied { watch } for pid=1819 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="vda9" ino=526385 scontext=system_u:system_r:svirt_lxc_net_t:s0:c762,c897 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Sep 6 00:22:19.092000 audit[1819]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=78 a1=c00df8f0b0 a2=fc6 a3=0 items=0 ppid=1640 pid=1819 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c762,c897 key=(null) Sep 6 00:22:19.092000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3134372E3138322E3139382E3731002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B Sep 6 00:22:19.114000 audit[1819]: AVC avc: denied { watch } for pid=1819 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-client.crt" dev="vda9" ino=526387 scontext=system_u:system_r:svirt_lxc_net_t:s0:c762,c897 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Sep 6 00:22:19.114000 audit[1819]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=78 a1=c00da7c300 a2=fc6 a3=0 items=0 ppid=1640 pid=1819 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c762,c897 key=(null) Sep 6 00:22:19.114000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3134372E3138322E3139382E3731002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B Sep 6 00:22:19.125000 audit[1819]: AVC avc: denied { watch } for pid=1819 comm="kube-apiserver" path="/etc/kubernetes/pki/apiserver.crt" dev="vda9" ino=526381 scontext=system_u:system_r:svirt_lxc_net_t:s0:c762,c897 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Sep 6 00:22:19.125000 audit[1819]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=78 a1=c00da7c510 a2=fc6 a3=0 items=0 ppid=1640 pid=1819 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c762,c897 key=(null) Sep 6 00:22:19.125000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3134372E3138322E3139382E3731002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B Sep 6 00:22:19.201000 audit[1819]: AVC avc: denied { watch } for pid=1819 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=526379 scontext=system_u:system_r:svirt_lxc_net_t:s0:c762,c897 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Sep 6 00:22:19.201000 audit[1819]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=78 a1=c00444cbe0 a2=fc6 a3=0 items=0 ppid=1640 pid=1819 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c762,c897 key=(null) Sep 6 00:22:19.201000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3134372E3138322E3139382E3731002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B Sep 6 00:22:19.201000 audit[1819]: AVC avc: denied { watch } for pid=1819 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="vda9" ino=526385 scontext=system_u:system_r:svirt_lxc_net_t:s0:c762,c897 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Sep 6 00:22:19.201000 audit[1819]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=78 a1=c00df8fe30 a2=fc6 a3=0 items=0 ppid=1640 pid=1819 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c762,c897 key=(null) Sep 6 00:22:19.201000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3134372E3138322E3139382E3731002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B Sep 6 00:22:21.300442 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount3614264494.mount: Deactivated successfully. Sep 6 00:22:21.361797 systemd[1]: Started sshd@8-147.182.198.71:22-147.75.109.163:38868.service. Sep 6 00:22:21.360000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@8-147.182.198.71:22-147.75.109.163:38868 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 00:22:21.553000 audit[4484]: USER_ACCT pid=4484 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Sep 6 00:22:21.555575 sshd[4484]: Accepted publickey for core from 147.75.109.163 port 38868 ssh2: RSA SHA256:zgVES46caP1+99uzHYMS+9ry3WhXasb4NYAgm1B5TPc Sep 6 00:22:21.556000 audit[4484]: CRED_ACQ pid=4484 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Sep 6 00:22:21.556000 audit[4484]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffcb07ddd80 a2=3 a3=0 items=0 ppid=1 pid=4484 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=9 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:22:21.556000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Sep 6 00:22:21.560107 sshd[4484]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Sep 6 00:22:21.573358 systemd-logind[1184]: New session 9 of user core. Sep 6 00:22:21.574161 systemd[1]: Started session-9.scope. Sep 6 00:22:21.586000 audit[4484]: USER_START pid=4484 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Sep 6 00:22:21.590000 audit[4486]: CRED_ACQ pid=4486 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Sep 6 00:22:22.453984 env[1194]: time="2025-09-06T00:22:22.453885160Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/goldmane:v3.30.3,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 6 00:22:22.458579 env[1194]: time="2025-09-06T00:22:22.456624909Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:a7d029fd8f6be94c26af980675c1650818e1e6e19dbd2f8c13e6e61963f021e8,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 6 00:22:22.459954 env[1194]: time="2025-09-06T00:22:22.459519041Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/goldmane:v3.30.3,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 6 00:22:22.470187 env[1194]: time="2025-09-06T00:22:22.469206436Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/goldmane:v3.30.3\" returns image reference \"sha256:a7d029fd8f6be94c26af980675c1650818e1e6e19dbd2f8c13e6e61963f021e8\"" Sep 6 00:22:22.471267 env[1194]: time="2025-09-06T00:22:22.470667976Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/goldmane@sha256:46297703ab3739331a00a58f0d6a5498c8d3b6523ad947eed68592ee0f3e79f0,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 6 00:22:22.686615 env[1194]: time="2025-09-06T00:22:22.685883091Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.3\"" Sep 6 00:22:22.689324 sshd[4484]: pam_unix(sshd:session): session closed for user core Sep 6 00:22:22.691000 audit[4484]: USER_END pid=4484 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Sep 6 00:22:22.691000 audit[4484]: CRED_DISP pid=4484 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Sep 6 00:22:22.694759 systemd[1]: sshd@8-147.182.198.71:22-147.75.109.163:38868.service: Deactivated successfully. Sep 6 00:22:22.693000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@8-147.182.198.71:22-147.75.109.163:38868 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 00:22:22.695865 systemd[1]: session-9.scope: Deactivated successfully. Sep 6 00:22:22.697167 systemd-logind[1184]: Session 9 logged out. Waiting for processes to exit. Sep 6 00:22:22.698331 systemd-logind[1184]: Removed session 9. Sep 6 00:22:22.775107 env[1194]: time="2025-09-06T00:22:22.775028318Z" level=info msg="CreateContainer within sandbox \"58a186c255b7a7f5d7d5e8d290c16cdfa08f987de6a9834452720cdfda154bf4\" for container &ContainerMetadata{Name:goldmane,Attempt:0,}" Sep 6 00:22:22.799202 env[1194]: time="2025-09-06T00:22:22.799144840Z" level=info msg="CreateContainer within sandbox \"58a186c255b7a7f5d7d5e8d290c16cdfa08f987de6a9834452720cdfda154bf4\" for &ContainerMetadata{Name:goldmane,Attempt:0,} returns container id \"7e62e8e40f7b5dce0c46e6d58ffa93c9f612ff277b3b18173384b8ab914d0695\"" Sep 6 00:22:22.801093 env[1194]: time="2025-09-06T00:22:22.801031265Z" level=info msg="StartContainer for \"7e62e8e40f7b5dce0c46e6d58ffa93c9f612ff277b3b18173384b8ab914d0695\"" Sep 6 00:22:22.845715 systemd[1]: run-containerd-runc-k8s.io-7e62e8e40f7b5dce0c46e6d58ffa93c9f612ff277b3b18173384b8ab914d0695-runc.bXkHRW.mount: Deactivated successfully. Sep 6 00:22:22.852937 systemd[1]: Started cri-containerd-7e62e8e40f7b5dce0c46e6d58ffa93c9f612ff277b3b18173384b8ab914d0695.scope. Sep 6 00:22:22.870000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:22.870000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:22.870000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:22.870000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:22.870000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:22.870000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:22.870000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:22.870000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:22.870000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:22.870000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:22.870000 audit: BPF prog-id=227 op=LOAD Sep 6 00:22:22.871000 audit[4503]: AVC avc: denied { bpf } for pid=4503 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:22.871000 audit[4503]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c00019fc48 a2=10 a3=1c items=0 ppid=4234 pid=4503 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:22:22.871000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3765363265386534306637623564636530633436653664353866666139 Sep 6 00:22:22.871000 audit[4503]: AVC avc: denied { perfmon } for pid=4503 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:22.871000 audit[4503]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c00019f6b0 a2=3c a3=8 items=0 ppid=4234 pid=4503 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:22:22.871000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3765363265386534306637623564636530633436653664353866666139 Sep 6 00:22:22.871000 audit[4503]: AVC avc: denied { bpf } for pid=4503 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:22.871000 audit[4503]: AVC avc: denied { bpf } for pid=4503 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:22.871000 audit[4503]: AVC avc: denied { bpf } for pid=4503 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:22.871000 audit[4503]: AVC avc: denied { perfmon } for pid=4503 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:22.871000 audit[4503]: AVC avc: denied { perfmon } for pid=4503 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:22.871000 audit[4503]: AVC avc: denied { perfmon } for pid=4503 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:22.871000 audit[4503]: AVC avc: denied { perfmon } for pid=4503 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:22.871000 audit[4503]: AVC avc: denied { perfmon } for pid=4503 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:22.871000 audit[4503]: AVC avc: denied { bpf } for pid=4503 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:22.871000 audit[4503]: AVC avc: denied { bpf } for pid=4503 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:22.871000 audit: BPF prog-id=228 op=LOAD Sep 6 00:22:22.871000 audit[4503]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c00019f9d8 a2=78 a3=c00028b710 items=0 ppid=4234 pid=4503 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:22:22.871000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3765363265386534306637623564636530633436653664353866666139 Sep 6 00:22:22.872000 audit[4503]: AVC avc: denied { bpf } for pid=4503 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:22.872000 audit[4503]: AVC avc: denied { bpf } for pid=4503 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:22.872000 audit[4503]: AVC avc: denied { perfmon } for pid=4503 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:22.872000 audit[4503]: AVC avc: denied { perfmon } for pid=4503 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:22.872000 audit[4503]: AVC avc: denied { perfmon } for pid=4503 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:22.872000 audit[4503]: AVC avc: denied { perfmon } for pid=4503 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:22.872000 audit[4503]: AVC avc: denied { perfmon } for pid=4503 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:22.872000 audit[4503]: AVC avc: denied { bpf } for pid=4503 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:22.872000 audit[4503]: AVC avc: denied { bpf } for pid=4503 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:22.872000 audit: BPF prog-id=229 op=LOAD Sep 6 00:22:22.872000 audit[4503]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c00019f770 a2=78 a3=c00028b758 items=0 ppid=4234 pid=4503 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:22:22.872000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3765363265386534306637623564636530633436653664353866666139 Sep 6 00:22:22.872000 audit: BPF prog-id=229 op=UNLOAD Sep 6 00:22:22.872000 audit: BPF prog-id=228 op=UNLOAD Sep 6 00:22:22.872000 audit[4503]: AVC avc: denied { bpf } for pid=4503 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:22.872000 audit[4503]: AVC avc: denied { bpf } for pid=4503 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:22.872000 audit[4503]: AVC avc: denied { bpf } for pid=4503 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:22.872000 audit[4503]: AVC avc: denied { perfmon } for pid=4503 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:22.872000 audit[4503]: AVC avc: denied { perfmon } for pid=4503 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:22.872000 audit[4503]: AVC avc: denied { perfmon } for pid=4503 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:22.872000 audit[4503]: AVC avc: denied { perfmon } for pid=4503 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:22.872000 audit[4503]: AVC avc: denied { perfmon } for pid=4503 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:22.872000 audit[4503]: AVC avc: denied { bpf } for pid=4503 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:22.872000 audit[4503]: AVC avc: denied { bpf } for pid=4503 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:22.872000 audit: BPF prog-id=230 op=LOAD Sep 6 00:22:22.872000 audit[4503]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c00019fc30 a2=78 a3=c00028bb68 items=0 ppid=4234 pid=4503 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:22:22.872000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3765363265386534306637623564636530633436653664353866666139 Sep 6 00:22:22.913212 env[1194]: time="2025-09-06T00:22:22.913146241Z" level=info msg="StartContainer for \"7e62e8e40f7b5dce0c46e6d58ffa93c9f612ff277b3b18173384b8ab914d0695\" returns successfully" Sep 6 00:22:23.582000 audit[4566]: NETFILTER_CFG table=filter:126 family=2 entries=10 op=nft_register_rule pid=4566 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Sep 6 00:22:23.594795 kernel: kauditd_printk_skb: 128 callbacks suppressed Sep 6 00:22:23.594943 kernel: audit: type=1325 audit(1757118143.582:1489): table=filter:126 family=2 entries=10 op=nft_register_rule pid=4566 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Sep 6 00:22:23.595437 kernel: audit: type=1300 audit(1757118143.582:1489): arch=c000003e syscall=46 success=yes exit=3760 a0=3 a1=7ffc6c6dd810 a2=0 a3=7ffc6c6dd7fc items=0 ppid=2038 pid=4566 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:22:23.582000 audit[4566]: SYSCALL arch=c000003e syscall=46 success=yes exit=3760 a0=3 a1=7ffc6c6dd810 a2=0 a3=7ffc6c6dd7fc items=0 ppid=2038 pid=4566 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:22:23.582000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Sep 6 00:22:23.602264 kernel: audit: type=1327 audit(1757118143.582:1489): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Sep 6 00:22:23.599000 audit[4566]: NETFILTER_CFG table=nat:127 family=2 entries=24 op=nft_register_rule pid=4566 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Sep 6 00:22:23.605257 kernel: audit: type=1325 audit(1757118143.599:1490): table=nat:127 family=2 entries=24 op=nft_register_rule pid=4566 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Sep 6 00:22:23.599000 audit[4566]: SYSCALL arch=c000003e syscall=46 success=yes exit=7308 a0=3 a1=7ffc6c6dd810 a2=0 a3=7ffc6c6dd7fc items=0 ppid=2038 pid=4566 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:22:23.612142 kernel: audit: type=1300 audit(1757118143.599:1490): arch=c000003e syscall=46 success=yes exit=7308 a0=3 a1=7ffc6c6dd810 a2=0 a3=7ffc6c6dd7fc items=0 ppid=2038 pid=4566 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:22:23.612370 kernel: audit: type=1327 audit(1757118143.599:1490): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Sep 6 00:22:23.599000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Sep 6 00:22:23.703273 kubelet[1933]: I0906 00:22:23.700507 1933 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="calico-system/goldmane-7988f88666-bmw2n" podStartSLOduration=29.150349142 podStartE2EDuration="40.695561863s" podCreationTimestamp="2025-09-06 00:21:43 +0000 UTC" firstStartedPulling="2025-09-06 00:22:11.001104821 +0000 UTC m=+47.861094790" lastFinishedPulling="2025-09-06 00:22:22.54631755 +0000 UTC m=+59.406307511" observedRunningTime="2025-09-06 00:22:23.682443875 +0000 UTC m=+60.542433860" watchObservedRunningTime="2025-09-06 00:22:23.695561863 +0000 UTC m=+60.555551831" Sep 6 00:22:23.716994 env[1194]: time="2025-09-06T00:22:23.716626924Z" level=info msg="StopPodSandbox for \"3e6cbb7012d247d9d125bbc3ca5eea67cec016d67a30106e88c9a3f4d841c284\"" Sep 6 00:22:24.296712 systemd[1]: run-containerd-runc-k8s.io-7e62e8e40f7b5dce0c46e6d58ffa93c9f612ff277b3b18173384b8ab914d0695-runc.eLwhMk.mount: Deactivated successfully. Sep 6 00:22:24.330438 env[1194]: 2025-09-06 00:22:24.044 [WARNING][4584] cni-plugin/k8s.go 604: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="3e6cbb7012d247d9d125bbc3ca5eea67cec016d67a30106e88c9a3f4d841c284" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ci--3510.3.8--n--86fdecb492-k8s-goldmane--7988f88666--bmw2n-eth0", GenerateName:"goldmane-7988f88666-", Namespace:"calico-system", SelfLink:"", UID:"a6952448-1254-4d78-8f5e-8abf0e8f4465", ResourceVersion:"1176", Generation:0, CreationTimestamp:time.Date(2025, time.September, 6, 0, 21, 43, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"goldmane", "k8s-app":"goldmane", "pod-template-hash":"7988f88666", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"goldmane"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ci-3510.3.8-n-86fdecb492", ContainerID:"58a186c255b7a7f5d7d5e8d290c16cdfa08f987de6a9834452720cdfda154bf4", Pod:"goldmane-7988f88666-bmw2n", Endpoint:"eth0", ServiceAccountName:"goldmane", IPNetworks:[]string{"192.168.14.136/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.goldmane"}, InterfaceName:"cali3a91ee5c626", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Sep 6 00:22:24.330438 env[1194]: 2025-09-06 00:22:24.047 [INFO][4584] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="3e6cbb7012d247d9d125bbc3ca5eea67cec016d67a30106e88c9a3f4d841c284" Sep 6 00:22:24.330438 env[1194]: 2025-09-06 00:22:24.047 [INFO][4584] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="3e6cbb7012d247d9d125bbc3ca5eea67cec016d67a30106e88c9a3f4d841c284" iface="eth0" netns="" Sep 6 00:22:24.330438 env[1194]: 2025-09-06 00:22:24.047 [INFO][4584] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="3e6cbb7012d247d9d125bbc3ca5eea67cec016d67a30106e88c9a3f4d841c284" Sep 6 00:22:24.330438 env[1194]: 2025-09-06 00:22:24.047 [INFO][4584] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="3e6cbb7012d247d9d125bbc3ca5eea67cec016d67a30106e88c9a3f4d841c284" Sep 6 00:22:24.330438 env[1194]: 2025-09-06 00:22:24.303 [INFO][4591] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="3e6cbb7012d247d9d125bbc3ca5eea67cec016d67a30106e88c9a3f4d841c284" HandleID="k8s-pod-network.3e6cbb7012d247d9d125bbc3ca5eea67cec016d67a30106e88c9a3f4d841c284" Workload="ci--3510.3.8--n--86fdecb492-k8s-goldmane--7988f88666--bmw2n-eth0" Sep 6 00:22:24.330438 env[1194]: 2025-09-06 00:22:24.306 [INFO][4591] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Sep 6 00:22:24.330438 env[1194]: 2025-09-06 00:22:24.307 [INFO][4591] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Sep 6 00:22:24.330438 env[1194]: 2025-09-06 00:22:24.321 [WARNING][4591] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="3e6cbb7012d247d9d125bbc3ca5eea67cec016d67a30106e88c9a3f4d841c284" HandleID="k8s-pod-network.3e6cbb7012d247d9d125bbc3ca5eea67cec016d67a30106e88c9a3f4d841c284" Workload="ci--3510.3.8--n--86fdecb492-k8s-goldmane--7988f88666--bmw2n-eth0" Sep 6 00:22:24.330438 env[1194]: 2025-09-06 00:22:24.322 [INFO][4591] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="3e6cbb7012d247d9d125bbc3ca5eea67cec016d67a30106e88c9a3f4d841c284" HandleID="k8s-pod-network.3e6cbb7012d247d9d125bbc3ca5eea67cec016d67a30106e88c9a3f4d841c284" Workload="ci--3510.3.8--n--86fdecb492-k8s-goldmane--7988f88666--bmw2n-eth0" Sep 6 00:22:24.330438 env[1194]: 2025-09-06 00:22:24.324 [INFO][4591] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Sep 6 00:22:24.330438 env[1194]: 2025-09-06 00:22:24.327 [INFO][4584] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="3e6cbb7012d247d9d125bbc3ca5eea67cec016d67a30106e88c9a3f4d841c284" Sep 6 00:22:24.331654 env[1194]: time="2025-09-06T00:22:24.331370978Z" level=info msg="TearDown network for sandbox \"3e6cbb7012d247d9d125bbc3ca5eea67cec016d67a30106e88c9a3f4d841c284\" successfully" Sep 6 00:22:24.331654 env[1194]: time="2025-09-06T00:22:24.331424756Z" level=info msg="StopPodSandbox for \"3e6cbb7012d247d9d125bbc3ca5eea67cec016d67a30106e88c9a3f4d841c284\" returns successfully" Sep 6 00:22:24.338620 env[1194]: time="2025-09-06T00:22:24.338576616Z" level=info msg="RemovePodSandbox for \"3e6cbb7012d247d9d125bbc3ca5eea67cec016d67a30106e88c9a3f4d841c284\"" Sep 6 00:22:24.338935 env[1194]: time="2025-09-06T00:22:24.338887185Z" level=info msg="Forcibly stopping sandbox \"3e6cbb7012d247d9d125bbc3ca5eea67cec016d67a30106e88c9a3f4d841c284\"" Sep 6 00:22:24.523646 env[1194]: 2025-09-06 00:22:24.417 [WARNING][4623] cni-plugin/k8s.go 604: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="3e6cbb7012d247d9d125bbc3ca5eea67cec016d67a30106e88c9a3f4d841c284" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ci--3510.3.8--n--86fdecb492-k8s-goldmane--7988f88666--bmw2n-eth0", GenerateName:"goldmane-7988f88666-", Namespace:"calico-system", SelfLink:"", UID:"a6952448-1254-4d78-8f5e-8abf0e8f4465", ResourceVersion:"1176", Generation:0, CreationTimestamp:time.Date(2025, time.September, 6, 0, 21, 43, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"goldmane", "k8s-app":"goldmane", "pod-template-hash":"7988f88666", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"goldmane"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ci-3510.3.8-n-86fdecb492", ContainerID:"58a186c255b7a7f5d7d5e8d290c16cdfa08f987de6a9834452720cdfda154bf4", Pod:"goldmane-7988f88666-bmw2n", Endpoint:"eth0", ServiceAccountName:"goldmane", IPNetworks:[]string{"192.168.14.136/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.goldmane"}, InterfaceName:"cali3a91ee5c626", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Sep 6 00:22:24.523646 env[1194]: 2025-09-06 00:22:24.418 [INFO][4623] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="3e6cbb7012d247d9d125bbc3ca5eea67cec016d67a30106e88c9a3f4d841c284" Sep 6 00:22:24.523646 env[1194]: 2025-09-06 00:22:24.418 [INFO][4623] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="3e6cbb7012d247d9d125bbc3ca5eea67cec016d67a30106e88c9a3f4d841c284" iface="eth0" netns="" Sep 6 00:22:24.523646 env[1194]: 2025-09-06 00:22:24.418 [INFO][4623] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="3e6cbb7012d247d9d125bbc3ca5eea67cec016d67a30106e88c9a3f4d841c284" Sep 6 00:22:24.523646 env[1194]: 2025-09-06 00:22:24.418 [INFO][4623] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="3e6cbb7012d247d9d125bbc3ca5eea67cec016d67a30106e88c9a3f4d841c284" Sep 6 00:22:24.523646 env[1194]: 2025-09-06 00:22:24.491 [INFO][4637] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="3e6cbb7012d247d9d125bbc3ca5eea67cec016d67a30106e88c9a3f4d841c284" HandleID="k8s-pod-network.3e6cbb7012d247d9d125bbc3ca5eea67cec016d67a30106e88c9a3f4d841c284" Workload="ci--3510.3.8--n--86fdecb492-k8s-goldmane--7988f88666--bmw2n-eth0" Sep 6 00:22:24.523646 env[1194]: 2025-09-06 00:22:24.495 [INFO][4637] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Sep 6 00:22:24.523646 env[1194]: 2025-09-06 00:22:24.495 [INFO][4637] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Sep 6 00:22:24.523646 env[1194]: 2025-09-06 00:22:24.505 [WARNING][4637] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="3e6cbb7012d247d9d125bbc3ca5eea67cec016d67a30106e88c9a3f4d841c284" HandleID="k8s-pod-network.3e6cbb7012d247d9d125bbc3ca5eea67cec016d67a30106e88c9a3f4d841c284" Workload="ci--3510.3.8--n--86fdecb492-k8s-goldmane--7988f88666--bmw2n-eth0" Sep 6 00:22:24.523646 env[1194]: 2025-09-06 00:22:24.506 [INFO][4637] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="3e6cbb7012d247d9d125bbc3ca5eea67cec016d67a30106e88c9a3f4d841c284" HandleID="k8s-pod-network.3e6cbb7012d247d9d125bbc3ca5eea67cec016d67a30106e88c9a3f4d841c284" Workload="ci--3510.3.8--n--86fdecb492-k8s-goldmane--7988f88666--bmw2n-eth0" Sep 6 00:22:24.523646 env[1194]: 2025-09-06 00:22:24.509 [INFO][4637] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Sep 6 00:22:24.523646 env[1194]: 2025-09-06 00:22:24.515 [INFO][4623] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="3e6cbb7012d247d9d125bbc3ca5eea67cec016d67a30106e88c9a3f4d841c284" Sep 6 00:22:24.523646 env[1194]: time="2025-09-06T00:22:24.522065482Z" level=info msg="TearDown network for sandbox \"3e6cbb7012d247d9d125bbc3ca5eea67cec016d67a30106e88c9a3f4d841c284\" successfully" Sep 6 00:22:24.527174 env[1194]: time="2025-09-06T00:22:24.526942587Z" level=info msg="RemovePodSandbox \"3e6cbb7012d247d9d125bbc3ca5eea67cec016d67a30106e88c9a3f4d841c284\" returns successfully" Sep 6 00:22:24.530306 env[1194]: time="2025-09-06T00:22:24.530212346Z" level=info msg="StopPodSandbox for \"865d6c3ec068e07b6321682c7afbda2f71b72d5a2cc7ea65fbddbe99ee0e181c\"" Sep 6 00:22:24.732251 env[1194]: 2025-09-06 00:22:24.644 [WARNING][4655] cni-plugin/k8s.go 604: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="865d6c3ec068e07b6321682c7afbda2f71b72d5a2cc7ea65fbddbe99ee0e181c" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ci--3510.3.8--n--86fdecb492-k8s-csi--node--driver--6qmdc-eth0", GenerateName:"csi-node-driver-", Namespace:"calico-system", SelfLink:"", UID:"ece72a4f-db26-4c71-b1f6-478e03debafc", ResourceVersion:"1021", Generation:0, CreationTimestamp:time.Date(2025, time.September, 6, 0, 21, 44, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"csi-node-driver", "controller-revision-hash":"856c6b598f", "k8s-app":"csi-node-driver", "name":"csi-node-driver", "pod-template-generation":"1", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"csi-node-driver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ci-3510.3.8-n-86fdecb492", ContainerID:"e1200c94299c783759b0ddc32335b68b1ba29dda4ee901238fb354c9c59fbc88", Pod:"csi-node-driver-6qmdc", Endpoint:"eth0", ServiceAccountName:"csi-node-driver", IPNetworks:[]string{"192.168.14.134/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.csi-node-driver"}, InterfaceName:"calif5633e528a2", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Sep 6 00:22:24.732251 env[1194]: 2025-09-06 00:22:24.644 [INFO][4655] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="865d6c3ec068e07b6321682c7afbda2f71b72d5a2cc7ea65fbddbe99ee0e181c" Sep 6 00:22:24.732251 env[1194]: 2025-09-06 00:22:24.644 [INFO][4655] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="865d6c3ec068e07b6321682c7afbda2f71b72d5a2cc7ea65fbddbe99ee0e181c" iface="eth0" netns="" Sep 6 00:22:24.732251 env[1194]: 2025-09-06 00:22:24.644 [INFO][4655] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="865d6c3ec068e07b6321682c7afbda2f71b72d5a2cc7ea65fbddbe99ee0e181c" Sep 6 00:22:24.732251 env[1194]: 2025-09-06 00:22:24.644 [INFO][4655] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="865d6c3ec068e07b6321682c7afbda2f71b72d5a2cc7ea65fbddbe99ee0e181c" Sep 6 00:22:24.732251 env[1194]: 2025-09-06 00:22:24.695 [INFO][4662] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="865d6c3ec068e07b6321682c7afbda2f71b72d5a2cc7ea65fbddbe99ee0e181c" HandleID="k8s-pod-network.865d6c3ec068e07b6321682c7afbda2f71b72d5a2cc7ea65fbddbe99ee0e181c" Workload="ci--3510.3.8--n--86fdecb492-k8s-csi--node--driver--6qmdc-eth0" Sep 6 00:22:24.732251 env[1194]: 2025-09-06 00:22:24.700 [INFO][4662] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Sep 6 00:22:24.732251 env[1194]: 2025-09-06 00:22:24.700 [INFO][4662] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Sep 6 00:22:24.732251 env[1194]: 2025-09-06 00:22:24.712 [WARNING][4662] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="865d6c3ec068e07b6321682c7afbda2f71b72d5a2cc7ea65fbddbe99ee0e181c" HandleID="k8s-pod-network.865d6c3ec068e07b6321682c7afbda2f71b72d5a2cc7ea65fbddbe99ee0e181c" Workload="ci--3510.3.8--n--86fdecb492-k8s-csi--node--driver--6qmdc-eth0" Sep 6 00:22:24.732251 env[1194]: 2025-09-06 00:22:24.712 [INFO][4662] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="865d6c3ec068e07b6321682c7afbda2f71b72d5a2cc7ea65fbddbe99ee0e181c" HandleID="k8s-pod-network.865d6c3ec068e07b6321682c7afbda2f71b72d5a2cc7ea65fbddbe99ee0e181c" Workload="ci--3510.3.8--n--86fdecb492-k8s-csi--node--driver--6qmdc-eth0" Sep 6 00:22:24.732251 env[1194]: 2025-09-06 00:22:24.721 [INFO][4662] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Sep 6 00:22:24.732251 env[1194]: 2025-09-06 00:22:24.729 [INFO][4655] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="865d6c3ec068e07b6321682c7afbda2f71b72d5a2cc7ea65fbddbe99ee0e181c" Sep 6 00:22:24.734262 env[1194]: time="2025-09-06T00:22:24.732210724Z" level=info msg="TearDown network for sandbox \"865d6c3ec068e07b6321682c7afbda2f71b72d5a2cc7ea65fbddbe99ee0e181c\" successfully" Sep 6 00:22:24.734262 env[1194]: time="2025-09-06T00:22:24.733099589Z" level=info msg="StopPodSandbox for \"865d6c3ec068e07b6321682c7afbda2f71b72d5a2cc7ea65fbddbe99ee0e181c\" returns successfully" Sep 6 00:22:24.734686 env[1194]: time="2025-09-06T00:22:24.734632456Z" level=info msg="RemovePodSandbox for \"865d6c3ec068e07b6321682c7afbda2f71b72d5a2cc7ea65fbddbe99ee0e181c\"" Sep 6 00:22:24.735193 env[1194]: time="2025-09-06T00:22:24.734695374Z" level=info msg="Forcibly stopping sandbox \"865d6c3ec068e07b6321682c7afbda2f71b72d5a2cc7ea65fbddbe99ee0e181c\"" Sep 6 00:22:24.969791 systemd[1]: run-containerd-runc-k8s.io-7e62e8e40f7b5dce0c46e6d58ffa93c9f612ff277b3b18173384b8ab914d0695-runc.se41IP.mount: Deactivated successfully. Sep 6 00:22:25.035270 env[1194]: 2025-09-06 00:22:24.890 [WARNING][4677] cni-plugin/k8s.go 604: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="865d6c3ec068e07b6321682c7afbda2f71b72d5a2cc7ea65fbddbe99ee0e181c" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ci--3510.3.8--n--86fdecb492-k8s-csi--node--driver--6qmdc-eth0", GenerateName:"csi-node-driver-", Namespace:"calico-system", SelfLink:"", UID:"ece72a4f-db26-4c71-b1f6-478e03debafc", ResourceVersion:"1021", Generation:0, CreationTimestamp:time.Date(2025, time.September, 6, 0, 21, 44, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"csi-node-driver", "controller-revision-hash":"856c6b598f", "k8s-app":"csi-node-driver", "name":"csi-node-driver", "pod-template-generation":"1", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"csi-node-driver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ci-3510.3.8-n-86fdecb492", ContainerID:"e1200c94299c783759b0ddc32335b68b1ba29dda4ee901238fb354c9c59fbc88", Pod:"csi-node-driver-6qmdc", Endpoint:"eth0", ServiceAccountName:"csi-node-driver", IPNetworks:[]string{"192.168.14.134/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.csi-node-driver"}, InterfaceName:"calif5633e528a2", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Sep 6 00:22:25.035270 env[1194]: 2025-09-06 00:22:24.891 [INFO][4677] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="865d6c3ec068e07b6321682c7afbda2f71b72d5a2cc7ea65fbddbe99ee0e181c" Sep 6 00:22:25.035270 env[1194]: 2025-09-06 00:22:24.891 [INFO][4677] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="865d6c3ec068e07b6321682c7afbda2f71b72d5a2cc7ea65fbddbe99ee0e181c" iface="eth0" netns="" Sep 6 00:22:25.035270 env[1194]: 2025-09-06 00:22:24.891 [INFO][4677] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="865d6c3ec068e07b6321682c7afbda2f71b72d5a2cc7ea65fbddbe99ee0e181c" Sep 6 00:22:25.035270 env[1194]: 2025-09-06 00:22:24.891 [INFO][4677] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="865d6c3ec068e07b6321682c7afbda2f71b72d5a2cc7ea65fbddbe99ee0e181c" Sep 6 00:22:25.035270 env[1194]: 2025-09-06 00:22:25.006 [INFO][4684] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="865d6c3ec068e07b6321682c7afbda2f71b72d5a2cc7ea65fbddbe99ee0e181c" HandleID="k8s-pod-network.865d6c3ec068e07b6321682c7afbda2f71b72d5a2cc7ea65fbddbe99ee0e181c" Workload="ci--3510.3.8--n--86fdecb492-k8s-csi--node--driver--6qmdc-eth0" Sep 6 00:22:25.035270 env[1194]: 2025-09-06 00:22:25.007 [INFO][4684] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Sep 6 00:22:25.035270 env[1194]: 2025-09-06 00:22:25.007 [INFO][4684] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Sep 6 00:22:25.035270 env[1194]: 2025-09-06 00:22:25.018 [WARNING][4684] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="865d6c3ec068e07b6321682c7afbda2f71b72d5a2cc7ea65fbddbe99ee0e181c" HandleID="k8s-pod-network.865d6c3ec068e07b6321682c7afbda2f71b72d5a2cc7ea65fbddbe99ee0e181c" Workload="ci--3510.3.8--n--86fdecb492-k8s-csi--node--driver--6qmdc-eth0" Sep 6 00:22:25.035270 env[1194]: 2025-09-06 00:22:25.018 [INFO][4684] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="865d6c3ec068e07b6321682c7afbda2f71b72d5a2cc7ea65fbddbe99ee0e181c" HandleID="k8s-pod-network.865d6c3ec068e07b6321682c7afbda2f71b72d5a2cc7ea65fbddbe99ee0e181c" Workload="ci--3510.3.8--n--86fdecb492-k8s-csi--node--driver--6qmdc-eth0" Sep 6 00:22:25.035270 env[1194]: 2025-09-06 00:22:25.020 [INFO][4684] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Sep 6 00:22:25.035270 env[1194]: 2025-09-06 00:22:25.024 [INFO][4677] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="865d6c3ec068e07b6321682c7afbda2f71b72d5a2cc7ea65fbddbe99ee0e181c" Sep 6 00:22:25.035270 env[1194]: time="2025-09-06T00:22:25.030195866Z" level=info msg="TearDown network for sandbox \"865d6c3ec068e07b6321682c7afbda2f71b72d5a2cc7ea65fbddbe99ee0e181c\" successfully" Sep 6 00:22:25.035270 env[1194]: time="2025-09-06T00:22:25.033735352Z" level=info msg="RemovePodSandbox \"865d6c3ec068e07b6321682c7afbda2f71b72d5a2cc7ea65fbddbe99ee0e181c\" returns successfully" Sep 6 00:22:25.037326 env[1194]: time="2025-09-06T00:22:25.036834877Z" level=info msg="StopPodSandbox for \"401e31ac767b820917f0284ed67d15c34d31d47745a5163164761fda87b8a37c\"" Sep 6 00:22:25.211167 env[1194]: 2025-09-06 00:22:25.134 [WARNING][4719] cni-plugin/k8s.go 604: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="401e31ac767b820917f0284ed67d15c34d31d47745a5163164761fda87b8a37c" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ci--3510.3.8--n--86fdecb492-k8s-coredns--7c65d6cfc9--lj58v-eth0", GenerateName:"coredns-7c65d6cfc9-", Namespace:"kube-system", SelfLink:"", UID:"ce247e9f-faab-4499-88d3-f60c1625b467", ResourceVersion:"1042", Generation:0, CreationTimestamp:time.Date(2025, time.September, 6, 0, 21, 29, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"k8s-app":"kube-dns", "pod-template-hash":"7c65d6cfc9", "projectcalico.org/namespace":"kube-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"coredns"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ci-3510.3.8-n-86fdecb492", ContainerID:"393196948766ef01f37ba9308a09cc2a255405934f79599df32189b752663bab", Pod:"coredns-7c65d6cfc9-lj58v", Endpoint:"eth0", ServiceAccountName:"coredns", IPNetworks:[]string{"192.168.14.135/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.kube-system", "ksa.kube-system.coredns"}, InterfaceName:"cali0e97a6fd6e2", MAC:"", Ports:[]v3.WorkloadEndpointPort{v3.WorkloadEndpointPort{Name:"dns", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"UDP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"dns-tcp", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"metrics", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x23c1, HostPort:0x0, HostIP:""}}, AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Sep 6 00:22:25.211167 env[1194]: 2025-09-06 00:22:25.135 [INFO][4719] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="401e31ac767b820917f0284ed67d15c34d31d47745a5163164761fda87b8a37c" Sep 6 00:22:25.211167 env[1194]: 2025-09-06 00:22:25.135 [INFO][4719] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="401e31ac767b820917f0284ed67d15c34d31d47745a5163164761fda87b8a37c" iface="eth0" netns="" Sep 6 00:22:25.211167 env[1194]: 2025-09-06 00:22:25.135 [INFO][4719] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="401e31ac767b820917f0284ed67d15c34d31d47745a5163164761fda87b8a37c" Sep 6 00:22:25.211167 env[1194]: 2025-09-06 00:22:25.135 [INFO][4719] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="401e31ac767b820917f0284ed67d15c34d31d47745a5163164761fda87b8a37c" Sep 6 00:22:25.211167 env[1194]: 2025-09-06 00:22:25.194 [INFO][4726] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="401e31ac767b820917f0284ed67d15c34d31d47745a5163164761fda87b8a37c" HandleID="k8s-pod-network.401e31ac767b820917f0284ed67d15c34d31d47745a5163164761fda87b8a37c" Workload="ci--3510.3.8--n--86fdecb492-k8s-coredns--7c65d6cfc9--lj58v-eth0" Sep 6 00:22:25.211167 env[1194]: 2025-09-06 00:22:25.195 [INFO][4726] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Sep 6 00:22:25.211167 env[1194]: 2025-09-06 00:22:25.195 [INFO][4726] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Sep 6 00:22:25.211167 env[1194]: 2025-09-06 00:22:25.204 [WARNING][4726] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="401e31ac767b820917f0284ed67d15c34d31d47745a5163164761fda87b8a37c" HandleID="k8s-pod-network.401e31ac767b820917f0284ed67d15c34d31d47745a5163164761fda87b8a37c" Workload="ci--3510.3.8--n--86fdecb492-k8s-coredns--7c65d6cfc9--lj58v-eth0" Sep 6 00:22:25.211167 env[1194]: 2025-09-06 00:22:25.204 [INFO][4726] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="401e31ac767b820917f0284ed67d15c34d31d47745a5163164761fda87b8a37c" HandleID="k8s-pod-network.401e31ac767b820917f0284ed67d15c34d31d47745a5163164761fda87b8a37c" Workload="ci--3510.3.8--n--86fdecb492-k8s-coredns--7c65d6cfc9--lj58v-eth0" Sep 6 00:22:25.211167 env[1194]: 2025-09-06 00:22:25.206 [INFO][4726] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Sep 6 00:22:25.211167 env[1194]: 2025-09-06 00:22:25.208 [INFO][4719] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="401e31ac767b820917f0284ed67d15c34d31d47745a5163164761fda87b8a37c" Sep 6 00:22:25.212340 env[1194]: time="2025-09-06T00:22:25.212283504Z" level=info msg="TearDown network for sandbox \"401e31ac767b820917f0284ed67d15c34d31d47745a5163164761fda87b8a37c\" successfully" Sep 6 00:22:25.212521 env[1194]: time="2025-09-06T00:22:25.212486339Z" level=info msg="StopPodSandbox for \"401e31ac767b820917f0284ed67d15c34d31d47745a5163164761fda87b8a37c\" returns successfully" Sep 6 00:22:25.213309 env[1194]: time="2025-09-06T00:22:25.213272078Z" level=info msg="RemovePodSandbox for \"401e31ac767b820917f0284ed67d15c34d31d47745a5163164761fda87b8a37c\"" Sep 6 00:22:25.213504 env[1194]: time="2025-09-06T00:22:25.213444481Z" level=info msg="Forcibly stopping sandbox \"401e31ac767b820917f0284ed67d15c34d31d47745a5163164761fda87b8a37c\"" Sep 6 00:22:25.364880 env[1194]: 2025-09-06 00:22:25.296 [WARNING][4742] cni-plugin/k8s.go 604: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="401e31ac767b820917f0284ed67d15c34d31d47745a5163164761fda87b8a37c" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ci--3510.3.8--n--86fdecb492-k8s-coredns--7c65d6cfc9--lj58v-eth0", GenerateName:"coredns-7c65d6cfc9-", Namespace:"kube-system", SelfLink:"", UID:"ce247e9f-faab-4499-88d3-f60c1625b467", ResourceVersion:"1042", Generation:0, CreationTimestamp:time.Date(2025, time.September, 6, 0, 21, 29, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"k8s-app":"kube-dns", "pod-template-hash":"7c65d6cfc9", "projectcalico.org/namespace":"kube-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"coredns"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ci-3510.3.8-n-86fdecb492", ContainerID:"393196948766ef01f37ba9308a09cc2a255405934f79599df32189b752663bab", Pod:"coredns-7c65d6cfc9-lj58v", Endpoint:"eth0", ServiceAccountName:"coredns", IPNetworks:[]string{"192.168.14.135/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.kube-system", "ksa.kube-system.coredns"}, InterfaceName:"cali0e97a6fd6e2", MAC:"", Ports:[]v3.WorkloadEndpointPort{v3.WorkloadEndpointPort{Name:"dns", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"UDP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"dns-tcp", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"metrics", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x23c1, HostPort:0x0, HostIP:""}}, AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Sep 6 00:22:25.364880 env[1194]: 2025-09-06 00:22:25.297 [INFO][4742] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="401e31ac767b820917f0284ed67d15c34d31d47745a5163164761fda87b8a37c" Sep 6 00:22:25.364880 env[1194]: 2025-09-06 00:22:25.297 [INFO][4742] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="401e31ac767b820917f0284ed67d15c34d31d47745a5163164761fda87b8a37c" iface="eth0" netns="" Sep 6 00:22:25.364880 env[1194]: 2025-09-06 00:22:25.297 [INFO][4742] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="401e31ac767b820917f0284ed67d15c34d31d47745a5163164761fda87b8a37c" Sep 6 00:22:25.364880 env[1194]: 2025-09-06 00:22:25.297 [INFO][4742] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="401e31ac767b820917f0284ed67d15c34d31d47745a5163164761fda87b8a37c" Sep 6 00:22:25.364880 env[1194]: 2025-09-06 00:22:25.349 [INFO][4749] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="401e31ac767b820917f0284ed67d15c34d31d47745a5163164761fda87b8a37c" HandleID="k8s-pod-network.401e31ac767b820917f0284ed67d15c34d31d47745a5163164761fda87b8a37c" Workload="ci--3510.3.8--n--86fdecb492-k8s-coredns--7c65d6cfc9--lj58v-eth0" Sep 6 00:22:25.364880 env[1194]: 2025-09-06 00:22:25.349 [INFO][4749] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Sep 6 00:22:25.364880 env[1194]: 2025-09-06 00:22:25.350 [INFO][4749] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Sep 6 00:22:25.364880 env[1194]: 2025-09-06 00:22:25.357 [WARNING][4749] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="401e31ac767b820917f0284ed67d15c34d31d47745a5163164761fda87b8a37c" HandleID="k8s-pod-network.401e31ac767b820917f0284ed67d15c34d31d47745a5163164761fda87b8a37c" Workload="ci--3510.3.8--n--86fdecb492-k8s-coredns--7c65d6cfc9--lj58v-eth0" Sep 6 00:22:25.364880 env[1194]: 2025-09-06 00:22:25.357 [INFO][4749] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="401e31ac767b820917f0284ed67d15c34d31d47745a5163164761fda87b8a37c" HandleID="k8s-pod-network.401e31ac767b820917f0284ed67d15c34d31d47745a5163164761fda87b8a37c" Workload="ci--3510.3.8--n--86fdecb492-k8s-coredns--7c65d6cfc9--lj58v-eth0" Sep 6 00:22:25.364880 env[1194]: 2025-09-06 00:22:25.359 [INFO][4749] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Sep 6 00:22:25.364880 env[1194]: 2025-09-06 00:22:25.362 [INFO][4742] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="401e31ac767b820917f0284ed67d15c34d31d47745a5163164761fda87b8a37c" Sep 6 00:22:25.367635 env[1194]: time="2025-09-06T00:22:25.365997876Z" level=info msg="TearDown network for sandbox \"401e31ac767b820917f0284ed67d15c34d31d47745a5163164761fda87b8a37c\" successfully" Sep 6 00:22:25.372187 env[1194]: time="2025-09-06T00:22:25.372125292Z" level=info msg="RemovePodSandbox \"401e31ac767b820917f0284ed67d15c34d31d47745a5163164761fda87b8a37c\" returns successfully" Sep 6 00:22:25.373423 env[1194]: time="2025-09-06T00:22:25.373379154Z" level=info msg="StopPodSandbox for \"3e6e2ce4bf09e8646818b07652040b83f047bc208a2744a1e9bbf06cf3437233\"" Sep 6 00:22:25.448996 env[1194]: time="2025-09-06T00:22:25.448892273Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/node-driver-registrar:v3.30.3,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 6 00:22:25.451787 env[1194]: time="2025-09-06T00:22:25.451712105Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:b8f31c4fdaed3fa08af64de3d37d65a4c2ea0d9f6f522cb60d2e0cb424f8dd8a,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 6 00:22:25.460489 env[1194]: time="2025-09-06T00:22:25.460410678Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/node-driver-registrar:v3.30.3,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 6 00:22:25.466332 env[1194]: time="2025-09-06T00:22:25.466189695Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/node-driver-registrar@sha256:731ab232ca708102ab332340b1274d5cd656aa896ecc5368ee95850b811df86f,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 6 00:22:25.467848 env[1194]: time="2025-09-06T00:22:25.467793688Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.3\" returns image reference \"sha256:b8f31c4fdaed3fa08af64de3d37d65a4c2ea0d9f6f522cb60d2e0cb424f8dd8a\"" Sep 6 00:22:25.476518 env[1194]: time="2025-09-06T00:22:25.476463745Z" level=info msg="CreateContainer within sandbox \"e1200c94299c783759b0ddc32335b68b1ba29dda4ee901238fb354c9c59fbc88\" for container &ContainerMetadata{Name:csi-node-driver-registrar,Attempt:0,}" Sep 6 00:22:25.500034 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount1159871689.mount: Deactivated successfully. Sep 6 00:22:25.513504 env[1194]: time="2025-09-06T00:22:25.513412785Z" level=info msg="CreateContainer within sandbox \"e1200c94299c783759b0ddc32335b68b1ba29dda4ee901238fb354c9c59fbc88\" for &ContainerMetadata{Name:csi-node-driver-registrar,Attempt:0,} returns container id \"ae37fdf7bfc990a916a10f27f2b0a74feda6843e7f662b2cef261ff762bb7ea4\"" Sep 6 00:22:25.514711 env[1194]: time="2025-09-06T00:22:25.514674422Z" level=info msg="StartContainer for \"ae37fdf7bfc990a916a10f27f2b0a74feda6843e7f662b2cef261ff762bb7ea4\"" Sep 6 00:22:25.570321 systemd[1]: Started cri-containerd-ae37fdf7bfc990a916a10f27f2b0a74feda6843e7f662b2cef261ff762bb7ea4.scope. Sep 6 00:22:25.592408 env[1194]: 2025-09-06 00:22:25.469 [WARNING][4765] cni-plugin/k8s.go 598: WorkloadEndpoint does not exist in the datastore, moving forward with the clean up ContainerID="3e6e2ce4bf09e8646818b07652040b83f047bc208a2744a1e9bbf06cf3437233" WorkloadEndpoint="ci--3510.3.8--n--86fdecb492-k8s-whisker--6dbdbbb558--f4gjr-eth0" Sep 6 00:22:25.592408 env[1194]: 2025-09-06 00:22:25.472 [INFO][4765] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="3e6e2ce4bf09e8646818b07652040b83f047bc208a2744a1e9bbf06cf3437233" Sep 6 00:22:25.592408 env[1194]: 2025-09-06 00:22:25.472 [INFO][4765] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="3e6e2ce4bf09e8646818b07652040b83f047bc208a2744a1e9bbf06cf3437233" iface="eth0" netns="" Sep 6 00:22:25.592408 env[1194]: 2025-09-06 00:22:25.475 [INFO][4765] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="3e6e2ce4bf09e8646818b07652040b83f047bc208a2744a1e9bbf06cf3437233" Sep 6 00:22:25.592408 env[1194]: 2025-09-06 00:22:25.475 [INFO][4765] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="3e6e2ce4bf09e8646818b07652040b83f047bc208a2744a1e9bbf06cf3437233" Sep 6 00:22:25.592408 env[1194]: 2025-09-06 00:22:25.547 [INFO][4772] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="3e6e2ce4bf09e8646818b07652040b83f047bc208a2744a1e9bbf06cf3437233" HandleID="k8s-pod-network.3e6e2ce4bf09e8646818b07652040b83f047bc208a2744a1e9bbf06cf3437233" Workload="ci--3510.3.8--n--86fdecb492-k8s-whisker--6dbdbbb558--f4gjr-eth0" Sep 6 00:22:25.592408 env[1194]: 2025-09-06 00:22:25.548 [INFO][4772] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Sep 6 00:22:25.592408 env[1194]: 2025-09-06 00:22:25.548 [INFO][4772] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Sep 6 00:22:25.592408 env[1194]: 2025-09-06 00:22:25.563 [WARNING][4772] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="3e6e2ce4bf09e8646818b07652040b83f047bc208a2744a1e9bbf06cf3437233" HandleID="k8s-pod-network.3e6e2ce4bf09e8646818b07652040b83f047bc208a2744a1e9bbf06cf3437233" Workload="ci--3510.3.8--n--86fdecb492-k8s-whisker--6dbdbbb558--f4gjr-eth0" Sep 6 00:22:25.592408 env[1194]: 2025-09-06 00:22:25.563 [INFO][4772] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="3e6e2ce4bf09e8646818b07652040b83f047bc208a2744a1e9bbf06cf3437233" HandleID="k8s-pod-network.3e6e2ce4bf09e8646818b07652040b83f047bc208a2744a1e9bbf06cf3437233" Workload="ci--3510.3.8--n--86fdecb492-k8s-whisker--6dbdbbb558--f4gjr-eth0" Sep 6 00:22:25.592408 env[1194]: 2025-09-06 00:22:25.568 [INFO][4772] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Sep 6 00:22:25.592408 env[1194]: 2025-09-06 00:22:25.579 [INFO][4765] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="3e6e2ce4bf09e8646818b07652040b83f047bc208a2744a1e9bbf06cf3437233" Sep 6 00:22:25.595282 env[1194]: time="2025-09-06T00:22:25.592407941Z" level=info msg="TearDown network for sandbox \"3e6e2ce4bf09e8646818b07652040b83f047bc208a2744a1e9bbf06cf3437233\" successfully" Sep 6 00:22:25.595282 env[1194]: time="2025-09-06T00:22:25.592456217Z" level=info msg="StopPodSandbox for \"3e6e2ce4bf09e8646818b07652040b83f047bc208a2744a1e9bbf06cf3437233\" returns successfully" Sep 6 00:22:25.597055 env[1194]: time="2025-09-06T00:22:25.596742857Z" level=info msg="RemovePodSandbox for \"3e6e2ce4bf09e8646818b07652040b83f047bc208a2744a1e9bbf06cf3437233\"" Sep 6 00:22:25.597055 env[1194]: time="2025-09-06T00:22:25.596807273Z" level=info msg="Forcibly stopping sandbox \"3e6e2ce4bf09e8646818b07652040b83f047bc208a2744a1e9bbf06cf3437233\"" Sep 6 00:22:25.613000 audit[4784]: AVC avc: denied { perfmon } for pid=4784 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:25.628842 kernel: audit: type=1400 audit(1757118145.613:1491): avc: denied { perfmon } for pid=4784 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:25.629057 kernel: audit: type=1300 audit(1757118145.613:1491): arch=c000003e syscall=321 success=yes exit=15 a0=0 a1=c0001976b0 a2=3c a3=7f6e5d807b48 items=0 ppid=3995 pid=4784 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:22:25.629200 kernel: audit: type=1327 audit(1757118145.613:1491): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6165333766646637626663393930613931366131306632376632623061 Sep 6 00:22:25.629307 kernel: audit: type=1400 audit(1757118145.622:1492): avc: denied { bpf } for pid=4784 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:25.613000 audit[4784]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=0 a1=c0001976b0 a2=3c a3=7f6e5d807b48 items=0 ppid=3995 pid=4784 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:22:25.613000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6165333766646637626663393930613931366131306632376632623061 Sep 6 00:22:25.622000 audit[4784]: AVC avc: denied { bpf } for pid=4784 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:25.622000 audit[4784]: AVC avc: denied { bpf } for pid=4784 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:25.622000 audit[4784]: AVC avc: denied { bpf } for pid=4784 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:25.622000 audit[4784]: AVC avc: denied { perfmon } for pid=4784 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:25.622000 audit[4784]: AVC avc: denied { perfmon } for pid=4784 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:25.622000 audit[4784]: AVC avc: denied { perfmon } for pid=4784 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:25.622000 audit[4784]: AVC avc: denied { perfmon } for pid=4784 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:25.622000 audit[4784]: AVC avc: denied { perfmon } for pid=4784 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:25.622000 audit[4784]: AVC avc: denied { bpf } for pid=4784 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:25.622000 audit[4784]: AVC avc: denied { bpf } for pid=4784 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:25.622000 audit: BPF prog-id=231 op=LOAD Sep 6 00:22:25.622000 audit[4784]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c0001979d8 a2=78 a3=c00009ca38 items=0 ppid=3995 pid=4784 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:22:25.622000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6165333766646637626663393930613931366131306632376632623061 Sep 6 00:22:25.622000 audit[4784]: AVC avc: denied { bpf } for pid=4784 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:25.622000 audit[4784]: AVC avc: denied { bpf } for pid=4784 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:25.622000 audit[4784]: AVC avc: denied { perfmon } for pid=4784 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:25.622000 audit[4784]: AVC avc: denied { perfmon } for pid=4784 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:25.622000 audit[4784]: AVC avc: denied { perfmon } for pid=4784 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:25.622000 audit[4784]: AVC avc: denied { perfmon } for pid=4784 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:25.622000 audit[4784]: AVC avc: denied { perfmon } for pid=4784 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:25.622000 audit[4784]: AVC avc: denied { bpf } for pid=4784 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:25.622000 audit[4784]: AVC avc: denied { bpf } for pid=4784 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:25.622000 audit: BPF prog-id=232 op=LOAD Sep 6 00:22:25.622000 audit[4784]: SYSCALL arch=c000003e syscall=321 success=yes exit=17 a0=5 a1=c000197770 a2=78 a3=c00009ca88 items=0 ppid=3995 pid=4784 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:22:25.622000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6165333766646637626663393930613931366131306632376632623061 Sep 6 00:22:25.622000 audit: BPF prog-id=232 op=UNLOAD Sep 6 00:22:25.623000 audit: BPF prog-id=231 op=UNLOAD Sep 6 00:22:25.623000 audit[4784]: AVC avc: denied { bpf } for pid=4784 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:25.623000 audit[4784]: AVC avc: denied { bpf } for pid=4784 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:25.623000 audit[4784]: AVC avc: denied { bpf } for pid=4784 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:25.623000 audit[4784]: AVC avc: denied { perfmon } for pid=4784 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:25.623000 audit[4784]: AVC avc: denied { perfmon } for pid=4784 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:25.623000 audit[4784]: AVC avc: denied { perfmon } for pid=4784 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:25.623000 audit[4784]: AVC avc: denied { perfmon } for pid=4784 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:25.623000 audit[4784]: AVC avc: denied { perfmon } for pid=4784 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:25.623000 audit[4784]: AVC avc: denied { bpf } for pid=4784 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:25.623000 audit[4784]: AVC avc: denied { bpf } for pid=4784 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 00:22:25.623000 audit: BPF prog-id=233 op=LOAD Sep 6 00:22:25.623000 audit[4784]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c000197c30 a2=78 a3=c00009cb18 items=0 ppid=3995 pid=4784 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:22:25.623000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6165333766646637626663393930613931366131306632376632623061 Sep 6 00:22:25.705321 env[1194]: time="2025-09-06T00:22:25.704302165Z" level=info msg="StartContainer for \"ae37fdf7bfc990a916a10f27f2b0a74feda6843e7f662b2cef261ff762bb7ea4\" returns successfully" Sep 6 00:22:25.778005 env[1194]: 2025-09-06 00:22:25.706 [WARNING][4810] cni-plugin/k8s.go 598: WorkloadEndpoint does not exist in the datastore, moving forward with the clean up ContainerID="3e6e2ce4bf09e8646818b07652040b83f047bc208a2744a1e9bbf06cf3437233" WorkloadEndpoint="ci--3510.3.8--n--86fdecb492-k8s-whisker--6dbdbbb558--f4gjr-eth0" Sep 6 00:22:25.778005 env[1194]: 2025-09-06 00:22:25.706 [INFO][4810] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="3e6e2ce4bf09e8646818b07652040b83f047bc208a2744a1e9bbf06cf3437233" Sep 6 00:22:25.778005 env[1194]: 2025-09-06 00:22:25.706 [INFO][4810] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="3e6e2ce4bf09e8646818b07652040b83f047bc208a2744a1e9bbf06cf3437233" iface="eth0" netns="" Sep 6 00:22:25.778005 env[1194]: 2025-09-06 00:22:25.706 [INFO][4810] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="3e6e2ce4bf09e8646818b07652040b83f047bc208a2744a1e9bbf06cf3437233" Sep 6 00:22:25.778005 env[1194]: 2025-09-06 00:22:25.706 [INFO][4810] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="3e6e2ce4bf09e8646818b07652040b83f047bc208a2744a1e9bbf06cf3437233" Sep 6 00:22:25.778005 env[1194]: 2025-09-06 00:22:25.750 [INFO][4828] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="3e6e2ce4bf09e8646818b07652040b83f047bc208a2744a1e9bbf06cf3437233" HandleID="k8s-pod-network.3e6e2ce4bf09e8646818b07652040b83f047bc208a2744a1e9bbf06cf3437233" Workload="ci--3510.3.8--n--86fdecb492-k8s-whisker--6dbdbbb558--f4gjr-eth0" Sep 6 00:22:25.778005 env[1194]: 2025-09-06 00:22:25.750 [INFO][4828] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Sep 6 00:22:25.778005 env[1194]: 2025-09-06 00:22:25.751 [INFO][4828] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Sep 6 00:22:25.778005 env[1194]: 2025-09-06 00:22:25.765 [WARNING][4828] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="3e6e2ce4bf09e8646818b07652040b83f047bc208a2744a1e9bbf06cf3437233" HandleID="k8s-pod-network.3e6e2ce4bf09e8646818b07652040b83f047bc208a2744a1e9bbf06cf3437233" Workload="ci--3510.3.8--n--86fdecb492-k8s-whisker--6dbdbbb558--f4gjr-eth0" Sep 6 00:22:25.778005 env[1194]: 2025-09-06 00:22:25.766 [INFO][4828] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="3e6e2ce4bf09e8646818b07652040b83f047bc208a2744a1e9bbf06cf3437233" HandleID="k8s-pod-network.3e6e2ce4bf09e8646818b07652040b83f047bc208a2744a1e9bbf06cf3437233" Workload="ci--3510.3.8--n--86fdecb492-k8s-whisker--6dbdbbb558--f4gjr-eth0" Sep 6 00:22:25.778005 env[1194]: 2025-09-06 00:22:25.769 [INFO][4828] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Sep 6 00:22:25.778005 env[1194]: 2025-09-06 00:22:25.774 [INFO][4810] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="3e6e2ce4bf09e8646818b07652040b83f047bc208a2744a1e9bbf06cf3437233" Sep 6 00:22:25.779273 env[1194]: time="2025-09-06T00:22:25.778063959Z" level=info msg="TearDown network for sandbox \"3e6e2ce4bf09e8646818b07652040b83f047bc208a2744a1e9bbf06cf3437233\" successfully" Sep 6 00:22:25.783414 env[1194]: time="2025-09-06T00:22:25.783345601Z" level=info msg="RemovePodSandbox \"3e6e2ce4bf09e8646818b07652040b83f047bc208a2744a1e9bbf06cf3437233\" returns successfully" Sep 6 00:22:25.784289 env[1194]: time="2025-09-06T00:22:25.784221634Z" level=info msg="StopPodSandbox for \"0e5553fbc453e3577d78a53a280028ebeb909e064b00094e55fe9738a9b2c018\"" Sep 6 00:22:25.880602 env[1194]: 2025-09-06 00:22:25.832 [WARNING][4846] cni-plugin/k8s.go 604: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="0e5553fbc453e3577d78a53a280028ebeb909e064b00094e55fe9738a9b2c018" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ci--3510.3.8--n--86fdecb492-k8s-calico--apiserver--658847fc7d--whbgb-eth0", GenerateName:"calico-apiserver-658847fc7d-", Namespace:"calico-apiserver", SelfLink:"", UID:"0c93136d-a9dc-4b1a-915b-42a235beadf5", ResourceVersion:"1117", Generation:0, CreationTimestamp:time.Date(2025, time.September, 6, 0, 21, 40, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"apiserver":"true", "app.kubernetes.io/name":"calico-apiserver", "k8s-app":"calico-apiserver", "pod-template-hash":"658847fc7d", "projectcalico.org/namespace":"calico-apiserver", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-apiserver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ci-3510.3.8-n-86fdecb492", ContainerID:"d2383e60ca9dd9ec363e8f6d9976870988237a45cf8b6e174d72c739742f338d", Pod:"calico-apiserver-658847fc7d-whbgb", Endpoint:"eth0", ServiceAccountName:"calico-apiserver", IPNetworks:[]string{"192.168.14.131/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-apiserver", "ksa.calico-apiserver.calico-apiserver"}, InterfaceName:"calid1f540657c9", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Sep 6 00:22:25.880602 env[1194]: 2025-09-06 00:22:25.832 [INFO][4846] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="0e5553fbc453e3577d78a53a280028ebeb909e064b00094e55fe9738a9b2c018" Sep 6 00:22:25.880602 env[1194]: 2025-09-06 00:22:25.832 [INFO][4846] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="0e5553fbc453e3577d78a53a280028ebeb909e064b00094e55fe9738a9b2c018" iface="eth0" netns="" Sep 6 00:22:25.880602 env[1194]: 2025-09-06 00:22:25.832 [INFO][4846] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="0e5553fbc453e3577d78a53a280028ebeb909e064b00094e55fe9738a9b2c018" Sep 6 00:22:25.880602 env[1194]: 2025-09-06 00:22:25.833 [INFO][4846] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="0e5553fbc453e3577d78a53a280028ebeb909e064b00094e55fe9738a9b2c018" Sep 6 00:22:25.880602 env[1194]: 2025-09-06 00:22:25.863 [INFO][4853] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="0e5553fbc453e3577d78a53a280028ebeb909e064b00094e55fe9738a9b2c018" HandleID="k8s-pod-network.0e5553fbc453e3577d78a53a280028ebeb909e064b00094e55fe9738a9b2c018" Workload="ci--3510.3.8--n--86fdecb492-k8s-calico--apiserver--658847fc7d--whbgb-eth0" Sep 6 00:22:25.880602 env[1194]: 2025-09-06 00:22:25.863 [INFO][4853] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Sep 6 00:22:25.880602 env[1194]: 2025-09-06 00:22:25.863 [INFO][4853] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Sep 6 00:22:25.880602 env[1194]: 2025-09-06 00:22:25.873 [WARNING][4853] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="0e5553fbc453e3577d78a53a280028ebeb909e064b00094e55fe9738a9b2c018" HandleID="k8s-pod-network.0e5553fbc453e3577d78a53a280028ebeb909e064b00094e55fe9738a9b2c018" Workload="ci--3510.3.8--n--86fdecb492-k8s-calico--apiserver--658847fc7d--whbgb-eth0" Sep 6 00:22:25.880602 env[1194]: 2025-09-06 00:22:25.873 [INFO][4853] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="0e5553fbc453e3577d78a53a280028ebeb909e064b00094e55fe9738a9b2c018" HandleID="k8s-pod-network.0e5553fbc453e3577d78a53a280028ebeb909e064b00094e55fe9738a9b2c018" Workload="ci--3510.3.8--n--86fdecb492-k8s-calico--apiserver--658847fc7d--whbgb-eth0" Sep 6 00:22:25.880602 env[1194]: 2025-09-06 00:22:25.875 [INFO][4853] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Sep 6 00:22:25.880602 env[1194]: 2025-09-06 00:22:25.878 [INFO][4846] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="0e5553fbc453e3577d78a53a280028ebeb909e064b00094e55fe9738a9b2c018" Sep 6 00:22:25.882083 env[1194]: time="2025-09-06T00:22:25.880579940Z" level=info msg="TearDown network for sandbox \"0e5553fbc453e3577d78a53a280028ebeb909e064b00094e55fe9738a9b2c018\" successfully" Sep 6 00:22:25.882083 env[1194]: time="2025-09-06T00:22:25.882033805Z" level=info msg="StopPodSandbox for \"0e5553fbc453e3577d78a53a280028ebeb909e064b00094e55fe9738a9b2c018\" returns successfully" Sep 6 00:22:25.882847 env[1194]: time="2025-09-06T00:22:25.882817433Z" level=info msg="RemovePodSandbox for \"0e5553fbc453e3577d78a53a280028ebeb909e064b00094e55fe9738a9b2c018\"" Sep 6 00:22:25.883012 env[1194]: time="2025-09-06T00:22:25.882854353Z" level=info msg="Forcibly stopping sandbox \"0e5553fbc453e3577d78a53a280028ebeb909e064b00094e55fe9738a9b2c018\"" Sep 6 00:22:26.016520 env[1194]: 2025-09-06 00:22:25.936 [WARNING][4867] cni-plugin/k8s.go 604: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="0e5553fbc453e3577d78a53a280028ebeb909e064b00094e55fe9738a9b2c018" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ci--3510.3.8--n--86fdecb492-k8s-calico--apiserver--658847fc7d--whbgb-eth0", GenerateName:"calico-apiserver-658847fc7d-", Namespace:"calico-apiserver", SelfLink:"", UID:"0c93136d-a9dc-4b1a-915b-42a235beadf5", ResourceVersion:"1117", Generation:0, CreationTimestamp:time.Date(2025, time.September, 6, 0, 21, 40, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"apiserver":"true", "app.kubernetes.io/name":"calico-apiserver", "k8s-app":"calico-apiserver", "pod-template-hash":"658847fc7d", "projectcalico.org/namespace":"calico-apiserver", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-apiserver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ci-3510.3.8-n-86fdecb492", ContainerID:"d2383e60ca9dd9ec363e8f6d9976870988237a45cf8b6e174d72c739742f338d", Pod:"calico-apiserver-658847fc7d-whbgb", Endpoint:"eth0", ServiceAccountName:"calico-apiserver", IPNetworks:[]string{"192.168.14.131/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-apiserver", "ksa.calico-apiserver.calico-apiserver"}, InterfaceName:"calid1f540657c9", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Sep 6 00:22:26.016520 env[1194]: 2025-09-06 00:22:25.936 [INFO][4867] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="0e5553fbc453e3577d78a53a280028ebeb909e064b00094e55fe9738a9b2c018" Sep 6 00:22:26.016520 env[1194]: 2025-09-06 00:22:25.936 [INFO][4867] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="0e5553fbc453e3577d78a53a280028ebeb909e064b00094e55fe9738a9b2c018" iface="eth0" netns="" Sep 6 00:22:26.016520 env[1194]: 2025-09-06 00:22:25.936 [INFO][4867] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="0e5553fbc453e3577d78a53a280028ebeb909e064b00094e55fe9738a9b2c018" Sep 6 00:22:26.016520 env[1194]: 2025-09-06 00:22:25.936 [INFO][4867] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="0e5553fbc453e3577d78a53a280028ebeb909e064b00094e55fe9738a9b2c018" Sep 6 00:22:26.016520 env[1194]: 2025-09-06 00:22:26.000 [INFO][4874] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="0e5553fbc453e3577d78a53a280028ebeb909e064b00094e55fe9738a9b2c018" HandleID="k8s-pod-network.0e5553fbc453e3577d78a53a280028ebeb909e064b00094e55fe9738a9b2c018" Workload="ci--3510.3.8--n--86fdecb492-k8s-calico--apiserver--658847fc7d--whbgb-eth0" Sep 6 00:22:26.016520 env[1194]: 2025-09-06 00:22:26.000 [INFO][4874] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Sep 6 00:22:26.016520 env[1194]: 2025-09-06 00:22:26.000 [INFO][4874] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Sep 6 00:22:26.016520 env[1194]: 2025-09-06 00:22:26.008 [WARNING][4874] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="0e5553fbc453e3577d78a53a280028ebeb909e064b00094e55fe9738a9b2c018" HandleID="k8s-pod-network.0e5553fbc453e3577d78a53a280028ebeb909e064b00094e55fe9738a9b2c018" Workload="ci--3510.3.8--n--86fdecb492-k8s-calico--apiserver--658847fc7d--whbgb-eth0" Sep 6 00:22:26.016520 env[1194]: 2025-09-06 00:22:26.008 [INFO][4874] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="0e5553fbc453e3577d78a53a280028ebeb909e064b00094e55fe9738a9b2c018" HandleID="k8s-pod-network.0e5553fbc453e3577d78a53a280028ebeb909e064b00094e55fe9738a9b2c018" Workload="ci--3510.3.8--n--86fdecb492-k8s-calico--apiserver--658847fc7d--whbgb-eth0" Sep 6 00:22:26.016520 env[1194]: 2025-09-06 00:22:26.010 [INFO][4874] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Sep 6 00:22:26.016520 env[1194]: 2025-09-06 00:22:26.013 [INFO][4867] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="0e5553fbc453e3577d78a53a280028ebeb909e064b00094e55fe9738a9b2c018" Sep 6 00:22:26.017506 env[1194]: time="2025-09-06T00:22:26.016573961Z" level=info msg="TearDown network for sandbox \"0e5553fbc453e3577d78a53a280028ebeb909e064b00094e55fe9738a9b2c018\" successfully" Sep 6 00:22:26.020438 env[1194]: time="2025-09-06T00:22:26.020388011Z" level=info msg="RemovePodSandbox \"0e5553fbc453e3577d78a53a280028ebeb909e064b00094e55fe9738a9b2c018\" returns successfully" Sep 6 00:22:26.021143 env[1194]: time="2025-09-06T00:22:26.021115676Z" level=info msg="StopPodSandbox for \"70d37490adbefe97ec1e7961936bf69023ffff9f3849ce09562104a029affc8c\"" Sep 6 00:22:26.134264 env[1194]: 2025-09-06 00:22:26.064 [WARNING][4888] cni-plugin/k8s.go 604: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="70d37490adbefe97ec1e7961936bf69023ffff9f3849ce09562104a029affc8c" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ci--3510.3.8--n--86fdecb492-k8s-coredns--7c65d6cfc9--m2nlc-eth0", GenerateName:"coredns-7c65d6cfc9-", Namespace:"kube-system", SelfLink:"", UID:"919279a3-0e76-4d7e-98d0-24775a445624", ResourceVersion:"999", Generation:0, CreationTimestamp:time.Date(2025, time.September, 6, 0, 21, 29, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"k8s-app":"kube-dns", "pod-template-hash":"7c65d6cfc9", "projectcalico.org/namespace":"kube-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"coredns"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ci-3510.3.8-n-86fdecb492", ContainerID:"417fc124208699eef4f832eccd30eabbea4a0ded63dfaeeebe4da4780d9d6ddf", Pod:"coredns-7c65d6cfc9-m2nlc", Endpoint:"eth0", ServiceAccountName:"coredns", IPNetworks:[]string{"192.168.14.130/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.kube-system", "ksa.kube-system.coredns"}, InterfaceName:"calib007679f81a", MAC:"", Ports:[]v3.WorkloadEndpointPort{v3.WorkloadEndpointPort{Name:"dns", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"UDP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"dns-tcp", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"metrics", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x23c1, HostPort:0x0, HostIP:""}}, AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Sep 6 00:22:26.134264 env[1194]: 2025-09-06 00:22:26.067 [INFO][4888] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="70d37490adbefe97ec1e7961936bf69023ffff9f3849ce09562104a029affc8c" Sep 6 00:22:26.134264 env[1194]: 2025-09-06 00:22:26.067 [INFO][4888] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="70d37490adbefe97ec1e7961936bf69023ffff9f3849ce09562104a029affc8c" iface="eth0" netns="" Sep 6 00:22:26.134264 env[1194]: 2025-09-06 00:22:26.067 [INFO][4888] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="70d37490adbefe97ec1e7961936bf69023ffff9f3849ce09562104a029affc8c" Sep 6 00:22:26.134264 env[1194]: 2025-09-06 00:22:26.067 [INFO][4888] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="70d37490adbefe97ec1e7961936bf69023ffff9f3849ce09562104a029affc8c" Sep 6 00:22:26.134264 env[1194]: 2025-09-06 00:22:26.114 [INFO][4895] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="70d37490adbefe97ec1e7961936bf69023ffff9f3849ce09562104a029affc8c" HandleID="k8s-pod-network.70d37490adbefe97ec1e7961936bf69023ffff9f3849ce09562104a029affc8c" Workload="ci--3510.3.8--n--86fdecb492-k8s-coredns--7c65d6cfc9--m2nlc-eth0" Sep 6 00:22:26.134264 env[1194]: 2025-09-06 00:22:26.116 [INFO][4895] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Sep 6 00:22:26.134264 env[1194]: 2025-09-06 00:22:26.117 [INFO][4895] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Sep 6 00:22:26.134264 env[1194]: 2025-09-06 00:22:26.126 [WARNING][4895] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="70d37490adbefe97ec1e7961936bf69023ffff9f3849ce09562104a029affc8c" HandleID="k8s-pod-network.70d37490adbefe97ec1e7961936bf69023ffff9f3849ce09562104a029affc8c" Workload="ci--3510.3.8--n--86fdecb492-k8s-coredns--7c65d6cfc9--m2nlc-eth0" Sep 6 00:22:26.134264 env[1194]: 2025-09-06 00:22:26.126 [INFO][4895] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="70d37490adbefe97ec1e7961936bf69023ffff9f3849ce09562104a029affc8c" HandleID="k8s-pod-network.70d37490adbefe97ec1e7961936bf69023ffff9f3849ce09562104a029affc8c" Workload="ci--3510.3.8--n--86fdecb492-k8s-coredns--7c65d6cfc9--m2nlc-eth0" Sep 6 00:22:26.134264 env[1194]: 2025-09-06 00:22:26.128 [INFO][4895] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Sep 6 00:22:26.134264 env[1194]: 2025-09-06 00:22:26.131 [INFO][4888] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="70d37490adbefe97ec1e7961936bf69023ffff9f3849ce09562104a029affc8c" Sep 6 00:22:26.135756 env[1194]: time="2025-09-06T00:22:26.134210873Z" level=info msg="TearDown network for sandbox \"70d37490adbefe97ec1e7961936bf69023ffff9f3849ce09562104a029affc8c\" successfully" Sep 6 00:22:26.135756 env[1194]: time="2025-09-06T00:22:26.135612116Z" level=info msg="StopPodSandbox for \"70d37490adbefe97ec1e7961936bf69023ffff9f3849ce09562104a029affc8c\" returns successfully" Sep 6 00:22:26.136529 env[1194]: time="2025-09-06T00:22:26.136471974Z" level=info msg="RemovePodSandbox for \"70d37490adbefe97ec1e7961936bf69023ffff9f3849ce09562104a029affc8c\"" Sep 6 00:22:26.136845 env[1194]: time="2025-09-06T00:22:26.136531733Z" level=info msg="Forcibly stopping sandbox \"70d37490adbefe97ec1e7961936bf69023ffff9f3849ce09562104a029affc8c\"" Sep 6 00:22:26.237206 env[1194]: 2025-09-06 00:22:26.192 [WARNING][4910] cni-plugin/k8s.go 604: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="70d37490adbefe97ec1e7961936bf69023ffff9f3849ce09562104a029affc8c" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ci--3510.3.8--n--86fdecb492-k8s-coredns--7c65d6cfc9--m2nlc-eth0", GenerateName:"coredns-7c65d6cfc9-", Namespace:"kube-system", SelfLink:"", UID:"919279a3-0e76-4d7e-98d0-24775a445624", ResourceVersion:"999", Generation:0, CreationTimestamp:time.Date(2025, time.September, 6, 0, 21, 29, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"k8s-app":"kube-dns", "pod-template-hash":"7c65d6cfc9", "projectcalico.org/namespace":"kube-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"coredns"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ci-3510.3.8-n-86fdecb492", ContainerID:"417fc124208699eef4f832eccd30eabbea4a0ded63dfaeeebe4da4780d9d6ddf", Pod:"coredns-7c65d6cfc9-m2nlc", Endpoint:"eth0", ServiceAccountName:"coredns", IPNetworks:[]string{"192.168.14.130/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.kube-system", "ksa.kube-system.coredns"}, InterfaceName:"calib007679f81a", MAC:"", Ports:[]v3.WorkloadEndpointPort{v3.WorkloadEndpointPort{Name:"dns", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"UDP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"dns-tcp", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"metrics", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x23c1, HostPort:0x0, HostIP:""}}, AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Sep 6 00:22:26.237206 env[1194]: 2025-09-06 00:22:26.192 [INFO][4910] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="70d37490adbefe97ec1e7961936bf69023ffff9f3849ce09562104a029affc8c" Sep 6 00:22:26.237206 env[1194]: 2025-09-06 00:22:26.193 [INFO][4910] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="70d37490adbefe97ec1e7961936bf69023ffff9f3849ce09562104a029affc8c" iface="eth0" netns="" Sep 6 00:22:26.237206 env[1194]: 2025-09-06 00:22:26.193 [INFO][4910] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="70d37490adbefe97ec1e7961936bf69023ffff9f3849ce09562104a029affc8c" Sep 6 00:22:26.237206 env[1194]: 2025-09-06 00:22:26.193 [INFO][4910] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="70d37490adbefe97ec1e7961936bf69023ffff9f3849ce09562104a029affc8c" Sep 6 00:22:26.237206 env[1194]: 2025-09-06 00:22:26.220 [INFO][4917] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="70d37490adbefe97ec1e7961936bf69023ffff9f3849ce09562104a029affc8c" HandleID="k8s-pod-network.70d37490adbefe97ec1e7961936bf69023ffff9f3849ce09562104a029affc8c" Workload="ci--3510.3.8--n--86fdecb492-k8s-coredns--7c65d6cfc9--m2nlc-eth0" Sep 6 00:22:26.237206 env[1194]: 2025-09-06 00:22:26.220 [INFO][4917] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Sep 6 00:22:26.237206 env[1194]: 2025-09-06 00:22:26.220 [INFO][4917] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Sep 6 00:22:26.237206 env[1194]: 2025-09-06 00:22:26.229 [WARNING][4917] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="70d37490adbefe97ec1e7961936bf69023ffff9f3849ce09562104a029affc8c" HandleID="k8s-pod-network.70d37490adbefe97ec1e7961936bf69023ffff9f3849ce09562104a029affc8c" Workload="ci--3510.3.8--n--86fdecb492-k8s-coredns--7c65d6cfc9--m2nlc-eth0" Sep 6 00:22:26.237206 env[1194]: 2025-09-06 00:22:26.229 [INFO][4917] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="70d37490adbefe97ec1e7961936bf69023ffff9f3849ce09562104a029affc8c" HandleID="k8s-pod-network.70d37490adbefe97ec1e7961936bf69023ffff9f3849ce09562104a029affc8c" Workload="ci--3510.3.8--n--86fdecb492-k8s-coredns--7c65d6cfc9--m2nlc-eth0" Sep 6 00:22:26.237206 env[1194]: 2025-09-06 00:22:26.231 [INFO][4917] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Sep 6 00:22:26.237206 env[1194]: 2025-09-06 00:22:26.234 [INFO][4910] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="70d37490adbefe97ec1e7961936bf69023ffff9f3849ce09562104a029affc8c" Sep 6 00:22:26.238325 env[1194]: time="2025-09-06T00:22:26.237874385Z" level=info msg="TearDown network for sandbox \"70d37490adbefe97ec1e7961936bf69023ffff9f3849ce09562104a029affc8c\" successfully" Sep 6 00:22:26.241530 env[1194]: time="2025-09-06T00:22:26.241493881Z" level=info msg="RemovePodSandbox \"70d37490adbefe97ec1e7961936bf69023ffff9f3849ce09562104a029affc8c\" returns successfully" Sep 6 00:22:26.242263 env[1194]: time="2025-09-06T00:22:26.242224286Z" level=info msg="StopPodSandbox for \"17c5099fb97f72d58f1833acd13fa27da6caf86fbe52428c8b16129b064f21d7\"" Sep 6 00:22:26.317019 kubelet[1933]: I0906 00:22:26.316922 1933 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="calico-system/csi-node-driver-6qmdc" podStartSLOduration=25.995860104 podStartE2EDuration="42.312052616s" podCreationTimestamp="2025-09-06 00:21:44 +0000 UTC" firstStartedPulling="2025-09-06 00:22:09.152801904 +0000 UTC m=+46.012791850" lastFinishedPulling="2025-09-06 00:22:25.468994416 +0000 UTC m=+62.328984362" observedRunningTime="2025-09-06 00:22:26.311647735 +0000 UTC m=+63.171637702" watchObservedRunningTime="2025-09-06 00:22:26.312052616 +0000 UTC m=+63.172042577" Sep 6 00:22:26.376036 env[1194]: 2025-09-06 00:22:26.306 [WARNING][4932] cni-plugin/k8s.go 604: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="17c5099fb97f72d58f1833acd13fa27da6caf86fbe52428c8b16129b064f21d7" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ci--3510.3.8--n--86fdecb492-k8s-calico--apiserver--658847fc7d--nxs25-eth0", GenerateName:"calico-apiserver-658847fc7d-", Namespace:"calico-apiserver", SelfLink:"", UID:"f08dcdfb-b2f6-4cf2-856e-527bb3034be9", ResourceVersion:"1072", Generation:0, CreationTimestamp:time.Date(2025, time.September, 6, 0, 21, 40, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"apiserver":"true", "app.kubernetes.io/name":"calico-apiserver", "k8s-app":"calico-apiserver", "pod-template-hash":"658847fc7d", "projectcalico.org/namespace":"calico-apiserver", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-apiserver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ci-3510.3.8-n-86fdecb492", ContainerID:"9f8252bcbc69511f2c6351ef3ae914d962de19a29730652ef3abab0754e769a2", Pod:"calico-apiserver-658847fc7d-nxs25", Endpoint:"eth0", ServiceAccountName:"calico-apiserver", IPNetworks:[]string{"192.168.14.132/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-apiserver", "ksa.calico-apiserver.calico-apiserver"}, InterfaceName:"cali9be8c42a104", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Sep 6 00:22:26.376036 env[1194]: 2025-09-06 00:22:26.307 [INFO][4932] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="17c5099fb97f72d58f1833acd13fa27da6caf86fbe52428c8b16129b064f21d7" Sep 6 00:22:26.376036 env[1194]: 2025-09-06 00:22:26.307 [INFO][4932] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="17c5099fb97f72d58f1833acd13fa27da6caf86fbe52428c8b16129b064f21d7" iface="eth0" netns="" Sep 6 00:22:26.376036 env[1194]: 2025-09-06 00:22:26.307 [INFO][4932] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="17c5099fb97f72d58f1833acd13fa27da6caf86fbe52428c8b16129b064f21d7" Sep 6 00:22:26.376036 env[1194]: 2025-09-06 00:22:26.307 [INFO][4932] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="17c5099fb97f72d58f1833acd13fa27da6caf86fbe52428c8b16129b064f21d7" Sep 6 00:22:26.376036 env[1194]: 2025-09-06 00:22:26.358 [INFO][4939] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="17c5099fb97f72d58f1833acd13fa27da6caf86fbe52428c8b16129b064f21d7" HandleID="k8s-pod-network.17c5099fb97f72d58f1833acd13fa27da6caf86fbe52428c8b16129b064f21d7" Workload="ci--3510.3.8--n--86fdecb492-k8s-calico--apiserver--658847fc7d--nxs25-eth0" Sep 6 00:22:26.376036 env[1194]: 2025-09-06 00:22:26.358 [INFO][4939] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Sep 6 00:22:26.376036 env[1194]: 2025-09-06 00:22:26.358 [INFO][4939] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Sep 6 00:22:26.376036 env[1194]: 2025-09-06 00:22:26.367 [WARNING][4939] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="17c5099fb97f72d58f1833acd13fa27da6caf86fbe52428c8b16129b064f21d7" HandleID="k8s-pod-network.17c5099fb97f72d58f1833acd13fa27da6caf86fbe52428c8b16129b064f21d7" Workload="ci--3510.3.8--n--86fdecb492-k8s-calico--apiserver--658847fc7d--nxs25-eth0" Sep 6 00:22:26.376036 env[1194]: 2025-09-06 00:22:26.367 [INFO][4939] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="17c5099fb97f72d58f1833acd13fa27da6caf86fbe52428c8b16129b064f21d7" HandleID="k8s-pod-network.17c5099fb97f72d58f1833acd13fa27da6caf86fbe52428c8b16129b064f21d7" Workload="ci--3510.3.8--n--86fdecb492-k8s-calico--apiserver--658847fc7d--nxs25-eth0" Sep 6 00:22:26.376036 env[1194]: 2025-09-06 00:22:26.369 [INFO][4939] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Sep 6 00:22:26.376036 env[1194]: 2025-09-06 00:22:26.372 [INFO][4932] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="17c5099fb97f72d58f1833acd13fa27da6caf86fbe52428c8b16129b064f21d7" Sep 6 00:22:26.376811 env[1194]: time="2025-09-06T00:22:26.376087074Z" level=info msg="TearDown network for sandbox \"17c5099fb97f72d58f1833acd13fa27da6caf86fbe52428c8b16129b064f21d7\" successfully" Sep 6 00:22:26.376811 env[1194]: time="2025-09-06T00:22:26.376131332Z" level=info msg="StopPodSandbox for \"17c5099fb97f72d58f1833acd13fa27da6caf86fbe52428c8b16129b064f21d7\" returns successfully" Sep 6 00:22:26.376959 env[1194]: time="2025-09-06T00:22:26.376907603Z" level=info msg="RemovePodSandbox for \"17c5099fb97f72d58f1833acd13fa27da6caf86fbe52428c8b16129b064f21d7\"" Sep 6 00:22:26.377057 env[1194]: time="2025-09-06T00:22:26.376955115Z" level=info msg="Forcibly stopping sandbox \"17c5099fb97f72d58f1833acd13fa27da6caf86fbe52428c8b16129b064f21d7\"" Sep 6 00:22:26.442000 audit[1812]: AVC avc: denied { watch } for pid=1812 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=526379 scontext=system_u:system_r:svirt_lxc_net_t:s0:c665,c790 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Sep 6 00:22:26.442000 audit[1812]: AVC avc: denied { watch } for pid=1812 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=526379 scontext=system_u:system_r:svirt_lxc_net_t:s0:c665,c790 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Sep 6 00:22:26.442000 audit[1812]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c0020d1b60 a2=fc6 a3=0 items=0 ppid=1655 pid=1812 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c665,c790 key=(null) Sep 6 00:22:26.442000 audit[1812]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=9 a1=c001968f80 a2=fc6 a3=0 items=0 ppid=1655 pid=1812 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c665,c790 key=(null) Sep 6 00:22:26.442000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Sep 6 00:22:26.442000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Sep 6 00:22:26.442000 audit[1812]: AVC avc: denied { watch } for pid=1812 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=526379 scontext=system_u:system_r:svirt_lxc_net_t:s0:c665,c790 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Sep 6 00:22:26.442000 audit[1812]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=9 a1=c0020d1ba0 a2=fc6 a3=0 items=0 ppid=1655 pid=1812 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c665,c790 key=(null) Sep 6 00:22:26.442000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Sep 6 00:22:26.453000 audit[1812]: AVC avc: denied { watch } for pid=1812 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=526379 scontext=system_u:system_r:svirt_lxc_net_t:s0:c665,c790 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Sep 6 00:22:26.453000 audit[1812]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=9 a1=c001ec0120 a2=fc6 a3=0 items=0 ppid=1655 pid=1812 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c665,c790 key=(null) Sep 6 00:22:26.453000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Sep 6 00:22:26.496644 env[1194]: 2025-09-06 00:22:26.435 [WARNING][4954] cni-plugin/k8s.go 604: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="17c5099fb97f72d58f1833acd13fa27da6caf86fbe52428c8b16129b064f21d7" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ci--3510.3.8--n--86fdecb492-k8s-calico--apiserver--658847fc7d--nxs25-eth0", GenerateName:"calico-apiserver-658847fc7d-", Namespace:"calico-apiserver", SelfLink:"", UID:"f08dcdfb-b2f6-4cf2-856e-527bb3034be9", ResourceVersion:"1072", Generation:0, CreationTimestamp:time.Date(2025, time.September, 6, 0, 21, 40, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"apiserver":"true", "app.kubernetes.io/name":"calico-apiserver", "k8s-app":"calico-apiserver", "pod-template-hash":"658847fc7d", "projectcalico.org/namespace":"calico-apiserver", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-apiserver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ci-3510.3.8-n-86fdecb492", ContainerID:"9f8252bcbc69511f2c6351ef3ae914d962de19a29730652ef3abab0754e769a2", Pod:"calico-apiserver-658847fc7d-nxs25", Endpoint:"eth0", ServiceAccountName:"calico-apiserver", IPNetworks:[]string{"192.168.14.132/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-apiserver", "ksa.calico-apiserver.calico-apiserver"}, InterfaceName:"cali9be8c42a104", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Sep 6 00:22:26.496644 env[1194]: 2025-09-06 00:22:26.436 [INFO][4954] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="17c5099fb97f72d58f1833acd13fa27da6caf86fbe52428c8b16129b064f21d7" Sep 6 00:22:26.496644 env[1194]: 2025-09-06 00:22:26.436 [INFO][4954] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="17c5099fb97f72d58f1833acd13fa27da6caf86fbe52428c8b16129b064f21d7" iface="eth0" netns="" Sep 6 00:22:26.496644 env[1194]: 2025-09-06 00:22:26.437 [INFO][4954] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="17c5099fb97f72d58f1833acd13fa27da6caf86fbe52428c8b16129b064f21d7" Sep 6 00:22:26.496644 env[1194]: 2025-09-06 00:22:26.437 [INFO][4954] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="17c5099fb97f72d58f1833acd13fa27da6caf86fbe52428c8b16129b064f21d7" Sep 6 00:22:26.496644 env[1194]: 2025-09-06 00:22:26.477 [INFO][4961] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="17c5099fb97f72d58f1833acd13fa27da6caf86fbe52428c8b16129b064f21d7" HandleID="k8s-pod-network.17c5099fb97f72d58f1833acd13fa27da6caf86fbe52428c8b16129b064f21d7" Workload="ci--3510.3.8--n--86fdecb492-k8s-calico--apiserver--658847fc7d--nxs25-eth0" Sep 6 00:22:26.496644 env[1194]: 2025-09-06 00:22:26.477 [INFO][4961] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Sep 6 00:22:26.496644 env[1194]: 2025-09-06 00:22:26.477 [INFO][4961] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Sep 6 00:22:26.496644 env[1194]: 2025-09-06 00:22:26.488 [WARNING][4961] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="17c5099fb97f72d58f1833acd13fa27da6caf86fbe52428c8b16129b064f21d7" HandleID="k8s-pod-network.17c5099fb97f72d58f1833acd13fa27da6caf86fbe52428c8b16129b064f21d7" Workload="ci--3510.3.8--n--86fdecb492-k8s-calico--apiserver--658847fc7d--nxs25-eth0" Sep 6 00:22:26.496644 env[1194]: 2025-09-06 00:22:26.488 [INFO][4961] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="17c5099fb97f72d58f1833acd13fa27da6caf86fbe52428c8b16129b064f21d7" HandleID="k8s-pod-network.17c5099fb97f72d58f1833acd13fa27da6caf86fbe52428c8b16129b064f21d7" Workload="ci--3510.3.8--n--86fdecb492-k8s-calico--apiserver--658847fc7d--nxs25-eth0" Sep 6 00:22:26.496644 env[1194]: 2025-09-06 00:22:26.491 [INFO][4961] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Sep 6 00:22:26.496644 env[1194]: 2025-09-06 00:22:26.493 [INFO][4954] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="17c5099fb97f72d58f1833acd13fa27da6caf86fbe52428c8b16129b064f21d7" Sep 6 00:22:26.497295 env[1194]: time="2025-09-06T00:22:26.496690581Z" level=info msg="TearDown network for sandbox \"17c5099fb97f72d58f1833acd13fa27da6caf86fbe52428c8b16129b064f21d7\" successfully" Sep 6 00:22:26.499512 env[1194]: time="2025-09-06T00:22:26.499470193Z" level=info msg="RemovePodSandbox \"17c5099fb97f72d58f1833acd13fa27da6caf86fbe52428c8b16129b064f21d7\" returns successfully" Sep 6 00:22:26.500308 env[1194]: time="2025-09-06T00:22:26.500278101Z" level=info msg="StopPodSandbox for \"b6c0d676905e7769a979b641b973fbab57a0ede6e9580ef71a25fd94e8b9bcca\"" Sep 6 00:22:26.632317 env[1194]: 2025-09-06 00:22:26.577 [WARNING][4975] cni-plugin/k8s.go 604: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="b6c0d676905e7769a979b641b973fbab57a0ede6e9580ef71a25fd94e8b9bcca" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ci--3510.3.8--n--86fdecb492-k8s-calico--kube--controllers--dcdb654dd--lnm9v-eth0", GenerateName:"calico-kube-controllers-dcdb654dd-", Namespace:"calico-system", SelfLink:"", UID:"a508ebae-2d95-49ee-ae16-79dab0a4ff50", ResourceVersion:"1139", Generation:0, CreationTimestamp:time.Date(2025, time.September, 6, 0, 21, 44, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"calico-kube-controllers", "k8s-app":"calico-kube-controllers", "pod-template-hash":"dcdb654dd", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-kube-controllers"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ci-3510.3.8-n-86fdecb492", ContainerID:"ef1fa9356b12fab2bb6aef5a37c459181d8a6a1f7b09728577d9035a9fdd06d8", Pod:"calico-kube-controllers-dcdb654dd-lnm9v", Endpoint:"eth0", ServiceAccountName:"calico-kube-controllers", IPNetworks:[]string{"192.168.14.133/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.calico-kube-controllers"}, InterfaceName:"calide79ca7d3be", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Sep 6 00:22:26.632317 env[1194]: 2025-09-06 00:22:26.578 [INFO][4975] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="b6c0d676905e7769a979b641b973fbab57a0ede6e9580ef71a25fd94e8b9bcca" Sep 6 00:22:26.632317 env[1194]: 2025-09-06 00:22:26.578 [INFO][4975] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="b6c0d676905e7769a979b641b973fbab57a0ede6e9580ef71a25fd94e8b9bcca" iface="eth0" netns="" Sep 6 00:22:26.632317 env[1194]: 2025-09-06 00:22:26.578 [INFO][4975] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="b6c0d676905e7769a979b641b973fbab57a0ede6e9580ef71a25fd94e8b9bcca" Sep 6 00:22:26.632317 env[1194]: 2025-09-06 00:22:26.578 [INFO][4975] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="b6c0d676905e7769a979b641b973fbab57a0ede6e9580ef71a25fd94e8b9bcca" Sep 6 00:22:26.632317 env[1194]: 2025-09-06 00:22:26.612 [INFO][4982] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="b6c0d676905e7769a979b641b973fbab57a0ede6e9580ef71a25fd94e8b9bcca" HandleID="k8s-pod-network.b6c0d676905e7769a979b641b973fbab57a0ede6e9580ef71a25fd94e8b9bcca" Workload="ci--3510.3.8--n--86fdecb492-k8s-calico--kube--controllers--dcdb654dd--lnm9v-eth0" Sep 6 00:22:26.632317 env[1194]: 2025-09-06 00:22:26.612 [INFO][4982] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Sep 6 00:22:26.632317 env[1194]: 2025-09-06 00:22:26.612 [INFO][4982] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Sep 6 00:22:26.632317 env[1194]: 2025-09-06 00:22:26.625 [WARNING][4982] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="b6c0d676905e7769a979b641b973fbab57a0ede6e9580ef71a25fd94e8b9bcca" HandleID="k8s-pod-network.b6c0d676905e7769a979b641b973fbab57a0ede6e9580ef71a25fd94e8b9bcca" Workload="ci--3510.3.8--n--86fdecb492-k8s-calico--kube--controllers--dcdb654dd--lnm9v-eth0" Sep 6 00:22:26.632317 env[1194]: 2025-09-06 00:22:26.625 [INFO][4982] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="b6c0d676905e7769a979b641b973fbab57a0ede6e9580ef71a25fd94e8b9bcca" HandleID="k8s-pod-network.b6c0d676905e7769a979b641b973fbab57a0ede6e9580ef71a25fd94e8b9bcca" Workload="ci--3510.3.8--n--86fdecb492-k8s-calico--kube--controllers--dcdb654dd--lnm9v-eth0" Sep 6 00:22:26.632317 env[1194]: 2025-09-06 00:22:26.627 [INFO][4982] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Sep 6 00:22:26.632317 env[1194]: 2025-09-06 00:22:26.629 [INFO][4975] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="b6c0d676905e7769a979b641b973fbab57a0ede6e9580ef71a25fd94e8b9bcca" Sep 6 00:22:26.633517 env[1194]: time="2025-09-06T00:22:26.633288981Z" level=info msg="TearDown network for sandbox \"b6c0d676905e7769a979b641b973fbab57a0ede6e9580ef71a25fd94e8b9bcca\" successfully" Sep 6 00:22:26.633517 env[1194]: time="2025-09-06T00:22:26.633334643Z" level=info msg="StopPodSandbox for \"b6c0d676905e7769a979b641b973fbab57a0ede6e9580ef71a25fd94e8b9bcca\" returns successfully" Sep 6 00:22:26.634366 env[1194]: time="2025-09-06T00:22:26.634323636Z" level=info msg="RemovePodSandbox for \"b6c0d676905e7769a979b641b973fbab57a0ede6e9580ef71a25fd94e8b9bcca\"" Sep 6 00:22:26.634434 env[1194]: time="2025-09-06T00:22:26.634363441Z" level=info msg="Forcibly stopping sandbox \"b6c0d676905e7769a979b641b973fbab57a0ede6e9580ef71a25fd94e8b9bcca\"" Sep 6 00:22:26.727189 kubelet[1933]: I0906 00:22:26.726924 1933 csi_plugin.go:100] kubernetes.io/csi: Trying to validate a new CSI Driver with name: csi.tigera.io endpoint: /var/lib/kubelet/plugins/csi.tigera.io/csi.sock versions: 1.0.0 Sep 6 00:22:26.733767 kubelet[1933]: I0906 00:22:26.733218 1933 csi_plugin.go:113] kubernetes.io/csi: Register new plugin with name: csi.tigera.io at endpoint: /var/lib/kubelet/plugins/csi.tigera.io/csi.sock Sep 6 00:22:26.765935 env[1194]: 2025-09-06 00:22:26.681 [WARNING][4996] cni-plugin/k8s.go 604: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="b6c0d676905e7769a979b641b973fbab57a0ede6e9580ef71a25fd94e8b9bcca" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ci--3510.3.8--n--86fdecb492-k8s-calico--kube--controllers--dcdb654dd--lnm9v-eth0", GenerateName:"calico-kube-controllers-dcdb654dd-", Namespace:"calico-system", SelfLink:"", UID:"a508ebae-2d95-49ee-ae16-79dab0a4ff50", ResourceVersion:"1139", Generation:0, CreationTimestamp:time.Date(2025, time.September, 6, 0, 21, 44, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"calico-kube-controllers", "k8s-app":"calico-kube-controllers", "pod-template-hash":"dcdb654dd", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-kube-controllers"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ci-3510.3.8-n-86fdecb492", ContainerID:"ef1fa9356b12fab2bb6aef5a37c459181d8a6a1f7b09728577d9035a9fdd06d8", Pod:"calico-kube-controllers-dcdb654dd-lnm9v", Endpoint:"eth0", ServiceAccountName:"calico-kube-controllers", IPNetworks:[]string{"192.168.14.133/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.calico-kube-controllers"}, InterfaceName:"calide79ca7d3be", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Sep 6 00:22:26.765935 env[1194]: 2025-09-06 00:22:26.682 [INFO][4996] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="b6c0d676905e7769a979b641b973fbab57a0ede6e9580ef71a25fd94e8b9bcca" Sep 6 00:22:26.765935 env[1194]: 2025-09-06 00:22:26.682 [INFO][4996] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="b6c0d676905e7769a979b641b973fbab57a0ede6e9580ef71a25fd94e8b9bcca" iface="eth0" netns="" Sep 6 00:22:26.765935 env[1194]: 2025-09-06 00:22:26.682 [INFO][4996] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="b6c0d676905e7769a979b641b973fbab57a0ede6e9580ef71a25fd94e8b9bcca" Sep 6 00:22:26.765935 env[1194]: 2025-09-06 00:22:26.682 [INFO][4996] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="b6c0d676905e7769a979b641b973fbab57a0ede6e9580ef71a25fd94e8b9bcca" Sep 6 00:22:26.765935 env[1194]: 2025-09-06 00:22:26.740 [INFO][5003] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="b6c0d676905e7769a979b641b973fbab57a0ede6e9580ef71a25fd94e8b9bcca" HandleID="k8s-pod-network.b6c0d676905e7769a979b641b973fbab57a0ede6e9580ef71a25fd94e8b9bcca" Workload="ci--3510.3.8--n--86fdecb492-k8s-calico--kube--controllers--dcdb654dd--lnm9v-eth0" Sep 6 00:22:26.765935 env[1194]: 2025-09-06 00:22:26.740 [INFO][5003] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Sep 6 00:22:26.765935 env[1194]: 2025-09-06 00:22:26.740 [INFO][5003] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Sep 6 00:22:26.765935 env[1194]: 2025-09-06 00:22:26.752 [WARNING][5003] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="b6c0d676905e7769a979b641b973fbab57a0ede6e9580ef71a25fd94e8b9bcca" HandleID="k8s-pod-network.b6c0d676905e7769a979b641b973fbab57a0ede6e9580ef71a25fd94e8b9bcca" Workload="ci--3510.3.8--n--86fdecb492-k8s-calico--kube--controllers--dcdb654dd--lnm9v-eth0" Sep 6 00:22:26.765935 env[1194]: 2025-09-06 00:22:26.752 [INFO][5003] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="b6c0d676905e7769a979b641b973fbab57a0ede6e9580ef71a25fd94e8b9bcca" HandleID="k8s-pod-network.b6c0d676905e7769a979b641b973fbab57a0ede6e9580ef71a25fd94e8b9bcca" Workload="ci--3510.3.8--n--86fdecb492-k8s-calico--kube--controllers--dcdb654dd--lnm9v-eth0" Sep 6 00:22:26.765935 env[1194]: 2025-09-06 00:22:26.760 [INFO][5003] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Sep 6 00:22:26.765935 env[1194]: 2025-09-06 00:22:26.762 [INFO][4996] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="b6c0d676905e7769a979b641b973fbab57a0ede6e9580ef71a25fd94e8b9bcca" Sep 6 00:22:26.766744 env[1194]: time="2025-09-06T00:22:26.765982962Z" level=info msg="TearDown network for sandbox \"b6c0d676905e7769a979b641b973fbab57a0ede6e9580ef71a25fd94e8b9bcca\" successfully" Sep 6 00:22:26.775818 env[1194]: time="2025-09-06T00:22:26.775750127Z" level=info msg="RemovePodSandbox \"b6c0d676905e7769a979b641b973fbab57a0ede6e9580ef71a25fd94e8b9bcca\" returns successfully" Sep 6 00:22:27.698000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@9-147.182.198.71:22-147.75.109.163:38878 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 00:22:27.699719 systemd[1]: Started sshd@9-147.182.198.71:22-147.75.109.163:38878.service. Sep 6 00:22:27.832000 audit[5011]: USER_ACCT pid=5011 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Sep 6 00:22:27.833834 sshd[5011]: Accepted publickey for core from 147.75.109.163 port 38878 ssh2: RSA SHA256:zgVES46caP1+99uzHYMS+9ry3WhXasb4NYAgm1B5TPc Sep 6 00:22:27.834000 audit[5011]: CRED_ACQ pid=5011 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Sep 6 00:22:27.834000 audit[5011]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffc64efda30 a2=3 a3=0 items=0 ppid=1 pid=5011 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=10 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:22:27.834000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Sep 6 00:22:27.838282 sshd[5011]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Sep 6 00:22:27.847888 systemd-logind[1184]: New session 10 of user core. Sep 6 00:22:27.849491 systemd[1]: Started session-10.scope. Sep 6 00:22:27.855000 audit[5011]: USER_START pid=5011 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Sep 6 00:22:27.858000 audit[5013]: CRED_ACQ pid=5013 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Sep 6 00:22:28.465279 sshd[5011]: pam_unix(sshd:session): session closed for user core Sep 6 00:22:28.465000 audit[5011]: USER_END pid=5011 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Sep 6 00:22:28.466000 audit[5011]: CRED_DISP pid=5011 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Sep 6 00:22:28.471641 systemd[1]: sshd@9-147.182.198.71:22-147.75.109.163:38878.service: Deactivated successfully. Sep 6 00:22:28.470000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@9-147.182.198.71:22-147.75.109.163:38878 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 00:22:28.472595 systemd[1]: session-10.scope: Deactivated successfully. Sep 6 00:22:28.473811 systemd-logind[1184]: Session 10 logged out. Waiting for processes to exit. Sep 6 00:22:28.474000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@10-147.182.198.71:22-147.75.109.163:38886 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 00:22:28.475631 systemd[1]: Started sshd@10-147.182.198.71:22-147.75.109.163:38886.service. Sep 6 00:22:28.478499 systemd-logind[1184]: Removed session 10. Sep 6 00:22:28.538000 audit[5024]: USER_ACCT pid=5024 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Sep 6 00:22:28.539000 audit[5024]: CRED_ACQ pid=5024 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Sep 6 00:22:28.539000 audit[5024]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffcf08abdf0 a2=3 a3=0 items=0 ppid=1 pid=5024 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=11 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:22:28.539000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Sep 6 00:22:28.541664 sshd[5024]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Sep 6 00:22:28.543305 sshd[5024]: Accepted publickey for core from 147.75.109.163 port 38886 ssh2: RSA SHA256:zgVES46caP1+99uzHYMS+9ry3WhXasb4NYAgm1B5TPc Sep 6 00:22:28.553780 systemd[1]: Started session-11.scope. Sep 6 00:22:28.554750 systemd-logind[1184]: New session 11 of user core. Sep 6 00:22:28.560000 audit[5024]: USER_START pid=5024 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Sep 6 00:22:28.563000 audit[5026]: CRED_ACQ pid=5026 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Sep 6 00:22:28.970438 sshd[5024]: pam_unix(sshd:session): session closed for user core Sep 6 00:22:28.984066 kernel: kauditd_printk_skb: 70 callbacks suppressed Sep 6 00:22:28.985139 kernel: audit: type=1106 audit(1757118148.976:1516): pid=5024 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Sep 6 00:22:28.976000 audit[5024]: USER_END pid=5024 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Sep 6 00:22:28.988913 systemd[1]: Started sshd@11-147.182.198.71:22-147.75.109.163:38892.service. Sep 6 00:22:28.976000 audit[5024]: CRED_DISP pid=5024 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Sep 6 00:22:28.989946 systemd[1]: sshd@10-147.182.198.71:22-147.75.109.163:38886.service: Deactivated successfully. Sep 6 00:22:28.996650 kernel: audit: type=1104 audit(1757118148.976:1517): pid=5024 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Sep 6 00:22:28.999207 systemd[1]: session-11.scope: Deactivated successfully. Sep 6 00:22:28.987000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@11-147.182.198.71:22-147.75.109.163:38892 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 00:22:29.004604 kernel: audit: type=1130 audit(1757118148.987:1518): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@11-147.182.198.71:22-147.75.109.163:38892 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 00:22:29.000898 systemd-logind[1184]: Session 11 logged out. Waiting for processes to exit. Sep 6 00:22:28.996000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@10-147.182.198.71:22-147.75.109.163:38886 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 00:22:29.009538 kernel: audit: type=1131 audit(1757118148.996:1519): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@10-147.182.198.71:22-147.75.109.163:38886 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 00:22:29.009736 systemd-logind[1184]: Removed session 11. Sep 6 00:22:29.063000 audit[5032]: USER_ACCT pid=5032 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Sep 6 00:22:29.068526 sshd[5032]: Accepted publickey for core from 147.75.109.163 port 38892 ssh2: RSA SHA256:zgVES46caP1+99uzHYMS+9ry3WhXasb4NYAgm1B5TPc Sep 6 00:22:29.069459 kernel: audit: type=1101 audit(1757118149.063:1520): pid=5032 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Sep 6 00:22:29.068000 audit[5032]: CRED_ACQ pid=5032 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Sep 6 00:22:29.070652 sshd[5032]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Sep 6 00:22:29.074859 kernel: audit: type=1103 audit(1757118149.068:1521): pid=5032 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Sep 6 00:22:29.074981 kernel: audit: type=1006 audit(1757118149.068:1522): pid=5032 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=12 res=1 Sep 6 00:22:29.068000 audit[5032]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffc7f3934d0 a2=3 a3=0 items=0 ppid=1 pid=5032 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=12 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:22:29.068000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Sep 6 00:22:29.081281 kernel: audit: type=1300 audit(1757118149.068:1522): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffc7f3934d0 a2=3 a3=0 items=0 ppid=1 pid=5032 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=12 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:22:29.081376 kernel: audit: type=1327 audit(1757118149.068:1522): proctitle=737368643A20636F7265205B707269765D Sep 6 00:22:29.084084 systemd-logind[1184]: New session 12 of user core. Sep 6 00:22:29.084486 systemd[1]: Started session-12.scope. Sep 6 00:22:29.088000 audit[5032]: USER_START pid=5032 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Sep 6 00:22:29.095913 kernel: audit: type=1105 audit(1757118149.088:1523): pid=5032 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Sep 6 00:22:29.093000 audit[5035]: CRED_ACQ pid=5035 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Sep 6 00:22:29.311096 sshd[5032]: pam_unix(sshd:session): session closed for user core Sep 6 00:22:29.311000 audit[5032]: USER_END pid=5032 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Sep 6 00:22:29.311000 audit[5032]: CRED_DISP pid=5032 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Sep 6 00:22:29.316544 systemd[1]: sshd@11-147.182.198.71:22-147.75.109.163:38892.service: Deactivated successfully. Sep 6 00:22:29.317754 systemd[1]: session-12.scope: Deactivated successfully. Sep 6 00:22:29.315000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@11-147.182.198.71:22-147.75.109.163:38892 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 00:22:29.323070 systemd-logind[1184]: Session 12 logged out. Waiting for processes to exit. Sep 6 00:22:29.324018 systemd-logind[1184]: Removed session 12. Sep 6 00:22:29.399519 kubelet[1933]: E0906 00:22:29.398267 1933 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 67.207.67.3 67.207.67.2 67.207.67.3" Sep 6 00:22:29.581968 kubelet[1933]: I0906 00:22:29.581823 1933 prober_manager.go:312] "Failed to trigger a manual run" probe="Readiness" Sep 6 00:22:29.725000 audit[5045]: NETFILTER_CFG table=filter:128 family=2 entries=10 op=nft_register_rule pid=5045 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Sep 6 00:22:29.725000 audit[5045]: SYSCALL arch=c000003e syscall=46 success=yes exit=3760 a0=3 a1=7ffc82b49a70 a2=0 a3=7ffc82b49a5c items=0 ppid=2038 pid=5045 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:22:29.725000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Sep 6 00:22:29.730000 audit[5045]: NETFILTER_CFG table=nat:129 family=2 entries=36 op=nft_register_chain pid=5045 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Sep 6 00:22:29.730000 audit[5045]: SYSCALL arch=c000003e syscall=46 success=yes exit=12004 a0=3 a1=7ffc82b49a70 a2=0 a3=7ffc82b49a5c items=0 ppid=2038 pid=5045 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:22:29.730000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Sep 6 00:22:30.170294 systemd[1]: run-containerd-runc-k8s.io-c7159642d54acd22b7418e53840b3b4adaaa2a0a2a24b380678df942301126ff-runc.gyAtu5.mount: Deactivated successfully. Sep 6 00:22:34.318306 systemd[1]: Started sshd@12-147.182.198.71:22-147.75.109.163:48488.service. Sep 6 00:22:34.321783 kernel: kauditd_printk_skb: 10 callbacks suppressed Sep 6 00:22:34.322396 kernel: audit: type=1130 audit(1757118154.318:1530): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@12-147.182.198.71:22-147.75.109.163:48488 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 00:22:34.318000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@12-147.182.198.71:22-147.75.109.163:48488 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 00:22:34.446000 audit[5079]: USER_ACCT pid=5079 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Sep 6 00:22:34.449750 sshd[5079]: Accepted publickey for core from 147.75.109.163 port 48488 ssh2: RSA SHA256:zgVES46caP1+99uzHYMS+9ry3WhXasb4NYAgm1B5TPc Sep 6 00:22:34.450872 kernel: audit: type=1101 audit(1757118154.446:1531): pid=5079 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Sep 6 00:22:34.451000 audit[5079]: CRED_ACQ pid=5079 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Sep 6 00:22:34.457731 kernel: audit: type=1103 audit(1757118154.451:1532): pid=5079 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Sep 6 00:22:34.458410 kernel: audit: type=1006 audit(1757118154.451:1533): pid=5079 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=13 res=1 Sep 6 00:22:34.458467 kernel: audit: type=1300 audit(1757118154.451:1533): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffd99e28c00 a2=3 a3=0 items=0 ppid=1 pid=5079 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=13 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:22:34.451000 audit[5079]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffd99e28c00 a2=3 a3=0 items=0 ppid=1 pid=5079 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=13 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:22:34.451000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Sep 6 00:22:34.462176 sshd[5079]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Sep 6 00:22:34.462896 kernel: audit: type=1327 audit(1757118154.451:1533): proctitle=737368643A20636F7265205B707269765D Sep 6 00:22:34.472873 systemd[1]: Started session-13.scope. Sep 6 00:22:34.473583 systemd-logind[1184]: New session 13 of user core. Sep 6 00:22:34.480000 audit[5079]: USER_START pid=5079 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Sep 6 00:22:34.485411 kernel: audit: type=1105 audit(1757118154.480:1534): pid=5079 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Sep 6 00:22:34.486000 audit[5081]: CRED_ACQ pid=5081 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Sep 6 00:22:34.492332 kernel: audit: type=1103 audit(1757118154.486:1535): pid=5081 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Sep 6 00:22:34.920642 sshd[5079]: pam_unix(sshd:session): session closed for user core Sep 6 00:22:34.922000 audit[5079]: USER_END pid=5079 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Sep 6 00:22:34.929653 kernel: audit: type=1106 audit(1757118154.922:1536): pid=5079 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Sep 6 00:22:34.929738 kernel: audit: type=1104 audit(1757118154.925:1537): pid=5079 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Sep 6 00:22:34.925000 audit[5079]: CRED_DISP pid=5079 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Sep 6 00:22:34.929066 systemd-logind[1184]: Session 13 logged out. Waiting for processes to exit. Sep 6 00:22:34.932089 systemd[1]: sshd@12-147.182.198.71:22-147.75.109.163:48488.service: Deactivated successfully. Sep 6 00:22:34.932000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@12-147.182.198.71:22-147.75.109.163:48488 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 00:22:34.933490 systemd[1]: session-13.scope: Deactivated successfully. Sep 6 00:22:34.936834 systemd-logind[1184]: Removed session 13. Sep 6 00:22:39.387606 kubelet[1933]: E0906 00:22:39.387554 1933 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 67.207.67.3 67.207.67.2 67.207.67.3" Sep 6 00:22:39.929715 systemd[1]: Started sshd@13-147.182.198.71:22-147.75.109.163:57476.service. Sep 6 00:22:39.932168 kernel: kauditd_printk_skb: 1 callbacks suppressed Sep 6 00:22:39.932379 kernel: audit: type=1130 audit(1757118159.929:1539): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@13-147.182.198.71:22-147.75.109.163:57476 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 00:22:39.929000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@13-147.182.198.71:22-147.75.109.163:57476 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 00:22:39.987000 audit[5092]: USER_ACCT pid=5092 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Sep 6 00:22:39.989306 sshd[5092]: Accepted publickey for core from 147.75.109.163 port 57476 ssh2: RSA SHA256:zgVES46caP1+99uzHYMS+9ry3WhXasb4NYAgm1B5TPc Sep 6 00:22:39.990000 audit[5092]: CRED_ACQ pid=5092 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Sep 6 00:22:39.991497 sshd[5092]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Sep 6 00:22:39.994042 kernel: audit: type=1101 audit(1757118159.987:1540): pid=5092 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Sep 6 00:22:39.994172 kernel: audit: type=1103 audit(1757118159.990:1541): pid=5092 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Sep 6 00:22:39.994674 kernel: audit: type=1006 audit(1757118159.990:1542): pid=5092 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=14 res=1 Sep 6 00:22:39.990000 audit[5092]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7fffe13046e0 a2=3 a3=0 items=0 ppid=1 pid=5092 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=14 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:22:39.999385 kernel: audit: type=1300 audit(1757118159.990:1542): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7fffe13046e0 a2=3 a3=0 items=0 ppid=1 pid=5092 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=14 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:22:39.999879 kernel: audit: type=1327 audit(1757118159.990:1542): proctitle=737368643A20636F7265205B707269765D Sep 6 00:22:39.990000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Sep 6 00:22:40.011939 systemd[1]: Started session-14.scope. Sep 6 00:22:40.013076 systemd-logind[1184]: New session 14 of user core. Sep 6 00:22:40.018000 audit[5092]: USER_START pid=5092 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Sep 6 00:22:40.020000 audit[5094]: CRED_ACQ pid=5094 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Sep 6 00:22:40.025395 kernel: audit: type=1105 audit(1757118160.018:1543): pid=5092 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Sep 6 00:22:40.025527 kernel: audit: type=1103 audit(1757118160.020:1544): pid=5094 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Sep 6 00:22:40.307576 sshd[5092]: pam_unix(sshd:session): session closed for user core Sep 6 00:22:40.310000 audit[5092]: USER_END pid=5092 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Sep 6 00:22:40.315274 kernel: audit: type=1106 audit(1757118160.310:1545): pid=5092 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Sep 6 00:22:40.315577 kernel: audit: type=1104 audit(1757118160.310:1546): pid=5092 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Sep 6 00:22:40.310000 audit[5092]: CRED_DISP pid=5092 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Sep 6 00:22:40.313672 systemd[1]: sshd@13-147.182.198.71:22-147.75.109.163:57476.service: Deactivated successfully. Sep 6 00:22:40.314879 systemd[1]: session-14.scope: Deactivated successfully. Sep 6 00:22:40.313000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@13-147.182.198.71:22-147.75.109.163:57476 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 00:22:40.318499 systemd-logind[1184]: Session 14 logged out. Waiting for processes to exit. Sep 6 00:22:40.320317 systemd-logind[1184]: Removed session 14. Sep 6 00:22:42.399197 systemd[1]: run-containerd-runc-k8s.io-dbadc605c162eff9bb44e82efde08e842b92352acdf9965d8c35c662bae87a91-runc.PFAIxj.mount: Deactivated successfully. Sep 6 00:22:45.319004 systemd[1]: Started sshd@14-147.182.198.71:22-147.75.109.163:57480.service. Sep 6 00:22:45.318000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@14-147.182.198.71:22-147.75.109.163:57480 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 00:22:45.321077 kernel: kauditd_printk_skb: 1 callbacks suppressed Sep 6 00:22:45.321510 kernel: audit: type=1130 audit(1757118165.318:1548): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@14-147.182.198.71:22-147.75.109.163:57480 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 00:22:45.409000 audit[5129]: USER_ACCT pid=5129 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Sep 6 00:22:45.410948 sshd[5129]: Accepted publickey for core from 147.75.109.163 port 57480 ssh2: RSA SHA256:zgVES46caP1+99uzHYMS+9ry3WhXasb4NYAgm1B5TPc Sep 6 00:22:45.413000 audit[5129]: CRED_ACQ pid=5129 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Sep 6 00:22:45.416871 sshd[5129]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Sep 6 00:22:45.419499 kernel: audit: type=1101 audit(1757118165.409:1549): pid=5129 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Sep 6 00:22:45.419611 kernel: audit: type=1103 audit(1757118165.413:1550): pid=5129 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Sep 6 00:22:45.423290 kernel: audit: type=1006 audit(1757118165.414:1551): pid=5129 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=15 res=1 Sep 6 00:22:45.429530 systemd-logind[1184]: New session 15 of user core. Sep 6 00:22:45.430990 systemd[1]: Started session-15.scope. Sep 6 00:22:45.414000 audit[5129]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7fffbdc9d910 a2=3 a3=0 items=0 ppid=1 pid=5129 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=15 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:22:45.438356 kernel: audit: type=1300 audit(1757118165.414:1551): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7fffbdc9d910 a2=3 a3=0 items=0 ppid=1 pid=5129 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=15 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:22:45.414000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Sep 6 00:22:45.442323 kernel: audit: type=1327 audit(1757118165.414:1551): proctitle=737368643A20636F7265205B707269765D Sep 6 00:22:45.444000 audit[5129]: USER_START pid=5129 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Sep 6 00:22:45.456331 kernel: audit: type=1105 audit(1757118165.444:1552): pid=5129 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Sep 6 00:22:45.456484 kernel: audit: type=1103 audit(1757118165.450:1553): pid=5131 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Sep 6 00:22:45.450000 audit[5131]: CRED_ACQ pid=5131 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Sep 6 00:22:45.931887 sshd[5129]: pam_unix(sshd:session): session closed for user core Sep 6 00:22:45.933000 audit[5129]: USER_END pid=5129 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Sep 6 00:22:45.940282 kernel: audit: type=1106 audit(1757118165.933:1554): pid=5129 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Sep 6 00:22:45.940447 systemd[1]: sshd@14-147.182.198.71:22-147.75.109.163:57480.service: Deactivated successfully. Sep 6 00:22:45.941375 systemd[1]: session-15.scope: Deactivated successfully. Sep 6 00:22:45.934000 audit[5129]: CRED_DISP pid=5129 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Sep 6 00:22:45.942652 systemd-logind[1184]: Session 15 logged out. Waiting for processes to exit. Sep 6 00:22:45.946401 kernel: audit: type=1104 audit(1757118165.934:1555): pid=5129 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Sep 6 00:22:45.947000 systemd-logind[1184]: Removed session 15. Sep 6 00:22:45.939000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@14-147.182.198.71:22-147.75.109.163:57480 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 00:22:48.385338 kubelet[1933]: E0906 00:22:48.385300 1933 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 67.207.67.3 67.207.67.2 67.207.67.3" Sep 6 00:22:48.578216 systemd[1]: run-containerd-runc-k8s.io-7e62e8e40f7b5dce0c46e6d58ffa93c9f612ff277b3b18173384b8ab914d0695-runc.3WUlFT.mount: Deactivated successfully. Sep 6 00:22:50.939068 systemd[1]: Started sshd@15-147.182.198.71:22-147.75.109.163:54718.service. Sep 6 00:22:50.941981 kernel: kauditd_printk_skb: 1 callbacks suppressed Sep 6 00:22:50.942099 kernel: audit: type=1130 audit(1757118170.938:1557): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@15-147.182.198.71:22-147.75.109.163:54718 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 00:22:50.938000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@15-147.182.198.71:22-147.75.109.163:54718 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 00:22:51.069000 audit[5164]: USER_ACCT pid=5164 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Sep 6 00:22:51.074641 kernel: audit: type=1101 audit(1757118171.069:1558): pid=5164 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Sep 6 00:22:51.074834 sshd[5164]: Accepted publickey for core from 147.75.109.163 port 54718 ssh2: RSA SHA256:zgVES46caP1+99uzHYMS+9ry3WhXasb4NYAgm1B5TPc Sep 6 00:22:51.074000 audit[5164]: CRED_ACQ pid=5164 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Sep 6 00:22:51.082085 kernel: audit: type=1103 audit(1757118171.074:1559): pid=5164 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Sep 6 00:22:51.082371 kernel: audit: type=1006 audit(1757118171.079:1560): pid=5164 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=16 res=1 Sep 6 00:22:51.082470 kernel: audit: type=1300 audit(1757118171.079:1560): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7fff97949d10 a2=3 a3=0 items=0 ppid=1 pid=5164 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=16 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:22:51.079000 audit[5164]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7fff97949d10 a2=3 a3=0 items=0 ppid=1 pid=5164 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=16 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:22:51.087054 kernel: audit: type=1327 audit(1757118171.079:1560): proctitle=737368643A20636F7265205B707269765D Sep 6 00:22:51.079000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Sep 6 00:22:51.088649 sshd[5164]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Sep 6 00:22:51.100097 systemd[1]: Started session-16.scope. Sep 6 00:22:51.101076 systemd-logind[1184]: New session 16 of user core. Sep 6 00:22:51.111000 audit[5164]: USER_START pid=5164 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Sep 6 00:22:51.121147 kernel: audit: type=1105 audit(1757118171.111:1561): pid=5164 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Sep 6 00:22:51.121361 kernel: audit: type=1103 audit(1757118171.117:1562): pid=5166 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Sep 6 00:22:51.117000 audit[5166]: CRED_ACQ pid=5166 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Sep 6 00:22:51.472181 sshd[5164]: pam_unix(sshd:session): session closed for user core Sep 6 00:22:51.474000 audit[5164]: USER_END pid=5164 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Sep 6 00:22:51.481301 kernel: audit: type=1106 audit(1757118171.474:1563): pid=5164 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Sep 6 00:22:51.482586 systemd[1]: sshd@15-147.182.198.71:22-147.75.109.163:54718.service: Deactivated successfully. Sep 6 00:22:51.486614 kernel: audit: type=1104 audit(1757118171.474:1564): pid=5164 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Sep 6 00:22:51.474000 audit[5164]: CRED_DISP pid=5164 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Sep 6 00:22:51.484680 systemd[1]: session-16.scope: Deactivated successfully. Sep 6 00:22:51.482000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@15-147.182.198.71:22-147.75.109.163:54718 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 00:22:51.488190 systemd-logind[1184]: Session 16 logged out. Waiting for processes to exit. Sep 6 00:22:51.489000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@16-147.182.198.71:22-147.75.109.163:54734 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 00:22:51.490384 systemd[1]: Started sshd@16-147.182.198.71:22-147.75.109.163:54734.service. Sep 6 00:22:51.494893 systemd-logind[1184]: Removed session 16. Sep 6 00:22:51.542000 audit[5176]: USER_ACCT pid=5176 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Sep 6 00:22:51.544145 sshd[5176]: Accepted publickey for core from 147.75.109.163 port 54734 ssh2: RSA SHA256:zgVES46caP1+99uzHYMS+9ry3WhXasb4NYAgm1B5TPc Sep 6 00:22:51.544000 audit[5176]: CRED_ACQ pid=5176 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Sep 6 00:22:51.545000 audit[5176]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffd01725790 a2=3 a3=0 items=0 ppid=1 pid=5176 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=17 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:22:51.545000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Sep 6 00:22:51.546730 sshd[5176]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Sep 6 00:22:51.553882 systemd-logind[1184]: New session 17 of user core. Sep 6 00:22:51.554521 systemd[1]: Started session-17.scope. Sep 6 00:22:51.560000 audit[5176]: USER_START pid=5176 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Sep 6 00:22:51.563000 audit[5178]: CRED_ACQ pid=5178 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Sep 6 00:22:51.984402 sshd[5176]: pam_unix(sshd:session): session closed for user core Sep 6 00:22:51.985000 audit[5176]: USER_END pid=5176 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Sep 6 00:22:51.986000 audit[5176]: CRED_DISP pid=5176 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Sep 6 00:22:51.991746 systemd[1]: Started sshd@17-147.182.198.71:22-147.75.109.163:54746.service. Sep 6 00:22:51.990000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@17-147.182.198.71:22-147.75.109.163:54746 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 00:22:51.992551 systemd[1]: sshd@16-147.182.198.71:22-147.75.109.163:54734.service: Deactivated successfully. Sep 6 00:22:51.991000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@16-147.182.198.71:22-147.75.109.163:54734 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 00:22:51.993717 systemd[1]: session-17.scope: Deactivated successfully. Sep 6 00:22:51.995945 systemd-logind[1184]: Session 17 logged out. Waiting for processes to exit. Sep 6 00:22:51.997752 systemd-logind[1184]: Removed session 17. Sep 6 00:22:52.055000 audit[5185]: USER_ACCT pid=5185 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Sep 6 00:22:52.057259 sshd[5185]: Accepted publickey for core from 147.75.109.163 port 54746 ssh2: RSA SHA256:zgVES46caP1+99uzHYMS+9ry3WhXasb4NYAgm1B5TPc Sep 6 00:22:52.056000 audit[5185]: CRED_ACQ pid=5185 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Sep 6 00:22:52.057000 audit[5185]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffcd3129150 a2=3 a3=0 items=0 ppid=1 pid=5185 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=18 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:22:52.057000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Sep 6 00:22:52.059264 sshd[5185]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Sep 6 00:22:52.065372 systemd[1]: Started session-18.scope. Sep 6 00:22:52.066864 systemd-logind[1184]: New session 18 of user core. Sep 6 00:22:52.073000 audit[5185]: USER_START pid=5185 uid=0 auid=500 ses=18 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Sep 6 00:22:52.075000 audit[5188]: CRED_ACQ pid=5188 uid=0 auid=500 ses=18 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Sep 6 00:22:54.356038 systemd[1]: run-containerd-runc-k8s.io-7e62e8e40f7b5dce0c46e6d58ffa93c9f612ff277b3b18173384b8ab914d0695-runc.g9OoyO.mount: Deactivated successfully. Sep 6 00:22:54.924362 sshd[5185]: pam_unix(sshd:session): session closed for user core Sep 6 00:22:54.937000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@18-147.182.198.71:22-147.75.109.163:54752 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 00:22:54.938000 audit[5185]: USER_END pid=5185 uid=0 auid=500 ses=18 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Sep 6 00:22:54.941000 audit[5185]: CRED_DISP pid=5185 uid=0 auid=500 ses=18 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Sep 6 00:22:54.936864 systemd[1]: Started sshd@18-147.182.198.71:22-147.75.109.163:54752.service. Sep 6 00:22:54.957381 systemd[1]: sshd@17-147.182.198.71:22-147.75.109.163:54746.service: Deactivated successfully. Sep 6 00:22:54.957000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@17-147.182.198.71:22-147.75.109.163:54746 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 00:22:54.959086 systemd[1]: session-18.scope: Deactivated successfully. Sep 6 00:22:54.960324 systemd-logind[1184]: Session 18 logged out. Waiting for processes to exit. Sep 6 00:22:54.964029 systemd-logind[1184]: Removed session 18. Sep 6 00:22:55.046000 audit[5242]: NETFILTER_CFG table=filter:130 family=2 entries=22 op=nft_register_rule pid=5242 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Sep 6 00:22:55.046000 audit[5242]: SYSCALL arch=c000003e syscall=46 success=yes exit=12688 a0=3 a1=7ffe5c2064f0 a2=0 a3=7ffe5c2064dc items=0 ppid=2038 pid=5242 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:22:55.046000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Sep 6 00:22:55.054000 audit[5242]: NETFILTER_CFG table=nat:131 family=2 entries=24 op=nft_register_rule pid=5242 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Sep 6 00:22:55.054000 audit[5242]: SYSCALL arch=c000003e syscall=46 success=yes exit=7308 a0=3 a1=7ffe5c2064f0 a2=0 a3=0 items=0 ppid=2038 pid=5242 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:22:55.054000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Sep 6 00:22:55.066000 audit[5240]: USER_ACCT pid=5240 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Sep 6 00:22:55.069068 sshd[5240]: Accepted publickey for core from 147.75.109.163 port 54752 ssh2: RSA SHA256:zgVES46caP1+99uzHYMS+9ry3WhXasb4NYAgm1B5TPc Sep 6 00:22:55.068000 audit[5240]: CRED_ACQ pid=5240 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Sep 6 00:22:55.068000 audit[5240]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffcff1d88b0 a2=3 a3=0 items=0 ppid=1 pid=5240 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=19 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:22:55.068000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Sep 6 00:22:55.074116 sshd[5240]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Sep 6 00:22:55.092695 systemd-logind[1184]: New session 19 of user core. Sep 6 00:22:55.094180 systemd[1]: Started session-19.scope. Sep 6 00:22:55.106000 audit[5240]: USER_START pid=5240 uid=0 auid=500 ses=19 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Sep 6 00:22:55.108000 audit[5245]: CRED_ACQ pid=5245 uid=0 auid=500 ses=19 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Sep 6 00:22:55.125000 audit[5246]: NETFILTER_CFG table=filter:132 family=2 entries=34 op=nft_register_rule pid=5246 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Sep 6 00:22:55.125000 audit[5246]: SYSCALL arch=c000003e syscall=46 success=yes exit=12688 a0=3 a1=7ffc0cf5c9e0 a2=0 a3=7ffc0cf5c9cc items=0 ppid=2038 pid=5246 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:22:55.125000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Sep 6 00:22:55.130000 audit[5246]: NETFILTER_CFG table=nat:133 family=2 entries=24 op=nft_register_rule pid=5246 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Sep 6 00:22:55.130000 audit[5246]: SYSCALL arch=c000003e syscall=46 success=yes exit=7308 a0=3 a1=7ffc0cf5c9e0 a2=0 a3=0 items=0 ppid=2038 pid=5246 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:22:55.130000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Sep 6 00:22:56.181556 kernel: kauditd_printk_skb: 43 callbacks suppressed Sep 6 00:22:56.189368 kernel: audit: type=1325 audit(1757118176.176:1594): table=filter:134 family=2 entries=33 op=nft_register_rule pid=5253 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Sep 6 00:22:56.190982 kernel: audit: type=1300 audit(1757118176.176:1594): arch=c000003e syscall=46 success=yes exit=11944 a0=3 a1=7ffde54c9e90 a2=0 a3=7ffde54c9e7c items=0 ppid=2038 pid=5253 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:22:56.176000 audit[5253]: NETFILTER_CFG table=filter:134 family=2 entries=33 op=nft_register_rule pid=5253 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Sep 6 00:22:56.176000 audit[5253]: SYSCALL arch=c000003e syscall=46 success=yes exit=11944 a0=3 a1=7ffde54c9e90 a2=0 a3=7ffde54c9e7c items=0 ppid=2038 pid=5253 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:22:56.187000 audit[5240]: USER_END pid=5240 uid=0 auid=500 ses=19 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Sep 6 00:22:56.181190 sshd[5240]: pam_unix(sshd:session): session closed for user core Sep 6 00:22:56.197371 kernel: audit: type=1106 audit(1757118176.187:1595): pid=5240 uid=0 auid=500 ses=19 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Sep 6 00:22:56.190639 systemd[1]: Started sshd@19-147.182.198.71:22-147.75.109.163:54762.service. Sep 6 00:22:56.187000 audit[5240]: CRED_DISP pid=5240 uid=0 auid=500 ses=19 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Sep 6 00:22:56.192218 systemd[1]: sshd@18-147.182.198.71:22-147.75.109.163:54752.service: Deactivated successfully. Sep 6 00:22:56.203266 kernel: audit: type=1104 audit(1757118176.187:1596): pid=5240 uid=0 auid=500 ses=19 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Sep 6 00:22:56.193150 systemd[1]: session-19.scope: Deactivated successfully. Sep 6 00:22:56.198814 systemd-logind[1184]: Session 19 logged out. Waiting for processes to exit. Sep 6 00:22:56.205555 systemd-logind[1184]: Removed session 19. Sep 6 00:22:56.210010 kernel: audit: type=1327 audit(1757118176.176:1594): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Sep 6 00:22:56.176000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Sep 6 00:22:56.215312 kernel: audit: type=1130 audit(1757118176.189:1597): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@19-147.182.198.71:22-147.75.109.163:54762 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 00:22:56.189000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@19-147.182.198.71:22-147.75.109.163:54762 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 00:22:56.191000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@18-147.182.198.71:22-147.75.109.163:54752 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 00:22:56.219295 kernel: audit: type=1131 audit(1757118176.191:1598): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@18-147.182.198.71:22-147.75.109.163:54752 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 00:22:56.196000 audit[5253]: NETFILTER_CFG table=nat:135 family=2 entries=31 op=nft_register_chain pid=5253 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Sep 6 00:22:56.222306 kernel: audit: type=1325 audit(1757118176.196:1599): table=nat:135 family=2 entries=31 op=nft_register_chain pid=5253 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Sep 6 00:22:56.196000 audit[5253]: SYSCALL arch=c000003e syscall=46 success=yes exit=10884 a0=3 a1=7ffde54c9e90 a2=0 a3=7ffde54c9e7c items=0 ppid=2038 pid=5253 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:22:56.226263 kernel: audit: type=1300 audit(1757118176.196:1599): arch=c000003e syscall=46 success=yes exit=10884 a0=3 a1=7ffde54c9e90 a2=0 a3=7ffde54c9e7c items=0 ppid=2038 pid=5253 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:22:56.196000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Sep 6 00:22:56.229403 kernel: audit: type=1327 audit(1757118176.196:1599): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Sep 6 00:22:56.288000 audit[5255]: USER_ACCT pid=5255 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Sep 6 00:22:56.290107 sshd[5255]: Accepted publickey for core from 147.75.109.163 port 54762 ssh2: RSA SHA256:zgVES46caP1+99uzHYMS+9ry3WhXasb4NYAgm1B5TPc Sep 6 00:22:56.290000 audit[5255]: CRED_ACQ pid=5255 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Sep 6 00:22:56.290000 audit[5255]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7fff3438efe0 a2=3 a3=0 items=0 ppid=1 pid=5255 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=20 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:22:56.290000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Sep 6 00:22:56.293072 sshd[5255]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Sep 6 00:22:56.299802 systemd[1]: Started session-20.scope. Sep 6 00:22:56.300727 systemd-logind[1184]: New session 20 of user core. Sep 6 00:22:56.305000 audit[5255]: USER_START pid=5255 uid=0 auid=500 ses=20 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Sep 6 00:22:56.308000 audit[5259]: CRED_ACQ pid=5259 uid=0 auid=500 ses=20 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Sep 6 00:22:56.487568 sshd[5255]: pam_unix(sshd:session): session closed for user core Sep 6 00:22:56.489000 audit[5255]: USER_END pid=5255 uid=0 auid=500 ses=20 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Sep 6 00:22:56.489000 audit[5255]: CRED_DISP pid=5255 uid=0 auid=500 ses=20 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Sep 6 00:22:56.493831 systemd-logind[1184]: Session 20 logged out. Waiting for processes to exit. Sep 6 00:22:56.495597 systemd[1]: sshd@19-147.182.198.71:22-147.75.109.163:54762.service: Deactivated successfully. Sep 6 00:22:56.496725 systemd[1]: session-20.scope: Deactivated successfully. Sep 6 00:22:56.494000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@19-147.182.198.71:22-147.75.109.163:54762 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 00:22:56.498417 systemd-logind[1184]: Removed session 20. Sep 6 00:23:00.447206 kubelet[1933]: E0906 00:23:00.441917 1933 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 67.207.67.3 67.207.67.2 67.207.67.3" Sep 6 00:23:01.497822 systemd[1]: Started sshd@20-147.182.198.71:22-147.75.109.163:48996.service. Sep 6 00:23:01.504369 kernel: kauditd_printk_skb: 10 callbacks suppressed Sep 6 00:23:01.507159 kernel: audit: type=1130 audit(1757118181.496:1608): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@20-147.182.198.71:22-147.75.109.163:48996 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 00:23:01.496000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@20-147.182.198.71:22-147.75.109.163:48996 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 00:23:01.667000 audit[5292]: USER_ACCT pid=5292 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Sep 6 00:23:01.672702 sshd[5292]: Accepted publickey for core from 147.75.109.163 port 48996 ssh2: RSA SHA256:zgVES46caP1+99uzHYMS+9ry3WhXasb4NYAgm1B5TPc Sep 6 00:23:01.673407 kernel: audit: type=1101 audit(1757118181.667:1609): pid=5292 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Sep 6 00:23:01.674000 audit[5292]: CRED_ACQ pid=5292 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Sep 6 00:23:01.687161 kernel: audit: type=1103 audit(1757118181.674:1610): pid=5292 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Sep 6 00:23:01.688820 kernel: audit: type=1006 audit(1757118181.674:1611): pid=5292 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=21 res=1 Sep 6 00:23:01.688909 kernel: audit: type=1300 audit(1757118181.674:1611): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffd040b1e50 a2=3 a3=0 items=0 ppid=1 pid=5292 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=21 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:23:01.691326 kernel: audit: type=1327 audit(1757118181.674:1611): proctitle=737368643A20636F7265205B707269765D Sep 6 00:23:01.674000 audit[5292]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffd040b1e50 a2=3 a3=0 items=0 ppid=1 pid=5292 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=21 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:23:01.674000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Sep 6 00:23:01.692885 sshd[5292]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Sep 6 00:23:01.705006 systemd[1]: Started session-21.scope. Sep 6 00:23:01.706424 systemd-logind[1184]: New session 21 of user core. Sep 6 00:23:01.714000 audit[5292]: USER_START pid=5292 uid=0 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Sep 6 00:23:01.717000 audit[5295]: CRED_ACQ pid=5295 uid=0 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Sep 6 00:23:01.725008 kernel: audit: type=1105 audit(1757118181.714:1612): pid=5292 uid=0 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Sep 6 00:23:01.725130 kernel: audit: type=1103 audit(1757118181.717:1613): pid=5295 uid=0 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Sep 6 00:23:01.730000 audit[5296]: NETFILTER_CFG table=filter:136 family=2 entries=20 op=nft_register_rule pid=5296 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Sep 6 00:23:01.730000 audit[5296]: SYSCALL arch=c000003e syscall=46 success=yes exit=3016 a0=3 a1=7ffed7376b30 a2=0 a3=7ffed7376b1c items=0 ppid=2038 pid=5296 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:23:01.738392 kernel: audit: type=1325 audit(1757118181.730:1614): table=filter:136 family=2 entries=20 op=nft_register_rule pid=5296 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Sep 6 00:23:01.738611 kernel: audit: type=1300 audit(1757118181.730:1614): arch=c000003e syscall=46 success=yes exit=3016 a0=3 a1=7ffed7376b30 a2=0 a3=7ffed7376b1c items=0 ppid=2038 pid=5296 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:23:01.730000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Sep 6 00:23:01.741000 audit[5296]: NETFILTER_CFG table=nat:137 family=2 entries=110 op=nft_register_chain pid=5296 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Sep 6 00:23:01.741000 audit[5296]: SYSCALL arch=c000003e syscall=46 success=yes exit=50988 a0=3 a1=7ffed7376b30 a2=0 a3=7ffed7376b1c items=0 ppid=2038 pid=5296 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:23:01.741000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Sep 6 00:23:02.211791 sshd[5292]: pam_unix(sshd:session): session closed for user core Sep 6 00:23:02.212000 audit[5292]: USER_END pid=5292 uid=0 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Sep 6 00:23:02.212000 audit[5292]: CRED_DISP pid=5292 uid=0 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Sep 6 00:23:02.216000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@20-147.182.198.71:22-147.75.109.163:48996 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 00:23:02.216702 systemd-logind[1184]: Session 21 logged out. Waiting for processes to exit. Sep 6 00:23:02.217322 systemd[1]: sshd@20-147.182.198.71:22-147.75.109.163:48996.service: Deactivated successfully. Sep 6 00:23:02.218502 systemd[1]: session-21.scope: Deactivated successfully. Sep 6 00:23:02.220902 systemd-logind[1184]: Removed session 21. Sep 6 00:23:04.417775 kubelet[1933]: E0906 00:23:04.417713 1933 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 67.207.67.3 67.207.67.2 67.207.67.3" Sep 6 00:23:07.224972 systemd[1]: Started sshd@21-147.182.198.71:22-147.75.109.163:49004.service. Sep 6 00:23:07.237542 kernel: kauditd_printk_skb: 7 callbacks suppressed Sep 6 00:23:07.238566 kernel: audit: type=1130 audit(1757118187.224:1619): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@21-147.182.198.71:22-147.75.109.163:49004 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 00:23:07.224000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@21-147.182.198.71:22-147.75.109.163:49004 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 00:23:07.371000 audit[5308]: USER_ACCT pid=5308 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Sep 6 00:23:07.377547 kernel: audit: type=1101 audit(1757118187.371:1620): pid=5308 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Sep 6 00:23:07.377642 sshd[5308]: Accepted publickey for core from 147.75.109.163 port 49004 ssh2: RSA SHA256:zgVES46caP1+99uzHYMS+9ry3WhXasb4NYAgm1B5TPc Sep 6 00:23:07.386847 kernel: audit: type=1103 audit(1757118187.377:1621): pid=5308 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Sep 6 00:23:07.387468 kernel: audit: type=1006 audit(1757118187.377:1622): pid=5308 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=22 res=1 Sep 6 00:23:07.387547 kernel: audit: type=1300 audit(1757118187.377:1622): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7fff196b7f80 a2=3 a3=0 items=0 ppid=1 pid=5308 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=22 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:23:07.377000 audit[5308]: CRED_ACQ pid=5308 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Sep 6 00:23:07.377000 audit[5308]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7fff196b7f80 a2=3 a3=0 items=0 ppid=1 pid=5308 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=22 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:23:07.393050 kernel: audit: type=1327 audit(1757118187.377:1622): proctitle=737368643A20636F7265205B707269765D Sep 6 00:23:07.377000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Sep 6 00:23:07.390207 sshd[5308]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Sep 6 00:23:07.408355 systemd[1]: Started session-22.scope. Sep 6 00:23:07.409514 systemd-logind[1184]: New session 22 of user core. Sep 6 00:23:07.421000 audit[5308]: USER_START pid=5308 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Sep 6 00:23:07.427269 kernel: audit: type=1105 audit(1757118187.421:1623): pid=5308 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Sep 6 00:23:07.427000 audit[5310]: CRED_ACQ pid=5310 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Sep 6 00:23:07.433276 kernel: audit: type=1103 audit(1757118187.427:1624): pid=5310 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Sep 6 00:23:08.369808 sshd[5308]: pam_unix(sshd:session): session closed for user core Sep 6 00:23:08.371000 audit[5308]: USER_END pid=5308 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Sep 6 00:23:08.382403 kernel: audit: type=1106 audit(1757118188.371:1625): pid=5308 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Sep 6 00:23:08.384142 kernel: audit: type=1104 audit(1757118188.372:1626): pid=5308 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Sep 6 00:23:08.372000 audit[5308]: CRED_DISP pid=5308 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Sep 6 00:23:08.375227 systemd[1]: sshd@21-147.182.198.71:22-147.75.109.163:49004.service: Deactivated successfully. Sep 6 00:23:08.383426 systemd[1]: session-22.scope: Deactivated successfully. Sep 6 00:23:08.384207 systemd-logind[1184]: Session 22 logged out. Waiting for processes to exit. Sep 6 00:23:08.387458 systemd-logind[1184]: Removed session 22. Sep 6 00:23:08.374000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@21-147.182.198.71:22-147.75.109.163:49004 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 00:23:11.482821 kubelet[1933]: E0906 00:23:11.480567 1933 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 67.207.67.3 67.207.67.2 67.207.67.3" Sep 6 00:23:13.402429 kernel: kauditd_printk_skb: 1 callbacks suppressed Sep 6 00:23:13.403996 kernel: audit: type=1130 audit(1757118193.395:1628): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@22-147.182.198.71:22-147.75.109.163:48098 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 00:23:13.395000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@22-147.182.198.71:22-147.75.109.163:48098 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 00:23:13.396486 systemd[1]: Started sshd@22-147.182.198.71:22-147.75.109.163:48098.service. Sep 6 00:23:13.586357 kernel: audit: type=1101 audit(1757118193.580:1629): pid=5320 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Sep 6 00:23:13.580000 audit[5320]: USER_ACCT pid=5320 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Sep 6 00:23:13.588136 sshd[5320]: Accepted publickey for core from 147.75.109.163 port 48098 ssh2: RSA SHA256:zgVES46caP1+99uzHYMS+9ry3WhXasb4NYAgm1B5TPc Sep 6 00:23:13.597184 kernel: audit: type=1103 audit(1757118193.588:1630): pid=5320 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Sep 6 00:23:13.597669 kernel: audit: type=1006 audit(1757118193.588:1631): pid=5320 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=23 res=1 Sep 6 00:23:13.588000 audit[5320]: CRED_ACQ pid=5320 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Sep 6 00:23:13.599100 sshd[5320]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Sep 6 00:23:13.588000 audit[5320]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffc3d129fa0 a2=3 a3=0 items=0 ppid=1 pid=5320 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=23 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:23:13.611319 kernel: audit: type=1300 audit(1757118193.588:1631): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffc3d129fa0 a2=3 a3=0 items=0 ppid=1 pid=5320 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=23 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:23:13.611426 kernel: audit: type=1327 audit(1757118193.588:1631): proctitle=737368643A20636F7265205B707269765D Sep 6 00:23:13.588000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Sep 6 00:23:13.641283 systemd-logind[1184]: New session 23 of user core. Sep 6 00:23:13.641792 systemd[1]: Started session-23.scope. Sep 6 00:23:13.648000 audit[5320]: USER_START pid=5320 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Sep 6 00:23:13.656264 kernel: audit: type=1105 audit(1757118193.648:1632): pid=5320 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Sep 6 00:23:13.656000 audit[5322]: CRED_ACQ pid=5322 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Sep 6 00:23:13.662296 kernel: audit: type=1103 audit(1757118193.656:1633): pid=5322 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Sep 6 00:23:14.430180 sshd[5320]: pam_unix(sshd:session): session closed for user core Sep 6 00:23:14.430000 audit[5320]: USER_END pid=5320 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Sep 6 00:23:14.443538 kernel: audit: type=1106 audit(1757118194.430:1634): pid=5320 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Sep 6 00:23:14.443831 kernel: audit: type=1104 audit(1757118194.430:1635): pid=5320 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Sep 6 00:23:14.430000 audit[5320]: CRED_DISP pid=5320 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Sep 6 00:23:14.438000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@22-147.182.198.71:22-147.75.109.163:48098 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 00:23:14.439742 systemd[1]: sshd@22-147.182.198.71:22-147.75.109.163:48098.service: Deactivated successfully. Sep 6 00:23:14.440965 systemd[1]: session-23.scope: Deactivated successfully. Sep 6 00:23:14.443817 systemd-logind[1184]: Session 23 logged out. Waiting for processes to exit. Sep 6 00:23:14.446754 systemd-logind[1184]: Removed session 23. Sep 6 00:23:16.816000 audit[4287]: AVC avc: denied { watch } for pid=4287 comm="apiserver" path="/calico-apiserver-certs/..2025_09_06_00_21_54.2538852212/tls.crt" dev="tmpfs" ino=3 scontext=system_u:system_r:svirt_lxc_net_t:s0:c353,c875 tcontext=system_u:object_r:svirt_lxc_file_t:s0:c353,c875 tclass=file permissive=0 Sep 6 00:23:16.816000 audit[4287]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=8 a1=c0015fe7a0 a2=fc6 a3=0 items=0 ppid=3636 pid=4287 auid=4294967295 uid=10001 gid=10001 euid=10001 suid=10001 fsuid=10001 egid=10001 sgid=10001 fsgid=10001 tty=(none) ses=4294967295 comm="apiserver" exe="/code/apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c353,c875 key=(null) Sep 6 00:23:16.816000 audit: PROCTITLE proctitle=2F636F64652F617069736572766572002D2D7365637572652D706F72743D35343433002D2D746C732D707269766174652D6B65792D66696C653D2F63616C69636F2D6170697365727665722D63657274732F746C732E6B6579002D2D746C732D636572742D66696C653D2F63616C69636F2D6170697365727665722D63657274 Sep 6 00:23:18.058000 audit[1812]: AVC avc: denied { watch } for pid=1812 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=526379 scontext=system_u:system_r:svirt_lxc_net_t:s0:c665,c790 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Sep 6 00:23:18.058000 audit[1812]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c0020d08e0 a2=fc6 a3=0 items=0 ppid=1655 pid=1812 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c665,c790 key=(null) Sep 6 00:23:18.058000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Sep 6 00:23:18.058000 audit[1812]: AVC avc: denied { watch } for pid=1812 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="vda9" ino=526385 scontext=system_u:system_r:svirt_lxc_net_t:s0:c665,c790 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Sep 6 00:23:18.058000 audit[1812]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=b a1=c001eca420 a2=fc6 a3=0 items=0 ppid=1655 pid=1812 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c665,c790 key=(null) Sep 6 00:23:18.058000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Sep 6 00:23:18.857000 audit[4326]: AVC avc: denied { watch } for pid=4326 comm="apiserver" path="/calico-apiserver-certs/..2025_09_06_00_21_54.3834834349/tls.crt" dev="tmpfs" ino=4 scontext=system_u:system_r:svirt_lxc_net_t:s0:c832,c980 tcontext=system_u:object_r:svirt_lxc_file_t:s0:c832,c980 tclass=file permissive=0 Sep 6 00:23:18.873132 kernel: kauditd_printk_skb: 10 callbacks suppressed Sep 6 00:23:18.877010 kernel: audit: type=1400 audit(1757118198.857:1640): avc: denied { watch } for pid=4326 comm="apiserver" path="/calico-apiserver-certs/..2025_09_06_00_21_54.3834834349/tls.crt" dev="tmpfs" ino=4 scontext=system_u:system_r:svirt_lxc_net_t:s0:c832,c980 tcontext=system_u:object_r:svirt_lxc_file_t:s0:c832,c980 tclass=file permissive=0 Sep 6 00:23:18.877432 kernel: audit: type=1300 audit(1757118198.857:1640): arch=c000003e syscall=254 success=no exit=-13 a0=7 a1=c002a5ab60 a2=fc6 a3=0 items=0 ppid=3810 pid=4326 auid=4294967295 uid=10001 gid=10001 euid=10001 suid=10001 fsuid=10001 egid=10001 sgid=10001 fsgid=10001 tty=(none) ses=4294967295 comm="apiserver" exe="/code/apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c832,c980 key=(null) Sep 6 00:23:18.857000 audit[4326]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=7 a1=c002a5ab60 a2=fc6 a3=0 items=0 ppid=3810 pid=4326 auid=4294967295 uid=10001 gid=10001 euid=10001 suid=10001 fsuid=10001 egid=10001 sgid=10001 fsgid=10001 tty=(none) ses=4294967295 comm="apiserver" exe="/code/apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c832,c980 key=(null) Sep 6 00:23:18.857000 audit: PROCTITLE proctitle=2F636F64652F617069736572766572002D2D7365637572652D706F72743D35343433002D2D746C732D707269766174652D6B65792D66696C653D2F63616C69636F2D6170697365727665722D63657274732F746C732E6B6579002D2D746C732D636572742D66696C653D2F63616C69636F2D6170697365727665722D63657274 Sep 6 00:23:18.882268 kernel: audit: type=1327 audit(1757118198.857:1640): proctitle=2F636F64652F617069736572766572002D2D7365637572652D706F72743D35343433002D2D746C732D707269766174652D6B65792D66696C653D2F63616C69636F2D6170697365727665722D63657274732F746C732E6B6579002D2D746C732D636572742D66696C653D2F63616C69636F2D6170697365727665722D63657274 Sep 6 00:23:19.096000 audit[1819]: AVC avc: denied { watch } for pid=1819 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=526379 scontext=system_u:system_r:svirt_lxc_net_t:s0:c762,c897 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Sep 6 00:23:19.096000 audit[1819]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=83 a1=c012cb3380 a2=fc6 a3=0 items=0 ppid=1640 pid=1819 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c762,c897 key=(null) Sep 6 00:23:19.104605 kernel: audit: type=1400 audit(1757118199.096:1641): avc: denied { watch } for pid=1819 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=526379 scontext=system_u:system_r:svirt_lxc_net_t:s0:c762,c897 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Sep 6 00:23:19.104712 kernel: audit: type=1300 audit(1757118199.096:1641): arch=c000003e syscall=254 success=no exit=-13 a0=83 a1=c012cb3380 a2=fc6 a3=0 items=0 ppid=1640 pid=1819 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c762,c897 key=(null) Sep 6 00:23:19.104759 kernel: audit: type=1327 audit(1757118199.096:1641): proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3134372E3138322E3139382E3731002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B Sep 6 00:23:19.096000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3134372E3138322E3139382E3731002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B Sep 6 00:23:19.107706 kernel: audit: type=1400 audit(1757118199.097:1642): avc: denied { watch } for pid=1819 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="vda9" ino=526385 scontext=system_u:system_r:svirt_lxc_net_t:s0:c762,c897 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Sep 6 00:23:19.097000 audit[1819]: AVC avc: denied { watch } for pid=1819 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="vda9" ino=526385 scontext=system_u:system_r:svirt_lxc_net_t:s0:c762,c897 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Sep 6 00:23:19.110610 kernel: audit: type=1300 audit(1757118199.097:1642): arch=c000003e syscall=254 success=no exit=-13 a0=83 a1=c0083c89c0 a2=fc6 a3=0 items=0 ppid=1640 pid=1819 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c762,c897 key=(null) Sep 6 00:23:19.114484 kernel: audit: type=1327 audit(1757118199.097:1642): proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3134372E3138322E3139382E3731002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B Sep 6 00:23:19.097000 audit[1819]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=83 a1=c0083c89c0 a2=fc6 a3=0 items=0 ppid=1640 pid=1819 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c762,c897 key=(null) Sep 6 00:23:19.097000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3134372E3138322E3139382E3731002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B Sep 6 00:23:19.119000 audit[1819]: AVC avc: denied { watch } for pid=1819 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-client.crt" dev="vda9" ino=526387 scontext=system_u:system_r:svirt_lxc_net_t:s0:c762,c897 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Sep 6 00:23:19.119000 audit[1819]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=83 a1=c00e824de0 a2=fc6 a3=0 items=0 ppid=1640 pid=1819 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c762,c897 key=(null) Sep 6 00:23:19.119000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3134372E3138322E3139382E3731002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B Sep 6 00:23:19.124272 kernel: audit: type=1400 audit(1757118199.119:1643): avc: denied { watch } for pid=1819 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-client.crt" dev="vda9" ino=526387 scontext=system_u:system_r:svirt_lxc_net_t:s0:c762,c897 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Sep 6 00:23:19.127000 audit[1819]: AVC avc: denied { watch } for pid=1819 comm="kube-apiserver" path="/etc/kubernetes/pki/apiserver.crt" dev="vda9" ino=526381 scontext=system_u:system_r:svirt_lxc_net_t:s0:c762,c897 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Sep 6 00:23:19.127000 audit[1819]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=83 a1=c0083c9a10 a2=fc6 a3=0 items=0 ppid=1640 pid=1819 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c762,c897 key=(null) Sep 6 00:23:19.127000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3134372E3138322E3139382E3731002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B Sep 6 00:23:19.202000 audit[1819]: AVC avc: denied { watch } for pid=1819 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=526379 scontext=system_u:system_r:svirt_lxc_net_t:s0:c762,c897 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Sep 6 00:23:19.202000 audit[1819]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=83 a1=c00f4a5640 a2=fc6 a3=0 items=0 ppid=1640 pid=1819 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c762,c897 key=(null) Sep 6 00:23:19.202000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3134372E3138322E3139382E3731002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B Sep 6 00:23:19.202000 audit[1819]: AVC avc: denied { watch } for pid=1819 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="vda9" ino=526385 scontext=system_u:system_r:svirt_lxc_net_t:s0:c762,c897 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Sep 6 00:23:19.202000 audit[1819]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=83 a1=c00423c150 a2=fc6 a3=0 items=0 ppid=1640 pid=1819 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c762,c897 key=(null) Sep 6 00:23:19.202000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3134372E3138322E3139382E3731002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B Sep 6 00:23:19.441955 systemd[1]: Started sshd@23-147.182.198.71:22-147.75.109.163:48100.service. Sep 6 00:23:19.447000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@23-147.182.198.71:22-147.75.109.163:48100 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 00:23:19.556000 audit[5331]: USER_ACCT pid=5331 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Sep 6 00:23:19.560227 sshd[5331]: Accepted publickey for core from 147.75.109.163 port 48100 ssh2: RSA SHA256:zgVES46caP1+99uzHYMS+9ry3WhXasb4NYAgm1B5TPc Sep 6 00:23:19.560000 audit[5331]: CRED_ACQ pid=5331 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Sep 6 00:23:19.560000 audit[5331]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7fff9f53af20 a2=3 a3=0 items=0 ppid=1 pid=5331 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=24 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:23:19.560000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Sep 6 00:23:19.564046 sshd[5331]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Sep 6 00:23:19.575361 systemd-logind[1184]: New session 24 of user core. Sep 6 00:23:19.576325 systemd[1]: Started session-24.scope. Sep 6 00:23:19.583000 audit[5331]: USER_START pid=5331 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Sep 6 00:23:19.585000 audit[5333]: CRED_ACQ pid=5333 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Sep 6 00:23:20.297928 sshd[5331]: pam_unix(sshd:session): session closed for user core Sep 6 00:23:20.300000 audit[5331]: USER_END pid=5331 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Sep 6 00:23:20.300000 audit[5331]: CRED_DISP pid=5331 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Sep 6 00:23:20.305000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@23-147.182.198.71:22-147.75.109.163:48100 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 00:23:20.305921 systemd[1]: sshd@23-147.182.198.71:22-147.75.109.163:48100.service: Deactivated successfully. Sep 6 00:23:20.309052 systemd[1]: session-24.scope: Deactivated successfully. Sep 6 00:23:20.311064 systemd-logind[1184]: Session 24 logged out. Waiting for processes to exit. Sep 6 00:23:20.312500 systemd-logind[1184]: Removed session 24. Sep 6 00:23:24.337527 systemd[1]: run-containerd-runc-k8s.io-7e62e8e40f7b5dce0c46e6d58ffa93c9f612ff277b3b18173384b8ab914d0695-runc.2VFyM4.mount: Deactivated successfully. Sep 6 00:23:25.308880 systemd[1]: Started sshd@24-147.182.198.71:22-147.75.109.163:51172.service. Sep 6 00:23:25.315296 kernel: kauditd_printk_skb: 22 callbacks suppressed Sep 6 00:23:25.317748 kernel: audit: type=1130 audit(1757118205.307:1656): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@24-147.182.198.71:22-147.75.109.163:51172 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 00:23:25.307000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@24-147.182.198.71:22-147.75.109.163:51172 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 00:23:25.438000 audit[5389]: USER_ACCT pid=5389 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Sep 6 00:23:25.445515 kernel: audit: type=1101 audit(1757118205.438:1657): pid=5389 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Sep 6 00:23:25.445616 sshd[5389]: Accepted publickey for core from 147.75.109.163 port 51172 ssh2: RSA SHA256:zgVES46caP1+99uzHYMS+9ry3WhXasb4NYAgm1B5TPc Sep 6 00:23:25.445000 audit[5389]: CRED_ACQ pid=5389 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Sep 6 00:23:25.451549 kernel: audit: type=1103 audit(1757118205.445:1658): pid=5389 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Sep 6 00:23:25.451647 kernel: audit: type=1006 audit(1757118205.445:1659): pid=5389 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=25 res=1 Sep 6 00:23:25.445000 audit[5389]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffc0e857510 a2=3 a3=0 items=0 ppid=1 pid=5389 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=25 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:23:25.458866 kernel: audit: type=1300 audit(1757118205.445:1659): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffc0e857510 a2=3 a3=0 items=0 ppid=1 pid=5389 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=25 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 00:23:25.458949 kernel: audit: type=1327 audit(1757118205.445:1659): proctitle=737368643A20636F7265205B707269765D Sep 6 00:23:25.445000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Sep 6 00:23:25.456866 sshd[5389]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Sep 6 00:23:25.479472 systemd-logind[1184]: New session 25 of user core. Sep 6 00:23:25.481655 systemd[1]: Started session-25.scope. Sep 6 00:23:25.486000 audit[5389]: USER_START pid=5389 uid=0 auid=500 ses=25 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Sep 6 00:23:25.494268 kernel: audit: type=1105 audit(1757118205.486:1660): pid=5389 uid=0 auid=500 ses=25 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Sep 6 00:23:25.494418 kernel: audit: type=1103 audit(1757118205.491:1661): pid=5391 uid=0 auid=500 ses=25 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Sep 6 00:23:25.491000 audit[5391]: CRED_ACQ pid=5391 uid=0 auid=500 ses=25 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Sep 6 00:23:26.462000 audit[1812]: AVC avc: denied { watch } for pid=1812 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=526379 scontext=system_u:system_r:svirt_lxc_net_t:s0:c665,c790 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Sep 6 00:23:26.476986 kernel: audit: type=1400 audit(1757118206.462:1662): avc: denied { watch } for pid=1812 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=526379 scontext=system_u:system_r:svirt_lxc_net_t:s0:c665,c790 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Sep 6 00:23:26.477847 kernel: audit: type=1300 audit(1757118206.462:1662): arch=c000003e syscall=254 success=no exit=-13 a0=b a1=c001ec09e0 a2=fc6 a3=0 items=0 ppid=1655 pid=1812 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c665,c790 key=(null) Sep 6 00:23:26.462000 audit[1812]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=b a1=c001ec09e0 a2=fc6 a3=0 items=0 ppid=1655 pid=1812 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c665,c790 key=(null) Sep 6 00:23:26.462000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Sep 6 00:23:26.474000 audit[1812]: AVC avc: denied { watch } for pid=1812 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=526379 scontext=system_u:system_r:svirt_lxc_net_t:s0:c665,c790 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Sep 6 00:23:26.474000 audit[1812]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c001968580 a2=fc6 a3=0 items=0 ppid=1655 pid=1812 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c665,c790 key=(null) Sep 6 00:23:26.474000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Sep 6 00:23:26.476000 audit[1812]: AVC avc: denied { watch } for pid=1812 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=526379 scontext=system_u:system_r:svirt_lxc_net_t:s0:c665,c790 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Sep 6 00:23:26.476000 audit[1812]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c001968740 a2=fc6 a3=0 items=0 ppid=1655 pid=1812 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c665,c790 key=(null) Sep 6 00:23:26.476000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Sep 6 00:23:26.498927 sshd[5389]: pam_unix(sshd:session): session closed for user core Sep 6 00:23:26.499000 audit[5389]: USER_END pid=5389 uid=0 auid=500 ses=25 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Sep 6 00:23:26.500000 audit[5389]: CRED_DISP pid=5389 uid=0 auid=500 ses=25 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Sep 6 00:23:26.497000 audit[1812]: AVC avc: denied { watch } for pid=1812 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=526379 scontext=system_u:system_r:svirt_lxc_net_t:s0:c665,c790 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Sep 6 00:23:26.497000 audit[1812]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c001ec0a60 a2=fc6 a3=0 items=0 ppid=1655 pid=1812 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c665,c790 key=(null) Sep 6 00:23:26.497000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Sep 6 00:23:26.503000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@24-147.182.198.71:22-147.75.109.163:51172 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 00:23:26.503963 systemd[1]: sshd@24-147.182.198.71:22-147.75.109.163:51172.service: Deactivated successfully. Sep 6 00:23:26.505536 systemd[1]: session-25.scope: Deactivated successfully. Sep 6 00:23:26.506798 systemd-logind[1184]: Session 25 logged out. Waiting for processes to exit. Sep 6 00:23:26.508051 systemd-logind[1184]: Removed session 25. Sep 6 00:23:27.465200 kubelet[1933]: E0906 00:23:27.463098 1933 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 67.207.67.3 67.207.67.2 67.207.67.3"